@auctra/sdk 0.3.5 → 0.6.1

package/dist/esm/types.d.ts

@@ -0,0 +1,474 @@
+/** @auctra/sdk — Authority Protocol client (Stage 1.0 modular layout). */
+export declare const AUCTRA_SDK_VERSION = "0.6.1";
+export type AgentEnvironment = "dev" | "staging" | "production";
+export type AuthorityLevel = "low" | "medium" | "high" | "critical";
+export type Decision = "allowed" | "blocked" | "require_approval";
+export type PolicyType = "spending" | "data_access" | "communication" | "approval";
+export type ActorType = "human" | "agent" | "service" | "tool";
+export type RiskLevel = "low" | "medium" | "high" | "critical";
+export type IntentStatus = "active" | "expired" | "completed" | "revoked" | "suspended";
+export type EvaluateActionInput = {
+    agentId: string;
+    actionType: string;
+    payload?: Record<string, unknown>;
+    claimedIntentId?: string;
+    intentAnchorToken?: string;
+    parentActionId?: string;
+    actor?: {
+        id?: string;
+        type?: ActorType;
+        name?: string;
+    };
+    action?: {
+        target?: string;
+        description?: string;
+        riskLevel?: RiskLevel;
+        metadata?: Record<string, unknown>;
+    };
+};
+export type EvaluateActionResponse = {
+    decision: Decision;
+    risk_score: number;
+    reason: string;
+    delegation_id: string | null;
+    authority_id: string | null;
+    delegator: string | null;
+    sponsor: string;
+    matched_policies: string[];
+    action_request_id: string;
+    evidence: DecisionEvidence;
+    evidence_payload: DecisionEvidencePayload;
+    protocol?: {
+        version: string;
+        action?: Record<string, unknown>;
+        decision?: Record<string, unknown>;
+    };
+    intelligence?: {
+        authority_valid: boolean;
+        root_intent_valid: boolean;
+        intent_status: string;
+        trust_summary?: string;
+    };
+};
+export type RequestOptions = {
+    idempotencyKey?: string;
+    signal?: AbortSignal;
+};
+export type AuctraClientOptions = {
+    apiKey: string;
+    baseUrl?: string;
+    timeoutMs?: number;
+    maxRetries?: number;
+    fetch?: typeof fetch;
+};
+export type Agent = {
+    id: string;
+    identity_id: string;
+    name: string;
+    description: string | null;
+    model_provider: "openai" | "anthropic" | "gemini" | "local";
+    model_name: string;
+    environment: AgentEnvironment;
+    authority_level: AuthorityLevel;
+    status: "active" | "suspended" | "restricted" | "compromised";
+    trust_rating: number;
+    sponsor: {
+        id: string;
+        full_name: string;
+        email: string;
+    };
+    created_at: string;
+};
+export type CreateAgentInput = {
+    name: string;
+    modelProvider: Agent["model_provider"];
+    modelName: string;
+    description?: string;
+    environment?: AgentEnvironment;
+    authorityLevel?: AuthorityLevel;
+    sponsorUserId?: string;
+};
+export type Delegation = {
+    id: string;
+    agent: {
+        id: string;
+        name: string;
+    };
+    delegator: {
+        id: string;
+        full_name: string;
+        email: string;
+    };
+    scope: {
+        action_types: string[];
+    };
+    limits: {
+        max_amount?: number;
+        max_count?: number;
+        currency?: string;
+        environment?: AgentEnvironment;
+        max_actions_per_window?: {
+            count: number;
+            window_seconds: number;
+            action_type?: string;
+        };
+        max_amount_per_window?: {
+            amount: number;
+            window_seconds: number;
+        };
+    };
+    valid_from: string;
+    valid_until: string;
+    status: "active" | "revoked" | "expired";
+    is_active: boolean;
+    mandate?: MandateEvidence | null;
+    mandate_payload?: MandatePayload | null;
+    evidence?: DecisionEvidence | null;
+    evidence_payload?: DecisionEvidencePayload | null;
+    created_at: string;
+};
+export type CreateDelegationInput = {
+    agentId: string;
+    actionTypes: string[];
+    validUntil: string;
+    maxAmount?: number;
+    maxCount?: number;
+    environment?: AgentEnvironment;
+    currency?: string;
+    delegatorUserId?: string;
+    /** Parent authority/delegation id for subset-constrained delegation chains. */
+    parentAuthorityId?: string;
+    parentDelegationId?: string;
+    maxDelegationDepth?: number;
+    maxActionsPerWindow?: {
+        count: number;
+        windowSeconds: number;
+        actionType?: string;
+    };
+    maxAmountPerWindow?: {
+        amount: number;
+        windowSeconds: number;
+    };
+};
+export type AuthoritySummary = {
+    id: string;
+    protocol_version: string;
+    status: string;
+    payload_hash: string;
+    signed: boolean;
+    parent_authority_id: string | null;
+    capabilities: unknown;
+};
+export type IssueAuthorityInput = {
+    /** Subject agent id */
+    subject: string;
+    capabilities: string[];
+    expiresAt: string;
+    constraints?: {
+        maxAmount?: number;
+        currency?: string;
+        maxCount?: number;
+        environment?: AgentEnvironment;
+    };
+    delegation?: {
+        allowed?: boolean;
+        maxDepth?: number;
+    };
+    issuer?: string;
+    delegatorUserId?: string;
+    maxActionsPerWindow?: {
+        count: number;
+        windowSeconds: number;
+        actionType?: string;
+    };
+    maxAmountPerWindow?: {
+        amount: number;
+        windowSeconds: number;
+    };
+};
+export type DelegateAuthorityInput = IssueAuthorityInput & {
+    /** Parent authority id — child must be a subset of parent */
+    parent: string;
+};
+export type ActionRequest = {
+    id: string;
+    agent_name: string;
+    action_type: string;
+    action_summary: string;
+    payload: Record<string, unknown>;
+    decision: string;
+    decision_reason: string | null;
+    risk_score: number;
+    delegation_id: string | null;
+    policy_ids: string[];
+    claimed_intent_id: string | null;
+    parent_action_id: string | null;
+    actor_id: string | null;
+    actor_type: ActorType;
+    action_target: string | null;
+    action_description: string | null;
+    action_risk_level: RiskLevel | null;
+    action_metadata: Record<string, unknown>;
+    pending_approval_id: string | null;
+    created_at: string;
+    decided_at: string | null;
+};
+export type Intent = {
+    id: string;
+    title: string;
+    description: string | null;
+    intent_type: string | null;
+    status: IntentStatus;
+    risk_level: RiskLevel;
+    max_risk_level: RiskLevel;
+    expires_at: string | null;
+    created_at: string;
+    owner: {
+        id: string;
+        full_name: string;
+        email: string;
+    } | null;
+    linked_actions: number;
+};
+export type IntentDetail = Omit<Intent, "linked_actions"> & {
+    linked_actions: Array<{
+        action_request_id: string;
+        action_type: string;
+        summary: string;
+        decision: string;
+        alignment_status: string;
+        alignment_score: number | null;
+    }>;
+};
+export type CreateAuthorityEdgeInput = {
+    fromActorId: string;
+    fromActorType: ActorType;
+    toActorId: string;
+    toActorType: ActorType;
+    authorityScope: string;
+    conditions?: Record<string, unknown>;
+    maxRiskLevel?: RiskLevel;
+    expiresAt?: string;
+};
+export type CreateIntentInput = {
+    title: string;
+    description?: string;
+    intentType?: string;
+    riskLevel?: RiskLevel;
+    maxRiskLevel?: RiskLevel;
+    expiresAt?: string;
+    allowedActionTypes?: string[];
+    targetPattern?: string;
+    resourceAllowlist?: string[];
+};
+export type UpdateIntentInput = {
+    status?: Exclude<IntentStatus, "expired">;
+    title?: string;
+    description?: string | null;
+    intentType?: string | null;
+    riskLevel?: RiskLevel;
+    maxRiskLevel?: RiskLevel;
+    expiresAt?: string | null;
+};
+export type UpdateAgentStatusInput = {
+    status: Agent["status"];
+    reason?: string;
+    /** Permanently revoke instead of quarantine (default: quarantine on restrict/suspend). */
+    revokeDelegations?: boolean;
+    /** Restore quarantined delegations when reactivating (default: true). */
+    restoreDelegations?: boolean;
+};
+export type AuthorityGraph = {
+    nodes: Array<{
+        id: string;
+        type: ActorType;
+        label: string;
+    }>;
+    edges: Array<{
+        id: string;
+        from: string;
+        to: string;
+        fromType: ActorType;
+        toType: ActorType;
+        scope: string;
+        status: string;
+        edgeType: string;
+    }>;
+};
+export type ActionEvaluation = {
+    id: string;
+    action_request_id: string;
+    intent_id: string | null;
+    decision: "allowed" | "requires_approval" | "blocked";
+    risk_score: number;
+    authority_valid: boolean;
+    intent_valid: boolean;
+    root_intent_valid: boolean;
+    reasons: string[];
+    created_at: string;
+};
+export type RootIntentChain = {
+    valid: boolean;
+    root_human_id: string | null;
+    root_intent_id: string | null;
+    reason: string | null;
+    chain: Array<{
+        actionId?: string;
+        actorId: string;
+        actorType: ActorType;
+        intentId?: string;
+        parentActionId?: string;
+        label?: string;
+    }>;
+};
+export type Policy = {
+    id: string;
+    name: string;
+    description: string | null;
+    policy_type: PolicyType;
+    status: "active" | "draft" | "archived";
+    priority: number;
+    conditions: Record<string, unknown>;
+    actions: Record<string, unknown>;
+    created_at: string;
+};
+export type CreatePolicyInput = {
+    name: string;
+    description?: string;
+    policyType: PolicyType;
+    status?: "active" | "draft";
+    priority?: number;
+    actionType?: string;
+    amountGreaterThan?: number;
+    resourceSensitivity?: "public" | "internal" | "confidential" | "pii";
+    externalRecipient?: boolean;
+    environment?: AgentEnvironment;
+    decision: "block" | "require_approval";
+    approverRole?: "owner" | "admin" | "reviewer";
+    maxActionsPerWindow?: {
+        count: number;
+        windowSeconds: number;
+        actionType?: string;
+    };
+    maxAmountPerWindow?: {
+        amount: number;
+        windowSeconds: number;
+    };
+};
+export type CustomActionType = {
+    id: string;
+    label: string;
+    description: string | null;
+    category: string;
+    policy_type: PolicyType;
+    payload_schema: Record<string, unknown>;
+    source: "builtin" | "custom";
+    template?: boolean;
+    created_at?: string | null;
+};
+export type CreateCustomActionTypeInput = {
+    id: string;
+    label: string;
+    description?: string;
+    category?: string;
+    policyType: PolicyType;
+    payloadSchema?: Record<string, unknown>;
+};
+export type PolicySimulation = {
+    policy_id: string;
+    policy_name: string;
+    policy_status: string;
+    sample_size: number;
+    changed_count: number;
+    unchanged_count: number;
+    would_block_count: number;
+    replay_source?: "audit_events" | "action_requests" | "mixed";
+    deltas: Array<{
+        action_request_id: string;
+        action_type: string;
+        current_decision: string;
+        simulated_decision: string;
+        changed: boolean;
+    }>;
+};
+export type MandateEvidence = {
+    format: "auctra-mandate.v0.1";
+    payload_hash: string;
+    signed: false;
+} | {
+    format: "auctra-mandate.v0.1";
+    signed: true;
+    payload_hash: string;
+    payload: Record<string, unknown>;
+    signature: {
+        alg: "Ed25519";
+        key_id: string;
+        value: string;
+    };
+};
+export type MandatePayload = Record<string, unknown>;
+export type DecisionEvidencePayload = Record<string, unknown>;
+export type DecisionEvidence = {
+    format: "auctra-evidence.v0.1";
+    payload_hash: string;
+    signed: false;
+} | {
+    format: "auctra-evidence.v0.1";
+    signed: true;
+    payload_hash: string;
+    payload: Record<string, unknown>;
+    signature: {
+        alg: "Ed25519";
+        key_id: string;
+        value: string;
+    };
+};
+export type AuditChainVerification = {
+    valid: boolean;
+    total: number;
+    sealed_total: number;
+    legacy_unsealed_total: number;
+    events: Array<{
+        id: string;
+        hashValid: boolean;
+        linkValid: boolean;
+        sequenceValid: boolean;
+        valid: boolean;
+        legacy: boolean;
+    }>;
+};
+export type ArtifactVerification = {
+    valid: boolean;
+    hashValid: boolean;
+    signatureValid: boolean;
+};
+export type AuditEvent = {
+    id: string;
+    event_type: string;
+    event_summary: string;
+    decision: string | null;
+    decision_reason: string | null;
+    authority_valid_at_action: boolean | null;
+    actor_name: string;
+    approver_name: string | null;
+    policy_applied: string | null;
+    delegation_id: string | null;
+    hash: string | null;
+    previous_hash: string | null;
+    chain_index?: number;
+    mandate?: MandateEvidence | null;
+    evidence?: DecisionEvidence | null;
+    payload?: Record<string, unknown>;
+    created_at: string;
+};
+export type ApiKeySummary = {
+    id: string;
+    name: string;
+    key_prefix: string;
+    environment: "development" | "production";
+    permissions: string[];
+    status: "active" | "revoked";
+    last_used_at: string | null;
+    created_at: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,eAAO,MAAM,kBAAkB,UAAU,CAAC;AAE1C,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,SAAS,GAAG,YAAY,CAAC;AAChE,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AACpE,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,kBAAkB,CAAC;AAClE,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,GAAG,UAAU,CAAC;AACnF,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAC/D,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,WAAW,CAAC;AAExF,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,EAAE,SAAS,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,SAAS,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,CAAC;IACF,YAAY,CAAC,EAAE;QACb,eAAe,EAAE,OAAO,CAAC;QACzB,iBAAiB,EAAE,OAAO,CAAC;QAC3B,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,KAAK,GAAG;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,eAAe,EAAE,cAAc,CAAC;IAChC,MAAM,EAAE,QAAQ,GAAG,WAAW,GAAG,YAAY,GAAG,aAAa,CAAC;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAClC,MAAM,EAAE;QACN,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,gBAAgB,CAAC;QAC/B,sBAAsB,CAAC,EAAE;YACvB,KAAK,EAAE,MAAM,CAAC;YACd,cAAc,EAAE,MAAM,CAAC;YACvB,WAAW,CAAC,EAAE,MAAM,CAAC;SACtB,CAAC;QACF,qBAAqB,CAAC,EAAE;YACtB,MAAM,EAAE,MAAM,CAAC;YACf,cAAc,EAAE,MAAM,CAAC;SACxB,CAAC;KACH,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IACzC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC,eAAe,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnC,gBAAgB,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAClD,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,kBAAkB,CAAC,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,YAAY,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,gBAAgB,CAAC;KAChC,CAAC;IACF,UAAU,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,kBAAkB,CAAC,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,mBAAmB,GAAG;IACzD,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,SAAS,CAAC;IACtB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,iBAAiB,EAAE,SAAS,GAAG,IAAI,CAAC;IACpC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,MAAM,GAAG;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,SAAS,CAAC;IACtB,cAAc,EAAE,SAAS,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/D,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG;IAC1D,cAAc,EAAE,KAAK,CAAC;QACpB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,EAAE,MAAM,CAAC;QACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;KAChC,CAAC,CAAC;CACJ,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,SAAS,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,SAAS,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,YAAY,CAAC,EAAE,SAAS,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,YAAY,CAAC,EAAE,SAAS,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,YAAY,CAAC,EAAE,SAAS,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0FAA0F;IAC1F,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,yEAAyE;IACzE,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,KAAK,EAAE,KAAK,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,SAAS,CAAC;QACpB,MAAM,EAAE,SAAS,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;CACJ,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,SAAS,GAAG,mBAAmB,GAAG,SAAS,CAAC;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,KAAK,CAAC;QACX,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,SAAS,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;CACJ,CAAC;AAEF,MAAM,MAAM,MAAM,GAAG;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,UAAU,CAAC;IACxB,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,cAAc,GAAG,KAAK,CAAC;IACrE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,EAAE,OAAO,GAAG,kBAAkB,CAAC;IACvC,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC;IAC9C,mBAAmB,CAAC,EAAE;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,kBAAkB,CAAC,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,UAAU,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,cAAc,GAAG,iBAAiB,GAAG,OAAO,CAAC;IAC7D,MAAM,EAAE,KAAK,CAAC;QACZ,iBAAiB,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,gBAAgB,EAAE,MAAM,CAAC;QACzB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC,CAAC;CACJ,CAAC;AAEF,MAAM,MAAM,eAAe,GACvB;IACE,MAAM,EAAE,qBAAqB,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,KAAK,CAAC;CACf,GACD;IACE,MAAM,EAAE,qBAAqB,CAAC;IAC9B,MAAM,EAAE,IAAI,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,EAAE;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D,CAAC;AAEN,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAErD,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE9D,MAAM,MAAM,gBAAgB,GACxB;IACE,MAAM,EAAE,sBAAsB,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,KAAK,CAAC;CACf,GACD;IACE,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,EAAE,IAAI,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,EAAE;QAAE,GAAG,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D,CAAC;AAEN,MAAM,MAAM,sBAAsB,GAAG;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,MAAM,EAAE,KAAK,CAAC;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,OAAO,CAAC;QACnB,SAAS,EAAE,OAAO,CAAC;QACnB,aAAa,EAAE,OAAO,CAAC;QACvB,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC,CAAC;CACJ,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,yBAAyB,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,aAAa,GAAG,YAAY,CAAC;IAC1C,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/esm/types.js

@@ -0,0 +1,2 @@
+/** @auctra/sdk — Authority Protocol client (Stage 1.0 modular layout). */
+export const AUCTRA_SDK_VERSION = "0.6.1";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@auctra/sdk",
-  "version": "0.3.5",
-  "description": "Authority delegation SDK for AI agents — evaluate agent actions against delegated authority and org policies",
+  "version": "0.6.1",
+  "description": "Authority Protocol SDK — issue portable authority, evaluate/execute actions, verify evidence",
   "homepage": "https://auctra.tech/docs",
   "bugs": {
     "url": "https://github.com/Matik103/auctra/issues"
@@ -52,6 +52,7 @@
   ],
   "license": "MIT",
   "devDependencies": {
+    "@types/node": "^22.20.1",
     "typescript": "^5.8.3"
   },
   "engines": {

package/src/action.ts

@@ -0,0 +1,2 @@
+/** Action Protocol client surface — evaluate (dry-run) / execute (enforce + evidence). */
+export type { ActionEvaluation, EvaluateActionInput, EvaluateActionResponse } from "./types.js";

package/src/artifacts.ts

@@ -0,0 +1,140 @@
+/** @auctra/sdk — Authority Protocol client (Stage 1.0 modular layout). */
+import { createHash, createPublicKey, verify as cryptoVerify, type KeyObject } from "node:crypto";
+
+import type {
+  ArtifactVerification,
+  DecisionEvidence,
+  DecisionEvidencePayload,
+  MandateEvidence,
+  MandatePayload,
+} from "./types.js";
+
+export class AuctraApiError extends Error {
+  readonly status: number;
+  readonly code?: string;
+  readonly details?: unknown;
+  readonly requestId?: string;
+
+  constructor(
+    message: string,
+    options: { status: number; code?: string; details?: unknown; requestId?: string },
+  ) {
+    super(message);
+    this.name = "AuctraApiError";
+    this.status = options.status;
+    this.code = options.code;
+    this.details = options.details;
+    this.requestId = options.requestId;
+  }
+}
+
+export function retryDelay(response: Response | undefined, attempt: number) {
+  const retryAfter = response?.headers.get("retry-after");
+  if (retryAfter) {
+    const seconds = Number(retryAfter);
+    if (Number.isFinite(seconds)) return Math.min(30_000, Math.max(0, seconds * 1_000));
+    const dateDelay = Date.parse(retryAfter) - Date.now();
+    if (Number.isFinite(dateDelay)) return Math.min(30_000, Math.max(0, dateDelay));
+  }
+  return Math.min(5_000, 150 * 2 ** attempt);
+}
+
+export function wait(ms: number, signal?: AbortSignal) {
+  if (signal?.aborted) return Promise.reject(signal.reason);
+  return new Promise<void>((resolve, reject) => {
+    const timeout = setTimeout(resolve, ms);
+    signal?.addEventListener(
+      "abort",
+      () => {
+        clearTimeout(timeout);
+        reject(signal.reason);
+      },
+      { once: true },
+    );
+  });
+}
+
+function canonicalizeJson(value: unknown): unknown {
+  if (Array.isArray(value)) return value.map(canonicalizeJson);
+  if (value && typeof value === "object" && !(value instanceof Date)) {
+    return Object.fromEntries(
+      Object.entries(value as Record<string, unknown>)
+        .filter(([, child]) => child !== undefined)
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([key, child]) => [key, canonicalizeJson(child)]),
+    );
+  }
+  if (value instanceof Date) return value.toISOString();
+  return value;
+}
+
+function hashJson(value: unknown) {
+  return createHash("sha256")
+    .update(JSON.stringify(canonicalizeJson(value)))
+    .digest("hex");
+}
+
+function verifyEd25519(input: {
+  payload: unknown;
+  signature: { alg: "Ed25519"; value: string };
+  publicKeyPem?: string | KeyObject;
+}) {
+  if (!input.publicKeyPem) return false;
+  if (input.signature.alg !== "Ed25519") return false;
+  return cryptoVerify(
+    null,
+    Buffer.from(JSON.stringify(canonicalizeJson(input.payload))),
+    typeof input.publicKeyPem === "string"
+      ? createPublicKey(input.publicKeyPem)
+      : input.publicKeyPem,
+    Buffer.from(input.signature.value, "base64url"),
+  );
+}
+
+export function verifyMandateArtifact(input: {
+  payload: MandatePayload;
+  evidence: MandateEvidence;
+  publicKeyPem?: string | KeyObject;
+}): ArtifactVerification {
+  const expectedHash = hashJson(input.payload);
+  if (input.evidence.format !== "auctra-mandate.v0.1") {
+    return { valid: false, hashValid: false, signatureValid: false };
+  }
+  if (!input.evidence.signed) {
+    const hashValid = input.evidence.payload_hash === expectedHash;
+    return { valid: hashValid, hashValid, signatureValid: false };
+  }
+  const hashValid = input.evidence.payload_hash === expectedHash;
+  const signatureValid =
+    hashValid &&
+    verifyEd25519({
+      payload: input.payload,
+      signature: input.evidence.signature,
+      publicKeyPem: input.publicKeyPem,
+    });
+  return { valid: hashValid && signatureValid, hashValid, signatureValid };
+}
+
+export function verifyDecisionArtifact(input: {
+  payload: DecisionEvidencePayload;
+  evidence: DecisionEvidence;
+  publicKeyPem?: string | KeyObject;
+}): ArtifactVerification {
+  const expectedHash = hashJson(input.payload);
+  if (input.evidence.format !== "auctra-evidence.v0.1") {
+    return { valid: false, hashValid: false, signatureValid: false };
+  }
+  if (!input.evidence.signed) {
+    const hashValid = input.evidence.payload_hash === expectedHash;
+    return { valid: hashValid, hashValid, signatureValid: false };
+  }
+  const hashValid = input.evidence.payload_hash === expectedHash;
+  const signatureValid =
+    hashValid &&
+    verifyEd25519({
+      payload: input.payload,
+      signature: input.evidence.signature,
+      publicKeyPem: input.publicKeyPem,
+    });
+  return { valid: hashValid && signatureValid, hashValid, signatureValid };
+}

package/src/authority.ts

@@ -0,0 +1,2 @@
+/** Authority Protocol client surface — issue / verify / delegate / revoke. */
+export type { AuthoritySummary, DelegateAuthorityInput, IssueAuthorityInput } from "./types.js";