@auctra/sdk 0.6.0 → 0.6.2

package/dist/esm/client.d.ts

@@ -0,0 +1,195 @@
+import type { ActionEvaluation, ActionRequest, Agent, ApiKeySummary, ArtifactVerification, AuditChainVerification, AuditEvent, AuthorityGraph, AuthoritySummary, AuctraClientOptions, CreateAgentInput, CreateAuthorityEdgeInput, CreateCustomActionTypeInput, CreateIntentInput, CreatePolicyInput, CustomActionType, DecisionEvidence, DecisionEvidencePayload, DelegateAuthorityInput, Delegation, EvaluateActionInput, EvaluateActionResponse, Intent, IntentDetail, IntentStatus, IssueAuthorityInput, MandateEvidence, MandatePayload, Policy, PolicySimulation, RequestOptions, RiskLevel, RootIntentChain, UpdateAgentStatusInput, UpdateIntentInput } from "./types.js";
+export declare class Auctra {
+    private readonly apiKey;
+    private readonly baseUrl;
+    private readonly timeoutMs;
+    private readonly maxRetries;
+    private readonly fetchImpl;
+    constructor(options: AuctraClientOptions);
+    private request;
+    private executeOrEvaluateAction;
+    private issueAuthorityRequest;
+    /**
+     * Authority Protocol — issue, verify, delegate (subset), revoke.
+     * There is no legacy createDelegation() surface.
+     */
+    get authority(): {
+        issue: (input: IssueAuthorityInput) => Promise<{
+            authority: AuthoritySummary;
+            authority_id: string;
+            delegation: Delegation;
+        }>;
+        verify: (payload: Record<string, unknown>, artifact: Record<string, unknown>) => Promise<{
+            valid: boolean;
+            hashValid: boolean;
+            signatureValid: boolean;
+            expired: boolean;
+            status: string;
+            issuer: string;
+            subject: string;
+            capabilities: string[];
+            constraints: Record<string, unknown>;
+            expiresAt: string;
+            protocolVersion: string;
+        }>;
+        delegate: (input: DelegateAuthorityInput) => Promise<{
+            authority: AuthoritySummary;
+            authority_id: string;
+            delegation: Delegation;
+        }>;
+        revoke: (authorityId: string) => Promise<{
+            ok: true;
+        }>;
+    };
+    /**
+     * Action Protocol — evaluate (dry-run) vs execute (enforce + evidence).
+     * There is no legacy evaluateAction() surface.
+     */
+    get action(): {
+        evaluate: (input: EvaluateActionInput, options?: RequestOptions) => Promise<EvaluateActionResponse>;
+        execute: (input: EvaluateActionInput, options?: RequestOptions) => Promise<EvaluateActionResponse>;
+    };
+    get evidence(): {
+        verify: (payload: DecisionEvidencePayload, evidence: DecisionEvidence) => Promise<ArtifactVerification>;
+    };
+    verifyMandate(payload: MandatePayload, evidence: MandateEvidence): Promise<ArtifactVerification>;
+    listIntents(): Promise<{
+        intents: Intent[];
+    }>;
+    createIntent(input: CreateIntentInput): Promise<{
+        intent: {
+            id: string;
+            title: string;
+            status: string;
+        };
+    }>;
+    getIntent(intentId: string): Promise<{
+        intent: IntentDetail;
+    }>;
+    updateIntentStatus(intentId: string, status: Exclude<IntentStatus, "expired">): Promise<{
+        intent: {
+            id: string;
+            title: string;
+            status: IntentStatus;
+        };
+    }>;
+    updateIntent(intentId: string, input: UpdateIntentInput): Promise<{
+        intent: {
+            id: string;
+            title: string;
+            status: IntentStatus;
+            description?: string | null;
+            intent_type?: string | null;
+            risk_level?: RiskLevel;
+            max_risk_level?: RiskLevel;
+            expires_at?: string | null;
+        };
+    }>;
+    getAuthorityGraph(): Promise<{
+        authority_graph: AuthorityGraph;
+    }>;
+    createAuthorityEdge(input: CreateAuthorityEdgeInput): Promise<{
+        edge: {
+            id: string;
+        };
+    }>;
+    getActionEvaluation(actionRequestId: string): Promise<{
+        evaluation: ActionEvaluation;
+    }>;
+    getRootIntentChain(actionRequestId: string): Promise<{
+        root_intent_chain: RootIntentChain;
+    }>;
+    listAgents(): Promise<{
+        agents: Agent[];
+    }>;
+    getAgent(agentId: string): Promise<{
+        agent: Agent;
+    }>;
+    createAgent(input: CreateAgentInput): Promise<{
+        agent: Agent;
+    }>;
+    updateAgentStatus(agentId: string, input: UpdateAgentStatusInput): Promise<{
+        agent: {
+            id: string;
+            name: string;
+            status: Agent["status"];
+        };
+    }>;
+    deleteAgent(agentId: string): Promise<{
+        ok: true;
+    }>;
+    listAuthorities(): Promise<{
+        delegations: Delegation[];
+        authorities?: AuthoritySummary[];
+    }>;
+    getAuthority(authorityId: string): Promise<{
+        delegation: Delegation;
+    }>;
+    listActionRequests(): Promise<{
+        action_requests: ActionRequest[];
+    }>;
+    approveActionRequest(actionRequestId: string, approverUserId: string, reason?: string): Promise<{
+        ok: true;
+        decision: "approved" | "rejected" | "escalated";
+        action_decision: "allowed" | "blocked" | "require_approval";
+        reason: string;
+    }>;
+    rejectActionRequest(actionRequestId: string, approverUserId: string, reason?: string): Promise<{
+        ok: true;
+        decision: "approved" | "rejected" | "escalated";
+        action_decision: "allowed" | "blocked" | "require_approval";
+        reason: string;
+    }>;
+    escalateActionRequest(actionRequestId: string, approverUserId: string, reason?: string): Promise<{
+        ok: true;
+        decision: "approved" | "rejected" | "escalated";
+        action_decision: "allowed" | "blocked" | "require_approval";
+        reason: string;
+    }>;
+    private resolveActionRequest;
+    listPolicies(): Promise<{
+        policies: Policy[];
+    }>;
+    createPolicy(input: CreatePolicyInput): Promise<{
+        policy: Pick<Policy, "id" | "name" | "status" | "created_at">;
+    }>;
+    simulatePolicy(policyId: string, input?: {
+        limit?: number;
+        since?: string;
+    }): Promise<{
+        simulation: PolicySimulation;
+        meta: {
+            simulated_at: string;
+            sample_size: number;
+            changed_count: number;
+            unchanged_count: number;
+        };
+    }>;
+    publishPolicy(policyId: string, input?: {
+        force?: boolean;
+    }): Promise<{
+        ok: true;
+        policyId: string;
+        simulation: Record<string, unknown>;
+    }>;
+    listActionTypes(): Promise<{
+        action_types: CustomActionType[];
+    }>;
+    listCustomActionTypes(): Promise<{
+        action_types: CustomActionType[];
+    }>;
+    createCustomActionType(input: CreateCustomActionTypeInput): Promise<{
+        action_type: Pick<CustomActionType, "id" | "label" | "policy_type" | "source" | "created_at">;
+    }>;
+    listAuditEvents(): Promise<{
+        audit_events: AuditEvent[];
+    }>;
+    getAuditEvent(auditEventId: string): Promise<{
+        audit_event: AuditEvent;
+    }>;
+    verifyAuditChain(): Promise<AuditChainVerification>;
+    listApiKeys(): Promise<{
+        api_keys: ApiKeySummary[];
+    }>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/esm/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EAEb,KAAK,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,wBAAwB,EACxB,2BAA2B,EAC3B,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,UAAU,EACV,mBAAmB,EACnB,sBAAsB,EACtB,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,MAAM,EACN,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAGpB,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,OAAO,EAAE,mBAAmB;YAmB1B,OAAO;YAgEP,uBAAuB;YAuCvB,qBAAqB;IAuDnC;;;OAGG;IACH,IAAI,SAAS;uBAEM,mBAAmB;uBA1DzB,gBAAgB;0BACb,MAAM;wBACR,UAAU;;0BA0DT,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YACtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAChC,OAAO,CAAC;YACT,KAAK,EAAE,OAAO,CAAC;YACf,SAAS,EAAE,OAAO,CAAC;YACnB,cAAc,EAAE,OAAO,CAAC;YACxB,OAAO,EAAE,OAAO,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC;YACf,MAAM,EAAE,MAAM,CAAC;YACf,OAAO,EAAE,MAAM,CAAC;YAChB,YAAY,EAAE,MAAM,EAAE,CAAC;YACvB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrC,SAAS,EAAE,MAAM,CAAC;YAClB,eAAe,EAAE,MAAM,CAAC;SACzB,CAAC;0BACgB,sBAAsB;uBA3E/B,gBAAgB;0BACb,MAAM;wBACR,UAAU;;8BA8EE,MAAM,KAAG,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,CAAC;MAGvD;IAED;;;OAGG;IACH,IAAI,MAAM;0BAEY,mBAAmB,YAAW,cAAc;yBAE7C,mBAAmB,YAAW,cAAc;MAGhE;IAED,IAAI,QAAQ;0BAGG,uBAAuB,YACtB,gBAAgB,KACzB,OAAO,CAAC,oBAAoB,CAAC;MAGnC;IAEK,aAAa,CACjB,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,oBAAoB,CAAC;IAI1B,WAAW,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAI7C,YAAY,CAChB,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC;QAAE,MAAM,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAc/D,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,YAAY,CAAA;KAAE,CAAC;IAI9D,kBAAkB,CACtB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,GACvC,OAAO,CAAC;QAAE,MAAM,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,YAAY,CAAA;SAAE,CAAA;KAAE,CAAC;IAIrE,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC;QACT,MAAM,EAAE;YACN,EAAE,EAAE,MAAM,CAAC;YACX,KAAK,EAAE,MAAM,CAAC;YACd,MAAM,EAAE,YAAY,CAAC;YACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAC5B,UAAU,CAAC,EAAE,SAAS,CAAC;YACvB,cAAc,CAAC,EAAE,SAAS,CAAC;YAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;SAC5B,CAAC;KACH,CAAC;IAYI,iBAAiB,IAAI,OAAO,CAAC;QAAE,eAAe,EAAE,cAAc,CAAA;KAAE,CAAC;IAIjE,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAavF,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,gBAAgB,CAAA;KAAE,CAAC;IAOvF,kBAAkB,CACtB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC;QAAE,iBAAiB,EAAE,eAAe,CAAA;KAAE,CAAC;IAO5C,UAAU,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,EAAE,CAAA;KAAE,CAAC;IAI1C,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,KAAK,CAAA;KAAE,CAAC;IAIpD,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,KAAK,CAAA;KAAE,CAAC;IAY/D,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC;QAAE,KAAK,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC;IAStE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC;IAInD,eAAe,IAAI,OAAO,CAAC;QAC/B,WAAW,EAAE,UAAU,EAAE,CAAC;QAC1B,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;KAClC,CAAC;IAII,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC;IAItE,kBAAkB,IAAI,OAAO,CAAC;QAAE,eAAe,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC;IAInE,oBAAoB,CAAC,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;YAkBrF,IAAI;kBACE,UAAU,GAAG,UAAU,GAAG,WAAW;yBAC9B,SAAS,GAAG,SAAS,GAAG,kBAAkB;gBACnD,MAAM;;IAjBV,mBAAmB,CAAC,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;YAcpF,IAAI;kBACE,UAAU,GAAG,UAAU,GAAG,WAAW;yBAC9B,SAAS,GAAG,SAAS,GAAG,kBAAkB;gBACnD,MAAM;;IAbV,qBAAqB,CAAC,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;YAUtF,IAAI;kBACE,UAAU,GAAG,UAAU,GAAG,WAAW;yBAC9B,SAAS,GAAG,SAAS,GAAG,kBAAkB;gBACnD,MAAM;;YATF,oBAAoB;IAkB5B,YAAY,IAAI,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAI/C,YAAY,CAChB,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC;QAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,QAAQ,GAAG,YAAY,CAAC,CAAA;KAAE,CAAC;IA8BvE,cAAc,CAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAC7C,OAAO,CAAC;QACT,UAAU,EAAE,gBAAgB,CAAC;QAC7B,IAAI,EAAE;YACJ,YAAY,EAAE,MAAM,CAAC;YACrB,WAAW,EAAE,MAAM,CAAC;YACpB,aAAa,EAAE,MAAM,CAAC;YACtB,eAAe,EAAE,MAAM,CAAC;SACzB,CAAC;KACH,CAAC;IAII,aAAa,CACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO,GAC9B,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAIzE,eAAe,IAAI,OAAO,CAAC;QAAE,YAAY,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAIhE,qBAAqB,IAAI,OAAO,CAAC;QAAE,YAAY,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAItE,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC;QACxE,WAAW,EAAE,IAAI,CAAC,gBAAgB,EAAE,IAAI,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,YAAY,CAAC,CAAC;KAC/F,CAAC;IAWI,eAAe,IAAI,OAAO,CAAC;QAAE,YAAY,EAAE,UAAU,EAAE,CAAA;KAAE,CAAC;IAI1D,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,UAAU,CAAA;KAAE,CAAC;IAIzE,gBAAgB,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAInD,WAAW,IAAI,OAAO,CAAC;QAAE,QAAQ,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC;CAG5D"}

package/dist/esm/client.js

@@ -0,0 +1,351 @@
+/** @auctra/sdk — Authority Protocol client (Stage 1.0 modular layout). */
+import { AuctraApiError, retryDelay, wait } from "./artifacts.js";
+import { AUCTRA_SDK_VERSION, DEFAULT_BASE_URL } from "./types.js";
+export class Auctra {
+    apiKey;
+    baseUrl;
+    timeoutMs;
+    maxRetries;
+    fetchImpl;
+    constructor(options) {
+        if (!options.apiKey.trim())
+            throw new Error("apiKey is required");
+        if (options.timeoutMs !== undefined && options.timeoutMs <= 0) {
+            throw new Error("timeoutMs must be greater than zero");
+        }
+        if (options.maxRetries !== undefined &&
+            (!Number.isInteger(options.maxRetries) || options.maxRetries < 0)) {
+            throw new Error("maxRetries must be a non-negative integer");
+        }
+        this.apiKey = options.apiKey;
+        this.baseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\/$/, "");
+        this.timeoutMs = options.timeoutMs ?? 10_000;
+        this.maxRetries = options.maxRetries ?? 2;
+        this.fetchImpl = options.fetch ?? globalThis.fetch;
+        if (!this.fetchImpl)
+            throw new Error("A fetch implementation is required");
+    }
+    async request(method, path, body, options = {}) {
+        const retryableRequest = method === "GET" || Boolean(options.idempotencyKey);
+        let lastError;
+        for (let attempt = 0; attempt <= this.maxRetries; attempt += 1) {
+            if (options.signal?.aborted)
+                throw options.signal.reason;
+            const timeoutSignal = AbortSignal.timeout(this.timeoutMs);
+            const signal = options.signal
+                ? AbortSignal.any([options.signal, timeoutSignal])
+                : timeoutSignal;
+            let response;
+            try {
+                response = await this.fetchImpl(`${this.baseUrl}${path}`, {
+                    method,
+                    signal,
+                    headers: {
+                        ...(body !== undefined ? { "content-type": "application/json" } : {}),
+                        ...(options.idempotencyKey ? { "idempotency-key": options.idempotencyKey } : {}),
+                        authorization: `Bearer ${this.apiKey}`,
+                        "x-auctra-sdk-version": AUCTRA_SDK_VERSION,
+                    },
+                    ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+                });
+                const data = (await response.json().catch(() => ({})));
+                if (response.ok)
+                    return data;
+                if (retryableRequest &&
+                    (response.status === 429 || response.status >= 500) &&
+                    attempt < this.maxRetries) {
+                    await wait(retryDelay(response, attempt), options.signal);
+                    continue;
+                }
+                throw new AuctraApiError(typeof data.error === "string" ? data.error : `Auctra API error (${response.status})`, {
+                    status: response.status,
+                    code: typeof data.code === "string" ? data.code : undefined,
+                    details: data.details,
+                    requestId: response.headers.get("x-request-id") ?? undefined,
+                });
+            }
+            catch (error) {
+                lastError = error;
+                if (options.signal?.aborted)
+                    throw options.signal.reason;
+                if (error instanceof AuctraApiError || !retryableRequest || attempt >= this.maxRetries) {
+                    throw error;
+                }
+                await wait(retryDelay(response, attempt), options.signal);
+            }
+        }
+        throw lastError;
+    }
+    async executeOrEvaluateAction(input, options, mode) {
+        const idempotencyKey = mode === "execute" ? (options.idempotencyKey ?? crypto.randomUUID()) : options.idempotencyKey;
+        const path = mode === "execute" ? "/v1/actions/execute" : "/v1/actions/evaluate";
+        return this.request("POST", path, {
+            agent_id: input.agentId,
+            action_type: input.actionType,
+            payload: input.payload ?? {},
+            claimed_intent_id: input.claimedIntentId,
+            intent_anchor_token: input.intentAnchorToken,
+            parent_action_id: input.parentActionId,
+            dry_run: mode === "evaluate",
+            actor: input.actor
+                ? {
+                    id: input.actor.id,
+                    type: input.actor.type,
+                    name: input.actor.name,
+                }
+                : undefined,
+            action: input.action
+                ? {
+                    target: input.action.target,
+                    description: input.action.description,
+                    risk_level: input.action.riskLevel,
+                    metadata: input.action.metadata,
+                }
+                : undefined,
+        }, mode === "execute" ? { ...options, idempotencyKey } : options);
+    }
+    async issueAuthorityRequest(input) {
+        const response = await this.request("POST", "/v1/authorities", {
+            agent_id: input.subject,
+            action_types: input.capabilities,
+            valid_until: input.expiresAt,
+            max_amount: input.constraints?.maxAmount,
+            max_count: input.constraints?.maxCount,
+            environment: input.constraints?.environment,
+            currency: input.constraints?.currency,
+            delegator_user_id: input.delegatorUserId ?? input.issuer,
+            parent_authority_id: input.parentAuthorityId,
+            max_delegation_depth: input.delegation?.maxDepth,
+            max_actions_per_window: input.maxActionsPerWindow
+                ? {
+                    count: input.maxActionsPerWindow.count,
+                    window_seconds: input.maxActionsPerWindow.windowSeconds,
+                    action_type: input.maxActionsPerWindow.actionType,
+                }
+                : undefined,
+            max_amount_per_window: input.maxAmountPerWindow
+                ? {
+                    amount: input.maxAmountPerWindow.amount,
+                    window_seconds: input.maxAmountPerWindow.windowSeconds,
+                }
+                : undefined,
+        });
+        const authorityId = response.authority_id ?? response.delegation.id;
+        const authority = response.authority ?? {
+            id: authorityId,
+            protocol_version: "0.1",
+            status: response.delegation.status,
+            payload_hash: "",
+            signed: false,
+            parent_authority_id: input.parentAuthorityId ?? null,
+            capabilities: input.capabilities,
+        };
+        return {
+            authority,
+            authority_id: authorityId,
+            delegation: response.delegation,
+        };
+    }
+    /**
+     * Authority Protocol — issue, verify, delegate (subset), revoke.
+     * There is no legacy createDelegation() surface.
+     */
+    get authority() {
+        return {
+            issue: (input) => this.issueAuthorityRequest(input),
+            verify: (payload, artifact) => this.request("POST", "/v1/authorities/verify", { payload, artifact }),
+            delegate: (input) => this.issueAuthorityRequest({
+                ...input,
+                parentAuthorityId: input.parent,
+            }),
+            revoke: (authorityId) => this.request("POST", `/v1/authorities/${encodeURIComponent(authorityId)}/revoke`, {}),
+        };
+    }
+    /**
+     * Action Protocol — evaluate (dry-run) vs execute (enforce + evidence).
+     * There is no legacy evaluateAction() surface.
+     */
+    get action() {
+        return {
+            evaluate: (input, options = {}) => this.executeOrEvaluateAction(input, options, "evaluate"),
+            execute: (input, options = {}) => this.executeOrEvaluateAction(input, options, "execute"),
+        };
+    }
+    get evidence() {
+        return {
+            verify: (payload, evidence) => this.request("POST", "/v1/evidence/verify", { payload, evidence }),
+        };
+    }
+    async verifyMandate(payload, evidence) {
+        return this.request("POST", "/v1/mandates/verify", { payload, evidence });
+    }
+    async listIntents() {
+        return this.request("GET", "/v1/intents");
+    }
+    async createIntent(input) {
+        return this.request("POST", "/v1/intents", {
+            title: input.title,
+            description: input.description,
+            intent_type: input.intentType,
+            risk_level: input.riskLevel,
+            max_risk_level: input.maxRiskLevel,
+            expires_at: input.expiresAt,
+            allowed_action_types: input.allowedActionTypes,
+            target_pattern: input.targetPattern,
+            resource_allowlist: input.resourceAllowlist,
+        });
+    }
+    async getIntent(intentId) {
+        return this.request("GET", `/v1/intents/${encodeURIComponent(intentId)}`);
+    }
+    async updateIntentStatus(intentId, status) {
+        return this.updateIntent(intentId, { status });
+    }
+    async updateIntent(intentId, input) {
+        return this.request("PATCH", `/v1/intents/${encodeURIComponent(intentId)}`, {
+            status: input.status,
+            title: input.title,
+            description: input.description,
+            intent_type: input.intentType,
+            risk_level: input.riskLevel,
+            max_risk_level: input.maxRiskLevel,
+            expires_at: input.expiresAt,
+        });
+    }
+    async getAuthorityGraph() {
+        return this.request("GET", "/v1/authority/graph");
+    }
+    async createAuthorityEdge(input) {
+        return this.request("POST", "/v1/authority/edges", {
+            from_actor_id: input.fromActorId,
+            from_actor_type: input.fromActorType,
+            to_actor_id: input.toActorId,
+            to_actor_type: input.toActorType,
+            authority_scope: input.authorityScope,
+            conditions: input.conditions,
+            max_risk_level: input.maxRiskLevel,
+            expires_at: input.expiresAt,
+        });
+    }
+    async getActionEvaluation(actionRequestId) {
+        return this.request("GET", `/v1/action-requests/${encodeURIComponent(actionRequestId)}/evaluation`);
+    }
+    async getRootIntentChain(actionRequestId) {
+        return this.request("GET", `/v1/action-requests/${encodeURIComponent(actionRequestId)}/root-intent`);
+    }
+    async listAgents() {
+        return this.request("GET", "/v1/agents");
+    }
+    async getAgent(agentId) {
+        return this.request("GET", `/v1/agents/${encodeURIComponent(agentId)}`);
+    }
+    async createAgent(input) {
+        return this.request("POST", "/v1/agents", {
+            name: input.name,
+            model_provider: input.modelProvider,
+            model_name: input.modelName,
+            description: input.description,
+            environment: input.environment,
+            authority_level: input.authorityLevel,
+            sponsor_user_id: input.sponsorUserId,
+        });
+    }
+    async updateAgentStatus(agentId, input) {
+        return this.request("PATCH", `/v1/agents/${encodeURIComponent(agentId)}`, {
+            status: input.status,
+            reason: input.reason,
+            revoke_delegations: input.revokeDelegations,
+            restore_delegations: input.restoreDelegations,
+        });
+    }
+    async deleteAgent(agentId) {
+        return this.request("DELETE", `/v1/agents/${encodeURIComponent(agentId)}`);
+    }
+    async listAuthorities() {
+        return this.request("GET", "/v1/authorities");
+    }
+    async getAuthority(authorityId) {
+        return this.request("GET", `/v1/authorities/${encodeURIComponent(authorityId)}`);
+    }
+    async listActionRequests() {
+        return this.request("GET", "/v1/action-requests");
+    }
+    async approveActionRequest(actionRequestId, approverUserId, reason) {
+        return this.resolveActionRequest(actionRequestId, "approve", approverUserId, reason);
+    }
+    async rejectActionRequest(actionRequestId, approverUserId, reason) {
+        return this.resolveActionRequest(actionRequestId, "reject", approverUserId, reason);
+    }
+    async escalateActionRequest(actionRequestId, approverUserId, reason) {
+        return this.resolveActionRequest(actionRequestId, "escalate", approverUserId, reason);
+    }
+    async resolveActionRequest(actionRequestId, action, approverUserId, reason) {
+        return this.request("POST", `/v1/action-requests/${encodeURIComponent(actionRequestId)}/${action}`, { reason, approver_user_id: approverUserId });
+    }
+    async listPolicies() {
+        return this.request("GET", "/v1/policies");
+    }
+    async createPolicy(input) {
+        return this.request("POST", "/v1/policies", {
+            name: input.name,
+            description: input.description,
+            policy_type: input.policyType,
+            status: input.status,
+            priority: input.priority,
+            action_type: input.actionType,
+            amount_greater_than: input.amountGreaterThan,
+            resource_sensitivity: input.resourceSensitivity,
+            external_recipient: input.externalRecipient,
+            environment: input.environment,
+            decision: input.decision,
+            approver_role: input.approverRole,
+            max_actions_per_window: input.maxActionsPerWindow
+                ? {
+                    count: input.maxActionsPerWindow.count,
+                    window_seconds: input.maxActionsPerWindow.windowSeconds,
+                    action_type: input.maxActionsPerWindow.actionType,
+                }
+                : undefined,
+            max_amount_per_window: input.maxAmountPerWindow
+                ? {
+                    amount: input.maxAmountPerWindow.amount,
+                    window_seconds: input.maxAmountPerWindow.windowSeconds,
+                }
+                : undefined,
+        });
+    }
+    async simulatePolicy(policyId, input = {}) {
+        return this.request("POST", `/v1/policies/${encodeURIComponent(policyId)}/simulate`, input);
+    }
+    async publishPolicy(policyId, input = {}) {
+        return this.request("POST", `/v1/policies/${encodeURIComponent(policyId)}/publish`, input);
+    }
+    async listActionTypes() {
+        return this.listCustomActionTypes();
+    }
+    async listCustomActionTypes() {
+        return this.request("GET", "/v1/action-types");
+    }
+    async createCustomActionType(input) {
+        return this.request("POST", "/v1/action-types", {
+            id: input.id,
+            label: input.label,
+            description: input.description,
+            category: input.category,
+            policy_type: input.policyType,
+            payload_schema: input.payloadSchema ?? {},
+        });
+    }
+    async listAuditEvents() {
+        return this.request("GET", "/v1/audit-events");
+    }
+    async getAuditEvent(auditEventId) {
+        return this.request("GET", `/v1/audit-events/${encodeURIComponent(auditEventId)}`);
+    }
+    async verifyAuditChain() {
+        return this.request("GET", "/v1/audit-events/verify");
+    }
+    async listApiKeys() {
+        return this.request("GET", "/v1/api-keys");
+    }
+}

package/dist/esm/evidence.d.ts

@@ -0,0 +1,4 @@
+/** Evidence verification surface. */
+export type { ArtifactVerification, DecisionEvidence, DecisionEvidencePayload, MandateEvidence, MandatePayload, } from "./types.js";
+export { verifyDecisionArtifact, verifyMandateArtifact } from "./artifacts.js";
+//# sourceMappingURL=evidence.d.ts.map

package/dist/esm/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../src/evidence.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,YAAY,EACV,oBAAoB,EACpB,gBAAgB,EAChB,uBAAuB,EACvB,eAAe,EACf,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/esm/evidence.js

@@ -0,0 +1 @@
+export { verifyDecisionArtifact, verifyMandateArtifact } from "./artifacts.js";