@auctra/sdk 0.7.11 → 0.7.13

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 0.7.13
+
+**Security — mandatory proxy + MCP gateway (SEC-P0-001 / P0-002)**
+
+- Document MANDATORY lease-gated proxy for consequential tools.
+- Pair with `@auctra/mcp-gateway@0.1.9` `REQUIRE_MCP_GATEWAY` stamp; org `require_mcp_gateway`.
+- Scheduled release mints execution leases (SEC-P1-005).
+
+## 0.7.12
+
+**Feature — withExecutionLease bypass closure**
+
+- `withExecutionLease(client, decision, fn)` — require ALLOW + `execution_lease`, consume once, then side effect.
+- Pairs with fail-closed lease mint on high/critical ALLOW and production MCP require.
+
 ## 0.7.11
 
 **Feature — approval nonce on require_approval (TEST-004)**

package/dist/cjs/action.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.onAllowed = onAllowed;
 exports.assertAllowed = assertAllowed;
+exports.withExecutionLease = withExecutionLease;
 exports.assertAuthorityLive = assertAuthorityLive;
 /**
  * Run a side-effect callback only when `decision === "allowed"`.
@@ -23,6 +24,26 @@ function assertAllowed(decision) {
             (decision.reason ? ` (${decision.reason})` : ""));
     }
 }
+/**
+ * Bypass-closure helper (TEST-018): require ALLOW + execution_lease, consume once, then run.
+ * Credential proxies must use this (or mcp-gateway) so standing secrets never sit in the agent.
+ */
+async function withExecutionLease(client, decision, callback, options) {
+    assertAllowed(decision);
+    const token = decision.execution_lease?.token;
+    if (!token) {
+        throw new Error("Auctra refused side effect: execution_lease missing — configure AUCTRA_EXECUTION_LEASE_SECRET and a lease-gated proxy");
+    }
+    const consumed = await client.consumeExecutionLease({
+        lease: token,
+        expectedActionType: options?.expectedActionType ?? decision.execution_lease?.action_type,
+    });
+    if (!consumed.ok) {
+        throw new Error(`Auctra refused side effect: execution lease consume failed` +
+            (consumed.error ? ` (${consumed.error})` : ""));
+    }
+    return callback(decision);
+}
 /**
  * Engine 07/11 — re-check authority liveness before a delayed side effect (TOCTOU).
  * Returns false when the mandate is revoked/expired so integrators can skip local execution.

package/dist/cjs/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertAuthorityLive = exports.assertAllowed = exports.onAllowed = exports.Auctra = exports.verifyDecisionArtifact = exports.verifyMandateArtifact = exports.AuctraApiError = exports.DEFAULT_BASE_URL = exports.AUCTRA_SDK_VERSION = void 0;
+exports.withExecutionLease = exports.assertAuthorityLive = exports.assertAllowed = exports.onAllowed = exports.Auctra = exports.verifyDecisionArtifact = exports.verifyMandateArtifact = exports.AuctraApiError = exports.DEFAULT_BASE_URL = exports.AUCTRA_SDK_VERSION = void 0;
 /**
  * @auctra/sdk — Stage 1.0 public surface.
  *
@@ -20,3 +20,4 @@ var action_js_1 = require("./action.js");
 Object.defineProperty(exports, "onAllowed", { enumerable: true, get: function () { return action_js_1.onAllowed; } });
 Object.defineProperty(exports, "assertAllowed", { enumerable: true, get: function () { return action_js_1.assertAllowed; } });
 Object.defineProperty(exports, "assertAuthorityLive", { enumerable: true, get: function () { return action_js_1.assertAuthorityLive; } });
+Object.defineProperty(exports, "withExecutionLease", { enumerable: true, get: function () { return action_js_1.withExecutionLease; } });

package/dist/cjs/types.js

@@ -2,6 +2,6 @@
 /** @auctra/sdk — Authority Protocol client (Stage 1.0 modular layout). */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEFAULT_BASE_URL = exports.AUCTRA_SDK_VERSION = void 0;
-exports.AUCTRA_SDK_VERSION = "0.7.11";
+exports.AUCTRA_SDK_VERSION = "0.7.13";
 /** Production API + console host (Architecture A: colocated on app.auctra.tech). */
 exports.DEFAULT_BASE_URL = "https://app.auctra.tech";

package/dist/esm/action.d.ts

@@ -12,6 +12,23 @@ export declare function onAllowed<T>(decision: EvaluateActionResponse, callback:
 export declare function assertAllowed(decision: EvaluateActionResponse): asserts decision is EvaluateActionResponse & {
     decision: "allowed";
 };
+export type ExecutionLeaseConsumer = {
+    consumeExecutionLease: (input: {
+        lease: string;
+        expectedActionType?: string;
+    }) => Promise<{
+        ok: boolean;
+        error?: string;
+        reason_codes?: string[];
+    }>;
+};
+/**
+ * Bypass-closure helper (TEST-018): require ALLOW + execution_lease, consume once, then run.
+ * Credential proxies must use this (or mcp-gateway) so standing secrets never sit in the agent.
+ */
+export declare function withExecutionLease<T>(client: ExecutionLeaseConsumer, decision: EvaluateActionResponse, callback: (allowed: EvaluateActionResponse) => Promise<T> | T, options?: {
+    expectedActionType?: string;
+}): Promise<T>;
 export type AuthorityLivenessClient = {
     getAuthorityLiveness: (authorityId: string) => Promise<{
         live: boolean;

package/dist/esm/action.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../src/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,QAAQ,EAAE,sBAAsB,EAChC,QAAQ,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAC5D,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAGxB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,sBAAsB,GAC/B,OAAO,CAAC,QAAQ,IAAI,sBAAsB,GAAG;IAAE,QAAQ,EAAE,SAAS,CAAA;CAAE,CAOtE;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,oBAAoB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3F,CAAC;AAEF;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,uBAAuB,EAC/B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAG5C"}
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../src/action.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,QAAQ,EAAE,sBAAsB,EAChC,QAAQ,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAC5D,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAGxB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,sBAAsB,GAC/B,OAAO,CAAC,QAAQ,IAAI,sBAAsB,GAAG;IAAE,QAAQ,EAAE,SAAS,CAAA;CAAE,CAOtE;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,qBAAqB,EAAE,CAAC,KAAK,EAAE;QAC7B,KAAK,EAAE,MAAM,CAAC;QACd,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACzE,CAAC;AAEF;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,MAAM,EAAE,sBAAsB,EAC9B,QAAQ,EAAE,sBAAsB,EAChC,QAAQ,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAC7D,OAAO,CAAC,EAAE;IAAE,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAE,GACxC,OAAO,CAAC,CAAC,CAAC,CAmBZ;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,oBAAoB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3F,CAAC;AAEF;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,uBAAuB,EAC/B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAG5C"}

package/dist/esm/action.js

@@ -18,6 +18,26 @@ export function assertAllowed(decision) {
             (decision.reason ? ` (${decision.reason})` : ""));
     }
 }
+/**
+ * Bypass-closure helper (TEST-018): require ALLOW + execution_lease, consume once, then run.
+ * Credential proxies must use this (or mcp-gateway) so standing secrets never sit in the agent.
+ */
+export async function withExecutionLease(client, decision, callback, options) {
+    assertAllowed(decision);
+    const token = decision.execution_lease?.token;
+    if (!token) {
+        throw new Error("Auctra refused side effect: execution_lease missing — configure AUCTRA_EXECUTION_LEASE_SECRET and a lease-gated proxy");
+    }
+    const consumed = await client.consumeExecutionLease({
+        lease: token,
+        expectedActionType: options?.expectedActionType ?? decision.execution_lease?.action_type,
+    });
+    if (!consumed.ok) {
+        throw new Error(`Auctra refused side effect: execution lease consume failed` +
+            (consumed.error ? ` (${consumed.error})` : ""));
+    }
+    return callback(decision);
+}
 /**
  * Engine 07/11 — re-check authority liveness before a delayed side effect (TOCTOU).
  * Returns false when the mandate is revoked/expired so integrators can skip local execution.

package/dist/esm/index.d.ts

@@ -8,6 +8,6 @@ export { AUCTRA_SDK_VERSION, DEFAULT_BASE_URL } from "./types.js";
 export type * from "./types.js";
 export { AuctraApiError, verifyMandateArtifact, verifyDecisionArtifact } from "./artifacts.js";
 export { Auctra } from "./client.js";
-export { onAllowed, assertAllowed, assertAuthorityLive } from "./action.js";
+export { onAllowed, assertAllowed, assertAuthorityLive, withExecutionLease } from "./action.js";
 export type { AuthorityLivenessClient } from "./action.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAClE,mBAAmB,YAAY,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC/F,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC5E,YAAY,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAClE,mBAAmB,YAAY,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC/F,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAChG,YAAY,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}

package/dist/esm/index.js

@@ -7,4 +7,4 @@
 export { AUCTRA_SDK_VERSION, DEFAULT_BASE_URL } from "./types.js";
 export { AuctraApiError, verifyMandateArtifact, verifyDecisionArtifact } from "./artifacts.js";
 export { Auctra } from "./client.js";
-export { onAllowed, assertAllowed, assertAuthorityLive } from "./action.js";
+export { onAllowed, assertAllowed, assertAuthorityLive, withExecutionLease } from "./action.js";

package/dist/esm/types.d.ts

@@ -1,5 +1,5 @@
 /** @auctra/sdk — Authority Protocol client (Stage 1.0 modular layout). */
-export declare const AUCTRA_SDK_VERSION = "0.7.11";
+export declare const AUCTRA_SDK_VERSION = "0.7.13";
 /** Production API + console host (Architecture A: colocated on app.auctra.tech). */
 export declare const DEFAULT_BASE_URL = "https://app.auctra.tech";
 export type AgentEnvironment = "dev" | "staging" | "production";

package/dist/esm/types.js

@@ -1,4 +1,4 @@
 /** @auctra/sdk — Authority Protocol client (Stage 1.0 modular layout). */
-export const AUCTRA_SDK_VERSION = "0.7.11";
+export const AUCTRA_SDK_VERSION = "0.7.13";
 /** Production API + console host (Architecture A: colocated on app.auctra.tech). */
 export const DEFAULT_BASE_URL = "https://app.auctra.tech";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@auctra/sdk",
-  "version": "0.7.11",
+  "version": "0.7.13",
   "description": "Authority Protocol SDK — issue portable authority, evaluate/execute actions, verify evidence",
   "homepage": "https://auctra.tech/docs",
   "bugs": {

package/src/action.ts

@@ -28,6 +28,43 @@ export function assertAllowed(
   }
 }
 
+export type ExecutionLeaseConsumer = {
+  consumeExecutionLease: (input: {
+    lease: string;
+    expectedActionType?: string;
+  }) => Promise<{ ok: boolean; error?: string; reason_codes?: string[] }>;
+};
+
+/**
+ * Bypass-closure helper (TEST-018): require ALLOW + execution_lease, consume once, then run.
+ * Credential proxies must use this (or mcp-gateway) so standing secrets never sit in the agent.
+ */
+export async function withExecutionLease<T>(
+  client: ExecutionLeaseConsumer,
+  decision: EvaluateActionResponse,
+  callback: (allowed: EvaluateActionResponse) => Promise<T> | T,
+  options?: { expectedActionType?: string },
+): Promise<T> {
+  assertAllowed(decision);
+  const token = decision.execution_lease?.token;
+  if (!token) {
+    throw new Error(
+      "Auctra refused side effect: execution_lease missing — configure AUCTRA_EXECUTION_LEASE_SECRET and a lease-gated proxy",
+    );
+  }
+  const consumed = await client.consumeExecutionLease({
+    lease: token,
+    expectedActionType: options?.expectedActionType ?? decision.execution_lease?.action_type,
+  });
+  if (!consumed.ok) {
+    throw new Error(
+      `Auctra refused side effect: execution lease consume failed` +
+        (consumed.error ? ` (${consumed.error})` : ""),
+    );
+  }
+  return callback(decision);
+}
+
 export type AuthorityLivenessClient = {
   getAuthorityLiveness: (authorityId: string) => Promise<{ live: boolean; status: string }>;
 };

package/src/index.ts

@@ -8,5 +8,5 @@ export { AUCTRA_SDK_VERSION, DEFAULT_BASE_URL } from "./types.js";
 export type * from "./types.js";
 export { AuctraApiError, verifyMandateArtifact, verifyDecisionArtifact } from "./artifacts.js";
 export { Auctra } from "./client.js";
-export { onAllowed, assertAllowed, assertAuthorityLive } from "./action.js";
+export { onAllowed, assertAllowed, assertAuthorityLive, withExecutionLease } from "./action.js";
 export type { AuthorityLivenessClient } from "./action.js";

package/src/types.ts

@@ -1,6 +1,6 @@
 /** @auctra/sdk — Authority Protocol client (Stage 1.0 modular layout). */
 
-export const AUCTRA_SDK_VERSION = "0.7.11";
+export const AUCTRA_SDK_VERSION = "0.7.13";
 
 /** Production API + console host (Architecture A: colocated on app.auctra.tech). */
 export const DEFAULT_BASE_URL = "https://app.auctra.tech";