@buildaureon/sdk 0.1.2 → 0.1.8

package/docs/receipt-validation.md

@@ -0,0 +1,66 @@
+# Receipt validation
+
+Phase 2 receipts must follow honest settlement rules. Use the SDK validator after every restore or when ingesting receipts from logs.
+
+---
+
+## Quick example
+
+```ts
+import {
+  createAureonClient,
+  resolveAureonNetworkFromEnv,
+  validateExecutionReceipt,
+  assertValidExecutionReceipt,
+} from "@buildaureon/sdk";
+
+const resolved = resolveAureonNetworkFromEnv();
+const client = createAureonClient({
+  network: resolved.network,
+  baseUrl: resolved.baseUrl,
+  apiKey: process.env.AUREON_API_KEY!,
+});
+
+const receipt = await client.restoreObjective("obj_abc123");
+
+const check = validateExecutionReceipt(receipt);
+if (!check.valid) {
+  for (const issue of check.issues) {
+    console.error(issue.code, issue.path, issue.message);
+  }
+  throw new Error("Receipt failed validation");
+}
+
+// Or throw in one step:
+assertValidExecutionReceipt(receipt);
+```
+
+List recent receipts and validate each:
+
+```ts
+for (const receipt of await client.listExecutions()) {
+  assertValidExecutionReceipt(receipt);
+}
+```
+
+---
+
+## What gets checked
+
+| Rule | Fail code (examples) |
+|------|----------------------|
+| Required fields present | `MISSING_FIELD` |
+| `settlement` is `vault` or `staged` | `INVALID_SETTLEMENT` |
+| Staged: no explorer, not verified | `STAGED_WITH_EXPLORER`, `STAGED_VERIFIED_ON_CHAIN` |
+| Vault with real `0x` tx: explorer required | `VAULT_MISSING_EXPLORER` |
+| `verifiedOnChain: true` needs matching record | `VERIFIED_WITHOUT_RECORD` |
+| Registry ref hex shape | `INVALID_REGISTRY_REF` |
+
+The validator does **not** re-query the chain — it checks shape and honesty only.
+
+---
+
+## Related
+
+- [Data contracts](./data-contracts.md) — receipt and settlement fields
+- [Integration guide](./integration-guide.md) — agent restore loop

package/docs/security.md

@@ -82,7 +82,7 @@ Never collapse staged into “confirmed on Robinhood Chain.”
 
 ## 5. Transport and logging hygiene
 
-- Prefer HTTPS production base URL `https://api.aureonlabs.network`.
+- Default omitted client is local mainnet `http://127.0.0.1:8788` (4663). Use `network: "testnet"` for the public host (still 46630). Do not call that host production.
 - Do not log raw `Authorization` or `X-Aureon-Api-Key`.
 - Redact prepare step calldata in public logs if it includes sensitive amounts in your threat model.
 - Set `timeoutMs` / `maxRetries` deliberately for agent loops (see [transport.md](./transport.md)).

package/docs/transport.md

@@ -48,7 +48,8 @@ Issued developer keys in `X-Aureon-Api-Key` are enough for control-plane identit
 
 ```ts
 createAureonClient({
-  baseUrl: "https://api.aureonlabs.network",
+  // omit network → local mainnet 8788 / 4663
+  // network: "testnet" → public host (still 46630)
   apiKey: process.env.AUREON_API_KEY!,
   timeoutMs: 30_000,   // per attempt
   maxRetries: 2,        // extra attempts after first failure

package/examples/ai-to-objective-to-portfolio/main.ts

@@ -0,0 +1,130 @@
+/**
+ * @fileoverview Update 3 demo — AI → objective → portfolio.
+ *
+ * Env:
+ *   AUREON_API_KEY  issued developer key (required)
+ *   AUREON_NETWORK  optional; omit for mainnet (4663 / 8788); set testnet for public host (still 46630)
+ *   AUREON_API_URL  optional override (must match network if both set)
+ *
+ *   pnpm example:ai-to-objective-to-portfolio
+ */
+
+import {
+  createAureonClient,
+  resolveAureonNetworkFromEnv,
+  formatWeight,
+  isAureonError,
+  parseFinancialIntent,
+  type PortfolioPositionInput,
+} from "../../src/index.js";
+
+const DEMO_POSITIONS: PortfolioPositionInput[] = [
+  {
+    symbol: "USDG",
+    name: "Paxos USDG",
+    category: "stable",
+    quantity: 24_000,
+    markPriceUsd: 1,
+  },
+  {
+    symbol: "NVDA",
+    name: "NVIDIA Stock Token",
+    category: "stock_token",
+    quantity: 45,
+    markPriceUsd: 920,
+  },
+  {
+    symbol: "AAPL",
+    name: "Apple Stock Token",
+    category: "stock_token",
+    quantity: 80,
+    markPriceUsd: 210,
+  },
+  {
+    symbol: "ETH",
+    name: "Ether",
+    category: "gas",
+    quantity: 8.5,
+    markPriceUsd: 3400,
+  },
+];
+
+async function main(): Promise<void> {
+  const apiKey = process.env.AUREON_API_KEY?.trim();
+  if (!apiKey) {
+    throw new Error("Set AUREON_API_KEY to an issued developer key.");
+  }
+
+  const resolved = resolveAureonNetworkFromEnv();
+  const aureon = createAureonClient({
+    network: resolved.network,
+    baseUrl: resolved.baseUrl,
+    apiKey,
+  });
+
+  const userBrief =
+    "I want to keep about 20% of my portfolio in stable assets.";
+
+  console.log("\n=== AUREON Update 3 — AI → objective → portfolio ===\n");
+  console.log("USER (simulated agent input):");
+  console.log(`  "${userBrief}"\n`);
+
+  console.log("AI — structured intent:");
+  const intent = parseFinancialIntent(userBrief);
+  console.log(
+    JSON.stringify(
+      {
+        kind: intent.kind,
+        targetWeight: intent.targetWeight,
+        tolerance: intent.tolerance,
+      },
+      null,
+      2
+    )
+  );
+
+  console.log("\n1. Seed capital book…");
+  await aureon.setPortfolio(DEMO_POSITIONS);
+
+  console.log("2. Apply financial intent → create objective…");
+  const flow = await aureon.applyFinancialIntent(intent);
+
+  console.log("\n--- Intent ---");
+  console.log(`  Brief:   ${flow.intent.brief}`);
+  console.log(`  Policy:  ${flow.intent.policySummary}`);
+
+  console.log("\n--- Objective ---");
+  console.log(`  ID:      ${flow.objective.id}`);
+  console.log(`  Kind:    ${flow.objective.kind}`);
+  console.log(`  Mode:    ${flow.objective.automationMode}`);
+  console.log(
+    `  Target:  ${formatWeight(flow.objective.policy.targetWeight)}`
+  );
+
+  console.log("\n--- Portfolio ---");
+  console.log(
+    `  Book:    $${flow.portfolio.totalNotionalUsd.toLocaleString()}`
+  );
+  console.log(
+    `  Stables: ${formatWeight(flow.portfolio.stableWeight)}`
+  );
+  if (flow.health) {
+    console.log(
+      `  Health:  ${flow.health.state} — current ${formatWeight(flow.health.currentMetric)} vs target ${formatWeight(flow.health.targetMetric)}`
+    );
+  }
+
+  console.log(`\n${flow.message}`);
+  console.log(
+    "\nThe portfolio now has a reason — not just positions.\n"
+  );
+}
+
+main().catch((error) => {
+  if (isAureonError(error)) {
+    console.error(`${error.code}: ${error.message}`);
+  } else {
+    console.error(error);
+  }
+  process.exitCode = 1;
+});

package/examples/audit-trail/main.ts

@@ -0,0 +1,55 @@
+/**
+ * @fileoverview Phase 2 audit trail export — objective → proof.
+ *
+ * Env:
+ *   AUREON_API_KEY  issued developer key (required)
+ *   AUREON_API_URL  optional
+ *   AUREON_OBJECTIVE_ID  optional (defaults to first objective)
+ *
+ *   pnpm example:audit-trail
+ */
+
+import {
+  createAureonClient,
+  resolveAureonNetworkFromEnv,
+  formatAuditTrailLines,
+  isAureonError,
+} from "../../src/index.js";
+
+async function main(): Promise<void> {
+  const apiKey = process.env.AUREON_API_KEY?.trim();
+  if (!apiKey) {
+    throw new Error("Set AUREON_API_KEY to an issued developer key.");
+  }
+
+  const resolved = resolveAureonNetworkFromEnv();
+  const aureon = createAureonClient({
+    network: resolved.network,
+    baseUrl: resolved.baseUrl,
+    apiKey,
+  });
+
+  const requested = process.env.AUREON_OBJECTIVE_ID?.trim();
+  const objectiveId =
+    requested || (await aureon.listObjectives())[0]?.id;
+  if (!objectiveId) {
+    throw new Error("No objectives on this wallet. Create one first.");
+  }
+
+  const trail = await aureon.getAuditTrail(objectiveId);
+
+  console.log("\n=== AUREON Phase 2 — Financial audit trail ===\n");
+  for (const line of formatAuditTrailLines(trail)) {
+    console.log(line);
+  }
+  console.log("");
+}
+
+main().catch((error) => {
+  if (isAureonError(error)) {
+    console.error(`${error.code}: ${error.message}`);
+  } else {
+    console.error(error);
+  }
+  process.exitCode = 1;
+});

package/examples/drift-detect-restore/main.ts

@@ -0,0 +1,99 @@
+/**
+ * @fileoverview demo — drift → detection → restore.
+ *
+ * Shows the full loop: rule set, controlled drift, restore plan, receipt, health.
+ *
+ * Env:
+ *   AUREON_API_KEY  issued developer key (required)
+ *   AUREON_NETWORK  optional; omit for mainnet (4663 / 8788); set testnet for public host (still 46630)
+ *   AUREON_API_URL  optional override (must match network if both set)
+ *
+ *   pnpm example:drift-detect-restore
+ */
+
+import {
+  createAureonClient,
+  resolveAureonNetworkFromEnv,
+  formatWeight,
+  isAureonError,
+  type DriftRestoreFlow,
+} from "../../src/index.js";
+
+function printPhase(label: string, healthState: string, metric?: number, target?: number): void {
+  const metricStr =
+    metric !== undefined && target !== undefined
+      ? ` — ${formatWeight(metric)} vs ${formatWeight(target)} target`
+      : "";
+  console.log(`  ${label}: ${healthState}${metricStr}`);
+}
+
+function printFlow(flow: DriftRestoreFlow): void {
+  console.log(`\nRule: ${flow.rule.summary}\n`);
+
+  console.log("1. Rule — aligned on policy");
+  printPhase(
+    "   Health",
+    flow.phases.aligned.health.state,
+    flow.phases.aligned.health.currentMetric,
+    flow.phases.aligned.health.targetMetric
+  );
+
+  console.log("\n2. Drift — NVDA rally broke the stable sleeve");
+  printPhase(
+    "   Health",
+    flow.phases.drift.health.state,
+    flow.phases.drift.health.currentMetric,
+    flow.phases.drift.health.targetMetric
+  );
+  if (flow.phases.drift.restorePlan) {
+    console.log(`   Restore plan: ${flow.phases.drift.restorePlan.message}`);
+  }
+
+  if (flow.phases.restored) {
+    console.log("\n3. Restore — back within policy");
+    printPhase(
+      "   Health",
+      flow.phases.restored.health.state,
+      flow.phases.restored.health.currentMetric,
+      flow.phases.restored.health.targetMetric
+    );
+    if (flow.phases.restored.receipt) {
+      console.log(
+        `   Receipt: ${flow.phases.restored.receipt.action} — settlement ${flow.phases.restored.receipt.settlement}`
+      );
+    }
+  }
+
+  console.log(`\n${flow.message}`);
+  console.log(
+    "\nWe broke the rule on purpose. AUREON detected it and restored the policy.\n"
+  );
+}
+
+async function main(): Promise<void> {
+  const apiKey = process.env.AUREON_API_KEY?.trim();
+  if (!apiKey) {
+    throw new Error("Set AUREON_API_KEY to an issued developer key.");
+  }
+
+  const resolved = resolveAureonNetworkFromEnv();
+  const aureon = createAureonClient({
+    network: resolved.network,
+    baseUrl: resolved.baseUrl,
+    apiKey,
+  });
+
+  console.log("\n=== AUREON — Drift → detection → restore ===\n");
+
+  const flow = await aureon.runDriftRestoreDemo();
+  printFlow(flow);
+}
+
+main().catch((error) => {
+  if (isAureonError(error)) {
+    console.error(`${error.code}: ${error.message}`);
+  } else {
+    console.error(error);
+  }
+  process.exitCode = 1;
+});

package/examples/e2e-policy-rebalance/main.ts

@@ -4,9 +4,10 @@
  * Env:
  *   AUREON_API_KEY            issued developer key (required)
  *   AUREON_WALLET_PRIVATE_KEY 0x… signing key (required)
- *   AUREON_API_URL            optional (default https://api.aureonlabs.network)
- *   AUREON_RPC_URL            optional
- *   AUREON_CHAIN_ID           optional (default 46630)
+ *   AUREON_NETWORK            optional; omit for mainnet 8788 / 4663; testnet = public host (still 46630)
+ *   AUREON_API_URL            optional override
+ *   AUREON_RPC_URL            optional (defaults from resolved chain)
+ *   AUREON_CHAIN_ID           optional (defaults from resolved network)
  *
  *   pnpm --filter @buildaureon/sdk example:e2e-policy
  */
@@ -25,7 +26,7 @@ import { privateKeyToAccount } from "viem/accounts";
 import {
   createAureonClient,
   createSessionTokenProvider,
-  DEFAULT_API_BASE_URL,
+  resolveAureonNetworkFromEnv,
   isAureonError,
 } from "../../src/index.js";
 
@@ -61,11 +62,14 @@ function log(step: string, data?: unknown) {
 }
 
 async function main() {
-  const baseUrl = process.env.AUREON_API_URL?.trim() || DEFAULT_API_BASE_URL;
+  const resolved = resolveAureonNetworkFromEnv();
+  const baseUrl = resolved.baseUrl;
+  const chainId = Number(process.env.AUREON_CHAIN_ID ?? resolved.chainId);
   const rpcUrl =
     process.env.AUREON_RPC_URL?.trim() ||
-    "https://rpc.testnet.chain.robinhood.com";
-  const chainId = Number(process.env.AUREON_CHAIN_ID ?? 46630);
+    (chainId === 4663
+      ? "https://rpc.mainnet.chain.robinhood.com"
+      : "https://rpc.testnet.chain.robinhood.com");
   const apiKey = requireEnv("AUREON_API_KEY");
 
   const account = privateKeyToAccount(loadKey());
@@ -73,7 +77,7 @@ async function main() {
   const walletClient = createWalletClient({ account, transport: http(rpcUrl) });
   const chain = {
     id: chainId,
-    name: "Robinhood Chain Testnet",
+    name: chainId === 4663 ? "Robinhood Chain" : "Robinhood Chain Testnet",
     nativeCurrency: { name: "Ether", symbol: "ETH", decimals: 18 },
     rpcUrls: { default: { http: [rpcUrl] } },
   } as const;
@@ -82,6 +86,7 @@ async function main() {
 
   const session = createSessionTokenProvider(null);
   const aureon = createAureonClient({
+    network: resolved.network,
     baseUrl,
     apiKey,
     getAccessToken: session.getAccessToken,

package/examples/e2e-policy-rebalance/underrun.ts

@@ -4,9 +4,10 @@
  * Env:
  *   AUREON_API_KEY            issued developer key
  *   AUREON_WALLET_PRIVATE_KEY 0x… signing key
- *   AUREON_API_URL            optional (default https://api.aureonlabs.network)
- *   AUREON_RPC_URL            optional
- *   AUREON_CHAIN_ID           optional (default 46630)
+ *   AUREON_NETWORK            optional; omit for mainnet 8788 / 4663; testnet = public host (still 46630)
+ *   AUREON_API_URL            optional override
+ *   AUREON_RPC_URL            optional (defaults from resolved chain)
+ *   AUREON_CHAIN_ID           optional (defaults from resolved network)
  */
 
 import {
@@ -20,7 +21,7 @@ import { privateKeyToAccount } from "viem/accounts";
 import {
   createAureonClient,
   createSessionTokenProvider,
-  DEFAULT_API_BASE_URL,
+  resolveAureonNetworkFromEnv,
   isAureonError,
 } from "../../src/index.js";
 
@@ -36,22 +37,26 @@ if (!/^0x[0-9a-fA-F]{64}$/.test(key)) {
 }
 
 const account = privateKeyToAccount(key);
+const resolved = resolveAureonNetworkFromEnv();
+const chainId = Number(process.env.AUREON_CHAIN_ID || resolved.chainId);
 const rpc =
   process.env.AUREON_RPC_URL?.trim() ||
-  "https://rpc.testnet.chain.robinhood.com";
-const chainId = Number(process.env.AUREON_CHAIN_ID || 46630);
+  (chainId === 4663
+    ? "https://rpc.mainnet.chain.robinhood.com"
+    : "https://rpc.testnet.chain.robinhood.com");
 const publicClient = createPublicClient({ transport: http(rpc) });
 const walletClient = createWalletClient({ account, transport: http(rpc) });
 const chain = {
   id: chainId,
-  name: "Robinhood Chain Testnet",
+  name: chainId === 4663 ? "Robinhood Chain" : "Robinhood Chain Testnet",
   nativeCurrency: { name: "Ether", symbol: "ETH", decimals: 18 },
   rpcUrls: { default: { http: [rpc] } },
 } as const;
 
 const session = createSessionTokenProvider(null);
 const aureon = createAureonClient({
-  baseUrl: process.env.AUREON_API_URL?.trim() || DEFAULT_API_BASE_URL,
+  network: resolved.network,
+  baseUrl: resolved.baseUrl,
   apiKey: requireEnv("AUREON_API_KEY"),
   getAccessToken: session.getAccessToken,
 });

package/examples/e2e-policy-rebalance/verify-sizing.ts

@@ -4,9 +4,10 @@
  * Env:
  *   AUREON_API_KEY            issued developer key
  *   AUREON_WALLET_PRIVATE_KEY 0x… signing key
- *   AUREON_API_URL            optional (default https://api.aureonlabs.network)
- *   AUREON_RPC_URL            optional
- *   AUREON_CHAIN_ID           optional (default 46630)
+ *   AUREON_NETWORK            optional; omit for mainnet 8788 / 4663; testnet = public host (still 46630)
+ *   AUREON_API_URL            optional override
+ *   AUREON_RPC_URL            optional (defaults from resolved chain)
+ *   AUREON_CHAIN_ID           optional (defaults from resolved network)
  */
 
 import {
@@ -20,7 +21,7 @@ import { privateKeyToAccount } from "viem/accounts";
 import {
   createAureonClient,
   createSessionTokenProvider,
-  DEFAULT_API_BASE_URL,
+  resolveAureonNetworkFromEnv,
 } from "../../src/index.js";
 
 function requireEnv(name: string): string {
@@ -35,22 +36,26 @@ if (!/^0x[0-9a-fA-F]{64}$/.test(key)) {
 }
 
 const account = privateKeyToAccount(key);
+const resolved = resolveAureonNetworkFromEnv();
+const chainId = Number(process.env.AUREON_CHAIN_ID || resolved.chainId);
 const rpc =
   process.env.AUREON_RPC_URL?.trim() ||
-  "https://rpc.testnet.chain.robinhood.com";
-const chainId = Number(process.env.AUREON_CHAIN_ID || 46630);
+  (chainId === 4663
+    ? "https://rpc.mainnet.chain.robinhood.com"
+    : "https://rpc.testnet.chain.robinhood.com");
 const publicClient = createPublicClient({ transport: http(rpc) });
 const walletClient = createWalletClient({ account, transport: http(rpc) });
 const chain = {
   id: chainId,
-  name: "Robinhood Chain Testnet",
+  name: chainId === 4663 ? "Robinhood Chain" : "Robinhood Chain Testnet",
   nativeCurrency: { name: "Ether", symbol: "ETH", decimals: 18 },
   rpcUrls: { default: { http: [rpc] } },
 } as const;
 
 const session = createSessionTokenProvider(null);
 const aureon = createAureonClient({
-  baseUrl: process.env.AUREON_API_URL?.trim() || DEFAULT_API_BASE_URL,
+  network: resolved.network,
+  baseUrl: resolved.baseUrl,
   apiKey: requireEnv("AUREON_API_KEY"),
   getAccessToken: session.getAccessToken,
 });

package/examples/e2e-vault-flow/main.ts

@@ -3,10 +3,11 @@
  *
  * Env (integrators only — no local repo files):
  *   AUREON_API_KEY            issued developer key (required)
- *   AUREON_API_URL            optional (default https://api.aureonlabs.network)
+ *   AUREON_NETWORK            optional; omit for mainnet 8788 / 4663; testnet = public host (still 46630)
+ *   AUREON_API_URL            optional override
  *   AUREON_WALLET_PRIVATE_KEY 0x… key used to sign auth + broadcast vault txs (required)
- *   AUREON_RPC_URL            optional (default Robinhood testnet RPC)
- *   AUREON_CHAIN_ID           optional (default 46630)
+ *   AUREON_RPC_URL            optional (defaults from resolved chain)
+ *   AUREON_CHAIN_ID           optional (defaults from resolved network)
  *
  *   pnpm --filter @buildaureon/sdk example:e2e
  */
@@ -21,7 +22,7 @@ import { privateKeyToAccount } from "viem/accounts";
 import {
   createAureonClient,
   createSessionTokenProvider,
-  DEFAULT_API_BASE_URL,
+  resolveAureonNetworkFromEnv,
   isAureonError,
 } from "../../src/index.js";
 
@@ -48,12 +49,15 @@ function log(step: string, data?: unknown): void {
 }
 
 async function main(): Promise<void> {
-  const baseUrl = process.env.AUREON_API_URL?.trim() || DEFAULT_API_BASE_URL;
+  const resolved = resolveAureonNetworkFromEnv();
+  const baseUrl = resolved.baseUrl;
   const apiKey = requireEnv("AUREON_API_KEY");
+  const chainId = Number(process.env.AUREON_CHAIN_ID ?? resolved.chainId);
   const rpcUrl =
     process.env.AUREON_RPC_URL?.trim() ||
-    "https://rpc.testnet.chain.robinhood.com";
-  const chainId = Number(process.env.AUREON_CHAIN_ID ?? 46630);
+    (chainId === 4663
+      ? "https://rpc.mainnet.chain.robinhood.com"
+      : "https://rpc.testnet.chain.robinhood.com");
 
   const account = privateKeyToAccount(loadPrivateKey());
   const publicClient = createPublicClient({ transport: http(rpcUrl) });
@@ -63,13 +67,14 @@ async function main(): Promise<void> {
   });
   const chain = {
     id: chainId,
-    name: "Robinhood Chain Testnet",
+    name: chainId === 4663 ? "Robinhood Chain" : "Robinhood Chain Testnet",
     nativeCurrency: { name: "Ether", symbol: "ETH", decimals: 18 },
     rpcUrls: { default: { http: [rpcUrl] } },
   } as const;
 
   const session = createSessionTokenProvider(null);
   const aureon = createAureonClient({
+    network: resolved.network,
     baseUrl,
     apiKey,
     getAccessToken: session.getAccessToken,

package/examples/full-aureon-loop/main.ts

@@ -0,0 +1,86 @@
+/**
+ * @fileoverview full AUREON loop (not a portfolio tracker).
+ *
+ * Env:
+ *   AUREON_API_KEY  issued developer key (required)
+ *   AUREON_NETWORK  optional; omit for mainnet (4663 / 8788); set testnet for public host (still 46630)
+ *   AUREON_API_URL  optional override (must match network if both set)
+ *
+ *   pnpm example:full-aureon-loop
+ */
+
+import {
+  createAureonClient,
+  resolveAureonNetworkFromEnv,
+  formatWeight,
+  isAureonError,
+  type FullAureonLoopFlow,
+} from "../../src/index.js";
+
+function printFlow(flow: FullAureonLoopFlow): void {
+  console.log("\n=== AUREON — Full loop (not a portfolio tracker) ===\n");
+
+  console.log(`User brief: "${flow.userBrief}"\n`);
+
+  console.log("1. Intent → objective");
+  console.log(`   Objective:  ${flow.phases.intent.objectiveName}`);
+  console.log(`   Policy:     ${flow.phases.intent.policySummary}`);
+  console.log(`   Mode:       ${flow.phases.intent.automationMode}`);
+  console.log(
+    `   Baseline:   ${flow.phases.intent.health.state} — ${formatWeight(flow.phases.intent.health.currentMetric)} vs ${formatWeight(flow.phases.intent.health.targetMetric)}`
+  );
+
+  console.log("\n2. Plan check — green book can still fail the plan");
+  console.log(
+    `   After shock: ${flow.phases.planCheck.afterShock.health.state} — ${formatWeight(flow.phases.planCheck.afterShock.health.currentMetric)} vs ${formatWeight(flow.phases.planCheck.afterShock.health.targetMetric)}`
+  );
+  console.log(
+    `   Paradox:     ${flow.phases.planCheck.afterShock.paradox.detected ? "yes" : "no"} — ${flow.phases.planCheck.afterShock.paradox.message}`
+  );
+
+  console.log("\n3. Drift → restore");
+  console.log(
+    `   Health:      ${flow.phases.driftRestore.healthBefore.state} → ${flow.phases.driftRestore.healthAfter.state}`
+  );
+  console.log(
+    `   Receipt:     ${flow.phases.driftRestore.settlement} — ${flow.phases.driftRestore.receipt.id}`
+  );
+
+  console.log("\n4. Receipt → verification");
+  console.log(
+    `   Valid:       ${flow.phases.verification.phases.validation.valid}`
+  );
+  console.log(`   Proof tier:  ${flow.phases.verification.proofTier}`);
+  console.log(`   Claim:       ${flow.phases.verification.phases.claimed.result}`);
+
+  console.log(`\n${flow.message}`);
+  console.log(
+    "\nWe're not building another portfolio tracker. Intent → plan → restore → verify.\n"
+  );
+}
+
+async function main(): Promise<void> {
+  const apiKey = process.env.AUREON_API_KEY?.trim();
+  if (!apiKey) {
+    throw new Error("Set AUREON_API_KEY to an issued developer key.");
+  }
+
+  const resolved = resolveAureonNetworkFromEnv();
+  const aureon = createAureonClient({
+    network: resolved.network,
+    baseUrl: resolved.baseUrl,
+    apiKey,
+  });
+
+  const flow = await aureon.runFullAureonLoopDemo();
+  printFlow(flow);
+}
+
+main().catch((error) => {
+  if (isAureonError(error)) {
+    console.error(`${error.code}: ${error.message}`);
+  } else {
+    console.error(error);
+  }
+  process.exitCode = 1;
+});