@buildaureon/sdk 0.1.8 → 0.1.10

package/docs/client-api.md

@@ -1,788 +1,788 @@
-# Client API Reference
-
-Complete reference for every public method on `AureonClient` as implemented in
-`src/client/aureon-client.ts`, plus factories and the session helper.
-
-Cross-links: [auth](./auth.md) | [architecture](./architecture.md) | [error-model](./error-model.md) |
-[data-contracts](./data-contracts.md) | [transport](./transport.md)
-
----
-
-## Table of contents
-
-1. [Construction](#1-construction)
-2. [Connectivity](#2-connectivity)
-3. [Authentication](#3-authentication)
-4. [Objectives](#4-objectives)
-5. [Health, timeline, portfolio, overview](#5-health-timeline-portfolio-overview)
-6. [Vault](#6-vault)
-7. [Market and execution](#7-market-and-execution)
-8. [Session helper](#8-session-helper)
-9. [Method → HTTP cheat sheet](#9-method--http-cheat-sheet)
-10. [Common error patterns](#10-common-error-patterns)
-
----
-
-## 1. Construction
-
-```ts
-import {
-  createAureonClient,
-  AureonClient,
-} from "@buildaureon/sdk";
-
-const aureon = createAureonClient({
-  // network defaults to mainnet (4663 / http://127.0.0.1:8788)
-  // network: "testnet" → public host (still chain 46630)
-  apiKey: process.env.AUREON_API_KEY,
-  getAccessToken: () => sessionToken,
-  timeoutMs: 30_000,
-  maxRetries: 2,
-});
-```
-
-### Options reference
-
-| Option | Required | Default | Description |
-|--------|----------|---------|-------------|
-| `network` | no | `mainnet` | `mainnet` = 4663 / `http://127.0.0.1:8788`. `testnet` = public host (still 46630). |
-| `baseUrl` | no | mainnet local API | Absolute `http://` or `https://` URL. Wins when set; mismatch with `network` throws. |
-| `apiKey` | SDK / CLI | N/A | Sent as `X-Aureon-Api-Key`. Issued developer keys also identify the bound wallet (no Bearer required). Env bootstrap keys are product-gate only. Utility uses wallet Bearer only. |
-| `getAccessToken` | no | N/A | Optional Bearer getter. Wins over API-key identity when present. |
-| `authToken` | no | N/A | Static Bearer string when `getAccessToken` is omitted. |
-| `timeoutMs` | no | `30000` | Per-attempt abort timeout. |
-| `maxRetries` | no | `0` | Extra attempts after first failure for retryable errors. |
-| `retryDelayMs` | no | `250` | Fixed delay between retries. |
-| `logger` | no | N/A | `AureonLogger`. |
-| `headers` | no | `{}` | Merged into every request. |
-| `fetch` | no | `globalThis.fetch` | Custom fetch for unusual runtimes. |
-
-### Construction rules
-
-| Rule | Behavior |
-|------|----------|
-| Omitted `network` and `baseUrl` | Local mainnet `http://127.0.0.1:8788`, chain 4663 |
-| `network: "testnet"` | Public `https://api.aureonlabs.network` (still 46630) |
-| Explicit `baseUrl` | Wins; infer network from known hosts |
-| `network` + disagreeing `baseUrl` | Throws |
-| Invalid `baseUrl` scheme | Throws via `assertBaseUrl` |
-| `aureon.network` / `aureon.chainId` | Resolved bundle |
-| Both `authToken` and `getAccessToken` | Transport uses `getAccessToken` only |
-| `aureon.baseUrl` getter | Returns resolved base (no trailing slash) |
-
-```mermaid
-flowchart LR
-  Opts[AureonClientOptions] --> Ctor[constructor]
-  Ctor --> ResolveToken{getAccessToken_provided}
-  ResolveToken -->|yes| UseGetter[use_getter]
-  ResolveToken -->|no_but_authToken| Wrap[wrap_authToken]
-  ResolveToken -->|neither| NoAuth[no_Bearer]
-  Ctor --> Transport[TransportOptions]
-```
-
----
-
-## 2. Connectivity
-
-### `ping()`
-
-```ts
-async ping(): Promise<{ ok: true; service: string; version: string }>
-```
-
-| | |
-|--|--|
-| Auth | No |
-| HTTP | `GET /healthz` |
-| Use | Boot checks, CLI smoke, CI health gate |
-| Errors | `NETWORK_ERROR`, `TIMEOUT`, `SERVER_ERROR` |
-
-```ts
-const { ok, service, version } = await aureon.ping();
-// { ok: true, service: "aureon-backend", version: "0.2.0" }
-```
-
----
-
-## 3. Authentication
-
-Deep narrative: [auth.md](./auth.md). Method cards below.
-
-### `getAuthNonce(address)`
-
-```ts
-async getAuthNonce(address: string): Promise<AuthNonceResponse>
-// AuthNonceResponse: { walletAddress, nonce, message, expiresAt }
-```
-
-| | |
-|--|--|
-| Auth | No |
-| HTTP | `GET /auth/nonce?address=<encoded>` |
-| Client validation | Empty/whitespace address → `VALIDATION_ERROR` |
-| Notes | Sign the returned `message` **exactly**. Do not build your own challenge. |
-
-### `verifyWallet({ address, message, signature })`
-
-```ts
-async verifyWallet(input: {
-  address: string;
-  message: string;
-  signature: string;
-}): Promise<AuthSessionResponse>
-// { token, walletAddress, expiresAt, sessionId, mode? }
-```
-
-| | |
-|--|--|
-| Auth | No (establishes auth) |
-| HTTP | `POST /auth/verify` |
-| Client validation | All three fields required after trim |
-| Host duty | Store `token`; feed via `getAccessToken` |
-
-### `devLogin()`
-
-```ts
-async devLogin(): Promise<AuthSessionResponse>
-```
-
-| | |
-|--|--|
-| Auth | No |
-| HTTP | `POST /auth/dev-login` |
-| Backend gate | `AUREON_ALLOW_DEV_LOGIN=1` |
-| Typical failure | Forbidden / unauthorized when flag off |
-| Notes | May include `mode: "dev-bypass"`. Never ship as sole product login. |
-
-### `logout()`
-
-```ts
-async logout(): Promise<{ ok: true }>
-```
-
-| | |
-|--|--|
-| Auth | Bearer recommended |
-| HTTP | `POST /auth/logout` |
-| Host duty | Also `session.clear()` / stop returning token |
-
-### `me()`
-
-```ts
-async me(): Promise<AuthMeResponse>
-// { walletAddress: string }
-```
-
-| | |
-|--|--|
-| Auth | **Required** |
-| HTTP | `GET /auth/me` |
-| Use | Session probe after hydrate |
-| Errors | `UNAUTHORIZED` when token missing/invalid |
-
----
-
-## 4. Objectives
-
-### Objective kinds and priorities
-
-| `ObjectiveKind` | Intent |
-|-----------------|--------|
-| `stable_allocation` | Hold a target stable weight (e.g. 20% USDG) |
-| `balanced_portfolio` | Hold balanced sleeve near a target weight |
-| `risk_ceiling` | Keep risk at or below configured ceiling |
-| `reward_reinvestment` | Reinvest rewards toward a target sleeve |
-
-| `ObjectivePriority` | Notes |
-|---------------------|-------|
-| `low` / `medium` / `high` / `critical` | Influences evaluation ordering when multiple objectives compete. Create defaults to `high`. |
-
-### `createObjective(input)`
-
-```ts
-async createObjective(input: CreateObjectiveInput): Promise<Objective>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `POST /objectives` |
-| Client validation | Name ≥ 3 chars; kind; `targetWeight` ∈ [0,1]; `tolerance` ∈ [0,0.5]; priority if set |
-| Automation | SDK supports **Automatic only**. Defaults **`automationMode: "auto"`**. Omit the field in agent integrations. |
-| `targetSymbol` | Required when `kind === "balanced_portfolio"` (uppercased on normalize). |
-
-**SDK policy:** Automatic mode only. Manual Approve belongs in the operator utility — do not build Manual agent loops with this package.
-
-```ts
-const objective = await aureon.createObjective({
-  name: "Maintain 20% Stable Assets",
-  kind: "stable_allocation",
-  targetWeight: 0.2,
-  tolerance: 0.02,
-  priority: "high",
-  // automationMode omitted → Automatic
-});
-
-const balanced = await aureon.createObjective({
-  name: "Hold 30% NVDA sleeve",
-  kind: "balanced_portfolio",
-  targetSymbol: "NVDA",
-  targetWeight: 0.3,
-  tolerance: 0.05,
-});
-```
-
-### `listObjectives()`
-
-```ts
-async listObjectives(): Promise<Objective[]>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `GET /objectives` |
-| Unwrap | `{ objectives: Objective[] }` → array |
-
-### `getObjective(id)`
-
-```ts
-async getObjective(id: string): Promise<Objective>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `GET /objectives/:id` |
-| Client validation | Id must be a non-trivial string (`assertId`) |
-| Errors | `NOT_FOUND`, `VALIDATION_ERROR` |
-
-### `updateObjective(id, input)`
-
-```ts
-async updateObjective(id: string, input: UpdateObjectiveInput): Promise<Objective>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `PATCH /objectives/:id` |
-| Body | Partial: name, priority, targetWeight, tolerance, maxRiskScore, reinvestRatio |
-| Locked at create | `targetSymbol`, `automationMode` — recreate the objective to change either |
-
-### `pauseObjective(id)` / `resumeObjective(id)`
-
-```ts
-async pauseObjective(id: string): Promise<Objective>
-async resumeObjective(id: string): Promise<Objective>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `POST /objectives/:id/pause` · `POST /objectives/:id/resume` |
-| Effect | Pause stops continuous evaluation; health typically reports `paused` |
-
-```mermaid
-stateDiagram-v2
-  [*] --> active: createObjective
-  active --> paused: pauseObjective
-  paused --> active: resumeObjective
-  active --> active: updateObjective
-```
-
----
-
-## 5. Health, timeline, portfolio, overview
-
-### `getHealth(objectiveId?)`
-
-```ts
-async getHealth(objectiveId?: string): Promise<ObjectiveHealth[]>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `GET /health` optional `?objectiveId=` |
-| Unwrap | `{ health }` |
-| States | `healthy` · `warning` · `violation` · `paused` |
-
-### `getTimeline(objectiveId?)`
-
-```ts
-async getTimeline(objectiveId?: string): Promise<TimelineEvent[]>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `GET /timeline` optional `?objectiveId=` |
-| Unwrap | `{ events }` |
-| Use | Operator narrative for launch video / audit |
-
-### `getPortfolio()`
-
-```ts
-async getPortfolio(): Promise<PortfolioSnapshot>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `GET /portfolio` |
-| Empty book | Valid: `positions.length === 0`, notional may be `0` |
-
-### `clearPortfolio()`
-
-```ts
-async clearPortfolio(): Promise<PortfolioSnapshot>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `POST /portfolio/clear` |
-| Unwrap | `{ portfolio }` → snapshot |
-| Notes | Clears wallet positions. Does **not** seed holdings. |
-
-### `syncPortfolio()`
-
-```ts
-async syncPortfolio(): Promise<SyncPortfolioResult>
-```
-
-| | |
-|--|--|
-| Auth | API key + Bearer |
-| HTTP | `POST /portfolio/sync` |
-| Returns | `{ portfolio, chainId, skippedZero }` |
-| Notes | On-chain balances for the session wallet. Vault balances merge into the book. Does **not** invent holdings. |
-
-### `getOverview()`
-
-```ts
-async getOverview(): Promise<DashboardOverview>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `GET /overview` |
-| Contains | Health counts, global score, 24h portfolio change (daily snapshots), evaluation schedule, recent executions + events |
-
-### `getAllocationVsTarget()`
-
-```ts
-async getAllocationVsTarget(): Promise<{
-  rows: AllocationComparisonRow[];
-  paradox: PlanParadoxResult;
-  overview: DashboardOverview;
-}>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | Composite — parallel `GET /overview`, `GET /objectives`, `GET /health` |
-| Returns | Per-objective current vs target weights plus a green-book/off-plan paradox flag |
-| Use | demo — objective vs actual portfolio without stitching JSON yourself |
-
-Helpers `buildAllocationComparison()` and `detectPlanParadox()` are exported for custom integrators. See `pnpm example:green-vs-plan`.
-
-### `applyFinancialIntent(intent)`
-
-```ts
-async applyFinancialIntent(intent: FinancialIntent): Promise<ObjectivePortfolioFlow>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | Composite — `POST /objectives` + watchdog refresh + `GET /health` + `GET /portfolio` |
-| Returns | Intent summary, created objective, health, portfolio snapshot, teaching message |
-| Use | AI → objective → portfolio in one call |
-
-### `getObjectivePortfolioFlow(objectiveId?)`
-
-```ts
-async getObjectivePortfolioFlow(objectiveId?: string): Promise<ObjectivePortfolioFlow[]>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | Composite — objectives + health + portfolio |
-| Returns | Flow snapshots for active objectives (or one id) |
-
-Helpers `parseFinancialIntent()`, `resolveObjectiveFromIntent()`, and `buildObjectivePortfolioFlow()` are exported. See `pnpm example:ai-to-objective-to-portfolio`.
-
-### `runDriftRestoreDemo()`
-
-```ts
-async runDriftRestoreDemo(): Promise<DriftRestoreFlow>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | Composite — portfolio seed, objective create, market event (`autoRestore: false`), restore plan, manual restore |
-| Returns | Three-beat `DriftRestoreFlow` — aligned → drift → restored |
-| Use | drift → detection → restore teaching demo |
-
-### `getDriftRestoreFlow(objectiveId?)`
-
-```ts
-async getDriftRestoreFlow(objectiveId?: string): Promise<DriftRestoreFlow[]>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | Composite — objectives + health + allocation + executions (+ restore plan when off-plan) |
-| Returns | Inferred drift-restore flows for active objectives |
-
-Helpers `buildDriftRestoreFlow()`, `buildDriftRestoreFlowFromSnapshot()`, and `inferDriftPhase()` are exported. See `pnpm example:drift-detect-restore`.
-
-### `runReceiptVerificationDemo()`
-
-```ts
-async runReceiptVerificationDemo(): Promise<ReceiptVerificationFlow>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | Composite — `runDriftRestoreDemo()` + local validation + settlement lookup + timeline |
-| Returns | Three-beat `ReceiptVerificationFlow` — claim → validate → verify |
-| Use | receipt → verification teaching demo |
-
-### `getReceiptVerificationFlow(executionId?)`
-
-```ts
-async getReceiptVerificationFlow(executionId?: string): Promise<ReceiptVerificationFlow[]>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | Composite — executions + validation + settlement + timeline |
-| Returns | Verification flows for recent or specified execution(s) |
-
-Helpers `buildReceiptVerificationFlow()`, `inferProofTier()`, and `validateExecutionReceipt()` are exported. See `pnpm example:receipt-verification`.
-
-### `runPortfolioWatchDemo(input?)`
-
-```ts
-async runPortfolioWatchDemo(input?: {
-  brief?: string;
-  host?: "cursor" | "claude" | "mcp";
-}): Promise<PortfolioWatchFlow>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | Composite — `applyFinancialIntent` + market event (`autoRestore: true`) + timeline |
-| Returns | Portfolio watch flow — register → while away → return briefing |
-| Use | agent-in-host demo |
-
-### `getPortfolioWatchFlow(input?)`
-
-```ts
-async getPortfolioWatchFlow(input?: {
-  objectiveId?: string;
-  brief?: string;
-  host?: "cursor" | "claude" | "mcp";
-}): Promise<PortfolioWatchFlow[]>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | Composite — Automatic objectives + health + allocation + timeline |
-| Returns | Read-only briefing for active Automatic objectives |
-
-Helpers `buildPortfolioWatchFlow()`, `DEFAULT_PORTFOLIO_WATCH_BRIEF`, and `inferPortfolioWatchPhase()` are exported. See `pnpm example:portfolio-watch`.
-
-### `runFullAureonLoopDemo(input?)`
-
-```ts
-async runFullAureonLoopDemo(input?: {
-  brief?: string;
-}): Promise<FullAureonLoopFlow>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | Composite — intent + allocation paradox + restore (`autoRestore: false`) + receipt verification |
-| Returns | Full loop — intent → plan check → restore → verify |
-| Use | Content Arc — full AUREON loop positioning demo |
-
-### `getFullAureonLoopFlow(input?)`
-
-```ts
-async getFullAureonLoopFlow(input?: {
-  objectiveId?: string;
-  brief?: string;
-}): Promise<FullAureonLoopFlow[]>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | Composite — objectives + allocation + latest receipt + validation |
-| Returns | Read-only full-loop flows for active objectives with receipts |
-
-Helpers `buildFullAureonLoopFlow()`, `DEFAULT_FULL_LOOP_BRIEF`, and `inferFullAureonLoopPhase()` are exported. See `pnpm example:full-aureon-loop`.
-
----
-
-## 6. Vault
-
-Vault reads and prepare endpoints. The API returns calldata **steps**; the host wallet signs and broadcasts, meaning the API never holds user keys.
-
-### `getVault()`
-
-```ts
-async getVault(): Promise<VaultOverview>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `GET /vault` |
-| Returns | `address`, `chainId`, `tokens`, `balances`, `poolAddress`, `explorerBase`, `keeperAddress` |
-
-### `getVaultStatus()`
-
-```ts
-async getVaultStatus(): Promise<VaultStatus>
-// { empty, totalNotionalUsd, canRestore }
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `GET /vault/status` |
-| Use | Compact funding signal before restore |
-
-### `prepareVaultDeposit({ symbol, amount })`
-
-```ts
-async prepareVaultDeposit(input: {
-  symbol: string; // "ETH" or any allowlisted ERC-20 (WETH, stables, …)
-  amount: string;
-}): Promise<VaultPrepareResult>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `POST /vault/prepare-deposit` body `{ symbol, amount }` |
-| ETH | Steps include `depositETH` (native value on step → vault WETH) |
-| ERC-20 | Steps include `approve` then `deposit` for any allowlisted symbol |
-| Host duty | Sign `steps` in order on `chainId`; broadcast each tx |
-
-### `prepareVaultWithdraw({ symbol?, amount })`
-
-```ts
-async prepareVaultWithdraw(input: {
-  symbol?: string;  // default "WETH"; any vault ERC-20 held by the user
-  amount: string;
-}): Promise<VaultPrepareResult>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `POST /vault/prepare-withdraw` body `{ symbol, amount }` |
-| Symbol | Any allowlisted vault ERC-20 (not native ETH, use WETH) |
-| Host duty | Sign and broadcast returned `steps` |
-
----
-
-## 7. Market and execution
-
-### Launch / rehearsal flow
-
-```mermaid
-sequenceDiagram
-  participant App
-  participant SDK
-  participant API
-
-  App->>SDK: listMarketPresets
-  API-->>App: presets
-  App->>SDK: applyMarketEvent autoRestore true
-  API-->>App: event + portfolio + health + executions
-  Note over API: may run vault or staged restore
-  App->>SDK: getTimeline
-  API-->>App: violation_detected execution_completed
-```
-
-### `listMarketPresets()`
-
-```ts
-async listMarketPresets(): Promise<MarketPreset[]>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `GET /market/presets` |
-| Unwrap | `{ presets }` |
-| Fields | `name`, `description`, `symbol`, `priceChangeRatio` |
-
-### `applyMarketEvent(input)`
-
-```ts
-async applyMarketEvent(input: ApplyMarketEventInput): Promise<{
-  event: MarketEvent;
-  portfolio: PortfolioSnapshot;
-  health: ObjectiveHealth[];
-  executions: ExecutionReceipt[];
-}>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `POST /market/events` |
-| Normalization | Uppercases symbol; `autoRestore` defaults **false** (must opt in to restore) |
-| Validation | Symbol required; finite `priceChangeRatio`; rejects extreme ≤ -0.95 |
-
-### `getRestorePlan(objectiveId)`
-
-```ts
-async getRestorePlan(objectiveId: string): Promise<RestorePlan>
-// { kind, amountHuman, approxUsd, message, sellSymbol?, buySymbol? }
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `GET /objectives/:id/restore-plan` |
-| Kinds | `wrap_eth` · `unwrap_weth` · `vault_swap` |
-| Use | Inspect plan before acting, noting that wrap/unwrap is client-side |
-
-### `runExecution(objectiveId)`
-
-```ts
-async runExecution(objectiveId: string): Promise<ExecutionReceipt>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `POST /executions/run` body `{ objectiveId }` |
-| Settlement | Receipt may include `settlement: "vault"` or `"staged"` |
-| Use | Restore when plan kind is `vault_swap` (rejects wrap/unwrap with action details) |
-
-### `restoreObjective(objectiveId)`
-
-```ts
-async restoreObjective(objectiveId: string): Promise<ExecutionReceipt>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `POST /objectives/:id/restore` |
-| Settlement | Vault-backed restore when configured; same honesty labels as `runExecution` |
-| Use | Preferred vault restore entry for Automatic objectives after breach |
-
-### `listExecutions(objectiveId?)`
-
-```ts
-async listExecutions(objectiveId?: string): Promise<ExecutionReceipt[]>
-```
-
-| | |
-|--|--|
-| Auth | Required |
-| HTTP | `GET /executions` optional `?objectiveId=` |
-| Unwrap | `{ executions }` |
-
----
-
-## 8. Session helper
-
-```ts
-import { createSessionTokenProvider } from "@buildaureon/sdk";
-
-const session = createSessionTokenProvider(initialToken?: string | null);
-session.getAccessToken(); // () => string | null
-session.setToken(token);
-session.clear();
-```
-
-| Method | Purpose |
-|--------|---------|
-| `getAccessToken` | Pass directly into `createAureonClient({ getAccessToken })` |
-| `setToken` | After `verifyWallet` / `devLogin` |
-| `clear` | After `logout` or local sign-out |
-
----
-
-## 9. Method → HTTP cheat sheet
-
-| Method | Verb | Path | Auth |
-|--------|------|------|------|
-| `ping` | GET | `/healthz` | no |
-| `getAuthNonce` | GET | `/auth/nonce` | no |
-| `verifyWallet` | POST | `/auth/verify` | no |
-| `devLogin` | POST | `/auth/dev-login` | no |
-| `logout` | POST | `/auth/logout` | recommended |
-| `me` | GET | `/auth/me` | **yes** |
-| `createObjective` | POST | `/objectives` | **yes** |
-| `listObjectives` | GET | `/objectives` | **yes** |
-| `getObjective` | GET | `/objectives/:id` | **yes** |
-| `updateObjective` | PATCH | `/objectives/:id` | **yes** |
-| `pauseObjective` | POST | `/objectives/:id/pause` | **yes** |
-| `resumeObjective` | POST | `/objectives/:id/resume` | **yes** |
-| `getHealth` | GET | `/health` | **yes** |
-| `getTimeline` | GET | `/timeline` | **yes** |
-| `getPortfolio` | GET | `/portfolio` | **yes** |
-| `setPortfolio` | PUT | `/portfolio` | **yes** |
-| `clearPortfolio` | POST | `/portfolio/clear` | **yes** |
-| `syncPortfolio` | POST | `/portfolio/sync` | **yes** |
-| `refreshWatchdog` | POST | `/watchdog/refresh` | **yes** |
-| `getOverview` | GET | `/overview` | **yes** |
-| `getAllocationVsTarget` | composite | overview + objectives + health | **yes** |
-| `applyFinancialIntent` | composite | create objective + health + portfolio | **yes** |
-| `getObjectivePortfolioFlow` | composite | objectives + health + portfolio | **yes** |
-| `runDriftRestoreDemo` | composite | seed + drift + manual restore | **yes** |
-| `getDriftRestoreFlow` | composite | objectives + health + allocation + executions | **yes** |
-| `runReceiptVerificationDemo` | composite | drift-restore + validate + settlement | **yes** |
-| `getReceiptVerificationFlow` | composite | executions + validation + settlement | **yes** |
-| `runPortfolioWatchDemo` | composite | intent + auto-restore market event + briefing | **yes** |
-| `getPortfolioWatchFlow` | composite | Automatic objectives + health + timeline | **yes** |
-| `runFullAureonLoopDemo` | composite | intent + plan paradox + restore + verify | **yes** |
-| `getFullAureonLoopFlow` | composite | objectives + allocation + receipt validation | **yes** |
-| `listMarketPresets` | GET | `/market/presets` | **yes** |
-| `applyMarketEvent` | POST | `/market/events` | **yes** |
-| `getRestorePlan` | GET | `/objectives/:id/restore-plan` | **yes** |
-| `restoreObjective` | POST | `/objectives/:id/restore` | **yes** |
-| `runExecution` | POST | `/executions/run` | **yes** |
-| `listExecutions` | GET | `/executions` | **yes** |
-| `getVault` | GET | `/vault` | **yes** |
-| `getVaultStatus` | GET | `/vault/status` | **yes** |
-| `prepareVaultDeposit` | POST | `/vault/prepare-deposit` | **yes** |
-| `prepareVaultWithdraw` | POST | `/vault/prepare-withdraw` | **yes** |
-
----
-
-## 10. Common error patterns
-
-| Situation | Typical `code` | Integrator action |
-|-----------|----------------|-------------------|
-| Forgot Bearer on protected route | `UNAUTHORIZED` | Re-login / fix `getAccessToken` |
-| Name too short on create | `VALIDATION_ERROR` | Fix form |
-| Unknown objective id | `NOT_FOUND` | Refresh list |
-| Backend restart mid-session | `UNAUTHORIZED` | Clear token, connect again |
-| Transient 503 | `SERVER_ERROR` | Retries if `maxRetries > 0` |
-| Offline | `NETWORK_ERROR` | Show connectivity banner |
-
-Full matrix: [error-model.md](./error-model.md).
+# Client API Reference
+
+Complete reference for every public method on `AureonClient` as implemented in
+`src/client/aureon-client.ts`, plus factories and the session helper.
+
+Cross-links: [auth](./auth.md) | [architecture](./architecture.md) | [error-model](./error-model.md) |
+[data-contracts](./data-contracts.md) | [transport](./transport.md)
+
+---
+
+## Table of contents
+
+1. [Construction](#1-construction)
+2. [Connectivity](#2-connectivity)
+3. [Authentication](#3-authentication)
+4. [Objectives](#4-objectives)
+5. [Health, timeline, portfolio, overview](#5-health-timeline-portfolio-overview)
+6. [Vault](#6-vault)
+7. [Market and execution](#7-market-and-execution)
+8. [Session helper](#8-session-helper)
+9. [Method → HTTP cheat sheet](#9-method--http-cheat-sheet)
+10. [Common error patterns](#10-common-error-patterns)
+
+---
+
+## 1. Construction
+
+```ts
+import {
+  createAureonClient,
+  AureonClient,
+} from "@buildaureon/sdk";
+
+const aureon = createAureonClient({
+  // network defaults to official API / mainnet
+  // network: "testnet" → stay on testnet on the same official host
+  apiKey: process.env.AUREON_API_KEY,
+  getAccessToken: () => sessionToken,
+  timeoutMs: 30_000,
+  maxRetries: 2,
+});
+```
+
+### Options reference
+
+| Option | Required | Default | Description |
+|--------|----------|---------|-------------|
+| `network` | no | `mainnet` | Omit for official API / mainnet. Pass `"testnet"` to stay on testnet. |
+| `baseUrl` | no | `https://api.aureonlabs.network` | Leave unset. Override only if you must point at another host. |
+| `apiKey` | SDK / CLI | N/A | Sent as `X-Aureon-Api-Key`. Issued developer keys also identify the bound wallet (no Bearer required). Env bootstrap keys are product-gate only. Utility uses wallet Bearer only. |
+| `getAccessToken` | no | N/A | Optional Bearer getter. Wins over API-key identity when present. |
+| `authToken` | no | N/A | Static Bearer string when `getAccessToken` is omitted. |
+| `timeoutMs` | no | `30000` | Per-attempt abort timeout. |
+| `maxRetries` | no | `0` | Extra attempts after first failure for retryable errors. |
+| `retryDelayMs` | no | `250` | Fixed delay between retries. |
+| `logger` | no | N/A | `AureonLogger`. |
+| `headers` | no | `{}` | Merged into every request. |
+| `fetch` | no | `globalThis.fetch` | Custom fetch for unusual runtimes. |
+
+### Construction rules
+
+| Rule | Behavior |
+|------|----------|
+| Omitted `network` and `baseUrl` | Official API `https://api.aureonlabs.network`, chain 4663 |
+| `network: "testnet"` | Same official host, chain 46630 |
+| Explicit `baseUrl` | Override; official host is allowed with either network |
+| `network` + disagreeing non-official host | Throws |
+| Invalid `baseUrl` scheme | Throws via `assertBaseUrl` |
+| `aureon.network` / `aureon.chainId` | Resolved bundle |
+| Both `authToken` and `getAccessToken` | Transport uses `getAccessToken` only |
+| `aureon.baseUrl` getter | Returns resolved base (no trailing slash) |
+
+```mermaid
+flowchart LR
+  Opts[AureonClientOptions] --> Ctor[constructor]
+  Ctor --> ResolveToken{getAccessToken_provided}
+  ResolveToken -->|yes| UseGetter[use_getter]
+  ResolveToken -->|no_but_authToken| Wrap[wrap_authToken]
+  ResolveToken -->|neither| NoAuth[no_Bearer]
+  Ctor --> Transport[TransportOptions]
+```
+
+---
+
+## 2. Connectivity
+
+### `ping()`
+
+```ts
+async ping(): Promise<{ ok: true; service: string; version: string }>
+```
+
+| | |
+|--|--|
+| Auth | No |
+| HTTP | `GET /healthz` |
+| Use | Boot checks, CLI smoke, CI health gate |
+| Errors | `NETWORK_ERROR`, `TIMEOUT`, `SERVER_ERROR` |
+
+```ts
+const { ok, service, version } = await aureon.ping();
+// { ok: true, service: "aureon-backend", version: "0.2.0" }
+```
+
+---
+
+## 3. Authentication
+
+Deep narrative: [auth.md](./auth.md). Method cards below.
+
+### `getAuthNonce(address)`
+
+```ts
+async getAuthNonce(address: string): Promise<AuthNonceResponse>
+// AuthNonceResponse: { walletAddress, nonce, message, expiresAt }
+```
+
+| | |
+|--|--|
+| Auth | No |
+| HTTP | `GET /auth/nonce?address=<encoded>` |
+| Client validation | Empty/whitespace address → `VALIDATION_ERROR` |
+| Notes | Sign the returned `message` **exactly**. Do not build your own challenge. |
+
+### `verifyWallet({ address, message, signature })`
+
+```ts
+async verifyWallet(input: {
+  address: string;
+  message: string;
+  signature: string;
+}): Promise<AuthSessionResponse>
+// { token, walletAddress, expiresAt, sessionId, mode? }
+```
+
+| | |
+|--|--|
+| Auth | No (establishes auth) |
+| HTTP | `POST /auth/verify` |
+| Client validation | All three fields required after trim |
+| Host duty | Store `token`; feed via `getAccessToken` |
+
+### `devLogin()`
+
+```ts
+async devLogin(): Promise<AuthSessionResponse>
+```
+
+| | |
+|--|--|
+| Auth | No |
+| HTTP | `POST /auth/dev-login` |
+| Backend gate | `AUREON_ALLOW_DEV_LOGIN=1` |
+| Typical failure | Forbidden / unauthorized when flag off |
+| Notes | May include `mode: "dev-bypass"`. Never ship as sole product login. |
+
+### `logout()`
+
+```ts
+async logout(): Promise<{ ok: true }>
+```
+
+| | |
+|--|--|
+| Auth | Bearer recommended |
+| HTTP | `POST /auth/logout` |
+| Host duty | Also `session.clear()` / stop returning token |
+
+### `me()`
+
+```ts
+async me(): Promise<AuthMeResponse>
+// { walletAddress: string }
+```
+
+| | |
+|--|--|
+| Auth | **Required** |
+| HTTP | `GET /auth/me` |
+| Use | Session probe after hydrate |
+| Errors | `UNAUTHORIZED` when token missing/invalid |
+
+---
+
+## 4. Objectives
+
+### Objective kinds and priorities
+
+| `ObjectiveKind` | Intent |
+|-----------------|--------|
+| `stable_allocation` | Hold a target stable weight (e.g. 20% USDG) |
+| `balanced_portfolio` | Hold balanced sleeve near a target weight |
+| `risk_ceiling` | Keep risk at or below configured ceiling |
+| `reward_reinvestment` | Reinvest rewards toward a target sleeve |
+
+| `ObjectivePriority` | Notes |
+|---------------------|-------|
+| `low` / `medium` / `high` / `critical` | Influences evaluation ordering when multiple objectives compete. Create defaults to `high`. |
+
+### `createObjective(input)`
+
+```ts
+async createObjective(input: CreateObjectiveInput): Promise<Objective>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `POST /objectives` |
+| Client validation | Name ≥ 3 chars; kind; `targetWeight` ∈ [0,1]; `tolerance` ∈ [0,0.5]; priority if set |
+| Automation | SDK supports **Automatic only**. Defaults **`automationMode: "auto"`**. Omit the field in agent integrations. |
+| `targetSymbol` | Required when `kind === "balanced_portfolio"` (uppercased on normalize). |
+
+**SDK policy:** Automatic mode only. Manual Approve belongs in the operator utility — do not build Manual agent loops with this package.
+
+```ts
+const objective = await aureon.createObjective({
+  name: "Maintain 20% Stable Assets",
+  kind: "stable_allocation",
+  targetWeight: 0.2,
+  tolerance: 0.02,
+  priority: "high",
+  // automationMode omitted → Automatic
+});
+
+const balanced = await aureon.createObjective({
+  name: "Hold 30% NVDA sleeve",
+  kind: "balanced_portfolio",
+  targetSymbol: "NVDA",
+  targetWeight: 0.3,
+  tolerance: 0.05,
+});
+```
+
+### `listObjectives()`
+
+```ts
+async listObjectives(): Promise<Objective[]>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `GET /objectives` |
+| Unwrap | `{ objectives: Objective[] }` → array |
+
+### `getObjective(id)`
+
+```ts
+async getObjective(id: string): Promise<Objective>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `GET /objectives/:id` |
+| Client validation | Id must be a non-trivial string (`assertId`) |
+| Errors | `NOT_FOUND`, `VALIDATION_ERROR` |
+
+### `updateObjective(id, input)`
+
+```ts
+async updateObjective(id: string, input: UpdateObjectiveInput): Promise<Objective>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `PATCH /objectives/:id` |
+| Body | Partial: name, priority, targetWeight, tolerance, maxRiskScore, reinvestRatio |
+| Locked at create | `targetSymbol`, `automationMode` — recreate the objective to change either |
+
+### `pauseObjective(id)` / `resumeObjective(id)`
+
+```ts
+async pauseObjective(id: string): Promise<Objective>
+async resumeObjective(id: string): Promise<Objective>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `POST /objectives/:id/pause` · `POST /objectives/:id/resume` |
+| Effect | Pause stops continuous evaluation; health typically reports `paused` |
+
+```mermaid
+stateDiagram-v2
+  [*] --> active: createObjective
+  active --> paused: pauseObjective
+  paused --> active: resumeObjective
+  active --> active: updateObjective
+```
+
+---
+
+## 5. Health, timeline, portfolio, overview
+
+### `getHealth(objectiveId?)`
+
+```ts
+async getHealth(objectiveId?: string): Promise<ObjectiveHealth[]>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `GET /health` optional `?objectiveId=` |
+| Unwrap | `{ health }` |
+| States | `healthy` · `warning` · `violation` · `paused` |
+
+### `getTimeline(objectiveId?)`
+
+```ts
+async getTimeline(objectiveId?: string): Promise<TimelineEvent[]>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `GET /timeline` optional `?objectiveId=` |
+| Unwrap | `{ events }` |
+| Use | Operator narrative for launch video / audit |
+
+### `getPortfolio()`
+
+```ts
+async getPortfolio(): Promise<PortfolioSnapshot>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `GET /portfolio` |
+| Empty book | Valid: `positions.length === 0`, notional may be `0` |
+
+### `clearPortfolio()`
+
+```ts
+async clearPortfolio(): Promise<PortfolioSnapshot>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `POST /portfolio/clear` |
+| Unwrap | `{ portfolio }` → snapshot |
+| Notes | Clears wallet positions. Does **not** seed holdings. |
+
+### `syncPortfolio()`
+
+```ts
+async syncPortfolio(): Promise<SyncPortfolioResult>
+```
+
+| | |
+|--|--|
+| Auth | API key + Bearer |
+| HTTP | `POST /portfolio/sync` |
+| Returns | `{ portfolio, chainId, skippedZero }` |
+| Notes | On-chain balances for the session wallet. Vault balances merge into the book. Does **not** invent holdings. |
+
+### `getOverview()`
+
+```ts
+async getOverview(): Promise<DashboardOverview>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `GET /overview` |
+| Contains | Health counts, global score, 24h portfolio change (daily snapshots), evaluation schedule, recent executions + events |
+
+### `getAllocationVsTarget()`
+
+```ts
+async getAllocationVsTarget(): Promise<{
+  rows: AllocationComparisonRow[];
+  paradox: PlanParadoxResult;
+  overview: DashboardOverview;
+}>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | Composite — parallel `GET /overview`, `GET /objectives`, `GET /health` |
+| Returns | Per-objective current vs target weights plus a green-book/off-plan paradox flag |
+| Use | demo — objective vs actual portfolio without stitching JSON yourself |
+
+Helpers `buildAllocationComparison()` and `detectPlanParadox()` are exported for custom integrators. See `pnpm example:green-vs-plan`.
+
+### `applyFinancialIntent(intent)`
+
+```ts
+async applyFinancialIntent(intent: FinancialIntent): Promise<ObjectivePortfolioFlow>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | Composite — `POST /objectives` + watchdog refresh + `GET /health` + `GET /portfolio` |
+| Returns | Intent summary, created objective, health, portfolio snapshot, teaching message |
+| Use | AI → objective → portfolio in one call |
+
+### `getObjectivePortfolioFlow(objectiveId?)`
+
+```ts
+async getObjectivePortfolioFlow(objectiveId?: string): Promise<ObjectivePortfolioFlow[]>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | Composite — objectives + health + portfolio |
+| Returns | Flow snapshots for active objectives (or one id) |
+
+Helpers `parseFinancialIntent()`, `resolveObjectiveFromIntent()`, and `buildObjectivePortfolioFlow()` are exported. See `pnpm example:ai-to-objective-to-portfolio`.
+
+### `runDriftRestoreDemo()`
+
+```ts
+async runDriftRestoreDemo(): Promise<DriftRestoreFlow>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | Composite — portfolio seed, objective create, market event (`autoRestore: false`), restore plan, manual restore |
+| Returns | Three-beat `DriftRestoreFlow` — aligned → drift → restored |
+| Use | drift → detection → restore teaching demo |
+
+### `getDriftRestoreFlow(objectiveId?)`
+
+```ts
+async getDriftRestoreFlow(objectiveId?: string): Promise<DriftRestoreFlow[]>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | Composite — objectives + health + allocation + executions (+ restore plan when off-plan) |
+| Returns | Inferred drift-restore flows for active objectives |
+
+Helpers `buildDriftRestoreFlow()`, `buildDriftRestoreFlowFromSnapshot()`, and `inferDriftPhase()` are exported. See `pnpm example:drift-detect-restore`.
+
+### `runReceiptVerificationDemo()`
+
+```ts
+async runReceiptVerificationDemo(): Promise<ReceiptVerificationFlow>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | Composite — `runDriftRestoreDemo()` + local validation + settlement lookup + timeline |
+| Returns | Three-beat `ReceiptVerificationFlow` — claim → validate → verify |
+| Use | receipt → verification teaching demo |
+
+### `getReceiptVerificationFlow(executionId?)`
+
+```ts
+async getReceiptVerificationFlow(executionId?: string): Promise<ReceiptVerificationFlow[]>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | Composite — executions + validation + settlement + timeline |
+| Returns | Verification flows for recent or specified execution(s) |
+
+Helpers `buildReceiptVerificationFlow()`, `inferProofTier()`, and `validateExecutionReceipt()` are exported. See `pnpm example:receipt-verification`.
+
+### `runPortfolioWatchDemo(input?)`
+
+```ts
+async runPortfolioWatchDemo(input?: {
+  brief?: string;
+  host?: "cursor" | "claude" | "mcp";
+}): Promise<PortfolioWatchFlow>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | Composite — `applyFinancialIntent` + market event (`autoRestore: true`) + timeline |
+| Returns | Portfolio watch flow — register → while away → return briefing |
+| Use | agent-in-host demo |
+
+### `getPortfolioWatchFlow(input?)`
+
+```ts
+async getPortfolioWatchFlow(input?: {
+  objectiveId?: string;
+  brief?: string;
+  host?: "cursor" | "claude" | "mcp";
+}): Promise<PortfolioWatchFlow[]>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | Composite — Automatic objectives + health + allocation + timeline |
+| Returns | Read-only briefing for active Automatic objectives |
+
+Helpers `buildPortfolioWatchFlow()`, `DEFAULT_PORTFOLIO_WATCH_BRIEF`, and `inferPortfolioWatchPhase()` are exported. See `pnpm example:portfolio-watch`.
+
+### `runFullAureonLoopDemo(input?)`
+
+```ts
+async runFullAureonLoopDemo(input?: {
+  brief?: string;
+}): Promise<FullAureonLoopFlow>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | Composite — intent + allocation paradox + restore (`autoRestore: false`) + receipt verification |
+| Returns | Full loop — intent → plan check → restore → verify |
+| Use | Content Arc — full AUREON loop positioning demo |
+
+### `getFullAureonLoopFlow(input?)`
+
+```ts
+async getFullAureonLoopFlow(input?: {
+  objectiveId?: string;
+  brief?: string;
+}): Promise<FullAureonLoopFlow[]>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | Composite — objectives + allocation + latest receipt + validation |
+| Returns | Read-only full-loop flows for active objectives with receipts |
+
+Helpers `buildFullAureonLoopFlow()`, `DEFAULT_FULL_LOOP_BRIEF`, and `inferFullAureonLoopPhase()` are exported. See `pnpm example:full-aureon-loop`.
+
+---
+
+## 6. Vault
+
+Vault reads and prepare endpoints. The API returns calldata **steps**; the host wallet signs and broadcasts, meaning the API never holds user keys.
+
+### `getVault()`
+
+```ts
+async getVault(): Promise<VaultOverview>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `GET /vault` |
+| Returns | `address`, `chainId`, `tokens`, `balances`, `poolAddress`, `explorerBase`, `keeperAddress` |
+
+### `getVaultStatus()`
+
+```ts
+async getVaultStatus(): Promise<VaultStatus>
+// { empty, totalNotionalUsd, canRestore }
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `GET /vault/status` |
+| Use | Compact funding signal before restore |
+
+### `prepareVaultDeposit({ symbol, amount })`
+
+```ts
+async prepareVaultDeposit(input: {
+  symbol: string; // "ETH" or any allowlisted ERC-20 (WETH, stables, …)
+  amount: string;
+}): Promise<VaultPrepareResult>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `POST /vault/prepare-deposit` body `{ symbol, amount }` |
+| ETH | Steps include `depositETH` (native value on step → vault WETH) |
+| ERC-20 | Steps include `approve` then `deposit` for any allowlisted symbol |
+| Host duty | Sign `steps` in order on `chainId`; broadcast each tx |
+
+### `prepareVaultWithdraw({ symbol?, amount })`
+
+```ts
+async prepareVaultWithdraw(input: {
+  symbol?: string;  // default "WETH"; any vault ERC-20 held by the user
+  amount: string;
+}): Promise<VaultPrepareResult>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `POST /vault/prepare-withdraw` body `{ symbol, amount }` |
+| Symbol | Any allowlisted vault ERC-20 (not native ETH, use WETH) |
+| Host duty | Sign and broadcast returned `steps` |
+
+---
+
+## 7. Market and execution
+
+### Launch / rehearsal flow
+
+```mermaid
+sequenceDiagram
+  participant App
+  participant SDK
+  participant API
+
+  App->>SDK: listMarketPresets
+  API-->>App: presets
+  App->>SDK: applyMarketEvent autoRestore true
+  API-->>App: event + portfolio + health + executions
+  Note over API: may run vault or staged restore
+  App->>SDK: getTimeline
+  API-->>App: violation_detected execution_completed
+```
+
+### `listMarketPresets()`
+
+```ts
+async listMarketPresets(): Promise<MarketPreset[]>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `GET /market/presets` |
+| Unwrap | `{ presets }` |
+| Fields | `name`, `description`, `symbol`, `priceChangeRatio` |
+
+### `applyMarketEvent(input)`
+
+```ts
+async applyMarketEvent(input: ApplyMarketEventInput): Promise<{
+  event: MarketEvent;
+  portfolio: PortfolioSnapshot;
+  health: ObjectiveHealth[];
+  executions: ExecutionReceipt[];
+}>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `POST /market/events` |
+| Normalization | Uppercases symbol; `autoRestore` defaults **false** (must opt in to restore) |
+| Validation | Symbol required; finite `priceChangeRatio`; rejects extreme ≤ -0.95 |
+
+### `getRestorePlan(objectiveId)`
+
+```ts
+async getRestorePlan(objectiveId: string): Promise<RestorePlan>
+// { kind, amountHuman, approxUsd, message, sellSymbol?, buySymbol? }
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `GET /objectives/:id/restore-plan` |
+| Kinds | `wrap_eth` · `unwrap_weth` · `vault_swap` |
+| Use | Inspect plan before acting, noting that wrap/unwrap is client-side |
+
+### `runExecution(objectiveId)`
+
+```ts
+async runExecution(objectiveId: string): Promise<ExecutionReceipt>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `POST /executions/run` body `{ objectiveId }` |
+| Settlement | Receipt may include `settlement: "vault"` or `"staged"` |
+| Use | Restore when plan kind is `vault_swap` (rejects wrap/unwrap with action details) |
+
+### `restoreObjective(objectiveId)`
+
+```ts
+async restoreObjective(objectiveId: string): Promise<ExecutionReceipt>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `POST /objectives/:id/restore` |
+| Settlement | Vault-backed restore when configured; same honesty labels as `runExecution` |
+| Use | Preferred vault restore entry for Automatic objectives after breach |
+
+### `listExecutions(objectiveId?)`
+
+```ts
+async listExecutions(objectiveId?: string): Promise<ExecutionReceipt[]>
+```
+
+| | |
+|--|--|
+| Auth | Required |
+| HTTP | `GET /executions` optional `?objectiveId=` |
+| Unwrap | `{ executions }` |
+
+---
+
+## 8. Session helper
+
+```ts
+import { createSessionTokenProvider } from "@buildaureon/sdk";
+
+const session = createSessionTokenProvider(initialToken?: string | null);
+session.getAccessToken(); // () => string | null
+session.setToken(token);
+session.clear();
+```
+
+| Method | Purpose |
+|--------|---------|
+| `getAccessToken` | Pass directly into `createAureonClient({ getAccessToken })` |
+| `setToken` | After `verifyWallet` / `devLogin` |
+| `clear` | After `logout` or local sign-out |
+
+---
+
+## 9. Method → HTTP cheat sheet
+
+| Method | Verb | Path | Auth |
+|--------|------|------|------|
+| `ping` | GET | `/healthz` | no |
+| `getAuthNonce` | GET | `/auth/nonce` | no |
+| `verifyWallet` | POST | `/auth/verify` | no |
+| `devLogin` | POST | `/auth/dev-login` | no |
+| `logout` | POST | `/auth/logout` | recommended |
+| `me` | GET | `/auth/me` | **yes** |
+| `createObjective` | POST | `/objectives` | **yes** |
+| `listObjectives` | GET | `/objectives` | **yes** |
+| `getObjective` | GET | `/objectives/:id` | **yes** |
+| `updateObjective` | PATCH | `/objectives/:id` | **yes** |
+| `pauseObjective` | POST | `/objectives/:id/pause` | **yes** |
+| `resumeObjective` | POST | `/objectives/:id/resume` | **yes** |
+| `getHealth` | GET | `/health` | **yes** |
+| `getTimeline` | GET | `/timeline` | **yes** |
+| `getPortfolio` | GET | `/portfolio` | **yes** |
+| `setPortfolio` | PUT | `/portfolio` | **yes** |
+| `clearPortfolio` | POST | `/portfolio/clear` | **yes** |
+| `syncPortfolio` | POST | `/portfolio/sync` | **yes** |
+| `refreshWatchdog` | POST | `/watchdog/refresh` | **yes** |
+| `getOverview` | GET | `/overview` | **yes** |
+| `getAllocationVsTarget` | composite | overview + objectives + health | **yes** |
+| `applyFinancialIntent` | composite | create objective + health + portfolio | **yes** |
+| `getObjectivePortfolioFlow` | composite | objectives + health + portfolio | **yes** |
+| `runDriftRestoreDemo` | composite | seed + drift + manual restore | **yes** |
+| `getDriftRestoreFlow` | composite | objectives + health + allocation + executions | **yes** |
+| `runReceiptVerificationDemo` | composite | drift-restore + validate + settlement | **yes** |
+| `getReceiptVerificationFlow` | composite | executions + validation + settlement | **yes** |
+| `runPortfolioWatchDemo` | composite | intent + auto-restore market event + briefing | **yes** |
+| `getPortfolioWatchFlow` | composite | Automatic objectives + health + timeline | **yes** |
+| `runFullAureonLoopDemo` | composite | intent + plan paradox + restore + verify | **yes** |
+| `getFullAureonLoopFlow` | composite | objectives + allocation + receipt validation | **yes** |
+| `listMarketPresets` | GET | `/market/presets` | **yes** |
+| `applyMarketEvent` | POST | `/market/events` | **yes** |
+| `getRestorePlan` | GET | `/objectives/:id/restore-plan` | **yes** |
+| `restoreObjective` | POST | `/objectives/:id/restore` | **yes** |
+| `runExecution` | POST | `/executions/run` | **yes** |
+| `listExecutions` | GET | `/executions` | **yes** |
+| `getVault` | GET | `/vault` | **yes** |
+| `getVaultStatus` | GET | `/vault/status` | **yes** |
+| `prepareVaultDeposit` | POST | `/vault/prepare-deposit` | **yes** |
+| `prepareVaultWithdraw` | POST | `/vault/prepare-withdraw` | **yes** |
+
+---
+
+## 10. Common error patterns
+
+| Situation | Typical `code` | Integrator action |
+|-----------|----------------|-------------------|
+| Forgot Bearer on protected route | `UNAUTHORIZED` | Re-login / fix `getAccessToken` |
+| Name too short on create | `VALIDATION_ERROR` | Fix form |
+| Unknown objective id | `NOT_FOUND` | Refresh list |
+| Backend restart mid-session | `UNAUTHORIZED` | Clear token, connect again |
+| Transient 503 | `SERVER_ERROR` | Retries if `maxRetries > 0` |
+| Offline | `NETWORK_ERROR` | Show connectivity banner |
+
+Full matrix: [error-model.md](./error-model.md).