@emilia-protocol/sdk 0.9.0 → 0.11.0

package/CHANGELOG.md

@@ -0,0 +1,9 @@
+<!-- SPDX-License-Identifier: Apache-2.0 -->
+# Changelog
+
+## 0.11.0 (2026-08-30)
+
+- Rebaseline supported client methods on current API route, verb, and request
+  contracts and add a machine-checked SDK route inventory.
+- Publish exact-action observation and execution-state types together with the
+  v1 receipt, signoff, consume-once, execution-attestation, and evidence flow.

package/README.md

@@ -61,13 +61,75 @@ const evaluation = await ep.trustEvaluate('merchant-xyz', 'strict');
 if (evaluation.decision !== 'allow') throw new Error(`Trust check failed: ${evaluation.reasons?.join(', ')}`);
 ```
 
+### Wrap a Dangerous Mutation
+
+`requireReceipt()` is the five-minute enforcement path: create a v1 trust
+receipt, require signoff when policy demands it, consume the receipt before the
+write, and run the mutation. It emits a post-mutation execution attestation only
+when the executor supplies independently observed action fields; it never treats
+the approved plan itself as proof of execution.
+
+```typescript
+const out = await ep.requireReceipt({
+  actionType: 'large_payment_release',
+  targetResourceId: 'payment_123',
+  afterState: { amount: 82000, currency: 'USD' },
+  amount: 82000,
+  currency: 'USD',
+  approverId: 'ap_controller_jane',
+  executingSystem: 'payments-api',
+
+  // Derive this from the system-of-record response or read-after-write result.
+  // If omitted, the mutation can complete but executionStatus is "unobserved".
+  observedAction: ({ result }) => ({
+    action_type: 'large_payment_release',
+    target_resource_id: result.payment_id,
+    amount: result.amount,
+    currency: result.currency,
+  }),
+
+  // Complete approval externally: passkey ceremony, operator queue, or poller.
+  // If omitted when signoff is required, the SDK fails closed and does not run.
+  onSignoffRequired: async ({ signoff }) => {
+    await waitForApprovedSignoff(signoff?.signoff_id);
+  },
+}, async () => {
+  return releasePayment('payment_123');
+});
+
+console.log(out.receipt.receipt_id);
+console.log(out.consume.status);             // "consumed"
+console.log(out.executionStatus);            // "attested" or "unobserved"
+console.log(out.execution?.binding_status);  // "match" or "drift"
+```
+
+For existing functions:
+
+```typescript
+const guardedRelease = ep.withReceipt(
+  (payment) => ({
+    actionType: 'large_payment_release',
+    targetResourceId: payment.id,
+    afterState: payment,
+    amount: payment.amount,
+    currency: payment.currency,
+    approverId: 'ap_controller_jane',
+    executingSystem: 'payments-api',
+    onSignoffRequired: ({ signoff }) => waitForApprovedSignoff(signoff?.signoff_id),
+  }),
+  releasePayment,
+);
+
+await guardedRelease({ id: 'payment_123', amount: 82000, currency: 'USD' });
+```
+
 ---
 
 ## Environment Variables
 
 | Variable | Description | Default |
 |---|---|---|
-| `EP_API_KEY` | Your EP API key (`ep_live_...`). Required for write operations. | — |
+| `EP_API_KEY` | Your EP API key (`ep_live_...`). Required for protected reads and write operations. | — |
 | `EP_BASE_URL` | Override the API base URL (useful for local dev). | `https://emiliaprotocol.ai` |
 
 You can also pass these directly to the constructor:
@@ -144,7 +206,8 @@ EP enforces a mandatory due process pipeline for every negative trust event:
 
 #### `ep.trustProfile(entityId)`
 
-Get an entity's full trust profile. This is the canonical EP read surface.
+Get the authenticated entity's full trust profile. This protected read is
+self-scoped by the server (operators may use their broader authorized scope).
 
 ```typescript
 const profile = await ep.trustProfile('merchant-xyz');
@@ -186,8 +249,6 @@ if (profile.anomaly) {
   console.warn(profile.anomaly.alert); // "Sudden drop: 23 points in 7 days"
 }
 
-// Legacy score (fallback only — prefer trust_profile for decisions)
-console.log(profile.compat_score); // 91
 ```
 
 ---
@@ -346,7 +407,7 @@ console.log(api_key);          // "ep_live_..." — store this securely!
 
 #### `ep.searchEntities(query, entityType?, minConfidence?)`
 
-Search for entities by name, capability, or category.
+Search for entities by name, capability, or category. Requires an API key.
 
 ```typescript
 const { entities } = await ep.searchEntities('payment', 'agent', 'confident');
@@ -358,7 +419,7 @@ for (const e of entities) {
 
 #### `ep.leaderboard(limit?, entityType?)`
 
-Get the leaderboard of top-trusted entities.
+Get the evidence/confidence-ordered entity leaderboard. Requires an API key.
 
 ```typescript
 // Top 5 merchants
@@ -401,32 +462,6 @@ console.log(receipt.receipt_id);   // "ep_rcpt_..."
 console.log(receipt.receipt_hash); // SHA-256 hash
 ```
 
-#### `ep.batchSubmit(receipts)`
-
-Submit up to 50 receipts in a single atomic call. Partial success is possible.
-
-```typescript
-const result = await ep.batchSubmit([
-  {
-    entity_id: 'merchant-a',
-    transaction_ref: 'tx-001',
-    transaction_type: 'purchase',
-    agent_behavior: 'completed',
-  },
-  {
-    entity_id: 'merchant-b',
-    transaction_ref: 'tx-002',
-    transaction_type: 'service',
-    agent_behavior: 'completed',
-  },
-]);
-
-result.results.forEach(r => {
-  if (r.success) console.log(`${r.entity_id}: receipt ${r.receipt_id}`);
-  else console.error(`${r.entity_id}: ${r.error}`);
-});
-```
-
 #### `ep.confirmReceipt(receiptId, confirm)`
 
 Bilateral confirmation — counterparty confirms or rejects a receipt within 48 hours. Confirmed receipts receive a higher provenance tier.
@@ -651,7 +686,7 @@ policies.forEach(p => {
 
 #### `ep.stats()`
 
-Public proof metrics.
+Authenticated operator proof metrics.
 
 ```typescript
 const stats = await ep.stats();
@@ -669,15 +704,6 @@ const health = await ep.health();
 console.log(health.status); // "ok"
 ```
 
-#### `ep.legacyScore(entityId)` (deprecated)
-
-Returns the 0-100 legacy compatibility score. Prefer `trustProfile()` for all new code.
-
-```typescript
-const { score } = await ep.legacyScore('merchant-xyz');
-console.log(score); // 91
-```
-
 ---
 
 ## Error Handling

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import type { EntityType, TrustPolicy, TrustContext, DisputeReason, ReportType, TrustDomain, EntityTrustProfile, TrustEvaluation, SubmitReceiptInput, SubmitReceiptResult, EntitySearchResult, Dispute, LeaderboardEntry, TrustGateResult, DelegationRecord, DomainScoreResult, InstallPreflightResult, PrincipalLookupResult, LineageResult, BatchReceiptResult, ConfirmReceiptResult, TrustPolicyDefinition, EPStats, EPClientOptions, EPCommitRequest, EPCommitVerification, EPCommitIssueResult, EPCommitStatusResult, EPCommitRevokeResult, EPCommitReceiptResult } from './types.js';
+import type { EntityType, TrustPolicy, TrustContext, DisputeReason, ReportType, TrustDomain, EntityTrustProfile, TrustEvaluation, SubmitReceiptInput, SubmitReceiptResult, EntitySearchResult, Dispute, LeaderboardEntry, TrustGateResult, DelegationRecord, DomainScoreResult, InstallPreflightResult, PrincipalLookupResult, LineageResult, ConfirmReceiptResult, TrustPolicyDefinition, EPStats, EPClientOptions, EPCommitRequest, EPCommitVerification, EPCommitIssueResult, EPCommitStatusResult, EPCommitRevokeResult, EPCommitReceiptResult, AttestExecutionParams, ConsumeTrustReceiptParams, ConsumeTrustReceiptResult, CreateTrustReceiptParams, ExecutionAttestation, RequireReceiptParams, RequireReceiptResult, RequestSignoffParams, SignoffRequest, TrustReceipt, TrustReceiptEvidence, TrustReceiptState } from './types.js';
 /**
  * Client for the EMILIA Protocol API.
  *
@@ -188,22 +188,6 @@ export declare class EPClient {
      * ```
      */
     submitReceipt(input: SubmitReceiptInput): Promise<SubmitReceiptResult>;
-    /**
-     * Submit multiple receipts atomically. Maximum 50 per call.
-     *
-     * Each result in the response array indicates success or failure for that
-     * receipt independently — partial success is possible.
-     *
-     * @example
-     * ```typescript
-     * const result = await ep.batchSubmit([
-     *   { entity_id: 'merchant-a', transaction_ref: 'tx-1', transaction_type: 'purchase', agent_behavior: 'completed' },
-     *   { entity_id: 'merchant-b', transaction_ref: 'tx-2', transaction_type: 'service', agent_behavior: 'completed' },
-     * ]);
-     * result.results.forEach(r => console.log(r.entity_id, r.success ? 'ok' : r.error));
-     * ```
-     */
-    batchSubmit(receipts: SubmitReceiptInput[]): Promise<BatchReceiptResult>;
     /**
      * Confirm or reject a receipt as the counterparty (bilateral confirmation).
      *
@@ -231,6 +215,40 @@ export declare class EPClient {
         anchored: boolean;
         verified: boolean;
     }>;
+    /**
+     * Create a v1 pre-action trust receipt for a high-risk mutation.
+     *
+     * The API derives organization scope from the authenticated API key. If
+     * `organizationId` is supplied here, the server treats it as a cross-check.
+     */
+    createTrustReceipt(params: CreateTrustReceiptParams): Promise<TrustReceipt>;
+    /** Read current receipt state from the append-only v1 audit timeline. */
+    getTrustReceipt(receiptId: string): Promise<TrustReceiptState>;
+    /** Request human signoff for a receipt that requires approval. */
+    requestSignoff(params: RequestSignoffParams): Promise<SignoffRequest>;
+    /**
+     * Consume a receipt before mutation. This is the reject-before-write gate:
+     * if this call fails, the SDK helper never runs the wrapped mutation.
+     */
+    consumeTrustReceipt(receiptId: string, params: ConsumeTrustReceiptParams): Promise<ConsumeTrustReceiptResult>;
+    /** Emit the post-mutation execution attestation bound to the consumed receipt. */
+    attestExecution(receiptId: string, params: AttestExecutionParams): Promise<ExecutionAttestation>;
+    /** Fetch the signed evidence packet, when the receipt is in a signable state. */
+    getTrustReceiptEvidence(receiptId: string): Promise<TrustReceiptEvidence>;
+    /**
+     * Five-minute adoption helper: wrap a dangerous mutation in the v1 receipt
+     * lifecycle. The mutation runs only after the receipt is created and consumed.
+     * If signoff is required, callers must complete it in `onSignoffRequired`.
+     */
+    requireReceipt<T>(params: RequireReceiptParams, mutate: (ctx: {
+        receipt: TrustReceipt;
+        consume: ConsumeTrustReceiptResult;
+    }) => Promise<T>): Promise<RequireReceiptResult<T>>;
+    /**
+     * Convenience wrapper for existing functions. The returned function resolves
+     * to the full receipt lifecycle result, not just the mutation return value.
+     */
+    withReceipt<TArgs extends unknown[], TResult>(params: RequireReceiptParams | ((...args: TArgs) => RequireReceiptParams), mutate: (...args: TArgs) => Promise<TResult>): (...args: TArgs) => Promise<RequireReceiptResult<TResult>>;
     /**
      * File a dispute against a receipt.
      *
@@ -444,7 +462,7 @@ export declare class EPClient {
         policies: TrustPolicyDefinition[];
     }>;
     /**
-     * Public proof metrics — entity count, test count, tool count, policy count.
+     * Authenticated operator metrics — entity count, test count, tool count, policy count.
      *
      * @example
      * ```typescript
@@ -524,17 +542,5 @@ export declare class EPClient {
      * ```
      */
     bindReceiptToCommit(commitId: string, receiptId: string): Promise<EPCommitReceiptResult>;
-    /**
-     * Legacy: get the 0-100 compatibility score for an entity.
-     *
-     * Prefer `trustProfile()` for all new integrations. This endpoint exists
-     * for backward compatibility only.
-     *
-     * @deprecated Use trustProfile() instead.
-     */
-    legacyScore(entityId: string): Promise<{
-        entity_id: string;
-        score: number;
-    }>;
 }
 //# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,UAAU,EACV,WAAW,EACX,YAAY,EAGZ,aAAa,EACb,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,OAAO,EACP,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,OAAO,EACP,eAAe,EAEf,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAyBpB;;;;;;;;;;;;;;GAcG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,OAAO,GAAE,eAAoB;YAoB3B,OAAO;IAmErB;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAMjE;;;;;;;;;;;;;;;OAeG;IACG,aAAa,CACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,WAAW,GAAG,MAAmB,EACzC,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,eAAe,CAAC;IAW3B;;;;;;;;;;;;;;;;OAgBG;IACG,SAAS,CAAC,OAAO,EAAE;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,eAAe,CAAC;IAa5B;;;;;;;;;;;;OAYG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAOxF;;;;;;;;;;;;;;;;OAgBG;IACG,gBAAgB,CACpB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,EAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,OAAO,CAAC,sBAAsB,CAAC;IAelC;;;;;;;;;;;;;;;;;OAiBG;IACG,cAAc,CAAC,OAAO,EAAE;QAC5B,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,UAAU,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAarF;;;;;;;;;;OAUG;IACG,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,UAAU,EACvB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC;QAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAA;KAAE,CAAC;IAU9C;;;;;;;;OAQG;IACG,WAAW,CACf,KAAK,SAAK,EACV,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC;QAAE,WAAW,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAa/C;;;;;;;;;;;;;;;;;;;;;OAqBG;IACG,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAQ5E;;;;;;;;;;;;;;OAcG;IACG,WAAW,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQ9E;;;;;;;;;;OAUG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAQxF;;;;;;;;OAQG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAC9C,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;IAQF;;;;;;;;;;;;;;;;;OAiBG;IACG,WAAW,CAAC,OAAO,EAAE;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,aAAa,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,OAAO,CAAC,OAAO,GAAG;QAAE,iBAAiB,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAatE;;;;;;;;;;OAUG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxD;;;;;;;;;;;;;OAaG;IACG,gBAAgB,CAAC,OAAO,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAYnD;;;;;;;;;OASG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAQzF;;;;;;;;;;;;;;;;OAgBG;IACG,aAAa,CAAC,OAAO,EAAE;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAY1F;;;;;;;;;;;;;;;OAeG;IACG,gBAAgB,CAAC,OAAO,EAAE;QAC9B,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,UAAU,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAgBxE;;;;;;;;;;;;;;;;;OAiBG;IACG,gBAAgB,CAAC,OAAO,EAAE;QAC9B,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACvC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAe7B;;;;;;;;OAQG;IACG,gBAAgB,CACpB,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,GAAG;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAU9F;;;;;;;;;;;OAWG;IACG,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAM1E;;;;;;;;;;;;;OAaG;IACG,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAUvD;;;;;;;;;;;;OAYG;IACG,YAAY,IAAI,OAAO,CAAC;QAAE,QAAQ,EAAE,qBAAqB,EAAE,CAAA;KAAE,CAAC;IAQpE;;;;;;;;OAQG;IACG,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC;IAI/B;;;;;;;;OAQG;IACG,MAAM,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAQnE;;;;;;;;;;;;;;;;;;OAkBG;IACG,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAQxE;;;;;;;;OAQG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAOnE;;;;;;;;OAQG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAMtE;;;;;;;OAOG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAQnF;;;;;;;OAOG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAQ9F;;;;;;;OAOG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAGnF"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,UAAU,EACV,WAAW,EACX,YAAY,EAGZ,aAAa,EACb,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,OAAO,EACP,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,OAAO,EACP,eAAe,EAEf,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,EACd,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAkDpB;;;;;;;;;;;;;;GAcG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,OAAO,GAAE,eAAoB;YAoB3B,OAAO;IA2ErB;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAOjE;;;;;;;;;;;;;;;OAeG;IACG,aAAa,CACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,WAAW,GAAG,MAAmB,EACzC,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,eAAe,CAAC;IAY3B;;;;;;;;;;;;;;;;OAgBG;IACG,SAAS,CAAC,OAAO,EAAE;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,eAAe,CAAC;IAc5B;;;;;;;;;;;;OAYG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAUxF;;;;;;;;;;;;;;;;OAgBG;IACG,gBAAgB,CACpB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,EAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,OAAO,CAAC,sBAAsB,CAAC;IAgBlC;;;;;;;;;;;;;;;;;OAiBG;IACG,cAAc,CAAC,OAAO,EAAE;QAC5B,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,UAAU,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAarF;;;;;;;;;;OAUG;IACG,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,UAAU,EACvB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC;QAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAA;KAAE,CAAC;IAW9C;;;;;;;;OAQG;IACG,WAAW,CACf,KAAK,SAAK,EACV,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC;QAAE,WAAW,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAc/C;;;;;;;;;;;;;;;;;;;;;OAqBG;IACG,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAQ5E;;;;;;;;;;OAUG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAQxF;;;;;;;;OAQG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAC9C,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;IAQF;;;;;OAKG;IACG,kBAAkB,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,YAAY,CAAC;IAQjF,yEAAyE;IACnE,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAOpE,kEAAkE;IAC5D,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC;IAa3E;;;OAGG;IACG,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,yBAAyB,CAAC;IAerC,kFAAkF;IAC5E,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,oBAAoB,CAAC;IAiBhC,iFAAiF;IAC3E,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAO/E;;;;OAIG;IACG,cAAc,CAAC,CAAC,EACpB,MAAM,EAAE,oBAAoB,EAC5B,MAAM,EAAE,CAAC,GAAG,EAAE;QAAE,OAAO,EAAE,YAAY,CAAC;QAAC,OAAO,EAAE,yBAAyB,CAAA;KAAE,KAAK,OAAO,CAAC,CAAC,CAAC,GACzF,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAmEnC;;;OAGG;IACH,WAAW,CAAC,KAAK,SAAS,OAAO,EAAE,EAAE,OAAO,EAC1C,MAAM,EAAE,oBAAoB,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,oBAAoB,CAAC,EACzE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,GAC3C,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAW7D;;;;;;;;;;;;;;;;;OAiBG;IACG,WAAW,CAAC,OAAO,EAAE;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,aAAa,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,OAAO,CAAC,OAAO,GAAG;QAAE,iBAAiB,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAatE;;;;;;;;;;OAUG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxD;;;;;;;;;;;;;OAaG;IACG,gBAAgB,CAAC,OAAO,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAYnD;;;;;;;;;OASG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAQzF;;;;;;;;;;;;;;;;OAgBG;IACG,aAAa,CAAC,OAAO,EAAE;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAY1F;;;;;;;;;;;;;;;OAeG;IACG,gBAAgB,CAAC,OAAO,EAAE;QAC9B,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,UAAU,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAgBxE;;;;;;;;;;;;;;;;;OAiBG;IACG,gBAAgB,CAAC,OAAO,EAAE;QAC9B,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACvC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAe7B;;;;;;;;OAQG;IACG,gBAAgB,CACpB,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,gBAAgB,GAAG;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAU9F;;;;;;;;;;;OAWG;IACG,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAO1E;;;;;;;;;;;;;OAaG;IACG,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAWvD;;;;;;;;;;;;OAYG;IACG,YAAY,IAAI,OAAO,CAAC;QAAE,QAAQ,EAAE,qBAAqB,EAAE,CAAA;KAAE,CAAC;IAQpE;;;;;;;;OAQG;IACG,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC;IAI/B;;;;;;;;OAQG;IACG,MAAM,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAQnE;;;;;;;;;;;;;;;;;;OAkBG;IACG,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAQxE;;;;;;;;OAQG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAOnE;;;;;;;;OAQG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAMtE;;;;;;;OAOG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAQnF;;;;;;;OAOG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAQ/F"}

package/dist/client.js

@@ -2,9 +2,33 @@
 // EMILIA Protocol — TypeScript Client
 // ============================================================================
 import { EPError } from './types.js';
-const SDK_VERSION = '1.0.0';
+const SDK_VERSION = '0.11.0';
 const DEFAULT_BASE_URL = 'https://emiliaprotocol.ai';
 const DEFAULT_TIMEOUT = 30_000;
+function trustReceiptBody(params) {
+    return {
+        organization_id: params.organizationId,
+        action_type: params.actionType,
+        target_resource_id: params.targetResourceId,
+        policy_id: params.policyId,
+        enforcement_mode: params.enforcementMode,
+        before_state: params.beforeState,
+        after_state: params.afterState,
+        target_changed_fields: params.targetChangedFields,
+        amount: params.amount,
+        currency: params.currency,
+        risk_flags: params.riskFlags,
+        actor_role: params.actorRole,
+        actor_department: params.actorDepartment,
+        business_hours: params.businessHours,
+        velocity_same_actor_24h: params.velocitySameActor24h,
+        prior_denials_actor_30d: params.priorDenialsActor30d,
+        prior_changes_target_30d: params.priorChangesTarget30d,
+        destination_age_days: params.destinationAgeDays,
+        quorum_policy: params.quorumPolicy,
+        metadata: params.metadata,
+    };
+}
 // ----------------------------------------------------------------------------
 // EPClient
 // ----------------------------------------------------------------------------
@@ -73,8 +97,16 @@ export class EPClient {
                 const payload = data;
                 const message = typeof payload?.['error'] === 'string'
                     ? payload['error']
-                    : `EP API error: ${res.status}`;
-                const code = typeof payload?.['code'] === 'string' ? payload['code'] : undefined;
+                    : typeof payload?.['detail'] === 'string'
+                        ? payload['detail']
+                        : typeof payload?.['title'] === 'string'
+                            ? payload['title']
+                            : `EP API error: ${res.status}`;
+                const code = typeof payload?.['code'] === 'string'
+                    ? payload['code']
+                    : typeof payload?.['type'] === 'string'
+                        ? payload['type'].split('/').pop()
+                        : undefined;
                 throw new EPError(message, res.status, code);
             }
             return data;
@@ -109,7 +141,7 @@ export class EPClient {
      * ```
      */
     async trustProfile(entityId) {
-        return this.request(`/api/trust/profile/${encodeURIComponent(entityId)}`);
+        return this.request(`/api/trust/profile/${encodeURIComponent(entityId)}`, { auth: true });
     }
     /**
      * Evaluate an entity against a named trust policy.
@@ -130,6 +162,7 @@ export class EPClient {
     async trustEvaluate(entityId, policy = 'standard', context) {
         return this.request('/api/trust/evaluate', {
             method: 'POST',
+            auth: true,
             body: {
                 entity_id: entityId,
                 policy,
@@ -157,6 +190,7 @@ export class EPClient {
     async trustGate(options) {
         return this.request('/api/trust/gate', {
             method: 'POST',
+            auth: true,
             body: {
                 entity_id: options.entityId,
                 action: options.action,
@@ -180,7 +214,10 @@ export class EPClient {
      * ```
      */
     async domainScore(entityId, domains) {
-        return this.request(`/api/trust/domain-score/${encodeURIComponent(entityId)}`, { params: domains?.length ? { domains: domains.join(',') } : undefined });
+        return this.request(`/api/trust/domain-score/${encodeURIComponent(entityId)}`, {
+            auth: true,
+            params: domains?.length ? { domains: domains.join(',') } : undefined,
+        });
     }
     /**
      * EP-SX: Software pre-action enforcement check (experimental).
@@ -202,6 +239,7 @@ export class EPClient {
     async installPreflight(entityId, policy, context) {
         return this.request('/api/trust/install-preflight', {
             method: 'POST',
+            auth: true,
             body: {
                 entity_id: entityId,
                 policy: policy ?? 'standard',
@@ -255,6 +293,7 @@ export class EPClient {
      */
     async searchEntities(query, entityType, minConfidence) {
         return this.request('/api/entities/search', {
+            auth: true,
             params: {
                 q: query,
                 type: entityType,
@@ -273,6 +312,7 @@ export class EPClient {
      */
     async leaderboard(limit = 10, entityType) {
         return this.request('/api/leaderboard', {
+            auth: true,
             params: {
                 limit: Math.min(limit, 50),
                 type: entityType,
@@ -311,28 +351,6 @@ export class EPClient {
             body: input,
         });
     }
-    /**
-     * Submit multiple receipts atomically. Maximum 50 per call.
-     *
-     * Each result in the response array indicates success or failure for that
-     * receipt independently — partial success is possible.
-     *
-     * @example
-     * ```typescript
-     * const result = await ep.batchSubmit([
-     *   { entity_id: 'merchant-a', transaction_ref: 'tx-1', transaction_type: 'purchase', agent_behavior: 'completed' },
-     *   { entity_id: 'merchant-b', transaction_ref: 'tx-2', transaction_type: 'service', agent_behavior: 'completed' },
-     * ]);
-     * result.results.forEach(r => console.log(r.entity_id, r.success ? 'ok' : r.error));
-     * ```
-     */
-    async batchSubmit(receipts) {
-        return this.request('/api/receipts/batch', {
-            method: 'POST',
-            auth: true,
-            body: { receipts: receipts.slice(0, 50) },
-        });
-    }
     /**
      * Confirm or reject a receipt as the counterparty (bilateral confirmation).
      *
@@ -364,6 +382,149 @@ export class EPClient {
         return this.request(`/api/verify/${encodeURIComponent(receiptId)}`);
     }
     // --------------------------------------------------------------------------
+    // v1 Trust Receipt Enforcement
+    // --------------------------------------------------------------------------
+    /**
+     * Create a v1 pre-action trust receipt for a high-risk mutation.
+     *
+     * The API derives organization scope from the authenticated API key. If
+     * `organizationId` is supplied here, the server treats it as a cross-check.
+     */
+    async createTrustReceipt(params) {
+        return this.request('/api/v1/trust-receipts', {
+            method: 'POST',
+            auth: true,
+            body: trustReceiptBody(params),
+        });
+    }
+    /** Read current receipt state from the append-only v1 audit timeline. */
+    async getTrustReceipt(receiptId) {
+        return this.request(`/api/v1/trust-receipts/${encodeURIComponent(receiptId)}`, { auth: true });
+    }
+    /** Request human signoff for a receipt that requires approval. */
+    async requestSignoff(params) {
+        return this.request('/api/v1/signoffs/request', {
+            method: 'POST',
+            auth: true,
+            body: {
+                receipt_id: params.receiptId,
+                approver_id: params.approverId,
+                expires_in_minutes: params.expiresInMinutes,
+                comment: params.comment,
+            },
+        });
+    }
+    /**
+     * Consume a receipt before mutation. This is the reject-before-write gate:
+     * if this call fails, the SDK helper never runs the wrapped mutation.
+     */
+    async consumeTrustReceipt(receiptId, params) {
+        return this.request(`/api/v1/trust-receipts/${encodeURIComponent(receiptId)}/consume`, {
+            method: 'POST',
+            auth: true,
+            body: {
+                action_hash: params.actionHash,
+                executing_system: params.executingSystem,
+                execution_reference_id: params.executionReferenceId,
+            },
+        });
+    }
+    /** Emit the post-mutation execution attestation bound to the consumed receipt. */
+    async attestExecution(receiptId, params) {
+        return this.request(`/api/v1/trust-receipts/${encodeURIComponent(receiptId)}/execution`, {
+            method: 'POST',
+            auth: true,
+            body: {
+                executed_action: params.executedAction,
+                observed_action: params.observedAction,
+                executing_system: params.executingSystem,
+                execution_id: params.executionId,
+                executed_at: params.executedAt,
+            },
+        });
+    }
+    /** Fetch the signed evidence packet, when the receipt is in a signable state. */
+    async getTrustReceiptEvidence(receiptId) {
+        return this.request(`/api/v1/trust-receipts/${encodeURIComponent(receiptId)}/evidence`, { auth: true });
+    }
+    /**
+     * Five-minute adoption helper: wrap a dangerous mutation in the v1 receipt
+     * lifecycle. The mutation runs only after the receipt is created and consumed.
+     * If signoff is required, callers must complete it in `onSignoffRequired`.
+     */
+    async requireReceipt(params, mutate) {
+        const receipt = await this.createTrustReceipt(params);
+        if (receipt.decision === 'deny' || receipt.receipt_status === 'denied') {
+            throw new EPError('EMILIA denied the action before execution', 403, 'receipt_denied');
+        }
+        let signoff;
+        if (receipt.signoff_required) {
+            if (!params.approverId && !params.quorumPolicy) {
+                throw new EPError('Receipt requires signoff; pass approverId or quorumPolicy', 409, 'missing_approver_id');
+            }
+            signoff = await this.requestSignoff({
+                receiptId: receipt.receipt_id,
+                approverId: params.approverId,
+                expiresInMinutes: params.signoffExpiresInMinutes,
+                comment: params.signoffComment,
+            });
+            if (!params.onSignoffRequired) {
+                throw new EPError('Receipt requires human signoff before the mutation can run', 409, 'signoff_required');
+            }
+            const signoffResult = await params.onSignoffRequired({ client: this, receipt, signoff });
+            if (signoffResult === false || (typeof signoffResult === 'object' && signoffResult?.approved === false)) {
+                throw new EPError('Human signoff was not approved', 403, 'signoff_rejected');
+            }
+        }
+        const consume = await this.consumeTrustReceipt(receipt.receipt_id, {
+            actionHash: receipt.action_hash,
+            executingSystem: params.executingSystem,
+            executionReferenceId: params.executionReferenceId,
+        });
+        const result = await mutate({ receipt, consume });
+        const explicitExecutedAction = typeof params.executedAction === 'function'
+            ? params.executedAction({ receipt, result })
+            : params.executedAction;
+        const observedAction = typeof params.observedAction === 'function'
+            ? params.observedAction({ receipt, result })
+            : params.observedAction ?? explicitExecutedAction;
+        let execution;
+        if (observedAction !== undefined) {
+            const executedAction = explicitExecutedAction ?? receipt.canonical_action;
+            const executionId = typeof params.executionId === 'function'
+                ? params.executionId(result)
+                : params.executionId;
+            execution = await this.attestExecution(receipt.receipt_id, {
+                executedAction,
+                observedAction,
+                executingSystem: params.executingSystem,
+                executionId,
+            });
+        }
+        const evidence = params.fetchEvidence
+            ? await this.getTrustReceiptEvidence(receipt.receipt_id)
+            : undefined;
+        return {
+            result,
+            receipt,
+            signoff,
+            consume,
+            execution,
+            executionStatus: execution ? 'attested' : 'unobserved',
+            evidence,
+        };
+    }
+    /**
+     * Convenience wrapper for existing functions. The returned function resolves
+     * to the full receipt lifecycle result, not just the mutation return value.
+     */
+    withReceipt(params, mutate) {
+        return async (...args) => {
+            const resolved = typeof params === 'function' ? params(...args) : params;
+            return this.requireReceipt(resolved, () => mutate(...args));
+        };
+    }
+    // --------------------------------------------------------------------------
     // Disputes & Due Process
     // --------------------------------------------------------------------------
     /**
@@ -572,7 +733,7 @@ export class EPClient {
      * ```
      */
     async principalLookup(principalId) {
-        return this.request(`/api/identity/principal/${encodeURIComponent(principalId)}`);
+        return this.request(`/api/identity/principal/${encodeURIComponent(principalId)}`, { auth: true });
     }
     /**
      * View entity lineage — predecessors, successors, and continuity decisions.
@@ -589,7 +750,7 @@ export class EPClient {
      * ```
      */
     async lineage(entityId) {
-        return this.request(`/api/identity/lineage/${encodeURIComponent(entityId)}`);
+        return this.request(`/api/identity/lineage/${encodeURIComponent(entityId)}`, { auth: true });
     }
     // --------------------------------------------------------------------------
     // Policies
@@ -608,13 +769,13 @@ export class EPClient {
      * ```
      */
     async listPolicies() {
-        return this.request('/api/policies');
+        return this.request('/api/policies', { auth: true });
     }
     // --------------------------------------------------------------------------
     // System
     // --------------------------------------------------------------------------
     /**
-     * Public proof metrics — entity count, test count, tool count, policy count.
+     * Authenticated operator metrics — entity count, test count, tool count, policy count.
      *
      * @example
      * ```typescript
@@ -623,7 +784,7 @@ export class EPClient {
      * ```
      */
     async stats() {
-        return this.request('/api/stats');
+        return this.request('/api/stats', { auth: true });
     }
     /**
      * Health check. Returns subsystem status.
@@ -725,16 +886,5 @@ export class EPClient {
             body: { receipt_id: receiptId },
         });
     }
-    /**
-     * Legacy: get the 0-100 compatibility score for an entity.
-     *
-     * Prefer `trustProfile()` for all new integrations. This endpoint exists
-     * for backward compatibility only.
-     *
-     * @deprecated Use trustProfile() instead.
-     */
-    async legacyScore(entityId) {
-        return this.request(`/api/score/${encodeURIComponent(entityId)}`);
-    }
 }
 //# sourceMappingURL=client.js.map