@emilia-protocol/sdk 0.9.0 → 0.11.0

package/dist/index.js

@@ -1,337 +1,13 @@
-/** EMILIA Protocol — Full SDK. Zero dependencies, native fetch. @license Apache-2.0 */
-// -- Error ------------------------------------------------------------------
-export class EPError extends Error {
-    status;
-    code;
-    constructor(message, status, code) {
-        super(message);
-        this.status = status;
-        this.code = code;
-        this.name = 'EPError';
-        Object.setPrototypeOf(this, new.target.prototype);
-    }
-}
-// -- Cloud Client -----------------------------------------------------------
-export class EPCloudClient {
-    _request;
-    /** @internal */
-    constructor(_request) {
-        this._request = _request;
-    }
-    /** Get pending signoffs, optionally filtered by entity, scope, or status. */
-    async getPendingSignoffs(filters) {
-        const qs = this._buildQs(filters);
-        return this._request('GET', `/api/cloud/signoffs/pending${qs}`, undefined, true);
-    }
-    /** Get the signoff queue with optional filtering. */
-    async getSignoffQueue(filters) {
-        const qs = this._buildQs(filters);
-        return this._request('GET', `/api/cloud/signoffs/queue${qs}`, undefined, true);
-    }
-    /** Get a dashboard summary of signoff activity over a date range. */
-    async getSignoffDashboard(dateRange) {
-        const qs = this._buildDateRangeQs(dateRange);
-        return this._request('GET', `/api/cloud/signoffs/dashboard${qs}`, undefined, true);
-    }
-    /** Get analytics for signoff activity with optional granularity. */
-    async getSignoffAnalytics(dateRange, granularity) {
-        const params = {};
-        if (dateRange?.from)
-            params['from'] = dateRange.from;
-        if (dateRange?.to)
-            params['to'] = dateRange.to;
-        if (granularity)
-            params['granularity'] = granularity;
-        const qs = this._toQs(params);
-        return this._request('GET', `/api/cloud/signoffs/analytics${qs}`, undefined, true);
-    }
-    /** Escalate a signoff challenge to another entity. */
-    async escalateSignoff(challengeId, escalateTo, reason) {
-        return this._request('POST', `/api/cloud/signoffs/${encodeURIComponent(challengeId)}/escalate`, {
-            escalateTo,
-            reason,
-        }, true);
-    }
-    /** Send a notification about a signoff challenge via the specified channel. */
-    async notifySignoff(challengeId, channel) {
-        return this._request('POST', `/api/cloud/signoffs/${encodeURIComponent(challengeId)}/notify`, {
-            channel,
-        }, true);
-    }
-    /** Search audit events by query string and optional filters. */
-    async searchEvents(query, filters) {
-        return this._request('POST', '/api/cloud/events/search', {
-            query,
-            filters,
-        }, true);
-    }
-    /** Get a chronological timeline of events for a specific handshake. */
-    async getEventTimeline(handshakeId) {
-        return this._request('GET', `/api/cloud/events/timeline/${encodeURIComponent(handshakeId)}`, undefined, true);
-    }
-    /** Export audit data in the specified format. */
-    async exportAudit(params) {
-        return this._request('POST', '/api/cloud/audit/export', params, true);
-    }
-    /** Generate an audit report for the given type and date range. */
-    async getAuditReport(reportType, dateRange) {
-        return this._request('POST', '/api/cloud/audit/report', {
-            reportType,
-            dateRange,
-        }, true);
-    }
-    /** Run an integrity check on the protocol data store. */
-    async checkIntegrity() {
-        return this._request('POST', '/api/cloud/integrity/check', undefined, true);
-    }
-    /** Simulate a policy against a hypothetical context without persisting any state. */
-    async simulatePolicy(policyId, context) {
-        return this._request('POST', `/api/cloud/policies/${encodeURIComponent(policyId)}/simulate`, {
-            context,
-        }, true);
-    }
-    /** Begin a rollout of a policy using the specified strategy. */
-    async rolloutPolicy(policyId, strategy, percentage) {
-        return this._request('POST', `/api/cloud/policies/${encodeURIComponent(policyId)}/rollout`, {
-            strategy,
-            percentage,
-        }, true);
-    }
-    /** List all versions of a policy. */
-    async getPolicyVersions(policyId) {
-        return this._request('GET', `/api/cloud/policies/${encodeURIComponent(policyId)}/versions`, undefined, true);
-    }
-    /** Diff two versions of a policy to see what changed. */
-    async diffPolicyVersions(policyId, versionA, versionB) {
-        return this._request('POST', `/api/cloud/policies/${encodeURIComponent(policyId)}/diff`, {
-            versionA,
-            versionB,
-        }, true);
-    }
-    /** @internal Build query string from SignoffFilters. */
-    _buildQs(filters) {
-        if (!filters)
-            return '';
-        const params = {};
-        if (filters.entityId)
-            params['entityId'] = filters.entityId;
-        if (filters.scope)
-            params['scope'] = filters.scope;
-        if (filters.status)
-            params['status'] = filters.status;
-        if (filters.limit !== undefined)
-            params['limit'] = String(filters.limit);
-        if (filters.offset !== undefined)
-            params['offset'] = String(filters.offset);
-        return this._toQs(params);
-    }
-    /** @internal Build query string from DateRange. */
-    _buildDateRangeQs(dateRange) {
-        if (!dateRange)
-            return '';
-        const params = {};
-        if (dateRange.from)
-            params['from'] = dateRange.from;
-        if (dateRange.to)
-            params['to'] = dateRange.to;
-        return this._toQs(params);
-    }
-    /** @internal Convert key-value pairs to a query string. */
-    _toQs(params) {
-        const entries = Object.entries(params).filter(([, v]) => v !== undefined && v !== '');
-        if (entries.length === 0)
-            return '';
-        return '?' + entries.map(([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(v)}`).join('&');
-    }
-}
-// -- Client -----------------------------------------------------------------
-export class EPClient {
-    baseUrl;
-    apiKey;
-    timeout;
-    retries;
-    /** Cloud-specific endpoints (dashboards, analytics, audit, policy management). */
-    cloud;
-    constructor(options) {
-        this.baseUrl = options.baseUrl.replace(/\/+$/, '');
-        this.apiKey = options.apiKey ?? '';
-        this.timeout = options.timeout ?? 10_000;
-        this.retries = options.retries ?? 2;
-        // Bind the internal request method for the cloud sub-client
-        this.cloud = new EPCloudClient(this.request.bind(this));
-    }
-    async request(method, path, body, auth = false) {
-        const url = `${this.baseUrl}${path}`;
-        const headers = {
-            'Content-Type': 'application/json',
-            'User-Agent': '@emilia-protocol/sdk/0.9.0',
-        };
-        if (auth && this.apiKey) {
-            headers['Authorization'] = `Bearer ${this.apiKey}`;
-        }
-        let lastErr;
-        for (let attempt = 0; attempt <= this.retries; attempt++) {
-            const ctrl = new AbortController();
-            const timer = setTimeout(() => ctrl.abort(), this.timeout);
-            try {
-                const res = await fetch(url, {
-                    method,
-                    headers,
-                    body: body !== undefined ? JSON.stringify(body) : undefined,
-                    signal: ctrl.signal,
-                });
-                const data = await res.json().catch(() => undefined);
-                if (!res.ok) {
-                    const p = data;
-                    const msg = typeof p?.['error'] === 'string' ? p['error'] : `EP API error: ${res.status}`;
-                    const code = typeof p?.['code'] === 'string' ? p['code'] : undefined;
-                    throw new EPError(msg, res.status, code);
-                }
-                return data;
-            }
-            catch (err) {
-                lastErr = err;
-                if (err instanceof EPError) {
-                    // Only retry on 5xx
-                    if (err.status && err.status < 500)
-                        throw err;
-                }
-                if (err instanceof Error && err.name === 'AbortError') {
-                    lastErr = new EPError(`Request timed out after ${this.timeout}ms`, undefined, 'timeout');
-                }
-                if (attempt === this.retries)
-                    break;
-            }
-            finally {
-                clearTimeout(timer);
-            }
-        }
-        if (lastErr instanceof EPError)
-            throw lastErr;
-        throw new EPError(lastErr instanceof Error ? lastErr.message : 'Unknown network error', undefined, 'network_error');
-    }
-    // ------------------------------------------------------------------
-    // Core protocol endpoints
-    // ------------------------------------------------------------------
-    /** List available trust policies. */
-    async listPolicies(params) {
-        const qs = params?.scope ? `?scope=${encodeURIComponent(params.scope)}` : '';
-        return this.request('GET', `/api/policies${qs}`);
-    }
-    /** Initiate a trust handshake between parties. */
-    async initiateHandshake(params) {
-        return this.request('POST', '/api/handshake/initiate', params, true);
-    }
-    /** Present credentials to a handshake. */
-    async present(handshakeId, params) {
-        return this.request('POST', `/api/handshake/${encodeURIComponent(handshakeId)}/present`, params, true);
-    }
-    /** Verify a handshake -- evaluate all presentations against policy. */
-    async verify(handshakeId) {
-        return this.request('POST', `/api/handshake/${encodeURIComponent(handshakeId)}/verify`, undefined, true);
-    }
-    /** Pre-action trust gate. Returns allow/deny/review with commit ref. */
-    async gate(params) {
-        return this.request('POST', '/api/gate', {
-            entity_id: params.entityId,
-            action: params.action,
-            policy: params.policy ?? 'standard',
-            handshake_id: params.handshakeId,
-            value_usd: params.valueUsd,
-            delegation_id: params.delegationId,
-        }, true);
-    }
-    /** Retrieve details of a specific handshake by ID. */
-    async getHandshake(handshakeId) {
-        return this.request('GET', `/api/handshake/${encodeURIComponent(handshakeId)}`, undefined, true);
-    }
-    /** Revoke an active handshake, invalidating all associated state. */
-    async revokeHandshake(handshakeId) {
-        return this.request('POST', `/api/handshake/${encodeURIComponent(handshakeId)}/revoke`, undefined, true);
-    }
-    /** Consume a handshake -- finalize and optionally bind a receipt. */
-    async consume(handshakeId, params) {
-        return this.request('POST', `/api/handshake/${encodeURIComponent(handshakeId)}/consume`, params, true);
-    }
-    // ------------------------------------------------------------------
-    // Signoff extension
-    // ------------------------------------------------------------------
-    /** Issue a signoff challenge for an entity. */
-    async issueChallenge(params) {
-        return this.request('POST', '/api/signoff/challenge', {
-            entity_id: params.entityId,
-            scope: params.scope,
-            context: params.context,
-        }, true);
-    }
-    /** Attest to a signoff challenge with a cryptographic signature. */
-    async attest(challengeId, params) {
-        return this.request('POST', `/api/signoff/${encodeURIComponent(challengeId)}/attest`, params, true);
-    }
-    /** Deny a signoff challenge with an optional reason. */
-    async denyChallenge(challengeId, reason) {
-        return this.request('POST', `/api/signoff/${encodeURIComponent(challengeId)}/deny`, reason !== undefined ? { reason } : undefined, true);
-    }
-    /** Revoke a previously granted signoff. */
-    async revokeSignoff(challengeId, options) {
-        return this.request('POST', `/api/signoff/${encodeURIComponent(challengeId)}/revoke`, options, true);
-    }
-    /** Consume a signoff -- mark it as used for a specific action. */
-    async consumeSignoff(signoffId, params) {
-        return this.request('POST', `/api/signoff/${encodeURIComponent(signoffId)}/consume`, params, true);
-    }
-    // ------------------------------------------------------------------
-    // Delegation
-    // ------------------------------------------------------------------
-    /** Create a trust delegation from one entity to another. */
-    async createDelegation(params) {
-        return this.request('POST', '/api/delegation', {
-            delegatorId: params.delegatorId,
-            delegateeId: params.delegateeId,
-            scope: params.scope,
-            policyId: params.policyId,
-            constraints: params.constraints,
-            expiresAt: params.expiresAt,
-        }, true);
-    }
-    /** Verify the validity of an existing delegation. */
-    async verifyDelegation(delegationId) {
-        return this.request('POST', `/api/delegation/${encodeURIComponent(delegationId)}/verify`, undefined, true);
-    }
-    // ------------------------------------------------------------------
-    // Commit
-    // ------------------------------------------------------------------
-    /** Issue a trust commit binding a handshake to a specific action. */
-    async issueCommit(params) {
-        return this.request('POST', '/api/commit', {
-            handshakeId: params.handshakeId,
-            action: params.action,
-            payload: params.payload,
-            binding: params.binding,
-        }, true);
-    }
-    /** Verify a previously issued commit. */
-    async verifyCommit(commitId) {
-        return this.request('POST', `/api/commit/${encodeURIComponent(commitId)}/verify`, undefined, true);
-    }
-    // ------------------------------------------------------------------
-    // Eye — Observation & Advisory
-    // ------------------------------------------------------------------
-    /** Record a behavioral or contextual observation for the Eye subsystem. */
-    async recordObservation(params) {
-        return this.request('POST', '/api/eye/observations', params, true);
-    }
-    /** Check an action against recorded observations and return an advisory. */
-    async checkAction(params) {
-        return this.request('POST', '/api/eye/check', params, true);
-    }
-    /** Retrieve an existing advisory by ID. */
-    async getAdvisory(advisoryId) {
-        return this.request('GET', `/api/eye/advisories/${encodeURIComponent(advisoryId)}`, undefined, true);
-    }
-    /** Create a suppression to exclude a reason code from future advisories. */
-    async createSuppression(params) {
-        return this.request('POST', '/api/eye/suppressions', params, true);
-    }
-}
+/**
+ * EMILIA Protocol TypeScript SDK.
+ *
+ * The package root intentionally re-exports the single supported client
+ * implementation. Keeping the entry point as a barrel prevents the public
+ * package contract from drifting away from the client exercised by the SDK
+ * tests and documented in the README.
+ *
+ * @license Apache-2.0
+ */
+export { EPClient } from './client.js';
+export * from './types.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uFAAuF;AA+evF,8EAA8E;AAE9E,MAAM,OAAO,OAAQ,SAAQ,KAAK;IAGd;IACA;IAHlB,YACE,OAAe,EACC,MAAe,EACf,IAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAS;QACf,SAAI,GAAJ,IAAI,CAAS;QAG7B,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,8EAA8E;AAE9E,MAAM,OAAO,aAAa;IAEK;IAD7B,gBAAgB;IAChB,YAA6B,QAAyF;QAAzF,aAAQ,GAAR,QAAQ,CAAiF;IAAG,CAAC;IAE1H,6EAA6E;IAC7E,KAAK,CAAC,kBAAkB,CAAC,OAAwB;QAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,QAAQ,CAA0B,KAAK,EAAE,8BAA8B,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5G,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,eAAe,CAAC,OAAwB;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAuB,KAAK,EAAE,4BAA4B,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACvG,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,mBAAmB,CAAC,SAAqB;QAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,QAAQ,CAAmB,KAAK,EAAE,gCAAgC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACvG,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,mBAAmB,CAAC,SAAqB,EAAE,WAA+C;QAC9F,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,IAAI,SAAS,EAAE,IAAI;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC;QACrD,IAAI,SAAS,EAAE,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC;QAC/C,IAAI,WAAW;YAAE,MAAM,CAAC,aAAa,CAAC,GAAG,WAAW,CAAC;QACrD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,QAAQ,CAAmB,KAAK,EAAE,gCAAgC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACvG,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,UAAkB,EAAE,MAAc;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAmB,MAAM,EAAE,uBAAuB,kBAAkB,CAAC,WAAW,CAAC,WAAW,EAAE;YAChH,UAAU;YACV,MAAM;SACP,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,OAAe;QACtD,OAAO,IAAI,CAAC,QAAQ,CAAqB,MAAM,EAAE,uBAAuB,kBAAkB,CAAC,WAAW,CAAC,SAAS,EAAE;YAChH,OAAO;SACR,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,OAAiC;QACjE,OAAO,IAAI,CAAC,QAAQ,CAAuB,MAAM,EAAE,0BAA0B,EAAE;YAC7E,KAAK;YACL,OAAO;SACR,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QACxC,OAAO,IAAI,CAAC,QAAQ,CAAgB,KAAK,EAAE,8BAA8B,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC/H,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,WAAW,CAAC,MAAyB;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAoB,MAAM,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3F,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,SAAoB;QAC3D,OAAO,IAAI,CAAC,QAAQ,CAAc,MAAM,EAAE,yBAAyB,EAAE;YACnE,UAAU;YACV,SAAS;SACV,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAuB,MAAM,EAAE,4BAA4B,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACpG,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,OAAgC;QACrE,OAAO,IAAI,CAAC,QAAQ,CAAyB,MAAM,EAAE,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,WAAW,EAAE;YACnH,OAAO;SACR,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,QAAgB,EAAE,UAAmB;QACzE,OAAO,IAAI,CAAC,QAAQ,CAAsB,MAAM,EAAE,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,UAAU,EAAE;YAC/G,QAAQ;YACR,UAAU;SACX,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QACtC,OAAO,IAAI,CAAC,QAAQ,CAAkB,KAAK,EAAE,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAChI,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,kBAAkB,CAAC,QAAgB,EAAE,QAAgB,EAAE,QAAgB;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAa,MAAM,EAAE,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,OAAO,EAAE;YACnG,QAAQ;YACR,QAAQ;SACT,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,wDAAwD;IAChD,QAAQ,CAAC,OAAwB;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,QAAQ;YAAE,MAAM,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC5D,IAAI,OAAO,CAAC,KAAK;YAAE,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;QACnD,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QACtD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,mDAAmD;IAC3C,iBAAiB,CAAC,SAAqB;QAC7C,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,IAAI,SAAS,CAAC,IAAI;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC;QACpD,IAAI,SAAS,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,2DAA2D;IACnD,KAAK,CAAC,MAA8B;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACtF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,OAAO,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtG,CAAC;CACF;AAED,8EAA8E;AAE9E,MAAM,OAAO,QAAQ;IACF,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,OAAO,CAAS;IAEjC,kFAAkF;IAClE,KAAK,CAAgB;IAErC,YAAY,OAAwB;QAClC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;QAEpC,4DAA4D;QAC5D,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,IAAc,EACd,IAAI,GAAG,KAAK;QAEZ,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACrC,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,4BAA4B;SAC3C,CAAC;QACF,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC;QACrD,CAAC;QAED,IAAI,OAAgB,CAAC;QACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAC3B,MAAM;oBACN,OAAO;oBACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC3D,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;gBACH,MAAM,IAAI,GAAY,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC9D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBACZ,MAAM,CAAC,GAAG,IAA2C,CAAC;oBACtD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAAC,MAAM,EAAE,CAAC;oBAC1F,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACrE,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC3C,CAAC;gBACD,OAAO,IAAS,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,GAAG,CAAC;gBACd,IAAI,GAAG,YAAY,OAAO,EAAE,CAAC;oBAC3B,oBAAoB;oBACpB,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;wBAAE,MAAM,GAAG,CAAC;gBAChD,CAAC;gBACD,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACtD,OAAO,GAAG,IAAI,OAAO,CAAC,2BAA2B,IAAI,CAAC,OAAO,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBAC3F,CAAC;gBACD,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO;oBAAE,MAAM;YACtC,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,YAAY,OAAO;YAAE,MAAM,OAAO,CAAC;QAC9C,MAAM,IAAI,OAAO,CACf,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,EACpE,SAAS,EACT,eAAe,CAChB,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,0BAA0B;IAC1B,qEAAqE;IAErE,qCAAqC;IACrC,KAAK,CAAC,YAAY,CAAC,MAA2B;QAC5C,MAAM,EAAE,GAAG,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAC,OAAO,CAAW,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,iBAAiB,CAAC,MAA+B;QACrD,OAAO,IAAI,CAAC,OAAO,CAAY,MAAM,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAClF,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,MAAqB;QACtD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,kBAAkB,kBAAkB,CAAC,WAAW,CAAC,UAAU,EAC3D,MAAM,EACN,IAAI,CACL,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,kBAAkB,kBAAkB,CAAC,WAAW,CAAC,SAAS,EAC1D,SAAS,EACT,IAAI,CACL,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,IAAI,CAAC,MAAkB;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAa,MAAM,EAAE,WAAW,EAAE;YACnD,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,UAAU;YACnC,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;SACnC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,kBAAkB,kBAAkB,CAAC,WAAW,CAAC,EAAE,EACnD,SAAS,EACT,IAAI,CACL,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,kBAAkB,kBAAkB,CAAC,WAAW,CAAC,SAAS,EAC1D,SAAS,EACT,IAAI,CACL,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,MAAsB;QACvD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,kBAAkB,kBAAkB,CAAC,WAAW,CAAC,UAAU,EAC3D,MAAM,EACN,IAAI,CACL,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,oBAAoB;IACpB,qEAAqE;IAErE,+CAA+C;IAC/C,KAAK,CAAC,cAAc,CAAC,MAA4B;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAmB,MAAM,EAAE,wBAAwB,EAAE;YACtE,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAAoB;QACpD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,gBAAgB,kBAAkB,CAAC,WAAW,CAAC,SAAS,EACxD,MAAM,EACN,IAAI,CACL,CAAC;IACJ,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,MAAe;QACtD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,gBAAgB,kBAAkB,CAAC,WAAW,CAAC,OAAO,EACtD,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,EAC7C,IAAI,CACL,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,aAAa,CAAC,WAAmB,EAAE,OAA8B;QACrE,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,gBAAgB,kBAAkB,CAAC,WAAW,CAAC,SAAS,EACxD,OAAO,EACP,IAAI,CACL,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,MAA4B;QAClE,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,UAAU,EACvD,MAAM,EACN,IAAI,CACL,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,aAAa;IACb,qEAAqE;IAErE,4DAA4D;IAC5D,KAAK,CAAC,gBAAgB,CAAC,MAA8B;QACnD,OAAO,IAAI,CAAC,OAAO,CAAa,MAAM,EAAE,iBAAiB,EAAE;YACzD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,gBAAgB,CAAC,YAAoB;QACzC,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,mBAAmB,kBAAkB,CAAC,YAAY,CAAC,SAAS,EAC5D,SAAS,EACT,IAAI,CACL,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,SAAS;IACT,qEAAqE;IAErE,qEAAqE;IACrE,KAAK,CAAC,WAAW,CAAC,MAAyB;QACzC,OAAO,IAAI,CAAC,OAAO,CAAS,MAAM,EAAE,aAAa,EAAE;YACjD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,eAAe,kBAAkB,CAAC,QAAQ,CAAC,SAAS,EACpD,SAAS,EACT,IAAI,CACL,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,+BAA+B;IAC/B,qEAAqE;IAErE,2EAA2E;IAC3E,KAAK,CAAC,iBAAiB,CAAC,MAA+B;QACrD,OAAO,IAAI,CAAC,OAAO,CAAsB,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1F,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,WAAW,CAAC,MAAyB;QACzC,OAAO,IAAI,CAAC,OAAO,CAAmB,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,WAAW,CAAC,UAAkB;QAClC,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,uBAAuB,kBAAkB,CAAC,UAAU,CAAC,EAAE,EACvD,SAAS,EACT,IAAI,CACL,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,iBAAiB,CAAC,MAA+B;QACrD,OAAO,IAAI,CAAC,OAAO,CAAsB,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1F,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,cAAc,YAAY,CAAC"}

package/dist/types.d.ts

@@ -318,6 +318,214 @@ export interface InstallPreflightResult {
     /** Legacy compatibility score — prefer decision field */
     score: number;
 }
+export type GuardActionType = 'benefit_bank_account_change' | 'benefit_address_change' | 'caseworker_override' | 'gov.vendor_payment_destination_change' | 'gov.disbursement_release' | 'gov.grant_disbursement' | 'gov.provider_enrollment_change' | 'gov.eligibility_override' | 'vendor_bank_account_change' | 'beneficiary_creation' | 'large_payment_release' | 'ai_agent_payment_action' | 'policy_rollout';
+export type GuardDecision = 'allow' | 'observe' | 'allow_with_signoff' | 'deny';
+export type GuardEnforcementMode = 'observe' | 'warn' | 'enforce';
+export type ReceiptStatus = 'issued' | 'pending_signoff' | 'approved_pending_consume' | 'rejected' | 'consumed' | 'denied';
+export interface GuardQuorumApprover {
+    role: string;
+    approver: string;
+}
+export interface GuardQuorumPolicy {
+    mode?: 'threshold' | 'ordered';
+    required: number;
+    approvers: GuardQuorumApprover[];
+}
+export interface CreateTrustReceiptParams {
+    /** Optional cross-check; the API derives the authorized organization from the authenticated key. */
+    organizationId?: string;
+    actionType: GuardActionType;
+    targetResourceId: string;
+    policyId?: string;
+    enforcementMode?: GuardEnforcementMode;
+    beforeState?: Record<string, unknown>;
+    afterState?: Record<string, unknown>;
+    targetChangedFields?: string[];
+    amount?: number;
+    currency?: string;
+    riskFlags?: string[];
+    actorRole?: string;
+    actorDepartment?: string;
+    businessHours?: boolean;
+    velocitySameActor24h?: number;
+    priorDenialsActor30d?: number;
+    priorChangesTarget30d?: number;
+    destinationAgeDays?: number;
+    quorumPolicy?: GuardQuorumPolicy;
+    metadata?: Record<string, unknown>;
+}
+export interface TrustReceipt {
+    receipt_id: string;
+    decision: GuardDecision;
+    observed_decision?: GuardDecision | null;
+    policy_id: string;
+    policy_hash: string;
+    action_hash: string;
+    before_state_hash?: string | null;
+    after_state_hash?: string | null;
+    nonce: string;
+    expires_at: string;
+    signoff_required: boolean;
+    signoff_request_id?: string | null;
+    risk_flags?: string[];
+    receipt_status: ReceiptStatus | string;
+    enforcement_mode: GuardEnforcementMode | string;
+    reasons?: string[];
+    canonical_action: Record<string, unknown>;
+}
+export interface TrustReceiptState {
+    receipt_id: string;
+    organization_id: string;
+    action_type: string;
+    decision: GuardDecision;
+    enforcement_mode: GuardEnforcementMode | string;
+    policy_id: string;
+    policy_hash: string;
+    action_hash: string;
+    before_state_hash?: string | null;
+    after_state_hash?: string | null;
+    expires_at: string;
+    signoff_required: boolean;
+    receipt_status: ReceiptStatus | string;
+    signoff_key_class?: 'A' | 'B' | 'C' | string | null;
+    timeline_event_count: number;
+}
+export interface RequestSignoffParams {
+    receiptId: string;
+    approverId?: string;
+    expiresInMinutes?: number;
+    comment?: string;
+}
+export interface SignoffRequest {
+    signoff_id?: string;
+    receipt_id: string;
+    action_hash: string;
+    initiator_id: string;
+    approver_id?: string;
+    expires_at: string;
+    status: 'pending' | string;
+    quorum?: {
+        mode: string;
+        required: number;
+        count: number;
+    };
+    signoffs?: Array<{
+        signoff_id: string;
+        role?: string;
+        approver_id: string;
+    }>;
+}
+export interface ConsumeTrustReceiptParams {
+    actionHash: string;
+    executingSystem: string;
+    executionReferenceId?: string;
+}
+export interface ConsumeTrustReceiptResult {
+    receipt_id: string;
+    status: 'consumed' | string;
+    consumed_at: string;
+    consumed_by_system: string;
+    execution_reference_id?: string | null;
+}
+export interface AttestExecutionParams {
+    executedAction: Record<string, unknown>;
+    observedAction: Record<string, unknown>;
+    executingSystem: string;
+    executionId?: string;
+    executedAt?: string;
+}
+export interface ExecutionAttestation {
+    receipt_id: string;
+    status: 'executed' | string;
+    binding_status: 'match' | 'drift' | string;
+    executed_action_hash: string;
+    approved_action_hash: string;
+    execution_integrity: Record<string, unknown>;
+}
+export interface TrustReceiptEvidence {
+    document: Record<string, unknown> | null;
+    public_key: string | null;
+    signed: boolean;
+    verify_with: string;
+    receipt_id: string;
+    organization_id: string;
+    action: {
+        type: string;
+        action_hash: string;
+        before_state_hash?: string | null;
+        after_state_hash?: string | null;
+    };
+    policy: {
+        id: string;
+        hash: string;
+        decision: string;
+        enforcement_mode: string;
+    };
+    signoff: {
+        required: boolean;
+        approver_id?: string | null;
+        approved_at?: string | null;
+        rejected_at?: string | null;
+        events: Array<{
+            event_type: string;
+            actor_id: string;
+            at: string;
+        }>;
+    };
+    consume: {
+        consumed_at?: string | null;
+        consumed_by_system?: string | null;
+        execution_reference_id?: string | null;
+    };
+    issued_at: string;
+    expires_at: string;
+    schema_version: string;
+    [key: string]: unknown;
+}
+export interface SignoffRequiredContext {
+    client: unknown;
+    receipt: TrustReceipt;
+    signoff?: SignoffRequest;
+}
+export interface RequireReceiptParams extends CreateTrustReceiptParams {
+    executingSystem: string;
+    executionReferenceId?: string;
+    approverId?: string;
+    signoffComment?: string;
+    signoffExpiresInMinutes?: number;
+    /**
+     * Called after a signoff request is created. Complete approval externally
+     * (for example a passkey/WebAuthn ceremony or operator workflow) before
+     * returning. If omitted, the SDK fails closed and does not run the mutation.
+     */
+    onSignoffRequired?: (ctx: SignoffRequiredContext) => Promise<void | boolean | {
+        approved?: boolean;
+    }>;
+    /** Legacy explicit execution report. Prefer observedAction for new integrations. */
+    executedAction?: Record<string, unknown> | ((ctx: {
+        receipt: TrustReceipt;
+        result: unknown;
+    }) => Record<string, unknown>);
+    /**
+     * Action fields independently observed by the executor after mutation. If
+     * omitted, no execution attestation is emitted.
+     */
+    observedAction?: Record<string, unknown> | ((ctx: {
+        receipt: TrustReceipt;
+        result: unknown;
+    }) => Record<string, unknown>);
+    executionId?: string | ((result: unknown) => string | undefined);
+    fetchEvidence?: boolean;
+}
+export interface RequireReceiptResult<T> {
+    result: T;
+    receipt: TrustReceipt;
+    signoff?: SignoffRequest;
+    consume: ConsumeTrustReceiptResult;
+    execution?: ExecutionAttestation;
+    executionStatus: 'attested' | 'unobserved';
+    evidence?: TrustReceiptEvidence;
+}
 /** A principal — the enduring actor behind one or more entities. */
 export interface Principal {
     principal_id: string;
@@ -366,15 +574,6 @@ export interface LineageResult {
         transfer_policy?: string;
     }>;
 }
-/** Result of a batch receipt submission. */
-export interface BatchReceiptResult {
-    results: Array<{
-        entity_id: string;
-        success: boolean;
-        receipt_id?: string;
-        error?: string;
-    }>;
-}
 /** Result of a bilateral receipt confirmation. */
 export interface ConfirmReceiptResult {
     receipt_id: string;
@@ -388,7 +587,7 @@ export interface TrustPolicyDefinition {
     description: string;
     min_confidence?: ConfidenceTier;
 }
-/** Public proof metrics from /api/stats. */
+/** Authenticated operator metrics from /api/stats. */
 export interface EPStats {
     total_entities: number;
     trust_surfaces: number;