@engramx/client 0.16.0-rc.12 → 0.16.0-rc.14

package/dist/types.d.ts

@@ -1,164 +1,53 @@
-import { Principal } from '@icp-sdk/core/principal';
-export type Role = {
-    Owner: null;
-} | {
-    Agent: null;
-} | {
-    Guardian: null;
-};
-export type AgentStatus = {
-    Active: null;
-} | {
-    Revoked: null;
-} | {
-    Resigned: null;
-};
-export interface AgentPermissions {
-    canReadMemory: boolean;
-    canAppendMemory: boolean;
-    canReadWallet: boolean;
-    callsPerMinute: bigint;
-    /** Bulk backup export (pull/list/metadata). Candid opt: [] = none. */
-    canReadBackup: [] | [boolean];
-    /**
-     * The Bools above are FROZEN — every FUTURE permission is a scope string here
-     * (converges with OAuth scope names). Candid opt: [] = no extended scopes.
-     */
-    scopes: [] | [string[]];
-}
-/** The stored form of an enrolment statement — see `AgentRecord.enrolment`. */
-export interface EnrolmentProof {
-    rootPubkey: Uint8Array;
-    enrolledKey: Principal;
-    inviteCode: string;
-    signature: Uint8Array;
-}
-/** ⟨2026-09-29⟩ Why an agent's engagement with an engram ended. Mirrors the engram's `AgentEndReason`. */
-export type AgentEndReason = {
-    OwnerRevoked: null;
-} | {
-    GuardianRevoked: null;
-} | {
-    KillSwitch: null;
-} | {
-    Reset: null;
-} | {
-    Resigned: null;
-};
-/** ⟨2026-09-29⟩ An ending as the engram keeps it — see `AgentRecord.ended`. */
-export interface AgentEnding {
-    reason: AgentEndReason;
-    day: bigint;
-}
+import type { Principal } from '@icp-sdk/core/principal';
+import type * as Engram from '@engramx/idl/engram';
+type Served = Engram._SERVICE;
+/** The `Ok` payload of a served method's reply — for replies the generator names by number. */
+type OkOf<M extends keyof Served> = Extract<Awaited<ReturnType<Served[M]>>, {
+    Ok: unknown;
+}>['Ok'];
+export type Role = Engram.Role;
+export type AgentStatus = Engram.AgentStatus;
+export type AgentPermissions = Engram.AgentPermissions;
+export type EnrolmentProof = Engram.EnrolmentProof;
+export type AgentEndReason = Engram.AgentEndReason;
+export type AgentEnding = Engram.AgentEnding;
+export type TrackRecordNotice = Engram.TrackRecordNotice;
+export type ChildAllowanceRow = Engram.ChildAllowanceRow;
+export type Pairing = Engram.Pairing;
+export type AgentRecord = Engram.AgentRecord;
+export type LogPosition = Engram.LogPosition;
+export type HeldKey = Engram.HeldKey;
+export type KeyNomination = Engram.KeyNomination;
+/** A memory file as stored: its content is the stored bytes (ciphertext on an encrypted engram). */
+export type RawMemoryFile = Engram.MemoryFile;
+/** One row of the engram's file listing (`listMemoryFiles`). */
+export type MemoryFileInfo = OkOf<'listMemoryFiles'>['items'][number];
+export type MemoryVersionSummary = Engram.MemoryVersionSummary;
+export type MemoryEviction = Engram.MemoryEviction;
+export type MemoryHistory = Engram.MemoryHistory;
+export type AuditEntry = Engram.AuditEntry;
 /**
- * ⟨2026-09-29⟩ Whether the registry put a new engagement on the agent's track record. `NotRecorded`
- * carries a plain sentence: why, whether it is expected, and what to do. The pairing itself
- * has succeeded either way. Mirrors the engram's `TrackRecordNotice`.
+ * A window of the engram's record, as the reader may see it: an agent reads in full only the entries
+ * it caused, and every other entry in the window comes back in `sealed` as a hash-only row (id, the
+ * SHA-256 of its body, its entry hash), so `items.length + sealed.length` is the window examined and
+ * the chain can be walked through it. `total` is how many entries the record has ever held,
+ * `ringFloor` the oldest id still retained, and `hashFirstFrom` where the record switched to the
+ * hash-first rule. ⟨2026-10-18: this said `items.length + withheld`; the owner's ruling 6B of
+ * 2026-10-14 replaced the count with the sealed rows.⟩
  */
-export type TrackRecordNotice = {
-    Recorded: null;
-} | {
-    NotRecorded: string;
-};
-/**
- * ⟨2026-10-01, the owner's ruling 2 A⟩ How many engrams of its own an agent may still open through
- * this engram, as the owner set it (`setChildAllowance`). `root` is the agent's lasting key — the key
- * that will own what it opens. Mirrors the engram's `ChildAllowanceRow`.
- */
-export interface ChildAllowanceRow {
-    root: Principal;
-    remaining: bigint;
-}
-/** ⟨2026-09-29⟩ `pairAgent`'s reply: the agent record and its track-record notice. */
-export interface Pairing {
-    agent: AgentRecord;
-    trackRecord: TrackRecordNotice;
-}
-export interface AgentRecord {
-    principal: Principal;
-    /**
-     * The agent this key belongs to: the principal of the root key that enrolled it (2026-09-28,
-     * owner decision: one root key per agent, with an enrolled key per client). The registry keeps
-     * the agent's track record under this.
-     */
-    root: Principal;
-    /**
-     * The enrolment statement that admitted this key, as the engram keeps it (2026-09-28, review
-     * finding OPS-1): the engram forwards it with every start it reports, so the registry verifies
-     * the root's consent itself instead of trusting the engram's word for the root. The invite code
-     * in it was burned at pairing.
-     */
-    enrolment: EnrolmentProof;
-    name: string;
-    /**
-     * When this key was paired (nanoseconds). Renamed from `registeredAt` 2026-09-29 by the
-     * vocabulary ruling: pairing is the one verb that admits an agent.
-     */
-    pairedAtNs: bigint;
-    lastSeenNs: bigint;
-    permissions: AgentPermissions;
-    status: AgentStatus;
-    /**
-     * ⟨2026-09-29⟩ How this key's engagement with the engram ended — why, and the start of the UTC day
-     * (nanoseconds) it ended — or empty while it is active. The engram keeps it so the owner's
-     * `resyncAgentEdges` can re-send an ending the registry never received. Candid `opt`.
-     */
-    ended: [] | [AgentEnding];
-    /**
-     * ⟨CORRECTED 2026-10-05⟩ Was `string | null`. The wire is Candid `opt text`, and this record is
-     * handed back as delivered, so a caller gets `[]` or `[hash]`, never null: `=== null` never
-     * fired and `?? fallback` never applied. The same correction was made that day on
-     * ApprovalRequest and BackupMetadata; the wire-mirror gate now compares option-ness too.
-     */
-    publicKeyHash: [] | [string];
-    /** ⟨2026-09-29⟩ Count a key replacement as well as a change of the recorded key hash. */
-    keyRotatedAtNs: bigint;
-    keyRotationCount: bigint;
-    /**
-     * ⟨2026-09-29, the owner's ruling of that date (follow-up 10)⟩ A replacement key this agent has
-     * nominated (`EngramClient.nominateAgentKey`) that has not yet accepted, and when (nanoseconds);
-     * empty when there is none. It expires 24 hours after it was made. Candid `opt`.
-     */
-    keyNomination: [] | [KeyNomination];
-    /**
-     * ⟨2026-09-29, review PR-6⟩ Where the engram's two logs stood when the key in use began to hold
-     * this record (at pairing, or at the replacement that moved it here). The agent reads the entries
-     * this key caused from here on, and none from before.
-     */
-    keyHeldFrom: LogPosition;
-    /**
-     * ⟨2026-09-29, review PR-6⟩ The keys this agent held on this engram before the one in use, oldest
-     * first (at most 16), each with the stretch of the logs it held the record for. The agent reads
-     * the entries each caused within its stretch, so a key replacement does not hide what it did
-     * before.
-     */
-    earlierKeys: HeldKey[];
-}
-/** ⟨2026-09-29, review PR-6⟩ The ids the next entries of the chained record and the read log get. */
-export interface LogPosition {
-    record: bigint;
-    reads: bigint;
-}
-/** ⟨2026-09-29, review PR-6⟩ A key an agent held, from `from` (inclusive) to `until` (exclusive). */
-export interface HeldKey {
-    key: Principal;
-    from: LogPosition;
-    until: LogPosition;
-}
-/** ⟨2026-09-29, follow-up 10⟩ A pending key nomination — see `AgentRecord.keyNomination`. */
-export interface KeyNomination {
-    key: Principal;
-    atNs: bigint;
-}
-/** Internal wire type — raw bytes as stored on-canister (plaintext; see encryption.ts) */
-export interface RawMemoryFile {
-    path: string;
-    content: Uint8Array;
-    version: bigint;
-    lastModifiedBy: Principal;
-    lastModifiedAtNs: bigint;
-}
-/** Public type — content decoded to a UTF-8 string (no decryption; see encryption.ts) */
+export type AuditPage = OkOf<'listAuditEntries'>;
+/** The engram's public self-description — `about()`. The owner and the cycles balance are not in
+ *  it (the owner read is gated): read them from `getOwnerConsole()`. */
+export type EngramStatus = Engram.About;
+export type OwnerConsole = Engram.OwnerConsole;
+export type GuardianPermissions = Engram.GuardianPermissions;
+export type GuardianRecord = Engram.GuardianRecord;
+export type BackupType = Engram.BackupType;
+export type BackupStatus = Engram.BackupStatus;
+export type BackupMetadata = Engram.BackupMetadata;
+export type ApprovalStatus = Engram.ApprovalStatus;
+export type ApprovalRequest = Engram.ApprovalRequest;
+/** A memory file with its content decoded to text (decrypted first on an encrypted engram). */
 export interface MemoryFile {
     path: string;
     content: string;
@@ -166,11 +55,6 @@ export interface MemoryFile {
     lastModifiedBy: Principal;
     lastModifiedAtNs: bigint;
 }
-export interface MemoryFileInfo {
-    path: string;
-    version: bigint;
-    lastModifiedAtNs: bigint;
-}
 /**
  * Result of `startSession()` — the engram's memory assembled for injection at the start of an agent
  * session. `files` are newest-modified first and decrypted; `truncated` is true when the byte cap was
@@ -183,297 +67,10 @@ export interface SessionContext {
     totalBytes: number;
     truncated: boolean;
 }
-/**
- * What a recorded version commits to.
- *
- * BREAKING at 0.14.0: versions no longer carry content. The previous shape returned a full
- * snapshot per version, truncated at 100 KB with no flag — so a large file's history was a set
- * of prefixes that could not be restored from and could not be told apart from complete ones.
- * What a version now carries is its commitment: `size` and `contentRoot`. Read the bytes of a
- * particular version with `readMemoryAt(path, version)`.
- */
-export interface MemoryVersionSummary {
-    version: bigint;
-    /** Position in the engram's single event chain — the ordering authority across all files. */
-    seq: bigint;
-    kind: {
-        set: null;
-    } | {
-        append: null;
-    } | {
-        restore: null;
-    } | {
-        tombstone: null;
-    };
-    by: Principal;
-    atNs: bigint;
-    size: bigint;
-    /** 32-byte hash the record commits to. Anyone holding the bytes can check them against it. */
-    contentRoot: Uint8Array;
-}
-/**
- * A disclosed byte eviction. The record and the hash always survive, so a reader learns that a
- * range's BYTES were reclaimed rather than having to notice their absence. `evictSeq` names the
- * chain position where the engram confessed it, and `evictedRoot` is what that confession
- * committed to.
- */
-export interface MemoryEviction {
-    fromVersion: bigint;
-    toVersion: bigint;
-    evictSeq: bigint;
-    evictedRoot: Uint8Array;
-    trigger: {
-        perFileCap: null;
-    } | {
-        globalCap: null;
-    } | {
-        policy: null;
-    } | {
-        thinTail: null;
-    } | {
-        thinLogSpaced: null;
-    };
-    cause: {
-        maxVersions: null;
-    } | {
-        maxBytes: null;
-    };
-}
-/**
- * One page of a file's history.
- *
- * `everCount` vs `retainedCount` is the point: when they differ, bytes were reclaimed and
- * `evictions` says which range and under what disclosure. Silent eviction is not representable.
- */
-export interface MemoryHistory {
-    versions: MemoryVersionSummary[];
-    everCount: bigint;
-    retainedCount: bigint;
-    oldestRetainedVersion: bigint;
-    evictedCount: bigint;
-    evictions: MemoryEviction[];
-}
-/** One page of a file's bytes. `more` discloses the server's per-call clamp. */
+/** One page of a file's bytes, as a Uint8Array. `more` discloses the server's per-call clamp. */
 export interface MemoryRangePage {
     bytes: Uint8Array;
     fileSize: bigint;
     more: boolean;
 }
-export interface Account {
-    owner: Principal;
-    subaccount: Uint8Array | null;
-}
-export interface AuditEntry {
-    id: bigint;
-    timestampNs: bigint;
-    caller: Principal;
-    callerRole: Role;
-    operation: string;
-    details: string;
-    success: boolean;
-}
-/**
- * A window of the engram's record, as the reader may see it. ⟨2026-09-29, owner ruling follow-up 16
- * (B)⟩ An agent reads only the entries it caused; the owner and guardians read everything. So
- * `withheld` counts the entries in the window this reader was not shown, and `items.length +
- * withheld` is the window examined: a page with `withheld > 0` is not the whole record. `total` is
- * how many entries the record has ever held (the same number the public certified head publishes).
- * WHAT WOULD MAKE THIS WRONG: a reader handed only `items` — which is why `readAuditLog` returns this
- * page and not the bare array it used to.
- */
-export interface AuditPage {
-    items: AuditEntry[];
-    total: bigint;
-    withheld: bigint;
-}
-/**
- * ⚠ **STALE AS OF 2026-08-24 — this type no longer describes what the canister returns, and the
- * three fields below carrying that news are the reason.** `EngramClient.status()` calls
- * `about()` (the engram's `status()` was split into `about()` + `getOwnerConsole()` in the 0.16.0
- * cut), and `About` carries NO `owner`, NO `authorized` and NO `cyclesBalance`. Measured against
- * `src/engram/engram.did` on 2026-08-24, not inferred.
- *
- * Left declared rather than retyped because the retype is not local: `migrate.ts`'s
- * `hasValidPairing` returns `status.authorized`, which is now `undefined` — falsy — so every
- * caller reads as UNPAIRED. Removing the field here without fixing that call site turns a silent
- * wrong answer into a compile error in a file this change does not own; both need to move
- * together. Named here so the next reader does not mistake this for a description of the wire.
- *
- * ⟨RESOLVED 2026-10-05⟩ The banner above describes a past state: all three fields are now gone.
- * `authorized` went on 2026-08-25 (its note is below). `owner` and `cyclesBalance` stayed declared
- * until the v0.16.0-rc.1 release workflow failed to build the OpenClaw plugin, which still read
- * `status.authorized`. The same plugin command read `status.cyclesBalance.length`. Against a real
- * `about()` reply that is a TypeError, not a blank line, and tsc could not see it, because the
- * actor is `ActorSubclass<any>` and this declaration is the only thing standing between a reader
- * and the wire. Every field left here is one `type About` serves, compared field by field with
- * `src/engram/engram.did`. test/wire-mirror.test.ts checks the same thing against the generated
- * factory and fails on any declared field the reply does not carry. Read the owner and the cycles
- * from `getOwnerConsole()`, which refuses a caller with no role on the engram instead of masking.
- */
-export interface EngramStatus {
-    memoryFileCount: bigint;
-    auditLogSize: bigint;
-    agentCount: bigint;
-    version: string;
-    guardianCount: bigint;
-    paymentsFrozen: boolean;
-    writesPaused: boolean;
-    backupCount: bigint;
-    totalBackupSize: bigint;
-    /**
-     * Whether NEW memory writes should be encrypted client-side. Ungated, and ⟨2026-08-24⟩ for a
-     * simpler reason than the one recorded here before: this said "`status()` redacts only `owner`
-     * and `cyclesBalance`", which described the masking that the 0.16.0 split removed. `about()`
-     * redacts NOTHING — the fields worth redacting left for `getOwnerConsole()` — so this reads the
-     * `memoryEncryptionEnabled` var for every caller including an anonymous one. Verified against
-     * `src/engram/engram.did` (`type About`), which carries `encryptionEnabled : bool`.
-     *
-     * DECLARED HERE ON 2026-08-17 because the SDK now READS it. The canister has always served it;
-     * this interface simply never named it, because the client asked the singleton
-     * `isEncryptionEnabled()` instead. The surface diet (R3) removed that method — one variable, one
-     * audience, two doors — so `ensureEncryptionMode()`, `isMemoryEncryptionEnabled()` and
-     * `auditLogSize()` all come through this record now, and a field the write path branches on may
-     * not be left off the type.
-     *
-     * `totalMemoryWrites` and `verifiedHuman` are still served-but-undeclared here, exactly as
-     * before: this type is a narrowing of the record, not a transcription of it, and nothing in this
-     * package reads those two.
-     */
-    encryptionEnabled: boolean;
-}
-/**
- * ⟨0.16.0, L2.2⟩ The GATED half of the `status()` split — the fields `about()` shed because they
- * identify the engram's people or its money, which an anonymous query must not hand out.
- *
- * SHAPE READ FROM `src/generated/engram.idl.ts` (`const OwnerConsole = IDL.Record({…})`), not
- * inferred. `owner` is `IDL.Opt(IDL.Principal)`, which agent-js delivers as a 0-or-1-element
- * ARRAY — the same option-as-array shape that, read as a bare value elsewhere in this package,
- * silently corrupted a certificate witness (see `optBytes` in certifiedAudit.ts). `cyclesBalance`
- * is a BARE bigint here and an option on `EngramStatus`: the widening exists only on the ungated
- * half, and behind a gate there is nobody to mask it from.
- * ⟨CORRECTED 2026-10-05⟩ There is no option on `EngramStatus`. `about()` never served
- * `cyclesBalance` at 0.16.0, so the field "on the ungated half" was a declaration with no wire
- * behind it, and it is now deleted. This is the only SDK type left with a `cyclesBalance` field.
- * ⟨2026-10-06⟩ `src/generated/engram.idl.ts` is deleted; the same declaration is now read from
- * `@engramx/idl/engram` (in this repository, `packages/idl/dist/engram.idl.js`).
- *
- * DESPITE THE NAME the gate is #anyRole — owner, active agent or active guardian — which is
- * what makes this the right pairing probe for an agent SDK.
- */
-export interface OwnerConsole {
-    owner: [] | [Principal];
-    cyclesBalance: bigint;
-    memoryKeyEpoch: bigint;
-    protectedPathCount: bigint;
-    agentRevisablePathCount: bigint;
-    pendingApprovalCount: bigint;
-    /**
-     * ⟨ADDED 2026-10-05⟩ Served since the paid-session rail began counting, never declared here, so
-     * an SDK caller could not read it while the repo's own integration suite read it off the raw
-     * actor. How many paid-session calls named a session this engram does not have: counted, not
-     * logged, so a flood of forged session ids cannot push real refusals out of the denial log. Zero
-     * is a real answer on a fresh engram. Measured that day against engram.did: with it, this type
-     * declares all seven fields the record serves.
-     */
-    unknownSessionRefusals: bigint;
-}
-export type EngramRecordStatus = {
-    Active: null;
-} | {
-    Frozen: null;
-} | {
-    Deleted: null;
-};
-export interface EngramRecord {
-    owner: Principal;
-    canisterId: Principal;
-    createdAtNs: bigint;
-    status: EngramRecordStatus;
-}
-export interface RegistryStatus {
-    totalEngrams: bigint;
-    activeEngrams: bigint;
-    registryVersion: string;
-    engramWasmHash: string;
-}
-export interface GuardianPermissions {
-    canRevokeAgents: boolean;
-    canFreezePayments: boolean;
-    canPauseWrites: boolean;
-    /**
-     * The Bools above are FROZEN — every FUTURE permission is a scope string here
-     * (converges with OAuth scope names). Candid opt: [] = no extended scopes.
-     */
-    scopes: [] | [string[]];
-}
-export interface GuardianRecord {
-    principal: Principal;
-    name: string;
-    addedAtNs: bigint;
-    permissions: GuardianPermissions;
-}
-export type BackupType = {
-    FullSnapshot: null;
-} | {
-    PartialSnapshot: null;
-} | {
-    IncrementalDiff: null;
-};
-export type BackupStatus = {
-    Uploading: null;
-} | {
-    Finalized: null;
-} | {
-    Failed: null;
-};
-export type ApprovalStatus = {
-    Pending: null;
-} | {
-    Approved: null;
-} | {
-    Denied: null;
-} | {
-    Used: null;
-} | {
-    Expired: null;
-};
-export interface ApprovalRequest {
-    id: string;
-    caller: Principal;
-    operation: string;
-    amount: bigint;
-    binding: string;
-    policyLimit: bigint;
-    policyField: string;
-    rationale: string;
-    createdAtNs: bigint;
-    expiresAtNs: bigint;
-    status: ApprovalStatus;
-    /**
-     * ⟨CORRECTED 2026-10-05⟩ These three were `X | null`. The wire is Candid `opt`, and
-     * getMyApprovalRequests hands the rows back as delivered, so each is `[]` or `[value]`, never
-     * null (see AgentRecord.publicKeyHash).
-     */
-    approvedBy: [] | [Principal];
-    approvedAtNs: [] | [bigint];
-    denialReason: [] | [string];
-}
-export interface BackupMetadata {
-    backupId: string;
-    dbType: string;
-    backupType: BackupType;
-    /**
-     * ⟨CORRECTED 2026-10-05⟩ This and `backupLabel` were `string | null`. The wire is Candid `opt
-     * text`, and getBackupMetadata and listBackups hand the record back as delivered, so each is `[]`
-     * or `[text]`, never null (see AgentRecord.publicKeyHash). The OpenClaw backups table printed
-     * the label correctly only because an array of one string prints as that string.
-     */
-    parentBackupId: [] | [string];
-    totalSize: bigint;
-    chunkCount: bigint;
-    sha256: string;
-    createdAtNs: bigint;
-    createdBy: Principal;
-    backupLabel: [] | [string];
-    status: BackupStatus;
-}
+export {};

package/dist/verify.d.ts

@@ -0,0 +1,6 @@
+export { verifyCertifiedAuditHead, verifyCertifiedLeaf, verifyCertifiedRegistryHead, verifyCertifiedAnchor, } from './certifiedAudit.js';
+export type { CertifiedAuditHead, VerifiedAuditHead, CertifiedLeaf } from './certifiedAudit.js';
+export { verifyHistoricalCertificate, IC_MAINNET_ROOT_KEY_HEX } from './certifiedAudit.js';
+export type { HistoricalCertificate } from './certifiedAudit.js';
+export { recordEntryBody, recordDigest, recordLink, legacyRecordLink, recordEntryHash, sealedRowOf, walkToCertifiedHead, } from './recordChain.js';
+export type { RecordEntryFields, SealedRow, WalkResult } from './recordChain.js';

package/dist/verify.js

@@ -0,0 +1,16 @@
+// `@engramx/client/verify` — the browser-safe verifiers: an engram's certified audit head, the
+// registry's certified head, and an engram's certified anchor.
+//
+// ⟨ADDED 2026-10-13, the owner's 3A⟩ WHY A SUBPATH. The package root pulls Node-only modules (pair,
+// migrate, the key cache, the OpenClaw and Claude set-up), so a web page could not import the
+// verifiers it needs and kept a hand-written port of them instead — "the same verifier the
+// ecosystem runs" was N hand-synced copies. This entry, `./connect-config` and `./encryption` import
+// nothing from Node; test/browser-safe-subpaths.test.ts walks their import graphs to hold that.
+// (The ratified name, from the 2026-08 architecture audit's "INTRODUCE @engramx/client/verify".)
+export { verifyCertifiedAuditHead, verifyCertifiedLeaf, verifyCertifiedRegistryHead, verifyCertifiedAnchor, } from './certifiedAudit.js';
+// ⟨2026-10-15, the owner's ruling 6B of 2026-10-14⟩ The historical-certificate check and the record
+// walk, browser-safe (WebCrypto hashing). The evidence bundle's content link needs the memory-file
+// hash contract, which hashes with node:crypto, so `checkEvidence` stays on the package root.
+export { verifyHistoricalCertificate, IC_MAINNET_ROOT_KEY_HEX } from './certifiedAudit.js';
+export { recordEntryBody, recordDigest, recordLink, legacyRecordLink, recordEntryHash, sealedRowOf, walkToCertifiedHead, } from './recordChain.js';
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,+DAA+D;AAC/D,EAAE;AACF,oGAAoG;AACpG,8FAA8F;AAC9F,2FAA2F;AAC3F,qGAAqG;AACrG,gGAAgG;AAChG,iGAAiG;AACjG,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,oGAAoG;AACpG,mGAAmG;AACnG,8FAA8F;AAC9F,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE3F,OAAO,EACL,eAAe,EACf,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,mBAAmB,GACpB,MAAM,kBAAkB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@engramx/client",
-  "version": "0.16.0-rc.12",
+  "version": "0.16.0-rc.14",
   "description": "Client SDK for EngramX — persistent, decentralized memory for AI agents on the Internet Computer",
   "license": "Apache-2.0",
   "author": "EngramX <developer@engramx.ai>",
@@ -11,8 +11,7 @@
     "engram",
     "memory",
     "decentralized",
-    "openclaw",
-    "engram"
+    "openclaw"
   ],
   "type": "module",
   "engines": {
@@ -27,7 +26,20 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
-    }
+    },
+    "./verify": {
+      "types": "./dist/verify.d.ts",
+      "import": "./dist/verify.js"
+    },
+    "./encryption": {
+      "types": "./dist/encryption.d.ts",
+      "import": "./dist/encryption.js"
+    },
+    "./connect-config": {
+      "types": "./dist/connect-config.d.ts",
+      "import": "./dist/connect-config.js"
+    },
+    "./package.json": "./package.json"
   },
   "files": [
     "dist/",
@@ -41,7 +53,7 @@
     "@icp-sdk/core": "^6.1.0"
   },
   "dependencies": {
-    "@engramx/idl": "0.16.0-rc.12",
+    "@engramx/idl": "0.16.0-rc.14",
     "@icp-sdk/core": "^6.1.0",
     "@icp-sdk/vetkeys": "0.7.0",
     "@noble/curves": "^2.4.0"

package/dist/offline.d.ts

@@ -1,21 +0,0 @@
-export interface QueuedOperation {
-    id: string;
-    method: string;
-    args: unknown[];
-    timestamp: number;
-    retries: number;
-}
-export declare class OfflineQueue {
-    private queue;
-    private filePath;
-    private maxRetries;
-    constructor(filePath: string, maxRetries?: number);
-    enqueue(method: string, args: unknown[]): void;
-    flush(executor: (method: string, args: unknown[]) => Promise<void>): Promise<{
-        synced: number;
-        failed: number;
-    }>;
-    get pending(): number;
-    private load;
-    private save;
-}