@engramx/client 0.7.2 → 0.7.4-rc.1

package/README.md

@@ -96,6 +96,36 @@ const backups = await engram.listBackups('sqlite');
 const data = await engram.pullBackupChunk(backupId, 0);
 ```
 
+## Verify canonical lineage
+
+An engram's own `getSpawnedBy()` is a self-report — any fork can claim any spawner.
+The authoritative fact is the registry's testimony: its public, free
+`getCustodyMode(engramId)` query answers `"managed"`/`"sovereign"` only for engrams
+it actually spawned, and `"unknown"` for everything else. The SDK wraps the whole
+check — registry testimony plus a certified (subnet-signed, not self-reported)
+`module_hash` comparison against the registry's attested template — in one call:
+
+```typescript
+import { verifyCanonicalLineage } from '@engramx/client';
+
+const verdict = await verifyCanonicalLineage(engramId, agent);
+// verdict.lineage:
+//   'canonical'           — the canonical registry vouches for it (managed custody)
+//   'canonical-sovereign' — canonical lineage, owner-held keys (code may lawfully differ)
+//   'not-canonical'       — the registry does not know it (staging fleet or fork;
+//                           verdict.spawnedBy hints which — an unverified self-report)
+//   'indeterminate'       — the registry could not be asked; NOT evidence either way
+// verdict.codeMatchesCanonicalTemplate: true | false | 'unknown'
+//   certified live module hash vs the registry's current template. Lineage ≠ code:
+//   false on a managed engram usually just means one release behind, not suspect.
+```
+
+The canonical registry id ships in the SDK as `CANONICAL_REGISTRY_CANISTER_ID`
+(empty until the production fleet is live — while empty, calls without an explicit
+registry report `'indeterminate'` by design). Pass `{ registryId }` to ask a
+different fleet (e.g. staging); the answer is then *that fleet's* testimony, not
+canonicity.
+
 ## OpenClaw Integration
 
 The `--target openclaw` option on `pair` handles plugin installation and `openclaw.json` configuration automatically. For manual setup or customization, see [integrations/openclaw/README.md](../../integrations/openclaw/README.md).

package/dist/index.d.ts

@@ -36,3 +36,4 @@ export type { SignedTransaction, SignedAuthorization, SignedTypedData } from '@i
 export type { ServiceDefinition, Job, JobStatus, PricingScheme, VerificationMethod, } from '@ic402/client';
 export { Ic402Error, probeX402, fetchX402, findPaymentOption } from '@ic402/client';
 export { broadcastTransaction, pollReceipt, registerAgent } from '@ic402/client';
+export { verifyCanonicalLineage, classifyLineage, CANONICAL_REGISTRY_CANISTER_ID, type LineageVerdict, type CustodyMode, } from './lineage.js';

package/dist/index.js

@@ -21,4 +21,7 @@ export { Ic402Client } from '@ic402/client';
 export { signVoucher, encodeVoucherPayload } from '@ic402/client';
 export { Ic402Error, probeX402, fetchX402, findPaymentOption } from '@ic402/client';
 export { broadcastTransaction, pollReceipt, registerAgent } from '@ic402/client';
+// Canonical-lineage verification — the one-call check for agents/relying parties: is this
+// engram canonically spawned (registry testimony), and does it run the attested template?
+export { verifyCanonicalLineage, classifyLineage, CANONICAL_REGISTRY_CANISTER_ID, } from './lineage.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG1E,wDAAwD;AACxD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,qDAAqD;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,2CAA2C;AAC3C,OAAO,EAAE,YAAY,IAAI,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE3E,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE3F,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,eAAe,EACf,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAWtB,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAwD5C,iEAAiE;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AASlE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG1E,wDAAwD;AACxD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,qDAAqD;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,2CAA2C;AAC3C,OAAO,EAAE,YAAY,IAAI,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE3E,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE3F,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,eAAe,EACf,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAWtB,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAwD5C,iEAAiE;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AASlE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEjF,0FAA0F;AAC1F,0FAA0F;AAC1F,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,8BAA8B,GAG/B,MAAM,cAAc,CAAC"}

package/dist/lineage.d.ts

@@ -0,0 +1,39 @@
+import { type HttpAgent } from '@icp-sdk/core/agent';
+/** The canonical registry — SET AT FLEET DEPLOY (empty until then, like @engramx/owner's
+ *  config). While empty, verification without an explicit registryId reports 'indeterminate'
+ *  rather than guessing. */
+export declare const CANONICAL_REGISTRY_CANISTER_ID = "";
+export type CustodyMode = 'managed' | 'sovereign' | 'unknown';
+export interface LineageVerdict {
+    /** The verdict:
+     *  - 'canonical'            — the canonical registry vouches it spawned this engram (managed).
+     *  - 'canonical-sovereign'  — canonical lineage, but the owner holds custody (code may differ).
+     *  - 'not-canonical'        — the canonical registry does not know this engram (staging or fork;
+     *                             `spawnedBy` hints at which fleet).
+     *  - 'indeterminate'        — no canonical registry to ask (constant unset and none passed), or
+     *                             the registry was unreachable. NOT evidence either way. */
+    lineage: 'canonical' | 'canonical-sovereign' | 'not-canonical' | 'indeterminate';
+    /** The engram's own (forgeable) claim of its spawning registry — a hint, never proof. */
+    spawnedBy: string | null;
+    /** The canonical registry's testimony (authoritative); null when it could not be asked. */
+    custodyMode: CustodyMode | null;
+    /** Certified live module hash vs the canonical registry's attested template.
+     *  'unknown' when either side could not be read. See the module comment: false ≠ suspect. */
+    codeMatchesCanonicalTemplate: boolean | 'unknown';
+    /** Which registry actually testified (echo of the id used). */
+    registryChecked: string | null;
+}
+/** Pure classification — exported for tests. */
+export declare function classifyLineage(custody: CustodyMode | null, registryAsked: boolean): LineageVerdict['lineage'];
+/**
+ * Verify an engram's canonical lineage in one call.
+ *
+ * @param engramId  the engram canister id to verify
+ * @param agent     an HttpAgent pointed at the IC (anonymous is fine — every read is public)
+ * @param opts.registryId  override the canonical registry (defaults to
+ *        CANONICAL_REGISTRY_CANISTER_ID; REQUIRED in practice until that constant is set at
+ *        fleet deploy — without it the verdict is 'indeterminate' by design, never a guess)
+ */
+export declare function verifyCanonicalLineage(engramId: string, agent: HttpAgent, opts?: {
+    registryId?: string;
+}): Promise<LineageVerdict>;

package/dist/lineage.js

@@ -0,0 +1,119 @@
+// lineage.ts — canonical-lineage verification: the one-call check that tells an agent (or any
+// relying party) whether an engram belongs to the canonical EngramX fleet, is a staging/fork
+// engram, or cannot be determined.
+//
+// TRUST MODEL (why two hops): an engram's own claim about its origin is FORGEABLE — any fork can
+// say "I am canonical". The authoritative watermark is the CANONICAL REGISTRY'S OWN TESTIMONY:
+// its public, free getCustodyMode(engramId) answers "managed"/"sovereign" only for engrams it
+// actually spawned, and "unknown" for everything else. The engram-side getSpawnedBy() is kept as
+// a hint (useful for classifying which non-canonical fleet an engram belongs to), never as proof.
+//
+// LINEAGE vs CODE — deliberately separate facts: canonical lineage proves the canonical registry
+// spawned this canister; it does NOT prove the canister still runs canonical code (a sovereign
+// engram may legitimately run modified code). codeMatchesCanonicalTemplate compares the LIVE
+// certified module hash (read_state — subnet-signed, not self-reported) against the canonical
+// registry's current attested template. A managed engram one release behind will read `false`
+// here without being suspect; treat lineage as the trust fact and the code bit as freshness.
+import { Actor, CanisterStatus } from '@icp-sdk/core/agent';
+import { Principal } from '@icp-sdk/core/principal';
+/** The canonical registry — SET AT FLEET DEPLOY (empty until then, like @engramx/owner's
+ *  config). While empty, verification without an explicit registryId reports 'indeterminate'
+ *  rather than guessing. */
+export const CANONICAL_REGISTRY_CANISTER_ID = '';
+const engramLineageIdl = ({ IDL }) => IDL.Service({ getSpawnedBy: IDL.Func([], [IDL.Opt(IDL.Principal)], ['query']) });
+const registryLineageIdl = ({ IDL }) => IDL.Service({
+    getCustodyMode: IDL.Func([IDL.Principal], [IDL.Text], ['query']),
+    getEngramWasmHash: IDL.Func([], [IDL.Text], ['query']),
+});
+/** Pure classification — exported for tests. */
+export function classifyLineage(custody, registryAsked) {
+    if (!registryAsked || custody === null)
+        return 'indeterminate';
+    if (custody === 'managed')
+        return 'canonical';
+    if (custody === 'sovereign')
+        return 'canonical-sovereign';
+    return 'not-canonical';
+}
+/**
+ * Verify an engram's canonical lineage in one call.
+ *
+ * @param engramId  the engram canister id to verify
+ * @param agent     an HttpAgent pointed at the IC (anonymous is fine — every read is public)
+ * @param opts.registryId  override the canonical registry (defaults to
+ *        CANONICAL_REGISTRY_CANISTER_ID; REQUIRED in practice until that constant is set at
+ *        fleet deploy — without it the verdict is 'indeterminate' by design, never a guess)
+ */
+export async function verifyCanonicalLineage(engramId, agent, opts = {}) {
+    const registryId = opts.registryId ?? CANONICAL_REGISTRY_CANISTER_ID;
+    // Engram-side hint (forgeable — recorded, never trusted).
+    let spawnedBy = null;
+    try {
+        const engram = Actor.createActor(engramLineageIdl, { agent, canisterId: engramId });
+        const sb = (await engram['getSpawnedBy']());
+        spawnedBy = sb.length ? sb[0].toText() : null;
+    }
+    catch {
+        /* unreachable/frozen engram — the registry testimony below still stands on its own */
+    }
+    if (!registryId) {
+        return {
+            lineage: 'indeterminate',
+            spawnedBy,
+            custodyMode: null,
+            codeMatchesCanonicalTemplate: 'unknown',
+            registryChecked: null,
+        };
+    }
+    // Registry-side testimony (authoritative).
+    let custody = null;
+    let templateHash = '';
+    try {
+        const registry = Actor.createActor(registryLineageIdl, { agent, canisterId: registryId });
+        const mode = (await registry['getCustodyMode'](Principal.fromText(engramId)));
+        custody = mode === 'managed' || mode === 'sovereign' ? mode : 'unknown';
+        try {
+            templateHash = (await registry['getEngramWasmHash']())
+                .replace(/^0x/, '')
+                .toLowerCase();
+        }
+        catch {
+            /* template hash unreadable — code check degrades to 'unknown' */
+        }
+    }
+    catch {
+        /* registry unreachable — indeterminate, never a guess */
+    }
+    // Code freshness: certified (subnet-signed) live module hash vs the attested template.
+    let codeMatches = 'unknown';
+    if (custody !== null && custody !== 'unknown' && templateHash) {
+        try {
+            const status = await CanisterStatus.request({
+                agent,
+                canisterId: Principal.fromText(engramId),
+                paths: ['module_hash'],
+            });
+            const raw = status.get('module_hash');
+            if (raw instanceof ArrayBuffer || ArrayBuffer.isView(raw)) {
+                const bytes = raw instanceof ArrayBuffer
+                    ? new Uint8Array(raw)
+                    : new Uint8Array(raw.buffer, raw.byteOffset, raw.byteLength);
+                const liveHash = Array.from(bytes)
+                    .map((b) => b.toString(16).padStart(2, '0'))
+                    .join('');
+                codeMatches = liveHash === templateHash;
+            }
+        }
+        catch {
+            /* read_state failed — 'unknown' */
+        }
+    }
+    return {
+        lineage: classifyLineage(custody, true),
+        spawnedBy,
+        custodyMode: custody,
+        codeMatchesCanonicalTemplate: codeMatches,
+        registryChecked: registryId,
+    };
+}
+//# sourceMappingURL=lineage.js.map

package/dist/lineage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lineage.js","sourceRoot":"","sources":["../src/lineage.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,6FAA6F;AAC7F,mCAAmC;AACnC,EAAE;AACF,iGAAiG;AACjG,+FAA+F;AAC/F,8FAA8F;AAC9F,iGAAiG;AACjG,kGAAkG;AAClG,EAAE;AACF,iGAAiG;AACjG,+FAA+F;AAC/F,6FAA6F;AAC7F,8FAA8F;AAC9F,8FAA8F;AAC9F,6FAA6F;AAC7F,OAAO,EAAE,KAAK,EAAE,cAAc,EAAkB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD;;4BAE4B;AAC5B,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAwBjD,MAAM,gBAAgB,GAAG,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACjD,GAAG,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;AAEnF,MAAM,kBAAkB,GAAG,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACnD,GAAG,CAAC,OAAO,CAAC;IACV,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IAChE,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;CACvD,CAAC,CAAC;AAEL,gDAAgD;AAChD,MAAM,UAAU,eAAe,CAC7B,OAA2B,EAC3B,aAAsB;IAEtB,IAAI,CAAC,aAAa,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC;IAC/D,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC9C,IAAI,OAAO,KAAK,WAAW;QAAE,OAAO,qBAAqB,CAAC;IAC1D,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB,EAChB,KAAgB,EAChB,OAAgC,EAAE;IAElC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,8BAA8B,CAAC;IAErE,0DAA0D;IAC1D,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpF,MAAM,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,cAAc,CAAE,EAAE,CAAqB,CAAC;QACjE,SAAS,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,sFAAsF;IACxF,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,OAAO,EAAE,eAAe;YACxB,SAAS;YACT,WAAW,EAAE,IAAI;YACjB,4BAA4B,EAAE,SAAS;YACvC,eAAe,EAAE,IAAI;SACtB,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,IAAI,OAAO,GAAuB,IAAI,CAAC;IACvC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAW,CAAC;QACzF,OAAO,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,IAAI,CAAC;YACH,YAAY,GAAI,CAAC,MAAM,QAAQ,CAAC,mBAAmB,CAAE,EAAE,CAAY;iBAChE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;iBAClB,WAAW,EAAE,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;IAED,uFAAuF;IACvF,IAAI,WAAW,GAAwB,SAAS,CAAC;IACjD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,YAAY,EAAE,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;gBAC1C,KAAK;gBACL,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACxC,KAAK,EAAE,CAAC,aAAa,CAAC;aACvB,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACtC,IAAI,GAAG,YAAY,WAAW,IAAI,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,GACT,GAAG,YAAY,WAAW;oBACxB,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC;oBACrB,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;gBACjE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;qBAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;qBAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;gBACZ,WAAW,GAAG,QAAQ,KAAK,YAAY,CAAC;YAC1C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC;QACvC,SAAS;QACT,WAAW,EAAE,OAAO;QACpB,4BAA4B,EAAE,WAAW;QACzC,eAAe,EAAE,UAAU;KAC5B,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@engramx/client",
-  "version": "0.7.2",
+  "version": "0.7.4-rc.1",
   "description": "Client SDK for EngramX — persistent, decentralized memory for AI agents on ICP",
   "license": "Apache-2.0",
   "author": "EngramX <developer@engramx.ai>",