@hashgraphonline/standards-sdk 0.1.179 → 0.1.181

package/dist/browser-root/standards-sdk.root-browser.js

@@ -6842,10 +6842,14 @@ const guardBucketBalanceSchema = objectType({
 });
 const guardPrincipalSchema = objectType({
   signedIn: booleanType(),
+  principalType: enumType(["user", "service"]).default("user"),
   userId: stringType().optional(),
   email: stringType().optional(),
   accountId: stringType().optional(),
   stripeCustomerId: stringType().optional(),
+  serviceId: stringType().optional(),
+  workspaceId: stringType().optional(),
+  serviceLabel: stringType().optional(),
   roles: arrayType(stringType())
 });
 const guardEntitlementsSchema = objectType({
@@ -6872,6 +6876,65 @@ const guardBalanceResponseSchema = objectType({
   bucketingMode: enumType(["shared-ledger", "product-bucketed"]),
   buckets: arrayType(guardBucketBalanceSchema)
 });
+const guardFeedItemSchema = objectType({
+  id: stringType(),
+  artifactType: enumType(["skill", "plugin"]),
+  slug: stringType(),
+  name: stringType(),
+  href: stringType(),
+  ecosystem: stringType().optional(),
+  safetyScore: numberType().nullable().optional(),
+  trustScore: numberType().nullable().optional(),
+  verified: booleanType(),
+  recommendation: enumType(["monitor", "review", "block"]),
+  updatedAt: stringType()
+});
+const guardFeedSummarySchema = objectType({
+  total: numberType(),
+  monitorCount: numberType(),
+  reviewCount: numberType(),
+  blockCount: numberType()
+});
+const guardFeedResponseSchema = objectType({
+  generatedAt: stringType(),
+  items: arrayType(guardFeedItemSchema),
+  summary: guardFeedSummarySchema
+});
+const guardIntegrationSchema = objectType({
+  id: enumType(["openclaw", "hermes"]),
+  name: stringType(),
+  status: enumType(["available", "planned"]),
+  href: stringType().nullable(),
+  summary: stringType()
+});
+const guardActionItemSchema = objectType({
+  title: stringType(),
+  description: stringType(),
+  href: stringType()
+});
+const guardOverviewResponseSchema = objectType({
+  generatedAt: stringType(),
+  principal: guardPrincipalSchema,
+  entitlements: guardEntitlementsSchema,
+  balance: objectType({
+    accountId: stringType(),
+    availableCredits: numberType()
+  }).nullable(),
+  trustFeed: guardFeedResponseSchema,
+  integrations: arrayType(guardIntegrationSchema),
+  actionItems: arrayType(guardActionItemSchema)
+});
+const guardPolicySchema = objectType({
+  mode: enumType(["observe", "prompt", "enforce"]),
+  defaultAction: enumType(["allow", "warn", "block"]),
+  unknownPublisherAction: enumType(["review", "block", "allow"]),
+  changedHashAction: enumType(["allow", "warn", "require-reapproval", "block"]),
+  newNetworkDomainAction: enumType(["allow", "warn", "block"]),
+  subprocessAction: enumType(["allow", "warn", "block"]),
+  telemetryEnabled: booleanType(),
+  syncEnabled: booleanType(),
+  updatedAt: stringType()
+});
 const guardTrustMatchSchema = objectType({
   artifactId: stringType(),
   artifactName: stringType(),
@@ -6907,7 +6970,13 @@ const guardRevocationSchema = objectType({
   artifactName: stringType(),
   reason: stringType(),
   severity: enumType(["low", "medium", "high"]),
-  publishedAt: stringType()
+  publishedAt: stringType(),
+  confidence: numberType().optional(),
+  remediation: stringType().nullable().optional(),
+  scope: enumType(["artifact", "publisher", "domain", "workspace", "ecosystem"]).optional(),
+  source: stringType().optional(),
+  firstSeenAt: stringType().optional(),
+  lastUpdatedAt: stringType().optional()
 });
 const guardRevocationResponseSchema = objectType({
   generatedAt: stringType(),
@@ -7001,7 +7070,12 @@ const guardReceiptSyncResponseSchema = objectType({
   syncedAt: stringType(),
   receiptsStored: numberType(),
   inventoryStored: numberType().optional(),
-  inventoryDiff: guardInventoryDiffResponseSchema.optional()
+  inventoryDiff: guardInventoryDiffResponseSchema.optional(),
+  advisories: arrayType(guardRevocationSchema).optional(),
+  policy: guardPolicySchema.optional(),
+  alertPreferences: lazyType(() => guardAlertPreferencesSchema).optional(),
+  exceptions: arrayType(lazyType(() => guardExceptionItemSchema)).optional(),
+  teamPolicyPack: lazyType(() => guardTeamPolicyPackSchema).optional()
 });
 const guardInventoryResponseSchema = objectType({
   generatedAt: stringType(),
@@ -7087,6 +7161,59 @@ const guardWatchlistResponseSchema = objectType({
   generatedAt: stringType(),
   items: arrayType(guardWatchlistItemSchema)
 });
+const guardWatchlistLookupMatchSchema = objectType({
+  artifactId: stringType().nullable(),
+  publisher: stringType().nullable(),
+  domain: stringType().nullable(),
+  source: enumType(["watchlist", "team-policy"]),
+  reason: stringType()
+});
+const guardWatchlistLookupResponseSchema = objectType({
+  generatedAt: stringType(),
+  matched: booleanType(),
+  scope: enumType(["artifact", "publisher", "domain", "none"]),
+  item: guardWatchlistLookupMatchSchema.nullable()
+});
+const guardPainSignalSchema = objectType({
+  signalId: stringType(),
+  signalName: stringType(),
+  artifactId: stringType(),
+  artifactName: stringType(),
+  artifactType: enumType(["skill", "plugin"]),
+  harness: stringType(),
+  latestSummary: stringType(),
+  firstSeenAt: stringType(),
+  lastSeenAt: stringType(),
+  count: numberType(),
+  source: literalType("scanner"),
+  publisher: stringType().optional()
+});
+const guardPainSignalListResponseSchema = objectType({
+  generatedAt: stringType(),
+  items: arrayType(guardPainSignalSchema)
+});
+const guardPainSignalAggregateSchema = objectType({
+  artifactId: stringType(),
+  artifactName: stringType(),
+  artifactType: enumType(["skill", "plugin"]),
+  signalName: stringType(),
+  latestSummary: stringType(),
+  firstSeenAt: stringType(),
+  lastSeenAt: stringType(),
+  totalCount: numberType(),
+  consumerCount: numberType(),
+  harnesses: arrayType(stringType()),
+  publishers: arrayType(stringType())
+});
+const guardPainSignalAggregateResponseSchema = objectType({
+  generatedAt: stringType(),
+  summary: objectType({
+    totalSignals: numberType(),
+    uniqueArtifacts: numberType(),
+    uniqueConsumers: numberType()
+  }),
+  items: arrayType(guardPainSignalAggregateSchema)
+});
 const guardExceptionItemSchema = objectType({
   exceptionId: stringType(),
   scope: enumType(["artifact", "publisher", "harness", "global"]),
@@ -7104,6 +7231,45 @@ const guardExceptionListResponseSchema = objectType({
   generatedAt: stringType(),
   items: arrayType(guardExceptionItemSchema)
 });
+const guardPreflightEvidenceSchema = objectType({
+  category: enumType([
+    "policy",
+    "trust",
+    "watchlist",
+    "team-policy",
+    "exception"
+  ]),
+  source: stringType(),
+  detail: stringType()
+});
+objectType({
+  harness: stringType(),
+  artifactName: stringType(),
+  artifactType: enumType(["skill", "plugin"]),
+  artifactId: stringType().optional(),
+  artifactSlug: stringType().optional(),
+  artifactHash: stringType().optional(),
+  publisher: stringType().optional(),
+  domain: stringType().optional(),
+  launchSummary: stringType().optional(),
+  capabilities: arrayType(stringType()).optional(),
+  workspacePath: stringType().optional()
+});
+const guardPreflightVerdictResponseSchema = objectType({
+  generatedAt: stringType(),
+  principal: guardPrincipalSchema,
+  decision: enumType(["allow", "review", "block"]),
+  recommendation: enumType(["monitor", "review", "block"]),
+  rationale: stringType(),
+  category: enumType(["exception", "team-policy", "watchlist", "trust", "policy"]).optional(),
+  confidence: numberType().optional(),
+  freshnessTimestamp: stringType().optional(),
+  evidenceSources: arrayType(stringType()).optional(),
+  scope: enumType(["artifact", "publisher", "domain", "policy"]),
+  matchedEvidence: arrayType(guardPreflightEvidenceSchema),
+  matchedException: guardExceptionItemSchema.nullable(),
+  trustMatch: guardTrustMatchSchema.nullable()
+});
 const guardTeamPolicyAuditItemSchema = objectType({
   changedAt: stringType(),
   actor: stringType(),
@@ -7112,8 +7278,13 @@ const guardTeamPolicyAuditItemSchema = objectType({
 });
 const guardTeamPolicyPackSchema = objectType({
   name: stringType(),
-  sharedHarnessDefaults: recordType(stringType(), enumType(["observe", "prompt", "enforce"])),
+  sharedHarnessDefaults: recordType(
+    stringType(),
+    enumType(["observe", "prompt", "enforce"])
+  ),
   allowedPublishers: arrayType(stringType()),
+  blockedPublishers: arrayType(stringType()).optional(),
+  blockedDomains: arrayType(stringType()).optional(),
   blockedArtifacts: arrayType(stringType()),
   alertChannel: enumType(["email", "slack", "teams", "webhook"]),
   updatedAt: stringType(),
@@ -7528,13 +7699,11 @@ const skillDeprecationsResponseSchema = objectType({
   name: stringType(),
   items: arrayType(skillDeprecationRecordSchema)
 }).passthrough();
-const skillSecurityBreakdownFindingSchema = recordType(jsonValueSchema);
-const skillSecurityBreakdownSummarySchema = recordType(jsonValueSchema);
 const skillSecurityBreakdownResponseSchema = objectType({
   jobId: stringType(),
   score: numberType().nullable().optional(),
-  findings: arrayType(skillSecurityBreakdownFindingSchema).optional(),
-  summary: skillSecurityBreakdownSummarySchema.optional(),
+  findings: arrayType(jsonValueSchema).optional(),
+  summary: jsonValueSchema.optional(),
   generatedAt: stringType().nullable().optional(),
   scannerVersion: stringType().nullable().optional()
 }).passthrough();
@@ -9958,10 +10127,98 @@ async function registerOwnedMoltbookAgent(client, uaid, request) {
     "moltbook owner registration update response"
   );
 }
+function isStatusError(error) {
+  if (error instanceof RegistryBrokerError) {
+    return true;
+  }
+  if (typeof error !== "object" || error === null || !("status" in error)) {
+    return false;
+  }
+  return typeof Reflect.get(error, "status") === "number";
+}
+function toPortalCanonicalGuardPath(path) {
+  const segments = path.split("/");
+  const findPatternStart = (size2, matcher) => {
+    for (let startIndex = segments.length - size2; startIndex >= 0; startIndex -= 1) {
+      if (matcher(startIndex)) {
+        return startIndex;
+      }
+    }
+    return -1;
+  };
+  const replaceAt = (startIndex, consumed) => [
+    ...segments.slice(0, startIndex),
+    "api",
+    "guard",
+    ...segments.slice(startIndex + consumed)
+  ].join("/");
+  const registryStart = findPatternStart(
+    4,
+    (startIndex) => segments[startIndex] === "registry" && segments[startIndex + 1] === "api" && /^v\d+$/.test(segments[startIndex + 2] ?? "") && segments[startIndex + 3] === "guard"
+  );
+  if (registryStart >= 0) {
+    return replaceAt(registryStart, 4);
+  }
+  const apiVersionStart = findPatternStart(
+    3,
+    (startIndex) => segments[startIndex] === "api" && /^v\d+$/.test(segments[startIndex + 1] ?? "") && segments[startIndex + 2] === "guard"
+  );
+  if (apiVersionStart >= 0) {
+    return replaceAt(apiVersionStart, 3);
+  }
+  for (let index2 = segments.length - 1; index2 >= 0; index2 -= 1) {
+    if (segments[index2] === "guard" && segments[index2 - 1] !== "api") {
+      return [
+        ...segments.slice(0, index2),
+        "api",
+        "guard",
+        ...segments.slice(index2 + 1)
+      ].join("/");
+    }
+  }
+  return path;
+}
+function buildPortalCanonicalGuardUrl(baseUrl, path) {
+  const target = new URL(path, "https://guard.local");
+  const normalizedBasePath = (() => {
+    try {
+      const base = new URL(baseUrl);
+      return base.pathname.replace(/\/+$/, "");
+    } catch {
+      return baseUrl.replace(/\/+$/, "");
+    }
+  })();
+  const requestedPath = `${normalizedBasePath}${target.pathname}`;
+  const canonicalPath = toPortalCanonicalGuardPath(requestedPath);
+  const canonicalRelativePath = `${canonicalPath}${target.search}`;
+  try {
+    const base = new URL(baseUrl);
+    return `${base.origin}${canonicalRelativePath}`;
+  } catch {
+    return canonicalRelativePath;
+  }
+}
+async function requestPortalFirstJson(client, path, init) {
+  try {
+    return await client.requestJson(path, init);
+  } catch (error) {
+    if (isStatusError(error) && (error.status === 404 || error.status === 501)) {
+      return client.requestAbsoluteJson(
+        buildPortalCanonicalGuardUrl(client.baseUrl, path),
+        init
+      );
+    }
+    throw error;
+  }
+}
 async function getGuardSession(client) {
-  const raw = await client.requestJson("/guard/auth/session", {
-    method: "GET"
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/auth/session",
+    {
+      method: "GET"
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardSessionResponseSchema,
@@ -9969,9 +10226,13 @@ async function getGuardSession(client) {
   );
 }
 async function getGuardEntitlements(client) {
-  const raw = await client.requestJson("/guard/entitlements", {
-    method: "GET"
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/entitlements",
+    {
+      method: "GET"
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardSessionResponseSchema,
@@ -9979,21 +10240,60 @@ async function getGuardEntitlements(client) {
   );
 }
 async function getGuardBillingBalance(client) {
-  const raw = await client.requestJson("/guard/billing/balance", {
-    method: "GET"
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/billing/balance",
+    {
+      method: "GET"
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardBalanceResponseSchema,
     "guard billing balance response"
   );
 }
+async function getGuardFeed(client, limit) {
+  const params = new URLSearchParams();
+  if (typeof limit === "number" && Number.isFinite(limit) && Math.trunc(limit) > 0) {
+    params.set("limit", String(Math.trunc(limit)));
+  }
+  const query = params.toString();
+  const suffix = query ? `?${query}` : "";
+  const raw = await requestPortalFirstJson(
+    client,
+    `/guard/feed${suffix}`,
+    {
+      method: "GET"
+    }
+  );
+  return client.parseWithSchema(
+    raw,
+    guardFeedResponseSchema,
+    "guard feed response"
+  );
+}
+async function getGuardOverview(client) {
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/overview",
+    {
+      method: "GET"
+    }
+  );
+  return client.parseWithSchema(
+    raw,
+    guardOverviewResponseSchema,
+    "guard overview response"
+  );
+}
 async function getGuardTrustByHash(client, sha2562) {
   const normalizedHash = sha2562.trim();
   if (!normalizedHash) {
     throw new Error("sha256 is required");
   }
-  const raw = await client.requestJson(
+  const raw = await requestPortalFirstJson(
+    client,
     `/guard/trust/by-hash/${encodeURIComponent(normalizedHash)}`,
     { method: "GET" }
   );
@@ -10015,7 +10315,8 @@ async function resolveGuardTrust(client, query) {
     params.set("version", query.version.trim());
   }
   const suffix = params.size > 0 ? `?${params.toString()}` : "";
-  const raw = await client.requestJson(
+  const raw = await requestPortalFirstJson(
+    client,
     `/guard/trust/resolve${suffix}`,
     { method: "GET" }
   );
@@ -10026,19 +10327,55 @@ async function resolveGuardTrust(client, query) {
   );
 }
 async function getGuardRevocations(client) {
-  const raw = await client.requestJson("/guard/revocations", {
-    method: "GET"
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/revocations",
+    {
+      method: "GET"
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardRevocationResponseSchema,
     "guard revocations response"
   );
 }
+async function fetchGuardAdvisories(client) {
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/advisories",
+    {
+      method: "GET"
+    }
+  );
+  return client.parseWithSchema(
+    raw,
+    guardRevocationResponseSchema,
+    "guard advisories response"
+  );
+}
+async function fetchGuardPolicy(client) {
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/policy/fetch",
+    {
+      method: "GET"
+    }
+  );
+  return client.parseWithSchema(
+    raw,
+    guardPolicySchema,
+    "guard policy response"
+  );
+}
 async function getGuardInventory(client) {
-  const raw = await client.requestJson("/guard/inventory", {
-    method: "GET"
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/inventory",
+    {
+      method: "GET"
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardInventoryResponseSchema,
@@ -10046,9 +10383,13 @@ async function getGuardInventory(client) {
   );
 }
 async function getGuardReceiptHistory(client) {
-  const raw = await client.requestJson("/guard/history", {
-    method: "GET"
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/history",
+    {
+      method: "GET"
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardReceiptHistoryResponseSchema,
@@ -10060,7 +10401,8 @@ async function getGuardArtifactTimeline(client, artifactId) {
   if (!normalizedArtifactId) {
     throw new Error("artifactId is required");
   }
-  const raw = await client.requestJson(
+  const raw = await requestPortalFirstJson(
+    client,
     `/guard/history/${encodeURIComponent(normalizedArtifactId)}`,
     { method: "GET" }
   );
@@ -10071,7 +10413,7 @@ async function getGuardArtifactTimeline(client, artifactId) {
   );
 }
 async function exportGuardAbom(client) {
-  const raw = await client.requestJson("/guard/abom", {
+  const raw = await requestPortalFirstJson(client, "/guard/abom", {
     method: "GET"
   });
   return client.parseWithSchema(
@@ -10080,10 +10422,30 @@ async function exportGuardAbom(client) {
     "guard abom response"
   );
 }
+async function exportGuardArtifactAbom(client, artifactId) {
+  const normalizedArtifactId = artifactId.trim();
+  if (!normalizedArtifactId) {
+    throw new Error("artifactId is required");
+  }
+  const raw = await requestPortalFirstJson(
+    client,
+    `/guard/abom/${encodeURIComponent(normalizedArtifactId)}`,
+    { method: "GET" }
+  );
+  return client.parseWithSchema(
+    raw,
+    guardAbomResponseSchema,
+    "guard artifact abom response"
+  );
+}
 async function exportGuardReceipts(client) {
-  const raw = await client.requestJson("/guard/receipts/export", {
-    method: "GET"
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/receipts/export",
+    {
+      method: "GET"
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardReceiptExportResponseSchema,
@@ -10091,9 +10453,13 @@ async function exportGuardReceipts(client) {
   );
 }
 async function getGuardInventoryDiff(client) {
-  const raw = await client.requestJson("/guard/inventory/diff", {
-    method: "GET"
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/inventory/diff",
+    {
+      method: "GET"
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardInventoryDiffResponseSchema,
@@ -10101,9 +10467,13 @@ async function getGuardInventoryDiff(client) {
   );
 }
 async function getGuardDevices(client) {
-  const raw = await client.requestJson("/guard/devices", {
-    method: "GET"
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/devices",
+    {
+      method: "GET"
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardDeviceListResponseSchema,
@@ -10111,9 +10481,13 @@ async function getGuardDevices(client) {
   );
 }
 async function getGuardAlertPreferences(client) {
-  const raw = await client.requestJson("/guard/alerts/preferences", {
-    method: "GET"
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/alerts/preferences",
+    {
+      method: "GET"
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardAlertPreferencesSchema,
@@ -10121,10 +10495,14 @@ async function getGuardAlertPreferences(client) {
   );
 }
 async function updateGuardAlertPreferences(client, payload) {
-  const raw = await client.requestJson("/guard/alerts/preferences", {
-    method: "PUT",
-    body: payload
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/alerts/preferences",
+    {
+      method: "PUT",
+      body: payload
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardAlertPreferencesSchema,
@@ -10132,9 +10510,13 @@ async function updateGuardAlertPreferences(client, payload) {
   );
 }
 async function getGuardExceptions(client) {
-  const raw = await client.requestJson("/guard/exceptions", {
-    method: "GET"
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/exceptions",
+    {
+      method: "GET"
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardExceptionListResponseSchema,
@@ -10142,20 +10524,126 @@ async function getGuardExceptions(client) {
   );
 }
 async function getGuardWatchlist(client) {
-  const raw = await client.requestJson("/guard/watchlist", {
-    method: "GET"
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/watchlist",
+    {
+      method: "GET"
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardWatchlistResponseSchema,
     "guard watchlist response"
   );
 }
-async function addGuardWatchlistItem(client, payload) {
-  const raw = await client.requestJson("/guard/watchlist", {
+async function lookupGuardWatchlist(client, payload) {
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/watchlist/lookup",
+    {
+      method: "POST",
+      body: payload
+    }
+  );
+  return client.parseWithSchema(
+    raw,
+    guardWatchlistLookupResponseSchema,
+    "guard watchlist lookup response"
+  );
+}
+async function getGuardPainSignals(client) {
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/signals/pain",
+    {
+      method: "GET"
+    }
+  );
+  return client.parseWithSchema(
+    raw,
+    guardPainSignalListResponseSchema,
+    "guard pain signals response"
+  );
+}
+async function getGuardAggregatedPainSignals(client) {
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/signals/pain/aggregate",
+    {
+      method: "GET"
+    }
+  );
+  return client.parseWithSchema(
+    raw,
+    guardPainSignalAggregateResponseSchema,
+    "guard aggregated pain signals response"
+  );
+}
+async function getGuardPreflightVerdict(client, path, payload) {
+  const raw = await requestPortalFirstJson(client, path, {
     method: "POST",
     body: payload
   });
+  return client.parseWithSchema(
+    raw,
+    guardPreflightVerdictResponseSchema,
+    "guard preflight verdict response"
+  );
+}
+async function getGuardPreInstallVerdict(client, payload) {
+  return getGuardPreflightVerdict(
+    client,
+    "/guard/verdict/pre-install",
+    payload
+  );
+}
+async function getGuardPreExecutionVerdict(client, payload) {
+  return getGuardPreflightVerdict(
+    client,
+    "/guard/verdict/pre-execution",
+    payload
+  );
+}
+async function ingestGuardPainSignals(client, items) {
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/signals/pain",
+    {
+      method: "POST",
+      body: { items }
+    }
+  );
+  return client.parseWithSchema(
+    raw,
+    guardPainSignalListResponseSchema,
+    "guard pain signals response"
+  );
+}
+async function submitGuardReceipts(client, payload) {
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/receipts/submit",
+    {
+      method: "POST",
+      body: payload
+    }
+  );
+  return client.parseWithSchema(
+    raw,
+    guardReceiptSyncResponseSchema,
+    "guard receipt submit response"
+  );
+}
+async function addGuardWatchlistItem(client, payload) {
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/watchlist",
+    {
+      method: "POST",
+      body: payload
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardWatchlistResponseSchema,
@@ -10167,7 +10655,8 @@ async function removeGuardWatchlistItem(client, artifactId) {
   if (!normalizedArtifactId) {
     throw new Error("artifactId is required");
   }
-  const raw = await client.requestJson(
+  const raw = await requestPortalFirstJson(
+    client,
     `/guard/watchlist/${encodeURIComponent(normalizedArtifactId)}`,
     { method: "DELETE" }
   );
@@ -10178,22 +10667,57 @@ async function removeGuardWatchlistItem(client, artifactId) {
   );
 }
 async function addGuardException(client, payload) {
-  const raw = await client.requestJson("/guard/exceptions", {
-    method: "POST",
-    body: payload
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/exceptions",
+    {
+      method: "POST",
+      body: payload
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardExceptionListResponseSchema,
     "guard exceptions response"
   );
 }
+async function requestGuardException(client, payload) {
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/exceptions/request",
+    {
+      method: "POST",
+      body: payload
+    }
+  );
+  return client.parseWithSchema(
+    raw,
+    guardExceptionListResponseSchema,
+    "guard exception request response"
+  );
+}
+async function syncGuardInventory(client, payload) {
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/inventory/sync",
+    {
+      method: "POST",
+      body: payload
+    }
+  );
+  return client.parseWithSchema(
+    raw,
+    guardReceiptSyncResponseSchema,
+    "guard inventory sync response"
+  );
+}
 async function removeGuardException(client, exceptionId) {
   const normalizedExceptionId = exceptionId.trim();
   if (!normalizedExceptionId) {
     throw new Error("exceptionId is required");
   }
-  const raw = await client.requestJson(
+  const raw = await requestPortalFirstJson(
+    client,
     `/guard/exceptions/${encodeURIComponent(normalizedExceptionId)}`,
     { method: "DELETE" }
   );
@@ -10204,9 +10728,13 @@ async function removeGuardException(client, exceptionId) {
   );
 }
 async function getGuardTeamPolicyPack(client) {
-  const raw = await client.requestJson("/guard/team/policy-pack", {
-    method: "GET"
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/team/policy-pack",
+    {
+      method: "GET"
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardTeamPolicyPackSchema,
@@ -10214,10 +10742,14 @@ async function getGuardTeamPolicyPack(client) {
   );
 }
 async function updateGuardTeamPolicyPack(client, payload) {
-  const raw = await client.requestJson("/guard/team/policy-pack", {
-    method: "PUT",
-    body: payload
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/team/policy-pack",
+    {
+      method: "PUT",
+      body: payload
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardTeamPolicyPackSchema,
@@ -10225,10 +10757,14 @@ async function updateGuardTeamPolicyPack(client, payload) {
   );
 }
 async function syncGuardReceipts(client, payload) {
-  const raw = await client.requestJson("/guard/receipts/sync", {
-    method: "POST",
-    body: payload
-  });
+  const raw = await requestPortalFirstJson(
+    client,
+    "/guard/receipts/sync",
+    {
+      method: "POST",
+      body: payload
+    }
+  );
   return client.parseWithSchema(
     raw,
     guardReceiptSyncResponseSchema,
@@ -11549,7 +12085,7 @@ class RegistryBrokerClient {
     const normalisedPath = path.startsWith("/") ? path : `/${path}`;
     return `${this.baseUrl}${normalisedPath}`;
   }
-  async request(path, config) {
+  buildRequestInit(config) {
     const headers = new Headers();
     Object.entries(this.defaultHeaders).forEach(([key, value]) => {
       headers.set(key, value);
@@ -11575,6 +12111,10 @@ class RegistryBrokerClient {
         headers.set("content-type", "application/json");
       }
     }
+    return init;
+  }
+  async request(path, config) {
+    const init = this.buildRequestInit(config);
     const response = await this.fetchImpl(this.buildUrl(path), init);
     if (response.ok) {
       return response;
@@ -11586,6 +12126,19 @@ class RegistryBrokerClient {
       body: errorBody
     });
   }
+  async requestAbsolute(url, config) {
+    const init = this.buildRequestInit(config);
+    const response = await this.fetchImpl(url, init);
+    if (response.ok) {
+      return response;
+    }
+    const errorBody = await this.extractErrorBody(response);
+    throw new RegistryBrokerError("Registry broker request failed", {
+      status: response.status,
+      statusText: response.statusText,
+      body: errorBody
+    });
+  }
   async requestJson(path, config) {
     const response = await this.request(path, config);
     const contentType = response.headers?.get("content-type") ?? "";
@@ -11598,6 +12151,18 @@ class RegistryBrokerClient {
     }
     return await response.json();
   }
+  async requestAbsoluteJson(url, config) {
+    const response = await this.requestAbsolute(url, config);
+    const contentType = response.headers?.get("content-type") ?? "";
+    if (!JSON_CONTENT_TYPE.test(contentType)) {
+      const body = await response.text();
+      throw new RegistryBrokerParseError(
+        "Expected JSON response from registry broker",
+        body
+      );
+    }
+    return await response.json();
+  }
   async getAgentFeedback(uaid, options = {}) {
     const normalized = uaid.trim();
     if (!normalized) {
@@ -12036,6 +12601,12 @@ class RegistryBrokerClient {
   async getGuardBillingBalance() {
     return getGuardBillingBalance(this);
   }
+  async getGuardFeed(limit) {
+    return getGuardFeed(this, limit);
+  }
+  async getGuardOverview() {
+    return getGuardOverview(this);
+  }
   async getGuardTrustByHash(sha2562) {
     return getGuardTrustByHash(this, sha2562);
   }
@@ -12045,6 +12616,12 @@ class RegistryBrokerClient {
   async getGuardRevocations() {
     return getGuardRevocations(this);
   }
+  async fetchGuardAdvisories() {
+    return fetchGuardAdvisories(this);
+  }
+  async fetchGuardPolicy() {
+    return fetchGuardPolicy(this);
+  }
   async getGuardInventory() {
     return getGuardInventory(this);
   }
@@ -12060,6 +12637,9 @@ class RegistryBrokerClient {
   async exportGuardAbom() {
     return exportGuardAbom(this);
   }
+  async exportGuardArtifactAbom(artifactId) {
+    return exportGuardArtifactAbom(this, artifactId);
+  }
   async exportGuardReceipts() {
     return exportGuardReceipts(this);
   }
@@ -12078,6 +12658,21 @@ class RegistryBrokerClient {
   async getGuardWatchlist() {
     return getGuardWatchlist(this);
   }
+  async lookupGuardWatchlist(payload) {
+    return lookupGuardWatchlist(this, payload);
+  }
+  async getGuardPainSignals() {
+    return getGuardPainSignals(this);
+  }
+  async getGuardAggregatedPainSignals() {
+    return getGuardAggregatedPainSignals(this);
+  }
+  async getGuardPreInstallVerdict(payload) {
+    return getGuardPreInstallVerdict(this, payload);
+  }
+  async getGuardPreExecutionVerdict(payload) {
+    return getGuardPreExecutionVerdict(this, payload);
+  }
   async addGuardWatchlistItem(payload) {
     return addGuardWatchlistItem(this, payload);
   }
@@ -12087,12 +12682,24 @@ class RegistryBrokerClient {
   async addGuardException(payload) {
     return addGuardException(this, payload);
   }
+  async requestGuardException(payload) {
+    return requestGuardException(this, payload);
+  }
   async removeGuardException(exceptionId) {
     return removeGuardException(this, exceptionId);
   }
+  async ingestGuardPainSignals(items) {
+    return ingestGuardPainSignals(this, items);
+  }
   async syncGuardReceipts(payload) {
     return syncGuardReceipts(this, payload);
   }
+  async syncGuardInventory(payload) {
+    return syncGuardInventory(this, payload);
+  }
+  async submitGuardReceipts(payload) {
+    return submitGuardReceipts(this, payload);
+  }
   async getGuardTeamPolicyPack() {
     return getGuardTeamPolicyPack(this);
   }
@@ -12480,6 +13087,8 @@ class RegistryBrokerClient {
 const isPendingRegisterAgentResponse = (response) => response.status === "pending";
 const isPartialRegisterAgentResponse = (response) => response.status === "partial" && response.success === false;
 const isSuccessRegisterAgentResponse = (response) => response.success === true && response.status !== "pending";
+const GUARD_CANONICAL_PATH_PREFIX = "/api/guard";
+const GUARD_COMPAT_PATH_PREFIX = "/guard";
 const HOL_CHAT_PROTOCOL_ID = "hol-chat";
 const isRecord = (value) => Boolean(value) && typeof value === "object" && !Array.isArray(value);
 const isHolChatOp = (value) => {
@@ -42850,6 +43459,8 @@ const index = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.definePropert
   traditionalChinese: wordlist
 }, Symbol.toStringTag, { value: "Module" }));
 export {
+  GUARD_CANONICAL_PATH_PREFIX,
+  GUARD_COMPAT_PATH_PREFIX,
   HOL_CHAT_PROTOCOL_ID,
   Logger,
   RegistryBrokerClient,