@heyanon-arp/cli 0.0.10 → 0.0.11

package/dist/cli.js

@@ -246,10 +246,11 @@ function parseSseRecord(record) {
   }
   return id !== void 0 ? { type, data, id } : { type, data };
 }
-var import_sdk, DEFAULT_SERVER_URL, ApiError, ArpApiClient;
+var import_sdk, import_shield, DEFAULT_SERVER_URL, ApiError, ArpApiClient;
 var init_api = __esm({
   "src/api.ts"() {
     import_sdk = require("@heyanon-arp/sdk");
+    import_shield = require("@heyanon-arp/shield");
     init_config();
     DEFAULT_SERVER_URL = "https://api.heyanon.ai/arp";
     ApiError = class extends Error {
@@ -382,7 +383,14 @@ var init_api = __esm({
               const record = buffer.slice(0, recordEnd);
               buffer = buffer.slice(recordEnd + 2);
               const event = parseSseRecord(record);
-              if (event !== null) yield event;
+              if (event !== null) {
+                if (event.type === "envelope" && event.data !== null && typeof event.data === "object") {
+                  const guarded = await (0, import_shield.guardInboundEvent)(event.data, { selfDid: did });
+                  yield { ...event, data: guarded.event };
+                } else {
+                  yield event;
+                }
+              }
               recordEnd = buffer.indexOf("\n\n");
             }
           }
@@ -441,13 +449,14 @@ var init_api = __esm({
        * walks FORWARD from a watermark (polling-worker pattern).
        */
       async listInbox(did, signer, query) {
-        return this.signedRequest(
+        const events = await this.signedRequest(
           "GET",
           `/v1/agents/${encodeURIComponent(did)}/inbox`,
           null,
           signer,
           query
         );
+        return (0, import_shield.guardInboundBatch)(events, { selfDid: did });
       }
       /**
        * Signed `GET /v1/agents/:did/events/:eventId`. Direct envelope
@@ -461,7 +470,8 @@ var init_api = __esm({
        * not-a-member-of-pair.
        */
       async getEvent(did, eventId, signer) {
-        return this.signedRequest("GET", `/v1/agents/${encodeURIComponent(did)}/events/${encodeURIComponent(eventId)}`, null, signer);
+        const event = await this.signedRequest("GET", `/v1/agents/${encodeURIComponent(did)}/events/${encodeURIComponent(eventId)}`, null, signer);
+        return (await (0, import_shield.guardInboundEvent)(event, { selfDid: did })).event;
       }
       /**
        * Signed `GET /v1/relationships/:id/events`. Returns the canonical
@@ -469,13 +479,14 @@ var init_api = __esm({
        * one of the relationship pair.
        */
       async listEvents(relationshipId, signer, query) {
-        return this.signedRequest(
+        const events = await this.signedRequest(
           "GET",
           `/v1/relationships/${encodeURIComponent(relationshipId)}/events`,
           null,
           signer,
           query
         );
+        return (0, import_shield.guardInboundBatch)(events, { selfDid: signer.did });
       }
       /**
        * Signed `GET /v1/relationships/:id/delegations`. One row per
@@ -5038,14 +5049,14 @@ var init_receipt = __esm({
 });
 
 // src/cli.ts
-var import_shield = require("@heyanon-arp/shield");
+var import_shield2 = require("@heyanon-arp/shield");
 var import_commander = require("commander");
 var import_simple_update_notifier = __toESM(require("simple-update-notifier"));
 
 // package.json
 var package_default = {
   name: "@heyanon-arp/cli",
-  version: "0.0.10",
+  version: "0.0.11",
   description: "Command-line client for the Agent Relationship Protocol \u2014 register agents, sign envelopes, run escrowed work cycles on Solana.",
   license: "MIT",
   keywords: ["arp", "agent-relationship-protocol", "did", "solana", "escrow", "ed25519", "agents", "a2a", "cli"],
@@ -8446,7 +8457,7 @@ async function main() {
   registerReceiptsCommand(program);
   registerWalletCommands(program);
   registerSettlementCommands(program);
-  (0, import_shield.installMiddleware)(program);
+  (0, import_shield2.installMiddleware)(program);
   try {
     await program.parseAsync(process.argv);
   } catch (err) {