@mandatez/sdk 0.1.1 → 0.1.8

package/dist/trust/posture.js

@@ -0,0 +1,79 @@
+function assignGrade(score) {
+    if (score >= 80)
+        return 'verified';
+    if (score >= 60)
+        return 'high';
+    if (score >= 40)
+        return 'medium';
+    if (score >= 20)
+        return 'low';
+    return 'unverified';
+}
+/**
+ * Computes a trust score (0–100) and profile from an agent's event history.
+ *
+ * Scoring model:
+ * - Behavioral history  40pts: (allowed / total) * 40
+ * - Longevity           20pts: min(days_active / 90, 1) * 20
+ * - Human oversight     25pts: (approvals / (approvals + rejections + 1)) * 25
+ * - Policy compliance   15pts: (1 - blocked_ratio - flagged_ratio * 0.5) * 15
+ */
+export function computeTrustScore(events) {
+    if (events.length === 0) {
+        return {
+            trust_score: 0,
+            trust_grade: 'unverified',
+            total_events: 0,
+            allowed_ratio: 0,
+            flagged_ratio: 0,
+            blocked_ratio: 0,
+            human_approvals: 0,
+            human_rejections: 0,
+            first_seen: null,
+            last_active: null,
+        };
+    }
+    const total = events.length;
+    const allowed = events.filter(e => e.outcome === 'allowed').length;
+    const flagged = events.filter(e => e.outcome === 'flagged').length;
+    const blocked = events.filter(e => e.outcome === 'blocked').length;
+    const allowedRatio = allowed / total;
+    const flaggedRatio = flagged / total;
+    const blockedRatio = blocked / total;
+    // Human oversight counts from metadata
+    let approvals = 0;
+    let rejections = 0;
+    for (const e of events) {
+        if (e.metadata && typeof e.metadata === 'object') {
+            if (e.metadata.human_approved === true)
+                approvals++;
+            if (e.metadata.human_rejected === true)
+                rejections++;
+        }
+    }
+    // Longevity — days between first and last event
+    const timestamps = events.map(e => new Date(e.timestamp).getTime()).sort((a, b) => a - b);
+    const firstSeen = new Date(timestamps[0]);
+    const lastActive = new Date(timestamps[timestamps.length - 1]);
+    const daysActive = (lastActive.getTime() - firstSeen.getTime()) / (1000 * 60 * 60 * 24);
+    // Score components
+    const behavioralScore = allowedRatio * 40;
+    const longevityScore = Math.min(daysActive / 90, 1) * 20;
+    const oversightScore = (approvals / (approvals + rejections + 1)) * 25;
+    const complianceScore = Math.max(0, (1 - blockedRatio - flaggedRatio * 0.5)) * 15;
+    const rawScore = behavioralScore + longevityScore + oversightScore + complianceScore;
+    const trustScore = Math.round(Math.min(100, Math.max(0, rawScore)));
+    return {
+        trust_score: trustScore,
+        trust_grade: assignGrade(trustScore),
+        total_events: total,
+        allowed_ratio: Math.round(allowedRatio * 10000) / 10000,
+        flagged_ratio: Math.round(flaggedRatio * 10000) / 10000,
+        blocked_ratio: Math.round(blockedRatio * 10000) / 10000,
+        human_approvals: approvals,
+        human_rejections: rejections,
+        first_seen: firstSeen.toISOString(),
+        last_active: lastActive.toISOString(),
+    };
+}
+//# sourceMappingURL=posture.js.map

package/dist/trust/posture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"posture.js","sourceRoot":"","sources":["../../src/trust/posture.ts"],"names":[],"mappings":"AAeA,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,UAAU,CAAC;IACnC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC/B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IACpD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,YAAY;YACzB,YAAY,EAAE,CAAC;YACf,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,CAAC;YAChB,eAAe,EAAE,CAAC;YAClB,gBAAgB,EAAE,CAAC;YACnB,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,IAAI;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACnE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACnE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAEnE,MAAM,YAAY,GAAG,OAAO,GAAG,KAAK,CAAC;IACrC,MAAM,YAAY,GAAG,OAAO,GAAG,KAAK,CAAC;IACrC,MAAM,YAAY,GAAG,OAAO,GAAG,KAAK,CAAC;IAErC,uCAAuC;IACvC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjD,IAAK,CAAC,CAAC,QAAoC,CAAC,cAAc,KAAK,IAAI;gBAAE,SAAS,EAAE,CAAC;YACjF,IAAK,CAAC,CAAC,QAAoC,CAAC,cAAc,KAAK,IAAI;gBAAE,UAAU,EAAE,CAAC;QACpF,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAExF,mBAAmB;IACnB,MAAM,eAAe,GAAG,YAAY,GAAG,EAAE,CAAC;IAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IACzD,MAAM,cAAc,GAAG,CAAC,SAAS,GAAG,CAAC,SAAS,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACvE,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,YAAY,GAAG,YAAY,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAElF,MAAM,QAAQ,GAAG,eAAe,GAAG,cAAc,GAAG,cAAc,GAAG,eAAe,CAAC;IACrF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEpE,OAAO;QACL,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,WAAW,CAAC,UAAU,CAAC;QACpC,YAAY,EAAE,KAAK;QACnB,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,GAAG,KAAK;QACvD,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,GAAG,KAAK;QACvD,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,GAAG,KAAK;QACvD,eAAe,EAAE,SAAS;QAC1B,gBAAgB,EAAE,UAAU;QAC5B,UAAU,EAAE,SAAS,CAAC,WAAW,EAAE;QACnC,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE;KACtC,CAAC;AACJ,CAAC"}

package/dist/wrapper/index.d.ts

@@ -0,0 +1,26 @@
+import type { PolicyRule } from '../policy/index.js';
+export interface MandateZAgentConfig {
+    agentId: string;
+    ownerId: string;
+    privateKey: string;
+    supabaseUrl: string;
+    supabaseAnonKey: string;
+    /** Human-friendly name stored on the agents row. Defaults to the wrapped function's name. */
+    name?: string;
+    /** Inline policy rules. Evaluated on every call against action_type 'call' and the function name as resource. */
+    policies?: PolicyRule[];
+    /** How to treat a 'flag' policy outcome. 'restrict' (default) executes but marks the event flagged. 'block' prevents execution. 'allow' clears the flag. */
+    onFlagged?: 'restrict' | 'block' | 'allow';
+    /** HaveIBeenPwned API key. If provided and an email is detected in args, the wrapper runs an identity check before execution. */
+    hibpApiKey?: string;
+}
+/**
+ * Wrap any agent function with MandateZ governance.
+ *
+ * One import, one wrap — the returned function has the same signature as the
+ * original, but every invocation is policy-checked, optionally identity-screened
+ * (when an email is detected in args and hibpApiKey is configured), and logged
+ * as a signed AgentEvent to your MandateZ event stream.
+ */
+export declare function MandateZAgent<T extends (...args: any[]) => any>(agentFn: T, config: MandateZAgentConfig): T;
+//# sourceMappingURL=index.d.ts.map

package/dist/wrapper/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/wrapper/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,6FAA6F;IAC7F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iHAAiH;IACjH,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;IACxB,4JAA4J;IAC5J,SAAS,CAAC,EAAE,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;IAC3C,iIAAiI;IACjI,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAuBD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAC7D,OAAO,EAAE,CAAC,EACV,MAAM,EAAE,mBAAmB,GAC1B,CAAC,CA+IH"}

package/dist/wrapper/index.js

@@ -0,0 +1,162 @@
+import sodium from 'libsodium-wrappers';
+import { MandateZClient } from '../client.js';
+import { PolicyEngine } from '../policy/index.js';
+import { SupabaseTransport } from '../transport/index.js';
+const EMAIL_REGEX = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+function findEmailInArgs(args) {
+    for (const arg of args) {
+        if (typeof arg === 'string' && EMAIL_REGEX.test(arg))
+            return arg;
+        if (arg && typeof arg === 'object') {
+            for (const value of Object.values(arg)) {
+                if (typeof value === 'string' && EMAIL_REGEX.test(value))
+                    return value;
+            }
+        }
+    }
+    return null;
+}
+async function derivePublicKey(privateKey) {
+    await sodium.ready;
+    const secretKey = sodium.from_base64(privateKey, sodium.base64_variants.ORIGINAL);
+    const publicKey = secretKey.slice(32);
+    return sodium.to_base64(publicKey, sodium.base64_variants.ORIGINAL);
+}
+/**
+ * Wrap any agent function with MandateZ governance.
+ *
+ * One import, one wrap — the returned function has the same signature as the
+ * original, but every invocation is policy-checked, optionally identity-screened
+ * (when an email is detected in args and hibpApiKey is configured), and logged
+ * as a signed AgentEvent to your MandateZ event stream.
+ */
+export function MandateZAgent(agentFn, config) {
+    const resourceName = config.name ?? agentFn.name ?? 'anonymous';
+    const onFlagged = config.onFlagged ?? 'restrict';
+    const policyEngine = new PolicyEngine();
+    if (config.policies && config.policies.length > 0) {
+        policyEngine.addPolicy({
+            id: `pol_${config.agentId}_inline`,
+            owner_id: config.ownerId,
+            name: `${resourceName}_inline`,
+            rules: config.policies,
+        });
+    }
+    const client = new MandateZClient({
+        agentId: config.agentId,
+        ownerId: config.ownerId,
+        privateKey: config.privateKey,
+        supabaseUrl: config.supabaseUrl,
+        supabaseAnonKey: config.supabaseAnonKey,
+        hibpApiKey: config.hibpApiKey,
+    });
+    const transport = new SupabaseTransport({
+        supabaseUrl: config.supabaseUrl,
+        supabaseAnonKey: config.supabaseAnonKey,
+    });
+    let registrationPromise = null;
+    const ensureRegistered = () => {
+        if (!registrationPromise) {
+            registrationPromise = (async () => {
+                const publicKey = await derivePublicKey(config.privateKey);
+                await transport
+                    .upsertAgent({
+                    agentId: config.agentId,
+                    ownerId: config.ownerId,
+                    name: resourceName,
+                    publicKey,
+                })
+                    .catch(() => { });
+            })();
+        }
+        return registrationPromise;
+    };
+    const wrapped = async function (...args) {
+        await ensureRegistered();
+        if (config.hibpApiKey) {
+            const email = findEmailInArgs(args);
+            if (email) {
+                try {
+                    const check = await client.checkIdentity({
+                        email,
+                        onFlagged: onFlagged === 'allow' ? 'allow' : onFlagged,
+                    });
+                    if (check.recommendation === 'block') {
+                        await client
+                            .track({
+                            action_type: 'call',
+                            resource: resourceName,
+                            outcome: 'blocked',
+                            metadata: {
+                                wrapper: 'MandateZAgent',
+                                reason: 'identity_blocked',
+                                email,
+                                breach_count: check.breach_count,
+                            },
+                        })
+                            .catch(() => { });
+                        throw new Error(`MandateZAgent: identity check blocked execution (${check.breach_count} breaches detected)`);
+                    }
+                }
+                catch (err) {
+                    if (err instanceof Error && err.message.startsWith('MandateZAgent:')) {
+                        throw err;
+                    }
+                }
+            }
+        }
+        const policyEval = policyEngine.evaluate('call', resourceName);
+        const policyBlocks = policyEval.outcome === 'blocked' ||
+            (policyEval.outcome === 'flagged' && onFlagged === 'block');
+        if (policyBlocks) {
+            await client
+                .track({
+                action_type: 'call',
+                resource: resourceName,
+                outcome: 'blocked',
+                policy_id: policyEval.policy_id,
+                metadata: { wrapper: 'MandateZAgent', reason: 'policy_blocked' },
+            })
+                .catch(() => { });
+            throw new Error(`MandateZAgent: policy blocked call to ${resourceName}`);
+        }
+        const startedAt = Date.now();
+        try {
+            const result = await agentFn.apply(this, args);
+            const finalOutcome = policyEval.outcome === 'flagged' && onFlagged === 'restrict' ? 'flagged' : 'allowed';
+            await client
+                .track({
+                action_type: 'call',
+                resource: resourceName,
+                outcome: finalOutcome,
+                policy_id: policyEval.policy_id,
+                metadata: {
+                    wrapper: 'MandateZAgent',
+                    duration_ms: Date.now() - startedAt,
+                    args_count: args.length,
+                },
+            })
+                .catch(() => { });
+            return result;
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            await client
+                .track({
+                action_type: 'call',
+                resource: resourceName,
+                outcome: 'flagged',
+                policy_id: policyEval.policy_id,
+                metadata: {
+                    wrapper: 'MandateZAgent',
+                    duration_ms: Date.now() - startedAt,
+                    error: message,
+                },
+            })
+                .catch(() => { });
+            throw err;
+        }
+    };
+    return wrapped;
+}
+//# sourceMappingURL=index.js.map

package/dist/wrapper/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/wrapper/index.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAmB1D,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAEjD,SAAS,eAAe,CAAC,IAAe;IACtC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QACjE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,GAA8B,CAAC,EAAE,CAAC;gBAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,UAAkB;IAC/C,MAAM,MAAM,CAAC,KAAK,CAAC;IACnB,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAU,EACV,MAA2B;IAE3B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,UAAU,CAAC;IAEjD,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;IACxC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,YAAY,CAAC,SAAS,CAAC;YACrB,EAAE,EAAE,OAAO,MAAM,CAAC,OAAO,SAAS;YAClC,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,IAAI,EAAE,GAAG,YAAY,SAAS;YAC9B,KAAK,EAAE,MAAM,CAAC,QAAQ;SACvB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;QAChC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,iBAAiB,CAAC;QACtC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAC,CAAC;IAEH,IAAI,mBAAmB,GAAyB,IAAI,CAAC;IACrD,MAAM,gBAAgB,GAAG,GAAkB,EAAE;QAC3C,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,mBAAmB,GAAG,CAAC,KAAK,IAAI,EAAE;gBAChC,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC3D,MAAM,SAAS;qBACZ,WAAW,CAAC;oBACX,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,IAAI,EAAE,YAAY;oBAClB,SAAS;iBACV,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrB,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,WAA0B,GAAG,IAAe;QAC/D,MAAM,gBAAgB,EAAE,CAAC;QAEzB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;wBACvC,KAAK;wBACL,SAAS,EAAE,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;qBACvD,CAAC,CAAC;oBACH,IAAI,KAAK,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;wBACrC,MAAM,MAAM;6BACT,KAAK,CAAC;4BACL,WAAW,EAAE,MAAM;4BACnB,QAAQ,EAAE,YAAY;4BACtB,OAAO,EAAE,SAAS;4BAClB,QAAQ,EAAE;gCACR,OAAO,EAAE,eAAe;gCACxB,MAAM,EAAE,kBAAkB;gCAC1B,KAAK;gCACL,YAAY,EAAE,KAAK,CAAC,YAAY;6BACjC;yBACF,CAAC;6BACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;wBACnB,MAAM,IAAI,KAAK,CACb,oDAAoD,KAAK,CAAC,YAAY,qBAAqB,CAC5F,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;wBACrE,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC/D,MAAM,YAAY,GAChB,UAAU,CAAC,OAAO,KAAK,SAAS;YAChC,CAAC,UAAU,CAAC,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC,CAAC;QAE9D,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,MAAM;iBACT,KAAK,CAAC;gBACL,WAAW,EAAE,MAAM;gBACnB,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,QAAQ,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAE;aACjE,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,yCAAyC,YAAY,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,IAAqB,CAAC,CAAC;YAEhE,MAAM,YAAY,GAChB,UAAU,CAAC,OAAO,KAAK,SAAS,IAAI,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAEvF,MAAM,MAAM;iBACT,KAAK,CAAC;gBACL,WAAW,EAAE,MAAM;gBACnB,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE,YAAY;gBACrB,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,QAAQ,EAAE;oBACR,OAAO,EAAE,eAAe;oBACxB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBACnC,UAAU,EAAE,IAAI,CAAC,MAAM;iBACxB;aACF,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAEnB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,MAAM;iBACT,KAAK,CAAC;gBACL,WAAW,EAAE,MAAM;gBACnB,QAAQ,EAAE,YAAY;gBACtB,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,QAAQ,EAAE;oBACR,OAAO,EAAE,eAAe;oBACxB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBACnC,KAAK,EAAE,OAAO;iBACf;aACF,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACnB,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,OAAuB,CAAC;AACjC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mandatez/sdk",
-  "version": "0.1.1",
+  "version": "0.1.8",
   "description": "MandateZ SDK — cryptographic identity, event signing, and policy enforcement for AI agents",
   "type": "module",
   "main": "./dist/index.js",
@@ -22,12 +22,6 @@
     "type": "git",
     "url": "https://github.com/mandatez/core"
   },
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "test": "vitest run",
-    "test:watch": "vitest"
-  },
   "keywords": [
     "ai",
     "agents",
@@ -45,5 +39,11 @@
     "libsodium-wrappers": "^0.8.2",
     "nanoid": "^5.1.7",
     "zod": "^4.3.6"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "vitest run",
+    "test:watch": "vitest"
   }
-}
+}