@terminal3/t3n-sdk 4.29.0 → 4.32.0

package/dist/index.d.ts

@@ -933,290 +933,657 @@ declare class ContractResponseError extends T3nError {
 declare function parseContractResponse<T = unknown>(raw: string, schema?: ContractResponseSchema<T>): T;
 
 /**
- * Agent-auth grants — the standing on-chain authority a user delegates to
- * an agent (envelope-free authorisation).
+ * Org-data wire types mirroring the org-data contract wire shapes.
  *
- * `AGENT_AUTH_MAP` is keyed by the *user* DID — one policy document per
- * user, global across orgs, with at most one entry per agent DID. Reads
- * (`agent-auth-get`) and writes (`agent-auth-update`) on
- * `tee:authorisations/contracts` (the policy's owning contract) are
- * **SelfOnly**: only the user, authenticated as themselves, may read or
- * write their own grants. This is the user-approval
- * proof the per-call delegation credential's `user_sig` used to carry.
- *
- * The write shape gained `scopes` + a validity window: the
- * agent's delegated org-data scopes, and an optional `[valid_from_secs,
- * valid_until_secs]` window. The ≤ cap *length* check is enforced contract-
- * side at write time; the expiry gate is host-side at read time.
- *
- * The merge below is a script-level union (R59): writing a grant for one
- * `(agent_did, script_name)` preserves every other script row on that
- * agent's entry, and every other agent's entry, unchanged.
- */
-/** A single script grant in the camelCase write-request shape. */
-interface AgentAuthScriptGrant {
-    /** Contract name, or `"*"`. */
-    scriptName: string;
-    /** Optional semver requirement; `null` to match any version. */
-    versionReq?: string | null;
-    /** Functions the agent may invoke on this contract. */
-    functions: string[];
-    /** Org-data scopes delegated to the agent for the contract functions to
-     *  read on its behalf. */
-    scopes?: string[];
-    /** Direct-read scopes the agent may enumerate itself, via whichever read
-     *  function the contract exposes for direct enumeration. A strict subset of
-     *  `scopes` (enforced contract-side). */
-    readScopes?: string[];
-    /** Optional validity-window start (unix seconds). */
-    validFromSecs?: number | null;
-    /** NEW: optional validity-window end (unix seconds). */
-    validUntilSecs?: number | null;
-    /** Egress hosts the agent may reach for this contract. */
-    allowedHosts: string[];
-}
-/** One agent's entry in the write-request shape. */
-interface AgentAuthEntry {
-    agentDid: string;
-    scripts: AgentAuthScriptGrant[];
-}
-/**
- * The full agent-auth policy document in the camelCase write shape:
- * the per-agent grants plus the document-level discovery grants.
+ * Plain TypeScript interfaces (no zod) — the SDK does not use a
+ * validation library for domain types; see the existing `types/` files.
+ *
+ * Each response type below is paired with a shallow runtime predicate
+ * (`isMutationResponse`, `isOrgPolicyMeta`, etc.) so the org-data client
+ * can `assertShape` the decoded payload before returning to callers.
+ * Predicates check the top-level structure only; nested elements
+ * (e.g. each `BoundGrant` inside `OrgContractGrants.grants`) are not
+ * deeply validated — see `utils/shape.ts` for the rationale.
  *
- * `discoverDids` (contract wire: `discover_dids`) is the
- * list of DIDs the user lets their registered agents *enumerate the
- * contracts of* via `listContracts`: an org DID grants org-mode discovery,
- * the user's own DID grants self-mode discovery. It lives at document
- * level — not on a script grant — because discovery must surface contracts
- * the agent cannot yet call. The node's discovery gate additionally
- * requires the calling agent to be named in `agents` (subject binding), so
- * an unregistered agent discovers nothing regardless of this list.
+ * Reference: the org-data wire contract.
  */
-interface AgentAuthPolicy {
-    agents: AgentAuthEntry[];
-    discoverDids: string[];
-}
 /**
- * Parse a full `agent-auth-get` response (the stored snake_case policy
- * document) into the camelCase write shape, including the document-level
- * `discover_dids`. A `null` / absent response is the empty policy.
+ * Validity time-box on an agent-edge grant — serialised under the JSON key
+ * `window`. Both bounds are optional unix-seconds; an omitted bound is
+ * defaulted contract-side (`valid_from_secs` → now, `valid_until_secs` → now +
+ * operator cap). Mirrors the org-data `Validity` wire shape. Absent bounds
+ * are omitted from the wire (never sent as `null`).
  */
-declare function parseAgentAuthPolicy(response: unknown): AgentAuthPolicy;
-/** Extract the `agents` array from an `agent-auth-get` response. */
-declare function parseAgentAuthGet(response: unknown): AgentAuthEntry[];
-interface AgentAuthMergeResult {
-    /** Full merged `agents` list, ready for `agent-auth-update`. */
-    agents: AgentAuthEntry[];
-    /** `"<agentDid> → <scriptName>"` rows preserved from the existing policy. */
-    preservedRows: string[];
+interface Validity {
+    valid_from_secs?: number;
+    valid_until_secs?: number;
 }
-/** Input to the full-document write {@link T3nClient.agentAuthUpdate}. The
- *  document IS the new state: an empty `agents` list revokes all agent
- *  access, and an omitted / empty `discoverDids` persists an empty
- *  discovery-grant list (the contract has no per-field merge). Mirrors the
- *  contract `AgentAuthPolicy`. */
-interface AgentAuthUpdateInput {
-    agents: AgentAuthEntry[];
-    /** Document-level discovery grants — see {@link AgentAuthPolicy}. */
-    discoverDids?: string[];
-}
-/**
- * Serialise a camelCase policy document to the contract's canonical
- * snake_case `agent-auth-update` wire (`agent_did` / `script_name` /
- * `version_req` / `read_scopes` / `valid_from_secs` / `valid_until_secs` /
- * `allowed_hosts` / `discover_dids`), so neither write path relies on the
- * contract's compatibility aliases. Absent optionals are omitted (never
- * sent as `null`); empty `scopes` / `read_scopes` are omitted (the
- * contract defaults both to empty). `functions` and `allowed_hosts` are
- * always emitted — the contract requires explicit functions (`["*"]` =
- * all) and reads an absent `allowed_hosts` as deny-all egress. The
- * document-level `discover_dids` (strictly snake_case — the contract
- * defines no camelCase alias for it) is emitted only when non-empty; the
- * contract defaults an absent list to empty.
- */
-declare function toAgentAuthUpdateWire(agents: AgentAuthEntry[], discoverDids?: string[]): {
-    agents: Array<{
-        agent_did: string;
-        scripts: Array<Record<string, unknown>>;
-    }>;
-    discover_dids?: string[];
-};
-/**
- * Order-preserving deduplicating union of discovery-grant DID lists —
- * the read-merge-write counterpart of {@link mergeAgentAuthEntries} for
- * the document-level `discoverDids` (the contract rejects duplicate
- * entries, so the union must dedupe).
- */
-declare function mergeDiscoverDids(existing: string[], additions: string[]): string[];
-/**
- * Merge new agent entries into the existing policy with script-level union
- * semantics: for an agent DID present on both sides, script rows whose
- * `scriptName` is not being written are preserved; rows with a matching
- * `scriptName` are replaced by the new grant. Entries for other agent DIDs
- * pass through unchanged.
- */
-declare function mergeAgentAuthEntries(existing: AgentAuthEntry[], newEntries: AgentAuthEntry[]): AgentAuthMergeResult;
-
 /**
- * KYC types for the `tee:user/contracts::kyc-status` short-poll
- * function.
+ * A grantee-bound capability grant — the element of BOTH grant-management
+ * surfaces: the org edge (`org-policy-set-grants` input / `org-grants-get`
+ * output) and the flat agent edge (`agent-auth-get` output / `agent-auth-update`
+ * input). Stored inline on the unified `ROLE_ASSIGNMENTS_MAP` edge record.
  *
- * The shape mirrors the `kyc-status` wire response.
- * The bytes go straight from the contract
- * through the JSON-RPC envelope into [[T3nClient.kycStatus]].
+ * Mirrors the org-data `BoundGrant` wire shape verbatim (snake_case, no casing
+ * transform): `grantee` followed by the flattened capability body. The org edge
+ * populates only `functions` + `scopes`; the agent edge additionally carries the
+ * qualifiers `version_req` / `read_scopes` / `allowed_hosts` and the validity
+ * `window`. All qualifier fields are optional and omitted from the wire when
+ * absent (never sent as `null`), so an org grant simply leaves them unset.
  */
-
+interface BoundGrant {
+    /** The principal (`did:t3n:<40-hex>`) this grant applies to — a user or an
+     *  agent DID. */
+    grantee: string;
+    /** Target contract id (canonical name, e.g. `"tee:z-payroll/contracts"`), or
+     *  `"*"`. On a read this echoes the queried contract. */
+    contract_id: string;
+    /** WIT function names the grantee may invoke (e.g. `"set-records"`; `["*"]`
+     *  matches all). */
+    functions: string[];
+    /** Data scope paths the grantee may access (e.g. `"example/records"`). */
+    scopes: string[];
+    /** Agent edge only: optional semver requirement; omitted matches any version. */
+    version_req?: string;
+    /** Agent edge only: direct-read scopes the grantee may enumerate itself — a
+     *  subset of `scopes` (enforced contract-side). */
+    read_scopes?: string[];
+    /** Agent edge only: egress hosts the grantee may reach for this contract. */
+    allowed_hosts?: string[];
+    /** Agent edge only: optional validity time-box. */
+    window?: Validity;
+}
 /**
- * Terminal status for a Level 2 KYC verification, plus `pending`.
+ * Policy record for an organisation's data tier.
  *
- * - `pending` — provider has not delivered a verdict yet, or the
- *   webhook arrived but the post-action VC issuance hasn't completed.
- * - `verified` — provider approved AND a VC has been issued. `vcIds`
- *   carries the issued credential ids.
- * - `rejected` — provider declined / required resubmission /
- *   expired / the user abandoned the flow. `error` may carry a
- *   provider-supplied reason.
- * - `orphan` — a Veriff webhook arrived with a `vendorData` that
- *   couldn't be matched to any user. Should not
- *   happen in the MetaMask flow but the contract surfaces it for
- *   completeness.
+ * Mirrors the org-data policy-meta wire shape.
  */
-type KycStatusKind = "pending" | "verified" | "rejected" | "orphan";
+interface OrgPolicyMeta {
+    /** DIDs (`did:t3n:<40-hex>`) of users authorised to manage policy and read data. */
+    admins: string[];
+    /** Maximum number of admins allowed for this org. */
+    max_admins: number;
+    /** Unix timestamp (secs) when the policy was first created. */
+    created_at_secs: number;
+    /** Unix timestamp (secs) of the most recent policy update. */
+    updated_at_secs: number;
+    /**
+     * Per-org ceiling on delegation-credential validity (seconds).
+     *
+     * Absent when no org-level cap is set — the contract omits the field
+     * (never serialises null) and the cluster-wide
+     * `delegation.max_credential_validity_secs` governs instead. When set,
+     * the effective cap is `min(max_credential_validity_secs, cluster_ceiling)`.
+     */
+    max_credential_validity_secs?: number;
+}
+/** Shallow runtime guard for {@link OrgPolicyMeta}. */
+declare function isOrgPolicyMeta(value: unknown): value is OrgPolicyMeta;
 /**
- * Snapshot returned by `tee:user/contracts::kyc-status`.
+ * Effective org policy view returned by `org-policy-view`.
  *
- * Field names use camelCase on the SDK boundary even though the
- * wire is snake_case — the wrapper rewrites keys at the client edge
- * so callers don't see the JSON shape leaking through.
+ * Readable by any authenticated session (non-sensitive metadata).
+ * Returns the **effective** credential validity cap:
+ * `min(org.max_credential_validity_secs, cluster_ceiling)`, equal to the
+ * cluster ceiling when the org has not set a per-org cap. The contract
+ * always returns a value (or errors) — the field is never null.
  */
-interface KycStatus {
-    /** Terminal status if reached, otherwise `pending`. */
-    status: KycStatusKind;
-    /**
-     * Provider being polled. Echoed back so callers that didn't
-     * supply one see the contract's default (`"veriff"` in phase one).
-     */
-    provider: string;
-    /**
-     * Unix-millis of the latest contract-visible event:
-     * VC issuance time, attestation arrival time, session-row
-     * `started_at_ms`, or orphan-record arrival time. Best-effort —
-     * `undefined` when no source carries a usable timestamp.
-     */
-    updatedAt?: number;
-    /**
-     * VC ids appended for this provider, in append order. Empty for
-     * `pending` / `rejected` / `orphan`.
-     */
-    vcIds: string[];
+interface OrgPolicyView {
     /**
-     * Provider-supplied reason for `rejected`, when available.
+     * Effective delegation-credential validity cap in seconds:
+     * `min(org value, cluster ceiling)`, equal to the cluster ceiling when the
+     * org has not set a per-org cap. Always present — mirrors the contract's
+     * `PolicyViewResponse.effective_validity_secs` (org-data `org-policy-view`).
      */
-    error?: string;
+    effective_validity_secs: number;
 }
+/** Shallow runtime guard for {@link OrgPolicyView}. */
+declare function isOrgPolicyView(value: unknown): value is OrgPolicyView;
 /**
- * Polling cadence for [[T3nClient.kycStatusPoll]]. Defaults:
- * poll fast for the first 30 seconds, then back
- * off, and bail after 5 minutes.
+ * Caller-scoped admin status returned by `org-am-i-admin`.
+ *
+ * Reports only whether the **calling** session's DID is in the org's admin
+ * list — never the roster itself (contrast {@link OrgPolicyMeta}, returned by
+ * the admin-gated `org-policy-get`). Readable by any authenticated session.
+ * Mirrors the org-data `AmIAdminResponse` wire shape.
  */
-interface KycPollCadence {
-    /** Poll interval in ms while `elapsed < switchAtMs`. Default: 2000. */
-    fastMs: number;
-    /** Poll interval in ms once `elapsed >= switchAtMs`. Default: 5000. */
-    slowMs: number;
-    /** Elapsed-ms threshold to switch from fast to slow cadence. Default: 30_000. */
-    switchAtMs: number;
-    /**
-     * Maximum total time to spend polling before rejecting with
-     * [[KycStatusTimeoutError]]. Default: 300_000 (5 minutes).
-     */
-    timeoutMs: number;
+interface OrgAdminStatus {
+    /** Whether the calling session is an admin of the queried org. */
+    is_admin: boolean;
 }
+/** Shallow runtime guard for {@link OrgAdminStatus}. */
+declare function isOrgAdminStatus(value: unknown): value is OrgAdminStatus;
 /**
- * Optional knobs for [[T3nClient.kycStatusPoll]]. Most callers won't
- * touch any of these — the cadence defaults are baked in.
+ * Standard response returned by all policy write and data mutation operations.
+ *
+ * Mirrors the org-data `MutationResponse` wire shape.
  */
-interface KycPollOptions {
-    /**
-     * Cancellation signal. When aborted, the helper rejects with
-     * `signal.reason` (or a generic `AbortError` if the consumer
-     * didn't supply a reason). The currently-in-flight `kycStatus()`
-     * call also receives the signal so it can short-circuit.
-     */
-    signal?: AbortSignal;
-    /**
-     * Called with every snapshot the helper receives, including
-     * non-terminal `pending` ones. Useful for surfacing intermediate
-     * UI states (e.g. "still waiting on provider…"). Errors thrown
-     * from this callback are caught and ignored — they must not
-     * sink the poll loop.
-     */
-    onUpdate?: (status: KycStatus) => void;
-    /**
-     * Override one or more cadence fields. Anything not specified
-     * uses the defaults from [[DEFAULT_KYC_POLL_CADENCE]].
-     */
-    cadence?: Partial<KycPollCadence>;
+interface MutationResponse {
     /**
-     * Provider id to poll. Defaults to the contract default
-     * (`"veriff"` in phase one). Mirrored on the wire as
-     * `input.provider_id`.
+     * `"created"`, `"updated"`, `"deleted"`, or — for the agent-card mutations —
+     * `"published"` / `"unpublished"`.
      */
-    providerId?: string;
+    status: string;
+    /** Hex-encoded entry ID; present on data write/delete operations. */
+    entry_id?: string;
+    /** Whether the target key existed before deletion; present on single-entry deletes. */
+    deleted?: boolean;
+    /** Number of entries removed; present on `org-data-delete-scope`. */
+    deleted_entries?: number;
+    tx_hash: string | null;
 }
 /**
- * Default cadence used by [[T3nClient.kycStatusPoll]] when the caller
- * doesn't override `cadence.*`.
+ * Shallow runtime guard for {@link MutationResponse}.
+ *
+ * Only the always-present fields are checked — `status` is mandatory on
+ * every mutation; `tx_hash` is non-optional but nullable. The optional
+ * fields (`entry_id`, `deleted`, `deleted_entries`) are not validated
+ * because their presence depends on which mutation ran.
  */
-declare const DEFAULT_KYC_POLL_CADENCE: KycPollCadence;
+declare function isMutationResponse(value: unknown): value is MutationResponse;
 /**
- * Subset of [[KycStatusKind]] that ends a poll. `pending` is the
- * only non-terminal value.
+ * Response type alias for org-writers-get.
+ *
+ * The wire body is `{ writers: string[] }` where each entry is
+ * `did:t3n:<40-hex>`.
  */
-declare const TERMINAL_KYC_STATUSES: ReadonlySet<KycStatusKind>;
+interface OrgWriters {
+    writers: string[];
+}
+/** Shallow runtime guard for {@link OrgWriters}. */
+declare function isOrgWriters(value: unknown): value is OrgWriters;
 /**
- * Thrown by [[T3nClient.kycStatusPoll]] when the cadence's
- * `timeoutMs` elapses without a terminal status arriving. The
- * `lastStatus` field is the most recent (necessarily `pending`)
- * snapshot the helper saw, useful for surfacing "we tried for N
- * minutes but Veriff is still working" UX.
+ * Response type alias for org-grants-get.
+ *
+ * The wire body echoes the `contract_id` alongside the grant list.
  */
-declare class KycStatusTimeoutError extends T3nError {
-    /** The timeout (ms) the helper exhausted before a terminal status arrived. */
-    readonly timeoutMs: number;
-    /** The last `pending` snapshot before timeout, if any. */
-    readonly lastStatus?: KycStatus | undefined;
-    constructor(
-    /** The timeout (ms) the helper exhausted before a terminal status arrived. */
-    timeoutMs: number, 
-    /** The last `pending` snapshot before timeout, if any. */
-    lastStatus?: KycStatus | undefined);
+interface OrgContractGrants {
+    contract_id: string;
+    grants: BoundGrant[];
 }
-
 /**
- * Wire types for the explicit `otp-request` /
- * `otp-verify` / slim `user-upsert` exports on `tee:user/contracts`
- * (`tee:user@2.0.0`).
- *
- * Pre-2.0.0 the user contract dispatched OTP request and OTP verify
- * implicitly from the input shape of a single `user-upsert` call.
- * 2.0.0 splits that surface into three explicit functions; the
- * shapes here mirror the OTP / user-upsert wire contract.
+ * Shallow runtime guard for {@link OrgContractGrants}.
  *
- * Bytes flow directly from the contract
- * through the JSON-RPC envelope into the SDK wrappers
- * (`T3nClient.otpRequest`, `T3nClient.otpVerify`,
- * `T3nClient.submitUserInput`).
+ * Validates the immediate envelope (`contract_id: string`, `grants:
+ * array`) without recursing into each `BoundGrant`. The Rust contract
+ * is the source of truth for grant element shape; widening the predicate
+ * here would create maintenance churn against benign field additions.
  */
-
+declare function isOrgContractGrants(value: unknown): value is OrgContractGrants;
 /**
- * OTP delivery channel. Matches the `OtpContactChannel` Rust enum
- * with `serde(rename_all = "snake_case")`.
+ * One grant inside a role: a capability body (functions + scopes, without the
+ * grantee, which is bound at assignment time) plus the target contract.
+ * Mirrors the org-data `RoleGrant` wire shape.
  */
-type OtpChannel = "email" | "sms";
+interface RoleGrant {
+    /** Target contract (canonical name, e.g. `"tee:z-payroll/contracts"`). */
+    contract_id: string;
+    /** WIT function names this grant confers. */
+    functions: string[];
+    /** Data scope paths this grant confers (canonicalised lowercase). */
+    scopes: string[];
+}
 /**
- * Discriminated OTP contact target. Mirrors the Rust `OtpRequest` enum
+ * A role: a named bundle of grants and/or composed sub-roles.
+ * Mirrors the org-data `RoleDefinition` wire shape.
+ */
+interface RoleDefinition {
+    /** Org-unique role identifier (slug; function-name grammar). */
+    role_id: string;
+    /** Human-facing label. */
+    label: string;
+    /** Composite: other role ids in the same org whose grants this role confers. */
+    includes: string[];
+    /** Grants this role confers directly. */
+    grants: RoleGrant[];
+}
+/**
+ * The roles assigned to one grantee within one org.
+ * Mirrors the org-data `RoleAssignments` wire shape.
+ */
+interface RoleAssignments {
+    /** Assigned role ids. */
+    roles: string[];
+}
+/** Response for `org-role-get`; `role` is `null` when the id is unknown. */
+interface RoleGetResponse {
+    role: RoleDefinition | null;
+}
+/** Shallow runtime guard for {@link RoleGetResponse}. */
+declare function isRoleGetResponse(value: unknown): value is RoleGetResponse;
+/** Response for `org-role-assignments-get`. */
+interface RoleAssignmentsResponse {
+    /** Echoed back so callers don't need to track which request this answers. */
+    grantee_did: string;
+    /** The grantee's assigned role ids (empty when none). */
+    roles: string[];
+}
+/** Shallow runtime guard for {@link RoleAssignmentsResponse}. */
+declare function isRoleAssignmentsResponse(value: unknown): value is RoleAssignmentsResponse;
+/**
+ * Input for `listAgents` — the org plus optional pagination. Omit both `cursor`
+ * and `limit` for the first page at the default limit; pass a previous
+ * response's `next_cursor` back as `cursor` to fetch the following page.
+ */
+interface ListAgentsInput {
+    orgDid: string;
+    /** Opaque cursor from a previous response's `next_cursor`. */
+    cursor?: string;
+    /** Maximum agents to return in this page. */
+    limit?: number;
+}
+/**
+ * One org-owned agent in a {@link ListAgentsResponse}: the agent's DID, its
+ * display name, and the number of distinct contracts it can access via a direct
+ * grant. Mirrors the org-data `AgentSummary` wire shape. The name comes from the
+ * agent's private card (falling back to the DID), so the FE no longer needs to
+ * fetch each `public:agent_cards` entry to render the roster.
+ */
+interface AgentSummary {
+    /** The agent's DID (`did:t3n:<40-hex>`). */
+    did: string;
+    /** The agent's display name, from its private card (DID when unavailable). */
+    name: string;
+    /** Count of distinct contracts the agent holds a direct grant on. */
+    contract_count: number;
+}
+/** Response for `org-data-list-agents`. */
+interface ListAgentsResponse {
+    /** One PAGE of the org's org-owned agents, sorted by DID. */
+    agents: AgentSummary[];
+    /** Opaque cursor for the next page; absent on the last page. */
+    next_cursor?: string;
+}
+/** A human member's org role. The closed wire domain of {@link HumanMember}. */
+type MemberRole = "admin" | "member";
+/**
+ * Input for `listHumanMembers` — the org plus optional pagination. Omit both
+ * `cursor` and `limit` for the first page at the default limit; pass a previous
+ * response's `next_cursor` back as `cursor` to fetch the following page.
+ */
+interface ListHumanMembersInput {
+    orgDid: string;
+    /** Opaque cursor from a previous response's `next_cursor`. */
+    cursor?: string;
+    /** Maximum members to return in this page. */
+    limit?: number;
+}
+/**
+ * One direct human member: DID plus org role. No profile PII (name/email are
+ * out of scope and owned by `tee:user`). Mirrors the org-data `HumanMember`
+ * wire shape.
+ */
+interface HumanMember {
+    /** The member's DID (`did:t3n:<40-hex>`). */
+    did: string;
+    /** The member's org role. */
+    role: MemberRole;
+}
+/** Response for `org-data-list-human-members`. */
+interface ListHumanMembersResponse {
+    /** One PAGE of the org's direct human members, sorted by DID. */
+    members: HumanMember[];
+    /** Opaque cursor for the next page; absent on the last page. */
+    next_cursor?: string;
+}
+/** Shallow runtime guard for {@link ListHumanMembersResponse}. */
+declare function isListHumanMembersResponse(value: unknown): value is ListHumanMembersResponse;
+/** Shallow runtime guard for {@link ListAgentsResponse}. */
+declare function isListAgentsResponse(value: unknown): value is ListAgentsResponse;
+/** Response for `org-data-list`. */
+interface DataListResponse {
+    /** Hex-encoded entry IDs for this page. */
+    entry_ids: string[];
+    /** Offset to pass for the next page. `null` when this is the last page. */
+    next_offset: number | null;
+    /** Total number of entries in the scope (across all pages). */
+    total: number;
+}
+/** Shallow runtime guard for {@link DataListResponse}. */
+declare function isDataListResponse(value: unknown): value is DataListResponse;
+/** Secret shape discriminator (mirrors the contract `SecretKind`). */
+type SecretKind = "single_value" | "json";
+/** Metadata common to every {@link SecretView} entry. */
+interface SecretViewBase {
+    /** Secret name (the `(org, name)` key tail). */
+    name: string;
+    /** Monotonic version, bumped on each value rotation and ACL edit. */
+    version: number;
+    /** Unix seconds of the most recent write. */
+    updated_at_secs: number;
+}
+/**
+ * The redacted per-secret summary `org-secret-list` returns — a discriminated
+ * union on `kind`. The value is NEVER present: a single-value exposes only its
+ * last four characters and a json secret only its sorted top-level field names.
+ */
+type SecretView = (SecretViewBase & {
+    kind: "single_value";
+    /** Last four characters of the value (whole value when ≤ 4 chars). */
+    last4: string;
+}) | (SecretViewBase & {
+    kind: "json";
+    /** Sorted top-level object field names (keys only, no values). */
+    field_names: string[];
+});
+/** Shallow runtime guard for {@link SecretView}. */
+declare function isSecretView(value: unknown): value is SecretView;
+/**
+ * Full secret record returned by `org-secret-get` — the value IS included
+ * (the deliberate read-back path the READ axis exists for), along with all
+ * three ACLs.
+ */
+interface SecretRecord {
+    name: string;
+    kind: SecretKind;
+    /** The value as text: the scalar for a single-value, canonical JSON object for a json secret. */
+    value: string;
+    version: number;
+    /** READ axis — DIDs allowed to read the value back. */
+    reader_dids: string[];
+    /** READ axis — role ids allowed to read the value back. */
+    reader_roles: string[];
+    /** MANAGE axis — DIDs allowed to rotate the value. */
+    manager_dids: string[];
+    /** MANAGE axis — role ids allowed to rotate the value. */
+    manager_roles: string[];
+    /** USE axis — canonical contract ids allowed to have the value injected. */
+    contract_allowlist: string[];
+    created_at_secs: number;
+    updated_at_secs: number;
+    /** DID of the caller who last wrote the record. */
+    updated_by: string;
+}
+/** Shallow runtime guard for {@link SecretRecord}. */
+declare function isSecretRecord(value: unknown): value is SecretRecord;
+/** Response for `org-secret-list`: redacted per-kind views, no values. */
+interface SecretListResponse {
+    secrets: SecretView[];
+}
+/** Shallow runtime guard for {@link SecretListResponse}. */
+declare function isSecretListResponse(value: unknown): value is SecretListResponse;
+/** Response for `org-data-get`. */
+interface DataGetResponse {
+    entry_id: string;
+    /** Hex-encoded raw payload bytes. */
+    payload_hex: string;
+}
+/** Shallow runtime guard for {@link DataGetResponse}. */
+declare function isDataGetResponse(value: unknown): value is DataGetResponse;
+/**
+ * Return shape of `agentCardGet` — composed client-side from the generic
+ * `org-data-get` read of the card's entry (there is no card-specific read
+ * operation on the contract). To check whether a public copy exists, probe
+ * the anonymous `GET /api/agent-card/{did}` endpoint.
+ */
+interface AgentCardResponse {
+    /** The agent whose card this is (`did:t3n:<40-hex>`). */
+    agent_did: string;
+    /** The stored card JSON body, verbatim. */
+    card: string;
+}
+/** Shallow runtime guard for {@link AgentCardResponse}. */
+declare function isAgentCardResponse(value: unknown): value is AgentCardResponse;
+/**
+ * Legacy direct-route org-data envelope shape retained for compatibility.
+ *
+ * This mirrors the removed `/api/user-contract/execute` body format from
+ * the transitional transport. New callers should use `OrgDataClient`,
+ * which now dispatches through authenticated `/api/rpc` +
+ * `action.execute` instead.
+ */
+interface OrgDataActionWire {
+    nonce: string;
+    user_did: string;
+    authenticator_id: string;
+    contract_id: string;
+    function: string;
+    args_hash: string;
+    expires_at_secs: number;
+    signature: string;
+}
+
+/**
+ * Agent-auth grants — the standing on-chain authority a user delegates to
+ * an agent (envelope-free authorisation).
+ *
+ * The document is one flat list of {@link BoundGrant} rows plus the
+ * document-level discovery grants: `{ grants, discover_dids }`. Each grant's
+ * `grantee` is the agent DID it authorises, so there is no per-agent grouping —
+ * a user's whole delegation surface is the single `grants` array. Reads
+ * (`agent-auth-get`) and writes (`agent-auth-update`) on
+ * `tee:authorisations/contracts` (the policy's owning contract) are
+ * **SelfOnly**: only the user, authenticated as themselves, may read or write
+ * their own grants. This is the user-approval proof the per-call delegation
+ * credential's `user_sig` used to carry.
+ *
+ * A grant carries `functions`, the agent's delegated org-data `scopes`, the
+ * direct-enumerable `read_scopes`, egress `allowed_hosts`, an optional semver
+ * `version_req`, and an optional validity `window`. The ≤ cap *length* check is
+ * enforced contract-side at write time; the expiry gate is host-side at read
+ * time.
+ *
+ * The SDK is a literal snake_case mirror of the wire: {@link BoundGrant} IS the
+ * wire grant shape, so reads and writes pass through untouched — there is no
+ * casing transform. The only glue here is the read-merge-write helper
+ * ({@link mergeGrants}) that lets a single-grant write preserve every other row
+ * (the contract has no per-field merge; the document IS the new state).
+ */
+
+/**
+ * The full agent-auth policy document — the shape of BOTH the `agent-auth-get`
+ * output and the `agent-auth-update` input (they are identical). A flat list of
+ * grant rows plus the document-level discovery grants; mirrors the contract
+ * `AgentAuthDoc` wire shape verbatim (snake_case).
+ *
+ * `discover_dids` is the list of DIDs the user lets their registered agents
+ * *enumerate the contracts of* via `listContracts`: an org DID grants org-mode
+ * discovery, the user's own DID grants self-mode discovery. It lives at document
+ * level — not on a grant — because discovery must surface contracts the agent
+ * cannot yet call. The node's discovery gate additionally requires the calling
+ * agent to be the `grantee` of at least one grant (subject binding), so an
+ * unregistered agent discovers nothing regardless of this list.
+ *
+ * The document IS the new state on a write: an empty `grants` list revokes all
+ * agent access, and an empty `discover_dids` persists an empty discovery-grant
+ * list (there is no per-field merge). Use {@link mergeGrants} /
+ * {@link mergeDiscoverDids} to read-merge-write a single grant without dropping
+ * the rest.
+ */
+interface AgentAuthDoc {
+    /** Every standing agent-edge grant, each keyed by its `grantee` agent DID. */
+    grants: BoundGrant[];
+    /** Document-level discovery grants (`did:t3n:<40-hex>` entries). */
+    discover_dids: string[];
+}
+/**
+ * Decode an `agent-auth-get` response into an {@link AgentAuthDoc}. The wire is
+ * already snake_case, so grant rows pass through unchanged — this only defaults
+ * a `null` / absent response (the empty policy) and a missing field to an empty
+ * list. NOT a casing transform.
+ */
+declare function parseAgentAuthDoc(response: unknown): AgentAuthDoc;
+interface GrantsMergeResult {
+    /** Full merged grant list, ready for `agent-auth-update`. */
+    grants: BoundGrant[];
+    /** `"<grantee> → <contract_id>"` rows preserved from the existing policy. */
+    preservedRows: string[];
+}
+/**
+ * Merge new grant rows into the existing flat list with `(grantee, contract_id)`
+ * union semantics: an existing row whose `(grantee, contract_id)` matches a new
+ * row is replaced; every other existing row is preserved (and reported in
+ * `preservedRows` as an audit aid). New rows for a `(grantee, contract_id)` not
+ * already present are appended.
+ */
+declare function mergeGrants(existing: BoundGrant[], additions: BoundGrant[]): GrantsMergeResult;
+/**
+ * Order-preserving deduplicating union of discovery-grant DID lists — the
+ * read-merge-write counterpart of {@link mergeGrants} for the document-level
+ * `discover_dids` (the contract rejects duplicate entries, so the union must
+ * dedupe).
+ */
+declare function mergeDiscoverDids(existing: string[], additions: string[]): string[];
+
+/**
+ * KYC types for the `tee:user/contracts::kyc-status` short-poll
+ * function.
+ *
+ * The shape mirrors the `kyc-status` wire response.
+ * The bytes go straight from the contract
+ * through the JSON-RPC envelope into [[T3nClient.kycStatus]].
+ */
+
+/**
+ * Terminal status for a Level 2 KYC verification, plus `pending`.
+ *
+ * - `pending` — provider has not delivered a verdict yet, or the
+ *   webhook arrived but the post-action VC issuance hasn't completed.
+ * - `verified` — provider approved AND a VC has been issued. `vcIds`
+ *   carries the issued credential ids.
+ * - `rejected` — provider declined / required resubmission /
+ *   expired / the user abandoned the flow. `error` may carry a
+ *   provider-supplied reason.
+ * - `orphan` — a Veriff webhook arrived with a `vendorData` that
+ *   couldn't be matched to any user. Should not
+ *   happen in the MetaMask flow but the contract surfaces it for
+ *   completeness.
+ */
+type KycStatusKind = "pending" | "verified" | "rejected" | "orphan";
+/**
+ * Snapshot returned by `tee:user/contracts::kyc-status`.
+ *
+ * Field names use camelCase on the SDK boundary even though the
+ * wire is snake_case — the wrapper rewrites keys at the client edge
+ * so callers don't see the JSON shape leaking through.
+ */
+interface KycStatus {
+    /** Terminal status if reached, otherwise `pending`. */
+    status: KycStatusKind;
+    /**
+     * Provider being polled. Echoed back so callers that didn't
+     * supply one see the contract's default (`"veriff"` in phase one).
+     */
+    provider: string;
+    /**
+     * Unix-millis of the latest contract-visible event:
+     * VC issuance time, attestation arrival time, session-row
+     * `started_at_ms`, or orphan-record arrival time. Best-effort —
+     * `undefined` when no source carries a usable timestamp.
+     */
+    updatedAt?: number;
+    /**
+     * VC ids appended for this provider, in append order. Empty for
+     * `pending` / `rejected` / `orphan`.
+     */
+    vcIds: string[];
+    /**
+     * Provider-supplied reason for `rejected`, when available.
+     */
+    error?: string;
+}
+/**
+ * Polling cadence for [[T3nClient.kycStatusPoll]]. Defaults:
+ * poll fast for the first 30 seconds, then back
+ * off, and bail after 5 minutes.
+ */
+interface KycPollCadence {
+    /** Poll interval in ms while `elapsed < switchAtMs`. Default: 2000. */
+    fastMs: number;
+    /** Poll interval in ms once `elapsed >= switchAtMs`. Default: 5000. */
+    slowMs: number;
+    /** Elapsed-ms threshold to switch from fast to slow cadence. Default: 30_000. */
+    switchAtMs: number;
+    /**
+     * Maximum total time to spend polling before rejecting with
+     * [[KycStatusTimeoutError]]. Default: 300_000 (5 minutes).
+     */
+    timeoutMs: number;
+}
+/**
+ * Optional knobs for [[T3nClient.kycStatusPoll]]. Most callers won't
+ * touch any of these — the cadence defaults are baked in.
+ */
+interface KycPollOptions {
+    /**
+     * Cancellation signal. When aborted, the helper rejects with
+     * `signal.reason` (or a generic `AbortError` if the consumer
+     * didn't supply a reason). The currently-in-flight `kycStatus()`
+     * call also receives the signal so it can short-circuit.
+     */
+    signal?: AbortSignal;
+    /**
+     * Called with every snapshot the helper receives, including
+     * non-terminal `pending` ones. Useful for surfacing intermediate
+     * UI states (e.g. "still waiting on provider…"). Errors thrown
+     * from this callback are caught and ignored — they must not
+     * sink the poll loop.
+     */
+    onUpdate?: (status: KycStatus) => void;
+    /**
+     * Override one or more cadence fields. Anything not specified
+     * uses the defaults from [[DEFAULT_KYC_POLL_CADENCE]].
+     */
+    cadence?: Partial<KycPollCadence>;
+    /**
+     * Provider id to poll. Defaults to the contract default
+     * (`"veriff"` in phase one). Mirrored on the wire as
+     * `input.provider_id`.
+     */
+    providerId?: string;
+}
+/**
+ * Default cadence used by [[T3nClient.kycStatusPoll]] when the caller
+ * doesn't override `cadence.*`.
+ */
+declare const DEFAULT_KYC_POLL_CADENCE: KycPollCadence;
+/**
+ * Subset of [[KycStatusKind]] that ends a poll. `pending` is the
+ * only non-terminal value.
+ */
+declare const TERMINAL_KYC_STATUSES: ReadonlySet<KycStatusKind>;
+/**
+ * Thrown by [[T3nClient.kycStatusPoll]] when the cadence's
+ * `timeoutMs` elapses without a terminal status arriving. The
+ * `lastStatus` field is the most recent (necessarily `pending`)
+ * snapshot the helper saw, useful for surfacing "we tried for N
+ * minutes but Veriff is still working" UX.
+ */
+declare class KycStatusTimeoutError extends T3nError {
+    /** The timeout (ms) the helper exhausted before a terminal status arrived. */
+    readonly timeoutMs: number;
+    /** The last `pending` snapshot before timeout, if any. */
+    readonly lastStatus?: KycStatus | undefined;
+    constructor(
+    /** The timeout (ms) the helper exhausted before a terminal status arrived. */
+    timeoutMs: number, 
+    /** The last `pending` snapshot before timeout, if any. */
+    lastStatus?: KycStatus | undefined);
+}
+
+/**
+ * Wire types for the explicit `otp-request` /
+ * `otp-verify` / slim `user-upsert` exports on `tee:user/contracts`
+ * (`tee:user@2.0.0`).
+ *
+ * Pre-2.0.0 the user contract dispatched OTP request and OTP verify
+ * implicitly from the input shape of a single `user-upsert` call.
+ * 2.0.0 splits that surface into three explicit functions; the
+ * shapes here mirror the OTP / user-upsert wire contract.
+ *
+ * Bytes flow directly from the contract
+ * through the JSON-RPC envelope into the SDK wrappers
+ * (`T3nClient.otpRequest`, `T3nClient.otpVerify`,
+ * `T3nClient.submitUserInput`).
+ */
+
+/**
+ * OTP delivery channel. Matches the `OtpContactChannel` Rust enum
+ * with `serde(rename_all = "snake_case")`.
+ */
+type OtpChannel = "email" | "sms";
+/**
+ * Discriminated OTP contact target. Mirrors the Rust `OtpRequest` enum
  * (`email_channel` / `sms_channel` on the wire). Exactly one branch is
  * set — no parallel optional email + phone with a separate channel tag.
  *
@@ -1784,7 +2151,7 @@ interface ListContractsResult {
     next_offset: number | null;
 }
 /** Which standing grant a satisfied/missing entry refers to. */
-type DelegationGrantKind = "agent_auth" | "user_grant";
+type DelegationGrantKind = "agent_auth" | "org_grant";
 /** Params for `delegation.check` (the generic capability read). */
 interface GrantCheckParams {
     /** The target contract whose requirements are checked. */
@@ -1805,7 +2172,7 @@ interface DelegationGrantRef {
     scopes: string[];
 }
 /**
- * Response for `delegation.check`: the `agent_auth ∩ UserGrant` verdict.
+ * Response for `delegation.check`: the `agent_auth ∩ org_grant` verdict.
  *
  * `disclosed` is `true` only when the agent is registered under `pii_did`, so
  * org-side status was safe to disclose; `false` yields the uniform,
@@ -1835,8 +2202,8 @@ declare class T3nClient {
     /**
      * Resolved node base URL. Snapshotted in the constructor so the
      * typed contract wrappers (`kycStatus`, `getSelfEthAddress`, …)
-     * can call `getScriptVersion()` against the same host the
-     * transport talks to. Used only by the `script_version: "latest"`
+     * can call `getContractVersion()` against the same host the
+     * transport talks to. Used only by the `contract_version: "latest"`
      * resolution path in {@link executeUserContract}.
      */
     private readonly effectiveBaseUrl;
@@ -2035,7 +2402,7 @@ declare class T3nClient {
      * Generic capability check (`delegation.check`) — the
      * node-backed source for the MCP `checkDelegation` funnel tool.
      *
-     * Returns the `agent_auth ∩ UserGrant` verdict for `(agent, contract,
+     * Returns the `agent_auth ∩ org_grant` verdict for `(agent, contract,
      * pii_did)`: whether the acting agent (resolved from the session) holds the
      * standing grants that `contract`'s `functions` / `scopes` need for member
      * `pii_did`. The org half is vacuous for no-org (Individual-owned) targets,
@@ -2274,10 +2641,10 @@ declare class T3nClient {
      *    (org-admin gated; idempotent on an already-absent membership). The host
      *    membership gate makes the detach effective immediately.
      * 2. `org-remove-member-grants` — sweep the member from the org's
-     *    per-contract `UserGrant` lists, so the capability does not silently
+     *    per-contract `BoundGrant` lists, so the capability does not silently
      *    reactivate if the member later rejoins.
      *
-     * The member's `agent_auth` delegations are self-scoped (`AGENT_AUTH_MAP` is a
+     * The member's `agent_auth` delegations are self-scoped (the agent-auth edge in `ROLE_ASSIGNMENTS_MAP` is a
      * per-user document an admin cannot reach), so this cannot sweep them; the host
      * membership gate denies them regardless, and the member's own session can run
      * {@link revokeAgentAuthForOrg} for full cleanup.
@@ -2308,7 +2675,7 @@ declare class T3nClient {
      * Revoke the caller's own agent delegations scoped to one org
      * (detach-cascade `agent_auth` half). Dispatches
      * `agent-auth-revoke-org` on `tee:user/contracts` (**SelfOnly**): every
-     * `ScriptGrant` targeting a `z:<orgTid>:*` contract is removed from the
+     * agent-edge grant targeting a `z:<orgTid>:*` contract is removed from the
      * caller's own agent-auth document.
      *
      * @param orgTid - the org's z-space tenant id (`did:t3n:<hex>` or bare
@@ -2320,25 +2687,27 @@ declare class T3nClient {
      * grants delegated to agents. Dispatches `agent-auth-get` on
      * `tee:authorisations/contracts` (the policy's owning contract), which is
      * **SelfOnly**, so this always returns the caller's own
-     * `AGENT_AUTH_MAP[self]` document.
+     * agent-auth edge in `ROLE_ASSIGNMENTS_MAP`.
      *
-     * @returns the full policy document (normalised to the camelCase write
-     *   shape): the per-agent `agents` entries plus the document-level
-     *   `discoverDids` discovery grants
+     * @returns the full policy document as the flat snake_case wire shape: the
+     *   `grants` list (each row's `grantee` is the authorised agent DID) plus the
+     *   document-level `discover_dids` discovery grants
      * @throws if the session is not authenticated, or the contract refuses
      */
-    getAgentAuth(): Promise<AgentAuthPolicy>;
+    getAgentAuth(): Promise<AgentAuthDoc>;
     /**
      * Authorise an agent for one contract on the caller's own behalf
      * (envelope-free authorisation). Read-merge-writes the
-     * caller's `AGENT_AUTH_MAP[self]` document via `agent-auth-update`
-     * (**SelfOnly**) with script-level union semantics, so other contracts'
-     * grants for this or any agent survive untouched.
+     * caller's agent-auth edge in `ROLE_ASSIGNMENTS_MAP` via `agent-auth-update`
+     * (**SelfOnly**) with `(grantee, contract_id)` union semantics, so other
+     * contracts' grants for this or any agent survive untouched.
      *
-     * Carries the new `scopes` + validity fields: the delegated
-     * org-data scopes and an optional `[validFromSecs, validUntilSecs]`
-     * window. The ≤ cap *length* check is enforced contract-side at write
-     * time; the expiry gate is host-side at read time.
+     * The grant is the flat wire {@link BoundGrant}: its `grantee` is the agent
+     * DID being authorised, and it carries `functions`, the delegated org-data
+     * `scopes`, direct-read `read_scopes`, egress `allowed_hosts`, an optional
+     * semver `version_req`, and an optional validity `window`. The ≤ cap *length*
+     * check is enforced contract-side at write time; the expiry gate is host-side
+     * at read time.
      *
      * This is the write surface `getDelegationInstructions` produces the
      * parameters for. The caller MUST be the delegating user, authenticated as
@@ -2350,38 +2719,38 @@ declare class T3nClient {
      * standing discovery), and any `options.discoverDids` are unioned in
      * (order-preserving, deduplicated).
      *
-     * @param agentDid - the agent DID being authorised
-     * @param grant - the single script grant to set (contract, functions,
-     *   scopes, validity, egress hosts)
+     * @param grant - the single grant to set — a {@link BoundGrant} whose
+     *   `grantee` is the agent DID being authorised (contract_id, functions,
+     *   scopes, window, egress hosts)
      * @param options - optional `discoverDids` to union into the document's
      *   discovery grants (org DIDs for org-mode `listContracts`, the caller's
      *   own DID for self mode)
-     * @returns the script rows preserved from the existing policy (audit aid)
+     * @returns the grant rows preserved from the existing policy (audit aid)
      * @throws if the session is not authenticated, or the contract refuses
      */
-    updateAgentAuth(agentDid: string, grant: AgentAuthScriptGrant, options?: {
+    updateAgentAuth(grant: BoundGrant, options?: {
         discoverDids?: string[];
     }): Promise<{
         preservedRows: string[];
     }>;
     /**
      * Build the canonical `ExecuteActionRequest` shape the server
-     * expects (`script_name`, `script_version`, `function_name`, `input`,
+     * expects (`contract_id`, `contract_version`, `function_name`, `input`,
      * optional `pii_did`) and dispatch it through {@link execute}.
      *
      * Two pieces of glue live here that every typed user-contract
      * wrapper would otherwise duplicate:
      *
      * 1. **Field naming.** The server deserialises strictly into
-     *    `script_name` / `script_version` / `function_name` —
+     *    `contract_id` / `contract_version` / `function_name` —
      *    sending `contract` / `version` / `function` produces
      *    `Invalid action request: missing field …` 400s. Centralising
      *    the names here means every wrapper agrees with the server.
-     * 2. **`"latest"` resolution.** `script_version` is `SemVer` on
+     * 2. **`"latest"` resolution.** `contract_version` is `SemVer` on
      *    the server, so a literal `"latest"` cannot be parsed. We
      *    fetch the registered current version via
      *    `GET /api/contracts/current?name=…` (cached per script name
-     *    in `getScriptVersion`) and forward the resolved
+     *    in `getContractVersion`) and forward the resolved
      *    `MAJOR.MINOR.PATCH` string.
      *
      * Wrappers that need PII delegation can extend this helper
@@ -2646,25 +3015,24 @@ declare class T3nClient {
      */
     submitUserInput(input: SubmitUserInputArgs): Promise<SubmitUserInputResult>;
     /**
-     * Replace this user's agent-authorisation policy (`tee:user/contracts` →
-     * `agent-auth-update`). The supplied document IS the new state: an empty
-     * `agents` array revokes all agent access, and an omitted `discoverDids`
+     * Replace this user's agent-authorisation policy (`tee:authorisations/contracts`
+     * → `agent-auth-update`). The supplied document IS the new state: an empty
+     * `grants` array revokes all agent access, and an empty `discover_dids`
      * persists an empty discovery-grant list. This is the full-document
      * write — use {@link T3nClient.updateAgentAuth} for the single-grant
      * read-merge-write that preserves other contracts' grants and the
      * standing discovery grants.
      *
-     * Typed wrapper over the raw contract call: callers pass camelCase input;
-     * the SDK emits the canonical snake_case wire via
-     * {@link toAgentAuthUpdateWire} (carrying `scopes` / `read_scopes` /
-     * validity alongside `functions` / `allowed_hosts`, plus the
-     * document-level `discover_dids`), so it does not rely on the contract's
-     * compatibility aliases.
+     * The {@link AgentAuthDoc} IS the snake_case wire shape — grant rows are
+     * {@link BoundGrant} verbatim — so the document passes straight through with
+     * no casing transform. Absent per-grant qualifiers (`version_req` /
+     * `read_scopes` / `allowed_hosts` / `window`) are simply unset on the object
+     * and so omitted from the JSON.
      *
      * @throws {RpcError} if the contract rejects the policy (validation failure,
      *   too many agents/grants).
      */
-    agentAuthUpdate(input: AgentAuthUpdateInput): Promise<void>;
+    agentAuthUpdate(input: AgentAuthDoc): Promise<void>;
     /**
      * Convenience helper: run the explicit OTP roundtrip and submit
      * the slim user-upsert in one call.
@@ -2859,572 +3227,238 @@ declare class T3nClient {
     /**
      * Get the finalized session blob (for `session.encrypt` calls).
      * Populated by `tryFinalize` once the handshake state machine
-     * reaches its terminal phase.
-     */
-    private getSessionState;
-}
-
-/**
- * Guest-to-Host Request Handlers
- *
- * These handle requests from WASM that need the host environment to perform side effects.
- * Examples: signing challenges, providing public keys, generating random bytes.
- */
-
-/**
- * Account — MetaMask handler accepts either a plain address string or an
- * object with an `address` field (for compatibility with various wallet
- * libraries).
- */
-type EthAccount = string | {
-    address: string;
-};
-/**
- * Create an EthSign handler using MetaMask (window.ethereum)
- * @param account - MetaMask account (string address or object with address property)
- * @param logger - Optional logger instance. Defaults to a logger using the global log level (LogLevel.ERROR).
- *   Pass a custom logger to override logging behavior for this handler.
- * @param privateKey - Optional private key for signing (if provided, MetaMask is not used)
- */
-declare function metamask_sign(account: EthAccount, logger?: Logger, privateKey?: string | undefined): GuestToHostHandler;
-/**
- * Get the current MetaMask address
- * @returns Ethereum address (lowercase, 0x prefixed)
- */
-declare function metamask_get_address(): Promise<string>;
-/**
- * Get the address for a given private key
- * @param privateKey - Ethereum private key (0x prefixed hex string)
- * @returns Ethereum address (lowercase, 0x prefixed)
- */
-declare function eth_get_address(privateKey: string): string;
-/**
- * Create an MlKemPublicKey handler that lazily fetches the root public key
- * from `${baseUrl}/status` on first invocation, verifies it against the
- * DKG attestation trust anchor (SP-003), and caches the encoded response
- * for subsequent calls.
- *
- * @param baseUrl - **Required**. The node URL whose `/status` endpoint should
- *                  serve the ML-KEM public key. Must be the same URL the
- *                  T3nClient is constructed with — otherwise the handshake
- *                  encrypts to one node and sends ciphertext to another.
- *
- *                  Was optional in 0.3.x, where omitting it caused the lazy
- *                  fetch to silently fall back to `NODE_URLS[currentEnv]` and
- *                  hit the wrong node. Three downstream consumers (demo.ts,
- *                  t3-apps dev wallet hooks, t3n-mcp session manager) all
- *                  hit this trap before we tightened the type.
- * @param trustAnchor - **Required**. Client-pinned expected peer IDs +
- *                  RTMR3 allowlist the DKG bundle is verified against, or
- *                  `{ unsafe_trust_server: true }` to skip verification.
- *                  The key is only cached/returned once verification passes.
- */
-declare function createMlKemPublicKeyHandler(baseUrl: string, trustAnchor: TrustAnchorOrUnsafe): GuestToHostHandler;
-/**
- * Create Random handler backed by crypto.getRandomValues
- * Note: The Rust Vec<u8> type serializes as an array of bytes, not a base64 string
- */
-declare function createRandomHandler(): GuestToHostHandler;
-/**
- * Create the default handler set required by the T3n handshake.
- *
- * @param baseUrl - **Required**. Forwarded to `createMlKemPublicKeyHandler`
- *                  so the lazy /status fetch hits the right node.
- * @param trustAnchor - **Required**. Forwarded to the ML-KEM handler so the
- *                  fetched key is verified against the DKG attestation
- *                  (SP-003) before the handshake trusts it.
- */
-declare function createDefaultHandlers(baseUrl: string, trustAnchor: TrustAnchorOrUnsafe): GuestToHostHandlers;
-
-/**
- * Stateless `api_key` agent auth.
- *
- * `invoke` posts once to `POST /api/invoke` — an HTTPS-only
- * endpoint (see the HTTPS-guard note below) that authenticates an org agent
- * by an opaque API key (`X-T3N-Api-Key: t3n_key_<...>`) and executes a
- * `z:` contract as that agent in the SAME request. Unlike
- * {@link T3nClient.execute}, there is **no** ML-KEM handshake, **no**
- * `Session-Id`, and **no** session state: the node derives the acting agent
- * DID from the relayed key per-call (`resolve_stateless_credential`
- * driving the session contract's `api_key` action), then runs the same
- * execute pipeline `action.execute` runs after `check_authentication`
- * (`ActionService::execute_as_did`), and returns the contract's decoded
- * result as a plain `Json(result)` body — NOT a JSON-RPC envelope.
- *
- * Because the response is the bare decoded value (no `{jsonrpc,result,id}`
- * wrapper to unwrap), decoding reuses {@link parseContractResponse} — the
- * exact same JSON.parse + optional-schema path {@link T3nClient.executeAndDecode}
- * uses for the session `execute` RPC — so callers get identical typed /
- * schema-validated decoding on either path.
- *
- * This module intentionally does NOT import {@link T3nClient}, the WASM
- * component loader, or any handshake/session machinery — `invoke` is
- * a single fetch, nothing else.
- *
- * ### HTTPS guard (CodeRabbit T2)
- * The API key is a long-lived bearer credential relayed in a plain header,
- * so `invoke` refuses to send it over an insecure transport: `baseUrl`
- * must be `https:`, unless the host is a local-dev loopback
- * (`localhost` / `127.0.0.1` / `[::1]`), in which case plain `http:` is
- * allowed. The check runs before any network activity — an insecure
- * `baseUrl` never gets as far as a `fetch` call.
- *
- * ### Error hygiene (CodeRabbit T3/T4/T5)
- * Every error `invoke` throws is a fixed, generic
- * {@link InvokeError} message — the response body text, the
- * underlying network error's message, and the api key are never
- * interpolated into it. This is defense in depth against a server (or a
- * malicious intermediary) that echoes the key or other secrets back in an
- * error body: whatever comes back over the wire on a non-2xx response is
- * discarded, not surfaced. The timeout timer also stays armed until the
- * response body has been fully read (or has itself timed out) — see
- * {@link invoke}'s implementation — so a connection that delivers
- * headers and then stalls on the body still respects `timeoutMs`.
- */
-
-/**
- * Wire body for `POST /api/invoke` — mirrors the server's
- * server-side `ExecuteActionRequest`, the same shape
- * `T3nClient`'s `execute*` wrappers build for the session `action.execute`
- * RPC. Field names are load-bearing: the server deserialises strictly into
- * `script_name` / `script_version` / `function_name` (see
- * `T3nClient.executeSystemContract`'s doc comment) — `contract` / `version`
- * / `function` produce a 400.
- */
-interface InvokeRequest {
-    script_name: string;
-    script_version: string;
-    function_name: string;
-    /** Delegated-call target member; omitted for a self (non-delegated) call. */
-    pii_did?: string;
-    input?: unknown;
-}
-/** Options for {@link invoke}. */
-interface InvokeOptions {
-    /**
-     * RPC base URL of the T3n node, e.g. `https://node.example.com`. Must be
-     * `https:` unless the host is a local-dev loopback (`localhost` /
-     * `127.0.0.1` / `[::1]`) — see the module doc comment's HTTPS-guard note.
-     */
-    baseUrl: string;
-    /**
-     * The agent's opaque API key (`t3n_key_<...>`), relayed verbatim in the
-     * `X-T3N-Api-Key` header. Never logged and never interpolated into any
-     * error this module throws — see the module doc comment and
-     * {@link InvokeError}.
-     */
-    apiKey: string;
-    /** The wire request to execute, built to the {@link InvokeRequest} shape. */
-    request: InvokeRequest;
-    /** Fetch timeout in ms. Defaults to 30s, matching {@link HttpTransport}. */
-    timeoutMs?: number;
-}
-/**
- * Thrown when `POST /api/invoke` fails at the transport or HTTP
- * layer (network failure, timeout, non-2xx status). Contract-level errors
- * the node returns as a 2xx JSON error value are NOT wrapped here — they
- * flow through {@link parseContractResponse}'s normal return, same as the
- * session `execute` path.
- *
- * The message is always one of a small set of fixed, generic strings — it
- * NEVER contains the raw api key, the response body text, or the
- * underlying network error's message (CodeRabbit T4/T5): a server (or a
- * misbehaving intermediary) that echoes the key or other secrets back in
- * an error body must not be able to leak them through this error's
- * message.
- */
-declare class InvokeError extends T3nError {
-    readonly status?: number | undefined;
-    constructor(message: string, status?: number | undefined);
-}
-/**
- * Execute a `z:` contract as an org agent, authenticating with an opaque
- * API key — one request, no handshake, no session.
- *
- * @param opts - baseUrl, apiKey, and the wire request to execute
- * @param schema - optional validator applied to the decoded result (e.g. a
- *   zod schema); anything exposing `.parse(value)` is accepted, same as
- *   {@link T3nClient.executeAndDecode}
- * @returns the contract's decoded result, typed as `T`
- * @throws {InvokeError} if `baseUrl` is insecure, on a network
- *   failure/timeout, or on a non-2xx response
- * @throws {ContractResponseError} if the node returns a 2xx with a body
- *   that is not valid JSON
- */
-declare function invoke<T = unknown>(opts: InvokeOptions, schema?: ContractResponseSchema<T>): Promise<T>;
+     * reaches its terminal phase.
+     */
+    private getSessionState;
+}
 
 /**
- * Token fixed-point units (USDT-style 6 decimals).
- *
- * As of `tee:*` metering v2, every token amount on the wire —
- * {@link BalanceRow}'s `available`/`reserved`, {@link UsageEntry.amount},
- * and `total_supply` — is denominated in **base units**, where
- * `1 T3N token = `{@link BASE_UNITS_PER_TOKEN}` base units`. The node
- * meters the *actual* fractional cost of each operation (pro-rata by
- * bytes / byte-seconds / fuel) down to `1e-6` token, so amounts are
- * raw integers in base units, NOT whole tokens.
- *
- * The wire fields are left as raw base units (no silent rescaling — that
- * would lose precision for large balances and surprise callers doing
- * arithmetic). Use {@link formatTokens} to render a human "tokens"
- * string and {@link toBaseUnits} to convert a token figure back.
+ * Guest-to-Host Request Handlers
  *
- * ⚠️ Breaking vs. the pre-decimals SDK: a balance that used to read `5`
- * (whole tokens) now reads `5_000_000` (base units). Multiply existing
- * display code through {@link formatTokens}.
+ * These handle requests from WASM that need the host environment to perform side effects.
+ * Examples: signing challenges, providing public keys, generating random bytes.
  */
-/** Decimal places in a T3N token (fixed; mirrors the node constant). */
-declare const TOKEN_DECIMALS = 6;
-/** Base units per whole T3N token — `10 ** TOKEN_DECIMALS`. */
-declare const BASE_UNITS_PER_TOKEN = 1000000;
+
 /**
- * Render a base-unit amount as a human-readable token string, e.g.
- * `25_920_000 → "25.92"`, `1_000_000 → "1"`, `4768 → "0.004768"`.
- *
- * Trailing-zero fraction digits are trimmed; an integer amount renders
- * with no decimal point. Accepts `number` or `bigint`; for balances
- * above `Number.MAX_SAFE_INTEGER` prefer passing a `bigint`.
+ * Account — MetaMask handler accepts either a plain address string or an
+ * object with an `address` field (for compatibility with various wallet
+ * libraries).
  */
-declare function formatTokens(baseUnits: number | bigint): string;
+type EthAccount = string | {
+    address: string;
+};
 /**
- * Convert a whole-or-fractional token figure to base units (rounded to
- * the nearest base unit). E.g. `25.92 → 25_920_000`, `1 → 1_000_000`.
+ * Create an EthSign handler using MetaMask (window.ethereum)
+ * @param account - MetaMask account (string address or object with address property)
+ * @param logger - Optional logger instance. Defaults to a logger using the global log level (LogLevel.ERROR).
+ *   Pass a custom logger to override logging behavior for this handler.
+ * @param privateKey - Optional private key for signing (if provided, MetaMask is not used)
  */
-declare function toBaseUnits(tokens: number): number;
-
+declare function metamask_sign(account: EthAccount, logger?: Logger, privateKey?: string | undefined): GuestToHostHandler;
 /**
- * Org-data wire types mirroring the org-data contract wire shapes.
- *
- * Plain TypeScript interfaces (no zod) — the SDK does not use a
- * validation library for domain types; see the existing `types/` files.
- *
- * Each response type below is paired with a shallow runtime predicate
- * (`isMutationResponse`, `isOrgPolicyMeta`, etc.) so the org-data client
- * can `assertShape` the decoded payload before returning to callers.
- * Predicates check the top-level structure only; nested elements
- * (e.g. each `UserGrant` inside `OrgContractGrants.grants`) are not
- * deeply validated — see `utils/shape.ts` for the rationale.
- *
- * Reference: the org-data wire contract.
+ * Get the current MetaMask address
+ * @returns Ethereum address (lowercase, 0x prefixed)
  */
+declare function metamask_get_address(): Promise<string>;
 /**
- * Capability grant stored under `ORG_CONTRACT_GRANTS_MAP`.
- *
- * Mirrors the org-data `UserGrant` wire shape.
+ * Get the address for a given private key
+ * @param privateKey - Ethereum private key (0x prefixed hex string)
+ * @returns Ethereum address (lowercase, 0x prefixed)
  */
-interface UserGrant {
-    /** The user this grant applies to (`did:t3n:<40-hex>`). */
-    user_did: string;
-    /** WIT function names the user may invoke (e.g. `"set-records"`). */
-    functions: string[];
-    /** Data scope paths the user may access (e.g. `"example/records"`). */
-    scopes: string[];
-}
+declare function eth_get_address(privateKey: string): string;
 /**
- * Policy record for an organisation's data tier.
+ * Create an MlKemPublicKey handler that lazily fetches the root public key
+ * from `${baseUrl}/status` on first invocation, verifies it against the
+ * DKG attestation trust anchor (SP-003), and caches the encoded response
+ * for subsequent calls.
  *
- * Mirrors the org-data policy-meta wire shape.
- */
-interface OrgPolicyMeta {
-    /** DIDs (`did:t3n:<40-hex>`) of users authorised to manage policy and read data. */
-    admins: string[];
-    /** Maximum number of admins allowed for this org. */
-    max_admins: number;
-    /** Unix timestamp (secs) when the policy was first created. */
-    created_at_secs: number;
-    /** Unix timestamp (secs) of the most recent policy update. */
-    updated_at_secs: number;
-    /**
-     * Per-org ceiling on delegation-credential validity (seconds).
-     *
-     * Absent when no org-level cap is set — the contract omits the field
-     * (never serialises null) and the cluster-wide
-     * `delegation.max_credential_validity_secs` governs instead. When set,
-     * the effective cap is `min(max_credential_validity_secs, cluster_ceiling)`.
-     */
-    max_credential_validity_secs?: number;
-}
-/** Shallow runtime guard for {@link OrgPolicyMeta}. */
-declare function isOrgPolicyMeta(value: unknown): value is OrgPolicyMeta;
-/**
- * Effective org policy view returned by `org-policy-view`.
+ * @param baseUrl - **Required**. The node URL whose `/status` endpoint should
+ *                  serve the ML-KEM public key. Must be the same URL the
+ *                  T3nClient is constructed with — otherwise the handshake
+ *                  encrypts to one node and sends ciphertext to another.
  *
- * Readable by any authenticated session (non-sensitive metadata).
- * Returns the **effective** credential validity cap:
- * `min(org.max_credential_validity_secs, cluster_ceiling)`, equal to the
- * cluster ceiling when the org has not set a per-org cap. The contract
- * always returns a value (or errors) — the field is never null.
+ *                  Was optional in 0.3.x, where omitting it caused the lazy
+ *                  fetch to silently fall back to `NODE_URLS[currentEnv]` and
+ *                  hit the wrong node. Three downstream consumers (demo.ts,
+ *                  t3-apps dev wallet hooks, t3n-mcp session manager) all
+ *                  hit this trap before we tightened the type.
+ * @param trustAnchor - **Required**. Client-pinned expected peer IDs +
+ *                  RTMR3 allowlist the DKG bundle is verified against, or
+ *                  `{ unsafe_trust_server: true }` to skip verification.
+ *                  The key is only cached/returned once verification passes.
  */
-interface OrgPolicyView {
-    /**
-     * Effective delegation-credential validity cap in seconds:
-     * `min(org value, cluster ceiling)`, equal to the cluster ceiling when the
-     * org has not set a per-org cap. Always present — mirrors the contract's
-     * `PolicyViewResponse.effective_validity_secs` (org-data `org-policy-view`).
-     */
-    effective_validity_secs: number;
-}
-/** Shallow runtime guard for {@link OrgPolicyView}. */
-declare function isOrgPolicyView(value: unknown): value is OrgPolicyView;
+declare function createMlKemPublicKeyHandler(baseUrl: string, trustAnchor: TrustAnchorOrUnsafe): GuestToHostHandler;
 /**
- * Caller-scoped admin status returned by `org-am-i-admin`.
- *
- * Reports only whether the **calling** session's DID is in the org's admin
- * list — never the roster itself (contrast {@link OrgPolicyMeta}, returned by
- * the admin-gated `org-policy-get`). Readable by any authenticated session.
- * Mirrors the org-data `AmIAdminResponse` wire shape.
+ * Create Random handler backed by crypto.getRandomValues
+ * Note: The Rust Vec<u8> type serializes as an array of bytes, not a base64 string
  */
-interface OrgAdminStatus {
-    /** Whether the calling session is an admin of the queried org. */
-    is_admin: boolean;
-}
-/** Shallow runtime guard for {@link OrgAdminStatus}. */
-declare function isOrgAdminStatus(value: unknown): value is OrgAdminStatus;
+declare function createRandomHandler(): GuestToHostHandler;
 /**
- * Standard response returned by all policy write and data mutation operations.
+ * Create the default handler set required by the T3n handshake.
  *
- * Mirrors the org-data `MutationResponse` wire shape.
+ * @param baseUrl - **Required**. Forwarded to `createMlKemPublicKeyHandler`
+ *                  so the lazy /status fetch hits the right node.
+ * @param trustAnchor - **Required**. Forwarded to the ML-KEM handler so the
+ *                  fetched key is verified against the DKG attestation
+ *                  (SP-003) before the handshake trusts it.
  */
-interface MutationResponse {
-    /**
-     * `"created"`, `"updated"`, `"deleted"`, or — for the agent-card mutations —
-     * `"published"` / `"unpublished"`.
-     */
-    status: string;
-    /** Hex-encoded entry ID; present on data write/delete operations. */
-    entry_id?: string;
-    /** Whether the target key existed before deletion; present on single-entry deletes. */
-    deleted?: boolean;
-    /** Number of entries removed; present on `org-data-delete-scope`. */
-    deleted_entries?: number;
-    tx_hash: string | null;
-}
+declare function createDefaultHandlers(baseUrl: string, trustAnchor: TrustAnchorOrUnsafe): GuestToHostHandlers;
+
 /**
- * Shallow runtime guard for {@link MutationResponse}.
+ * Stateless `api_key` agent auth.
  *
- * Only the always-present fields are checked — `status` is mandatory on
- * every mutation; `tx_hash` is non-optional but nullable. The optional
- * fields (`entry_id`, `deleted`, `deleted_entries`) are not validated
- * because their presence depends on which mutation ran.
- */
-declare function isMutationResponse(value: unknown): value is MutationResponse;
-/**
- * Response type alias for org-writers-get.
+ * `invoke` posts once to `POST /api/invoke` — an HTTPS-only
+ * endpoint (see the HTTPS-guard note below) that authenticates an org agent
+ * by an opaque API key (`X-T3N-Api-Key: t3n_key_<...>`) and executes a
+ * `z:` contract as that agent in the SAME request. Unlike
+ * {@link T3nClient.execute}, there is **no** ML-KEM handshake, **no**
+ * `Session-Id`, and **no** session state: the node derives the acting agent
+ * DID from the relayed key per-call (`resolve_stateless_credential`
+ * driving the session contract's `api_key` action), then runs the same
+ * execute pipeline `action.execute` runs after `check_authentication`
+ * (`ActionService::execute_as_did`), and returns the contract's decoded
+ * result as a plain `Json(result)` body — NOT a JSON-RPC envelope.
  *
- * The wire body is `{ writers: string[] }` where each entry is
- * `did:t3n:<40-hex>`.
- */
-interface OrgWriters {
-    writers: string[];
-}
-/** Shallow runtime guard for {@link OrgWriters}. */
-declare function isOrgWriters(value: unknown): value is OrgWriters;
-/**
- * Response type alias for org-grants-get.
+ * Because the response is the bare decoded value (no `{jsonrpc,result,id}`
+ * wrapper to unwrap), decoding reuses {@link parseContractResponse} — the
+ * exact same JSON.parse + optional-schema path {@link T3nClient.executeAndDecode}
+ * uses for the session `execute` RPC — so callers get identical typed /
+ * schema-validated decoding on either path.
  *
- * The wire body echoes the `contract_id` alongside the grant list.
- */
-interface OrgContractGrants {
-    contract_id: string;
-    grants: UserGrant[];
-}
-/**
- * Shallow runtime guard for {@link OrgContractGrants}.
+ * This module intentionally does NOT import {@link T3nClient}, the WASM
+ * component loader, or any handshake/session machinery — `invoke` is
+ * a single fetch, nothing else.
  *
- * Validates the immediate envelope (`contract_id: string`, `grants:
- * array`) without recursing into each `UserGrant`. The Rust contract
- * is the source of truth for grant element shape; widening the predicate
- * here would create maintenance churn against benign field additions.
- */
-declare function isOrgContractGrants(value: unknown): value is OrgContractGrants;
-/**
- * One grant inside a role: a {@link UserGrant} body (without the
- * grantee, which is bound at assignment time) plus the target contract.
- * Mirrors the org-data `RoleGrant` wire shape.
- */
-interface RoleGrant {
-    /** Target contract (canonical name, e.g. `"tee:z-payroll/contracts"`). */
-    contract_id: string;
-    /** WIT function names this grant confers. */
-    functions: string[];
-    /** Data scope paths this grant confers (canonicalised lowercase). */
-    scopes: string[];
-}
-/**
- * A role: a named bundle of grants and/or composed sub-roles.
- * Mirrors the org-data `RoleDefinition` wire shape.
+ * ### HTTPS guard (CodeRabbit T2)
+ * The API key is a long-lived bearer credential relayed in a plain header,
+ * so `invoke` refuses to send it over an insecure transport: `baseUrl`
+ * must be `https:`, unless the host is a local-dev loopback
+ * (`localhost` / `127.0.0.1` / `[::1]`), in which case plain `http:` is
+ * allowed. The check runs before any network activity — an insecure
+ * `baseUrl` never gets as far as a `fetch` call.
+ *
+ * ### Error hygiene (CodeRabbit T3/T4/T5)
+ * Every error `invoke` throws is a fixed, generic
+ * {@link InvokeError} message — the response body text, the
+ * underlying network error's message, and the api key are never
+ * interpolated into it. This is defense in depth against a server (or a
+ * malicious intermediary) that echoes the key or other secrets back in an
+ * error body: whatever comes back over the wire on a non-2xx response is
+ * discarded, not surfaced. The timeout timer also stays armed until the
+ * response body has been fully read (or has itself timed out) — see
+ * {@link invoke}'s implementation — so a connection that delivers
+ * headers and then stalls on the body still respects `timeoutMs`.
  */
-interface RoleDefinition {
-    /** Org-unique role identifier (slug; function-name grammar). */
-    role_id: string;
-    /** Human-facing label. */
-    label: string;
-    /** Composite: other role ids in the same org whose grants this role confers. */
-    includes: string[];
-    /** Grants this role confers directly. */
-    grants: RoleGrant[];
-}
+
 /**
- * The roles assigned to one grantee within one org.
- * Mirrors the org-data `RoleAssignments` wire shape.
+ * Wire body for `POST /api/invoke` — mirrors the server's
+ * server-side `ExecuteActionRequest`, the same shape
+ * `T3nClient`'s `execute*` wrappers build for the session `action.execute`
+ * RPC. Field names are load-bearing: the server deserialises strictly into
+ * `contract_id` / `contract_version` / `function_name` (see
+ * `T3nClient.executeSystemContract`'s doc comment) — `contract` / `version`
+ * / `function` produce a 400.
  */
-interface RoleAssignments {
-    /** Assigned role ids. */
-    roles: string[];
-}
-/** Response for `org-role-get`; `role` is `null` when the id is unknown. */
-interface RoleGetResponse {
-    role: RoleDefinition | null;
-}
-/** Shallow runtime guard for {@link RoleGetResponse}. */
-declare function isRoleGetResponse(value: unknown): value is RoleGetResponse;
-/** Response for `org-role-assignments-get`. */
-interface RoleAssignmentsResponse {
-    /** Echoed back so callers don't need to track which request this answers. */
-    grantee_did: string;
-    /** The grantee's assigned role ids (empty when none). */
-    roles: string[];
+interface InvokeRequest {
+    contract_id: string;
+    contract_version: string;
+    function_name: string;
+    /** Delegated-call target member; omitted for a self (non-delegated) call. */
+    pii_did?: string;
+    input?: unknown;
 }
-/** Shallow runtime guard for {@link RoleAssignmentsResponse}. */
-declare function isRoleAssignmentsResponse(value: unknown): value is RoleAssignmentsResponse;
-/** The (org) key for `listAgents` — mirrors the contract's `OrgOnlyInput`. */
-interface ListAgentsInput {
-    orgDid: string;
+/** Options for {@link invoke}. */
+interface InvokeOptions {
+    /**
+     * RPC base URL of the T3n node, e.g. `https://node.example.com`. Must be
+     * `https:` unless the host is a local-dev loopback (`localhost` /
+     * `127.0.0.1` / `[::1]`) — see the module doc comment's HTTPS-guard note.
+     */
+    baseUrl: string;
+    /**
+     * The agent's opaque API key (`t3n_key_<...>`), relayed verbatim in the
+     * `X-T3N-Api-Key` header. Never logged and never interpolated into any
+     * error this module throws — see the module doc comment and
+     * {@link InvokeError}.
+     */
+    apiKey: string;
+    /** The wire request to execute, built to the {@link InvokeRequest} shape. */
+    request: InvokeRequest;
+    /** Fetch timeout in ms. Defaults to 30s, matching {@link HttpTransport}. */
+    timeoutMs?: number;
 }
 /**
- * One org-owned agent in a {@link ListAgentsResponse}: the agent's DID, its
- * display name, and the number of distinct contracts it can access via a direct
- * grant. Mirrors the org-data `AgentSummary` wire shape. The name comes from the
- * agent's private card (falling back to the DID), so the FE no longer needs to
- * fetch each `public:agent_cards` entry to render the roster.
+ * Thrown when `POST /api/invoke` fails at the transport or HTTP
+ * layer (network failure, timeout, non-2xx status). Contract-level errors
+ * the node returns as a 2xx JSON error value are NOT wrapped here — they
+ * flow through {@link parseContractResponse}'s normal return, same as the
+ * session `execute` path.
+ *
+ * The message is always one of a small set of fixed, generic strings — it
+ * NEVER contains the raw api key, the response body text, or the
+ * underlying network error's message (CodeRabbit T4/T5): a server (or a
+ * misbehaving intermediary) that echoes the key or other secrets back in
+ * an error body must not be able to leak them through this error's
+ * message.
  */
-interface AgentSummary {
-    /** The agent's DID (`did:t3n:<40-hex>`). */
-    did: string;
-    /** The agent's display name, from its private card (DID when unavailable). */
-    name: string;
-    /** Count of distinct contracts the agent holds a direct grant on. */
-    contract_count: number;
-}
-/** Response for `org-data-list-agents`. */
-interface ListAgentsResponse {
-    /** The org's org-owned agents, sorted by DID. */
-    agents: AgentSummary[];
-}
-/** Shallow runtime guard for {@link ListAgentsResponse}. */
-declare function isListAgentsResponse(value: unknown): value is ListAgentsResponse;
-/** Response for `org-data-list`. */
-interface DataListResponse {
-    /** Hex-encoded entry IDs for this page. */
-    entry_ids: string[];
-    /** Offset to pass for the next page. `null` when this is the last page. */
-    next_offset: number | null;
-    /** Total number of entries in the scope (across all pages). */
-    total: number;
-}
-/** Shallow runtime guard for {@link DataListResponse}. */
-declare function isDataListResponse(value: unknown): value is DataListResponse;
-/** Secret shape discriminator (mirrors the contract `SecretKind`). */
-type SecretKind = "single_value" | "json";
-/** Metadata common to every {@link SecretView} entry. */
-interface SecretViewBase {
-    /** Secret name (the `(org, name)` key tail). */
-    name: string;
-    /** Monotonic version, bumped on each value rotation and ACL edit. */
-    version: number;
-    /** Unix seconds of the most recent write. */
-    updated_at_secs: number;
+declare class InvokeError extends T3nError {
+    readonly status?: number | undefined;
+    constructor(message: string, status?: number | undefined);
 }
 /**
- * The redacted per-secret summary `org-secret-list` returns — a discriminated
- * union on `kind`. The value is NEVER present: a single-value exposes only its
- * last four characters and a json secret only its sorted top-level field names.
+ * Execute a `z:` contract as an org agent, authenticating with an opaque
+ * API key — one request, no handshake, no session.
+ *
+ * @param opts - baseUrl, apiKey, and the wire request to execute
+ * @param schema - optional validator applied to the decoded result (e.g. a
+ *   zod schema); anything exposing `.parse(value)` is accepted, same as
+ *   {@link T3nClient.executeAndDecode}
+ * @returns the contract's decoded result, typed as `T`
+ * @throws {InvokeError} if `baseUrl` is insecure, on a network
+ *   failure/timeout, or on a non-2xx response
+ * @throws {ContractResponseError} if the node returns a 2xx with a body
+ *   that is not valid JSON
  */
-type SecretView = (SecretViewBase & {
-    kind: "single_value";
-    /** Last four characters of the value (whole value when ≤ 4 chars). */
-    last4: string;
-}) | (SecretViewBase & {
-    kind: "json";
-    /** Sorted top-level object field names (keys only, no values). */
-    field_names: string[];
-});
-/** Shallow runtime guard for {@link SecretView}. */
-declare function isSecretView(value: unknown): value is SecretView;
+declare function invoke<T = unknown>(opts: InvokeOptions, schema?: ContractResponseSchema<T>): Promise<T>;
+
 /**
- * Full secret record returned by `org-secret-get` — the value IS included
- * (the deliberate read-back path the READ axis exists for), along with all
- * three ACLs.
+ * Token fixed-point units (USDT-style 6 decimals).
+ *
+ * As of `tee:*` metering v2, every token amount on the wire —
+ * {@link BalanceRow}'s `available`/`reserved`, {@link UsageEntry.amount},
+ * and `total_supply` — is denominated in **base units**, where
+ * `1 T3N token = `{@link BASE_UNITS_PER_TOKEN}` base units`. The node
+ * meters the *actual* fractional cost of each operation (pro-rata by
+ * bytes / byte-seconds / fuel) down to `1e-6` token, so amounts are
+ * raw integers in base units, NOT whole tokens.
+ *
+ * The wire fields are left as raw base units (no silent rescaling — that
+ * would lose precision for large balances and surprise callers doing
+ * arithmetic). Use {@link formatTokens} to render a human "tokens"
+ * string and {@link toBaseUnits} to convert a token figure back.
+ *
+ * ⚠️ Breaking vs. the pre-decimals SDK: a balance that used to read `5`
+ * (whole tokens) now reads `5_000_000` (base units). Multiply existing
+ * display code through {@link formatTokens}.
  */
-interface SecretRecord {
-    name: string;
-    kind: SecretKind;
-    /** The value as text: the scalar for a single-value, canonical JSON object for a json secret. */
-    value: string;
-    version: number;
-    /** READ axis — DIDs allowed to read the value back. */
-    reader_dids: string[];
-    /** READ axis — role ids allowed to read the value back. */
-    reader_roles: string[];
-    /** MANAGE axis — DIDs allowed to rotate the value. */
-    manager_dids: string[];
-    /** MANAGE axis — role ids allowed to rotate the value. */
-    manager_roles: string[];
-    /** USE axis — canonical contract ids allowed to have the value injected. */
-    contract_allowlist: string[];
-    created_at_secs: number;
-    updated_at_secs: number;
-    /** DID of the caller who last wrote the record. */
-    updated_by: string;
-}
-/** Shallow runtime guard for {@link SecretRecord}. */
-declare function isSecretRecord(value: unknown): value is SecretRecord;
-/** Response for `org-secret-list`: redacted per-kind views, no values. */
-interface SecretListResponse {
-    secrets: SecretView[];
-}
-/** Shallow runtime guard for {@link SecretListResponse}. */
-declare function isSecretListResponse(value: unknown): value is SecretListResponse;
-/** Response for `org-data-get`. */
-interface DataGetResponse {
-    entry_id: string;
-    /** Hex-encoded raw payload bytes. */
-    payload_hex: string;
-}
-/** Shallow runtime guard for {@link DataGetResponse}. */
-declare function isDataGetResponse(value: unknown): value is DataGetResponse;
+/** Decimal places in a T3N token (fixed; mirrors the node constant). */
+declare const TOKEN_DECIMALS = 6;
+/** Base units per whole T3N token — `10 ** TOKEN_DECIMALS`. */
+declare const BASE_UNITS_PER_TOKEN = 1000000;
 /**
- * Return shape of `agentCardGet` — composed client-side from the generic
- * `org-data-get` read of the card's entry (there is no card-specific read
- * operation on the contract). To check whether a public copy exists, probe
- * the anonymous `GET /api/agent-card/{did}` endpoint.
+ * Render a base-unit amount as a human-readable token string, e.g.
+ * `25_920_000 → "25.92"`, `1_000_000 → "1"`, `4768 → "0.004768"`.
+ *
+ * Trailing-zero fraction digits are trimmed; an integer amount renders
+ * with no decimal point. Accepts `number` or `bigint`; for balances
+ * above `Number.MAX_SAFE_INTEGER` prefer passing a `bigint`.
  */
-interface AgentCardResponse {
-    /** The agent whose card this is (`did:t3n:<40-hex>`). */
-    agent_did: string;
-    /** The stored card JSON body, verbatim. */
-    card: string;
-}
-/** Shallow runtime guard for {@link AgentCardResponse}. */
-declare function isAgentCardResponse(value: unknown): value is AgentCardResponse;
+declare function formatTokens(baseUnits: number | bigint): string;
 /**
- * Legacy direct-route org-data envelope shape retained for compatibility.
- *
- * This mirrors the removed `/api/user-contract/execute` body format from
- * the transitional transport. New callers should use `OrgDataClient`,
- * which now dispatches through authenticated `/api/rpc` +
- * `action.execute` instead.
+ * Convert a whole-or-fractional token figure to base units (rounded to
+ * the nearest base unit). E.g. `25.92 → 25_920_000`, `1 → 1_000_000`.
  */
-interface OrgDataActionWire {
-    nonce: string;
-    user_did: string;
-    authenticator_id: string;
-    contract_id: string;
-    function: string;
-    args_hash: string;
-    expires_at_secs: number;
-    signature: string;
-}
+declare function toBaseUnits(tokens: number): number;
 
 /**
  * OrgDataClient — typed wrapper over the existing authenticated
@@ -3497,10 +3531,17 @@ interface SetWritersInput {
     scope: string;
     writers: string[];
 }
+/**
+ * A grant to set via {@link OrgDataClient.setGrants}. The per-grant
+ * `contract_id` is injected by the SDK from the request `contractId` (the
+ * contract sets it server-side regardless), so callers omit it — a read-back
+ * {@link BoundGrant}, which carries `contract_id`, is still assignable.
+ */
+type SetGrantInput = Omit<BoundGrant, "contract_id">;
 interface SetGrantsInput {
     orgDid: string;
     contractId: string;
-    grants: UserGrant[];
+    grants: SetGrantInput[];
 }
 interface DeleteGrantsInput {
     orgDid: string;
@@ -3762,7 +3803,7 @@ declare class OrgDataClient {
     /** Delete a secret entirely (org-admin only). */
     secretDelete(input: SecretNameInput): Promise<MutationResponse>;
     /**
-     * Full replacement of the user-grant list for a contract.
+     * Full replacement of the org's grant list for a contract.
      *
      * Passing an empty list removes the entry.
      */
@@ -3787,11 +3828,15 @@ declare class OrgDataClient {
     /** Read a grantee's assigned role ids (org-admin only). */
     getRoleAssignments(input: GranteeInput): Promise<RoleAssignmentsResponse>;
     /**
-     * List the org's org-owned agents, each with its display name and the number
-     * of distinct contracts it can access via a direct grant (org-admin only).
+     * List ONE PAGE of the org's org-owned agents, each with its display name and
+     * the number of distinct contracts it can access via a direct grant
+     * (org-admin only).
      *
-     * The name comes from the agent's private card (falling back to the DID), so
-     * the caller renders the roster without fetching each agent's card.
+     * The response carries at most `limit` agents plus an optional `next_cursor`;
+     * to enumerate every agent, pass the returned `next_cursor` back as `cursor`
+     * until it is absent. The name comes from the agent's private card (falling
+     * back to the DID), so the caller renders the roster without fetching each
+     * agent's card.
      *
      * Rides the generic contract-execute funnel (`this.call` →
      * `executeOrgDataAction` → `client.executeAndDecode`) like every other
@@ -3799,6 +3844,17 @@ declare class OrgDataClient {
      * access is not counted.
      */
     listAgents(input: ListAgentsInput): Promise<ListAgentsResponse>;
+    /**
+     * List ONE PAGE of the org's direct HUMAN members, each with its org role
+     * (`admin`|`member`) (org-admin only). A human is a member absent from the
+     * agent registry — the exact complement of {@link listAgents}.
+     *
+     * No profile PII (name/email) is returned; the roster is DID + role only
+     * (AI-175). The response carries at most `limit` members plus an optional
+     * `next_cursor`; to enumerate every member, pass the returned `next_cursor`
+     * back as `cursor` until it is absent.
+     */
+    listHumanMembers(input: ListHumanMembersInput): Promise<ListHumanMembersResponse>;
     /**
      * Write a data entry to the org's scope.
      *
@@ -3826,7 +3882,7 @@ declare class OrgDataClient {
     purgeOrg(input: PurgeOrgInput): Promise<MutationResponse>;
     /**
      * Detach-cascade grant sweep: drop `memberDid` from every
-     * one of the org's per-contract `UserGrant` lists. Authorised for an
+     * one of the org's per-contract `BoundGrant` lists. Authorised for an
      * org-admin of the subject, or the member removing their own grants.
      * `deleted_entries` reports how many contract grant lists were rewritten.
      */
@@ -3973,6 +4029,8 @@ declare class SessionOrgDataClient {
     getRoleAssignments(input: GranteeInput): Promise<RoleAssignmentsResponse>;
     /** Mirrors {@link OrgDataClient.listAgents}. */
     listAgents(input: ListAgentsInput): Promise<ListAgentsResponse>;
+    /** Mirrors {@link OrgDataClient.listHumanMembers}. */
+    listHumanMembers(input: ListHumanMembersInput): Promise<ListHumanMembersResponse>;
     /** Mirrors {@link OrgDataClient.writeData}. */
     writeData(input: WriteDataInput): Promise<MutationResponse>;
     /** Mirrors {@link OrgDataClient.deleteData}. */
@@ -4022,7 +4080,7 @@ declare function createOrgDataClientFromSession(t3n: T3nClient, baseUrl: string)
  *
  * Envelope-free authorisation removed the per-call delegation
  * credential and envelope entirely: authority is now the standing on-chain
- * `agent_auth` ∩ `UserGrant` intersection the host re-reads every call, and
+ * `agent_auth` ∩ `org_grant` intersection the host re-reads every call, and
  * every payroll call emits the plain Direct wire variant (`{ request }`).
  * What remains here is the request body shape, its canonical defaults, and
  * the base64url / DID helpers callers still need.
@@ -4241,7 +4299,7 @@ declare function stringToBytes(str: string): Uint8Array;
  */
 declare function bytesToString(bytes: Uint8Array): string;
 
-declare function getScriptVersion(rpcUrl: string, scriptName: string): Promise<string>;
+declare function getContractVersion(rpcUrl: string, contractId: string): Promise<string>;
 
 /**
  * Secret redaction utilities for T3n SDK
@@ -4283,7 +4341,7 @@ declare function redactSecretsFromJson(jsonString: string): string;
  *
  * Predicates are intentionally shallow — they validate the immediate
  * top-level structure (object kind, presence/type of leading fields)
- * but do not deeply validate nested elements (e.g. each `UserGrant`
+ * but do not deeply validate nested elements (e.g. each `BoundGrant`
  * inside `OrgContractGrants.grants`). Deep validation would be brittle
  * against benign contract additions; shallow guards catch the failure
  * modes that actually surface as runtime crashes (null/string/missing
@@ -4564,7 +4622,7 @@ interface TenantBaseClient {
 }
 interface TenantClientConfig {
     environment?: TenantSdkEnvironment;
-    /** Node URL for `getScriptVersion` during business contract execution. Falls back to `baseUrl`. */
+    /** Node URL for `getContractVersion` during business contract execution. Falls back to `baseUrl`. */
     endpoint?: string;
     /**
      * Authenticated base client the TenantClient dispatches RPCs through.
@@ -4581,7 +4639,7 @@ interface TenantClientConfig {
     t3n?: TenantBaseClient;
     baseUrl?: string;
     tenantDid?: string;
-    tenantScriptName?: string;
+    tenantContractId?: string;
 }
 type TenantStatus = "pending" | "active" | "suspended";
 interface TenantMeResponse {
@@ -5031,5 +5089,5 @@ declare function tenantDidHex(tenantDid: string): string;
 declare function validateTail(tail: string): string;
 declare function canonicalTenantName(tenantDid: string, tail: string): string;
 
-export { AGENT_CARDS_SCOPE, AuthMethod, AuthenticationError, BASE_UNITS_PER_TOKEN, ContractResponseError, DEFAULT_ENVIRONMENT, DEFAULT_INDIVIDUAL_THRESHOLD_CENTS, DEFAULT_KYC_POLL_CADENCE, HandshakeError, HttpTransport, InvokeError, KycStatusTimeoutError, LogLevel, MockTransport, NODE_URLS, OrgDataClient, OtpRateLimitedError, RpcError, SessionExpiredError, SessionOrgDataClient, SessionStateError, SessionStatus, SessionUsageReportClient, T3nClient, T3nError, TERMINAL_KYC_STATUSES, TOKEN_DECIMALS, TenantClient, TenantContractsNamespace, TenantMapsNamespace, TenantNamespace, TenantSdkValidationError, TenantTokenNamespace, UnsupportedTenantSdkOperationError, UserUpsertError, WasmError, WireEncodingError, Z_PAYROLL_AUDIT_READ_FUNCTIONS, Z_PAYROLL_RUN_FUNCTIONS, _b64uEncode, assertShape, b64uDecodeStrict, b64uEncodeBytes, buildSecretWriteArgs, bytesToString, canonicalTenantName, clearKeyCache, clearManifestVersionFloor, compactDidFromBytes, createDefaultHandlers, createEmailOtpAuthInput, createEthAuthInput, createLogger, createMlKemPublicKeyHandler, createOidcAuthInput, createOrgDataClientFromSession, createRandomHandler, createUsageReportClientFromSession, createWorkloadAuthInput, decodeWasmErrorMessage, deriveAgentCardEntryId, eth_get_address, extractWasmError, fetchDkgAttestation, fetchMlKemPublicKey, fetchTrustedManifest, formatTokens, generateRandomString, generateUUID, getEnvironment, getEnvironmentName, getGlobalLogLevel, getLogger, getNodeUrl, getScriptVersion, invoke, isAgentCardResponse, isDataGetResponse, isDataListResponse, isListAgentsResponse, isMutationResponse, isObject, isOrgAdminStatus, isOrgContractGrants, isOrgPolicyMeta, isOrgPolicyView, isOrgUsageReport, isOrgWriters, isRoleAssignmentsResponse, isRoleGetResponse, isSecretListResponse, isSecretRecord, isSecretView, isUnsafeTrustServer, loadConfig, loadWasmComponent, manifestToTrustAnchor, maskKeyMaterial, mergeAgentAuthEntries, mergeDiscoverDids, metamask_get_address, metamask_sign, parseAgentAuthGet, parseAgentAuthPolicy, parseContractResponse, redactSecrets, redactSecretsFromJson, requestToWire, setEnvironment, setGlobalLogLevel, setNodeUrl, stringToBytes, tenantDidHex, toAgentAuthUpdateWire, toBaseUnits, validateConfig, validateTail, verifyDkgAttestation, verifyManifestSignature, verifyTdxQuote };
-export type { ActivityCallerType, ActivityEntry, ActivityOutcome, ActivityReport, AdmitForOrgOptions, AgentAuthEntry, AgentAuthMergeResult, AgentAuthPolicy, AgentAuthScriptGrant, AgentAuthUpdateInput, AgentCardRefInput, AgentCardResponse, AgentCardSetInput, AgentSummary, AssignRolesInput, AuthInput, BalanceRow, ChargeReason, ClientAuth, ClientHandshake, ConfigValidationResult, ContractDescriptorFacets, ContractExecuteInput, ContractKind, ContractLifecycleStatus, ContractListDetailedOptions, ContractListDetailedPage, ContractPublishInput, ContractRegisterResult, ContractResponseSchema, ContractSetDescriptorInput, CreatePolicyInput, DataGetInput, DataGetResponse, DataListInput, DataListResponse, DelegationGrantKind, DelegationGrantRef, DeleteDataInput, DeleteGrantsInput, DeleteScopeInput, DetailedContract, Did, Direction, DkgAttestation, DkgVerifyResult, EmailOtpAuthInput, EmailOtpCredentials, Environment, EthAuthInput, ExecuteBusinessContractOptions, ExecuteOrgDataActionOptions, FetchTrustedManifestOptions, GetActivityLogOptions, GetUsageOptions, GrantCheckParams, GrantCheckResult, GranteeInput, GrantsGetInput, GuestToHostHandler, GuestToHostHandlers, HandshakeResult, InvokeOptions, InvokeRequest, JsonRpcRequest, JsonRpcResponse, KycPollCadence, KycPollOptions, KycStatus, KycStatusKind, ListAgentsInput, ListAgentsResponse, ListContractsParams, ListContractsResult, ListContractsScope, ListedContract, Logger, MapCreateInput, MapLifecycleStatus, MapResponse, MapUpdateInput, MapVisibility, MutationResponse, OidcAuthInput, OidcCredentials, OrgAdminStatus, OrgContractGrants, OrgDataActionWire, OrgDataClientOptions, OrgPolicyMeta, OrgPolicyView, OrgUsageReport, OrgUsageReportInput, OrgWriters, OtpChannel, OtpMergeSuggestion, OtpRequestInput, OtpRequestResult, OtpVerifyInput, OtpVerifyResult, PayrollRunRequest, PeerQuoteResult, PolicyGetInput, PurgeOrgInput, QuoteVerifyResult, ReaderSet, RemoveMemberGrantsInput, RoleAssignments, RoleAssignmentsResponse, RoleDefinition, RoleGetResponse, RoleGrant, RoleIdInput, SdkConfig, SecretKind, SecretListInput, SecretListResponse, SecretNameInput, SecretRecord, SecretSetValueInput, SecretView, SecretWriteInput, SessionCrypto, SessionId, SetGrantsInput, SetRoleInput, SetWritersInput, SignedTrustManifest, StringEncoding, SubmitUserInputArgs, SubmitUserInputResult, T3nClientConfig, TenantAdmitProjection, TenantAdmitStatus, TenantBaseClient, TenantClientConfig, TenantContractExecuteInput, TenantContractPublishInput, TenantContractSetDescriptorInput, TenantExecutionSession, TenantMapCreateInput, TenantMapUpdatePatch, TenantMeResponse, TenantSdkEnvironment, TenantSelfAdmitResult, TenantStatus, TenantTargetOptions, TokenTxKind, Transport, TrustAnchor, TrustAnchorOrUnsafe, TrustManifestPayload, UnassignRolesInput, UnsafeTrustServer, UpdateMetaInput, UsageEntry, UsagePage, UsageReportSignature, UserGrant, UserInputProfile, UserUpsertErrorKind, WasmComponent, WasmNextResult, WireBlock, WorkloadAuthInput, WriteDataInput, WriterSet, WritersGetInput };
+export { AGENT_CARDS_SCOPE, AuthMethod, AuthenticationError, BASE_UNITS_PER_TOKEN, ContractResponseError, DEFAULT_ENVIRONMENT, DEFAULT_INDIVIDUAL_THRESHOLD_CENTS, DEFAULT_KYC_POLL_CADENCE, HandshakeError, HttpTransport, InvokeError, KycStatusTimeoutError, LogLevel, MockTransport, NODE_URLS, OrgDataClient, OtpRateLimitedError, RpcError, SessionExpiredError, SessionOrgDataClient, SessionStateError, SessionStatus, SessionUsageReportClient, T3nClient, T3nError, TERMINAL_KYC_STATUSES, TOKEN_DECIMALS, TenantClient, TenantContractsNamespace, TenantMapsNamespace, TenantNamespace, TenantSdkValidationError, TenantTokenNamespace, UnsupportedTenantSdkOperationError, UserUpsertError, WasmError, WireEncodingError, Z_PAYROLL_AUDIT_READ_FUNCTIONS, Z_PAYROLL_RUN_FUNCTIONS, _b64uEncode, assertShape, b64uDecodeStrict, b64uEncodeBytes, buildSecretWriteArgs, bytesToString, canonicalTenantName, clearKeyCache, clearManifestVersionFloor, compactDidFromBytes, createDefaultHandlers, createEmailOtpAuthInput, createEthAuthInput, createLogger, createMlKemPublicKeyHandler, createOidcAuthInput, createOrgDataClientFromSession, createRandomHandler, createUsageReportClientFromSession, createWorkloadAuthInput, decodeWasmErrorMessage, deriveAgentCardEntryId, eth_get_address, extractWasmError, fetchDkgAttestation, fetchMlKemPublicKey, fetchTrustedManifest, formatTokens, generateRandomString, generateUUID, getContractVersion, getEnvironment, getEnvironmentName, getGlobalLogLevel, getLogger, getNodeUrl, invoke, isAgentCardResponse, isDataGetResponse, isDataListResponse, isListAgentsResponse, isListHumanMembersResponse, isMutationResponse, isObject, isOrgAdminStatus, isOrgContractGrants, isOrgPolicyMeta, isOrgPolicyView, isOrgUsageReport, isOrgWriters, isRoleAssignmentsResponse, isRoleGetResponse, isSecretListResponse, isSecretRecord, isSecretView, isUnsafeTrustServer, loadConfig, loadWasmComponent, manifestToTrustAnchor, maskKeyMaterial, mergeDiscoverDids, mergeGrants, metamask_get_address, metamask_sign, parseAgentAuthDoc, parseContractResponse, redactSecrets, redactSecretsFromJson, requestToWire, setEnvironment, setGlobalLogLevel, setNodeUrl, stringToBytes, tenantDidHex, toBaseUnits, validateConfig, validateTail, verifyDkgAttestation, verifyManifestSignature, verifyTdxQuote };
+export type { ActivityCallerType, ActivityEntry, ActivityOutcome, ActivityReport, AdmitForOrgOptions, AgentAuthDoc, AgentCardRefInput, AgentCardResponse, AgentCardSetInput, AgentSummary, AssignRolesInput, AuthInput, BalanceRow, BoundGrant, ChargeReason, ClientAuth, ClientHandshake, ConfigValidationResult, ContractDescriptorFacets, ContractExecuteInput, ContractKind, ContractLifecycleStatus, ContractListDetailedOptions, ContractListDetailedPage, ContractPublishInput, ContractRegisterResult, ContractResponseSchema, ContractSetDescriptorInput, CreatePolicyInput, DataGetInput, DataGetResponse, DataListInput, DataListResponse, DelegationGrantKind, DelegationGrantRef, DeleteDataInput, DeleteGrantsInput, DeleteScopeInput, DetailedContract, Did, Direction, DkgAttestation, DkgVerifyResult, EmailOtpAuthInput, EmailOtpCredentials, Environment, EthAuthInput, ExecuteBusinessContractOptions, ExecuteOrgDataActionOptions, FetchTrustedManifestOptions, GetActivityLogOptions, GetUsageOptions, GrantCheckParams, GrantCheckResult, GranteeInput, GrantsGetInput, GrantsMergeResult, GuestToHostHandler, GuestToHostHandlers, HandshakeResult, HumanMember, InvokeOptions, InvokeRequest, JsonRpcRequest, JsonRpcResponse, KycPollCadence, KycPollOptions, KycStatus, KycStatusKind, ListAgentsInput, ListAgentsResponse, ListContractsParams, ListContractsResult, ListContractsScope, ListHumanMembersInput, ListHumanMembersResponse, ListedContract, Logger, MapCreateInput, MapLifecycleStatus, MapResponse, MapUpdateInput, MapVisibility, MemberRole, MutationResponse, OidcAuthInput, OidcCredentials, OrgAdminStatus, OrgContractGrants, OrgDataActionWire, OrgDataClientOptions, OrgPolicyMeta, OrgPolicyView, OrgUsageReport, OrgUsageReportInput, OrgWriters, OtpChannel, OtpMergeSuggestion, OtpRequestInput, OtpRequestResult, OtpVerifyInput, OtpVerifyResult, PayrollRunRequest, PeerQuoteResult, PolicyGetInput, PurgeOrgInput, QuoteVerifyResult, ReaderSet, RemoveMemberGrantsInput, RoleAssignments, RoleAssignmentsResponse, RoleDefinition, RoleGetResponse, RoleGrant, RoleIdInput, SdkConfig, SecretKind, SecretListInput, SecretListResponse, SecretNameInput, SecretRecord, SecretSetValueInput, SecretView, SecretWriteInput, SessionCrypto, SessionId, SetGrantsInput, SetRoleInput, SetWritersInput, SignedTrustManifest, StringEncoding, SubmitUserInputArgs, SubmitUserInputResult, T3nClientConfig, TenantAdmitProjection, TenantAdmitStatus, TenantBaseClient, TenantClientConfig, TenantContractExecuteInput, TenantContractPublishInput, TenantContractSetDescriptorInput, TenantExecutionSession, TenantMapCreateInput, TenantMapUpdatePatch, TenantMeResponse, TenantSdkEnvironment, TenantSelfAdmitResult, TenantStatus, TenantTargetOptions, TokenTxKind, Transport, TrustAnchor, TrustAnchorOrUnsafe, TrustManifestPayload, UnassignRolesInput, UnsafeTrustServer, UpdateMetaInput, UsageEntry, UsagePage, UsageReportSignature, UserInputProfile, UserUpsertErrorKind, Validity, WasmComponent, WasmNextResult, WireBlock, WorkloadAuthInput, WriteDataInput, WriterSet, WritersGetInput };