aira-sdk 2.4.0 → 3.0.0

package/dist/client.d.ts

@@ -24,7 +24,7 @@ export declare class Aira {
      *
      * Returns an `Authorization` with a status:
      *  - "authorized"       → safe to execute the action, then call `notarize()`
-     *  - "pending_approval" → enqueue `action_id` and wait for human approval
+     *  - "pending_approval" → enqueue `action_uuid` and wait for human approval
      *
      * If a policy denies the action, this throws `AiraError` with code
      * `POLICY_DENIED` (HTTP 403). Duplicate idempotent requests throw

package/dist/client.js

@@ -138,7 +138,7 @@ class Aira {
      *
      * Returns an `Authorization` with a status:
      *  - "authorized"       → safe to execute the action, then call `notarize()`
-     *  - "pending_approval" → enqueue `action_id` and wait for human approval
+     *  - "pending_approval" → enqueue `action_uuid` and wait for human approval
      *
      * If a policy denies the action, this throws `AiraError` with code
      * `POLICY_DENIED` (HTTP 403). Duplicate idempotent requests throw
@@ -153,7 +153,7 @@ class Aira {
             instruction_hash: params.instructionHash,
             model_id: params.modelId,
             model_version: params.modelVersion,
-            parent_action_id: params.parentActionId,
+            parent_action_uuid: params.parentActionId,
             endpoint_url: params.endpointUrl,
             store_details: params.storeDetails || undefined,
             idempotency_key: params.idempotencyKey,
@@ -247,7 +247,7 @@ class Aira {
         return this.post(`/agents/${slug}/decommission`, {});
     }
     async transferAgent(slug, toOrgId, reason) {
-        return this.post(`/agents/${slug}/transfer`, buildBody({ to_org_id: toOrgId, reason }));
+        return this.post(`/agents/${slug}/transfer`, buildBody({ to_org_uuid: toOrgId, reason }));
     }
     async getAgentActions(slug, page = 1) {
         const data = await this.get(`/agents/${slug}/actions`, { page });
@@ -277,7 +277,7 @@ class Aira {
     // ==================== Evidence ====================
     async createEvidencePackage(params) {
         return this.post("/evidence/packages", buildBody({
-            title: params.title, action_ids: params.actionIds, description: params.description, agent_slugs: params.agentSlugs,
+            title: params.title, action_uuids: params.actionIds, description: params.description, agent_slugs: params.agentSlugs,
         }));
     }
     async listEvidencePackages(page = 1) {
@@ -327,7 +327,7 @@ class Aira {
     async createEscrowAccount(params) {
         return this.post("/escrow/accounts", buildBody({
             purpose: params?.purpose, currency: params?.currency ?? "EUR",
-            agent_id: params?.agentId, counterparty_org_id: params?.counterpartyOrgId,
+            agent_id: params?.agentId, counterparty_org_uuid: params?.counterpartyOrgId,
         }));
     }
     async listEscrowAccounts(page = 1) {
@@ -339,17 +339,17 @@ class Aira {
     }
     async escrowDeposit(accountId, amount, description, referenceActionId) {
         return this.post(`/escrow/accounts/${accountId}/deposit`, buildBody({
-            amount, description, reference_action_id: referenceActionId,
+            amount, description, reference_action_uuid: referenceActionId,
         }));
     }
     async escrowRelease(accountId, amount, description, referenceActionId) {
         return this.post(`/escrow/accounts/${accountId}/release`, buildBody({
-            amount, description, reference_action_id: referenceActionId,
+            amount, description, reference_action_uuid: referenceActionId,
         }));
     }
     async escrowDispute(accountId, amount, description, referenceActionId) {
         return this.post(`/escrow/accounts/${accountId}/dispute`, buildBody({
-            amount, description, reference_action_id: referenceActionId,
+            amount, description, reference_action_uuid: referenceActionId,
         }));
     }
     // ==================== Chat ====================
@@ -419,7 +419,7 @@ class Aira {
     /** Submit a signed attestation of a successful interaction. */
     async attestReputation(slug, counterpartyDid, actionId, attestation, signature) {
         return this.post(`/agents/${slug}/reputation/attest`, {
-            counterparty_did: counterpartyDid, action_id: actionId, attestation, signature,
+            counterparty_did: counterpartyDid, action_uuid: actionId, attestation, signature,
         });
     }
     /** Verify a reputation score by returning inputs and score_hash. */
@@ -549,7 +549,7 @@ class Aira {
             framework: params.framework,
             period_start: params.periodStart,
             period_end: params.periodEnd,
-            action_id: params.actionId,
+            action_uuid: params.actionId,
             agent_filter: params.agentFilter,
         });
         return this.post("/compliance/reports", body);

package/dist/extras/langchain.d.ts

@@ -16,7 +16,7 @@
  * This handler implements the two-step flow as follows:
  *
  *   1. handleToolStart  → aira.authorize()
- *       - If the backend returns "authorized" we cache the action_id
+ *       - If the backend returns "authorized" we cache the action_uuid
  *         keyed by LangChain's `runId`, then return so the tool executes.
  *       - If the backend throws POLICY_DENIED we propagate the error,
  *         which prevents the tool from running at all (real gate).
@@ -51,7 +51,7 @@ export declare class AiraCallbackHandler {
     private actionTypes;
     private trustPolicy?;
     private strict;
-    /** runId → action_id cache so handleEnd can notarize the right action. */
+    /** runId → action_uuid cache so handleEnd can notarize the right action. */
     private inFlight;
     constructor(client: Aira, agentId: string, options?: AiraCallbackHandlerOptions);
     /**

package/dist/extras/langchain.js

@@ -17,7 +17,7 @@
  * This handler implements the two-step flow as follows:
  *
  *   1. handleToolStart  → aira.authorize()
- *       - If the backend returns "authorized" we cache the action_id
+ *       - If the backend returns "authorized" we cache the action_uuid
  *         keyed by LangChain's `runId`, then return so the tool executes.
  *       - If the backend throws POLICY_DENIED we propagate the error,
  *         which prevents the tool from running at all (real gate).
@@ -46,7 +46,7 @@ class AiraCallbackHandler {
     actionTypes;
     trustPolicy;
     strict;
-    /** runId → action_id cache so handleEnd can notarize the right action. */
+    /** runId → action_uuid cache so handleEnd can notarize the right action. */
     inFlight = new Map();
     constructor(client, agentId, options) {
         this.client = client;
@@ -81,11 +81,11 @@ class AiraCallbackHandler {
             });
             if (auth.status === "pending_approval") {
                 // Real gate — block the tool from running until a human approves.
-                const err = new Error(`Aira: action '${actionType}' is pending human approval (action_id=${auth.action_id}). Tool execution blocked.`);
+                const err = new Error(`Aira: action '${actionType}' is pending human approval (action_uuid=${auth.action_uuid}). Tool execution blocked.`);
                 err.code = "PENDING_APPROVAL";
                 throw err;
             }
-            this.inFlight.set(runId, auth.action_id);
+            this.inFlight.set(runId, auth.action_uuid);
         }
         catch (e) {
             const err = e;

package/dist/extras/mcp.js

@@ -39,7 +39,7 @@ function getTools() {
     return [
         {
             name: "authorize_action",
-            description: "Step 1 of the Aira two-step flow. Authorize an action BEFORE it executes. Returns an action_id with status 'authorized' or 'pending_approval'. Throws POLICY_DENIED if a policy blocks the action.",
+            description: "Step 1 of the Aira two-step flow. Authorize an action BEFORE it executes. Returns an action_uuid with status 'authorized' or 'pending_approval'. Throws POLICY_DENIED if a policy blocks the action.",
             inputSchema: {
                 type: "object",
                 properties: {
@@ -59,11 +59,11 @@ function getTools() {
             inputSchema: {
                 type: "object",
                 properties: {
-                    action_id: { type: "string", description: "action_id returned from authorize_action" },
+                    action_uuid: { type: "string", description: "action_uuid returned from authorize_action" },
                     outcome: { type: "string", enum: ["completed", "failed"], description: "Did the action succeed?" },
                     outcome_details: { type: "string", description: "Optional description of the outcome" },
                 },
-                required: ["action_id"],
+                required: ["action_uuid"],
             },
         },
         {
@@ -72,9 +72,9 @@ function getTools() {
             inputSchema: {
                 type: "object",
                 properties: {
-                    action_id: { type: "string", description: "Action UUID" },
+                    action_uuid: { type: "string", description: "Action UUID" },
                 },
-                required: ["action_id"],
+                required: ["action_uuid"],
             },
         },
         {
@@ -83,9 +83,9 @@ function getTools() {
             inputSchema: {
                 type: "object",
                 properties: {
-                    action_id: { type: "string", description: "Action UUID" },
+                    action_uuid: { type: "string", description: "Action UUID" },
                 },
-                required: ["action_id"],
+                required: ["action_uuid"],
             },
         },
         {
@@ -94,9 +94,9 @@ function getTools() {
             inputSchema: {
                 type: "object",
                 properties: {
-                    receipt_id: { type: "string", description: "Receipt UUID" },
+                    receipt_uuid: { type: "string", description: "Receipt UUID" },
                 },
-                required: ["receipt_id"],
+                required: ["receipt_uuid"],
             },
         },
         {
@@ -138,10 +138,10 @@ function getTools() {
             inputSchema: {
                 type: "object",
                 properties: {
-                    action_id: { type: "string", description: "Action UUID to co-sign" },
+                    action_uuid: { type: "string", description: "Action UUID to co-sign" },
                     counterparty_did: { type: "string", description: "DID of the counterparty agent" },
                 },
-                required: ["action_id", "counterparty_did"],
+                required: ["action_uuid", "counterparty_did"],
             },
         },
     ];
@@ -162,22 +162,22 @@ async function handleToolCall(client, name, args) {
         }
         if (name === "notarize_action") {
             const result = await client.notarize({
-                actionId: args.action_id,
+                actionId: args.action_uuid,
                 outcome: args.outcome ?? "completed",
                 outcomeDetails: args.outcome_details,
             });
             return [{ type: "text", text: JSON.stringify(result) }];
         }
         if (name === "get_action") {
-            const result = await client.getAction(args.action_id);
+            const result = await client.getAction(args.action_uuid);
             return [{ type: "text", text: JSON.stringify(result) }];
         }
         if (name === "verify_action") {
-            const result = await client.verifyAction(args.action_id);
+            const result = await client.verifyAction(args.action_uuid);
             return [{ type: "text", text: JSON.stringify(result) }];
         }
         if (name === "get_receipt") {
-            const result = await client.getReceipt(args.receipt_id);
+            const result = await client.getReceipt(args.receipt_uuid);
             return [{ type: "text", text: JSON.stringify(result) }];
         }
         if (name === "resolve_did") {
@@ -194,7 +194,7 @@ async function handleToolCall(client, name, args) {
             return [{ type: "text", text: JSON.stringify(result) }];
         }
         if (name === "request_mutual_sign") {
-            const result = await client.requestMutualSign(args.action_id, args.counterparty_did);
+            const result = await client.requestMutualSign(args.action_uuid, args.counterparty_did);
             return [{ type: "text", text: JSON.stringify(result) }];
         }
         return [{ type: "text", text: JSON.stringify({ error: `Unknown tool: ${name}` }) }];

package/dist/extras/openai-agents.d.ts

@@ -49,7 +49,7 @@ export declare class AiraGuardrail {
     /**
      * REAL GATE: call `authorize()` for a tool invocation.
      *
-     * Returns the action_id on success, throws on POLICY_DENIED or
+     * Returns the action_uuid on success, throws on POLICY_DENIED or
      * pending_approval. Arg keys are logged (not values) to avoid leaking
      * sensitive user input into audit trails.
      */

package/dist/extras/openai-agents.js

@@ -56,7 +56,7 @@ class AiraGuardrail {
     /**
      * REAL GATE: call `authorize()` for a tool invocation.
      *
-     * Returns the action_id on success, throws on POLICY_DENIED or
+     * Returns the action_uuid on success, throws on POLICY_DENIED or
      * pending_approval. Arg keys are logged (not values) to avoid leaking
      * sensitive user input into audit trails.
      */
@@ -70,11 +70,11 @@ class AiraGuardrail {
                 modelId: this.modelId,
             });
             if (auth.status === "pending_approval") {
-                const err = new Error(`Aira: tool '${toolName}' is pending human approval (action_id=${auth.action_id}). Tool execution blocked.`);
+                const err = new Error(`Aira: tool '${toolName}' is pending human approval (action_uuid=${auth.action_uuid}). Tool execution blocked.`);
                 err.code = "PENDING_APPROVAL";
                 throw err;
             }
-            return auth.action_id;
+            return auth.action_uuid;
         }
         catch (e) {
             const err = e;

package/dist/extras/vercel-ai.js

@@ -69,7 +69,7 @@ class AiraVercelMiddleware {
                 modelId: this.modelId,
             });
             if (auth.status === "authorized") {
-                await this.client.notarize({ actionId: auth.action_id, outcome: "completed" });
+                await this.client.notarize({ actionId: auth.action_uuid, outcome: "completed" });
             }
             // If pending_approval — just leave it; nothing to execute for audit-only.
         }
@@ -134,11 +134,11 @@ class AiraVercelMiddleware {
                     modelId: self.modelId,
                 });
                 if (auth.status === "pending_approval") {
-                    const err = new Error(`Aira: tool '${toolName}' is pending human approval (action_id=${auth.action_id}). Tool execution blocked.`);
+                    const err = new Error(`Aira: tool '${toolName}' is pending human approval (action_uuid=${auth.action_uuid}). Tool execution blocked.`);
                     err.code = "PENDING_APPROVAL";
                     throw err;
                 }
-                actionId = auth.action_id;
+                actionId = auth.action_uuid;
             }
             catch (e) {
                 const err = e;

package/dist/session.d.ts

@@ -2,7 +2,7 @@
  * AiraSession — scoped session with pre-filled defaults for `authorize()`.
  *
  * Under the two-step flow, only `authorize()` takes agent/model metadata;
- * `notarize()` operates on an existing action_id. This session therefore
+ * `notarize()` operates on an existing action_uuid. This session therefore
  * merges defaults on `authorize()` only and provides a thin passthrough
  * for `notarize()` so callers can use a single object end-to-end.
  */

package/dist/session.js

@@ -3,7 +3,7 @@
  * AiraSession — scoped session with pre-filled defaults for `authorize()`.
  *
  * Under the two-step flow, only `authorize()` takes agent/model metadata;
- * `notarize()` operates on an existing action_id. This session therefore
+ * `notarize()` operates on an existing action_uuid. This session therefore
  * merges defaults on `authorize()` only and provides a thin passthrough
  * for `notarize()` so callers can use a single object end-to-end.
  */

package/dist/types.d.ts

@@ -13,12 +13,12 @@ export declare const FRAMEWORK_ANNEX_IV: "eu_ai_act_annex_iv";
  *
  * Status tells you what to do next:
  *  - "authorized"       → execute the action, then call `notarize()`
- *  - "pending_approval" → enqueue the action_id and wait for human approval
+ *  - "pending_approval" → enqueue the action_uuid and wait for human approval
  *
  * POLICY_DENIED is raised as an `AiraError` — not returned as a status.
  */
 export interface Authorization {
-    action_id: string;
+    action_uuid: string;
     status: "authorized" | "pending_approval";
     created_at: string;
     request_id: string;
@@ -31,11 +31,11 @@ export interface Authorization {
  * the receipt fields stay null — only the audit trail is recorded.
  */
 export interface ActionReceipt {
-    action_id: string;
+    action_uuid: string;
     status: "notarized" | "failed";
     created_at: string;
     request_id: string;
-    receipt_id: string | null;
+    receipt_uuid: string | null;
     payload_hash: string | null;
     signature: string | null;
     timestamp_token: string | null;
@@ -81,19 +81,19 @@ export interface OutputPolicyUpdate {
 }
 /** Full action details including receipt and authorizations. */
 export interface ActionDetail {
-    action_id: string;
-    org_id: string;
+    action_uuid: string;
+    org_uuid: string;
     action_type: string;
     action_details_hash: string;
     agent_id: string | null;
     model_id: string | null;
     instruction_hash: string | null;
-    parent_action_id: string | null;
+    parent_action_uuid: string | null;
     status: string;
     legal_hold: boolean;
     created_at: string;
     receipt: {
-        receipt_id: string;
+        receipt_uuid: string;
         payload_hash: string;
         signature: string;
         public_key_id: string;
@@ -144,7 +144,7 @@ export interface EvidencePackage {
     id: string;
     title: string;
     description: string | null;
-    action_ids: string[];
+    action_uuids: string[];
     package_hash: string;
     signature: string;
     status: string;
@@ -174,7 +174,7 @@ export interface EscrowAccount {
     created_at: string;
     request_id: string;
     agent_id?: string | null;
-    counterparty_org_id?: string | null;
+    counterparty_org_uuid?: string | null;
     purpose?: string | null;
     transactions?: EscrowTransaction[];
 }
@@ -189,7 +189,7 @@ export interface EscrowTransaction {
     status: string;
     created_at: string;
     description?: string | null;
-    reference_action_id?: string | null;
+    reference_action_uuid?: string | null;
 }
 /**
  * Result of a public action receipt verification.
@@ -209,8 +209,8 @@ export interface VerifyResult {
     message: string;
     verified_at: string;
     request_id: string;
-    receipt_id?: string | null;
-    action_id?: string | null;
+    receipt_uuid?: string | null;
+    action_uuid?: string | null;
     payload_hash?: string | null;
     signature?: string | null;
     public_key?: string | null;
@@ -239,8 +239,8 @@ export interface PaginatedList<T = Record<string, unknown>> {
  * (and optionally already notarized).
  */
 export interface CosignResult {
-    cosignature_id: string;
-    action_id: string;
+    cosignature_uuid: string;
+    action_uuid: string;
     cosigner_email: string;
     cosigned_at: string;
     request_id: string;
@@ -257,7 +257,7 @@ export declare class AiraError extends Error {
     statusCode: number;
     /** Error code string (e.g. "POLICY_DENIED", "INVALID_STATE"). */
     code: string;
-    /** Optional backend-supplied context (policy_id, action_id, etc.). */
+    /** Optional backend-supplied context (policy_uuid, action_uuid, etc.). */
     details: Record<string, unknown>;
     constructor(statusCode: number, code: string, message: string, details?: Record<string, unknown>);
 }
@@ -267,10 +267,10 @@ export interface ComplianceReport {
     status: "pending" | "generating" | "ready" | "failed";
     created_at: string;
     request_id?: string;
-    org_id?: string;
+    org_uuid?: string;
     period_start?: string | null;
     period_end?: string | null;
-    action_id?: string | null;
+    action_uuid?: string | null;
     agent_filter?: string[] | null;
     receipt_count?: number | null;
     pdf_size_bytes?: number | null;
@@ -291,7 +291,7 @@ export interface ComplianceReportListResponse {
     request_id: string;
 }
 export interface ComplianceReportVerification {
-    report_id: string;
+    report_uuid: string;
     valid: boolean;
     checks: Record<string, unknown>;
     descriptor?: Record<string, unknown> | null;

package/dist/types.js

@@ -23,7 +23,7 @@ class AiraError extends Error {
     statusCode;
     /** Error code string (e.g. "POLICY_DENIED", "INVALID_STATE"). */
     code;
-    /** Optional backend-supplied context (policy_id, action_id, etc.). */
+    /** Optional backend-supplied context (policy_uuid, action_uuid, etc.). */
     details;
     constructor(statusCode, code, message, details = {}) {
         super(`[${code}] ${message}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aira-sdk",
-  "version": "2.4.0",
+  "version": "3.0.0",
   "description": "The authorization and audit layer for AI agents",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",