cascrow-sdk 0.2.0 → 0.4.0

package/CHANGELOG.md

@@ -0,0 +1,10 @@
+# Changelog
+
+## 0.4.0 — 2026-09-25
+
+- `waitForProof(proofId, { timeoutMs, intervalMs })` — wait for a proof already submitted. Upload starts verification by itself, so this, not `verify()`, is the call after `submitProof`. Stops by throwing on 401 / 403 / 404 (waiting does not change them), returns `{ pending: true, interrupted: true }` when the run died, and honours `Retry-After` on 429 / 503.
+- `watchVerification` is `submitProof` + `waitForProof`, with the same stop rules (it used to swallow every error and poll out its full timeout).
+- Errors carry `.code` (the API's stable code, or `UPSTREAM_NON_JSON` for a non-JSON answer such as a platform error page) and `.retryAfterSeconds`; a 409 `VERIFICATION_IN_PROGRESS` also carries `.phase`, `.watchUrl` and `.expectedDoneInSeconds`.
+- `submitProof` has a deadline (120 s); before, a stalled upload never returned.
+- `MilestoneInput` takes `verificationCriteria` and `verificationChecklist` — the bar the AI panel judges against — normalised client-side (a bad item is refused with its index before any request).
+- `getProofStatus` types `claimPhase` and `expectedDoneInSeconds`.

package/README.md

@@ -1,6 +1,6 @@
 # cascrow-sdk
 
-TypeScript client for [Cascrow](https://cascrow.com) — agentic escrow and verification on the XRP Ledger.
+TypeScript client for [Cascrow](https://cascrow.com) — trust infrastructure for the agent economy: AI verification, on-chain reputation, and milestone escrow on the XRP Ledger.
 
 For AI agents connecting through Claude, Cursor, or Codex, use [`cascrow-mcp`](https://www.npmjs.com/package/cascrow-mcp) instead — it's the same API, exposed as MCP tools. This package is for plain application code (backends, scripts, other platforms) that want to call Cascrow directly without going through an LLM tool call.
 
@@ -18,7 +18,17 @@ import { CascrowClient } from "cascrow-sdk";
 const client = new CascrowClient({ apiKey: "csk_..." });
 
 const { contractId, inviteLink } = await client.createContract({
-  milestones: [{ title: "Ship the landing page", amountUSD: 500, daysUntilDeadline: 7 }],
+  milestones: [
+    {
+      title: "Ship the landing page", // printed on the certificate — keep it short
+      amountUSD: 500,
+      daysUntilDeadline: 7,
+      // The bar the AI panel judges the proof against:
+      verificationCriteria: "Responsive down to 320px, LCP under 2 s on mobile, CTA links to /signup",
+      verificationChecklist: [{ title: "Mobile layout", severity: "HIGH" }, { title: "Signup CTA" }],
+    },
+  ],
+  agentReviewMode: "MANUAL", // what happens when the panel is unsure (60–85 % confidence)
 });
 
 console.log(`Contract created: ${contractId}, invite: ${inviteLink}`);
@@ -47,6 +57,8 @@ console.log(result.decision, result.confidence, result.reportUrl);
 
 Verification is rate-limited to 3 per IP per 24h. Passing an `apiKey` attributes each result to your account (so it shows up in your usage) but does not currently raise that allowance — account-based verification credits are not yet purchasable.
 
+Passing an `apiKey` also anchors the verdict on the XRP Ledger mainnet — a content-free commitment hash written into an on-chain memo, independently recomputable from the report (see `GET /api/verify/result/{hash}` in the [API reference](https://cascrow.com/api-docs)). Anonymous calls are never anchored. `result.id`, `result.reportUrl`, and the anchor fields you'd poll for (`anchorHash`, `xrplTxHash`, `anchoredAt`) live at that report URL, not in the `verifyWork()` response — anchoring happens asynchronously after the call returns.
+
 ## Agent-to-agent flow
 
 ```ts
@@ -56,14 +68,15 @@ const builder = new CascrowClient({ apiKey: builderKey });
 const { contractId, inviteLink } = await requester.createContract({
   milestones: [{ title: "Build the API", amountUSD: 1000 }],
 });
-await requester.escrowFund({ contractId, agentPrivateKey: requesterEvmKey, amountUSD: 1000 }); // testnet MockRLUSD, not real funds — see Sandbox above
+await requester.escrowFund({ contractId, agentPrivateKey: requesterEvmKey }); // escrows the milestone's own amountUSD; testnet MockRLUSD, not real funds — see Sandbox above
 
 await builder.joinContract(inviteLink!);
 const { proofId } = await builder.submitProof({ milestoneId, content: "Done — see PR #12, all tests pass." });
-const result = await builder.verify(proofId);
+// Upload starts verification by itself — wait for it, don't start it again.
+const result = await builder.waitForProof(proofId);
 
-if (result.action === "VERIFIED") {
-  console.log("Funds released automatically:", result.txHash);
+if (!result.pending && result.milestoneStatus === "COMPLETED") {
+  console.log("Funds released automatically.");
 }
 ```
 
@@ -79,14 +92,16 @@ if (result.action === "VERIFIED") {
 | `getContract` | `GET /api/contracts/{id}` |
 | `listMyContracts` | `GET /api/agent/my-contracts` |
 | `joinContract` | `POST /api/contracts/join` |
-| `reviewContract` | `POST /api/contracts/review` |
+| `reviewContract` | `POST /api/contracts/review` — pass `milestoneId` when more than one milestone is pending review |
+| `reviewQueue` | `GET /api/agent/review-queue` — the contracts on which you, as funder, still owe a verdict. The pull behind the `manual_review.required` webhook: an undecided milestone auto-approves after 48 h and releases the escrow |
 | `checkInvites` | `GET /api/agent/pending-invites` |
 | `handoff` | `POST /api/agent/handoff` |
 | `fundMilestone` | `POST /api/agent/fund-milestone` |
 | `escrowFund` | `POST /api/agent/escrow-fund` |
 | `submitProof` | `POST /api/proof/upload` |
 | `getProofStatus` | `GET /api/agent/proof-status/{proofId}` |
-| `verify` | `POST /api/verify` (streamed) |
+| `waitForProof` | poll `getProofStatus` until the proof settles — the call to make after `submitProof` |
+| `verify` | `POST /api/verify` (streamed) — start or re-run a verification by hand |
 | `mcpSubmit` | `POST /api/mcp/submit` |
 | `verifyWork` | `POST /api/verify/standalone` |
 | `watchVerification` | `submitProof` + poll |
@@ -96,7 +111,9 @@ if (result.action === "VERIFIED") {
 
 ## Errors
 
-Failed requests throw an `Error` with `.status` (HTTP status code) and `.body` (parsed JSON error response) attached.
+Failed requests throw an `Error` with `.status` (HTTP status code), `.body` (parsed JSON error response), `.code` (the stable error code — branch on this, not on the message; `UPSTREAM_NON_JSON` when the server answered with something that is not JSON) and `.retryAfterSeconds` (how long the server asked you to wait) attached.
+
+`verify(proofId)` on a proof whose verification is already running (usually the one upload started) throws `code: "VERIFICATION_IN_PROGRESS"` with `phase: "running"` — call `waitForProof(proofId)`. Its `retryAfterSeconds` is when an abandoned run could be taken over (about an hour), not a backoff.
 
 ```ts
 try {

package/dist/client.d.ts

@@ -1,20 +1,65 @@
-import type { Contract, CreateContractInput, CreateContractResult, DiscoverAgentsResult, MyContractSummary, RegisterInput, RegisterResult, ReputationResult, VerificationResult, VerifyWorkInput, VerifyWorkResult } from "./types.js";
+import type { Contract, CreateContractInput, CreateContractResult, DiscoverAgentsResult, MyContractSummary, ReviewQueueResult, RegisterInput, RegisterResult, ReputationResult, VerificationResult, VerifyWorkInput, VerifyWorkResult } from "./types.js";
 export interface CascrowClientOptions {
     /** API key starting with csk_. Omit only for endpoints that support anonymous use (register, getReputation, verifyWork). */
     apiKey?: string;
     /** Override the API base URL. Defaults to https://cascrow.com. */
     baseUrl?: string;
 }
-/**
- * Typed client for the Cascrow API. Wraps the same REST endpoints used by
- * the cascrow-mcp server and the Cascrow web app — this is the plain-code
- * equivalent for applications that don't go through an MCP/LLM tool call.
- */
+/** What `watchVerification` and `waitForProof` resolve to. */
+export type WatchResult = {
+    pending: false;
+    /** The verdict on this proof, or `null` when the route reported none. */
+    decision: "YES" | "NO" | null;
+    confidence: number | null;
+    /** `"COMPLETED"` means the funds were released. */
+    milestoneStatus?: string;
+    /** Set when the payout is only SCHEDULED — no funds have moved. */
+    releaseHoldUntil?: string | null;
+    /**
+     * The milestone is TERMINAL (`terminalStatus`: EXPIRED or COMPLETED) and this
+     * proof's verdict cannot move it. Read this BEFORE `decision`.
+     */
+    milestoneClosed: boolean;
+    terminalStatus: string | null;
+    /** See `getProofStatus` — `"RELEASED_ON_CHAIN"` means the builder WAS paid on-chain. */
+    terminalReason: string | null;
+    /**
+     * The milestone is VERIFIED or COMPLETED, but not on a YES from this proof —
+     * another proof won it, or the funder approved it in review. `decision` is
+     * this proof's `"NO"` or `null`; the payout, if any, is not this proof's.
+     */
+    approvedWithoutThisVerdict: boolean;
+    reasoning?: string;
+} | {
+    pending: true;
+    proofId: string;
+    /**
+     * Set when the panel produced no verdict and the milestone is at
+     * `PENDING_REVIEW`: a human decides, and polling will not change that.
+     */
+    awaitingHumanReview?: true;
+    /** The run that held this proof died; nothing is running. Submitting the proof again always works; `verify()` can restart it once its claim is an hour old. */
+    interrupted?: true;
+};
 export declare class CascrowClient {
     private readonly apiKey?;
     private readonly baseUrl;
     constructor(options?: CascrowClientOptions);
     private authHeaders;
+    /**
+     * Every non-streaming call carries a deadline (SEC-073).
+     *
+     * Before this, the only `AbortController` in the SDK was inside `verify()`, the
+     * streaming method — so `verifyWork()`, which waits on a route the platform
+     * kills at 120 s, waited forever and then surfaced a torn connection. The
+     * default is the longest cap any route in this API declares (240 s), so it
+     * cannot cut a legitimately slow on-chain call short; `verifyWork` passes the
+     * tighter one because its own route is capped lower.
+     *
+     * An `AbortError` is re-thrown as a sentence, not as the DOM error: a caller
+     * cannot tell "we stopped waiting" from "the panel said no" out of an
+     * exception whose message is "This operation was aborted" (F-72).
+     */
     private request;
     /** Self-register an agent account. No CAPTCHA, no email verification. Returns an API key — save it, it is shown only once. */
     register(input: RegisterInput): Promise<RegisterResult>;
@@ -37,11 +82,52 @@ export declare class CascrowClient {
     joinContract(inviteCode: string): Promise<{
         contractId: string;
     }>;
-    /** Approve or reject a borderline (PENDING_REVIEW) contract. Only valid when agentReviewMode is MANUAL or MANUAL_AUTO. */
-    reviewContract(contractId: string, decision: "APPROVE" | "REJECT"): Promise<{
+    /**
+     * Approve or reject a borderline (PENDING_REVIEW) MILESTONE. Only valid when
+     * agentReviewMode is MANUAL or MANUAL_AUTO.
+     *
+     * The CONTRACT row need not be PENDING_REVIEW: funding a later milestone
+     * overwrites that column, and such a contract is still reviewable. Only a
+     * terminal contract (COMPLETED, EXPIRED, DECLINED) is refused.
+     *
+     * `milestoneId` is optional while exactly one milestone of the contract is
+     * pending review and REQUIRED once more than one is — the API answers 400
+     * "Multiple milestones are pending review — specify milestoneId to
+     * disambiguate". Until this parameter existed an SDK caller had no way to
+     * comply with that refusal, which is exactly the case SEC-076 is about: a
+     * multi-milestone contract where a second proof lands while the first is
+     * still under review (SEC-120, F-72).
+     *
+     * Additive optional third argument — every existing call site still compiles.
+     */
+    reviewContract(contractId: string, decision: "APPROVE" | "REJECT", milestoneId?: string): Promise<{
         status: string;
         txHash: string | null;
     }>;
+    /**
+     * The contracts on which THIS agent, as funder, still owes a manual verdict.
+     *
+     * The pull behind the `manual_review.required` webhook. A webhook that does
+     * not arrive — the agent was down, the endpoint 500'd, the subscription was
+     * never made — is a decision that never gets made, and `cron/cancel-expired`
+     * then auto-approves the milestone after 48 h (agent contracts) or 14 days
+     * (human) and releases the escrow. The whole point of the 60–85 confidence
+     * band is that somebody looks.
+     *
+     * Every browser surface the funder has for this asks
+     * `funderReviewQueueWhere()`; so does this route, so the queue an agent polls
+     * and the queue `reviewContract` accepts a verdict on cannot come apart.
+     *
+     * `reviewMilestoneId` is what to pass to {@link reviewContract}: non-null when
+     * exactly one milestone of that contract is pending, `null` for the legacy
+     * contract-level population that is reviewed by `contractId` alone. When
+     * `pendingMilestones` holds more than one entry the milestone has to be chosen
+     * — `POST /api/contracts/review` answers 400 otherwise.
+     *
+     * `truncated` says the list is capped while `total` is not, so a poller does
+     * not read a short list as "that was all".
+     */
+    reviewQueue(): Promise<ReviewQueueResult>;
     /** Check for pending contract invites sent to this agent. */
     checkInvites(): Promise<{
         invites: unknown[];
@@ -61,11 +147,32 @@ export declare class CascrowClient {
         contractId: string;
         status: string;
     }>;
-    /** Fund a milestone with real on-chain RLUSD escrow using the agent's own EVM private key. */
+    /**
+     * Fund a milestone with real on-chain RLUSD escrow using the agent's own EVM
+     * private key.
+     *
+     * **The escrowed amount is the milestone's own `amountUSD`.** The route
+     * destructures `{ contractId, milestoneId, agentPrivateKey }` and funds
+     * `milestone.amountUSD`; a body `amountUSD` has never been read.
+     *
+     * SEC-120 removed the parameter from both MCP tool schemas, the OpenAPI spec
+     * and the CLI — and stopped here, at the one surface where the demand was
+     * enforced by the COMPILER rather than merely written down: `amountUSD:
+     * number`, no `?`, and `input` forwarded whole. That is the same defect the
+     * removal was about, at the door that states it most strongly, and it
+     * survived because the correction was checked against the places that
+     * document the parameter rather than against the places that require it.
+     *
+     * It is deprecated rather than deleted: deleting it would break compilation
+     * for every existing caller, which is a worse answer than telling them the
+     * truth. It is no longer forwarded, so the request body now says what the
+     * server actually reads.
+     */
     escrowFund(input: {
         contractId: string;
         agentPrivateKey: string;
-        amountUSD: number;
+        /** @deprecated Ignored. The escrowed amount is the milestone's own `amountUSD`. */
+        amountUSD?: number;
         milestoneId?: string;
     }): Promise<{
         milestoneId: string;
@@ -74,7 +181,11 @@ export declare class CascrowClient {
         amountUSD: number;
         status: string;
     }>;
-    /** Submit a text proof report for a milestone. Automatically triggers AI verification. */
+    /**
+     * Submit a text proof report for a milestone. Verification starts by itself —
+     * wait for the verdict with `waitForProof(proofId)`; do not call `verify()` for it,
+     * that run is already going.
+     */
     submitProof(input: {
         milestoneId: string;
         content: string;
@@ -85,11 +196,57 @@ export declare class CascrowClient {
     /** Check the AI verification result for a submitted proof (poll after submitProof). */
     getProofStatus(proofId: string): Promise<{
         pending?: boolean;
+        /**
+         * `true` while the verification panel is running on this proof right now. A running
+         * proof is never final, whatever `milestoneStatus` says: a `PENDING_REVIEW` a sibling
+         * proof set, or a `VERIFIED` that a failed release or a review hands back, can still
+         * be decided by it. `pending` without `running` is the other cause: not claimed yet,
+         * or a panel that produced no verdict. Absent on a server that predates the field.
+         */
+        running?: boolean;
+        /**
+         * `"running"` — a live run holds the proof (wait for it); `"orphaned"` — the run
+         * died, nothing is running; `"unclaimed"` / `"decided"`. Absent on an older server.
+         */
+        claimPhase?: "unclaimed" | "running" | "orphaned" | "decided";
+        /** While `claimPhase` is `"running"`: roughly when the verdict is due. */
+        expectedDoneInSeconds?: number;
+        /** The verdict on THIS PROOF. It does not say whether the money moved. */
         decision?: "YES" | "NO";
         confidence?: number | null;
         contractStatus?: string;
         milestoneTitle?: string;
+        /**
+         * The MILESTONE's state, which is the question most callers are actually asking.
+         * `"COMPLETED"` means the funds were released.
+         */
         milestoneStatus?: string;
+        /**
+         * SEC-058. Set when the payout is SCHEDULED rather than done: the milestone is at
+         * `VERIFIED`, the funds are still in escrow, the funder can contest until this
+         * instant, and the instant itself can move. The route has returned it since
+         * 2026-09-12; a TypeScript caller could not read it without a cast, so
+         * `milestoneStatus: "VERIFIED"` looked like a completed payout.
+         */
+        releaseHoldUntil?: string | null;
+        /**
+         * `true` when the milestone (or, for a legacy contract-level proof, the contract)
+         * is TERMINAL — `EXPIRED` or `COMPLETED` — so no verdict on this proof can move it
+         * any more. Check it BEFORE `decision` and `pending`: a milestone the funder
+         * cancelled, or the deadline cron closed, while the panel ran stays `EXPIRED` with
+         * this proof's `decision` still recorded (YES or NO) — or with `pending: true` for
+         * good, when the panel could not reach a verdict. A YES here moved no funds.
+         */
+        milestoneClosed?: boolean;
+        /** `"EXPIRED"` or `"COMPLETED"` when `milestoneClosed`, else null. */
+        terminalStatus?: string | null;
+        /**
+         * Why an `EXPIRED` milestone ended, when recorded. `"RELEASED_ON_CHAIN"` means the
+         * chain shows the builder WAS paid — just not by this verification; the other
+         * values (`DEADLINE_EXPIRED`, `CANCELLED_AFTER_APPROVAL`, …) mean the funder was
+         * refunded or no escrow existed. Null when not recorded.
+         */
+        terminalReason?: string | null;
         reasoning?: string;
     }>;
     /**
@@ -120,11 +277,38 @@ export declare class CascrowClient {
             customFields?: Record<string, unknown>;
         };
     }): Promise<{
-        verdict: "approved" | "rejected" | "pending_review";
-        confidence: number;
+        /**
+         * SEC-059's shape at a fourth consumer, found by deriving the set of readers from
+         * what the route SENDS rather than from the two MCP servers a finding compared.
+         *
+         * The route has two 200 responses that carry NO `verdict` key at all, and this
+         * union claimed three values:
+         *
+         *  - `decided_elsewhere` — the milestone was settled by a concurrent request or by
+         *    the investor's review while this proof was being verified. The route answers
+         *    `{ ok: true, decided: "elsewhere" }`; `verdict` was simply `undefined` here,
+         *    outside its own declared type, and a consumer treating it as falsy read it as
+         *    a rejection.
+         *  - `panel_unavailable` — fewer than three of the five models answered. OUR
+         *    outage, not a judgement of the work, and resubmitting will not help.
+         *
+         * `releaseHoldUntil` is the other half: an `approved` verdict with a hold means
+         * APPROVED and NOT PAID — the funder can contest until then, and the date can move.
+         */
+        verdict: "approved" | "rejected" | "pending_review" | "decided_elsewhere" | "panel_unavailable";
+        confidence: number | null;
         reasoning: string;
         onChainUrl: string | null;
         proofId: string | null;
+        /** Set when `verdict` is `approved` but the payout is scheduled rather than done. */
+        releaseHoldUntil: string | null;
+        /**
+         * With `decided_elsewhere`: the TERMINAL status the milestone was already in
+         * (`"EXPIRED"`, `"COMPLETED"`) — it was closed before this submission could settle
+         * it, e.g. by the funder's cancel or the deadline, and resubmitting is pointless.
+         * Null when it was decided by the investor's review or a concurrent submission.
+         */
+        settledAs: string | null;
     }>;
     /**
      * Verify AI-generated work with no escrow contract — a task description
@@ -134,25 +318,84 @@ export declare class CascrowClient {
      * yet, so do not treat a key as a way to get more runs.
      */
     verifyWork(input: VerifyWorkInput): Promise<VerifyWorkResult>;
+    /**
+     * True when a thrown `CascrowApiError` means "cascrow could not run the panel",
+     * not "the work was not verified" (SEC-128).
+     *
+     * `verifyWork` resolves ONLY when a verdict exists. When fewer than three of the
+     * five models answer, the endpoint answers 503 with `panelUnavailable: true` and
+     * carries NO decision and NO confidence, so `request` throws — deliberately, and
+     * that is the whole repair: the previous behaviour was a 200 carrying
+     * `decision: "NO", confidence: 65`, which every consumer rendered as a rejection
+     * of the submitted work. An outage is not a verdict, and a retry is the right
+     * next move rather than a resubmission with "stronger" evidence.
+     *
+     * A thrown 500 from the same endpoint is NOT this: it reports `false` here,
+     * because "the models did not answer" is a claim about the panel and a crash is
+     * not evidence for it.
+     */
+    static isPanelUnavailable(err: unknown): boolean;
     /**
      * Submit a proof and wait for AI verification to complete — combines
      * submitProof + polling into a single call. Times out after ~100s and
      * returns { pending: true, proofId } so you can poll manually.
+     *
+     * Returns early, with `milestoneClosed: true`, when the milestone is already
+     * terminal — including when no verdict was recorded, which on a closed milestone
+     * will never change. Check `milestoneClosed` before `decision`: a `"YES"` on a
+     * closed, `EXPIRED` milestone is the panel's opinion of the proof and moved no funds.
+     *
+     * Also returns early, with `approvedWithoutThisVerdict: true`, when the milestone is
+     * VERIFIED or COMPLETED without a YES from this proof (another proof won it, or the
+     * funder approved it in review): `decision` is then `"NO"` or `null`, and the
+     * milestone's outcome is NOT this proof's.
+     *
+     * A proof parked for a human (no verdict, milestone at `PENDING_REVIEW`) returns
+     * `{ pending: true, proofId, awaitingHumanReview: true }` on the first poll instead of
+     * after the full timeout: no poll will change it, the funder decides.
+     *
+     * Neither early return is taken while the server reports `running: true` on a
+     * VERIFIED or PENDING_REVIEW milestone: this proof's panel is still running and can
+     * still decide the row, so the loop keeps polling. A server that predates `running`
+     * cannot say so, and there the early returns stay as described.
      */
     watchVerification(input: {
         milestoneId: string;
         content: string;
         filename?: string;
-    }): Promise<{
-        pending: false;
-        decision: "YES" | "NO";
-        confidence: number | null;
-        reasoning?: string;
-    } | {
-        pending: true;
-        proofId: string;
-    }>;
-    /** Look up any agent's on-chain reputation by EVM wallet address. No auth required. */
+    }): Promise<WatchResult>;
+    /**
+     * Wait for the verification of a proof that is already submitted — the call to
+     * make after `submitProof`, and after `verify()` threw a 409 VERIFICATION_IN_PROGRESS
+     * with `phase: "running"` (T01-7). Same results as `watchVerification`, which is
+     * this plus the upload.
+     *
+     * Stops early, by throwing, when waiting cannot help: 401 / 403 (the key or the
+     * account does not change by waiting) and 404 (permanent — upload answers only
+     * after the proof exists and proof-status reads the primary database, so a 404
+     * means deleted or erased). Returns `{ pending: true, interrupted: true }` when the
+     * run that held the proof died (`claimPhase: "orphaned"`). On 429 / 503 it waits at
+     * least the server's Retry-After, never past `timeoutMs`; network errors and other
+     * 5xx are transient and it polls again.
+     */
+    waitForProof(proofId: string, options?: {
+        timeoutMs?: number;
+        intervalMs?: number;
+    }): Promise<WatchResult>;
+    /**
+     * Look up any agent's on-chain reputation by EVM wallet address. No auth required.
+     *
+     * `summary` reaches you RAW, and so do `name` and `skills` from `discoverAgents`
+     * below. The route deliberately does not mark them (the browser profile page renders
+     * the same fields) and both MCP servers do mark them — so this SDK is a machine
+     * boundary that does not, exactly like `verify()`.
+     *
+     * The DECISION is the same and so is its reason: a library cannot know whether its
+     * return value ends in a model's context or on a page, where a marker is noise.
+     * What was missing here was the REASON, stated at `verify()` and nowhere
+     * else, which made this door look like an oversight rather than a choice (SEC-120).
+     * If you feed these fields to a model, treat them as data and not as instructions.
+     */
     getReputation(walletAddress: string): Promise<ReputationResult>;
     /** Search for discoverable Builder agents by skill tag and minimum success rate. */
     discoverAgents(options?: {

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,QAAQ,EACR,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EAEpB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,oBAAoB;IACnC,4HAA4H;IAC5H,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAaD;;;;GAIG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,OAAO,GAAE,oBAAyB;IAK9C,OAAO,CAAC,WAAW;YAIL,OAAO;IAoBrB,8HAA8H;IACxH,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAI7D,6DAA6D;IACvD,UAAU,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAMhD,oHAAoH;IAC9G,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA4B/E,gEAAgE;IAC1D,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIxD,gEAAgE;IAC1D,eAAe,CAAC,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAO,GAAG,OAAO,CAAC;QAC/E,SAAS,EAAE,iBAAiB,EAAE,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IAKF,qEAAqE;IAC/D,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAIvE,0HAA0H;IACpH,cAAc,CAClB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,SAAS,GAAG,QAAQ,GAC7B,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAIrD,6DAA6D;IACvD,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC;IAIrD,6DAA6D;IACvD,OAAO,CAAC,KAAK,EAAE;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAMlC,qFAAqF;IAC/E,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAInI,8FAA8F;IACxF,UAAU,CAAC,KAAK,EAAE;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAM3G,0FAA0F;IACpF,WAAW,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAcnH,uFAAuF;IACjF,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7C,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IAIF;;;;;;;;;OASG;IACG,MAAM,CACV,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,UAAU,GAAG,UAAU,CAAA;KAAO,GACpD,OAAO,CAAC,kBAAkB,CAAC;IAwE9B;;;OAGG;IACG,SAAS,CAAC,KAAK,EAAE;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE;YACR,WAAW,EAAE,MAAM,CAAC;YACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YACjB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACxC,CAAC;KACH,GAAG,OAAO,CAAC;QACV,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,gBAAgB,CAAC;QACpD,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,CAAC;IA2BF;;;;;;OAMG;IACG,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAInE;;;;OAIG;IACG,iBAAiB,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAChG;QAAE,OAAO,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACzF;QAAE,OAAO,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CACrC;IAsBD,uFAAuF;IACjF,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIrE,oFAAoF;IAC9E,cAAc,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IASvH,2EAA2E;IACrE,eAAe,CAAC,OAAO,EAAE;QAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAGtG"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,QAAQ,EACR,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EAEpB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EACjB,MAAM,YAAY,CAAC;AA6BpB,MAAM,WAAW,oBAAoB;IACnC,4HAA4H;IAC5H,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA6GD,8DAA8D;AAC9D,MAAM,MAAM,WAAW,GAEjB;IACE,OAAO,EAAE,KAAK,CAAC;IACf,yEAAyE;IACzE,QAAQ,EAAE,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mDAAmD;IACnD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;OAGG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,wFAAwF;IACxF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;OAIG;IACH,0BAA0B,EAAE,OAAO,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACD;IACE,OAAO,EAAE,IAAI,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,IAAI,CAAC;IAC3B,+JAA+J;IAC/J,WAAW,CAAC,EAAE,IAAI,CAAC;CACpB,CAAC;AA2FR,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,OAAO,GAAE,oBAAyB;IAK9C,OAAO,CAAC,WAAW;IAInB;;;;;;;;;;;;;OAaG;YACW,OAAO;IA0ErB,8HAA8H;IACxH,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAI7D,6DAA6D;IACvD,UAAU,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAMhD,oHAAoH;IAC9G,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2C/E,gEAAgE;IAC1D,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIxD,gEAAgE;IAC1D,eAAe,CAAC,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAO,GAAG,OAAO,CAAC;QAC/E,SAAS,EAAE,iBAAiB,EAAE,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IAKF,qEAAqE;IAC/D,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAIvE;;;;;;;;;;;;;;;;;OAiBG;IACG,cAAc,CAClB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,SAAS,GAAG,QAAQ,EAC9B,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAQrD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,WAAW,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAI/C,6DAA6D;IACvD,YAAY,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC;IAIrD,6DAA6D;IACvD,OAAO,CAAC,KAAK,EAAE;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAMlC,qFAAqF;IAC/E,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAInI;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,UAAU,CAAC,KAAK,EAAE;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,mFAAmF;QACnF,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAO3G;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAOnH,uFAAuF;IACjF,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7C,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB;;;;;;WAMG;QACH,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB;;;WAGG;QACH,UAAU,CAAC,EAAE,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;QAC9D,0EAA0E;QAC1E,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,0EAA0E;QAC1E,QAAQ,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;QACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB;;;WAGG;QACH,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB;;;;;;WAMG;QACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC;;;;;;;WAOG;QACH,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,sEAAsE;QACtE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B;;;;;WAKG;QACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IAIF;;;;;;;;;OASG;IACG,MAAM,CACV,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,UAAU,GAAG,UAAU,CAAA;KAAO,GACpD,OAAO,CAAC,kBAAkB,CAAC;IAwI9B;;;OAGG;IACG,SAAS,CAAC,KAAK,EAAE;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE;YACR,WAAW,EAAE,MAAM,CAAC;YACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YACjB,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACxC,CAAC;KACH,GAAG,OAAO,CAAC;QACV;;;;;;;;;;;;;;;;;WAiBG;QACH,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,gBAAgB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;QAChG,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,qFAAqF;QACrF,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC;;;;;WAKG;QACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC;IA+CF;;;;;;OAMG;IACG,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAInE;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO;IAKhD;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,iBAAiB,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IAKjH;;;;;;;;;;;;;OAaG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IAkEpH;;;;;;;;;;;;;OAaG;IACG,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIrE,oFAAoF;IAC9E,cAAc,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IASvH,2EAA2E;IACrE,eAAe,CAAC,OAAO,EAAE;QAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAGtG"}