interai-risk-oracle 0.1.2-beta → 0.1.4-beta

package/README.md

@@ -1,16 +1,40 @@
 # TypeScript SDK
 
-Typed hosted API client for InterAI Risk Oracle. The package source is
-publish-ready; confirm the package has been released before using the registry
-command below.
+Typed hosted API client for InterAI Risk Oracle.
+
+Package version: `interai-risk-oracle@0.1.4-beta`.
 
 ```bash
-npm install interai-risk-oracle
+npm install interai-risk-oracle@0.1.4-beta
 ```
 
+## Builder workflow
+
+The client can onboard a builder, retain the returned API key, inspect the account, quote usage, and manage a prepaid top-up without hand-building HTTP requests:
+
 ```ts
 import { InterAIRiskOracleClient } from "interai-risk-oracle"
 
+const client = new InterAIRiskOracleClient({
+  baseUrl: "https://ai-risk-oracle.fly.dev"
+})
+
+const onboarding = await client.onboard({
+  name: "my-agent"
+})
+
+const account = await client.me()
+const quote = await client.quote({ mode: "fast" })
+const topup = await client.createTopup("0.10")
+```
+
+`onboard()` stores the returned API key on the client when one is issued. You can also set a key explicitly with `setApiKey()`.
+
+Top-up helpers cover `createTopup()`, `topupStatus()`, and `confirmTopup()`. Account helpers include `me()`, `ledger()`, and `usage()`. HTTP failures raise `OracleHttpError` with `status`, structured API `code`, response headers, body, and parsed x402 payment requirements when present.
+
+## Pre-execution verification
+
+```ts
 const client = new InterAIRiskOracleClient({
   baseUrl: "https://ai-risk-oracle.fly.dev",
   apiKey: process.env.INTERAI_API_KEY
@@ -19,9 +43,18 @@ const client = new InterAIRiskOracleClient({
 const decision = await client.verify({
   use_case: "agent-before-tool-execution",
   action: {
-    type: "tool_call",
-    description: "Send account notice",
-    external_side_effect: true
+    schema: "interai-canonical-action/v1",
+    tool_id: "notifications.send_account_notice",
+    type: "email_send",
+    operation: "send_account_notice",
+    arguments: { account_id: "account_123" },
+    external_side_effect: true,
+    irreversible: false
+  },
+  execution_context: {
+    schema: "interai-host-execution-context/v1",
+    workspace_id: "workspace_123",
+    environment: "production"
   },
   context: {
     agent_id: "agent_123",
@@ -36,11 +69,25 @@ const decision = await client.verify({
 }, "stable-business-operation-id")
 ```
 
-`verify` generates an idempotency key when one is not provided. Supply a stable
-business-operation key when retries must resolve to the same billed result.
+`verify()` generates an idempotency key when one is not provided. Supply a stable business-operation key when retries must resolve to the same billed result. `verifyBatch()` provides the corresponding bounded batch surface. Request timeouts are configurable globally with `timeoutMs` and per verification call.
 
-For a portable signature check, fetch a lookup and forward its opaque signed
-payload without parsing it:
+## Execution boundary
+
+For an `allow`, verify the DecisionReceipt with the service, rebuild the final host intent, then validate the exact binding before dispatch. `ExecutionAuthorization` is single-use and expires in 1–300 seconds (60 seconds default); persist atomic consumption in your own runtime when replay protection must survive processes.
+
+```ts
+const lookup = await client.getTrustReceipt(decision.trust_receipt_id!)
+const gate = await client.validateAndConsumeReceipt({
+  lookup,
+  finalIntent: rebuildFinalIntentAtHostBoundary(),
+  replayStore // durable, atomic consumeOnce(key); errors must throw
+})
+if (!gate.ok) throw new Error(`Do not dispatch: ${gate.code}`)
+```
+
+`getTrustReceipt()` requires the owning active API key and returns complete signed evidence. If you intentionally need the anonymous existence reference, use `getTrustReceiptReference()`, whose return type is the privacy-aware union `TrustReceiptLookup | TrustReceiptPublicSummary`. The public summary contains only `receipt_id` and `issued_at`; it is not execution evidence.
+
+For a portable signature check, fetch the owner-authenticated lookup and forward its opaque signed payload without parsing or reserializing it:
 
 ```ts
 const receipt = await client.getTrustReceipt(decision.trust_receipt_id!)
@@ -50,6 +97,9 @@ const signatureCheck = await client.verifyTrustReceiptSignature(receipt)
 Build and inspect the package locally:
 
 ```bash
+npm run typecheck
 npm run build
 npm pack --dry-run
 ```
+
+See [the durable SQLite dispatch example](../../examples/execution-boundary/README.md) for restart-safe consumption and terminal executor binding. The low-level validator alone does not prevent replay.

package/dist/index.d.ts

@@ -1,8 +1,82 @@
 export type AutonomousRiskLevel = "low" | "medium" | "high";
 export type GatewayDecision = "allow" | "review_required" | "block";
+export declare const CANONICAL_ACTION_SCHEMA: "interai-canonical-action/v1";
+export declare const HOST_EXECUTION_CONTEXT_SCHEMA: "interai-host-execution-context/v1";
+export declare const EXECUTION_INTENT_SCHEMA: "interai-canonical-execution-intent/v2";
+export declare const EXECUTION_AUTHORIZATION_SCHEMA: "interai-execution-authorization/v1";
+export declare const DEFAULT_EXECUTION_AUTHORIZATION_TTL_SECONDS = 60;
+export declare const MAX_EXECUTION_AUTHORIZATION_TTL_SECONDS = 300;
+/** The trusted action envelope is constructed by the host execution boundary, not inferred from agent free text. */
+export type CanonicalActionEnvelope = {
+    schema: typeof CANONICAL_ACTION_SCHEMA;
+    tool_id: string;
+    type: string;
+    operation: string;
+    arguments: Record<string, unknown>;
+    external_side_effect: boolean;
+    irreversible: boolean;
+    destination?: string;
+    resource?: string;
+};
+export type HostExecutionContext = {
+    schema: typeof HOST_EXECUTION_CONTEXT_SCHEMA;
+    workspace_id: string;
+    environment: string;
+    actor_id?: string;
+    run_id?: string;
+};
+/** The exact public object bound to an execution authorization. */
+export type CanonicalExecutionIntent = {
+    schema: typeof EXECUTION_INTENT_SCHEMA;
+    action_authority: "host_attested_canonical" | "caller_proposed_legacy";
+    canonical_action: Record<string, unknown>;
+    evaluation_context: Record<string, unknown>;
+    authoritative_context: Record<string, unknown>;
+    policy_authority: Record<string, unknown>;
+};
+export type ExecutionAuthorization = {
+    schema: typeof EXECUTION_AUTHORIZATION_SCHEMA;
+    decision_id: string;
+    decision: "allow";
+    execution_intent_digest: string;
+    issued_at: string;
+    expires_at: string;
+    single_use: true;
+};
+export type ExecutionReceipt = {
+    receipt_schema_version: "execution-receipt/v1";
+    decision_id: string;
+    execution_intent_digest: string;
+    status: "dispatched" | "succeeded" | "failed" | "unknown";
+    observed_at: string;
+    correlation_id?: string;
+    evidence_source: string;
+};
+export type DispatchValidation = {
+    ok: true;
+    execution_intent_digest: string;
+} | {
+    ok: false;
+    code: "decision_not_authorizing" | "execution_intent_mismatch" | "decision_expired" | "receipt_signature_invalid" | "authorization_replayed";
+};
+/** Must atomically insert a unique key in durable host-owned storage. Errors must throw. */
+export interface ExecutionAuthorizationReplayStore {
+    consumeOnce(key: string): boolean | Promise<boolean>;
+}
+/** Canonical JSON used by the hosted execution-intent digest contract. */
+export declare function canonicalExecutionIntentJson(intent: CanonicalExecutionIntent): string;
+/** Returns the SHA-256 hex digest to compare with `execution_intent_digest` before dispatch. */
+export declare function executionIntentDigest(intent: CanonicalExecutionIntent): Promise<string>;
+/** Fail-closed local validation. Signature verification remains a service call. */
+export declare function validateExecutionAuthorization(input: {
+    authorization: ExecutionAuthorization | null | undefined;
+    finalIntent: CanonicalExecutionIntent;
+    receiptSignatureValid: boolean;
+    now?: Date;
+}): Promise<DispatchValidation>;
 export type VerifyRequest = {
     use_case: string;
-    action: {
+    action: CanonicalActionEnvelope | {
         type: string;
         name?: string;
         description: string;
@@ -19,18 +93,24 @@ export type VerifyRequest = {
         user_confirmation?: boolean;
         [key: string]: unknown;
     };
+    /** Required with a canonical action for executable pilot authorization. Host-attested values are bound into the intent. */
+    execution_context?: HostExecutionContext;
+    /** 1–300 seconds; defaults to 60 seconds for canonical Bearer pilot requests. */
+    authorization_ttl_seconds?: number;
     policy?: {
         max_risk_level?: AutonomousRiskLevel;
         require_trust_receipt?: boolean;
         amount_usd_limit?: number;
         blocked_action_types?: string[];
         allowed_action_types?: string[];
+        allowed_action_types_enforced?: boolean;
         require_human_review_above?: number;
         require_user_confirmation_for_irreversible?: boolean;
         [key: string]: unknown;
     };
     domain?: string;
     mode?: "fast_heuristic" | "semantic_judge";
+    external_evidence?: unknown[];
 };
 export type PolicyViolation = {
     code: string;
@@ -65,6 +145,10 @@ export type VerifyResponse = {
     policy_result: GatewayDecision;
     policy_violations: PolicyViolation[];
     trust_receipt_id?: string;
+    /** Digest of the exact canonical intent evaluated; compare against the host's final intent before dispatch. */
+    execution_intent_digest?: string;
+    execution_intent?: CanonicalExecutionIntent;
+    execution_authorization?: ExecutionAuthorization | null;
     trust_receipt?: Record<string, unknown>;
     [key: string]: unknown;
 };
@@ -72,7 +156,40 @@ export type InterAIClientOptions = {
     baseUrl: string;
     apiKey?: string;
     clientName?: string;
+    timeoutMs?: number;
 };
+export type OnboardResponse = Record<string, unknown> & {
+    api_key?: string;
+};
+export type X402PaymentRequiredResponse = Record<string, unknown> & {
+    x402Version: number;
+    accepts: unknown[];
+};
+export declare class OracleHttpError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    readonly code: string | null;
+    readonly headers: Record<string, string>;
+    readonly paymentRequired: X402PaymentRequiredResponse | null;
+    constructor(input: {
+        method: string;
+        path: string;
+        status: number;
+        body: unknown;
+        headers: Record<string, string>;
+    });
+}
+/** Anonymous receipt lookup: existence reference only, never signed evidence. */
+export type TrustReceiptPublicSummary = {
+    ok: true;
+    visibility: "public_summary";
+    receipt: {
+        receipt_id: string;
+        issued_at: string;
+    };
+    full_receipt_requires_owner: true;
+};
+/** Complete owner-authenticated receipt lookup with opaque signed payload bytes. */
 export type TrustReceiptLookup = {
     ok: true;
     receipt: Record<string, unknown> & {
@@ -82,18 +199,59 @@ export type TrustReceiptLookup = {
         signed: boolean;
         signature: string | null;
         signature_alg: "hmac-sha256" | null;
+        verification_scope?: "service_verifiable";
         signed_payload: string | null;
+        signature_valid?: boolean;
     };
+    metadata?: Record<string, unknown>;
     [key: string]: unknown;
 };
+export type TrustReceiptLookupResponse = TrustReceiptLookup | TrustReceiptPublicSummary;
 export declare class InterAIRiskOracleClient {
     readonly baseUrl: string;
-    readonly apiKey?: string;
+    apiKey?: string;
     readonly clientName: string;
+    readonly timeoutMs: number;
     constructor(options: InterAIClientOptions);
+    setApiKey(apiKey: string): void;
     private jsonRequest;
-    verify(request: VerifyRequest, idempotencyKey?: string): Promise<VerifyResponse>;
+    getPricing(): Promise<Record<string, unknown>>;
+    getDiscoveryBundle(): Promise<Record<string, unknown>>;
+    onboard(input?: {
+        name?: string;
+        account_id?: string;
+        api_key_name?: string;
+        recommended_topup_usdc?: string;
+    }): Promise<OnboardResponse>;
+    me(): Promise<Record<string, unknown>>;
+    ledger(limit?: number): Promise<Record<string, unknown>>;
+    usage(limit?: number): Promise<Record<string, unknown>>;
+    quote(input?: {
+        service?: "verify";
+        mode?: "fast" | "batch";
+        items_count?: number;
+    }): Promise<Record<string, unknown>>;
+    createTopup(amountUsdc?: string): Promise<Record<string, unknown>>;
+    topupStatus(topupId: string): Promise<Record<string, unknown>>;
+    confirmTopup(topupId: string, txHash: string): Promise<Record<string, unknown>>;
+    verify(request: VerifyRequest, idempotencyKey?: string, options?: {
+        signal?: AbortSignal;
+        timeoutMs?: number;
+    }): Promise<VerifyResponse>;
+    verifyBatch(requests: VerifyRequest[], idempotencyKey?: string, options?: {
+        signal?: AbortSignal;
+        timeoutMs?: number;
+    }): Promise<Record<string, unknown>>;
+    /** Return the privacy-aware lookup union without requiring owner credentials. */
+    getTrustReceiptReference(receiptId: string): Promise<TrustReceiptLookupResponse>;
+    /** Return complete signed evidence; throws when the service only returns the anonymous summary. */
     getTrustReceipt(receiptId: string): Promise<TrustReceiptLookup>;
+    /** Authenticate the exact receipt, validate its grant, then durably consume before dispatch. */
+    validateAndConsumeReceipt(input: {
+        lookup: TrustReceiptLookup;
+        finalIntent: CanonicalExecutionIntent;
+        replayStore: ExecutionAuthorizationReplayStore;
+    }): Promise<DispatchValidation>;
     verifyTrustReceiptSignature(lookup: TrustReceiptLookup): Promise<{
         valid: boolean;
         signature_alg: "hmac-sha256";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;AAC3D,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,iBAAiB,GAAG,OAAO,CAAA;AAEnE,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,WAAW,EAAE,MAAM,CAAA;QACnB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,YAAY,CAAC,EAAE,OAAO,CAAA;QACtB,oBAAoB,CAAC,EAAE,OAAO,CAAA;QAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,MAAM,CAAC,EAAE;QACP,cAAc,CAAC,EAAE,mBAAmB,CAAA;QACpC,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC/B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC/B,0BAA0B,CAAC,EAAE,MAAM,CAAA;QACnC,0CAA0C,CAAC,EAAE,OAAO,CAAA;QACpD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,gBAAgB,GAAG,gBAAgB,CAAA;CAC3C,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,eAAe,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,wBAAwB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IACzC,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,0BAA0B,CAAC,EAAE,OAAO,CAAA;IACpC,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAA;IAClC,6BAA6B,CAAC,EAAE,OAAO,CAAA;IACvC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,sBAAsB,CAAA;IACxC,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,mBAAmB,CAAA;IAC/B,OAAO,EAAE,aAAa,CAAA;IACtB,kBAAkB,EAAE,eAAe,CAAA;IACnC,aAAa,EAAE,eAAe,CAAA;IAC9B,iBAAiB,EAAE,eAAe,EAAE,CAAA;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,IAAI,CAAA;IACR,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAA;IACzD,YAAY,EAAE;QACZ,MAAM,EAAE,OAAO,CAAA;QACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,aAAa,EAAE,aAAa,GAAG,IAAI,CAAA;QACnC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;KAC9B,CAAA;IACD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAOD,qBAAa,uBAAuB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;gBAEf,OAAO,EAAE,oBAAoB;YAM3B,WAAW;IAsBnB,MAAM,CACV,OAAO,EAAE,aAAa,EACtB,cAAc,SAA0B,GACvC,OAAO,CAAC,cAAc,CAAC;IAWpB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAM/D,2BAA2B,CAC/B,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,aAAa,CAAA;KAAE,CAAC;CAgB7D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;AAC3D,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,iBAAiB,GAAG,OAAO,CAAA;AAEnE,eAAO,MAAM,uBAAuB,EAAG,6BAAsC,CAAA;AAC7E,eAAO,MAAM,6BAA6B,EAAG,mCAA4C,CAAA;AACzF,eAAO,MAAM,uBAAuB,EAAG,uCAAgD,CAAA;AACvF,eAAO,MAAM,8BAA8B,EAAG,oCAA6C,CAAA;AAC3F,eAAO,MAAM,2CAA2C,KAAK,CAAA;AAC7D,eAAO,MAAM,uCAAuC,MAAM,CAAA;AAE1D,oHAAoH;AACpH,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,OAAO,uBAAuB,CAAA;IACtC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,oBAAoB,EAAE,OAAO,CAAA;IAC7B,YAAY,EAAE,OAAO,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,OAAO,6BAA6B,CAAA;IAC5C,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,mEAAmE;AACnE,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,OAAO,uBAAuB,CAAA;IACtC,gBAAgB,EAAE,yBAAyB,GAAG,wBAAwB,CAAA;IACtE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3C,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC1C,CAAA;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,OAAO,8BAA8B,CAAA;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,OAAO,CAAA;IACjB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,IAAI,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,sBAAsB,EAAE,sBAAsB,CAAA;IAC9C,WAAW,EAAE,MAAM,CAAA;IACnB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,MAAM,EAAE,YAAY,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAA;IACzD,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;CACxB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,uBAAuB,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,0BAA0B,GAAG,2BAA2B,GAAG,kBAAkB,GAAG,2BAA2B,GAAG,wBAAwB,CAAA;CAAE,CAAA;AAE/J,4FAA4F;AAC5F,MAAM,WAAW,iCAAiC;IAChD,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACrD;AAeD,0EAA0E;AAC1E,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAErF;AAED,gGAAgG;AAChG,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAI7F;AAED,mFAAmF;AACnF,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,aAAa,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,CAAA;IACxD,WAAW,EAAE,wBAAwB,CAAA;IACrC,qBAAqB,EAAE,OAAO,CAAA;IAC9B,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmB9B;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,uBAAuB,GAAG;QAChC,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,WAAW,EAAE,MAAM,CAAA;QACnB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,YAAY,CAAC,EAAE,OAAO,CAAA;QACtB,oBAAoB,CAAC,EAAE,OAAO,CAAA;QAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,2HAA2H;IAC3H,iBAAiB,CAAC,EAAE,oBAAoB,CAAA;IACxC,iFAAiF;IACjF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,MAAM,CAAC,EAAE;QACP,cAAc,CAAC,EAAE,mBAAmB,CAAA;QACpC,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC/B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC/B,6BAA6B,CAAC,EAAE,OAAO,CAAA;QACvC,0BAA0B,CAAC,EAAE,MAAM,CAAA;QACnC,0CAA0C,CAAC,EAAE,OAAO,CAAA;QACpD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,gBAAgB,GAAG,gBAAgB,CAAA;IAC1C,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAA;CAC9B,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,eAAe,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,wBAAwB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IACzC,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAChC,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,0BAA0B,CAAC,EAAE,OAAO,CAAA;IACpC,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAA;IAClC,6BAA6B,CAAC,EAAE,OAAO,CAAA;IACvC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,sBAAsB,CAAA;IACxC,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,mBAAmB,CAAA;IAC/B,OAAO,EAAE,aAAa,CAAA;IACtB,kBAAkB,EAAE,eAAe,CAAA;IACnC,aAAa,EAAE,eAAe,CAAA;IAC9B,iBAAiB,EAAE,eAAe,EAAE,CAAA;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,+GAA+G;IAC/G,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,gBAAgB,CAAC,EAAE,wBAAwB,CAAA;IAC3C,uBAAuB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAA;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IACtD,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAClE,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,OAAO,EAAE,CAAA;CACnB,CAAA;AAED,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACxC,QAAQ,CAAC,eAAe,EAAE,2BAA2B,GAAG,IAAI,CAAA;gBAEhD,KAAK,EAAE;QACjB,MAAM,EAAE,MAAM,CAAA;QACd,IAAI,EAAE,MAAM,CAAA;QACZ,MAAM,EAAE,MAAM,CAAA;QACd,IAAI,EAAE,OAAO,CAAA;QACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAChC;CAgBF;AAED,iFAAiF;AACjF,MAAM,MAAM,yBAAyB,GAAG;IACtC,EAAE,EAAE,IAAI,CAAA;IACR,UAAU,EAAE,gBAAgB,CAAA;IAC5B,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAA;QAClB,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;IACD,2BAA2B,EAAE,IAAI,CAAA;CAClC,CAAA;AAED,oFAAoF;AACpF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,IAAI,CAAA;IACR,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAA;IACzD,YAAY,EAAE;QACZ,MAAM,EAAE,OAAO,CAAA;QACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,aAAa,EAAE,aAAa,GAAG,IAAI,CAAA;QACnC,kBAAkB,CAAC,EAAE,oBAAoB,CAAA;QACzC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;QAC7B,eAAe,CAAC,EAAE,OAAO,CAAA;KAC1B,CAAA;IACD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG,kBAAkB,GAAG,yBAAyB,CAAA;AAmBvF,qBAAa,uBAAuB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;gBAEd,OAAO,EAAE,oBAAoB;IAOzC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;YAIjB,WAAW;IA8CnB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAI9C,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItD,OAAO,CAAC,KAAK,GAAE;QACnB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,sBAAsB,CAAC,EAAE,MAAM,CAAA;KAC3B,GAAG,OAAO,CAAC,eAAe,CAAC;IAU3B,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItC,MAAM,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAIpD,KAAK,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAInD,KAAK,CAAC,KAAK,GAAE;QACjB,OAAO,CAAC,EAAE,QAAQ,CAAA;QAClB,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;QACvB,WAAW,CAAC,EAAE,MAAM,CAAA;KAChB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAYnC,WAAW,CAAC,UAAU,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAQlE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAI9D,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAU/E,MAAM,CACV,OAAO,EAAE,aAAa,EACtB,cAAc,SAA0B,EACxC,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACzD,OAAO,CAAC,cAAc,CAAC;IAYpB,WAAW,CACf,QAAQ,EAAE,aAAa,EAAE,EACzB,cAAc,SAA0B,EACxC,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACzD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAYnC,iFAAiF;IAC3E,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAMtF,mGAAmG;IAC7F,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQrE,gGAAgG;IAC1F,yBAAyB,CAAC,KAAK,EAAE;QACrC,MAAM,EAAE,kBAAkB,CAAA;QAC1B,WAAW,EAAE,wBAAwB,CAAA;QACrC,WAAW,EAAE,iCAAiC,CAAA;KAC/C,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAsBzB,2BAA2B,CAC/B,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,aAAa,CAAA;KAAE,CAAC;CAiB7D"}

package/dist/index.js

@@ -1,25 +1,128 @@
+export const CANONICAL_ACTION_SCHEMA = "interai-canonical-action/v1";
+export const HOST_EXECUTION_CONTEXT_SCHEMA = "interai-host-execution-context/v1";
+export const EXECUTION_INTENT_SCHEMA = "interai-canonical-execution-intent/v2";
+export const EXECUTION_AUTHORIZATION_SCHEMA = "interai-execution-authorization/v1";
+export const DEFAULT_EXECUTION_AUTHORIZATION_TTL_SECONDS = 60;
+export const MAX_EXECUTION_AUTHORIZATION_TTL_SECONDS = 300;
+function normalizeJson(value) {
+    if (Array.isArray(value))
+        return value.map(normalizeJson);
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value)
+            .filter(([, item]) => item !== undefined)
+            .sort(([a], [b]) => a.localeCompare(b))
+            .map(([key, item]) => [key, normalizeJson(item)]));
+    }
+    return value;
+}
+/** Canonical JSON used by the hosted execution-intent digest contract. */
+export function canonicalExecutionIntentJson(intent) {
+    return JSON.stringify(normalizeJson(intent));
+}
+/** Returns the SHA-256 hex digest to compare with `execution_intent_digest` before dispatch. */
+export async function executionIntentDigest(intent) {
+    const bytes = new TextEncoder().encode(canonicalExecutionIntentJson(intent));
+    const hash = await globalThis.crypto.subtle.digest("SHA-256", bytes);
+    return Array.from(new Uint8Array(hash), (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+/** Fail-closed local validation. Signature verification remains a service call. */
+export async function validateExecutionAuthorization(input) {
+    if (!input.receiptSignatureValid)
+        return { ok: false, code: "receipt_signature_invalid" };
+    if (!input.authorization || input.authorization.decision !== "allow" ||
+        input.authorization.schema !== EXECUTION_AUTHORIZATION_SCHEMA ||
+        input.authorization.single_use !== true || !input.authorization.decision_id) {
+        return { ok: false, code: "decision_not_authorizing" };
+    }
+    const expiresAt = new Date(input.authorization.expires_at);
+    const issuedAt = new Date(input.authorization.issued_at);
+    const now = input.now ?? new Date();
+    const ttl = expiresAt.getTime() - issuedAt.getTime();
+    if (!Number.isFinite(ttl) || ttl < 1000 || ttl > 300_000 || issuedAt > now || expiresAt <= now) {
+        return { ok: false, code: "decision_expired" };
+    }
+    const digest = await executionIntentDigest(input.finalIntent);
+    if (digest !== input.authorization.execution_intent_digest) {
+        return { ok: false, code: "execution_intent_mismatch" };
+    }
+    return { ok: true, execution_intent_digest: digest };
+}
+export class OracleHttpError extends Error {
+    status;
+    body;
+    code;
+    headers;
+    paymentRequired;
+    constructor(input) {
+        super(`InterAI request failed: ${input.method} ${input.path} ${input.status} ${JSON.stringify(input.body)}`);
+        this.name = "OracleHttpError";
+        this.status = input.status;
+        this.body = input.body;
+        this.headers = input.headers;
+        this.code = input.body && typeof input.body === "object" && "error" in input.body &&
+            typeof input.body.error === "string"
+            ? String(input.body.error)
+            : null;
+        this.paymentRequired = input.status === 402 && input.body && typeof input.body === "object" &&
+            input.body.x402Version === 2 &&
+            Array.isArray(input.body.accepts)
+            ? input.body
+            : null;
+    }
+}
+function isPublicReceiptSummary(value) {
+    return "visibility" in value && value.visibility === "public_summary";
+}
 function defaultIdempotencyKey() {
     const random = globalThis.crypto?.randomUUID?.();
     return random || `interai-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 12)}`;
 }
+function responseHeaders(response) {
+    const headers = {};
+    response.headers.forEach((value, key) => {
+        headers[key] = value;
+    });
+    return headers;
+}
 export class InterAIRiskOracleClient {
     baseUrl;
     apiKey;
     clientName;
+    timeoutMs;
     constructor(options) {
         this.baseUrl = options.baseUrl.replace(/\/$/, "");
         this.apiKey = options.apiKey;
-        this.clientName = options.clientName || "typescript-sdk/0.1.2-beta";
+        this.clientName = options.clientName || "typescript-sdk/0.1.3-beta";
+        this.timeoutMs = options.timeoutMs ?? 10_000;
     }
-    async jsonRequest(path, init) {
-        const response = await fetch(`${this.baseUrl}${path}`, {
-            ...init,
-            headers: {
-                ...(this.apiKey ? { authorization: `Bearer ${this.apiKey}` } : {}),
-                "x-interai-client": this.clientName,
-                ...(init?.headers || {})
-            }
-        });
+    setApiKey(apiKey) {
+        this.apiKey = apiKey;
+    }
+    async jsonRequest(path, init, timeoutMs) {
+        const controller = new AbortController();
+        const callerSignal = init?.signal;
+        const abortFromCaller = () => controller.abort(callerSignal?.reason);
+        if (callerSignal?.aborted)
+            abortFromCaller();
+        else
+            callerSignal?.addEventListener("abort", abortFromCaller, { once: true });
+        const timeout = setTimeout(() => controller.abort(new Error("InterAI request timed out")), timeoutMs ?? this.timeoutMs);
+        let response;
+        try {
+            response = await fetch(`${this.baseUrl}${path}`, {
+                ...init,
+                signal: controller.signal,
+                headers: {
+                    ...(this.apiKey ? { authorization: `Bearer ${this.apiKey}` } : {}),
+                    "x-interai-client": this.clientName,
+                    ...(init?.headers || {})
+                }
+            });
+        }
+        finally {
+            clearTimeout(timeout);
+            callerSignal?.removeEventListener("abort", abortFromCaller);
+        }
         const text = await response.text();
         let body;
         try {
@@ -29,23 +132,128 @@ export class InterAIRiskOracleClient {
             body = { error: "invalid_json_response", raw: text.slice(0, 500) };
         }
         if (!response.ok) {
-            throw new Error(`InterAI request failed: ${response.status} ${JSON.stringify(body)}`);
+            throw new OracleHttpError({
+                method: init?.method || "GET",
+                path,
+                status: response.status,
+                body,
+                headers: responseHeaders(response)
+            });
         }
         return body;
     }
-    async verify(request, idempotencyKey = defaultIdempotencyKey()) {
+    async getPricing() {
+        return this.jsonRequest("/pricing");
+    }
+    async getDiscoveryBundle() {
+        return this.jsonRequest("/.well-known/discovery-bundle.json");
+    }
+    async onboard(input = {}) {
+        const result = await this.jsonRequest("/onboard", {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify(input)
+        });
+        if (typeof result.api_key === "string" && result.api_key)
+            this.apiKey = result.api_key;
+        return result;
+    }
+    async me() {
+        return this.jsonRequest("/me");
+    }
+    async ledger(limit = 20) {
+        return this.jsonRequest(`/ledger?limit=${encodeURIComponent(String(limit))}`);
+    }
+    async usage(limit = 20) {
+        return this.jsonRequest(`/usage?limit=${encodeURIComponent(String(limit))}`);
+    }
+    async quote(input = {}) {
+        return this.jsonRequest("/quote", {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({
+                service: input.service ?? "verify",
+                mode: input.mode ?? "fast",
+                ...(input.items_count !== undefined ? { items_count: input.items_count } : {})
+            })
+        });
+    }
+    async createTopup(amountUsdc = "0.10") {
+        return this.jsonRequest("/topup/create", {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ amount_usdc: amountUsdc })
+        });
+    }
+    async topupStatus(topupId) {
+        return this.jsonRequest(`/topup/${encodeURIComponent(topupId)}`);
+    }
+    async confirmTopup(topupId, txHash) {
+        return this.jsonRequest("/topup/confirm", {
+            method: "POST",
+            headers: {
+                "X-Topup-Id": topupId,
+                "X-Tx-Hash": txHash
+            }
+        });
+    }
+    async verify(request, idempotencyKey = defaultIdempotencyKey(), options = {}) {
         return this.jsonRequest("/verify", {
             method: "POST",
             headers: {
                 "content-type": "application/json",
                 "x-idempotency-key": idempotencyKey
             },
-            body: JSON.stringify(request)
-        });
+            body: JSON.stringify(request),
+            signal: options.signal
+        }, options.timeoutMs);
     }
-    async getTrustReceipt(receiptId) {
+    async verifyBatch(requests, idempotencyKey = defaultIdempotencyKey(), options = {}) {
+        return this.jsonRequest("/verify/batch", {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                "x-idempotency-key": idempotencyKey
+            },
+            body: JSON.stringify({ items: requests }),
+            signal: options.signal
+        }, options.timeoutMs);
+    }
+    /** Return the privacy-aware lookup union without requiring owner credentials. */
+    async getTrustReceiptReference(receiptId) {
         return this.jsonRequest(`/trust/receipts/${encodeURIComponent(receiptId)}`);
     }
+    /** Return complete signed evidence; throws when the service only returns the anonymous summary. */
+    async getTrustReceipt(receiptId) {
+        const result = await this.getTrustReceiptReference(receiptId);
+        if (isPublicReceiptSummary(result)) {
+            throw new Error("Complete receipt requires the owning account API key");
+        }
+        return result;
+    }
+    /** Authenticate the exact receipt, validate its grant, then durably consume before dispatch. */
+    async validateAndConsumeReceipt(input) {
+        // Snapshot before the HTTP await so a caller cannot swap fields after verification.
+        const lookup = structuredClone(input.lookup);
+        const finalIntent = structuredClone(input.finalIntent);
+        const receipt = lookup.receipt;
+        const authorization = receipt.execution_authorization;
+        if (receipt.receipt_schema_version !== "trust-receipt/v2" ||
+            receipt.request_contract !== "autonomous_execution" || receipt.final_decision !== "allow" ||
+            !authorization || authorization.decision_id !== receipt.receipt_id ||
+            authorization.execution_intent_digest !== receipt.execution_intent_digest) {
+            return { ok: false, code: "decision_not_authorizing" };
+        }
+        const signature = await this.verifyTrustReceiptSignature(lookup);
+        const validation = await validateExecutionAuthorization({ authorization, finalIntent, receiptSignatureValid: signature.valid });
+        if (!validation.ok)
+            return validation;
+        if (!await input.replayStore.consumeOnce(`${authorization.decision_id}:${authorization.execution_intent_digest}`)) {
+            return { ok: false, code: "authorization_replayed" };
+        }
+        // Consumption can involve I/O; reject expiration before handing control to the executor.
+        return validateExecutionAuthorization({ authorization, finalIntent, receiptSignatureValid: true });
+    }
     async verifyTrustReceiptSignature(lookup) {
         const { receipt, verification } = lookup;
         if (!verification.signature || !verification.signed_payload) {
@@ -56,6 +264,7 @@ export class InterAIRiskOracleClient {
             headers: { "content-type": "application/json" },
             body: JSON.stringify({
                 receipt_id: receipt.receipt_id,
+                receipt,
                 signed_payload: verification.signed_payload,
                 signature: verification.signature,
                 signature_alg: verification.signature_alg

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AA6FA,SAAS,qBAAqB;IAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAA;IAChD,OAAO,MAAM,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;AAClG,CAAC;AAED,MAAM,OAAO,uBAAuB;IACzB,OAAO,CAAQ;IACf,MAAM,CAAS;IACf,UAAU,CAAQ;IAE3B,YAAY,OAA6B;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,2BAA2B,CAAA;IACrE,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,IAAkB;QACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YACrD,GAAG,IAAI;YACP,OAAO,EAAE;gBACP,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,kBAAkB,EAAE,IAAI,CAAC,UAAU;gBACnC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;aACzB;SACF,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;QACpE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvF,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAsB,EACtB,cAAc,GAAG,qBAAqB,EAAE;QAExC,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,mBAAmB,EAAE,cAAc;aACpC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAA4B,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,OAAO,IAAI,CAAC,WAAW,CACrB,mBAAmB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CACpB,CAAA;IAClC,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,MAA0B;QAE1B,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CAAA;QACxC,IAAI,CAAC,YAAY,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAChD,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,cAAc,EAAE,YAAY,CAAC,cAAc;gBAC3C,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,aAAa,EAAE,YAAY,CAAC,aAAa;aAC1C,CAAC;SACH,CAA8D,CAAA;IACjE,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,uBAAuB,GAAG,6BAAsC,CAAA;AAC7E,MAAM,CAAC,MAAM,6BAA6B,GAAG,mCAA4C,CAAA;AACzF,MAAM,CAAC,MAAM,uBAAuB,GAAG,uCAAgD,CAAA;AACvF,MAAM,CAAC,MAAM,8BAA8B,GAAG,oCAA6C,CAAA;AAC3F,MAAM,CAAC,MAAM,2CAA2C,GAAG,EAAE,CAAA;AAC7D,MAAM,CAAC,MAAM,uCAAuC,GAAG,GAAG,CAAA;AA8D1D,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IACzD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;aACxC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CACpD,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,4BAA4B,CAAC,MAAgC;IAC3E,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;AAC9C,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAgC;IAC1E,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IACpE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAChG,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAKpD;IACC,IAAI,CAAC,KAAK,CAAC,qBAAqB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAA;IACzF,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC,QAAQ,KAAK,OAAO;QAChE,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,8BAA8B;QAC7D,KAAK,CAAC,aAAa,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;QAChF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAA;IACxD,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAC1D,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAA;IACnC,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAA;IACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG,OAAO,IAAI,QAAQ,GAAG,GAAG,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QAC/F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAA;IAChD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAC7D,IAAI,MAAM,KAAK,KAAK,CAAC,aAAa,CAAC,uBAAuB,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAA;IACzD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAA;AACtD,CAAC;AAoGD,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,MAAM,CAAQ;IACd,IAAI,CAAS;IACb,IAAI,CAAe;IACnB,OAAO,CAAwB;IAC/B,eAAe,CAAoC;IAE5D,YAAY,KAMX;QACC,KAAK,CAAC,2BAA2B,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC5G,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;QAC7B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;QACtB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;QAC5B,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,CAAC,IAAI;YAC/E,OAAQ,KAAK,CAAC,IAA4B,CAAC,KAAK,KAAK,QAAQ;YAC7D,CAAC,CAAC,MAAM,CAAE,KAAK,CAAC,IAA0B,CAAC,KAAK,CAAC;YACjD,CAAC,CAAC,IAAI,CAAA;QACR,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YACxF,KAAK,CAAC,IAAkC,CAAC,WAAW,KAAK,CAAC;YAC3D,KAAK,CAAC,OAAO,CAAE,KAAK,CAAC,IAA8B,CAAC,OAAO,CAAC;YAC5D,CAAC,CAAC,KAAK,CAAC,IAAmC;YAC3C,CAAC,CAAC,IAAI,CAAA;IACV,CAAC;CACF;AA+BD,SAAS,sBAAsB,CAAC,KAAiC;IAC/D,OAAO,YAAY,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,gBAAgB,CAAA;AACvE,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAA;IAChD,OAAO,MAAM,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;AAClG,CAAC;AAED,SAAS,eAAe,CAAC,QAAkB;IACzC,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACtB,CAAC,CAAC,CAAA;IACF,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,OAAO,uBAAuB;IACzB,OAAO,CAAQ;IACxB,MAAM,CAAS;IACN,UAAU,CAAQ;IAClB,SAAS,CAAQ;IAE1B,YAAY,OAA6B;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,2BAA2B,CAAA;QACnE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAA;IAC9C,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,IAAkB,EAAE,SAAkB;QAC5E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,YAAY,GAAG,IAAI,EAAE,MAAM,CAAA;QACjC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;QACpE,IAAI,YAAY,EAAE,OAAO;YAAE,eAAe,EAAE,CAAA;;YACvC,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7E,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,EAC9D,SAAS,IAAI,IAAI,CAAC,SAAS,CAC5B,CAAA;QAED,IAAI,QAAkB,CAAA;QACtB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;gBAC/C,GAAG,IAAI;gBACP,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE;oBACP,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClE,kBAAkB,EAAE,IAAI,CAAC,UAAU;oBACnC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;iBACzB;aACF,CAAC,CAAA;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAA;YACrB,YAAY,EAAE,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;QAC7D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;QACpE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC;gBACxB,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK;gBAC7B,IAAI;gBACJ,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI;gBACJ,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC;aACnC,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAqC,CAAA;IACzE,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,OAAO,IAAI,CAAC,WAAW,CAAC,oCAAoC,CAAqC,CAAA;IACnG,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAKV,EAAE;QACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAoB,CAAA;QACrB,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAA;QACtF,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,EAAE;QACN,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAqC,CAAA;IACpE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE;QACrB,OAAO,IAAI,CAAC,WAAW,CAAC,iBAAiB,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAqC,CAAA;IACnH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE;QACpB,OAAO,IAAI,CAAC,WAAW,CAAC,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAqC,CAAA;IAClH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAIR,EAAE;QACJ,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,QAAQ;gBAClC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,MAAM;gBAC1B,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC;SACH,CAAqC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAAU,GAAG,MAAM;QACnC,OAAO,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;SAClD,CAAqC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAqC,CAAA;IACtG,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,MAAc;QAChD,OAAO,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE;YACxC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,YAAY,EAAE,OAAO;gBACrB,WAAW,EAAE,MAAM;aACpB;SACF,CAAqC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAsB,EACtB,cAAc,GAAG,qBAAqB,EAAE,EACxC,UAAwD,EAAE;QAE1D,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,mBAAmB,EAAE,cAAc;aACpC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,EAAE,OAAO,CAAC,SAAS,CAA4B,CAAA;IAClD,CAAC;IAED,KAAK,CAAC,WAAW,CACf,QAAyB,EACzB,cAAc,GAAG,qBAAqB,EAAE,EACxC,UAAwD,EAAE;QAE1D,OAAO,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,mBAAmB,EAAE,cAAc;aACpC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACzC,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,EAAE,OAAO,CAAC,SAAS,CAAqC,CAAA;IAC3D,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,wBAAwB,CAAC,SAAiB;QAC9C,OAAO,IAAI,CAAC,WAAW,CACrB,mBAAmB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CACZ,CAAA;IAC1C,CAAC;IAED,mGAAmG;IACnG,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAA;QAC7D,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACzE,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,gGAAgG;IAChG,KAAK,CAAC,yBAAyB,CAAC,KAI/B;QACC,oFAAoF;QACpF,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC5C,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QACtD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,uBAA6D,CAAA;QAC3F,IAAI,OAAO,CAAC,sBAAsB,KAAK,kBAAkB;YACrD,OAAO,CAAC,gBAAgB,KAAK,sBAAsB,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO;YACzF,CAAC,aAAa,IAAI,aAAa,CAAC,WAAW,KAAK,OAAO,CAAC,UAAU;YAClE,aAAa,CAAC,uBAAuB,KAAK,OAAO,CAAC,uBAAuB,EAAE,CAAC;YAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAA;QACxD,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAA;QAChE,MAAM,UAAU,GAAG,MAAM,8BAA8B,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,qBAAqB,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAA;QAC/H,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAA;QACrC,IAAI,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,aAAa,CAAC,WAAW,IAAI,aAAa,CAAC,uBAAuB,EAAE,CAAC,EAAE,CAAC;YAClH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAA;QACtD,CAAC;QACD,yFAAyF;QACzF,OAAO,8BAA8B,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAA;IACpG,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,MAA0B;QAE1B,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CAAA;QACxC,IAAI,CAAC,YAAY,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAChD,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO;gBACP,cAAc,EAAE,YAAY,CAAC,cAAc;gBAC3C,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,aAAa,EAAE,YAAY,CAAC,aAAa;aAC1C,CAAC;SACH,CAA8D,CAAA;IACjE,CAAC;CACF"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "interai-risk-oracle",
-  "version": "0.1.2-beta",
-  "description": "TypeScript client and policy-gate helpers for the hosted InterAI Risk Oracle API.",
+  "version": "0.1.4-beta",
+  "description": "TypeScript client for InterAI's independent pre-execution decision layer for consequential agent actions.",
   "homepage": "https://ai-risk-oracle.fly.dev/",
   "repository": {
     "type": "git",
@@ -42,6 +42,7 @@
     "interai",
     "risk-oracle",
     "autonomous-agents",
+    "pre-execution-verification",
     "trust-receipts",
     "policy-enforcement"
   ],