verdifax 0.3.0 → 1.1.0

package/dist/index.mjs

@@ -23,15 +23,23 @@ var NotFoundError = class extends VerdifaxError {
   name = "VerdifaxNotFoundError";
 };
 var APIError = class extends VerdifaxError {
-  constructor(status, path, message) {
+  constructor(status, path, message, recordHash, signedRequest) {
     super(`verdifax: API error at ${path} (HTTP ${status}): ${message}`);
     this.status = status;
     this.path = path;
     this.message = message;
+    this.recordHash = recordHash;
+    if (signedRequest !== void 0) {
+      Object.defineProperty(this, "signedRequest", {
+        value: signedRequest,
+        enumerable: false
+      });
+    }
   }
   status;
   path;
   message;
+  recordHash;
   name = "VerdifaxAPIError";
 };
 var APIKeyRequiredError = class extends VerdifaxError {
@@ -51,8 +59,137 @@ import {
   randomBytes,
   sign
 } from "crypto";
+
+// src/validation.ts
+function validateHex64(value, fieldName) {
+  if (typeof value !== "string" || value.length !== 64) {
+    throw new VerdifaxError(
+      `verdifax: ${fieldName} must be 64 hex characters (got ${typeof value === "string" ? value.length : typeof value})`
+    );
+  }
+  if (!/^[0-9a-f]{64}$/.test(value)) {
+    throw new VerdifaxError(
+      `verdifax: ${fieldName} must contain only lowercase hex (0-9, a-f)`
+    );
+  }
+}
+function validateRouteId(value) {
+  if (!value || typeof value !== "string") {
+    throw new VerdifaxError("verdifax: route_id is required");
+  }
+  if (value.length > 256) {
+    throw new VerdifaxError(
+      `verdifax: route_id is too long (${value.length} > 256)`
+    );
+  }
+  if (!/^[\x20-\x7E]+$/.test(value)) {
+    throw new VerdifaxError(
+      "verdifax: route_id contains non-printable-ASCII character"
+    );
+  }
+}
+function validateJobName(value, fieldName) {
+  if (typeof value !== "string" || !/^[A-Za-z0-9._:-]{1,128}$/.test(value)) {
+    throw new VerdifaxError(
+      `verdifax: ${fieldName} must be 1 to 128 letters, digits, dots, underscores, colons or dashes`
+    );
+  }
+}
+
+// src/helpers.ts
+function formatProviderPayload(provider, prompt, response) {
+  if ([provider, prompt, response].some((text) => /[\uD800-\uDFFF]/u.test(text))) {
+    throw new VerdifaxError(
+      "verdifax: provider payload text cannot be encoded as UTF-8"
+    );
+  }
+  return JSON.stringify({ prompt, provider, response });
+}
+function isProvided(value) {
+  return value !== null && value !== void 0 && value !== "" && value !== false;
+}
+function withAttestedFlag(context) {
+  const provided = Object.entries(context).some(
+    ([name, value]) => name !== "attested" && isProvided(value)
+  );
+  return { ...context, attested: provided };
+}
+function withDeclaredFlag(context) {
+  const declared = Object.entries(context).some(
+    ([name, value]) => name !== "declared" && isProvided(value) && !(Array.isArray(value) && value.length === 0)
+  );
+  return { ...context, declared };
+}
+function refuseCallerOriginHashes(substance) {
+  const origin = substance?.origin;
+  if (origin?.source_ip_hash || origin?.user_agent_hash) {
+    throw new VerdifaxError(
+      "verdifax: request_substance.origin.source_ip_hash and user_agent_hash are computed by the server and cannot be supplied"
+    );
+  }
+}
+var JOB_FIELDS = {
+  job_id: true,
+  step_id: true,
+  previous_record_hashes: true,
+  external_previous: true,
+  final: true
+};
+function refuseUnknownFields(value, known, label) {
+  for (const name of Object.keys(value)) {
+    if (!Object.hasOwn(known, name)) {
+      throw new VerdifaxError(`verdifax: ${label} has an unknown field: ${name}`);
+    }
+  }
+}
+function sortedUnique(hashes, fieldName) {
+  if (hashes === void 0) return [];
+  if (!Array.isArray(hashes) || hashes.some((hash) => typeof hash !== "string")) {
+    throw new VerdifaxError(`verdifax: ${fieldName} must be a list of strings`);
+  }
+  return [...new Set(hashes)].sort();
+}
+function normalizedJob(job) {
+  if (typeof job !== "object" || job === null || Array.isArray(job)) {
+    throw new VerdifaxError("verdifax: job must be an object");
+  }
+  refuseUnknownFields(job, JOB_FIELDS, "job");
+  validateJobName(job.job_id, "job_id");
+  validateJobName(job.step_id, "step_id");
+  if (job.final !== void 0 && typeof job.final !== "boolean") {
+    throw new VerdifaxError("verdifax: job.final must be true or false");
+  }
+  const out = { job_id: job.job_id, step_id: job.step_id };
+  const previous = sortedUnique(job.previous_record_hashes, "previous_record_hashes");
+  if (previous.length > 0) out.previous_record_hashes = previous;
+  const external = sortedUnique(job.external_previous, "external_previous");
+  if (external.length > 0) out.external_previous = external;
+  if (job.final) out.final = true;
+  return out;
+}
+function withExecuteFlags(req) {
+  const body = { ...req };
+  if (req.job === void 0 || req.job === null) {
+    delete body.job;
+  } else {
+    body.job = normalizedJob(req.job);
+  }
+  if (req.attested_context) {
+    body.attested_context = withAttestedFlag(req.attested_context);
+  }
+  if (req.reproducibility_context) {
+    body.reproducibility_context = withDeclaredFlag(req.reproducibility_context);
+  }
+  return body;
+}
+
+// src/signing.ts
 var REQUEST_SIGNATURE_FORM = "verdifax.request.v1";
+var REQUEST_SIGNATURE_FORM_V2 = "verdifax.request.v2";
+var REQUEST_SIGNATURE_VERSION_2 = "2";
+var JOB_FORM = "verdifax.job.v1";
 var REQUEST_KEY_PROOF_FORM = "verdifax.request-key.v1";
+var REQUEST_KEY_CHANGE_FORM = "verdifax.request-key-change.v1";
 var SIGNING_KEY_BYTES = 32;
 var PKCS8_ED25519_HEADER = Buffer.from(
   "302e020100300506032b657004220420",
@@ -83,6 +220,12 @@ function loadSigningKey(key) {
     type: "pkcs8"
   });
 }
+function sha256Hex(text) {
+  return createHash("sha256").update(Buffer.from(text, "utf8")).digest("hex");
+}
+function signedAtNow() {
+  return (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d+Z$/, "Z");
+}
 function requestSignaturePreimage(fields) {
   return Buffer.from(
     [
@@ -97,13 +240,62 @@ function requestSignaturePreimage(fields) {
     "utf8"
   );
 }
+function requestSignaturePreimageV2(fields) {
+  const { job } = fields;
+  return Buffer.from(
+    [
+      REQUEST_SIGNATURE_FORM_V2,
+      fields.body_hash,
+      fields.payload_hash,
+      fields.program_id,
+      fields.route_id,
+      fields.registry_record_hash,
+      fields.ai_output_hash,
+      JOB_FORM,
+      job?.job_id ?? "",
+      job?.step_id ?? "",
+      (job?.previous_record_hashes ?? []).join(","),
+      (job?.external_previous ?? []).join(","),
+      job?.final ? "true" : "false",
+      fields.signed_at,
+      fields.nonce
+    ].join("\0"),
+    "utf8"
+  );
+}
+function signRequestV2(signingKey, req, options = {}) {
+  const key = loadSigningKey(signingKey);
+  const { request_signature: _unsigned, ...fields } = withExecuteFlags(req);
+  const signed_request = JSON.stringify(fields);
+  const signed_at = options.signedAt ?? signedAtNow();
+  const nonce = options.nonce ?? randomBytes(16).toString("hex");
+  const preimage = requestSignaturePreimageV2({
+    body_hash: sha256Hex(signed_request),
+    payload_hash: sha256Hex(fields.payload_text || fields.payload || ""),
+    program_id: fields.program_id,
+    route_id: fields.route_id,
+    registry_record_hash: fields.registry_record_hash,
+    ai_output_hash: fields.ai_output_text ? sha256Hex(fields.ai_output_text) : "",
+    job: fields.job,
+    signed_at,
+    nonce
+  });
+  return {
+    signed_request,
+    request_signature: {
+      version: REQUEST_SIGNATURE_VERSION_2,
+      signature: sign(null, preimage, key).toString("base64"),
+      signed_at,
+      nonce
+    }
+  };
+}
 function signRequest(signingKey, req, options = {}) {
   const key = loadSigningKey(signingKey);
-  const signed_at = options.signedAt ?? (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d+Z$/, "Z");
+  const signed_at = options.signedAt ?? signedAtNow();
   const nonce = options.nonce ?? randomBytes(16).toString("hex");
-  const payload_hash = createHash("sha256").update(Buffer.from(req.payload_text || req.payload || "", "utf8")).digest("hex");
   const preimage = requestSignaturePreimage({
-    payload_hash,
+    payload_hash: sha256Hex(req.payload_text || req.payload || ""),
     program_id: req.program_id,
     route_id: req.route_id,
     registry_record_hash: req.registry_record_hash,
@@ -126,38 +318,132 @@ function requestKeyRegistrationBody(signingKey) {
   ).toString("base64");
   return { public_key, proof };
 }
+function requestKeyChangePreimage(fields) {
+  return Buffer.from(
+    [
+      REQUEST_KEY_CHANGE_FORM,
+      fields.new_public_key,
+      fields.signed_at,
+      fields.nonce
+    ].join("\0"),
+    "utf8"
+  );
+}
+function requestKeyChangeApproval(currentSigningKey, newPublicKey, options = {}) {
+  const key = loadSigningKey(currentSigningKey);
+  const signed_at = options.signedAt ?? signedAtNow();
+  const nonce = options.nonce ?? randomBytes(16).toString("hex");
+  const preimage = requestKeyChangePreimage({
+    new_public_key: newPublicKey,
+    signed_at,
+    nonce
+  });
+  return {
+    signature: sign(null, preimage, key).toString("base64"),
+    signed_at,
+    nonce
+  };
+}
 
-// src/validation.ts
-function validateHex64(value, fieldName) {
-  if (typeof value !== "string" || value.length !== 64) {
-    throw new VerdifaxError(
-      `verdifax: ${fieldName} must be 64 hex characters (got ${typeof value === "string" ? value.length : typeof value})`
-    );
+// src/job.ts
+var STEP_OPTIONS = {
+  payload: true,
+  payload_text: true,
+  program_id: true,
+  route_id: true,
+  registry_record_hash: true,
+  ai_output_text: true,
+  attested_context: true,
+  reproducibility_context: true,
+  request_substance: true,
+  authorization_chain: true,
+  regulatory_scaffolding: true,
+  causal_graph: true,
+  after: true,
+  external_previous: true,
+  final: true
+};
+var VerdifaxJob = class {
+  jobId;
+  client;
+  hashes = /* @__PURE__ */ new Map();
+  #signedRequests = /* @__PURE__ */ new Map();
+  lastStepId;
+  constructor(client, jobId) {
+    validateJobName(jobId, "job_id");
+    this.client = client;
+    this.jobId = jobId;
   }
-  if (!/^[0-9a-f]{64}$/.test(value)) {
-    throw new VerdifaxError(
-      `verdifax: ${fieldName} must contain only lowercase hex (0-9, a-f)`
-    );
+  /** Step id to record hash for every step that left a record, on a copy. */
+  get recordHashes() {
+    return Object.fromEntries(this.hashes);
   }
-}
-function validateRouteId(value) {
-  if (!value || typeof value !== "string") {
-    throw new VerdifaxError("verdifax: route_id is required");
+  /** Step id to the exact text that was signed, for every signed step that
+   *  left a record, refused and halted steps included, on a copy. Each text
+   *  can be passed to `verdifax-verify --request FILE`. */
+  get signedRequests() {
+    return Object.fromEntries(this.#signedRequests);
   }
-  if (value.length > 256) {
-    throw new VerdifaxError(
-      `verdifax: route_id is too long (${value.length} > 256)`
-    );
+  /** Runs one step and records its hash and signed text. A refused or halted
+   *  step records both from the error, then throws the same error `attest`
+   *  throws. */
+  async step(stepId, options) {
+    validateJobName(stepId, "step_id");
+    refuseUnknownFields(options, STEP_OPTIONS, "step options");
+    const { after, external_previous, final, ...attest } = options;
+    const job = {
+      job_id: this.jobId,
+      step_id: stepId,
+      previous_record_hashes: this.previousHashes(after),
+      external_previous,
+      final
+    };
+    let result;
+    try {
+      result = await this.client.attest({ ...attest, job });
+    } catch (err) {
+      if (err instanceof APIError && err.recordHash) {
+        this.record(stepId, err.recordHash, err.signedRequest);
+      }
+      throw err;
+    }
+    const hash = result?.record_hash || result?.manifest_hash || result?.manifest?.ManifestHash;
+    if (!hash) {
+      throw new VerdifaxError(
+        `verdifax: the server returned no record_hash or manifest_hash for step ${stepId}, so the job map cannot continue from it`
+      );
+    }
+    this.record(stepId, hash, result.signed_request);
+    return result;
   }
-  if (!/^[\x20-\x7E]+$/.test(value)) {
-    throw new VerdifaxError(
-      "verdifax: route_id contains non-printable-ASCII character"
-    );
+  previousHashes(after) {
+    if (after === void 0 || after === null) {
+      return this.lastStepId === void 0 ? [] : [this.hashes.get(this.lastStepId)];
+    }
+    if (!Array.isArray(after)) {
+      throw new VerdifaxError("verdifax: after must be a list of step ids");
+    }
+    return after.map((stepId) => {
+      const hash = this.hashes.get(stepId);
+      if (hash === void 0) {
+        throw new VerdifaxError(
+          `verdifax: after names ${String(stepId)}, which is not a step in job ${this.jobId}`
+        );
+      }
+      return hash;
+    });
   }
-}
+  record(stepId, hash, signedRequest) {
+    this.hashes.set(stepId, hash);
+    if (signedRequest !== void 0) {
+      this.#signedRequests.set(stepId, signedRequest);
+    }
+    this.lastStepId = stepId;
+  }
+};
 
 // src/version.ts
-var SDK_VERSION = "0.3.0";
+var SDK_VERSION = "1.1.0";
 
 // src/client.ts
 var DEFAULT_BASE_URL = "https://api.verdifax.com";
@@ -167,7 +453,10 @@ var DEFAULT_RETRY_BASE_DELAY_MS = 200;
 var SDK_USER_AGENT = `verdifax-sdk-node/${SDK_VERSION}`;
 var HEADER_API_KEY = "X-Verdifax-Key";
 var REQUEST_KEY_PATH = "/keys/request-key";
+var HEADER_EXPORT_TOTAL = "X-Verdifax-Total";
+var HEADER_EXPORT_TRUNCATED = "X-Verdifax-Truncated";
 var RETRYABLE_STATUSES = /* @__PURE__ */ new Set([429, 502, 503, 504]);
+var MAX_BATCH_ROWS = 1e3;
 var VerdifaxClient = class {
   baseURL;
   apiKey;
@@ -192,21 +481,73 @@ var VerdifaxClient = class {
   async version() {
     return this.request("GET", "/version");
   }
+  /** The server's own API description. */
+  async getOpenAPI() {
+    return this.request("GET", "/openapi.json");
+  }
+  /** Run counts for this API key. */
+  async getStats() {
+    this.requireAPIKey();
+    return this.request("GET", "/stats");
+  }
   // ── Execute / Attest (auth) ───────────────────────────────────
   async execute(req) {
-    this.requireAPIKey();
-    if (!req.payload && !req.payload_text) {
+    this.requireExecuteFields(req);
+    const sent = this.prepared(req);
+    const out = await this.request("POST", "/execute", sent);
+    return withSignedText(out, sent);
+  }
+  /** Runs one payload twice on the server and compares the manifest
+   *  hashes. One signature covers the request, and the server claims
+   *  its nonce once. Both runs are recorded. A run that happens twice
+   *  cannot be one job step, so a `job` is refused here. */
+  async verifyDeterminism(req) {
+    this.requireExecuteFields(req);
+    if (req.job !== void 0 && req.job !== null) {
       throw new VerdifaxError(
-        "verdifax: ExecuteRequest needs payload or payload_text"
+        "verdifax: a determinism check runs twice, so it cannot be a job step"
       );
     }
-    if (!req.program_id || !req.route_id || !req.registry_record_hash) {
+    const sent = this.prepared(req);
+    const out = await this.request(
+      "POST",
+      "/execute/verify-determinism",
+      sent
+    );
+    return withSignedText(out, sent);
+  }
+  /** Sends up to {@link MAX_BATCH_ROWS} runs in one request. With a
+   *  signing key each row carries its own signature and nonce. A row
+   *  that fails comes back in `results` with `ok: false`, so the call
+   *  does not throw for it. The rows are not checked here, except a job
+   *  block, which is refused before anything is sent: the server reports
+   *  any other bad row in that row's result.
+   *
+   *  This is one POST and it is never retried. After a timeout the
+   *  server may have run some or all of the rows. */
+  async executeBatch(runs) {
+    this.requireAPIKey();
+    if (!Array.isArray(runs) || runs.length === 0) {
+      throw new VerdifaxError("verdifax: executeBatch needs at least one run");
+    }
+    if (runs.length > MAX_BATCH_ROWS) {
       throw new VerdifaxError(
-        "verdifax: program_id, route_id, and registry_record_hash are required"
+        `verdifax: executeBatch accepts at most ${MAX_BATCH_ROWS} runs (got ${runs.length})`
       );
     }
-    const body = this.signingKey ? { ...req, request_signature: signRequest(this.signingKey, req) } : req;
-    return this.request("POST", "/execute", body);
+    const sent = runs.map((run) => this.prepared(run));
+    const out = await this.request(
+      "POST",
+      "/execute/batch",
+      { runs: sent }
+    );
+    if (!Array.isArray(out?.results)) return out;
+    return {
+      ...out,
+      results: out.results.map(
+        (row, i) => i < sent.length ? withSignedText(row, sent[i]) : row
+      )
+    };
   }
   /** High-level convenience wrapper around `execute()`. Accepts
    *  either a Buffer (for binary payloads, auto-base64) or a
@@ -232,7 +573,13 @@ var VerdifaxClient = class {
       route_id: req.route_id,
       registry_record_hash: req.registry_record_hash,
       ai_output_text: req.ai_output_text,
-      attested_context: req.attested_context
+      attested_context: req.attested_context,
+      reproducibility_context: req.reproducibility_context,
+      request_substance: req.request_substance,
+      authorization_chain: req.authorization_chain,
+      regulatory_scaffolding: req.regulatory_scaffolding,
+      causal_graph: req.causal_graph,
+      job: req.job
     };
     if (req.payload !== void 0) {
       body.payload = Buffer.isBuffer(req.payload) ? req.payload.toString("base64") : Buffer.from(req.payload).toString("base64");
@@ -241,6 +588,12 @@ var VerdifaxClient = class {
     }
     return this.execute(body);
   }
+  /** A helper that runs the steps of one job through {@link attest} and
+   *  keeps each step's record hash, so a later step can name it. It makes
+   *  no request until a step runs. */
+  job(jobId) {
+    return new VerdifaxJob(this, jobId);
+  }
   // ── Request signing (auth) ───────────────────────────────────
   /** Registers this client's public key on its API key, with the proof
    *  that the client holds the private key. From then on the server
@@ -258,11 +611,48 @@ var VerdifaxClient = class {
       requestKeyRegistrationBody(this.signingKey)
     );
   }
+  /** Replaces the registered key with `newSigningKey`. The new key proves
+   *  itself and this client's current key approves the change. After
+   *  success this client signs with the new key. If the call fails it
+   *  keeps the current key, including after a timeout, when the server may
+   *  have made the change. */
+  async rotateRequestKey(newSigningKey) {
+    this.requireAPIKey();
+    if (!this.signingKey) {
+      throw new VerdifaxError(
+        "verdifax: rotateRequestKey needs the current key in the signingKey client option"
+      );
+    }
+    const next = loadSigningKey(newSigningKey);
+    const registration = requestKeyRegistrationBody(next);
+    const out = await this.request(
+      "POST",
+      REQUEST_KEY_PATH,
+      {
+        ...registration,
+        change: requestKeyChangeApproval(
+          this.signingKey,
+          registration.public_key
+        )
+      }
+    );
+    this.signingKey = next;
+    return out;
+  }
   /** Clears the registered public key, so the server stops requiring
-   *  request signatures on this API key. */
+   *  request signatures on this API key. With a signing key the client
+   *  sends that key's approval, which the server requires while a key is
+   *  registered. After success the client drops its signing key and sends
+   *  unsigned requests, because the server refuses a signed run on an API
+   *  key with no registered key. If the call fails it keeps the key. */
   async clearRequestKey() {
     this.requireAPIKey();
-    await this.request("DELETE", REQUEST_KEY_PATH);
+    await this.request(
+      "DELETE",
+      REQUEST_KEY_PATH,
+      this.signingKey ? { change: requestKeyChangeApproval(this.signingKey, "") } : void 0
+    );
+    this.signingKey = void 0;
   }
   // ── Runs ──────────────────────────────────────────────────────
   async getRun(runId) {
@@ -289,6 +679,95 @@ var VerdifaxClient = class {
     const out = await this.request("GET", path);
     return { runs: out.runs ?? [], total: out.total ?? 0 };
   }
+  /** Searches this key's runs. `manifest_hash` matches a prefix. The
+   *  server ignores a `from` or `to` it cannot parse here, unlike
+   *  {@link exportRuns}, which refuses one. */
+  async searchRuns(params = {}) {
+    this.requireAPIKey();
+    const q = new URLSearchParams();
+    for (const name of [
+      "manifest_hash",
+      "program_id",
+      "route_id",
+      "status",
+      "from",
+      "to"
+    ]) {
+      const value = params[name];
+      if (value) q.set(name, value);
+    }
+    if (params.limit && params.limit > 0) {
+      q.set("limit", String(params.limit));
+    }
+    if (params.offset && params.offset > 0) {
+      q.set("offset", String(params.offset));
+    }
+    const qs = q.toString();
+    const path = qs ? `/runs/search?${qs}` : "/runs/search";
+    const out = await this.request("GET", path);
+    return { runs: out.runs ?? [], total: out.total ?? 0 };
+  }
+  /** Lists what the server holds for this key in a period, failures
+   *  included, up to 10,000 rows. `truncated` is true when the period
+   *  holds more. The list states what was stored, not a verdict, and a
+   *  call that never reached Verdifax cannot appear in it. */
+  async exportRuns(params = {}) {
+    this.requireAPIKey();
+    return this.request("GET", this.exportPath(params, "json"));
+  }
+  /** The same rows as {@link exportRuns}: the raw CSV text with `total`
+   *  and `truncated` from the response headers. Check `truncated`: when
+   *  true, the CSV is missing rows for the period. Throws when the server
+   *  does not send those headers, so that a cut-off export cannot pass
+   *  for a complete one. */
+  async exportRunsCSV(params = {}) {
+    this.requireAPIKey();
+    const { text, headers } = await this.requestRaw(
+      this.exportPath(params, "csv")
+    );
+    const total = Number.parseInt(headers.get(HEADER_EXPORT_TOTAL) ?? "", 10);
+    const truncated = headers.get(HEADER_EXPORT_TRUNCATED);
+    if (!Number.isSafeInteger(total) || truncated !== "true" && truncated !== "false") {
+      throw new VerdifaxError(
+        `verdifax: the server did not report ${HEADER_EXPORT_TOTAL} and ${HEADER_EXPORT_TRUNCATED}, so this CSV may be cut off; use exportRuns instead`
+      );
+    }
+    return { csv: text, total, truncated: truncated === "true" };
+  }
+  exportPath(params, format) {
+    const q = new URLSearchParams();
+    if (params.from) q.set("from", params.from);
+    if (params.to) q.set("to", params.to);
+    if (params.job_id) q.set("job_id", params.job_id);
+    q.set("format", format);
+    return `/runs/export?${q.toString()}`;
+  }
+  // ── Attestation receipts (auth) ──────────────────────────────
+  async listAttestations(params = {}) {
+    this.requireAPIKey();
+    const q = new URLSearchParams();
+    if (params.limit && params.limit > 0) {
+      q.set("limit", String(params.limit));
+    }
+    if (params.offset && params.offset > 0) {
+      q.set("offset", String(params.offset));
+    }
+    const qs = q.toString();
+    return this.request(
+      "GET",
+      qs ? `/attestations?${qs}` : "/attestations"
+    );
+  }
+  async getAttestation(attestationId) {
+    this.requireAPIKey();
+    if (attestationId <= 0) {
+      throw new VerdifaxError("verdifax: attestationId must be > 0");
+    }
+    return this.request(
+      "GET",
+      `/attestations/${attestationId}`
+    );
+  }
   // ── Sealed-artifact retrieval (auth) ─────────────────────────
   async getAllowToken(runId) {
     return this.getRunArtifact(runId, "allow-token");
@@ -305,6 +784,39 @@ var VerdifaxClient = class {
   async getAivpT4HaltReceipt(runId) {
     return this.getRunArtifact(runId, "aivp-t4-halt-receipt");
   }
+  async getAttestationGapReceipt(runId) {
+    return this.getRunArtifact(runId, "attestation-gap-receipt");
+  }
+  async getCESAuditRecord(runId) {
+    return this.getRunArtifact(runId, "ces-audit-record");
+  }
+  /** The audit report for a run, as JSON. */
+  async getRunReport(runId) {
+    const out = await this.getRunArtifact(runId, "report");
+    return out.report;
+  }
+  /** The run's sealed audit bundle as the exact JSON text the server
+   *  sent, to save and check with `verdifax-verify`. It is not parsed:
+   *  JSON.parse would round a number above 2^53 and the recomputed hash
+   *  would stop matching. */
+  async getRunArtifacts(runId) {
+    this.requireAPIKey();
+    if (runId <= 0) throw new VerdifaxError("verdifax: runId must be > 0");
+    return (await this.requestRaw(`/runs/${runId}/artifacts`)).text;
+  }
+  /** The public audit bundle of a record published by run id, as the
+   *  exact JSON text the server sent. Needs no API key. */
+  async getPublicBundle(runId) {
+    if (runId <= 0) throw new VerdifaxError("verdifax: runId must be > 0");
+    return (await this.requestRaw(`/runs/${runId}/bundle.json`)).text;
+  }
+  /** The public audit bundle a share token points to, as the exact JSON
+   *  text the server sent. Needs no API key. */
+  async getPublicBundleByToken(token) {
+    if (!token) throw new VerdifaxError("verdifax: token is required");
+    const path = `/public/runs/${encodeURIComponent(token)}/bundle.json`;
+    return (await this.requestRaw(path)).text;
+  }
   async getRunArtifact(runId, suffix) {
     this.requireAPIKey();
     if (runId <= 0) throw new VerdifaxError("verdifax: runId must be > 0");
@@ -390,14 +902,26 @@ var VerdifaxClient = class {
     }
     await this.request("DELETE", `/admin/keys/${keyId}`);
   }
+  /** Clears the request key on an API key whose holder lost it, after a
+   *  manual check. It is the one way to clear a key without that key. The
+   *  id can be any API key, so this client keeps its own signing key. */
+  async adminClearRequestKey(keyId) {
+    this.requireAPIKey();
+    if (keyId <= 0) {
+      throw new VerdifaxError("verdifax: keyId must be > 0");
+    }
+    await this.request("DELETE", `/admin/keys/${keyId}/request-key`);
+  }
   // ── Provider helpers (Claude / OpenAI) ───────────────────────
-  /** Convenience for attesting an Anthropic Claude API response.
-   *  Wires the response text into the AIVP governance pipeline
-   *  by setting `ai_output_text`. */
+  /** Convenience for attesting an Anthropic Claude API response. With
+   *  `govern: true` the response text also goes to the AIVP review as
+   *  `ai_output_text`; that is off by default, so the text leaves your
+   *  machine for review only when you ask. */
   async attestClaudeResponse(args) {
     return this.attestProviderResponse({ ...args, provider: "anthropic" });
   }
-  /** Convenience for attesting an OpenAI API response. */
+  /** Convenience for attesting an OpenAI API response. `govern` works as
+   *  in {@link attestClaudeResponse}. */
   async attestOpenAIResponse(args) {
     return this.attestProviderResponse({ ...args, provider: "openai" });
   }
@@ -407,25 +931,25 @@ var VerdifaxClient = class {
         "verdifax: response is required for attestation"
       );
     }
-    const payloadText = JSON.stringify({
-      provider: args.provider,
-      prompt: args.prompt,
-      response: args.response
-    });
     return this.attest({
-      payload_text: payloadText,
+      payload_text: formatProviderPayload(
+        args.provider,
+        args.prompt,
+        args.response
+      ),
       program_id: args.program_id,
       route_id: args.route_id,
       registry_record_hash: args.registry_record_hash,
-      ai_output_text: args.response,
+      ai_output_text: args.govern ? args.response : void 0,
       attested_context: {
         actor_role: "ai_assistant",
         model_provider: args.provider
-      }
+      },
+      job: args.job
     });
   }
   // ── HTTP plumbing, retry-aware ──────────────────────────────
-  async request(method, path, body) {
+  async request(method, path, body, rawText = false) {
     const url = this.baseURL + path;
     const headers = {
       "User-Agent": this.userAgent
@@ -468,9 +992,13 @@ var VerdifaxClient = class {
           continue;
         }
         let errMessage = text.trim();
+        let recordHash;
         try {
           const env = JSON.parse(text);
           if (env.error) errMessage = env.error;
+          if (typeof env.record_hash === "string" && env.record_hash) {
+            recordHash = env.record_hash;
+          }
         } catch {
         }
         switch (resp.status) {
@@ -479,9 +1007,16 @@ var VerdifaxClient = class {
           case 404:
             throw new NotFoundError(path, errMessage);
           default:
-            throw new APIError(resp.status, path, errMessage);
+            throw new APIError(
+              resp.status,
+              path,
+              errMessage,
+              recordHash,
+              body?.signed_request
+            );
         }
       }
+      if (rawText) return { text, headers: resp.headers };
       if (text.length === 0) return void 0;
       try {
         return JSON.parse(text);
@@ -495,17 +1030,46 @@ var VerdifaxClient = class {
       `verdifax: retry budget exhausted${lastErr ? `: ${String(lastErr)}` : ""}`
     );
   }
+  /** A GET whose body is kept as sent, retried like any other GET. */
+  requestRaw(path) {
+    return this.request("GET", path, void 0, true);
+  }
   requireAPIKey() {
     if (!this.apiKey) throw new APIKeyRequiredError();
   }
+  requireExecuteFields(req) {
+    this.requireAPIKey();
+    if (!req.payload && !req.payload_text) {
+      throw new VerdifaxError(
+        "verdifax: ExecuteRequest needs payload or payload_text"
+      );
+    }
+    if (!req.program_id || !req.route_id || !req.registry_record_hash) {
+      throw new VerdifaxError(
+        "verdifax: program_id, route_id, and registry_record_hash are required"
+      );
+    }
+    validateHex64(req.program_id, "program_id");
+    validateHex64(req.registry_record_hash, "registry_record_hash");
+    validateRouteId(req.route_id);
+    refuseCallerOriginHashes(req.request_substance);
+  }
+  /** The body to send, on a copy: the request with its derived flags or,
+   *  with a signing key, the signed text with a fresh signature and nonce. */
+  prepared(req) {
+    return this.signingKey ? signRequestV2(this.signingKey, req) : withExecuteFlags(req);
+  }
 };
+function withSignedText(result, sent) {
+  return "signed_request" in sent ? { ...result, signed_request: sent.signed_request } : result;
+}
 
 // src/config.ts
 function fromEnv() {
   const cfg = {
-    baseURL: process.env.VERDIFAX_BASE_URL ?? void 0,
+    baseURL: process.env.VERDIFAX_BASE_URL || process.env.VERDIFAX_API_URL || void 0,
     apiKey: process.env.VERDIFAX_API_KEY ?? void 0,
-    userAgent: process.env.VERDIFAX_USER_AGENT ?? void 0
+    userAgent: process.env.VERDIFAX_USER_AGENT || void 0
   };
   const timeoutRaw = process.env.VERDIFAX_TIMEOUT_MS;
   if (timeoutRaw !== void 0 && timeoutRaw !== "") {
@@ -529,18 +1093,187 @@ function fromEnv() {
   }
   return new VerdifaxClient(cfg);
 }
+
+// src/environment.ts
+import { execFileSync } from "child_process";
+import { readdirSync, readFileSync } from "fs";
+import { join } from "path";
+var HASH_64 = /^[0-9a-f]{64}$/;
+var GIT_SHA = /^([0-9a-f]{40}|[0-9a-f]{64})$/;
+var PLATFORM_NAMES = { win32: "windows" };
+var ARCH_NAMES = { x64: "amd64", ia32: "386" };
+function packageVersion(dir) {
+  try {
+    const pkg = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
+    return pkg.name && pkg.version ? `${pkg.name}==${pkg.version}` : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function packageDirs(root) {
+  const dirs = [];
+  for (const entry of readdirSync(root)) {
+    if (entry.startsWith(".")) continue;
+    if (!entry.startsWith("@")) {
+      dirs.push(join(root, entry));
+      continue;
+    }
+    for (const scoped of readdirSync(join(root, entry))) {
+      dirs.push(join(root, entry, scoped));
+    }
+  }
+  return dirs;
+}
+function detectDependencies() {
+  try {
+    const pins = packageDirs(join(process.cwd(), "node_modules")).map(packageVersion).filter((pin) => pin !== void 0);
+    pins.sort((a, b) => a.toLowerCase().localeCompare(b.toLowerCase()));
+    return pins.length > 0 ? pins : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function detectGitSHA() {
+  try {
+    const sha = execFileSync("git", ["rev-parse", "HEAD"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 2e3
+    }).trim().toLowerCase();
+    return GIT_SHA.test(sha) ? sha : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function detectContainerHash() {
+  try {
+    const text = readFileSync("/proc/self/cgroup", "utf8");
+    return text.split("\n").flatMap((line) => line.split("/")).map((segment) => segment.trim()).find((segment) => HASH_64.test(segment));
+  } catch {
+    return void 0;
+  }
+}
+function captureEnvironment(options = {}) {
+  const seeds = Object.entries(options.declaredSeeds ?? {}).map(([name, seed]) => `${name}=${seed}`).sort();
+  const pinned = options.includeDependencies === false ? void 0 : detectDependencies();
+  const git = options.includeGit === false ? void 0 : detectGitSHA();
+  const container = options.includeContainer === false ? void 0 : detectContainerHash();
+  const os = PLATFORM_NAMES[process.platform] ?? process.platform;
+  const arch = ARCH_NAMES[process.arch] ?? process.arch;
+  return {
+    declared: true,
+    runtime_name: "node",
+    runtime_version: process.versions.node,
+    platform: `${os}/${arch}`,
+    ...pinned ? { pinned_dependencies: pinned } : {},
+    ...git ? { git_commit_sha: git } : {},
+    ...container ? { container_image_hash: container } : {},
+    ...seeds.length > 0 ? { random_seeds: seeds } : {}
+  };
+}
+
+// src/types.ts
+var RUN_STATUSES = [
+  "ok",
+  "probe",
+  "pepg_deny",
+  "ccv_halt",
+  "macc_halt",
+  "aivp_t4_halt",
+  "attestation_gap",
+  "stage_error"
+];
+
+// src/section0.ts
+import { createHash as createHash2 } from "crypto";
+var DSE_FORMULA_VERSION = "dse.tcu.dispatch.v1";
+var DCAE_PREIMAGE_VERSION = "verdifax.dcae.v1";
+var CRES_PREIMAGE_VERSION = "verdifax.cres.v1";
+var CRES_ENGINE_VERSION = "verdifax-cres/1.0.0";
+function sha256Hex2(preimage) {
+  return createHash2("sha256").update(Buffer.from(preimage, "utf8")).digest("hex");
+}
+function requireHex64(value, name) {
+  try {
+    validateHex64(value, name);
+  } catch (err) {
+    throw new VerdifaxError(
+      `verdifax: section0: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+}
+function dseDispatchHash(fields) {
+  requireHex64(fields.program_id, "program_id");
+  requireHex64(fields.registry_record_hash, "registry_record_hash");
+  return sha256Hex2(
+    [
+      DSE_FORMULA_VERSION,
+      fields.envelope_id,
+      fields.sequence_id,
+      fields.program_id,
+      fields.registry_record_hash
+    ].join(".")
+  );
+}
+function dcaeClosureHash(fields) {
+  requireHex64(fields.manifest_hash, "manifest_hash");
+  requireHex64(fields.aer_hash, "aer_hash");
+  requireHex64(fields.zksp_binding_hash, "zksp_binding_hash");
+  return sha256Hex2(
+    [
+      DCAE_PREIMAGE_VERSION,
+      fields.manifest_hash,
+      fields.aer_hash,
+      fields.envelope_id,
+      fields.zksp_binding_hash,
+      fields.formal_verifier_status
+    ].join("|")
+  );
+}
+function cresReceiptHash(fields) {
+  requireHex64(fields.ciphertext_hash_at_shred, "ciphertext_hash_at_shred");
+  return sha256Hex2(
+    [
+      CRES_PREIMAGE_VERSION,
+      fields.envelope_id,
+      fields.field_path,
+      fields.deletion_clock,
+      fields.actor_id,
+      fields.ciphertext_hash_at_shred,
+      fields.dsar_reference,
+      fields.engine_version ?? CRES_ENGINE_VERSION
+    ].join("|")
+  );
+}
 export {
   APIError,
   APIKeyRequiredError,
   AuthError,
+  CRES_ENGINE_VERSION,
+  CRES_PREIMAGE_VERSION,
+  DCAE_PREIMAGE_VERSION,
+  DSE_FORMULA_VERSION,
+  MAX_BATCH_ROWS,
   NotFoundError,
+  RUN_STATUSES,
   VerdifaxClient,
   VerdifaxError,
+  VerdifaxJob,
+  captureEnvironment,
+  cresReceiptHash,
+  dcaeClosureHash,
+  dseDispatchHash,
+  formatProviderPayload,
   fromEnv,
   generateRequestKeyPair,
+  requestKeyChangeApproval,
+  requestKeyChangePreimage,
   requestKeyRegistrationBody,
   requestSignaturePreimage,
+  requestSignaturePreimageV2,
   signRequest,
+  signRequestV2,
   validateHex64,
+  validateJobName,
   validateRouteId
 };