verdifax 1.0.0 → 1.1.0

package/dist/index.js

@@ -32,6 +32,7 @@ __export(index_exports, {
   RUN_STATUSES: () => RUN_STATUSES,
   VerdifaxClient: () => VerdifaxClient,
   VerdifaxError: () => VerdifaxError,
+  VerdifaxJob: () => VerdifaxJob,
   captureEnvironment: () => captureEnvironment,
   cresReceiptHash: () => cresReceiptHash,
   dcaeClosureHash: () => dcaeClosureHash,
@@ -39,10 +40,15 @@ __export(index_exports, {
   formatProviderPayload: () => formatProviderPayload,
   fromEnv: () => fromEnv,
   generateRequestKeyPair: () => generateRequestKeyPair,
+  requestKeyChangeApproval: () => requestKeyChangeApproval,
+  requestKeyChangePreimage: () => requestKeyChangePreimage,
   requestKeyRegistrationBody: () => requestKeyRegistrationBody,
   requestSignaturePreimage: () => requestSignaturePreimage,
+  requestSignaturePreimageV2: () => requestSignaturePreimageV2,
   signRequest: () => signRequest,
+  signRequestV2: () => signRequestV2,
   validateHex64: () => validateHex64,
+  validateJobName: () => validateJobName,
   validateRouteId: () => validateRouteId
 });
 module.exports = __toCommonJS(index_exports);
@@ -72,15 +78,23 @@ var NotFoundError = class extends VerdifaxError {
   name = "VerdifaxNotFoundError";
 };
 var APIError = class extends VerdifaxError {
-  constructor(status, path, message) {
+  constructor(status, path, message, recordHash, signedRequest) {
     super(`verdifax: API error at ${path} (HTTP ${status}): ${message}`);
     this.status = status;
     this.path = path;
     this.message = message;
+    this.recordHash = recordHash;
+    if (signedRequest !== void 0) {
+      Object.defineProperty(this, "signedRequest", {
+        value: signedRequest,
+        enumerable: false
+      });
+    }
   }
   status;
   path;
   message;
+  recordHash;
   name = "VerdifaxAPIError";
 };
 var APIKeyRequiredError = class extends VerdifaxError {
@@ -92,8 +106,137 @@ var APIKeyRequiredError = class extends VerdifaxError {
 
 // src/signing.ts
 var import_node_crypto = require("crypto");
+
+// src/validation.ts
+function validateHex64(value, fieldName) {
+  if (typeof value !== "string" || value.length !== 64) {
+    throw new VerdifaxError(
+      `verdifax: ${fieldName} must be 64 hex characters (got ${typeof value === "string" ? value.length : typeof value})`
+    );
+  }
+  if (!/^[0-9a-f]{64}$/.test(value)) {
+    throw new VerdifaxError(
+      `verdifax: ${fieldName} must contain only lowercase hex (0-9, a-f)`
+    );
+  }
+}
+function validateRouteId(value) {
+  if (!value || typeof value !== "string") {
+    throw new VerdifaxError("verdifax: route_id is required");
+  }
+  if (value.length > 256) {
+    throw new VerdifaxError(
+      `verdifax: route_id is too long (${value.length} > 256)`
+    );
+  }
+  if (!/^[\x20-\x7E]+$/.test(value)) {
+    throw new VerdifaxError(
+      "verdifax: route_id contains non-printable-ASCII character"
+    );
+  }
+}
+function validateJobName(value, fieldName) {
+  if (typeof value !== "string" || !/^[A-Za-z0-9._:-]{1,128}$/.test(value)) {
+    throw new VerdifaxError(
+      `verdifax: ${fieldName} must be 1 to 128 letters, digits, dots, underscores, colons or dashes`
+    );
+  }
+}
+
+// src/helpers.ts
+function formatProviderPayload(provider, prompt, response) {
+  if ([provider, prompt, response].some((text) => /[\uD800-\uDFFF]/u.test(text))) {
+    throw new VerdifaxError(
+      "verdifax: provider payload text cannot be encoded as UTF-8"
+    );
+  }
+  return JSON.stringify({ prompt, provider, response });
+}
+function isProvided(value) {
+  return value !== null && value !== void 0 && value !== "" && value !== false;
+}
+function withAttestedFlag(context) {
+  const provided = Object.entries(context).some(
+    ([name, value]) => name !== "attested" && isProvided(value)
+  );
+  return { ...context, attested: provided };
+}
+function withDeclaredFlag(context) {
+  const declared = Object.entries(context).some(
+    ([name, value]) => name !== "declared" && isProvided(value) && !(Array.isArray(value) && value.length === 0)
+  );
+  return { ...context, declared };
+}
+function refuseCallerOriginHashes(substance) {
+  const origin = substance?.origin;
+  if (origin?.source_ip_hash || origin?.user_agent_hash) {
+    throw new VerdifaxError(
+      "verdifax: request_substance.origin.source_ip_hash and user_agent_hash are computed by the server and cannot be supplied"
+    );
+  }
+}
+var JOB_FIELDS = {
+  job_id: true,
+  step_id: true,
+  previous_record_hashes: true,
+  external_previous: true,
+  final: true
+};
+function refuseUnknownFields(value, known, label) {
+  for (const name of Object.keys(value)) {
+    if (!Object.hasOwn(known, name)) {
+      throw new VerdifaxError(`verdifax: ${label} has an unknown field: ${name}`);
+    }
+  }
+}
+function sortedUnique(hashes, fieldName) {
+  if (hashes === void 0) return [];
+  if (!Array.isArray(hashes) || hashes.some((hash) => typeof hash !== "string")) {
+    throw new VerdifaxError(`verdifax: ${fieldName} must be a list of strings`);
+  }
+  return [...new Set(hashes)].sort();
+}
+function normalizedJob(job) {
+  if (typeof job !== "object" || job === null || Array.isArray(job)) {
+    throw new VerdifaxError("verdifax: job must be an object");
+  }
+  refuseUnknownFields(job, JOB_FIELDS, "job");
+  validateJobName(job.job_id, "job_id");
+  validateJobName(job.step_id, "step_id");
+  if (job.final !== void 0 && typeof job.final !== "boolean") {
+    throw new VerdifaxError("verdifax: job.final must be true or false");
+  }
+  const out = { job_id: job.job_id, step_id: job.step_id };
+  const previous = sortedUnique(job.previous_record_hashes, "previous_record_hashes");
+  if (previous.length > 0) out.previous_record_hashes = previous;
+  const external = sortedUnique(job.external_previous, "external_previous");
+  if (external.length > 0) out.external_previous = external;
+  if (job.final) out.final = true;
+  return out;
+}
+function withExecuteFlags(req) {
+  const body = { ...req };
+  if (req.job === void 0 || req.job === null) {
+    delete body.job;
+  } else {
+    body.job = normalizedJob(req.job);
+  }
+  if (req.attested_context) {
+    body.attested_context = withAttestedFlag(req.attested_context);
+  }
+  if (req.reproducibility_context) {
+    body.reproducibility_context = withDeclaredFlag(req.reproducibility_context);
+  }
+  return body;
+}
+
+// src/signing.ts
 var REQUEST_SIGNATURE_FORM = "verdifax.request.v1";
+var REQUEST_SIGNATURE_FORM_V2 = "verdifax.request.v2";
+var REQUEST_SIGNATURE_VERSION_2 = "2";
+var JOB_FORM = "verdifax.job.v1";
 var REQUEST_KEY_PROOF_FORM = "verdifax.request-key.v1";
+var REQUEST_KEY_CHANGE_FORM = "verdifax.request-key-change.v1";
 var SIGNING_KEY_BYTES = 32;
 var PKCS8_ED25519_HEADER = Buffer.from(
   "302e020100300506032b657004220420",
@@ -124,6 +267,12 @@ function loadSigningKey(key) {
     type: "pkcs8"
   });
 }
+function sha256Hex(text) {
+  return (0, import_node_crypto.createHash)("sha256").update(Buffer.from(text, "utf8")).digest("hex");
+}
+function signedAtNow() {
+  return (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d+Z$/, "Z");
+}
 function requestSignaturePreimage(fields) {
   return Buffer.from(
     [
@@ -138,13 +287,62 @@ function requestSignaturePreimage(fields) {
     "utf8"
   );
 }
+function requestSignaturePreimageV2(fields) {
+  const { job } = fields;
+  return Buffer.from(
+    [
+      REQUEST_SIGNATURE_FORM_V2,
+      fields.body_hash,
+      fields.payload_hash,
+      fields.program_id,
+      fields.route_id,
+      fields.registry_record_hash,
+      fields.ai_output_hash,
+      JOB_FORM,
+      job?.job_id ?? "",
+      job?.step_id ?? "",
+      (job?.previous_record_hashes ?? []).join(","),
+      (job?.external_previous ?? []).join(","),
+      job?.final ? "true" : "false",
+      fields.signed_at,
+      fields.nonce
+    ].join("\0"),
+    "utf8"
+  );
+}
+function signRequestV2(signingKey, req, options = {}) {
+  const key = loadSigningKey(signingKey);
+  const { request_signature: _unsigned, ...fields } = withExecuteFlags(req);
+  const signed_request = JSON.stringify(fields);
+  const signed_at = options.signedAt ?? signedAtNow();
+  const nonce = options.nonce ?? (0, import_node_crypto.randomBytes)(16).toString("hex");
+  const preimage = requestSignaturePreimageV2({
+    body_hash: sha256Hex(signed_request),
+    payload_hash: sha256Hex(fields.payload_text || fields.payload || ""),
+    program_id: fields.program_id,
+    route_id: fields.route_id,
+    registry_record_hash: fields.registry_record_hash,
+    ai_output_hash: fields.ai_output_text ? sha256Hex(fields.ai_output_text) : "",
+    job: fields.job,
+    signed_at,
+    nonce
+  });
+  return {
+    signed_request,
+    request_signature: {
+      version: REQUEST_SIGNATURE_VERSION_2,
+      signature: (0, import_node_crypto.sign)(null, preimage, key).toString("base64"),
+      signed_at,
+      nonce
+    }
+  };
+}
 function signRequest(signingKey, req, options = {}) {
   const key = loadSigningKey(signingKey);
-  const signed_at = options.signedAt ?? (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d+Z$/, "Z");
+  const signed_at = options.signedAt ?? signedAtNow();
   const nonce = options.nonce ?? (0, import_node_crypto.randomBytes)(16).toString("hex");
-  const payload_hash = (0, import_node_crypto.createHash)("sha256").update(Buffer.from(req.payload_text || req.payload || "", "utf8")).digest("hex");
   const preimage = requestSignaturePreimage({
-    payload_hash,
+    payload_hash: sha256Hex(req.payload_text || req.payload || ""),
     program_id: req.program_id,
     route_id: req.route_id,
     registry_record_hash: req.registry_record_hash,
@@ -167,81 +365,132 @@ function requestKeyRegistrationBody(signingKey) {
   ).toString("base64");
   return { public_key, proof };
 }
-
-// src/helpers.ts
-function formatProviderPayload(provider, prompt, response) {
-  if ([provider, prompt, response].some((text) => /[\uD800-\uDFFF]/u.test(text))) {
-    throw new VerdifaxError(
-      "verdifax: provider payload text cannot be encoded as UTF-8"
-    );
-  }
-  return JSON.stringify({ prompt, provider, response });
-}
-function isProvided(value) {
-  return value !== null && value !== void 0 && value !== "" && value !== false;
-}
-function withAttestedFlag(context) {
-  const provided = Object.entries(context).some(
-    ([name, value]) => name !== "attested" && isProvided(value)
-  );
-  return { ...context, attested: provided };
-}
-function withDeclaredFlag(context) {
-  const declared = Object.entries(context).some(
-    ([name, value]) => name !== "declared" && isProvided(value) && !(Array.isArray(value) && value.length === 0)
+function requestKeyChangePreimage(fields) {
+  return Buffer.from(
+    [
+      REQUEST_KEY_CHANGE_FORM,
+      fields.new_public_key,
+      fields.signed_at,
+      fields.nonce
+    ].join("\0"),
+    "utf8"
   );
-  return { ...context, declared };
 }
-function refuseCallerOriginHashes(substance) {
-  const origin = substance?.origin;
-  if (origin?.source_ip_hash || origin?.user_agent_hash) {
-    throw new VerdifaxError(
-      "verdifax: request_substance.origin.source_ip_hash and user_agent_hash are computed by the server and cannot be supplied"
-    );
-  }
-}
-function withExecuteFlags(req) {
-  const body = { ...req };
-  if (req.attested_context) {
-    body.attested_context = withAttestedFlag(req.attested_context);
-  }
-  if (req.reproducibility_context) {
-    body.reproducibility_context = withDeclaredFlag(req.reproducibility_context);
-  }
-  return body;
+function requestKeyChangeApproval(currentSigningKey, newPublicKey, options = {}) {
+  const key = loadSigningKey(currentSigningKey);
+  const signed_at = options.signedAt ?? signedAtNow();
+  const nonce = options.nonce ?? (0, import_node_crypto.randomBytes)(16).toString("hex");
+  const preimage = requestKeyChangePreimage({
+    new_public_key: newPublicKey,
+    signed_at,
+    nonce
+  });
+  return {
+    signature: (0, import_node_crypto.sign)(null, preimage, key).toString("base64"),
+    signed_at,
+    nonce
+  };
 }
 
-// src/validation.ts
-function validateHex64(value, fieldName) {
-  if (typeof value !== "string" || value.length !== 64) {
-    throw new VerdifaxError(
-      `verdifax: ${fieldName} must be 64 hex characters (got ${typeof value === "string" ? value.length : typeof value})`
-    );
-  }
-  if (!/^[0-9a-f]{64}$/.test(value)) {
-    throw new VerdifaxError(
-      `verdifax: ${fieldName} must contain only lowercase hex (0-9, a-f)`
-    );
-  }
-}
-function validateRouteId(value) {
-  if (!value || typeof value !== "string") {
-    throw new VerdifaxError("verdifax: route_id is required");
+// src/job.ts
+var STEP_OPTIONS = {
+  payload: true,
+  payload_text: true,
+  program_id: true,
+  route_id: true,
+  registry_record_hash: true,
+  ai_output_text: true,
+  attested_context: true,
+  reproducibility_context: true,
+  request_substance: true,
+  authorization_chain: true,
+  regulatory_scaffolding: true,
+  causal_graph: true,
+  after: true,
+  external_previous: true,
+  final: true
+};
+var VerdifaxJob = class {
+  jobId;
+  client;
+  hashes = /* @__PURE__ */ new Map();
+  #signedRequests = /* @__PURE__ */ new Map();
+  lastStepId;
+  constructor(client, jobId) {
+    validateJobName(jobId, "job_id");
+    this.client = client;
+    this.jobId = jobId;
+  }
+  /** Step id to record hash for every step that left a record, on a copy. */
+  get recordHashes() {
+    return Object.fromEntries(this.hashes);
+  }
+  /** Step id to the exact text that was signed, for every signed step that
+   *  left a record, refused and halted steps included, on a copy. Each text
+   *  can be passed to `verdifax-verify --request FILE`. */
+  get signedRequests() {
+    return Object.fromEntries(this.#signedRequests);
+  }
+  /** Runs one step and records its hash and signed text. A refused or halted
+   *  step records both from the error, then throws the same error `attest`
+   *  throws. */
+  async step(stepId, options) {
+    validateJobName(stepId, "step_id");
+    refuseUnknownFields(options, STEP_OPTIONS, "step options");
+    const { after, external_previous, final, ...attest } = options;
+    const job = {
+      job_id: this.jobId,
+      step_id: stepId,
+      previous_record_hashes: this.previousHashes(after),
+      external_previous,
+      final
+    };
+    let result;
+    try {
+      result = await this.client.attest({ ...attest, job });
+    } catch (err) {
+      if (err instanceof APIError && err.recordHash) {
+        this.record(stepId, err.recordHash, err.signedRequest);
+      }
+      throw err;
+    }
+    const hash = result?.record_hash || result?.manifest_hash || result?.manifest?.ManifestHash;
+    if (!hash) {
+      throw new VerdifaxError(
+        `verdifax: the server returned no record_hash or manifest_hash for step ${stepId}, so the job map cannot continue from it`
+      );
+    }
+    this.record(stepId, hash, result.signed_request);
+    return result;
   }
-  if (value.length > 256) {
-    throw new VerdifaxError(
-      `verdifax: route_id is too long (${value.length} > 256)`
-    );
+  previousHashes(after) {
+    if (after === void 0 || after === null) {
+      return this.lastStepId === void 0 ? [] : [this.hashes.get(this.lastStepId)];
+    }
+    if (!Array.isArray(after)) {
+      throw new VerdifaxError("verdifax: after must be a list of step ids");
+    }
+    return after.map((stepId) => {
+      const hash = this.hashes.get(stepId);
+      if (hash === void 0) {
+        throw new VerdifaxError(
+          `verdifax: after names ${String(stepId)}, which is not a step in job ${this.jobId}`
+        );
+      }
+      return hash;
+    });
   }
-  if (!/^[\x20-\x7E]+$/.test(value)) {
-    throw new VerdifaxError(
-      "verdifax: route_id contains non-printable-ASCII character"
-    );
+  record(stepId, hash, signedRequest) {
+    this.hashes.set(stepId, hash);
+    if (signedRequest !== void 0) {
+      this.#signedRequests.set(stepId, signedRequest);
+    }
+    this.lastStepId = stepId;
   }
-}
+};
 
 // src/version.ts
-var SDK_VERSION = "1.0.0";
+var SDK_VERSION = "1.1.0";
 
 // src/client.ts
 var DEFAULT_BASE_URL = "https://api.verdifax.com";
@@ -291,24 +540,35 @@ var VerdifaxClient = class {
   // ── Execute / Attest (auth) ───────────────────────────────────
   async execute(req) {
     this.requireExecuteFields(req);
-    return this.request("POST", "/execute", this.prepared(req));
+    const sent = this.prepared(req);
+    const out = await this.request("POST", "/execute", sent);
+    return withSignedText(out, sent);
   }
   /** Runs one payload twice on the server and compares the manifest
    *  hashes. One signature covers the request, and the server claims
-   *  its nonce once. Both runs are recorded. */
+   *  its nonce once. Both runs are recorded. A run that happens twice
+   *  cannot be one job step, so a `job` is refused here. */
   async verifyDeterminism(req) {
     this.requireExecuteFields(req);
-    return this.request(
+    if (req.job !== void 0 && req.job !== null) {
+      throw new VerdifaxError(
+        "verdifax: a determinism check runs twice, so it cannot be a job step"
+      );
+    }
+    const sent = this.prepared(req);
+    const out = await this.request(
       "POST",
       "/execute/verify-determinism",
-      this.prepared(req)
+      sent
     );
+    return withSignedText(out, sent);
   }
   /** Sends up to {@link MAX_BATCH_ROWS} runs in one request. With a
    *  signing key each row carries its own signature and nonce. A row
    *  that fails comes back in `results` with `ok: false`, so the call
-   *  does not throw for it. The rows are not checked here: the server
-   *  reports a bad row in that row's result.
+   *  does not throw for it. The rows are not checked here, except a job
+   *  block, which is refused before anything is sent: the server reports
+   *  any other bad row in that row's result.
    *
    *  This is one POST and it is never retried. After a timeout the
    *  server may have run some or all of the rows. */
@@ -322,9 +582,19 @@ var VerdifaxClient = class {
         `verdifax: executeBatch accepts at most ${MAX_BATCH_ROWS} runs (got ${runs.length})`
       );
     }
-    return this.request("POST", "/execute/batch", {
-      runs: runs.map((run) => this.prepared(run))
-    });
+    const sent = runs.map((run) => this.prepared(run));
+    const out = await this.request(
+      "POST",
+      "/execute/batch",
+      { runs: sent }
+    );
+    if (!Array.isArray(out?.results)) return out;
+    return {
+      ...out,
+      results: out.results.map(
+        (row, i) => i < sent.length ? withSignedText(row, sent[i]) : row
+      )
+    };
   }
   /** High-level convenience wrapper around `execute()`. Accepts
    *  either a Buffer (for binary payloads, auto-base64) or a
@@ -355,7 +625,8 @@ var VerdifaxClient = class {
       request_substance: req.request_substance,
       authorization_chain: req.authorization_chain,
       regulatory_scaffolding: req.regulatory_scaffolding,
-      causal_graph: req.causal_graph
+      causal_graph: req.causal_graph,
+      job: req.job
     };
     if (req.payload !== void 0) {
       body.payload = Buffer.isBuffer(req.payload) ? req.payload.toString("base64") : Buffer.from(req.payload).toString("base64");
@@ -364,6 +635,12 @@ var VerdifaxClient = class {
     }
     return this.execute(body);
   }
+  /** A helper that runs the steps of one job through {@link attest} and
+   *  keeps each step's record hash, so a later step can name it. It makes
+   *  no request until a step runs. */
+  job(jobId) {
+    return new VerdifaxJob(this, jobId);
+  }
   // ── Request signing (auth) ───────────────────────────────────
   /** Registers this client's public key on its API key, with the proof
    *  that the client holds the private key. From then on the server
@@ -381,11 +658,48 @@ var VerdifaxClient = class {
       requestKeyRegistrationBody(this.signingKey)
     );
   }
+  /** Replaces the registered key with `newSigningKey`. The new key proves
+   *  itself and this client's current key approves the change. After
+   *  success this client signs with the new key. If the call fails it
+   *  keeps the current key, including after a timeout, when the server may
+   *  have made the change. */
+  async rotateRequestKey(newSigningKey) {
+    this.requireAPIKey();
+    if (!this.signingKey) {
+      throw new VerdifaxError(
+        "verdifax: rotateRequestKey needs the current key in the signingKey client option"
+      );
+    }
+    const next = loadSigningKey(newSigningKey);
+    const registration = requestKeyRegistrationBody(next);
+    const out = await this.request(
+      "POST",
+      REQUEST_KEY_PATH,
+      {
+        ...registration,
+        change: requestKeyChangeApproval(
+          this.signingKey,
+          registration.public_key
+        )
+      }
+    );
+    this.signingKey = next;
+    return out;
+  }
   /** Clears the registered public key, so the server stops requiring
-   *  request signatures on this API key. */
+   *  request signatures on this API key. With a signing key the client
+   *  sends that key's approval, which the server requires while a key is
+   *  registered. After success the client drops its signing key and sends
+   *  unsigned requests, because the server refuses a signed run on an API
+   *  key with no registered key. If the call fails it keeps the key. */
   async clearRequestKey() {
     this.requireAPIKey();
-    await this.request("DELETE", REQUEST_KEY_PATH);
+    await this.request(
+      "DELETE",
+      REQUEST_KEY_PATH,
+      this.signingKey ? { change: requestKeyChangeApproval(this.signingKey, "") } : void 0
+    );
+    this.signingKey = void 0;
   }
   // ── Runs ──────────────────────────────────────────────────────
   async getRun(runId) {
@@ -471,6 +785,7 @@ var VerdifaxClient = class {
     const q = new URLSearchParams();
     if (params.from) q.set("from", params.from);
     if (params.to) q.set("to", params.to);
+    if (params.job_id) q.set("job_id", params.job_id);
     q.set("format", format);
     return `/runs/export?${q.toString()}`;
   }
@@ -634,6 +949,16 @@ var VerdifaxClient = class {
     }
     await this.request("DELETE", `/admin/keys/${keyId}`);
   }
+  /** Clears the request key on an API key whose holder lost it, after a
+   *  manual check. It is the one way to clear a key without that key. The
+   *  id can be any API key, so this client keeps its own signing key. */
+  async adminClearRequestKey(keyId) {
+    this.requireAPIKey();
+    if (keyId <= 0) {
+      throw new VerdifaxError("verdifax: keyId must be > 0");
+    }
+    await this.request("DELETE", `/admin/keys/${keyId}/request-key`);
+  }
   // ── Provider helpers (Claude / OpenAI) ───────────────────────
   /** Convenience for attesting an Anthropic Claude API response. With
    *  `govern: true` the response text also goes to the AIVP review as
@@ -666,7 +991,8 @@ var VerdifaxClient = class {
       attested_context: {
         actor_role: "ai_assistant",
         model_provider: args.provider
-      }
+      },
+      job: args.job
     });
   }
   // ── HTTP plumbing, retry-aware ──────────────────────────────
@@ -713,9 +1039,13 @@ var VerdifaxClient = class {
           continue;
         }
         let errMessage = text.trim();
+        let recordHash;
         try {
           const env = JSON.parse(text);
           if (env.error) errMessage = env.error;
+          if (typeof env.record_hash === "string" && env.record_hash) {
+            recordHash = env.record_hash;
+          }
         } catch {
         }
         switch (resp.status) {
@@ -724,7 +1054,13 @@ var VerdifaxClient = class {
           case 404:
             throw new NotFoundError(path, errMessage);
           default:
-            throw new APIError(resp.status, path, errMessage);
+            throw new APIError(
+              resp.status,
+              path,
+              errMessage,
+              recordHash,
+              body?.signed_request
+            );
         }
       }
       if (rawText) return { text, headers: resp.headers };
@@ -765,13 +1101,15 @@ var VerdifaxClient = class {
     validateRouteId(req.route_id);
     refuseCallerOriginHashes(req.request_substance);
   }
-  /** The request with its derived flags and, with a signing key, a fresh
-   *  signature and nonce, on a copy. */
+  /** The body to send, on a copy: the request with its derived flags or,
+   *  with a signing key, the signed text with a fresh signature and nonce. */
   prepared(req) {
-    const body = withExecuteFlags(req);
-    return this.signingKey ? { ...body, request_signature: signRequest(this.signingKey, body) } : body;
+    return this.signingKey ? signRequestV2(this.signingKey, req) : withExecuteFlags(req);
   }
 };
+function withSignedText(result, sent) {
+  return "signed_request" in sent ? { ...result, signed_request: sent.signed_request } : result;
+}
 
 // src/config.ts
 function fromEnv() {
@@ -899,7 +1237,7 @@ var DSE_FORMULA_VERSION = "dse.tcu.dispatch.v1";
 var DCAE_PREIMAGE_VERSION = "verdifax.dcae.v1";
 var CRES_PREIMAGE_VERSION = "verdifax.cres.v1";
 var CRES_ENGINE_VERSION = "verdifax-cres/1.0.0";
-function sha256Hex(preimage) {
+function sha256Hex2(preimage) {
   return (0, import_node_crypto2.createHash)("sha256").update(Buffer.from(preimage, "utf8")).digest("hex");
 }
 function requireHex64(value, name) {
@@ -914,7 +1252,7 @@ function requireHex64(value, name) {
 function dseDispatchHash(fields) {
   requireHex64(fields.program_id, "program_id");
   requireHex64(fields.registry_record_hash, "registry_record_hash");
-  return sha256Hex(
+  return sha256Hex2(
     [
       DSE_FORMULA_VERSION,
       fields.envelope_id,
@@ -928,7 +1266,7 @@ function dcaeClosureHash(fields) {
   requireHex64(fields.manifest_hash, "manifest_hash");
   requireHex64(fields.aer_hash, "aer_hash");
   requireHex64(fields.zksp_binding_hash, "zksp_binding_hash");
-  return sha256Hex(
+  return sha256Hex2(
     [
       DCAE_PREIMAGE_VERSION,
       fields.manifest_hash,
@@ -941,7 +1279,7 @@ function dcaeClosureHash(fields) {
 }
 function cresReceiptHash(fields) {
   requireHex64(fields.ciphertext_hash_at_shred, "ciphertext_hash_at_shred");
-  return sha256Hex(
+  return sha256Hex2(
     [
       CRES_PREIMAGE_VERSION,
       fields.envelope_id,
@@ -968,6 +1306,7 @@ function cresReceiptHash(fields) {
   RUN_STATUSES,
   VerdifaxClient,
   VerdifaxError,
+  VerdifaxJob,
   captureEnvironment,
   cresReceiptHash,
   dcaeClosureHash,
@@ -975,9 +1314,14 @@ function cresReceiptHash(fields) {
   formatProviderPayload,
   fromEnv,
   generateRequestKeyPair,
+  requestKeyChangeApproval,
+  requestKeyChangePreimage,
   requestKeyRegistrationBody,
   requestSignaturePreimage,
+  requestSignaturePreimageV2,
   signRequest,
+  signRequestV2,
   validateHex64,
+  validateJobName,
   validateRouteId
 });