@absol-labs/agent 0.1.0

package/dist/frameworks/langchain.js

@@ -0,0 +1,206 @@
+import { DynamicStructuredTool } from "@langchain/core/tools";
+import { isAddress, isHex } from "viem";
+import { z } from "zod/v3";
+import { discoverServices as defaultDiscoverServices, } from "../discovery/registry.js";
+import { checkMandate } from "../mandates/mandate.js";
+const addressSchema = z
+    .string()
+    .refine((value) => isAddress(value), "must be an EVM address");
+const bytes32Schema = z
+    .string()
+    .refine((value) => isHex(value, { strict: true }) && value.length === 66, "must be bytes32 hex");
+const decimalStringSchema = z.preprocess((value) => typeof value === "bigint" || typeof value === "number"
+    ? value.toString()
+    : value, z.string().regex(/^(0|[1-9]\d*)$/, "must be a base-10 integer string"));
+const spendMandateInputSchema = z.object({
+    maxPerStreamUsdc: decimalStringSchema,
+    maxTotalUsdc: decimalStringSchema,
+    maxRatePerSecondUsdc: decimalStringSchema,
+    maxDurationSeconds: z.number().int().positive(),
+    allowedOperators: z.array(addressSchema).optional(),
+    expiresAt: z.number().int().positive(),
+});
+const signedSpendMandateInputSchema = z.object({
+    mandateId: bytes32Schema,
+    owner: addressSchema,
+    chainId: z.number().int().positive(),
+    issuedAt: z.number().int().nonnegative(),
+    mandate: spendMandateInputSchema,
+    signature: z
+        .string()
+        .refine((value) => isHex(value, { strict: true }) && value.length === 132, "must be a 65-byte signature"),
+});
+const hireToolSchema = z.object({
+    operator: addressSchema,
+    serviceRef: bytes32Schema,
+    budgetUsdc: decimalStringSchema,
+    ratePerSecondUsdc: decimalStringSchema,
+    maxDurationSeconds: z.number().int().positive(),
+    signedMandate: signedSpendMandateInputSchema,
+});
+const streamStatusToolSchema = z.object({
+    streamId: bytes32Schema,
+});
+const reclaimToolSchema = z.object({
+    streamId: bytes32Schema,
+    closeFirst: z.boolean().optional(),
+    signedMandate: signedSpendMandateInputSchema,
+});
+const closeToolSchema = z.object({
+    streamId: bytes32Schema,
+    signedMandate: signedSpendMandateInputSchema,
+});
+const discoverToolSchema = z.object({
+    category: z.string().min(1).optional(),
+    limit: z.number().int().positive().optional(),
+});
+const DEFAULT_MANDATE_STATE_RESOLVER = {
+    getSpentSoFarUsdc: async () => 0n,
+    getRevokedMandateIds: async () => [],
+};
+export function createLangChainVerifiedStreamTools(options) {
+    const resolver = {
+        ...DEFAULT_MANDATE_STATE_RESOLVER,
+        ...options.mandateStateResolver,
+    };
+    const now = options.now ?? (() => Math.floor(Date.now() / 1000));
+    const discoverImpl = options.discoverServices ?? defaultDiscoverServices;
+    const discover = new DynamicStructuredTool({
+        name: "discover_services",
+        description: "Discover verified third-party services on the Metrik marketplace. Returns operator + serviceRef + endpoint for listings whose operator signature is verified — the entry point before hire_verified_service.",
+        schema: discoverToolSchema,
+        func: async (input) => {
+            const listings = await discoverImpl({
+                ...(input.category === undefined ? {} : { category: input.category }),
+                ...(input.limit === undefined ? {} : { limit: input.limit }),
+            });
+            return { services: listings };
+        },
+    });
+    const hire = new DynamicStructuredTool({
+        name: "hire_verified_service",
+        description: "Open a verified payment stream with a signed mandate and hard budget limits.",
+        schema: hireToolSchema,
+        func: async (input) => {
+            const signedMandate = parseSignedMandateInput(input.signedMandate);
+            const nowSeconds = now();
+            const spentSoFarUsdc = await resolver.getSpentSoFarUsdc(signedMandate.owner);
+            const revokedMandateIds = await resolver.getRevokedMandateIds(signedMandate.owner);
+            const decision = await checkMandate(signedMandate, {
+                operator: input.operator,
+                budgetUsdc: BigInt(input.budgetUsdc),
+                ratePerSecondUsdc: BigInt(input.ratePerSecondUsdc),
+                maxDurationSeconds: input.maxDurationSeconds,
+            }, spentSoFarUsdc, {
+                nowSeconds,
+                revokedMandateIds,
+            });
+            if (!decision.allowed) {
+                throw new Error(`mandate denied: ${decision.reason ?? "unknown"}`);
+            }
+            const result = await options.agentClient.openVerifiedStream({
+                operator: input.operator,
+                serviceRef: input.serviceRef,
+                budgetUsdc: BigInt(input.budgetUsdc),
+                ratePerSecondUsdc: BigInt(input.ratePerSecondUsdc),
+                maxDurationSeconds: input.maxDurationSeconds,
+                signedMandate,
+                spentSoFarUsdc,
+                nowSeconds,
+                revokedMandateIds,
+            });
+            return {
+                streamId: result.streamId,
+                txHash: result.txHash,
+                approveTxHash: result.approveTxHash,
+                handle: result.handle,
+            };
+        },
+    });
+    const status = new DynamicStructuredTool({
+        name: "check_stream_status",
+        description: "Read the current stream status and whether the agent should stop work.",
+        schema: streamStatusToolSchema,
+        func: async ({ streamId }) => {
+            const result = await options.agentClient.getStreamStatus(streamId);
+            return serializeStreamStatus(result, streamId);
+        },
+    });
+    const reclaim = new DynamicStructuredTool({
+        name: "reclaim_unspent",
+        description: "Close and/or reclaim an existing stream under the same signed mandate controls.",
+        schema: reclaimToolSchema,
+        func: async (input) => {
+            const signedMandate = parseSignedMandateInput(input.signedMandate);
+            const nowSeconds = now();
+            const spentSoFarUsdc = await resolver.getSpentSoFarUsdc(signedMandate.owner);
+            const revokedMandateIds = await resolver.getRevokedMandateIds(signedMandate.owner);
+            const result = await options.agentClient.reclaimStream({
+                streamId: input.streamId,
+                signedMandate,
+                spentSoFarUsdc,
+                nowSeconds,
+                revokedMandateIds,
+                ...(input.closeFirst === undefined
+                    ? {}
+                    : { closeFirst: input.closeFirst }),
+            });
+            return {
+                closeTxHash: result.closeResult?.txHash ?? null,
+                reclaimTxHash: result.reclaimResult.txHash,
+            };
+        },
+    });
+    const close = new DynamicStructuredTool({
+        name: "close_stream",
+        description: "Close an existing stream, finalizing accrual and halting further payment, under the same signed mandate controls.",
+        schema: closeToolSchema,
+        func: async (input) => {
+            const signedMandate = parseSignedMandateInput(input.signedMandate);
+            const nowSeconds = now();
+            const spentSoFarUsdc = await resolver.getSpentSoFarUsdc(signedMandate.owner);
+            const revokedMandateIds = await resolver.getRevokedMandateIds(signedMandate.owner);
+            const result = await options.agentClient.closeStream({
+                streamId: input.streamId,
+                signedMandate,
+                spentSoFarUsdc,
+                nowSeconds,
+                revokedMandateIds,
+            });
+            return { closeTxHash: result.txHash };
+        },
+    });
+    return { discover, hire, status, reclaim, close };
+}
+function parseSignedMandateInput(value) {
+    const parsed = signedSpendMandateInputSchema.parse(value);
+    return {
+        ...parsed,
+        mandateId: parsed.mandateId,
+        owner: parsed.owner,
+        signature: parsed.signature,
+        mandate: {
+            ...parsed.mandate,
+            maxPerStreamUsdc: BigInt(parsed.mandate.maxPerStreamUsdc),
+            maxTotalUsdc: BigInt(parsed.mandate.maxTotalUsdc),
+            maxRatePerSecondUsdc: BigInt(parsed.mandate.maxRatePerSecondUsdc),
+        },
+    };
+}
+function serializeStreamStatus(result, streamId) {
+    return {
+        streamId,
+        shouldStop: result.stream.status !== "active",
+        stream: {
+            ...result.stream,
+            deposit: result.stream.deposit.toString(),
+            ratePerSecond: result.stream.ratePerSecond.toString(),
+            accrued: result.stream.accrued.toString(),
+            claimed: result.stream.claimed.toString(),
+            lastSequence: result.stream.lastSequence.toString(),
+        },
+        claimable: result.claimable.toString(),
+        reclaimable: result.reclaimable.toString(),
+    };
+}
+//# sourceMappingURL=langchain.js.map

package/dist/frameworks/langchain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"langchain.js","sourceRoot":"","sources":["../../src/frameworks/langchain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,OAAO,EACL,gBAAgB,IAAI,uBAAuB,GAG5C,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,YAAY,EAA2B,MAAM,wBAAwB,CAAC;AAU/E,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACjE,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAChE,qBAAqB,CACtB,CAAC;AACJ,MAAM,mBAAmB,GAAG,CAAC,CAAC,UAAU,CACtC,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;IACpD,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE;IAClB,CAAC,CAAC,KAAK,EACX,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CACvE,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,gBAAgB,EAAE,mBAAmB;IACrC,YAAY,EAAE,mBAAmB;IACjC,oBAAoB,EAAE,mBAAmB;IACzC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/C,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,aAAa;IACxB,KAAK,EAAE,aAAa;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,OAAO,EAAE,uBAAuB;IAChC,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EACjE,6BAA6B,CAC9B;CACJ,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,QAAQ,EAAE,aAAa;IACvB,UAAU,EAAE,aAAa;IACzB,UAAU,EAAE,mBAAmB;IAC/B,iBAAiB,EAAE,mBAAmB;IACtC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/C,aAAa,EAAE,6BAA6B;CAC7C,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,QAAQ,EAAE,aAAa;CACxB,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,QAAQ,EAAE,aAAa;IACvB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,aAAa,EAAE,6BAA6B;CAC7C,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,QAAQ,EAAE,aAAa;IACvB,aAAa,EAAE,6BAA6B;CAC7C,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAyCH,MAAM,8BAA8B,GAAkC;IACpE,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;IACjC,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;CACrC,CAAC;AAEF,MAAM,UAAU,kCAAkC,CAChD,OAA4C;IAE5C,MAAM,QAAQ,GAAG;QACf,GAAG,8BAA8B;QACjC,GAAG,OAAO,CAAC,oBAAoB;KACQ,CAAC;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;IAEzE,MAAM,QAAQ,GACZ,IAAI,qBAAqB,CAAC;QACxB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,8MAA8M;QAChN,MAAM,EAAE,kBAAyB;QACjC,IAAI,EAAE,KAAK,EAAE,KAAyC,EAAE,EAAE;YACxD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC;gBAClC,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACrE,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAChC,CAAC;KACF,CAA2D,CAAC;IAE/D,MAAM,IAAI,GACR,IAAI,qBAAqB,CAAC;QACxB,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EACT,8EAA8E;QAChF,MAAM,EAAE,cAAqB;QAC7B,IAAI,EAAE,KAAK,EAAE,KAAqC,EAAE,EAAE;YACpD,MAAM,aAAa,GAAG,uBAAuB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC;YACzB,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CACrD,aAAa,CAAC,KAAsB,CACrC,CAAC;YACF,MAAM,iBAAiB,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAC3D,aAAa,CAAC,KAAsB,CACrC,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,YAAY,CACjC,aAAa,EACb;gBACE,QAAQ,EAAE,KAAK,CAAC,QAAyB;gBACzC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;gBACpC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAClD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;aAC7C,EACD,cAAc,EACd;gBACE,UAAU;gBACV,iBAAiB;aAClB,CACF,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC;gBAC1D,QAAQ,EAAE,KAAK,CAAC,QAAyB;gBACzC,UAAU,EAAE,KAAK,CAAC,UAA2B;gBAC7C,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;gBACpC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAClD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,aAAa;gBACb,cAAc;gBACd,UAAU;gBACV,iBAAiB;aAClB,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC;QACJ,CAAC;KACF,CAA2D,CAAC;IAE/D,MAAM,MAAM,GACV,IAAI,qBAAqB,CAAC;QACxB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,wEAAwE;QAC1E,MAAM,EAAE,sBAA6B;QACrC,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAA0C,EAAE,EAAE;YACnE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,eAAe,CACtD,QAAyB,CAC1B,CAAC;YACF,OAAO,qBAAqB,CAAC,MAAM,EAAE,QAAyB,CAAC,CAAC;QAClE,CAAC;KACF,CAA2D,CAAC;IAE/D,MAAM,OAAO,GACX,IAAI,qBAAqB,CAAC;QACxB,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,iFAAiF;QACnF,MAAM,EAAE,iBAAwB;QAChC,IAAI,EAAE,KAAK,EAAE,KAAwC,EAAE,EAAE;YACvD,MAAM,aAAa,GAAG,uBAAuB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC;YACzB,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CACrD,aAAa,CAAC,KAAsB,CACrC,CAAC;YACF,MAAM,iBAAiB,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAC3D,aAAa,CAAC,KAAsB,CACrC,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC;gBACrD,QAAQ,EAAE,KAAK,CAAC,QAAyB;gBACzC,aAAa;gBACb,cAAc;gBACd,UAAU;gBACV,iBAAiB;gBACjB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;aACtC,CAAC,CAAC;YAEH,OAAO;gBACL,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,IAAI,IAAI;gBAC/C,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,MAAM;aAC3C,CAAC;QACJ,CAAC;KACF,CAA2D,CAAC;IAE/D,MAAM,KAAK,GACT,IAAI,qBAAqB,CAAC;QACxB,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,mHAAmH;QACrH,MAAM,EAAE,eAAsB;QAC9B,IAAI,EAAE,KAAK,EAAE,KAAsC,EAAE,EAAE;YACrD,MAAM,aAAa,GAAG,uBAAuB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC;YACzB,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CACrD,aAAa,CAAC,KAAsB,CACrC,CAAC;YACF,MAAM,iBAAiB,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAC3D,aAAa,CAAC,KAAsB,CACrC,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC;gBACnD,QAAQ,EAAE,KAAK,CAAC,QAAyB;gBACzC,aAAa;gBACb,cAAc;gBACd,UAAU;gBACV,iBAAiB;aAClB,CAAC,CAAC;YAEH,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACxC,CAAC;KACF,CAA2D,CAAC;IAE/D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAoD;IAEpD,MAAM,MAAM,GAAG,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO;QACL,GAAG,MAAM;QACT,SAAS,EAAE,MAAM,CAAC,SAA0B;QAC5C,KAAK,EAAE,MAAM,CAAC,KAAsB;QACpC,SAAS,EAAE,MAAM,CAAC,SAA0B;QAC5C,OAAO,EAAE;YACP,GAAG,MAAM,CAAC,OAAO;YACjB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;YACzD,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;YACjD,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC;SAClE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAwB,EACxB,QAAuB;IAEvB,OAAO;QACL,QAAQ;QACR,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;QAC7C,MAAM,EAAE;YACN,GAAG,MAAM,CAAC,MAAM;YAChB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE;YACzC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE;YACrD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE;YACzC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE;YACzC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE;SACpD;QACD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE;QACtC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE;KAC3C,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+export { createSpendMandateTypedData, spendMandateSchema, signedSpendMandateSchema, checkMandate, checkMandatePolicy, verifySignedMandate, verifyMandateOwnerSignature, spendMandateDomain, spendMandateTypedData, type SpendMandate, type SignedSpendMandate, type HireRequest, type MandateDecision, type MandateVerificationContext, } from "./mandates/mandate.js";
+export { DEFAULT_SERVER_MANDATE_TTL_SECONDS, ServerMandateConfigError, parseServerMandateCapsEnv, signServerMandate, type ServerMandateCaps, type SignServerMandateOptions, } from "./mandates/env.js";
+export { VerifiedStreamX402Facilitator, DeliveryProofUnavailableError, X402PayloadError, SettlementTargetMismatchError, X402_SCHEME, encodeX402PayloadHeader, parseX402ChallengeJson, parseX402PayloadHeader, verifiedStreamRequirementsSchema, x402StreamChallengeSchema, x402OpenPayloadSchema, type X402ConsumedHttpsResponseProofInput, type X402Facilitator, type X402OpenPayload, type X402StreamChallenge, type VerifiedStreamFacilitatorOptions, type VerifiedStreamRequirements, } from "./x402/facilitator.js";
+export { DEFAULT_METRIK_REGISTRY_URL, discoverServices, type DiscoverServicesOptions, type ServiceListing, } from "./discovery/registry.js";
+export { METRIK_MCP_TOOLS, STREAMPROOF_MCP_TOOLS, FileStreamRegistry, InMemoryStreamRegistry, createVerifiedStreamMcpServer, createVerifiedStreamMcpServerFromEnv, createVerifiedStreamMcpServerOptionsFromEnv, parseMetrikAgentEnv, startVerifiedStreamMcpServerStdio, type McpToolSpec, type ParsedMetrikAgentEnv, type StoredStreamRecord, type StreamRegistry, type VerifiedStreamMcpClient, type VerifiedStreamMcpServerOptions, type VerifiedStreamMcpServerRuntime, } from "./mcp/server.js";
+export { StaticTenantResolver, createHostedMcpHttpServer, createHostedMcpTenants, parseHostedMcpServerConfig, startHostedMcpHttpServerFromEnv, type HostedMcpHttpServer, type HostedMcpHttpServerOptions, type HostedMcpServerConfig, type HostedMcpTenant, type HostedMcpTenantConfig, type TenantResolver, } from "./mcp/http.js";
+export { MandateDeniedError, VerifiedStreamAgentClient, type AgentSdkClient, type AgentSdkClientFactory, type MandateAuthorizedStreamActionInput, type OpenVerifiedStreamInput, type ReclaimAuthorizedStreamInput, type ReclaimVerifiedStreamOptions, type ReclaimVerifiedStreamResult, type StreamStatusView, type VerifiedStreamAgentOpener, } from "./sdk/client.js";
+export { AgentWalletConfigError, createWalletBackedAgentClient, parseAgentWalletEnv, resolveAgentWallet, type AgentWalletInput, type CdpClientLike, type CdpWalletConfig, type ResolvedAgentWallet, type WalletBackedAgentClient, } from "./wallet/provider.js";
+export { ReclaimConsumerProofService, ResponseProofUnavailableError, ResponseProofVerificationError, createReclaimConsumerProofServiceFromEnv, parseReclaimProofEnv, type ConsumerDeliveryProofService, type DeliveryProofBinding, type HttpsResponseMatch, type HttpsResponseRedaction, type ParsedReclaimProofEnv, type ProveConsumedHttpsResponseInput, type ReclaimClientLike, type ReclaimProof, type ReclaimProofServiceConfig, type VerifiedConsumedHttpsResponseProof, type VerifyProofFn, } from "./zktls/reclaim.js";
+export { createLangChainVerifiedStreamTools, type LangChainMandateStateResolver, type LangChainVerifiedStreamClient, type LangChainVerifiedStreamTools, type LangChainVerifiedStreamToolsOptions, } from "./frameworks/langchain.js";
+export { METRIK_ELIZA_ACTION_NAMES, METRIK_ELIZA_SETTLEMENT_CHAIN_ID, createMetrikElizaPlugin, createMetrikElizaContent, metrikElizaPlugin, createElizaVerifiedStreamContent, createElizaVerifiedStreamPlugin, type MetrikElizaActionInputs, type MetrikElizaActionName, type MetrikElizaClient, type MetrikElizaMandateStateResolver, type MetrikElizaPluginOptions, } from "./frameworks/eliza.js";
+export { CREWAI_VERIFIED_STREAM_TOOL_NAMES, createCrewAiVerifiedStreamMcpConfig, renderCrewAiVerifiedStreamPythonExample, type CrewAiVerifiedStreamMcpConfig, type CrewAiVerifiedStreamMcpConfigOptions, } from "./frameworks/crewai.js";
+export { METRIK_BASE_SEPOLIA_CHAIN_ID, MetrikActionProvider, MetrikActionProviderConfigError, metrikActionProvider, createMetrikAgentKit, discoverServicesSchema, hireVerifiedServiceSchema, checkStreamStatusSchema, reclaimUnspentSchema, closeStreamSchema, type CreateMetrikAgentKitOptions, type MetrikActionProviderConfig, type MetrikAgentKitClient, type MetrikMandateStateResolver, } from "./frameworks/agentkit.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,GAC9B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,EAC7B,gBAAgB,EAChB,6BAA6B,EAC7B,WAAW,EACX,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,gCAAgC,EAChC,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,mCAAmC,EACxC,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,2BAA2B,EAC3B,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,cAAc,GACpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,6BAA6B,EAC7B,oCAAoC,EACpC,2CAA2C,EAC3C,mBAAmB,EACnB,iCAAiC,EACjC,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,GACpC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,+BAA+B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,kCAAkC,EACvC,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EACjC,KAAK,2BAA2B,EAChC,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,GAC/B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,wCAAwC,EACxC,oBAAoB,EACpB,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,+BAA+B,EACpC,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAC9B,KAAK,kCAAkC,EACvC,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kCAAkC,EAClC,KAAK,6BAA6B,EAClC,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,mCAAmC,GACzC,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB,EAEjB,gCAAgC,EAChC,+BAA+B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,GAC9B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,iCAAiC,EACjC,mCAAmC,EACnC,uCAAuC,EACvC,KAAK,6BAA6B,EAClC,KAAK,oCAAoC,GAC1C,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,+BAA+B,EAC/B,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,GAChC,MAAM,0BAA0B,CAAC"}

package/dist/index.js

@@ -0,0 +1,16 @@
+export { createSpendMandateTypedData, spendMandateSchema, signedSpendMandateSchema, checkMandate, checkMandatePolicy, verifySignedMandate, verifyMandateOwnerSignature, spendMandateDomain, spendMandateTypedData, } from "./mandates/mandate.js";
+export { DEFAULT_SERVER_MANDATE_TTL_SECONDS, ServerMandateConfigError, parseServerMandateCapsEnv, signServerMandate, } from "./mandates/env.js";
+export { VerifiedStreamX402Facilitator, DeliveryProofUnavailableError, X402PayloadError, SettlementTargetMismatchError, X402_SCHEME, encodeX402PayloadHeader, parseX402ChallengeJson, parseX402PayloadHeader, verifiedStreamRequirementsSchema, x402StreamChallengeSchema, x402OpenPayloadSchema, } from "./x402/facilitator.js";
+export { DEFAULT_METRIK_REGISTRY_URL, discoverServices, } from "./discovery/registry.js";
+export { METRIK_MCP_TOOLS, STREAMPROOF_MCP_TOOLS, FileStreamRegistry, InMemoryStreamRegistry, createVerifiedStreamMcpServer, createVerifiedStreamMcpServerFromEnv, createVerifiedStreamMcpServerOptionsFromEnv, parseMetrikAgentEnv, startVerifiedStreamMcpServerStdio, } from "./mcp/server.js";
+export { StaticTenantResolver, createHostedMcpHttpServer, createHostedMcpTenants, parseHostedMcpServerConfig, startHostedMcpHttpServerFromEnv, } from "./mcp/http.js";
+export { MandateDeniedError, VerifiedStreamAgentClient, } from "./sdk/client.js";
+export { AgentWalletConfigError, createWalletBackedAgentClient, parseAgentWalletEnv, resolveAgentWallet, } from "./wallet/provider.js";
+export { ReclaimConsumerProofService, ResponseProofUnavailableError, ResponseProofVerificationError, createReclaimConsumerProofServiceFromEnv, parseReclaimProofEnv, } from "./zktls/reclaim.js";
+export { createLangChainVerifiedStreamTools, } from "./frameworks/langchain.js";
+export { METRIK_ELIZA_ACTION_NAMES, METRIK_ELIZA_SETTLEMENT_CHAIN_ID, createMetrikElizaPlugin, createMetrikElizaContent, metrikElizaPlugin, 
+// Deprecated aliases retained for backward compatibility.
+createElizaVerifiedStreamContent, createElizaVerifiedStreamPlugin, } from "./frameworks/eliza.js";
+export { CREWAI_VERIFIED_STREAM_TOOL_NAMES, createCrewAiVerifiedStreamMcpConfig, renderCrewAiVerifiedStreamPythonExample, } from "./frameworks/crewai.js";
+export { METRIK_BASE_SEPOLIA_CHAIN_ID, MetrikActionProvider, MetrikActionProviderConfigError, metrikActionProvider, createMetrikAgentKit, discoverServicesSchema, hireVerifiedServiceSchema, checkStreamStatusSchema, reclaimUnspentSchema, closeStreamSchema, } from "./frameworks/agentkit.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,GAMtB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,GAGlB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,EAC7B,gBAAgB,EAChB,6BAA6B,EAC7B,WAAW,EACX,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,gCAAgC,EAChC,yBAAyB,EACzB,qBAAqB,GAOtB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,2BAA2B,EAC3B,gBAAgB,GAGjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,6BAA6B,EAC7B,oCAAoC,EACpC,2CAA2C,EAC3C,mBAAmB,EACnB,iCAAiC,GAQlC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,+BAA+B,GAOhC,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAU1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,EACnB,kBAAkB,GAMnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,wCAAwC,EACxC,oBAAoB,GAYrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kCAAkC,GAKnC,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB;AACjB,0DAA0D;AAC1D,gCAAgC,EAChC,+BAA+B,GAMhC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,iCAAiC,EACjC,mCAAmC,EACnC,uCAAuC,GAGxC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,+BAA+B,EAC/B,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,GAKlB,MAAM,0BAA0B,CAAC"}

package/dist/mandates/env.d.ts

@@ -0,0 +1,51 @@
+import { type Account } from "viem";
+import { type SignedSpendMandate } from "./mandate.js";
+/**
+ * Server-side spend-mandate provisioning.
+ *
+ * The MCP/x402 fund-moving surface is driven by autonomous callers (an LLM over
+ * MCP, a paying agent over x402) that CANNOT produce an EIP-712 signature. The
+ * spend mandate is therefore NOT a per-call argument — it is configured once, at
+ * the server's construction, exactly like the AgentKit action provider's
+ * `signedMandate`. The deploying operator declares the spend caps via env and the
+ * server self-signs the mandate from its OWN wallet (the wallet that opens and
+ * funds the streams is the mandate owner — signing your own spend ceiling is the
+ * correct trust relationship).
+ *
+ * Fail-closed: a fund-moving server with NO configured caps refuses to sign a
+ * mandate. There is no implicit "unbounded" mandate.
+ */
+export declare class ServerMandateConfigError extends Error {
+    constructor(message: string);
+}
+/** Default mandate lifetime when `METRIK_AGENT_MANDATE_TTL_SECONDS` is unset. */
+export declare const DEFAULT_SERVER_MANDATE_TTL_SECONDS: number;
+export interface ServerMandateCaps {
+    readonly maxPerStreamUsdc: bigint;
+    readonly maxTotalUsdc: bigint;
+    readonly maxRatePerSecondUsdc: bigint;
+    readonly maxDurationSeconds: number;
+    readonly allowedOperators: readonly `0x${string}`[];
+    readonly ttlSeconds: number;
+}
+/**
+ * Parses the server mandate caps from env. Returns `null` when NONE of the
+ * `METRIK_AGENT_MANDATE_*` variables are set (so a caller can decide whether a
+ * mandate is required in that deployment). Throws {@link ServerMandateConfigError}
+ * when the caps are partially configured or malformed — fail closed, never
+ * silently fall back to an unbounded mandate.
+ */
+export declare function parseServerMandateCapsEnv(env?: NodeJS.ProcessEnv): ServerMandateCaps | null;
+export interface SignServerMandateOptions {
+    readonly chainId: number;
+    /** Unix seconds the mandate is issued at. Defaults to the wall clock. */
+    readonly nowSeconds?: number;
+}
+/**
+ * Self-signs a spend mandate from the server's own wallet, bounded by the
+ * configured caps. The signing account MUST be the account that will fund the
+ * streams (its address becomes the mandate `owner`, which every downstream
+ * `checkMandate` recovers the signature against).
+ */
+export declare function signServerMandate(account: Account, caps: ServerMandateCaps, options: SignServerMandateOptions): Promise<SignedSpendMandate>;
+//# sourceMappingURL=env.d.ts.map

package/dist/mandates/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/mandates/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,OAAO,EACb,MAAM,MAAM,CAAC;AAGd,OAAO,EAGL,KAAK,kBAAkB,EAExB,MAAM,cAAc,CAAC;AAEtB;;;;;;;;;;;;;;GAcG;AAEH,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI5B;AAmBD,iFAAiF;AACjF,eAAO,MAAM,kCAAkC,QAAe,CAAC;AAE/D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,KAAK,MAAM,EAAE,EAAE,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,iBAAiB,GAAG,IAAI,CA4D1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AA2BD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,kBAAkB,CAAC,CAyC7B"}

package/dist/mandates/env.js

@@ -0,0 +1,148 @@
+import { getAddress, isAddress, keccak256, stringToHex, } from "viem";
+import { z } from "zod";
+import { createSpendMandateTypedData, signedSpendMandateSchema, } from "./mandate.js";
+/**
+ * Server-side spend-mandate provisioning.
+ *
+ * The MCP/x402 fund-moving surface is driven by autonomous callers (an LLM over
+ * MCP, a paying agent over x402) that CANNOT produce an EIP-712 signature. The
+ * spend mandate is therefore NOT a per-call argument — it is configured once, at
+ * the server's construction, exactly like the AgentKit action provider's
+ * `signedMandate`. The deploying operator declares the spend caps via env and the
+ * server self-signs the mandate from its OWN wallet (the wallet that opens and
+ * funds the streams is the mandate owner — signing your own spend ceiling is the
+ * correct trust relationship).
+ *
+ * Fail-closed: a fund-moving server with NO configured caps refuses to sign a
+ * mandate. There is no implicit "unbounded" mandate.
+ */
+export class ServerMandateConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ServerMandateConfigError";
+    }
+}
+const decimalStringSchema = z
+    .string()
+    .regex(/^(0|[1-9]\d*)$/, "must be a base-10 integer string (USDC atomic units, 6 decimals)");
+const positiveIntSchema = z.coerce.number().int().positive();
+const mandateEnvSchema = z.object({
+    METRIK_AGENT_MANDATE_MAX_PER_STREAM_USDC: decimalStringSchema,
+    METRIK_AGENT_MANDATE_MAX_TOTAL_USDC: decimalStringSchema,
+    METRIK_AGENT_MANDATE_MAX_RATE_PER_SECOND_USDC: decimalStringSchema,
+    METRIK_AGENT_MANDATE_MAX_DURATION_SECONDS: positiveIntSchema,
+    METRIK_AGENT_MANDATE_ALLOWED_OPERATORS: z.string().optional(),
+    METRIK_AGENT_MANDATE_TTL_SECONDS: positiveIntSchema.optional(),
+});
+/** Default mandate lifetime when `METRIK_AGENT_MANDATE_TTL_SECONDS` is unset. */
+export const DEFAULT_SERVER_MANDATE_TTL_SECONDS = 24 * 60 * 60;
+/**
+ * Parses the server mandate caps from env. Returns `null` when NONE of the
+ * `METRIK_AGENT_MANDATE_*` variables are set (so a caller can decide whether a
+ * mandate is required in that deployment). Throws {@link ServerMandateConfigError}
+ * when the caps are partially configured or malformed — fail closed, never
+ * silently fall back to an unbounded mandate.
+ */
+export function parseServerMandateCapsEnv(env = process.env) {
+    const anySet = [
+        env.METRIK_AGENT_MANDATE_MAX_PER_STREAM_USDC,
+        env.METRIK_AGENT_MANDATE_MAX_TOTAL_USDC,
+        env.METRIK_AGENT_MANDATE_MAX_RATE_PER_SECOND_USDC,
+        env.METRIK_AGENT_MANDATE_MAX_DURATION_SECONDS,
+        env.METRIK_AGENT_MANDATE_ALLOWED_OPERATORS,
+        env.METRIK_AGENT_MANDATE_TTL_SECONDS,
+    ].some((value) => value !== undefined);
+    if (!anySet) {
+        return null;
+    }
+    const parsed = mandateEnvSchema.safeParse(env);
+    if (!parsed.success) {
+        throw new ServerMandateConfigError(`invalid server mandate configuration: ${parsed.error.issues
+            .map((issue) => `${issue.path.join(".")} ${issue.message}`)
+            .join("; ")}`);
+    }
+    const allowedOperators = (parsed.data.METRIK_AGENT_MANDATE_ALLOWED_OPERATORS ?? "")
+        .split(",")
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0);
+    for (const operator of allowedOperators) {
+        if (!isAddress(operator)) {
+            throw new ServerMandateConfigError(`METRIK_AGENT_MANDATE_ALLOWED_OPERATORS contains a non-address entry: ${operator}`);
+        }
+    }
+    const maxTotalUsdc = BigInt(parsed.data.METRIK_AGENT_MANDATE_MAX_TOTAL_USDC);
+    const maxPerStreamUsdc = BigInt(parsed.data.METRIK_AGENT_MANDATE_MAX_PER_STREAM_USDC);
+    if (maxPerStreamUsdc > maxTotalUsdc) {
+        throw new ServerMandateConfigError("METRIK_AGENT_MANDATE_MAX_PER_STREAM_USDC cannot exceed METRIK_AGENT_MANDATE_MAX_TOTAL_USDC");
+    }
+    return {
+        maxPerStreamUsdc,
+        maxTotalUsdc,
+        maxRatePerSecondUsdc: BigInt(parsed.data.METRIK_AGENT_MANDATE_MAX_RATE_PER_SECOND_USDC),
+        maxDurationSeconds: parsed.data.METRIK_AGENT_MANDATE_MAX_DURATION_SECONDS,
+        allowedOperators: allowedOperators.map((operator) => getAddress(operator)),
+        ttlSeconds: parsed.data.METRIK_AGENT_MANDATE_TTL_SECONDS ??
+            DEFAULT_SERVER_MANDATE_TTL_SECONDS,
+    };
+}
+/**
+ * Deterministic mandate id derived from the owner, caps, chain, and issuance
+ * time. Stable for identical inputs within the same second, so a restarted
+ * server with the same config and a wired revocation store can be revoked by id.
+ */
+function deriveMandateId(owner, mandate, chainId, issuedAt) {
+    const canonical = [
+        owner.toLowerCase(),
+        chainId,
+        issuedAt,
+        mandate.expiresAt,
+        mandate.maxPerStreamUsdc.toString(),
+        mandate.maxTotalUsdc.toString(),
+        mandate.maxRatePerSecondUsdc.toString(),
+        mandate.maxDurationSeconds,
+        (mandate.allowedOperators ?? []).map((op) => op.toLowerCase()).join(","),
+    ].join("|");
+    return keccak256(stringToHex(canonical));
+}
+/**
+ * Self-signs a spend mandate from the server's own wallet, bounded by the
+ * configured caps. The signing account MUST be the account that will fund the
+ * streams (its address becomes the mandate `owner`, which every downstream
+ * `checkMandate` recovers the signature against).
+ */
+export async function signServerMandate(account, caps, options) {
+    if (account.signTypedData === undefined) {
+        throw new ServerMandateConfigError("signing account does not support signTypedData; cannot self-sign a server mandate");
+    }
+    const owner = getAddress(account.address);
+    const issuedAt = options.nowSeconds ?? Math.floor(Date.now() / 1000);
+    const expiresAt = issuedAt + caps.ttlSeconds;
+    const mandate = {
+        maxPerStreamUsdc: caps.maxPerStreamUsdc,
+        maxTotalUsdc: caps.maxTotalUsdc,
+        maxRatePerSecondUsdc: caps.maxRatePerSecondUsdc,
+        maxDurationSeconds: caps.maxDurationSeconds,
+        ...(caps.allowedOperators.length > 0
+            ? { allowedOperators: [...caps.allowedOperators] }
+            : {}),
+        expiresAt,
+    };
+    const mandateId = deriveMandateId(owner, mandate, options.chainId, issuedAt);
+    const typedData = createSpendMandateTypedData({
+        mandateId,
+        owner,
+        chainId: options.chainId,
+        issuedAt,
+        mandate,
+    });
+    const signature = await account.signTypedData(typedData);
+    return signedSpendMandateSchema.parse({
+        mandateId,
+        owner,
+        chainId: options.chainId,
+        issuedAt,
+        mandate,
+        signature,
+    });
+}
+//# sourceMappingURL=env.js.map

package/dist/mandates/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/mandates/env.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,WAAW,GAEZ,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,GAGzB,MAAM,cAAc,CAAC;AAEtB;;;;;;;;;;;;;;GAcG;AAEH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,MAAM,mBAAmB,GAAG,CAAC;KAC1B,MAAM,EAAE;KACR,KAAK,CACJ,gBAAgB,EAChB,kEAAkE,CACnE,CAAC;AACJ,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;AAE7D,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,wCAAwC,EAAE,mBAAmB;IAC7D,mCAAmC,EAAE,mBAAmB;IACxD,6CAA6C,EAAE,mBAAmB;IAClE,yCAAyC,EAAE,iBAAiB;IAC5D,sCAAsC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7D,gCAAgC,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAW/D;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,wCAAwC;QAC5C,GAAG,CAAC,mCAAmC;QACvC,GAAG,CAAC,6CAA6C;QACjD,GAAG,CAAC,yCAAyC;QAC7C,GAAG,CAAC,sCAAsC;QAC1C,GAAG,CAAC,gCAAgC;KACrC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,wBAAwB,CAChC,yCAAyC,MAAM,CAAC,KAAK,CAAC,MAAM;aACzD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;aAC1D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,CACvB,MAAM,CAAC,IAAI,CAAC,sCAAsC,IAAI,EAAE,CACzD;SACE,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,wBAAwB,CAChC,wEAAwE,QAAQ,EAAE,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,MAAM,CAC7B,MAAM,CAAC,IAAI,CAAC,wCAAwC,CACrD,CAAC;IACF,IAAI,gBAAgB,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,wBAAwB,CAChC,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,gBAAgB;QAChB,YAAY;QACZ,oBAAoB,EAAE,MAAM,CAC1B,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAC1D;QACD,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,yCAAyC;QACzE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CACpC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAkB,CACpD;QACD,UAAU,EACR,MAAM,CAAC,IAAI,CAAC,gCAAgC;YAC5C,kCAAkC;KACrC,CAAC;AACJ,CAAC;AAQD;;;;GAIG;AACH,SAAS,eAAe,CACtB,KAAoB,EACpB,OAAqB,EACrB,OAAe,EACf,QAAgB;IAEhB,MAAM,SAAS,GAAG;QAChB,KAAK,CAAC,WAAW,EAAE;QACnB,OAAO;QACP,QAAQ;QACR,OAAO,CAAC,SAAS;QACjB,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE;QACnC,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE;QAC/B,OAAO,CAAC,oBAAoB,CAAC,QAAQ,EAAE;QACvC,OAAO,CAAC,kBAAkB;QAC1B,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;KACzE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,OAAO,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB,EAChB,IAAuB,EACvB,OAAiC;IAEjC,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,wBAAwB,CAChC,mFAAmF,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAkB,CAAC;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC;IAE7C,MAAM,OAAO,GAAiB;QAC5B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;QAC/C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;YAClC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,SAAS;KACV,CAAC;IAEF,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,2BAA2B,CAAC;QAC5C,SAAS;QACT,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ;QACR,OAAO;KACR,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAEzD,OAAO,wBAAwB,CAAC,KAAK,CAAC;QACpC,SAAS;QACT,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ;QACR,OAAO;QACP,SAAS;KACV,CAAC,CAAC;AACL,CAAC"}