@absol-labs/agent 0.10.0 → 0.12.0-rc.1

package/README.md

@@ -11,8 +11,12 @@ honestly scoped, is what this package makes an agent able to enforce, never
 It builds on [`@absol-labs/sdk`](https://github.com/Absol-Labs/metrik-sdk), which speaks
 to the on-chain metered escrow. This layer wraps that client in the guardrails and
 integration surfaces an agent actually needs: owner-signed spend mandates that gate every
-fund move, an x402 facilitator that turns a `402` into a verified stream, an MCP server
-that exposes hire/monitor/reclaim as agent tools, adapters for the major agent frameworks,
+fund move, a Metrik-native `402` challenge flow that turns a payment challenge into a verified
+stream (not the x402 protocol), an opt-in x402 v2 facilitator and gateway mode that settle
+standard x402 `exact` payments through the on-chain stream opener (off by default — see
+[`docs/x402.md`](./docs/x402.md)), an MCP server that exposes
+hire/monitor/reclaim as agent tools,
+adapters for the major agent frameworks,
 Reclaim consumer zkTLS for buyer-side delivery proofs, and non-custodial Coinbase CDP/Privy
 wallets so Metrik never holds a key.
 
@@ -34,7 +38,9 @@ npx --package @absol-labs/agent metrik discover
 `metrik` is the CLI below; `metrik-mcp` starts the MCP server over stdio
 (`metrik mcp --print-config` prints the client config that runs it);
 `metrik-mcp-http` starts the hosted multi-tenant MCP transport; `metrik-gateway`
-starts the reference caller-auth gateway a seller puts in front of their service.
+starts the reference caller-auth gateway a seller puts in front of their service;
+`metrik-x402-opener-facilitator` starts the x402 v2 opener facilitator (off unless
+enabled; see [`docs/x402.md`](./docs/x402.md)).
 
 The package is **ESM-only** (`"type": "module"`) and targets **Node `>=20.19 <25`** (verified on 20.19, 22 LTS and 24). It ships
 `@absol-labs/sdk`, `@absol-labs/shared`, `viem`, `zod`, the Reclaim zkTLS SDKs, the
@@ -53,15 +59,30 @@ and hard-stops on denial; `MandateDecision` returns a machine-readable reason. B
 actions (close, reclaim) verify only the signature — never expiry or caps — so a lapsed
 mandate can never strand the buyer's own funds in escrow.
 
-**The x402 facilitator** (`VerifiedStreamX402Facilitator`) turns an HTTP `402` challenge
-into a real on-chain stream open instead of a one-shot payment. The agent receives a
-verified-streaming requirement, signs a payload bound to its mandate, and the facilitator
-opens the escrowed stream through the SDK.
-
-**The MCP server** exposes `discover_services`, `hire_verified_service`,
+**The Metrik `402` challenge flow** (`VerifiedStreamFacilitator`) turns an HTTP `402`
+challenge into a real on-chain stream open instead of a one-shot payment. The agent
+receives a verified-streaming requirement, signs a payload bound to its mandate, and the
+stream is opened through the SDK.
+
+> **This is Metrik's own `402` flow, not the x402 protocol.** It uses its own scheme
+> string (`streamproof-verified-stream`), its own challenge and payload shapes, and its
+> own `X-METRIK-PAYMENT` header. It does **not** speak the x402 wire format and will
+> **not** interoperate with `x402-fetch`, `x402-axios`, `x402-express`, or any standard
+> x402 client or facilitator.
+>
+> Standard x402 is supported separately, as **x402 v2 `exact` through the stream
+> opener**: `metrik-x402-opener-facilitator` and the gateway's opt-in
+> `METRIK_GATEWAY_X402V2_OPENER` mode, both off by default. The opener `payTo` must only
+> ever be settled by that facilitator — a stock x402 facilitator would strand the payment.
+> Read [`docs/x402.md`](./docs/x402.md) before enabling either. The older x402 v1
+> integration, which paid the seller directly, was removed.
+
+**The MCP server** exposes `discover_services`, `hire_verified_service`, `invoke_service`,
 `check_stream_status`, `reclaim_unspent`, `list_streams`, and — when Reclaim credentials are
-configured — `prove_https_response`, so any MCP-native agent transacts directly. It reads
-settlement config from the environment and never accepts a raw key as a tool argument.
+configured — `prove_https_response`, so an MCP-native agent can discover a service, pay for
+it, **call it**, and recover what it did not spend without leaving the tool surface. It reads
+settlement config from the environment and never accepts a raw key as a tool argument. Full
+reference: [`docs/mcp-reference.md`](./docs/mcp-reference.md).
 
 **Framework adapters** put the same mandate-gated client behind AgentKit, ElizaOS,
 LangChain, and CrewAI, each importable from its own subpath.
@@ -206,15 +227,15 @@ See [`scripts/e2e-hire.ts`](./scripts/e2e-hire.ts) for the full journey (create/
 hire → invoke → settle) run against real Base Sepolia infrastructure: `pnpm e2e:hire` (needs real CDP
 creds — see `.env.example`).
 
-### Hire via x402: `402` challenge → signed payload → open stream
+### Hire via the Metrik `402` flow: challenge → signed payload → open stream
 
 ```ts
 import {
-  VerifiedStreamX402Facilitator,
-  encodeX402PayloadHeader,
+  VerifiedStreamFacilitator,
+  encodeStreamPayloadHeader,
 } from "@absol-labs/agent";
 
-const facilitator = new VerifiedStreamX402Facilitator({
+const facilitator = new VerifiedStreamFacilitator({
   sdkConfig, // @absol-labs/sdk StreamProofClientConfig (chain, transport, account, escrow, usdc)
 });
 
@@ -228,12 +249,16 @@ const challenge = facilitator.challenge({
   maxBudgetUsdc: 2_000_000n,
 });
 
-const header = encodeX402PayloadHeader({ challenge, signedMandate });
+const header = encodeStreamPayloadHeader({ challenge, signedMandate });
 const { streamId } = await facilitator.open(header); // mandate-gated, opens on-chain
 ```
 
-The scheme name is exported as `X402_SCHEME`; `parseX402ChallengeJson`,
-`parseX402PayloadHeader`, and `encodeX402PayloadHeader` handle the wire format on both sides.
+The scheme name is exported as `METRIK_STREAM_SCHEME`; `parseStreamChallengeJson`,
+`parseStreamPayloadHeader`, and `encodeStreamPayloadHeader` handle the wire format on both
+sides, and the payload travels under `METRIK_PAYMENT_HEADER` (`x-metrik-payment`) — never
+under x402's `X-PAYMENT`. This wire format is Metrik's own; see
+[`docs/x402.md`](./docs/x402.md). The deprecated `X402*` / `x402*` aliases of these names
+were removed; use the names above.
 
 ### The CLI
 
@@ -250,12 +275,50 @@ metrik watch   <streamId> --interval 15
 metrik invoke  <streamId> --method POST --path /transform --body '{"text":"hi"}'
 metrik close   <streamId>
 metrik reclaim <streamId>
+metrik claim   <streamId>                    # operator: redeem what verified
+metrik reclaim-unverified <streamId> --forfeit-unclaimed   # buyer escape hatch
 metrik mcp --print-config
+
+# the x402 opener path (docs/x402.md), under a spend mandate
+metrik pay    https://x402.137.23.50.249.sslip.io/transform --json '{"text":"# hi"}' --max-amount 0.1
+metrik refund <streamId> --refund-url <url> --close --reclaim   # gasless; NOT automatic
 ```
 
-- **Testnet only.** The CLI refuses any chain outside Base Sepolia (`84532`), and
-  re-reads the chain id the RPC endpoint actually serves before it signs anything.
-  There is no override flag.
+- **Testnet only, registry-driven.** Every chain fact (chain id, escrow, USDC,
+  RPC, oracle, gas token) comes from the `@absol-labs/sdk` network registry;
+  `--network` / `METRIK_NETWORK` selects one. The CLI refuses any network the
+  registry does not mark as a testnet (today: Base Sepolia, `84532`), and re-reads
+  the chain id the RPC endpoint actually serves before it signs anything. There is
+  no override flag.
+- **`metrik pay` is gated by a spend mandate** like `metrik open`: the payment's
+  opener terms (price vs per-stream/total caps, rate, window, operator) pass
+  `checkMandate()` before anything is signed, and the SDK's own x402 protections
+  stay on. It prints the response, the `streamId` and the refund URL. See
+  [`docs/cli.md`](./docs/cli.md#metrik-pay-x402).
+- **The meter runs on verified availability, not on your calls.** A stream is a
+  per-second rental of an endpoint that keeps proving it is alive — not per-request
+  billing. You are charged for the seconds that verified whether or not you invoked
+  once or a thousand times, and a failed interval advances the clock and pays nothing.
+- **`metrik claim` is the seller's side** of the `operator claimable` figure `status`
+  has always printed. It is operator-gated on-chain, so a wallet that is not the
+  stream's operator is refused before anything is broadcast rather than paying gas to
+  learn it.
+- **`metrik reclaim-unverified` is the no-proof escape hatch.** Every other route to a
+  buyer's money needs a Merkle proof from the oracle, so it is only as available as the
+  oracle is; this one needs no proof, no quorum and no guardian. It costs the operator
+  everything they verifiably earned but had not yet claimed on-chain — permanently, and
+  paid to the buyer — so it is its own command behind a mandatory `--forfeit-unclaimed`,
+  never a flag on `reclaim`. It unlocks at `expiresAt + escapeGraceSeconds`, gated on
+  **`expiresAt` and never on `closedAt`**: closing a 24h stream after ten minutes does
+  not bring the hatch forward.
+- **`status` may report `pending final checkpoint`** after a stream stops, instead of a
+  reclaimable figure. That is correct: until a checkpoint covers the stop time, any
+  number would be one you cannot actually obtain.
+- **`discover` and `status` disclose verifier overlap.** When a listing's operator is
+  also one of the escrow's oracle signers, both say so — the party being paid is among
+  the parties attesting that delivery happened. On the current testnet deployment this
+  fires on every live listing, because the team seeds its own supply so the marketplace
+  is testable. SLA text in a listing is seller-authored and labelled unverified.
 - **`open --dry-run` needs no wallet at all.** It broadcasts nothing, so it prints the
   intended call (and says which parts it could not produce without a key) rather than
   demanding one. `invoke` does need the key even though it broadcasts nothing: it signs
@@ -294,8 +357,15 @@ is also importable (`@absol-labs/agent/cli`) if you want to embed it.
 
 ### Run the MCP server
 
-The server runs over stdio and reads its settlement config from the environment; it never
-asks for a raw key in a tool argument.
+Two transports — stdio for local dev, Streamable HTTP for hosting — over the same tool set.
+Either reads its settlement config from the environment; neither ever asks for a raw key in
+a tool argument.
+
+**What the agent is buying is TIME, not calls.** `hire_verified_service` starts a per-second
+meter on verified availability; `invoke_service` costs nothing extra, and not calling costs
+the same as calling. Only `reclaim_unspent` stops the clock, and nothing pushes money back on
+its own. Every tool that opens, reads, or ends a stream says so in its own description, which
+is what an agent actually reads.
 
 ```bash
 metrik-mcp                  # installed, or: npx --package @absol-labs/agent metrik-mcp
@@ -317,16 +387,19 @@ import {
 } from "@absol-labs/agent";
 
 console.log(METRIK_MCP_TOOLS.map((t) => t.name));
-// discover_services, hire_verified_service, check_stream_status,
-// reclaim_unspent, list_streams, prove_https_response
+// discover_services, hire_verified_service, invoke_service, check_stream_status,
+// reclaim_unspent, list_streams, prove_https_response,
+// x402_pay,
+// refund_status, refund
 
 await startVerifiedStreamMcpServerStdio(); // reads process.env, connects stdio
 // or, for custom transport wiring:
 // const runtime = await createVerifiedStreamMcpServerFromEnv();
 ```
 
-Core env surface: `METRIK_AGENT_RPC_URL`, `METRIK_AGENT_ESCROW`, `METRIK_AGENT_USDC`,
-`METRIK_AGENT_CHAIN_ID` (`84532`), and one wallet source — either
+Core env surface: `METRIK_AGENT_RPC_URL`, `METRIK_AGENT_ESCROW` (must be the network's
+registered escrow), `METRIK_AGENT_USDC`, `METRIK_NETWORK` / `METRIK_AGENT_CHAIN_ID`
+(default: the registry's default network), and one wallet source — either
 `METRIK_AGENT_PRIVATE_KEY` (injected signer) or the CDP set (`CDP_API_KEY_ID`,
 `CDP_API_KEY_SECRET`, `CDP_WALLET_SECRET`, `METRIK_AGENT_CDP_OWNER_NAME`). Set
 `RECLAIM_APP_ID` / `RECLAIM_APP_SECRET` to enable the `prove_https_response` zkTLS tool.
@@ -480,7 +553,7 @@ services use output-probe verification until that protocol support exists.
 `ReclaimConsumerProofService` (and `createReclaimConsumerProofServiceFromEnv`) generate a
 Reclaim-backed proof of the exact HTTPS response the agent consumed, verified locally
 against the declared URL, method, body, match, and redaction policy before it is trusted.
-`VerifiedStreamX402Facilitator.proveConsumedHttpsResponse()` binds that proof to the same
+`VerifiedStreamFacilitator.proveConsumedHttpsResponse()` binds that proof to the same
 buyer/mandate context that opened the stream. When credentials require private headers or
 cookies, use the programmatic service or the facilitator directly rather than the MCP tool,
 so secrets never pass through model-visible tool arguments. Treat the result as an L2
@@ -520,8 +593,9 @@ pnpm test
 pnpm build
 ```
 
-The x402 facilitator, zkTLS proof path, signed-mandate engine, MCP server, and framework
-adapters are all real and tested in-repo. The `*.int.test.ts` integration suites deploy the
+The Metrik `402` challenge flow, zkTLS proof path, signed-mandate engine, MCP server,
+caller-auth gateway, and framework adapters are all real and tested in-repo. The
+`*.int.test.ts` integration suites deploy the
 hardened `StreamEscrow` on a throwaway `anvil` node and self-skip when `anvil` is not on
 `PATH`, so default CI stays green. A full hire → stream → settle walkthrough lives in
 [`examples/hire-stream-settle.ts`](examples/hire-stream-settle.ts).
@@ -532,3 +606,5 @@ hardened `StreamEscrow` on a throwaway `anvil` node and self-skip when `anvil` i
 - Docs: [metrik.live](https://metrik.live) · App: [app.metrik.live](https://app.metrik.live)
 - SDK: [`@absol-labs/sdk`](https://github.com/Absol-Labs/metrik-sdk)
 - Quickstart: [`docs/quickstart.md`](./docs/quickstart.md) · Design + narrative: [`docs/agent-layer.md`](./docs/agent-layer.md) · Security review: [`docs/threat-model.md`](./docs/threat-model.md)
+- Metrik and x402 — the x402 v2 opener facilitator and gateway mode, the rule that only the opener facilitator may settle an opener `payTo`, and what was removed: [`docs/x402.md`](./docs/x402.md)
+- Letting the verifier check a **gated** listing's paid route (opt-in, seller-side): [`docs/probe-capability.md`](./docs/probe-capability.md)

package/dist/capability/invocation-capability.d.ts

@@ -20,7 +20,7 @@ export declare const invocationCapabilitySchema: z.ZodObject<{
     expiry: z.ZodNumber;
 }, "strip", z.ZodTypeAny, {
     streamId: string;
-    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "OPTIONS" | "HEAD";
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
     serviceRef: string;
     nonce: string;
     buyer: `0x${string}`;
@@ -28,7 +28,7 @@ export declare const invocationCapabilitySchema: z.ZodObject<{
     expiry: number;
 }, {
     streamId: string;
-    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "OPTIONS" | "HEAD";
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
     serviceRef: string;
     nonce: string;
     buyer: string;
@@ -54,18 +54,18 @@ export declare const signedInvocationCapabilitySchema: z.ZodObject<{
 } & {
     signature: z.ZodEffects<z.ZodString, string, string>;
 }, "strip", z.ZodTypeAny, {
-    signature: string;
     streamId: string;
-    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "OPTIONS" | "HEAD";
+    signature: string;
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
     serviceRef: string;
     nonce: string;
     buyer: `0x${string}`;
     pathHash: string;
     expiry: number;
 }, {
-    signature: string;
     streamId: string;
-    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "OPTIONS" | "HEAD";
+    signature: string;
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
     serviceRef: string;
     nonce: string;
     buyer: string;
@@ -160,14 +160,26 @@ export declare function buildInvocationCapabilityTypedData(capability: Invocatio
         streamId: Hex;
         buyer: `0x${string}`;
         serviceRef: Hex;
-        method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "OPTIONS" | "HEAD";
+        method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
         pathHash: Hex;
         nonce: Hex;
         expiry: bigint;
     };
 };
+/**
+ * The minimum an account must expose to sign a capability: its address, and
+ * EIP-712 signing.
+ *
+ * Deliberately narrower than viem's `LocalAccount`. Every wallet this package
+ * resolves signs typed data — a raw key, a CDP server account via `toAccount()`,
+ * a Privy embedded EOA — but only the raw-key one is a `LocalAccount` by TYPE.
+ * Demanding the full interface would have meant the MCP server could only ever
+ * invoke with a raw key, which is the wallet an MCP host is least likely to be
+ * configured with. Widening a parameter type breaks no existing caller.
+ */
+export type InvocationCapabilitySigner = Pick<LocalAccount, "address" | "signTypedData">;
 /** Signs an `InvocationCapability` with the buyer's own wallet. */
-export declare function signInvocationCapability(capability: InvocationCapability, domain: InvocationCapabilityDomainInput, account: LocalAccount): Promise<Hex>;
+export declare function signInvocationCapability(capability: InvocationCapability, domain: InvocationCapabilityDomainInput, account: InvocationCapabilitySigner): Promise<Hex>;
 /** Recovers the EIP-712 signer of a capability. Throws on a malformed signature. */
 export declare function recoverInvocationCapabilitySigner(capability: InvocationCapability, domain: InvocationCapabilityDomainInput, signature: Hex): Promise<Address>;
 /** Cryptographically random 32-byte single-use nonce. */

package/dist/capability/invocation-capability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invocation-capability.d.ts","sourceRoot":"","sources":["../../src/capability/invocation-capability.ts"],"names":[],"mappings":"AAEA,OAAO,EAOL,KAAK,OAAO,EACZ,KAAK,GAAG,EACR,KAAK,YAAY,EAClB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmCxB,+CAA+C;AAC/C,eAAO,MAAM,gBAAgB,yEAQ3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,0BAA0B;IACrC,iFAAiF;;IAEjF,wDAAwD;;IAExD,uEAAuE;;IAEvE,yDAAyD;;IAEzD,wEAAwE;;IAExE,oCAAoC;;IAEpC,kEAAkE;;;;;;;;;;;;;;;;;;EAElE,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,gCAAgC;IAjB3C,iFAAiF;;IAEjF,wDAAwD;;IAExD,uEAAuE;;IAEvE,yDAAyD;;IAEzD,wEAAwE;;IAExE,oCAAoC;;IAEpC,kEAAkE;;;;;;;;;;;;;;;;;;;;;;EAQhE,CAAC;AACL,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAEF,mGAAmG;AACnG,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;CACrC;AAED,eAAO,MAAM,8BAA8B,EACzC,8BAAuC,CAAC;AAC1C,eAAO,MAAM,iCAAiC,EAAG,GAAY,CAAC;AAE9D,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;CAUhC,CAAC;AAEX,uFAAuF;AACvF,eAAO,MAAM,8BAA8B,KAAK,CAAC;AAEjD,iEAAiE;AACjE,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAE5D,wBAAgB,sCAAsC,CACpD,MAAM,EAAE,+BAA+B;;;;;EAQxC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAEpD;AAED,kGAAkG;AAClG,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAU5D;AAeD,wBAAgB,kCAAkC,CAChD,UAAU,EAAE,oBAAoB,EAChC,MAAM,EAAE,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAZR,GAAG;;oBAEC,GAAG;;kBAEP,GAAG;eACT,GAAG;;;EAe7B;AAED,mEAAmE;AACnE,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,oBAAoB,EAChC,MAAM,EAAE,+BAA+B,EACvC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,GAAG,CAAC,CAGd;AAED,oFAAoF;AACpF,wBAAsB,iCAAiC,CACrD,UAAU,EAAE,oBAAoB,EAChC,MAAM,EAAE,+BAA+B,EACvC,SAAS,EAAE,GAAG,GACb,OAAO,CAAC,OAAO,CAAC,CAGlB;AAED,yDAAyD;AACzD,wBAAgB,uBAAuB,IAAI,GAAG,CAE7C;AAED,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAIpE;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,0BAA0B,GACjC,MAAM,CAaR;AAED,gGAAgG;AAChG,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,GAClB,0BAA0B,CA2B5B"}
+{"version":3,"file":"invocation-capability.d.ts","sourceRoot":"","sources":["../../src/capability/invocation-capability.ts"],"names":[],"mappings":"AAEA,OAAO,EAOL,KAAK,OAAO,EACZ,KAAK,GAAG,EACR,KAAK,YAAY,EAClB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmCxB,+CAA+C;AAC/C,eAAO,MAAM,gBAAgB,yEAQ3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,0BAA0B;IACrC,iFAAiF;;IAEjF,wDAAwD;;IAExD,uEAAuE;;IAEvE,yDAAyD;;IAEzD,wEAAwE;;IAExE,oCAAoC;;IAEpC,kEAAkE;;;;;;;;;;;;;;;;;;EAElE,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,gCAAgC;IAjB3C,iFAAiF;;IAEjF,wDAAwD;;IAExD,uEAAuE;;IAEvE,yDAAyD;;IAEzD,wEAAwE;;IAExE,oCAAoC;;IAEpC,kEAAkE;;;;;;;;;;;;;;;;;;;;;;EAQhE,CAAC;AACL,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAEF,mGAAmG;AACnG,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;CACrC;AAED,eAAO,MAAM,8BAA8B,EACzC,8BAAuC,CAAC;AAC1C,eAAO,MAAM,iCAAiC,EAAG,GAAY,CAAC;AAE9D,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;CAUhC,CAAC;AAEX,uFAAuF;AACvF,eAAO,MAAM,8BAA8B,KAAK,CAAC;AAEjD,iEAAiE;AACjE,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAE5D,wBAAgB,sCAAsC,CACpD,MAAM,EAAE,+BAA+B;;;;;EAQxC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAEpD;AAED,kGAAkG;AAClG,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAU5D;AAeD,wBAAgB,kCAAkC,CAChD,UAAU,EAAE,oBAAoB,EAChC,MAAM,EAAE,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAZR,GAAG;;oBAEC,GAAG;;kBAEP,GAAG;eACT,GAAG;;;EAe7B;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAC3C,YAAY,EACZ,SAAS,GAAG,eAAe,CAC5B,CAAC;AAEF,mEAAmE;AACnE,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,oBAAoB,EAChC,MAAM,EAAE,+BAA+B,EACvC,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,GAAG,CAAC,CAGd;AAED,oFAAoF;AACpF,wBAAsB,iCAAiC,CACrD,UAAU,EAAE,oBAAoB,EAChC,MAAM,EAAE,+BAA+B,EACvC,SAAS,EAAE,GAAG,GACb,OAAO,CAAC,OAAO,CAAC,CAGlB;AAED,yDAAyD;AACzD,wBAAgB,uBAAuB,IAAI,GAAG,CAE7C;AAED,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAIpE;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,0BAA0B,GACjC,MAAM,CAaR;AAED,gGAAgG;AAChG,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,GAClB,0BAA0B,CA2B5B"}

package/dist/capability/invocation-capability.js.map

@@ -1 +1 @@
-{"version":3,"file":"invocation-capability.js","sourceRoot":"","sources":["../../src/capability/invocation-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EACL,UAAU,EACV,SAAS,EACT,KAAK,EACL,SAAS,EACT,uBAAuB,EACvB,aAAa,GAId,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACjE,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAChE,qBAAqB,CACtB,CAAC;AACJ,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,EAAE;KACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EACjE,6BAA6B,CAC9B,CAAC;AAEJ,+CAA+C;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,KAAK;IACL,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,SAAS;CACV,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,iFAAiF;IACjF,QAAQ,EAAE,aAAa;IACvB,wDAAwD;IACxD,KAAK,EAAE,aAAa;IACpB,uEAAuE;IACvE,UAAU,EAAE,aAAa;IACzB,yDAAyD;IACzD,MAAM,EAAE,gBAAgB;IACxB,wEAAwE;IACxE,QAAQ,EAAE,aAAa;IACvB,oCAAoC;IACpC,KAAK,EAAE,aAAa;IACpB,kEAAkE;IAClE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,0BAA0B,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAYL,MAAM,CAAC,MAAM,8BAA8B,GACzC,8BAAuC,CAAC;AAC1C,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAY,CAAC;AAE9D,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,oBAAoB,EAAE;QACpB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;KACnC;CACO,CAAC;AAEX,uFAAuF;AACvF,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAEjD,iEAAiE;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AAE5D,MAAM,UAAU,sCAAsC,CACpD,MAAuC;IAEvC,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,iCAAiC;QAC1C,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,iBAAiB,EAAE,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC;KAC/C,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,SAAS,CAAC,aAAa,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,2BAA2B,CAAC,UAAgC;IACnE,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5D,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAe;QAChC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAiB;QACpC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAe;QAChC,KAAK,EAAE,MAAM,CAAC,KAAY;QAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,UAAgC,EAChC,MAAuC;IAEvC,OAAO;QACL,MAAM,EAAE,sCAAsC,CAAC,MAAM,CAAC;QACtD,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,sBAA+B;QAC5C,OAAO,EAAE,2BAA2B,CAAC,UAAU,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAAgC,EAChC,MAAuC,EACvC,OAAqB;IAErB,MAAM,SAAS,GAAG,kCAAkC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzE,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,UAAgC,EAChC,MAAuC,EACvC,SAAc;IAEd,MAAM,SAAS,GAAG,kCAAkC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzE,OAAO,uBAAuB,CAAC,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,uBAAuB;IACrC,OAAO,KAAK,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAS,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,OAAe,EAAE,OAAsC;QACjE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CACpC,MAAkC;IAElC,MAAM,MAAM,GAAG,gCAAgC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACzD,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,sBAAsB,CACpC,WAAmB;IAEnB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,4BAA4B,CACpC,oCAAoC,EACpC,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,4BAA4B,CAAC,kCAAkC,EAAE;YACzE,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,4BAA4B,CACpC,6BAA6B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CACpD,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}
+{"version":3,"file":"invocation-capability.js","sourceRoot":"","sources":["../../src/capability/invocation-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EACL,UAAU,EACV,SAAS,EACT,KAAK,EACL,SAAS,EACT,uBAAuB,EACvB,aAAa,GAId,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACjE,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAChE,qBAAqB,CACtB,CAAC;AACJ,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,EAAE;KACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EACjE,6BAA6B,CAC9B,CAAC;AAEJ,+CAA+C;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,KAAK;IACL,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,SAAS;CACV,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,iFAAiF;IACjF,QAAQ,EAAE,aAAa;IACvB,wDAAwD;IACxD,KAAK,EAAE,aAAa;IACpB,uEAAuE;IACvE,UAAU,EAAE,aAAa;IACzB,yDAAyD;IACzD,MAAM,EAAE,gBAAgB;IACxB,wEAAwE;IACxE,QAAQ,EAAE,aAAa;IACvB,oCAAoC;IACpC,KAAK,EAAE,aAAa;IACpB,kEAAkE;IAClE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,0BAA0B,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAYL,MAAM,CAAC,MAAM,8BAA8B,GACzC,8BAAuC,CAAC;AAC1C,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAY,CAAC;AAE9D,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,oBAAoB,EAAE;QACpB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;KACnC;CACO,CAAC;AAEX,uFAAuF;AACvF,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAEjD,iEAAiE;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AAE5D,MAAM,UAAU,sCAAsC,CACpD,MAAuC;IAEvC,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,iCAAiC;QAC1C,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,iBAAiB,EAAE,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC;KAC/C,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,SAAS,CAAC,aAAa,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,2BAA2B,CAAC,UAAgC;IACnE,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5D,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAe;QAChC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAiB;QACpC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAe;QAChC,KAAK,EAAE,MAAM,CAAC,KAAY;QAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,UAAgC,EAChC,MAAuC;IAEvC,OAAO;QACL,MAAM,EAAE,sCAAsC,CAAC,MAAM,CAAC;QACtD,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,sBAA+B;QAC5C,OAAO,EAAE,2BAA2B,CAAC,UAAU,CAAC;KACjD,CAAC;AACJ,CAAC;AAkBD,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAAgC,EAChC,MAAuC,EACvC,OAAmC;IAEnC,MAAM,SAAS,GAAG,kCAAkC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzE,OAAO,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,UAAgC,EAChC,MAAuC,EACvC,SAAc;IAEd,MAAM,SAAS,GAAG,kCAAkC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzE,OAAO,uBAAuB,CAAC,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,uBAAuB;IACrC,OAAO,KAAK,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAS,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,OAAe,EAAE,OAAsC;QACjE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CACpC,MAAkC;IAElC,MAAM,MAAM,GAAG,gCAAgC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACzD,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,sBAAsB,CACpC,WAAmB;IAEnB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,4BAA4B,CACpC,oCAAoC,EACpC,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,4BAA4B,CAAC,kCAAkC,EAAE;YACzE,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,4BAA4B,CACpC,6BAA6B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CACpD,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/capability/probe-capability.d.ts

@@ -0,0 +1,225 @@
+import { type Address, type Hex, type LocalAccount } from "viem";
+import { z } from "zod";
+export declare const probeCapabilitySchema: z.ZodObject<{
+    /**
+     * The service being probed. Must match the target gateway's configured
+     * `serviceRef`. There is deliberately no `streamId` field — see the class
+     * docs.
+     */
+    serviceRef: z.ZodEffects<z.ZodString, string, string>;
+    /**
+     * The minting oracle signer. Must equal the EIP-712 signer AND be a member of
+     * the escrow's on-chain `getOracleSigners()` set at verification time.
+     */
+    oracle: z.ZodEffects<z.ZodString, `0x${string}`, string>;
+    /** The single HTTP method this capability authorizes. */
+    method: z.ZodEnum<["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]>;
+    /** `keccak256` of the exact request path this capability authorizes. */
+    pathHash: z.ZodEffects<z.ZodString, string, string>;
+    /** Single-use anti-replay nonce. */
+    nonce: z.ZodEffects<z.ZodString, string, string>;
+    /** Unix seconds after which the capability is no longer valid. */
+    expiry: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
+    serviceRef: string;
+    nonce: string;
+    pathHash: string;
+    expiry: number;
+    oracle: `0x${string}`;
+}, {
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
+    serviceRef: string;
+    nonce: string;
+    pathHash: string;
+    expiry: number;
+    oracle: string;
+}>;
+export type ProbeCapability = z.infer<typeof probeCapabilitySchema>;
+export declare const signedProbeCapabilitySchema: z.ZodObject<{
+    /**
+     * The service being probed. Must match the target gateway's configured
+     * `serviceRef`. There is deliberately no `streamId` field — see the class
+     * docs.
+     */
+    serviceRef: z.ZodEffects<z.ZodString, string, string>;
+    /**
+     * The minting oracle signer. Must equal the EIP-712 signer AND be a member of
+     * the escrow's on-chain `getOracleSigners()` set at verification time.
+     */
+    oracle: z.ZodEffects<z.ZodString, `0x${string}`, string>;
+    /** The single HTTP method this capability authorizes. */
+    method: z.ZodEnum<["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]>;
+    /** `keccak256` of the exact request path this capability authorizes. */
+    pathHash: z.ZodEffects<z.ZodString, string, string>;
+    /** Single-use anti-replay nonce. */
+    nonce: z.ZodEffects<z.ZodString, string, string>;
+    /** Unix seconds after which the capability is no longer valid. */
+    expiry: z.ZodNumber;
+} & {
+    signature: z.ZodEffects<z.ZodString, string, string>;
+}, "strip", z.ZodTypeAny, {
+    signature: string;
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
+    serviceRef: string;
+    nonce: string;
+    pathHash: string;
+    expiry: number;
+    oracle: `0x${string}`;
+}, {
+    signature: string;
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
+    serviceRef: string;
+    nonce: string;
+    pathHash: string;
+    expiry: number;
+    oracle: string;
+}>;
+export type SignedProbeCapability = z.infer<typeof signedProbeCapabilitySchema>;
+/**
+ * Chain-bound domain. `verifyingContract` is the `StreamEscrowV2` whose
+ * `getOracleSigners()` defines who may mint — so a capability minted for one
+ * escrow can never authorize a probe against a gateway fronting another.
+ */
+export interface ProbeCapabilityDomainInput {
+    readonly chainId: number;
+    readonly verifyingContract: Address;
+}
+/**
+ * Distinct from `Metrik Invocation Capability`, so a buyer's invocation
+ * signature can never be replayed as a probe (or the reverse) even though both
+ * share a chainId and verifying contract.
+ */
+export declare const probeCapabilityDomainName: "Metrik Probe Capability";
+export declare const probeCapabilityDomainVersion: "1";
+export declare const probeCapabilityTypedData: {
+    readonly ProbeCapability: readonly [{
+        readonly name: "serviceRef";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "oracle";
+        readonly type: "address";
+    }, {
+        readonly name: "method";
+        readonly type: "string";
+    }, {
+        readonly name: "pathHash";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "nonce";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "expiry";
+        readonly type: "uint64";
+    }];
+};
+/**
+ * Default lifetime of a freshly-minted probe capability, in seconds.
+ *
+ * Shorter than the ~15-22s checkpoint cadence would race a slow upstream; much
+ * longer would widen the window in which a captured capability is replayable
+ * against a gateway with no nonce cache. 30s is one to two probe intervals.
+ */
+export declare const DEFAULT_PROBE_CAPABILITY_TTL_SECONDS = 30;
+/** Header a probe request carries the signed capability in. */
+export declare const PROBE_CAPABILITY_HEADER_NAME = "x-metrik-probe-capability";
+/**
+ * Header the gateway adds to the UPSTREAM request when it authorized a probe.
+ * Advisory: it exists so a seller's own metering/analytics can exclude
+ * verification traffic from billable usage.
+ */
+export declare const PROBE_MARKER_HEADER_NAME = "x-metrik-probe";
+export declare function createProbeCapabilityEip712Domain(domain: ProbeCapabilityDomainInput): {
+    readonly name: "Metrik Probe Capability";
+    readonly version: "1";
+    readonly chainId: number;
+    readonly verifyingContract: `0x${string}`;
+};
+/**
+ * `keccak256` of the exact request path this capability authorizes. Shares the
+ * canonical form with `InvocationCapability` so both sides of a gateway hash
+ * paths identically.
+ */
+export declare function hashProbePath(path: string): Hex;
+/** Re-exported for symmetry; identical canonicalization to the invocation path. */
+export declare function normalizeProbePath(path: string): string;
+export declare function buildProbeCapabilityTypedData(capability: ProbeCapability, domain: ProbeCapabilityDomainInput): {
+    domain: {
+        readonly name: "Metrik Probe Capability";
+        readonly version: "1";
+        readonly chainId: number;
+        readonly verifyingContract: `0x${string}`;
+    };
+    types: {
+        readonly ProbeCapability: readonly [{
+            readonly name: "serviceRef";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "oracle";
+            readonly type: "address";
+        }, {
+            readonly name: "method";
+            readonly type: "string";
+        }, {
+            readonly name: "pathHash";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "nonce";
+            readonly type: "bytes32";
+        }, {
+            readonly name: "expiry";
+            readonly type: "uint64";
+        }];
+    };
+    primaryType: "ProbeCapability";
+    message: {
+        serviceRef: Hex;
+        oracle: `0x${string}`;
+        method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
+        pathHash: Hex;
+        nonce: Hex;
+        expiry: bigint;
+    };
+};
+/** The minimum an oracle signer must expose to mint a probe capability. */
+export type ProbeCapabilitySigner = Pick<LocalAccount, "address" | "signTypedData">;
+/** Signs a `ProbeCapability` with an oracle signer's own key. */
+export declare function signProbeCapability(capability: ProbeCapability, domain: ProbeCapabilityDomainInput, account: ProbeCapabilitySigner): Promise<Hex>;
+/** Recovers the EIP-712 signer of a probe capability. Throws on a malformed signature. */
+export declare function recoverProbeCapabilitySigner(capability: ProbeCapability, domain: ProbeCapabilityDomainInput, signature: Hex): Promise<Address>;
+/** Cryptographically random 32-byte single-use nonce. */
+export declare function generateProbeNonce(): Hex;
+export declare class InvalidProbeCapabilityHeaderError extends Error {
+    constructor(message: string, options?: {
+        readonly cause?: unknown;
+    });
+}
+/** Encodes a signed probe capability as an opaque, header-safe (base64url) string. */
+export declare function encodeProbeCapabilityHeader(signed: SignedProbeCapability): string;
+/** Decodes and schema-validates a probe capability header. Fails closed on any malformation. */
+export declare function decodeProbeCapabilityHeader(headerValue: string): SignedProbeCapability;
+export interface MintProbeCapabilityOptions {
+    readonly serviceRef: Hex;
+    readonly method: ProbeCapability["method"];
+    /** The exact request path to be probed (query/fragment are stripped). */
+    readonly path: string;
+    readonly domain: ProbeCapabilityDomainInput;
+    readonly account: ProbeCapabilitySigner;
+    readonly ttlSeconds?: number;
+    /** Injectable clock (unix seconds), for tests. */
+    readonly now?: () => number;
+    /** Injectable nonce source, for tests. */
+    readonly nonce?: () => Hex;
+}
+/**
+ * Mint one fresh, single-use, short-lived probe capability and return its
+ * encoded header value. Called once PER PROBE PER VANTAGE by the coordinator:
+ * the gateway's replay cache is single-use, so two vantages sharing one
+ * capability would see the second rejected as a replay.
+ */
+export declare function mintProbeCapabilityHeader(options: MintProbeCapabilityOptions): Promise<{
+    readonly headerName: string;
+    readonly headerValue: string;
+    readonly capability: SignedProbeCapability;
+}>;
+//# sourceMappingURL=probe-capability.d.ts.map

package/dist/capability/probe-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe-capability.d.ts","sourceRoot":"","sources":["../../src/capability/probe-capability.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,OAAO,EACZ,KAAK,GAAG,EACR,KAAK,YAAY,EAClB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA+ExB,eAAO,MAAM,qBAAqB;IAChC;;;;OAIG;;IAEH;;;OAGG;;IAEH,yDAAyD;;IAEzD,wEAAwE;;IAExE,oCAAoC;;IAEpC,kEAAkE;;;;;;;;;;;;;;;;EAElE,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,2BAA2B;IAtBtC;;;;OAIG;;IAEH;;;OAGG;;IAEH,yDAAyD;;IAEzD,wEAAwE;;IAExE,oCAAoC;;IAEpC,kEAAkE;;;;;;;;;;;;;;;;;;;;EAOlE,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;CACrC;AAED;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAG,yBAAkC,CAAC;AAC5E,eAAO,MAAM,4BAA4B,EAAG,GAAY,CAAC;AAEzD,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;CAS3B,CAAC;AAEX;;;;;;GAMG;AACH,eAAO,MAAM,oCAAoC,KAAK,CAAC;AAEvD,+DAA+D;AAC/D,eAAO,MAAM,4BAA4B,8BAA8B,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,mBAAmB,CAAC;AAEzD,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,0BAA0B;;;;;EAQnC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAE/C;AAED,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAcD,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,eAAe,EAC3B,MAAM,EAAE,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAXC,GAAG;;;kBAGP,GAAG;eACT,GAAG;;;EAe7B;AAED,2EAA2E;AAC3E,MAAM,MAAM,qBAAqB,GAAG,IAAI,CACtC,YAAY,EACZ,SAAS,GAAG,eAAe,CAC5B,CAAC;AAEF,iEAAiE;AACjE,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,eAAe,EAC3B,MAAM,EAAE,0BAA0B,EAClC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,GAAG,CAAC,CAGd;AAED,0FAA0F;AAC1F,wBAAsB,4BAA4B,CAChD,UAAU,EAAE,eAAe,EAC3B,MAAM,EAAE,0BAA0B,EAClC,SAAS,EAAE,GAAG,GACb,OAAO,CAAC,OAAO,CAAC,CAGlB;AAED,yDAAyD;AACzD,wBAAgB,kBAAkB,IAAI,GAAG,CAExC;AAED,qBAAa,iCAAkC,SAAQ,KAAK;gBAC9C,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAIpE;AAED,sFAAsF;AACtF,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,qBAAqB,GAC5B,MAAM,CAYR;AAED,gGAAgG;AAChG,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,MAAM,GAClB,qBAAqB,CA4BvB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC3C,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,kDAAkD;IAClD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,CAAC;CAC5B;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC;IACT,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;CAC5C,CAAC,CAyBD"}