@absol-labs/agent 0.10.0 → 0.12.0-rc.1

package/src/index.ts

@@ -24,23 +24,25 @@ export {
   type SignServerMandateOptions,
 } from "./mandates/env.js";
 
+// Metrik-native 402 challenge flow. NOT the x402 protocol — see docs/x402.md.
 export {
-  VerifiedStreamX402Facilitator,
+  METRIK_PAYMENT_HEADER,
+  METRIK_STREAM_SCHEME,
+  VerifiedStreamFacilitator,
   DeliveryProofUnavailableError,
-  X402PayloadError,
-  X402SpendControlUnavailableError,
   SettlementTargetMismatchError,
-  X402_SCHEME,
-  encodeX402PayloadHeader,
-  parseX402ChallengeJson,
-  parseX402PayloadHeader,
+  SpendControlUnavailableError,
+  StreamPayloadError,
+  encodeStreamPayloadHeader,
+  parseStreamChallengeJson,
+  parseStreamPayloadHeader,
+  streamChallengeSchema,
+  streamOpenPayloadSchema,
   verifiedStreamRequirementsSchema,
-  x402StreamChallengeSchema,
-  x402OpenPayloadSchema,
-  type X402ConsumedHttpsResponseProofInput,
-  type X402Facilitator,
-  type X402OpenPayload,
-  type X402StreamChallenge,
+  type ConsumedHttpsResponseProofInput,
+  type StreamChallenge,
+  type StreamFacilitator,
+  type StreamOpenPayload,
   type VerifiedStreamFacilitatorOptions,
   type VerifiedStreamRequirements,
 } from "./x402/facilitator.js";
@@ -62,6 +64,8 @@ export {
 } from "./discovery/registry.js";
 
 export {
+  ALLOW_UNVERIFIED_OPERATOR_ENV,
+  METERING_MODEL,
   METRIK_MCP_TOOLS,
   STREAMPROOF_MCP_TOOLS,
   FileStreamRegistry,
@@ -71,6 +75,7 @@ export {
   createVerifiedStreamMcpServerOptionsFromEnv,
   parseMetrikAgentEnv,
   startVerifiedStreamMcpServerStdio,
+  type EscrowGeneration,
   type McpToolSpec,
   type ParsedMetrikAgentEnv,
   type StoredStreamRecord,
@@ -80,6 +85,16 @@ export {
   type VerifiedStreamMcpServerRuntime,
 } from "./mcp/server.js";
 
+export {
+  MAX_INVOCATION_RESPONSE_BYTES,
+  ServiceListingNotFoundError,
+  createServiceInvoker,
+  type CreateServiceInvokerOptions,
+  type ServiceInvocationRequest,
+  type ServiceInvocationResult,
+  type ServiceInvoker,
+} from "./mcp/service-invoker.js";
+
 export {
   StaticTenantResolver,
   createHostedMcpHttpServer,
@@ -288,9 +303,49 @@ export {
   type HttpMethod,
   type InvocationCapability,
   type InvocationCapabilityDomainInput,
+  type InvocationCapabilitySigner,
   type SignedInvocationCapability,
 } from "./capability/invocation-capability.js";
 
+export {
+  DEFAULT_PROBE_CAPABILITY_TTL_SECONDS,
+  InvalidProbeCapabilityHeaderError,
+  PROBE_CAPABILITY_HEADER_NAME,
+  PROBE_MARKER_HEADER_NAME,
+  buildProbeCapabilityTypedData,
+  createProbeCapabilityEip712Domain,
+  decodeProbeCapabilityHeader,
+  encodeProbeCapabilityHeader,
+  generateProbeNonce,
+  hashProbePath,
+  mintProbeCapabilityHeader,
+  normalizeProbePath,
+  probeCapabilityDomainName,
+  probeCapabilityDomainVersion,
+  probeCapabilitySchema,
+  probeCapabilityTypedData,
+  recoverProbeCapabilitySigner,
+  signProbeCapability,
+  signedProbeCapabilitySchema,
+  type MintProbeCapabilityOptions,
+  type ProbeCapability,
+  type ProbeCapabilityDomainInput,
+  type ProbeCapabilitySigner,
+  type SignedProbeCapability,
+} from "./capability/probe-capability.js";
+
+export {
+  CachedOracleSignerSet,
+  DEFAULT_MAX_PROBES_PER_MINUTE,
+  DEFAULT_ORACLE_SIGNER_CACHE_SECONDS,
+  FixedWindowProbeRateLimiter,
+  createSdkOracleSignerSetReader,
+  type GatewayProbeMode,
+  type OracleSignerSetReader,
+  type ProbeAuthorization,
+  type ProbeRateLimiter,
+} from "./gateway/probe-auth.js";
+
 export {
   CallerAuthGateway,
   DEFAULT_MAX_STATE_STALENESS_SECONDS,
@@ -312,16 +367,27 @@ export {
 export {
   createCallerAuthGatewayServer,
   parseCallerAuthGatewayEnvConfig,
+  parseGatewayProbeEnvConfig,
   startCallerAuthGatewayServerFromEnv,
   type CallerAuthGatewayEnvConfig,
+  type CallerAuthGatewayProbeEnvConfig,
   type CallerAuthGatewayServer,
   type CallerAuthGatewayServerConfig,
 } from "./gateway/http-server.js";
+export {
+  SignedRateBoundsError,
+  isVerifiedSignedRateBounds,
+  loadSignedRateBoundsFile,
+  rateOutsideBounds,
+  verifySignedRateBounds,
+  type SignedRateBounds,
+} from "./gateway/signed-rate-bounds.js";
 
 export {
   InvokeBuyerMismatchError,
   InvokeAccessUrlError,
   InvokePathError,
+  resolveInvocationUrl,
   InvokeServiceRefMismatchError,
   InvokeStreamExpiredError,
   InvokeStreamNotActiveError,
@@ -342,10 +408,42 @@ export {
 // Framework adapters are NOT re-exported from this top-level barrel on purpose.
 // Some of them (notably the Coinbase AgentKit adapter) pull heavy optional
 // dependency graphs, so importing "@absol-labs/agent" must stay light and load
-// only the core (SDK client, spend mandates, MCP server, x402, discovery,
+// only the core (SDK client, spend mandates, MCP server, 402 stream flow, discovery,
 // wallet, zkTLS). Import an adapter from its own subpath when you need it:
 //
 //   import { createMetrikAgentKit } from "@absol-labs/agent/agentkit";
 //   import { metrikElizaPlugin } from "@absol-labs/agent/eliza";
 //   import { createLangChainVerifiedStreamTools } from "@absol-labs/agent/langchain";
 //   import { createCrewAiVerifiedStreamMcpConfig } from "@absol-labs/agent/crewai";
+
+// Network registry view (metrik-agent#121): every chain fact comes from the
+// `@absol-labs/sdk` network registry; this is the agent's selection policy.
+export {
+  DEFAULT_METRIK_NETWORK_ID,
+  METRIK_NETWORK_ENV,
+  UnsupportedNetworkError,
+  allowedNetworks,
+  defaultNetwork,
+  describeAllowedNetworks,
+  gasFundingHint,
+  isRegisteredEscrow,
+  networkFunding,
+  readOnlyMetrikClient,
+  requireNetworkForCaip2,
+  requireNetworkForChainId,
+  resolveAgentNetwork,
+  usdcFundingHint,
+  type NetworkFunding,
+  type NetworkPolicy,
+} from "./network.js";
+
+// Escrow-generation rules (V2 vs V3 escape hatch), driven by the registry.
+export {
+  UnsupportedEscrowGenerationError,
+  escapeHatchReadyAtFormula,
+  escrowGenerationFor,
+  readEscapeHatchReadyAt,
+  streamEscrowV3EscapeHatchAbi,
+  type EscapeHatchReader,
+  type KnownEscrowGeneration,
+} from "./escrow-generation.js";

package/src/mandates/env.ts

@@ -17,8 +17,9 @@ import {
 /**
  * Server-side spend-mandate provisioning.
  *
- * The MCP/x402 fund-moving surface is driven by autonomous callers (an LLM over
- * MCP, a paying agent over x402) that CANNOT produce an EIP-712 signature. The
+ * The MCP / Metrik-402 fund-moving surface is driven by autonomous callers (an
+ * LLM over MCP, a paying agent driving Metrik's own `402` challenge flow — not
+ * the x402 protocol, see docs/x402.md) that CANNOT produce an EIP-712 signature. The
  * spend mandate is therefore NOT a per-call argument — it is configured once, at
  * the server's construction, exactly like the AgentKit action provider's
  * `signedMandate`. The deploying operator declares the spend caps via env and the