@absol-labs/agent 0.9.1 → 0.11.0

package/dist/gateway/x402-mode.d.ts

@@ -0,0 +1,123 @@
+import type { PaymentRequirements, SettleResponse, VerifyResponse } from "x402/types";
+import { type SignedListingPayee, type X402AssetConfig, type X402PaymentRequiredBody } from "../x402/payment-requirements.js";
+/**
+ * Standard x402 mode for the seller-side gateway (Tier 1).
+ *
+ * The gateway already authorizes requests that carry a Metrik
+ * `InvocationCapability` — a buyer with an open, funded, verified stream. That
+ * path is untouched. This module adds a SECOND, independent way in: a request
+ * with no capability gets an ordinary HTTP `402` carrying real x402
+ * `PaymentRequirements`, so an agent holding nothing but `x402-fetch` can pay
+ * per call without knowing Metrik exists.
+ *
+ * ## The two paths never overlap
+ *
+ * - capability header present -> stream path, exactly as before;
+ * - capability header absent, x402 mode on -> `402` + `PaymentRequirements`;
+ * - BOTH present -> rejected. A request that looks like both is ambiguous about
+ *   which one is paying for it, and the failure mode of guessing is charging the
+ *   caller twice for one call. Better a loud `400` than a silent double charge.
+ *
+ * ## The per-call price is the seller's, and is not signed
+ *
+ * `payTo` comes from the operator-signed descriptor (see
+ * `../x402/payment-requirements.ts`). The price does not — the descriptor has no
+ * per-call price field. It is the seller's own number on the seller's own
+ * gateway, which is legitimate, but a buyer cannot cross-check it against the
+ * registry the way they can cross-check the payee.
+ */
+/** Request header carrying the x402 payment payload (x402 v1). */
+export declare const X402_PAYMENT_HEADER: "x-payment";
+/** Response header carrying the settlement result (x402 v1). */
+export declare const X402_PAYMENT_RESPONSE_HEADER: "x-payment-response";
+/** The facilitator the gateway delegates verify/settle to. */
+export interface X402FacilitatorClient {
+    verify(payload: unknown, requirements: PaymentRequirements): Promise<VerifyResponse>;
+    settle(payload: unknown, requirements: PaymentRequirements): Promise<SettleResponse>;
+}
+export interface HttpFacilitatorClientOptions {
+    /** Base URL of a facilitator exposing `/verify` and `/settle`. */
+    readonly url: string;
+    /**
+     * Shared secret for the facilitator's `/settle`. Sent as
+     * `Authorization: Bearer`. Metrik's own facilitator refuses to start a
+     * settling deployment without one, because `/settle` spends its gas.
+     */
+    readonly token?: string;
+    readonly headers?: Readonly<Record<string, string>>;
+    readonly timeoutMs?: number;
+    readonly fetch?: typeof globalThis.fetch;
+}
+/**
+ * Talks to any x402 facilitator over HTTP — including Metrik's own
+ * (`../x402/facilitator-server.ts`), which is the point: a seller who wires this
+ * gateway to the Metrik facilitator gets a paywall whose payments stop when
+ * their own delivery stops being verifiable.
+ */
+export declare function createHttpFacilitatorClient(options: HttpFacilitatorClientOptions): X402FacilitatorClient;
+/** Builds the `PaymentRequirements` quoted for a given request. */
+export type X402Quoter = (request: {
+    readonly method: string;
+    readonly path: string;
+}) => readonly PaymentRequirements[] | Promise<readonly PaymentRequirements[]>;
+export interface ListingPriceQuoterOptions {
+    /** Projected from the OPERATOR-SIGNED descriptor. `payTo` comes from here. */
+    readonly listing: SignedListingPayee;
+    /** Public origin buyers reach this gateway on, e.g. `https://svc.example.com`. */
+    readonly resourceBaseUrl: string;
+    /** Per-call price in the asset's base units (micro-USDC). Seller-set, unsigned. */
+    readonly pricePerCallBaseUnits: bigint;
+    readonly chainId: number;
+    readonly description?: string;
+    readonly mimeType?: string;
+    readonly maxTimeoutSeconds?: number;
+    readonly asset?: X402AssetConfig;
+}
+/** One flat price per call, quoted against the request's own path. */
+export declare function createListingPriceQuoter(options: ListingPriceQuoterOptions): X402Quoter;
+export interface GatewayX402Mode {
+    readonly quote: X402Quoter;
+    readonly facilitator: X402FacilitatorClient;
+}
+/** Decoded, still-untrusted `X-PAYMENT` payload plus the quote it answers. */
+export interface AcceptedX402Payment {
+    readonly payload: unknown;
+    readonly requirements: PaymentRequirements;
+    readonly payer?: string;
+    /**
+     * Unix seconds after which the signed authorization is no longer settleable
+     * (`validBefore`), when the payload carried one.
+     *
+     * The upstream runs BEFORE settlement, so an upstream slower than this window
+     * would produce its side effects and then fail to be paid for. The server
+     * bounds the upstream call by this instead of letting that happen.
+     */
+    readonly validBefore?: number;
+}
+export type X402EvaluationOutcome = {
+    readonly outcome: "payment-required";
+    readonly body: X402PaymentRequiredBody;
+} | {
+    readonly outcome: "accepted";
+    readonly payment: AcceptedX402Payment;
+};
+/**
+ * Evaluates the x402 half of a request. Returns either the `402` body to send or
+ * an accepted payment to settle after the upstream has been called.
+ */
+export declare function evaluateX402Request(request: {
+    readonly method: string;
+    readonly path: string;
+}, paymentHeader: string | undefined, mode: GatewayX402Mode): Promise<X402EvaluationOutcome>;
+/**
+ * Seconds of headroom the settlement leg needs after the upstream returns.
+ *
+ * The x402 `exact` verifier rejects an authorization whose `validBefore` is less
+ * than 6 s away, so an upstream allowed to run right up to the deadline would
+ * hand back a response that can never be settled. This leaves room for that
+ * check plus the settle round trip.
+ */
+export declare const X402_SETTLEMENT_HEADROOM_SECONDS = 10;
+export declare function decodePaymentHeader(header: string): unknown;
+export declare function encodeSettleResponseHeader(response: SettleResponse): string;
+//# sourceMappingURL=x402-mode.d.ts.map

package/dist/gateway/x402-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-mode.d.ts","sourceRoot":"","sources":["../../src/gateway/x402-mode.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC7B,MAAM,iCAAiC,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,kEAAkE;AAClE,eAAO,MAAM,mBAAmB,EAAG,WAAoB,CAAC;AAExD,gEAAgE;AAChE,eAAO,MAAM,4BAA4B,EAAG,oBAA6B,CAAC;AAE1E,8DAA8D;AAC9D,MAAM,WAAW,qBAAqB;IACpC,MAAM,CACJ,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,mBAAmB,GAChC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,MAAM,CACJ,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,mBAAmB,GAChC,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5B;AAED,MAAM,WAAW,4BAA4B;IAC3C,kEAAkE;IAClE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CAC1C;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,4BAA4B,GACpC,qBAAqB,CAgDvB;AAED,mEAAmE;AACnE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,KAAK,SAAS,mBAAmB,EAAE,GAAG,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC;AAE/E,MAAM,WAAW,yBAAyB;IACxC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,kFAAkF;IAClF,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,mFAAmF;IACnF,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAED,sEAAsE;AACtE,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,yBAAyB,GACjC,UAAU,CAkBZ;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;CAC7C;AAED,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,qBAAqB,GAC7B;IACE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;CACxC,GACD;IAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAE5E;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAC3D,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,qBAAqB,CAAC,CAqFhC;AAeD;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAmBnD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAQ3D;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAE3E"}

package/dist/gateway/x402-mode.js

@@ -0,0 +1,212 @@
+import { buildMetrikPaymentRequirements, buildX402PaymentRequiredBody, } from "../x402/payment-requirements.js";
+/**
+ * Standard x402 mode for the seller-side gateway (Tier 1).
+ *
+ * The gateway already authorizes requests that carry a Metrik
+ * `InvocationCapability` — a buyer with an open, funded, verified stream. That
+ * path is untouched. This module adds a SECOND, independent way in: a request
+ * with no capability gets an ordinary HTTP `402` carrying real x402
+ * `PaymentRequirements`, so an agent holding nothing but `x402-fetch` can pay
+ * per call without knowing Metrik exists.
+ *
+ * ## The two paths never overlap
+ *
+ * - capability header present -> stream path, exactly as before;
+ * - capability header absent, x402 mode on -> `402` + `PaymentRequirements`;
+ * - BOTH present -> rejected. A request that looks like both is ambiguous about
+ *   which one is paying for it, and the failure mode of guessing is charging the
+ *   caller twice for one call. Better a loud `400` than a silent double charge.
+ *
+ * ## The per-call price is the seller's, and is not signed
+ *
+ * `payTo` comes from the operator-signed descriptor (see
+ * `../x402/payment-requirements.ts`). The price does not — the descriptor has no
+ * per-call price field. It is the seller's own number on the seller's own
+ * gateway, which is legitimate, but a buyer cannot cross-check it against the
+ * registry the way they can cross-check the payee.
+ */
+/** Request header carrying the x402 payment payload (x402 v1). */
+export const X402_PAYMENT_HEADER = "x-payment";
+/** Response header carrying the settlement result (x402 v1). */
+export const X402_PAYMENT_RESPONSE_HEADER = "x-payment-response";
+/**
+ * Talks to any x402 facilitator over HTTP — including Metrik's own
+ * (`../x402/facilitator-server.ts`), which is the point: a seller who wires this
+ * gateway to the Metrik facilitator gets a paywall whose payments stop when
+ * their own delivery stops being verifiable.
+ */
+export function createHttpFacilitatorClient(options) {
+    const base = options.url.replace(/\/+$/, "");
+    const timeoutMs = options.timeoutMs ?? 10_000;
+    const doFetch = options.fetch ?? globalThis.fetch;
+    async function post(path, body) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        try {
+            const response = await doFetch(`${base}${path}`, {
+                method: "POST",
+                headers: {
+                    "content-type": "application/json",
+                    ...(options.token === undefined
+                        ? {}
+                        : { authorization: `Bearer ${options.token}` }),
+                    ...(options.headers ?? {}),
+                },
+                body: JSON.stringify(body),
+                signal: controller.signal,
+            });
+            return await response.json();
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    return {
+        async verify(payload, requirements) {
+            const result = (await post("/verify", {
+                x402Version: 1,
+                paymentPayload: payload,
+                paymentRequirements: requirements,
+            }));
+            // Fail closed: an unreadable facilitator answer is not a pass.
+            if (typeof result !== "object" || result === null) {
+                return { isValid: false, invalidReason: "unexpected_verify_error" };
+            }
+            return result;
+        },
+        async settle(payload, requirements) {
+            return (await post("/settle", {
+                x402Version: 1,
+                paymentPayload: payload,
+                paymentRequirements: requirements,
+            }));
+        },
+    };
+}
+/** One flat price per call, quoted against the request's own path. */
+export function createListingPriceQuoter(options) {
+    const base = new URL(options.resourceBaseUrl);
+    return (request) => [
+        buildMetrikPaymentRequirements({
+            listing: options.listing,
+            resource: new URL(request.path, base).toString(),
+            priceBaseUnits: options.pricePerCallBaseUnits,
+            chainId: options.chainId,
+            ...(options.description === undefined
+                ? {}
+                : { description: options.description }),
+            ...(options.mimeType === undefined ? {} : { mimeType: options.mimeType }),
+            ...(options.maxTimeoutSeconds === undefined
+                ? {}
+                : { maxTimeoutSeconds: options.maxTimeoutSeconds }),
+            ...(options.asset === undefined ? {} : { asset: options.asset }),
+        }),
+    ];
+}
+/**
+ * Evaluates the x402 half of a request. Returns either the `402` body to send or
+ * an accepted payment to settle after the upstream has been called.
+ */
+export async function evaluateX402Request(request, paymentHeader, mode) {
+    const accepts = await mode.quote(request);
+    if (paymentHeader === undefined || paymentHeader.trim().length === 0) {
+        return {
+            outcome: "payment-required",
+            body: buildX402PaymentRequiredBody(accepts),
+        };
+    }
+    const payload = decodePaymentHeader(paymentHeader);
+    if (payload === undefined) {
+        return {
+            outcome: "payment-required",
+            body: buildX402PaymentRequiredBody(accepts, "X-PAYMENT header is not base64-encoded JSON"),
+        };
+    }
+    const requirements = selectRequirements(accepts, payload);
+    if (requirements === undefined) {
+        return {
+            outcome: "payment-required",
+            body: buildX402PaymentRequiredBody(accepts, "X-PAYMENT does not match any offered payment requirements"),
+        };
+    }
+    let verified;
+    try {
+        verified = await mode.facilitator.verify(payload, requirements);
+    }
+    catch (error) {
+        // An unreachable facilitator is a refusal, never a free call.
+        return {
+            outcome: "payment-required",
+            body: buildX402PaymentRequiredBody(accepts, `payment could not be verified: ${error instanceof Error ? error.message : "facilitator unreachable"}`),
+        };
+    }
+    if (!verified.isValid) {
+        return {
+            outcome: "payment-required",
+            body: buildX402PaymentRequiredBody(accepts, verified.invalidReason ?? "payment rejected by facilitator"),
+        };
+    }
+    // A Metrik facilitator reports up front whether it would actually broadcast
+    // this payment (asset allowlist, settlement scope, ...). Refusing HERE — before
+    // the upstream runs — is the difference between "the caller gets nothing" and
+    // "the caller gets the upstream's side effects for free and we cannot charge
+    // for them". A non-Metrik facilitator omits the field and nothing changes.
+    const annotation = verified.metrik;
+    if (annotation?.settleable === false) {
+        return {
+            outcome: "payment-required",
+            body: buildX402PaymentRequiredBody(accepts, `facilitator will not settle this payment: ${annotation.detail ?? "refused"}`),
+        };
+    }
+    const validBefore = readValidBefore(payload);
+    return {
+        outcome: "accepted",
+        payment: {
+            payload,
+            requirements,
+            ...(verified.payer === undefined ? {} : { payer: verified.payer }),
+            ...(validBefore === undefined ? {} : { validBefore }),
+        },
+    };
+}
+/** Reads the exact-EVM authorization deadline, if the payload has one. */
+function readValidBefore(payload) {
+    const authorization = payload?.payload?.authorization;
+    const raw = authorization?.validBefore;
+    if (typeof raw !== "string" && typeof raw !== "number") {
+        return undefined;
+    }
+    const parsed = Number(raw);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined;
+}
+/**
+ * Seconds of headroom the settlement leg needs after the upstream returns.
+ *
+ * The x402 `exact` verifier rejects an authorization whose `validBefore` is less
+ * than 6 s away, so an upstream allowed to run right up to the deadline would
+ * hand back a response that can never be settled. This leaves room for that
+ * check plus the settle round trip.
+ */
+export const X402_SETTLEMENT_HEADROOM_SECONDS = 10;
+/** Matches the payload's scheme+network against the quotes actually offered. */
+function selectRequirements(accepts, payload) {
+    if (typeof payload !== "object" || payload === null) {
+        return undefined;
+    }
+    const { scheme, network } = payload;
+    return accepts.find((candidate) => candidate.scheme === scheme && candidate.network === network);
+}
+export function decodePaymentHeader(header) {
+    try {
+        const decoded = Buffer.from(header.trim(), "base64").toString("utf8");
+        const parsed = JSON.parse(decoded);
+        return typeof parsed === "object" && parsed !== null ? parsed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function encodeSettleResponseHeader(response) {
+    return Buffer.from(JSON.stringify(response), "utf8").toString("base64");
+}
+//# sourceMappingURL=x402-mode.js.map

package/dist/gateway/x402-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-mode.js","sourceRoot":"","sources":["../../src/gateway/x402-mode.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,GAI7B,MAAM,iCAAiC,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,kEAAkE;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAoB,CAAC;AAExD,gEAAgE;AAChE,MAAM,CAAC,MAAM,4BAA4B,GAAG,oBAA6B,CAAC;AA4B1E;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAqC;IAErC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAElD,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,IAAa;QAC7C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE;gBAC/C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;wBAC7B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;oBACjD,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;iBAC3B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY;YAChC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE;gBACpC,WAAW,EAAE,CAAC;gBACd,cAAc,EAAE,OAAO;gBACvB,mBAAmB,EAAE,YAAY;aAClC,CAAC,CAAmB,CAAC;YACtB,+DAA+D;YAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,yBAAyB,EAAE,CAAC;YACtE,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY;YAChC,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE;gBAC5B,WAAW,EAAE,CAAC;gBACd,cAAc,EAAE,OAAO;gBACvB,mBAAmB,EAAE,YAAY;aAClC,CAAC,CAAmB,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC;AAsBD,sEAAsE;AACtE,MAAM,UAAU,wBAAwB,CACtC,OAAkC;IAElC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9C,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAClB,8BAA8B,CAAC;YAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE;YAChD,cAAc,EAAE,OAAO,CAAC,qBAAqB;YAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS;gBACnC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;YACzC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACrD,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SACjE,CAAC;KACH,CAAC;AACJ,CAAC;AA8BD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA2D,EAC3D,aAAiC,EACjC,IAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrE,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,4BAA4B,CAAC,OAAO,CAAC;SAC5C,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,4BAA4B,CAChC,OAAO,EACP,6CAA6C,CAC9C;SACF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,4BAA4B,CAChC,OAAO,EACP,2DAA2D,CAC5D;SACF,CAAC;IACJ,CAAC;IAED,IAAI,QAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,8DAA8D;QAC9D,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,4BAA4B,CAChC,OAAO,EACP,kCACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAC3C,EAAE,CACH;SACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,4BAA4B,CAChC,OAAO,EACP,QAAQ,CAAC,aAAa,IAAI,iCAAiC,CAC5D;SACF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,gFAAgF;IAChF,8EAA8E;IAC9E,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,UAAU,GACd,QACD,CAAC,MAAM,CAAC;IACT,IAAI,UAAU,EAAE,UAAU,KAAK,KAAK,EAAE,CAAC;QACrC,OAAO;YACL,OAAO,EAAE,kBAAkB;YAC3B,IAAI,EAAE,4BAA4B,CAChC,OAAO,EACP,6CAA6C,UAAU,CAAC,MAAM,IAAI,SAAS,EAAE,CAC9E;SACF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAE7C,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,OAAO,EAAE;YACP,OAAO;YACP,YAAY;YACZ,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;SACtD;KACF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,aAAa,GACjB,OACD,EAAE,OAAO,EAAE,aAAa,CAAC;IAC1B,MAAM,GAAG,GAAG,aAAa,EAAE,WAAW,CAAC;IACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,CAAC;AAEnD,gFAAgF;AAChF,SAAS,kBAAkB,CACzB,OAAuC,EACvC,OAAgB;IAEhB,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAG3B,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,IAAI,SAAS,CAAC,OAAO,KAAK,OAAO,CAC5E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAwB;IACjE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC1E,CAAC"}

package/dist/index.d.ts

@@ -1,8 +1,10 @@
 export { createSpendMandateTypedData, spendMandateSchema, signedSpendMandateSchema, checkMandate, checkMandatePolicy, verifySignedMandate, verifyMandateOwnerSignature, spendMandateDomain, spendMandateTypedData, type SpendMandate, type SignedSpendMandate, type HireRequest, type MandateDecision, type MandateVerificationContext, } from "./mandates/mandate.js";
 export { DEFAULT_SERVER_MANDATE_TTL_SECONDS, ServerMandateConfigError, parseServerMandateCapsEnv, signServerMandate, type ServerMandateCaps, type SignServerMandateOptions, } from "./mandates/env.js";
-export { VerifiedStreamX402Facilitator, DeliveryProofUnavailableError, X402PayloadError, X402SpendControlUnavailableError, SettlementTargetMismatchError, X402_SCHEME, encodeX402PayloadHeader, parseX402ChallengeJson, parseX402PayloadHeader, verifiedStreamRequirementsSchema, x402StreamChallengeSchema, x402OpenPayloadSchema, type X402ConsumedHttpsResponseProofInput, type X402Facilitator, type X402OpenPayload, type X402StreamChallenge, type VerifiedStreamFacilitatorOptions, type VerifiedStreamRequirements, } from "./x402/facilitator.js";
+export { METRIK_PAYMENT_HEADER, METRIK_STREAM_SCHEME, VerifiedStreamFacilitator, DeliveryProofUnavailableError, SettlementTargetMismatchError, SpendControlUnavailableError, StreamPayloadError, encodeStreamPayloadHeader, parseStreamChallengeJson, parseStreamPayloadHeader, streamChallengeSchema, streamOpenPayloadSchema, verifiedStreamRequirementsSchema, type ConsumedHttpsResponseProofInput, type StreamChallenge, type StreamFacilitator, type StreamOpenPayload, type VerifiedStreamFacilitatorOptions, type VerifiedStreamRequirements, } from "./x402/facilitator.js";
+export { VerifiedStreamX402Facilitator, X402PayloadError, X402SpendControlUnavailableError, X402_SCHEME, encodeX402PayloadHeader, parseX402ChallengeJson, parseX402PayloadHeader, x402StreamChallengeSchema, x402OpenPayloadSchema, type X402ConsumedHttpsResponseProofInput, type X402Facilitator, type X402OpenPayload, type X402StreamChallenge, } from "./x402/facilitator.js";
 export { DEFAULT_METRIK_PUBLIC_REGISTRY_URL, DEFAULT_METRIK_REGISTRY_URL, DEMO_SEED_LISTING, DEMO_SEED_SERVICE_REF, LIVE_DATA_SEED_LISTING, LIVE_DATA_SEED_SERVICE_REF, RegistryUnavailableError, discoverServices, discoverServicesDetailed, type DiscoverResult, type DiscoverServicesOptions, type DiscoveredService, type ServiceListing, } from "./discovery/registry.js";
-export { METRIK_MCP_TOOLS, STREAMPROOF_MCP_TOOLS, FileStreamRegistry, InMemoryStreamRegistry, createVerifiedStreamMcpServer, createVerifiedStreamMcpServerFromEnv, createVerifiedStreamMcpServerOptionsFromEnv, parseMetrikAgentEnv, startVerifiedStreamMcpServerStdio, type McpToolSpec, type ParsedMetrikAgentEnv, type StoredStreamRecord, type StreamRegistry, type VerifiedStreamMcpClient, type VerifiedStreamMcpServerOptions, type VerifiedStreamMcpServerRuntime, } from "./mcp/server.js";
+export { ALLOW_UNVERIFIED_OPERATOR_ENV, METERING_MODEL, METRIK_MCP_TOOLS, STREAMPROOF_MCP_TOOLS, FileStreamRegistry, InMemoryStreamRegistry, createVerifiedStreamMcpServer, createVerifiedStreamMcpServerFromEnv, createVerifiedStreamMcpServerOptionsFromEnv, parseMetrikAgentEnv, startVerifiedStreamMcpServerStdio, type EscrowGeneration, type McpToolSpec, type ParsedMetrikAgentEnv, type StoredStreamRecord, type StreamRegistry, type VerifiedStreamMcpClient, type VerifiedStreamMcpServerOptions, type VerifiedStreamMcpServerRuntime, } from "./mcp/server.js";
+export { MAX_INVOCATION_RESPONSE_BYTES, ServiceListingNotFoundError, createServiceInvoker, type CreateServiceInvokerOptions, type ServiceInvocationRequest, type ServiceInvocationResult, type ServiceInvoker, } from "./mcp/service-invoker.js";
 export { StaticTenantResolver, createHostedMcpHttpServer, createHostedMcpTenants, parseHostedMcpServerConfig, startHostedMcpHttpServerFromEnv, type HostedMcpHttpServer, type HostedMcpHttpServerOptions, type HostedMcpServerConfig, type HostedMcpTenant, type HostedMcpTenantConfig, type TenantResolver, } from "./mcp/http.js";
 export { MandateDeniedError, VerifiedStreamAgentClient, type AgentSdkClient, type AgentSdkClientFactory, type MandateAuthorizedStreamActionInput, type OpenVerifiedStreamInput, type ReclaimAuthorizedStreamInput, type ReclaimVerifiedStreamOptions, type ReclaimVerifiedStreamResult, isCheckpointStream, type StreamStatusStream, type StreamStatusView, type VerifiedStreamAgentOpener, } from "./sdk/client.js";
 export { AgentWalletConfigError, createPrivyEmbeddedAccount, createWalletBackedAgentClient, parseAgentWalletEnv, PrivyEmbeddedWalletError, resolveAgentWallet, type AgentWalletInput, type CdpClientLike, type CdpWalletConfig, type PrivyEip1193Provider, type PrivyEmbeddedWalletConfig, type ResolvedAgentWallet, type WalletBackedAgentClient, } from "./wallet/provider.js";
@@ -14,8 +16,8 @@ export { AutonomousWalletBroker, AutonomousWalletBrokerError, InMemoryAutonomous
 export { UnsupportedFaucetChainError, faucetHint, getWalletBalances, requestCdpFaucet, type BalanceReader, type CdpFaucetClientLike, type FaucetHint, type FaucetRequestResult, type FaucetToken, type GetWalletBalancesOptions, type RequestCdpFaucetOptions, type WalletBalances, } from "./wallet/lifecycle.js";
 export { ReclaimConsumerProofService, ResponseProofUnavailableError, ResponseProofVerificationError, buildDeliveryContextEnvelopeV2, createReclaimConsumerProofServiceFromEnv, deliveryContextEnvelopeV2Schema, parseReclaimProofEnv, type ConsumerDeliveryProofService, type DeliveryContextEnvelopeV2, type DeliveryContextEnvelopeV2Input, type DeliveryProofBinding, type HttpsResponseMatch, type HttpsResponseRedaction, type ParsedReclaimProofEnv, type ProveConsumedHttpsResponseInput, type ReclaimClientLike, type ReclaimProof, type ReclaimProofServiceConfig, type VerifiedConsumedHttpsResponseProof, type VerifyProofFn, } from "./zktls/reclaim.js";
 export { NoDeliveryAttestorConfiguredError, PaidRouteNonceInjectionError, ReclaimDeliveryProofAttestor, buildT2DeliveryProofSubmission, createReclaimT2AttestorFromEnv, deliveryProofRequestBodySchema, toWireDeliveryReceipt, type BuildT2DeliveryProofInput, type BuildT2DeliveryProofResult, type DeliveryProofAttestor, type DeliveryProofRequestBody, type PaidRouteRequestSpec, type ProveDeliveryResponseInput, type T2NonceInjection, type WireDeliveryReceipt, } from "./zktls/t2-delivery-proof.js";
-export { CAPABILITY_HEADER_NAME, DEFAULT_CAPABILITY_TTL_SECONDS, InvalidCapabilityHeaderError, buildInvocationCapabilityTypedData, createInvocationCapabilityEip712Domain, decodeCapabilityHeader, encodeCapabilityHeader, generateCapabilityNonce, hashInvocationPath, httpMethodSchema, invocationCapabilityDomainName, invocationCapabilityDomainVersion, invocationCapabilitySchema, invocationCapabilityTypedData, normalizeInvocationPath, recoverInvocationCapabilitySigner, signInvocationCapability, signedInvocationCapabilitySchema, type HttpMethod, type InvocationCapability, type InvocationCapabilityDomainInput, type SignedInvocationCapability, } from "./capability/invocation-capability.js";
+export { CAPABILITY_HEADER_NAME, DEFAULT_CAPABILITY_TTL_SECONDS, InvalidCapabilityHeaderError, buildInvocationCapabilityTypedData, createInvocationCapabilityEip712Domain, decodeCapabilityHeader, encodeCapabilityHeader, generateCapabilityNonce, hashInvocationPath, httpMethodSchema, invocationCapabilityDomainName, invocationCapabilityDomainVersion, invocationCapabilitySchema, invocationCapabilityTypedData, normalizeInvocationPath, recoverInvocationCapabilitySigner, signInvocationCapability, signedInvocationCapabilitySchema, type HttpMethod, type InvocationCapability, type InvocationCapabilityDomainInput, type InvocationCapabilitySigner, type SignedInvocationCapability, } from "./capability/invocation-capability.js";
 export { CallerAuthGateway, DEFAULT_MAX_STATE_STALENESS_SECONDS, InMemoryNonceReplayCache, InMemoryStreamRevocationSet, MAX_CORROBORATING_STREAM_READERS, UnknownStreamGatewayError, createSdkStreamReader, type CallerAuthDecision, type CallerAuthDenialReason, type CallerAuthGatewayConfig, type CallerAuthRequestInput, type GatewayStreamView, type NonceReplayCache, type StreamReader, type StreamRevocationSet, } from "./gateway/caller-auth-gateway.js";
 export { createCallerAuthGatewayServer, parseCallerAuthGatewayEnvConfig, startCallerAuthGatewayServerFromEnv, type CallerAuthGatewayEnvConfig, type CallerAuthGatewayServer, type CallerAuthGatewayServerConfig, } from "./gateway/http-server.js";
-export { InvokeBuyerMismatchError, InvokeAccessUrlError, InvokePathError, InvokeServiceRefMismatchError, InvokeStreamExpiredError, InvokeStreamNotActiveError, capabilityFor, createSdkInvokeStreamReader, invoke, invokeWithT2DeliveryProof, type CapabilityForOptions, type InvokeOptions, type InvokeResult, type InvokeServiceInput, type InvokeStreamReader, type InvokeStreamView, type InvokeWithT2DeliveryProofOptions, type InvokeWithT2DeliveryProofResult, } from "./sdk/invoke.js";
+export { InvokeBuyerMismatchError, InvokeAccessUrlError, InvokePathError, resolveInvocationUrl, InvokeServiceRefMismatchError, InvokeStreamExpiredError, InvokeStreamNotActiveError, capabilityFor, createSdkInvokeStreamReader, invoke, invokeWithT2DeliveryProof, type CapabilityForOptions, type InvokeOptions, type InvokeResult, type InvokeServiceInput, type InvokeStreamReader, type InvokeStreamView, type InvokeWithT2DeliveryProofOptions, type InvokeWithT2DeliveryProofResult, } from "./sdk/invoke.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,GAC9B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,EAC7B,gBAAgB,EAChB,gCAAgC,EAChC,6BAA6B,EAC7B,WAAW,EACX,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,gCAAgC,EAChC,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,mCAAmC,EACxC,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,2BAA2B,EAC3B,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,cAAc,GACpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,6BAA6B,EAC7B,oCAAoC,EACpC,2CAA2C,EAC3C,mBAAmB,EACnB,iCAAiC,EACjC,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,GACpC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,+BAA+B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,kCAAkC,EACvC,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EACjC,KAAK,2BAA2B,EAChC,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,GAC/B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,6BAA6B,EAC7B,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,+BAA+B,EAC/B,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,iCAAiC,EACjC,0BAA0B,EAC1B,2BAA2B,EAC3B,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,GAC7B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,KAAK,0BAA0B,GAChC,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,kCAAkC,EAClC,yBAAyB,EACzB,mCAAmC,EACnC,gCAAgC,EAChC,2BAA2B,EAC3B,qBAAqB,EACrB,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,8BAA8B,EAC9B,kCAAkC,EAClC,2BAA2B,EAC3B,yBAAyB,EACzB,+BAA+B,EAC/B,KAAK,mCAAmC,EACxC,KAAK,sBAAsB,IAAI,4BAA4B,EAC3D,KAAK,+BAA+B,EACpC,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,qCAAqC,EAC1C,KAAK,yBAAyB,EAC9B,KAAK,+BAA+B,EACpC,KAAK,mCAAmC,EACxC,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,gCAAgC,EACrC,KAAK,sCAAsC,EAC3C,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,wBAAwB,GAC9B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,mCAAmC,EACnC,6BAA6B,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,GAC/B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EACL,2BAA2B,EAC3B,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,cAAc,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,8BAA8B,EAC9B,wCAAwC,EACxC,+BAA+B,EAC/B,oBAAoB,EACpB,KAAK,4BAA4B,EACjC,KAAK,yBAAyB,EAC9B,KAAK,8BAA8B,EACnC,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,+BAA+B,EACpC,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAC9B,KAAK,kCAAkC,EACvC,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,iCAAiC,EACjC,4BAA4B,EAC5B,4BAA4B,EAC5B,8BAA8B,EAC9B,8BAA8B,EAC9B,8BAA8B,EAC9B,qBAAqB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,sBAAsB,EACtB,8BAA8B,EAC9B,4BAA4B,EAC5B,kCAAkC,EAClC,sCAAsC,EACtC,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,8BAA8B,EAC9B,iCAAiC,EACjC,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,iCAAiC,EACjC,wBAAwB,EACxB,gCAAgC,EAChC,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,KAAK,+BAA+B,EACpC,KAAK,0BAA0B,GAChC,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EACL,iBAAiB,EACjB,mCAAmC,EACnC,wBAAwB,EACxB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,mBAAmB,GACzB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,GACnC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,6BAA6B,EAC7B,wBAAwB,EACxB,0BAA0B,EAC1B,aAAa,EACb,2BAA2B,EAC3B,MAAM,EACN,yBAAyB,EACzB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,gCAAgC,EACrC,KAAK,+BAA+B,GACrC,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,GAC9B,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,EAC7B,4BAA4B,EAC5B,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,gCAAgC,EAChC,KAAK,+BAA+B,EACpC,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EACL,6BAA6B,EAC7B,gBAAgB,EAChB,gCAAgC,EAChC,WAAW,EACX,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,mCAAmC,EACxC,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,mBAAmB,GACzB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,2BAA2B,EAC3B,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,cAAc,GACpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,6BAA6B,EAC7B,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,6BAA6B,EAC7B,oCAAoC,EACpC,2CAA2C,EAC3C,mBAAmB,EACnB,iCAAiC,EACjC,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,GACpC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,EAC3B,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,cAAc,GACpB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,+BAA+B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,kCAAkC,EACvC,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EACjC,KAAK,2BAA2B,EAChC,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,GAC/B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,6BAA6B,EAC7B,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,+BAA+B,EAC/B,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,iCAAiC,EACjC,0BAA0B,EAC1B,2BAA2B,EAC3B,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,GAC7B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,KAAK,0BAA0B,GAChC,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,kCAAkC,EAClC,yBAAyB,EACzB,mCAAmC,EACnC,gCAAgC,EAChC,2BAA2B,EAC3B,qBAAqB,EACrB,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,8BAA8B,EAC9B,kCAAkC,EAClC,2BAA2B,EAC3B,yBAAyB,EACzB,+BAA+B,EAC/B,KAAK,mCAAmC,EACxC,KAAK,sBAAsB,IAAI,4BAA4B,EAC3D,KAAK,+BAA+B,EACpC,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,qCAAqC,EAC1C,KAAK,yBAAyB,EAC9B,KAAK,+BAA+B,EACpC,KAAK,mCAAmC,EACxC,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,gCAAgC,EACrC,KAAK,sCAAsC,EAC3C,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,wBAAwB,GAC9B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,mCAAmC,EACnC,6BAA6B,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,GAC/B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EACL,2BAA2B,EAC3B,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,cAAc,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,8BAA8B,EAC9B,wCAAwC,EACxC,+BAA+B,EAC/B,oBAAoB,EACpB,KAAK,4BAA4B,EACjC,KAAK,yBAAyB,EAC9B,KAAK,8BAA8B,EACnC,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,+BAA+B,EACpC,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,yBAAyB,EAC9B,KAAK,kCAAkC,EACvC,KAAK,aAAa,GACnB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,iCAAiC,EACjC,4BAA4B,EAC5B,4BAA4B,EAC5B,8BAA8B,EAC9B,8BAA8B,EAC9B,8BAA8B,EAC9B,qBAAqB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,sBAAsB,EACtB,8BAA8B,EAC9B,4BAA4B,EAC5B,kCAAkC,EAClC,sCAAsC,EACtC,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,8BAA8B,EAC9B,iCAAiC,EACjC,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,iCAAiC,EACjC,wBAAwB,EACxB,gCAAgC,EAChC,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,KAAK,+BAA+B,EACpC,KAAK,0BAA0B,EAC/B,KAAK,0BAA0B,GAChC,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EACL,iBAAiB,EACjB,mCAAmC,EACnC,wBAAwB,EACxB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,mBAAmB,GACzB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,GACnC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,6BAA6B,EAC7B,wBAAwB,EACxB,0BAA0B,EAC1B,aAAa,EACb,2BAA2B,EAC3B,MAAM,EACN,yBAAyB,EACzB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,gCAAgC,EACrC,KAAK,+BAA+B,GACrC,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -1,8 +1,13 @@
 export { createSpendMandateTypedData, spendMandateSchema, signedSpendMandateSchema, checkMandate, checkMandatePolicy, verifySignedMandate, verifyMandateOwnerSignature, spendMandateDomain, spendMandateTypedData, } from "./mandates/mandate.js";
 export { DEFAULT_SERVER_MANDATE_TTL_SECONDS, ServerMandateConfigError, parseServerMandateCapsEnv, signServerMandate, } from "./mandates/env.js";
-export { VerifiedStreamX402Facilitator, DeliveryProofUnavailableError, X402PayloadError, X402SpendControlUnavailableError, SettlementTargetMismatchError, X402_SCHEME, encodeX402PayloadHeader, parseX402ChallengeJson, parseX402PayloadHeader, verifiedStreamRequirementsSchema, x402StreamChallengeSchema, x402OpenPayloadSchema, } from "./x402/facilitator.js";
+// Metrik-native 402 challenge flow. NOT the x402 protocol — see docs/x402.md.
+export { METRIK_PAYMENT_HEADER, METRIK_STREAM_SCHEME, VerifiedStreamFacilitator, DeliveryProofUnavailableError, SettlementTargetMismatchError, SpendControlUnavailableError, StreamPayloadError, encodeStreamPayloadHeader, parseStreamChallengeJson, parseStreamPayloadHeader, streamChallengeSchema, streamOpenPayloadSchema, verifiedStreamRequirementsSchema, } from "./x402/facilitator.js";
+// Deprecated `x402`-flavoured aliases of the exports above, kept for
+// compatibility. Same values and same class objects — prefer the names above.
+export { VerifiedStreamX402Facilitator, X402PayloadError, X402SpendControlUnavailableError, X402_SCHEME, encodeX402PayloadHeader, parseX402ChallengeJson, parseX402PayloadHeader, x402StreamChallengeSchema, x402OpenPayloadSchema, } from "./x402/facilitator.js";
 export { DEFAULT_METRIK_PUBLIC_REGISTRY_URL, DEFAULT_METRIK_REGISTRY_URL, DEMO_SEED_LISTING, DEMO_SEED_SERVICE_REF, LIVE_DATA_SEED_LISTING, LIVE_DATA_SEED_SERVICE_REF, RegistryUnavailableError, discoverServices, discoverServicesDetailed, } from "./discovery/registry.js";
-export { METRIK_MCP_TOOLS, STREAMPROOF_MCP_TOOLS, FileStreamRegistry, InMemoryStreamRegistry, createVerifiedStreamMcpServer, createVerifiedStreamMcpServerFromEnv, createVerifiedStreamMcpServerOptionsFromEnv, parseMetrikAgentEnv, startVerifiedStreamMcpServerStdio, } from "./mcp/server.js";
+export { ALLOW_UNVERIFIED_OPERATOR_ENV, METERING_MODEL, METRIK_MCP_TOOLS, STREAMPROOF_MCP_TOOLS, FileStreamRegistry, InMemoryStreamRegistry, createVerifiedStreamMcpServer, createVerifiedStreamMcpServerFromEnv, createVerifiedStreamMcpServerOptionsFromEnv, parseMetrikAgentEnv, startVerifiedStreamMcpServerStdio, } from "./mcp/server.js";
+export { MAX_INVOCATION_RESPONSE_BYTES, ServiceListingNotFoundError, createServiceInvoker, } from "./mcp/service-invoker.js";
 export { StaticTenantResolver, createHostedMcpHttpServer, createHostedMcpTenants, parseHostedMcpServerConfig, startHostedMcpHttpServerFromEnv, } from "./mcp/http.js";
 export { MandateDeniedError, VerifiedStreamAgentClient, isCheckpointStream, } from "./sdk/client.js";
 export { AgentWalletConfigError, createPrivyEmbeddedAccount, createWalletBackedAgentClient, parseAgentWalletEnv, PrivyEmbeddedWalletError, resolveAgentWallet, } from "./wallet/provider.js";
@@ -17,7 +22,7 @@ export { NoDeliveryAttestorConfiguredError, PaidRouteNonceInjectionError, Reclai
 export { CAPABILITY_HEADER_NAME, DEFAULT_CAPABILITY_TTL_SECONDS, InvalidCapabilityHeaderError, buildInvocationCapabilityTypedData, createInvocationCapabilityEip712Domain, decodeCapabilityHeader, encodeCapabilityHeader, generateCapabilityNonce, hashInvocationPath, httpMethodSchema, invocationCapabilityDomainName, invocationCapabilityDomainVersion, invocationCapabilitySchema, invocationCapabilityTypedData, normalizeInvocationPath, recoverInvocationCapabilitySigner, signInvocationCapability, signedInvocationCapabilitySchema, } from "./capability/invocation-capability.js";
 export { CallerAuthGateway, DEFAULT_MAX_STATE_STALENESS_SECONDS, InMemoryNonceReplayCache, InMemoryStreamRevocationSet, MAX_CORROBORATING_STREAM_READERS, UnknownStreamGatewayError, createSdkStreamReader, } from "./gateway/caller-auth-gateway.js";
 export { createCallerAuthGatewayServer, parseCallerAuthGatewayEnvConfig, startCallerAuthGatewayServerFromEnv, } from "./gateway/http-server.js";
-export { InvokeBuyerMismatchError, InvokeAccessUrlError, InvokePathError, InvokeServiceRefMismatchError, InvokeStreamExpiredError, InvokeStreamNotActiveError, capabilityFor, createSdkInvokeStreamReader, invoke, invokeWithT2DeliveryProof, } from "./sdk/invoke.js";
+export { InvokeBuyerMismatchError, InvokeAccessUrlError, InvokePathError, resolveInvocationUrl, InvokeServiceRefMismatchError, InvokeStreamExpiredError, InvokeStreamNotActiveError, capabilityFor, createSdkInvokeStreamReader, invoke, invokeWithT2DeliveryProof, } from "./sdk/invoke.js";
 // Framework adapters are NOT re-exported from this top-level barrel on purpose.
 // Some of them (notably the Coinbase AgentKit adapter) pull heavy optional
 // dependency graphs, so importing "@absol-labs/agent" must stay light and load

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,GAMtB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,GAGlB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,EAC7B,gBAAgB,EAChB,gCAAgC,EAChC,6BAA6B,EAC7B,WAAW,EACX,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,gCAAgC,EAChC,yBAAyB,EACzB,qBAAqB,GAOtB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,2BAA2B,EAC3B,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,GAKzB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,6BAA6B,EAC7B,oCAAoC,EACpC,2CAA2C,EAC3C,mBAAmB,EACnB,iCAAiC,GAQlC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,+BAA+B,GAOhC,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EAQzB,kBAAkB,GAInB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,6BAA6B,EAC7B,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,GAQnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,+BAA+B,EAC/B,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,iCAAiC,EACjC,0BAA0B,EAC1B,2BAA2B,EAC3B,kBAAkB,EAClB,uBAAuB,GAOxB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,GAE1B,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,kCAAkC,EAClC,yBAAyB,EACzB,mCAAmC,EACnC,gCAAgC,EAChC,2BAA2B,EAC3B,qBAAqB,EACrB,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,8BAA8B,EAC9B,kCAAkC,EAClC,2BAA2B,EAC3B,yBAAyB,EACzB,+BAA+B,GAkBhC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,mCAAmC,EACnC,6BAA6B,GAM9B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EACL,2BAA2B,EAC3B,UAAU,EACV,iBAAiB,EACjB,gBAAgB,GASjB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,8BAA8B,EAC9B,wCAAwC,EACxC,+BAA+B,EAC/B,oBAAoB,GAcrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,iCAAiC,EACjC,4BAA4B,EAC5B,4BAA4B,EAC5B,8BAA8B,EAC9B,8BAA8B,EAC9B,8BAA8B,EAC9B,qBAAqB,GAStB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,sBAAsB,EACtB,8BAA8B,EAC9B,4BAA4B,EAC5B,kCAAkC,EAClC,sCAAsC,EACtC,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,8BAA8B,EAC9B,iCAAiC,EACjC,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,iCAAiC,EACjC,wBAAwB,EACxB,gCAAgC,GAKjC,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EACL,iBAAiB,EACjB,mCAAmC,EACnC,wBAAwB,EACxB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,qBAAqB,GAStB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,GAIpC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,6BAA6B,EAC7B,wBAAwB,EACxB,0BAA0B,EAC1B,aAAa,EACb,2BAA2B,EAC3B,MAAM,EACN,yBAAyB,GAS1B,MAAM,iBAAiB,CAAC;AAEzB,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA+E;AAC/E,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,uEAAuE;AACvE,iEAAiE;AACjE,sFAAsF;AACtF,oFAAoF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,wBAAwB,EACxB,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,GAMtB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,GAGlB,MAAM,mBAAmB,CAAC;AAE3B,8EAA8E;AAC9E,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,EAC7B,4BAA4B,EAC5B,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,gCAAgC,GAOjC,MAAM,uBAAuB,CAAC;AAE/B,qEAAqE;AACrE,8EAA8E;AAC9E,OAAO,EACL,6BAA6B,EAC7B,gBAAgB,EAChB,gCAAgC,EAChC,WAAW,EACX,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,GAKtB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,2BAA2B,EAC3B,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,GAKzB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,6BAA6B,EAC7B,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,6BAA6B,EAC7B,oCAAoC,EACpC,2CAA2C,EAC3C,mBAAmB,EACnB,iCAAiC,GASlC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,EAC3B,oBAAoB,GAKrB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,+BAA+B,GAOhC,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EAQzB,kBAAkB,GAInB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,6BAA6B,EAC7B,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,GAQnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,+BAA+B,EAC/B,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,iCAAiC,EACjC,0BAA0B,EAC1B,2BAA2B,EAC3B,kBAAkB,EAClB,uBAAuB,GAOxB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,GAE1B,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,kCAAkC,EAClC,yBAAyB,EACzB,mCAAmC,EACnC,gCAAgC,EAChC,2BAA2B,EAC3B,qBAAqB,EACrB,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,EACpB,6BAA6B,EAC7B,8BAA8B,EAC9B,kCAAkC,EAClC,2BAA2B,EAC3B,yBAAyB,EACzB,+BAA+B,GAkBhC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,mCAAmC,EACnC,6BAA6B,GAM9B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EACL,2BAA2B,EAC3B,UAAU,EACV,iBAAiB,EACjB,gBAAgB,GASjB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,8BAA8B,EAC9B,wCAAwC,EACxC,+BAA+B,EAC/B,oBAAoB,GAcrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,iCAAiC,EACjC,4BAA4B,EAC5B,4BAA4B,EAC5B,8BAA8B,EAC9B,8BAA8B,EAC9B,8BAA8B,EAC9B,qBAAqB,GAStB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,sBAAsB,EACtB,8BAA8B,EAC9B,4BAA4B,EAC5B,kCAAkC,EAClC,sCAAsC,EACtC,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,8BAA8B,EAC9B,iCAAiC,EACjC,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,iCAAiC,EACjC,wBAAwB,EACxB,gCAAgC,GAMjC,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EACL,iBAAiB,EACjB,mCAAmC,EACnC,wBAAwB,EACxB,2BAA2B,EAC3B,gCAAgC,EAChC,yBAAyB,EACzB,qBAAqB,GAStB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,GAIpC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,6BAA6B,EAC7B,wBAAwB,EACxB,0BAA0B,EAC1B,aAAa,EACb,2BAA2B,EAC3B,MAAM,EACN,yBAAyB,GAS1B,MAAM,iBAAiB,CAAC;AAEzB,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA+E;AAC/E,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,uEAAuE;AACvE,iEAAiE;AACjE,sFAAsF;AACtF,oFAAoF"}

package/dist/mandates/env.d.ts

@@ -3,8 +3,9 @@ import { type SignedSpendMandate } from "./mandate.js";
 /**
  * Server-side spend-mandate provisioning.
  *
- * The MCP/x402 fund-moving surface is driven by autonomous callers (an LLM over
- * MCP, a paying agent over x402) that CANNOT produce an EIP-712 signature. The
+ * The MCP / Metrik-402 fund-moving surface is driven by autonomous callers (an
+ * LLM over MCP, a paying agent driving Metrik's own `402` challenge flow — not
+ * the x402 protocol, see docs/x402.md) that CANNOT produce an EIP-712 signature. The
  * spend mandate is therefore NOT a per-call argument — it is configured once, at
  * the server's construction, exactly like the AgentKit action provider's
  * `signedMandate`. The deploying operator declares the spend caps via env and the

package/dist/mandates/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/mandates/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,OAAO,EACb,MAAM,MAAM,CAAC;AAGd,OAAO,EAGL,KAAK,kBAAkB,EAExB,MAAM,cAAc,CAAC;AAEtB;;;;;;;;;;;;;;GAcG;AAEH,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI5B;AAmBD,iFAAiF;AACjF,eAAO,MAAM,kCAAkC,QAAe,CAAC;AAE/D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,KAAK,MAAM,EAAE,EAAE,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,iBAAiB,GAAG,IAAI,CA4D1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AA2BD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,kBAAkB,CAAC,CAyC7B"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/mandates/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,OAAO,EACb,MAAM,MAAM,CAAC;AAGd,OAAO,EAGL,KAAK,kBAAkB,EAExB,MAAM,cAAc,CAAC;AAEtB;;;;;;;;;;;;;;;GAeG;AAEH,qBAAa,wBAAyB,SAAQ,KAAK;gBACrC,OAAO,EAAE,MAAM;CAI5B;AAmBD,iFAAiF;AACjF,eAAO,MAAM,kCAAkC,QAAe,CAAC;AAE/D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,KAAK,MAAM,EAAE,EAAE,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,iBAAiB,GAAG,IAAI,CA4D1B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AA2BD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,iBAAiB,EACvB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,kBAAkB,CAAC,CAyC7B"}

package/dist/mandates/env.js

@@ -4,8 +4,9 @@ import { createSpendMandateTypedData, signedSpendMandateSchema, } from "./mandat
 /**
  * Server-side spend-mandate provisioning.
  *
- * The MCP/x402 fund-moving surface is driven by autonomous callers (an LLM over
- * MCP, a paying agent over x402) that CANNOT produce an EIP-712 signature. The
+ * The MCP / Metrik-402 fund-moving surface is driven by autonomous callers (an
+ * LLM over MCP, a paying agent driving Metrik's own `402` challenge flow — not
+ * the x402 protocol, see docs/x402.md) that CANNOT produce an EIP-712 signature. The
  * spend mandate is therefore NOT a per-call argument — it is configured once, at
  * the server's construction, exactly like the AgentKit action provider's
  * `signedMandate`. The deploying operator declares the spend caps via env and the

package/dist/mandates/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/mandates/env.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,WAAW,GAEZ,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,GAGzB,MAAM,cAAc,CAAC;AAEtB;;;;;;;;;;;;;;GAcG;AAEH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,MAAM,mBAAmB,GAAG,CAAC;KAC1B,MAAM,EAAE;KACR,KAAK,CACJ,gBAAgB,EAChB,kEAAkE,CACnE,CAAC;AACJ,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;AAE7D,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,wCAAwC,EAAE,mBAAmB;IAC7D,mCAAmC,EAAE,mBAAmB;IACxD,6CAA6C,EAAE,mBAAmB;IAClE,yCAAyC,EAAE,iBAAiB;IAC5D,sCAAsC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7D,gCAAgC,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAW/D;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,wCAAwC;QAC5C,GAAG,CAAC,mCAAmC;QACvC,GAAG,CAAC,6CAA6C;QACjD,GAAG,CAAC,yCAAyC;QAC7C,GAAG,CAAC,sCAAsC;QAC1C,GAAG,CAAC,gCAAgC;KACrC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,wBAAwB,CAChC,yCAAyC,MAAM,CAAC,KAAK,CAAC,MAAM;aACzD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;aAC1D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,CACvB,MAAM,CAAC,IAAI,CAAC,sCAAsC,IAAI,EAAE,CACzD;SACE,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,wBAAwB,CAChC,wEAAwE,QAAQ,EAAE,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,MAAM,CAC7B,MAAM,CAAC,IAAI,CAAC,wCAAwC,CACrD,CAAC;IACF,IAAI,gBAAgB,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,wBAAwB,CAChC,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,gBAAgB;QAChB,YAAY;QACZ,oBAAoB,EAAE,MAAM,CAC1B,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAC1D;QACD,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,yCAAyC;QACzE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CACpC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAkB,CACpD;QACD,UAAU,EACR,MAAM,CAAC,IAAI,CAAC,gCAAgC;YAC5C,kCAAkC;KACrC,CAAC;AACJ,CAAC;AAQD;;;;GAIG;AACH,SAAS,eAAe,CACtB,KAAoB,EACpB,OAAqB,EACrB,OAAe,EACf,QAAgB;IAEhB,MAAM,SAAS,GAAG;QAChB,KAAK,CAAC,WAAW,EAAE;QACnB,OAAO;QACP,QAAQ;QACR,OAAO,CAAC,SAAS;QACjB,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE;QACnC,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE;QAC/B,OAAO,CAAC,oBAAoB,CAAC,QAAQ,EAAE;QACvC,OAAO,CAAC,kBAAkB;QAC1B,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;KACzE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,OAAO,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB,EAChB,IAAuB,EACvB,OAAiC;IAEjC,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,wBAAwB,CAChC,mFAAmF,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAkB,CAAC;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC;IAE7C,MAAM,OAAO,GAAiB;QAC5B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;QAC/C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;YAClC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,SAAS;KACV,CAAC;IAEF,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,2BAA2B,CAAC;QAC5C,SAAS;QACT,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ;QACR,OAAO;KACR,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAEzD,OAAO,wBAAwB,CAAC,KAAK,CAAC;QACpC,SAAS;QACT,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ;QACR,OAAO;QACP,SAAS;KACV,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/mandates/env.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,WAAW,GAEZ,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,GAGzB,MAAM,cAAc,CAAC;AAEtB;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,MAAM,mBAAmB,GAAG,CAAC;KAC1B,MAAM,EAAE;KACR,KAAK,CACJ,gBAAgB,EAChB,kEAAkE,CACnE,CAAC;AACJ,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;AAE7D,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,wCAAwC,EAAE,mBAAmB;IAC7D,mCAAmC,EAAE,mBAAmB;IACxD,6CAA6C,EAAE,mBAAmB;IAClE,yCAAyC,EAAE,iBAAiB;IAC5D,sCAAsC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7D,gCAAgC,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAW/D;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,wCAAwC;QAC5C,GAAG,CAAC,mCAAmC;QACvC,GAAG,CAAC,6CAA6C;QACjD,GAAG,CAAC,yCAAyC;QAC7C,GAAG,CAAC,sCAAsC;QAC1C,GAAG,CAAC,gCAAgC;KACrC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,wBAAwB,CAChC,yCAAyC,MAAM,CAAC,KAAK,CAAC,MAAM;aACzD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;aAC1D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,CACvB,MAAM,CAAC,IAAI,CAAC,sCAAsC,IAAI,EAAE,CACzD;SACE,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,wBAAwB,CAChC,wEAAwE,QAAQ,EAAE,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,MAAM,CAC7B,MAAM,CAAC,IAAI,CAAC,wCAAwC,CACrD,CAAC;IACF,IAAI,gBAAgB,GAAG,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,wBAAwB,CAChC,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,gBAAgB;QAChB,YAAY;QACZ,oBAAoB,EAAE,MAAM,CAC1B,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAC1D;QACD,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,yCAAyC;QACzE,gBAAgB,EAAE,gBAAgB,CAAC,GAAG,CACpC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAkB,CACpD;QACD,UAAU,EACR,MAAM,CAAC,IAAI,CAAC,gCAAgC;YAC5C,kCAAkC;KACrC,CAAC;AACJ,CAAC;AAQD;;;;GAIG;AACH,SAAS,eAAe,CACtB,KAAoB,EACpB,OAAqB,EACrB,OAAe,EACf,QAAgB;IAEhB,MAAM,SAAS,GAAG;QAChB,KAAK,CAAC,WAAW,EAAE;QACnB,OAAO;QACP,QAAQ;QACR,OAAO,CAAC,SAAS;QACjB,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE;QACnC,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE;QAC/B,OAAO,CAAC,oBAAoB,CAAC,QAAQ,EAAE;QACvC,OAAO,CAAC,kBAAkB;QAC1B,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;KACzE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,OAAO,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgB,EAChB,IAAuB,EACvB,OAAiC;IAEjC,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,wBAAwB,CAChC,mFAAmF,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAkB,CAAC;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC;IAE7C,MAAM,OAAO,GAAiB;QAC5B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;QAC/C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;YAClC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,SAAS;KACV,CAAC;IAEF,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,2BAA2B,CAAC;QAC5C,SAAS;QACT,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ;QACR,OAAO;KACR,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAEzD,OAAO,wBAAwB,CAAC,KAAK,CAAC;QACpC,SAAS;QACT,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ;QACR,OAAO;QACP,SAAS;KACV,CAAC,CAAC;AACL,CAAC"}

package/dist/mcp/http-server.d.ts

@@ -1,2 +1,3 @@
+#!/usr/bin/env node
 export {};
 //# sourceMappingURL=http-server.d.ts.map

package/dist/mcp/http-server.js

@@ -1,3 +1,4 @@
+#!/usr/bin/env node
 import { startHostedMcpHttpServerFromEnv } from "./http.js";
 /**
  * Runnable entrypoint for the hosted, multi-tenant MCP server over Streamable

package/dist/mcp/http-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"http-server.js","sourceRoot":"","sources":["../../src/mcp/http-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,MAAM,WAAW,CAAC;AAE5D;;;;;;;GAOG;AACH,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,MAAM,+BAA+B,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;IACtD,oDAAoD;IACpD,OAAO,CAAC,KAAK,CACX,+CAA+C,IAAI,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,EAAE,CACjF,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,OAAO,CAAC,KAAK,CAAC,2BAA2B,MAAM,2BAA2B,CAAC,CAAC;QAC5E,MAAM;aACH,KAAK,EAAE;aACP,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAC3B,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CACX,KAAK,YAAY,KAAK;QACpB,CAAC,CAAC,KAAK,CAAC,OAAO;QACf,CAAC,CAAC,mCAAmC,CACxC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"http-server.js","sourceRoot":"","sources":["../../src/mcp/http-server.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,WAAW,CAAC;AAE5D;;;;;;;GAOG;AACH,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,MAAM,+BAA+B,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;IACtD,oDAAoD;IACpD,OAAO,CAAC,KAAK,CACX,+CAA+C,IAAI,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,EAAE,CACjF,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,OAAO,CAAC,KAAK,CAAC,2BAA2B,MAAM,2BAA2B,CAAC,CAAC;QAC5E,MAAM;aACH,KAAK,EAAE;aACP,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAC3B,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CACX,KAAK,YAAY,KAAK;QACpB,CAAC,CAAC,KAAK,CAAC,OAAO;QACf,CAAC,CAAC,mCAAmC,CACxC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/mcp/server.d.ts

@@ -5,12 +5,37 @@ import { type SignedSpendMandate } from "../mandates/mandate.js";
 import { type ReclaimAuthorizedStreamInput, type ReclaimVerifiedStreamResult, type StreamStatusView, type VerifiedStreamAgentOpener } from "../sdk/client.js";
 import { type AgentWalletInput } from "../wallet/provider.js";
 import { type ConsumerDeliveryProofService } from "../zktls/reclaim.js";
+import { type ServiceInvoker } from "./service-invoker.js";
+/**
+ * Opt out of the operator/serviceRef cross-check on hire. Operator-set input
+ * only — an MCP caller can neither read nor set it.
+ */
+export declare const ALLOW_UNVERIFIED_OPERATOR_ENV = "METRIK_AGENT_ALLOW_UNVERIFIED_OPERATOR";
+/**
+ * Escrow generations this server can talk to.
+ *
+ * Declared, not inferred. The client sets `escrowV2` (which selects the
+ * checkpoint decoder for every read) purely from configuration, so the
+ * generation has to be a stated fact that can be wrong out loud, rather than an
+ * assumption buried in one constructor argument.
+ */
+export type EscrowGeneration = "v2";
 export interface McpToolSpec {
     name: string;
     description: string;
     /** Whether invoking this tool can move funds (must pass a spend mandate check). */
     movesFunds: boolean;
 }
+/**
+ * The one sentence every stream-opening surface has to carry.
+ *
+ * A reviewer made ONE call against a stream and was billed for 302 seconds. The
+ * escrow behaved exactly as designed — and nothing in the tool surface had told
+ * them what they were buying. An LLM picks a tool from its description alone, so
+ * the meter is stated in the description of every tool that opens, reads, or
+ * ends a stream, not only in the docs it will never read.
+ */
+export declare const METERING_MODEL = "METERING: this is TIME-metered rental of an endpoint that keeps proving it is live, NOT per-call billing. Cost = ratePerSecondUsdc x seconds the oracle VERIFIED, capped at the escrowed budget. One call and a thousand calls cost the same second, and the clock runs while you call nothing. Only closing the stream (reclaim_unspent) stops it; nothing refunds automatically.";
 export declare const METRIK_MCP_TOOLS: readonly McpToolSpec[];
 /** @deprecated Renamed to METRIK_MCP_TOOLS; retained for back-compat. */
 export declare const STREAMPROOF_MCP_TOOLS: readonly McpToolSpec[];
@@ -70,6 +95,23 @@ export interface VerifiedStreamMcpServerOptions {
      */
     readonly mandateProvider?: () => SignedSpendMandate | Promise<SignedSpendMandate>;
     readonly registry?: StreamRegistry;
+    /**
+     * Escape hatch for the operator/serviceRef cross-check, from
+     * {@link ALLOW_UNVERIFIED_OPERATOR_ENV}.
+     *
+     * OFF by default and deliberately not reachable from a tool argument: the
+     * caller being asked to relax a fund-safety check is the LLM the check exists
+     * to constrain. Even when on, a positive contradiction (`mismatch`) is still
+     * refused — this only downgrades "could not verify" from a refusal to a
+     * warning, for an operator who has accepted that risk explicitly.
+     */
+    readonly allowUnverifiedOperatorPairing?: boolean;
+    /**
+     * Drives `invoke_service`. Omitted, the tool is not registered at all rather
+     * than advertised and broken — the env builder always supplies one, so this
+     * is only omitted by callers wiring the server by hand (and by tests).
+     */
+    readonly serviceInvoker?: ServiceInvoker;
     readonly deliveryProofService?: ConsumerDeliveryProofService;
     readonly mandateStateResolver?: Partial<MandateStateResolver>;
     readonly now?: () => number;
@@ -93,6 +135,13 @@ export interface VerifiedStreamMcpServerRuntime {
 export interface ParsedMetrikAgentEnv {
     readonly rpcUrl: string;
     readonly escrow: `0x${string}`;
+    /** Which escrow generation {@link escrow} is, as CONFIGURED (never probed). */
+    readonly escrowGeneration: EscrowGeneration;
+    /** Registry the invocation origin is verified against. Undefined = the public default. */
+    readonly registryUrl?: string;
+    readonly registryApiKey?: string;
+    /** {@link ALLOW_UNVERIFIED_OPERATOR_ENV}; false unless explicitly `true`. */
+    readonly allowUnverifiedOperatorPairing: boolean;
     readonly usdc: `0x${string}`;
     readonly chain: Chain;
     readonly stateFile?: string;