@absol-labs/agent 0.9.1 → 0.11.0

package/dist/cli/args.js

@@ -0,0 +1,119 @@
+import { usageError } from "./errors.js";
+export function parseArgs(argv) {
+    const positionals = [];
+    const flags = new Map();
+    const push = (name, value) => {
+        const existing = flags.get(name);
+        if (existing === undefined)
+            flags.set(name, [value]);
+        else
+            existing.push(value);
+    };
+    let passthrough = false;
+    for (let index = 0; index < argv.length; index++) {
+        const token = argv[index];
+        if (token === undefined)
+            continue;
+        if (passthrough || !token.startsWith("--")) {
+            positionals.push(token);
+            continue;
+        }
+        if (token === "--") {
+            passthrough = true;
+            continue;
+        }
+        const body = token.slice(2);
+        const equals = body.indexOf("=");
+        if (equals !== -1) {
+            const name = body.slice(0, equals);
+            assertFlagName(name, token);
+            push(name, body.slice(equals + 1));
+            continue;
+        }
+        assertFlagName(body, token);
+        if (body.startsWith("no-")) {
+            push(body.slice(3), false);
+            continue;
+        }
+        const next = argv[index + 1];
+        if (next === undefined || next.startsWith("--")) {
+            push(body, true);
+            continue;
+        }
+        push(body, next);
+        index++;
+    }
+    const [command = null, ...rest] = positionals;
+    return { command, positionals: rest, flags };
+}
+function assertFlagName(name, token) {
+    if (name.length === 0) {
+        throw usageError(`not a valid flag: ${token}`);
+    }
+}
+/** Reads a flag that must carry a string value. */
+export function stringFlag(args, name) {
+    const values = args.flags.get(name);
+    if (values === undefined)
+        return undefined;
+    const value = values[values.length - 1];
+    if (typeof value !== "string") {
+        throw usageError(`--${name} requires a value`);
+    }
+    return value;
+}
+/** Every occurrence of a repeatable string flag (e.g. `--header`). */
+export function stringFlags(args, name) {
+    const values = args.flags.get(name) ?? [];
+    return values.map((value) => {
+        if (typeof value !== "string") {
+            throw usageError(`--${name} requires a value`);
+        }
+        return value;
+    });
+}
+export function requiredStringFlag(args, name) {
+    const value = stringFlag(args, name);
+    if (value === undefined) {
+        throw usageError(`--${name} is required`);
+    }
+    return value;
+}
+export function booleanFlag(args, name) {
+    const values = args.flags.get(name);
+    if (values === undefined)
+        return false;
+    const value = values[values.length - 1];
+    if (value === undefined)
+        return false;
+    if (typeof value === "boolean")
+        return value;
+    if (value === "true")
+        return true;
+    if (value === "false")
+        return false;
+    throw usageError(`--${name} takes no value (got "${value}")`);
+}
+export function integerFlag(args, name) {
+    const raw = stringFlag(args, name);
+    if (raw === undefined)
+        return undefined;
+    if (!/^\d+$/.test(raw)) {
+        throw usageError(`--${name} must be a non-negative integer (got "${raw}")`);
+    }
+    return Number(raw);
+}
+/**
+ * Rejects flags the command does not understand. A silently ignored `--budgt`
+ * on a fund-moving command is how someone spends more than they meant to.
+ */
+export function assertKnownFlags(args, known) {
+    const allowed = new Set(known);
+    const unknown = [...args.flags.keys()].filter((name) => !allowed.has(name));
+    if (unknown.length > 0) {
+        throw usageError(`unknown flag${unknown.length > 1 ? "s" : ""}: ${unknown
+            .map((name) => `--${name}`)
+            .join(", ")}`, `known flags: ${known.map((name) => `--${name}`).join(", ")}`);
+    }
+}
+//# sourceMappingURL=args.js.map

package/dist/cli/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAqBzC,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgC,CAAC;IACtD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAuB,EAAQ,EAAE;QAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;;YAChD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAElC,IAAI,WAAW,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,WAAW,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACnC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAE5B,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjB,KAAK,EAAE,CAAC;IACV,CAAC;IAED,MAAM,CAAC,OAAO,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC;IAC9C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,UAAU,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,UAAU,CAAC,IAAgB,EAAE,IAAY;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,IAAY;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,UAAU,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAgB,EAAE,IAAY;IAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,UAAU,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,IAAY;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,UAAU,CAAC,KAAK,IAAI,yBAAyB,KAAK,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAgB,EAChB,IAAY;IAEZ,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,CAAC,KAAK,IAAI,yCAAyC,GAAG,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAgB,EAChB,KAAwB;IAExB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,CACd,eAAe,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO;aACrD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;aAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,EACf,gBAAgB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/attesters.d.ts

@@ -0,0 +1,51 @@
+import type { CliReadClient } from "./deps.js";
+/**
+ * Who attests, read off the escrow.
+ *
+ * Metrik's whole claim is that money moves only for delivery that a NEUTRAL
+ * verifier checked. On the live Base Sepolia deployment that neutrality is
+ * partial: `getOracleSigners()` returns three addresses, and one of them is the
+ * operator of the listings a buyer is being offered. A tool that prints
+ * "cryptographically verified" and "tier 2" without saying so is letting the
+ * buyer assume something the deployment does not provide.
+ *
+ * This is DISCLOSURE, not enforcement. The CLI does not refuse such a listing
+ * and does not score it — it states the fact and leaves the judgement to the
+ * buyer. Fixing the deployment is a deployment decision, not a CLI one.
+ */
+export interface AttesterSet {
+    /** The signer set, lowercased. `null` when the escrow would not answer. */
+    readonly signers: readonly string[] | null;
+    /** Why the set could not be read, when applicable. */
+    readonly unavailable: string | null;
+}
+/**
+ * Read the signer set, failing SOFT.
+ *
+ * An unreadable set must never render as "no overlap": "we checked and the
+ * operator does not attest" and "we could not check" are different facts, and
+ * conflating them would turn an outage into a false assurance. `signers: null`
+ * is carried through to every caller and printed as UNKNOWN.
+ */
+export declare function readAttesterSet(read: Pick<CliReadClient, "oracleSigners">): Promise<AttesterSet>;
+/**
+ * Is this operator also one of the escrow's attesters?
+ *
+ * `null` means unknown (the set could not be read) and must be rendered as
+ * unknown, never as `false`.
+ */
+export declare function operatorAttestsOwnDelivery(set: AttesterSet, operator: string): boolean | null;
+/**
+ * One factual stderr line, or `null` when there is nothing to disclose.
+ *
+ * Deliberately not alarming and deliberately not a verdict: it reports a
+ * configuration fact and what that fact means, and stops there.
+ */
+export declare function attesterDisclosure(set: AttesterSet, operator: string): string | null;
+/**
+ * The one warning that belongs to the ESCROW rather than to any one listing:
+ * the signer set could not be read at all. Printed once per command, not once
+ * per row, and never as "no overlap".
+ */
+export declare function attesterSetUnavailableWarning(set: AttesterSet): string | null;
+//# sourceMappingURL=attesters.d.ts.map

package/dist/cli/attesters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attesters.d.ts","sourceRoot":"","sources":["../../src/cli/attesters.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAC3C,sDAAsD;IACtD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,GACzC,OAAO,CAAC,WAAW,CAAC,CAUtB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,WAAW,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,GAAG,IAAI,CAGhB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,WAAW,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,IAAI,CAMf;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAG7E"}

package/dist/cli/attesters.js

@@ -0,0 +1,58 @@
+import { describeError } from "./errors.js";
+/**
+ * Read the signer set, failing SOFT.
+ *
+ * An unreadable set must never render as "no overlap": "we checked and the
+ * operator does not attest" and "we could not check" are different facts, and
+ * conflating them would turn an outage into a false assurance. `signers: null`
+ * is carried through to every caller and printed as UNKNOWN.
+ */
+export async function readAttesterSet(read) {
+    try {
+        const signers = await read.oracleSigners();
+        return {
+            signers: signers.map((signer) => signer.toLowerCase()),
+            unavailable: null,
+        };
+    }
+    catch (error) {
+        return { signers: null, unavailable: describeError(error) };
+    }
+}
+/**
+ * Is this operator also one of the escrow's attesters?
+ *
+ * `null` means unknown (the set could not be read) and must be rendered as
+ * unknown, never as `false`.
+ */
+export function operatorAttestsOwnDelivery(set, operator) {
+    if (set.signers === null)
+        return null;
+    return set.signers.includes(operator.toLowerCase());
+}
+/**
+ * One factual stderr line, or `null` when there is nothing to disclose.
+ *
+ * Deliberately not alarming and deliberately not a verdict: it reports a
+ * configuration fact and what that fact means, and stops there.
+ */
+export function attesterDisclosure(set, operator) {
+    const overlap = operatorAttestsOwnDelivery(set, operator);
+    if (overlap === null)
+        return attesterSetUnavailableWarning(set);
+    if (!overlap)
+        return null;
+    const total = set.signers?.length ?? 0;
+    return `warning: operator ${operator} is also one of the ${total} oracle signer${total === 1 ? "" : "s"} configured on this escrow. The party being paid is among the parties attesting that delivery happened. Verification here is not independent of the seller.`;
+}
+/**
+ * The one warning that belongs to the ESCROW rather than to any one listing:
+ * the signer set could not be read at all. Printed once per command, not once
+ * per row, and never as "no overlap".
+ */
+export function attesterSetUnavailableWarning(set) {
+    if (set.signers !== null)
+        return null;
+    return `warning: the escrow's oracle signer set could not be read (${set.unavailable ?? "no reason given"}) — whether the operator being paid is also one of the parties attesting to its own delivery is UNKNOWN, not "no overlap".`;
+}
+//# sourceMappingURL=attesters.js.map

package/dist/cli/attesters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attesters.js","sourceRoot":"","sources":["../../src/cli/attesters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAwB5C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAA0C;IAE1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3C,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACtD,WAAW,EAAE,IAAI;SAClB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAgB,EAChB,QAAgB;IAEhB,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAgB,EAChB,QAAgB;IAEhB,MAAM,OAAO,GAAG,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,6BAA6B,CAAC,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;IACvC,OAAO,qBAAqB,QAAQ,uBAAuB,KAAK,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,6JAA6J,CAAC;AACvQ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,GAAgB;IAC5D,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,8DAA8D,GAAG,CAAC,WAAW,IAAI,iBAAiB,4HAA4H,CAAC;AACxO,CAAC"}

package/dist/cli/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/cli/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":""}

package/dist/cli/bin.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import { runCli } from "./run.js";
+const exitCode = await runCli({ argv: process.argv.slice(2) });
+process.exitCode = exitCode;
+//# sourceMappingURL=bin.js.map

package/dist/cli/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/cli/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC/D,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC"}

package/dist/cli/commands/claim.d.ts

@@ -0,0 +1,13 @@
+import type { CommandSpec } from "../context.js";
+/**
+ * The seller's side of the loop.
+ *
+ * `status` has always computed and printed an `operator claimable` row — a
+ * redeemable balance the CLI could see and could not act on. `claimWithProof` is
+ * operator-gated on-chain, so this command refuses a wallet that is not the
+ * stream's operator BEFORE it broadcasts: an address mismatch is knowable with
+ * one read, and letting it become a raw `NotOperator()` revert would cost gas to
+ * learn a fact that was already available.
+ */
+export declare const claimCommand: CommandSpec;
+//# sourceMappingURL=claim.d.ts.map

package/dist/cli/commands/claim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/claim.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAkB,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjE;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,EAAE,WAsG1B,CAAC"}

package/dist/cli/commands/claim.js

@@ -0,0 +1,102 @@
+import { formatUsdc } from "../amounts.js";
+import { assertTestnetRpc, parseBytes32 } from "../config.js";
+import { CliError, describeError, usageError } from "../errors.js";
+import { signClaimMandate } from "../mandate.js";
+import { assertCanPayGas } from "../preflight.js";
+import { writeClientOptions } from "../deps.js";
+import { isPolicyEnforced, PRIVATE_KEY_ENV, resolveCliWallet, } from "../wallet.js";
+/**
+ * The seller's side of the loop.
+ *
+ * `status` has always computed and printed an `operator claimable` row — a
+ * redeemable balance the CLI could see and could not act on. `claimWithProof` is
+ * operator-gated on-chain, so this command refuses a wallet that is not the
+ * stream's operator BEFORE it broadcasts: an address mismatch is knowable with
+ * one read, and letting it become a raw `NotOperator()` revert would cost gas to
+ * learn a fact that was already available.
+ */
+export const claimCommand = {
+    name: "claim",
+    summary: "Operator: redeem what this stream has verifiably earned",
+    usage: "metrik claim <streamId>",
+    flags: [],
+    signs: true,
+    async run(context) {
+        const { args, config, env, out, deps } = context;
+        const [streamIdArg] = args.positionals;
+        if (streamIdArg === undefined) {
+            throw usageError("metrik claim requires a <streamId>");
+        }
+        const streamId = parseBytes32(streamIdArg, "<streamId>");
+        const wallet = await resolveCliWallet(env, {
+            note: out.note,
+            rpcUrl: config.rpcUrl,
+        });
+        const { account } = wallet;
+        if (isPolicyEnforced(wallet)) {
+            // Said plainly rather than discovered mid-command. `claim` is the
+            // OPERATOR's side, and a Privy broker policy allowlists the BUYER
+            // actions only (openStream, close, reclaim, reclaimUnverified, and a
+            // bounded USDC approval). That is a property of an operator using a
+            // buyer-scoped wallet, not a defect in this command.
+            out.note("warning: this wallet's broker policy allowlists buyer actions only, so it will refuse to sign an operator claim. Claim with the operator's own key.");
+        }
+        const read = deps.createReadClient(config);
+        await assertTestnetRpc(config, () => read.getChainId());
+        await assertCanPayGas(read, account.address);
+        const stream = await read.getStreamV2(streamId);
+        if (stream.operator.toLowerCase() !== account.address.toLowerCase()) {
+            throw new CliError(`wallet ${account.address} is not the operator of this stream`, {
+                exitCode: 3,
+                hint: `only ${stream.operator} can claim it — the escrow enforces this, so no other wallet can. Set ${PRIVATE_KEY_ENV} to the operator's key. (The buyer's side of this stream is \`metrik reclaim ${streamId}\`.)`,
+            });
+        }
+        // Accrual lives in the oracle's checkpoint proof, never in the stream tuple.
+        // No proof means no claim is possible yet, and saying that is better than
+        // paying gas for a `NothingToClaim()` revert.
+        let cumulativeAmount;
+        try {
+            cumulativeAmount = (await read.checkpointProof(streamId))
+                .cumulativeAmount;
+        }
+        catch (error) {
+            throw new CliError("no checkpoint covers this stream yet, so there is nothing provable to claim", {
+                exitCode: 4,
+                hint: `the oracle publishes roughly every 15-22s and pays only for intervals that verified; ${describeError(error)}`,
+                cause: error,
+            });
+        }
+        const claimable = await read.claimableForV2(streamId, cumulativeAmount);
+        if (claimable === 0n) {
+            throw new CliError("this stream has nothing claimable right now", {
+                exitCode: 4,
+                hint: `everything checkpointed so far has already been claimed. See where it stands:  metrik status ${streamId}`,
+            });
+        }
+        const write = deps.createWriteClient(config, account, writeClientOptions(wallet));
+        const result = await write.claimStream({
+            streamId,
+            // `null` for a policy-enforced wallet — see `../spend-policy.ts`.
+            signedMandate: isPolicyEnforced(wallet)
+                ? null
+                : await signClaimMandate(account, config.chainId),
+            spentSoFarUsdc: 0n,
+            nowSeconds: deps.nowSeconds(),
+        });
+        out.result({
+            streamId,
+            txHash: result.txHash,
+            operator: stream.operator,
+            claimed: claimable,
+            verifiedCumulative: cumulativeAmount,
+        });
+        out.print("Claimed.");
+        out.table([
+            ["streamId", streamId],
+            ["tx", result.txHash],
+            ["operator", stream.operator],
+            ["claimed", `${formatUsdc(claimable)} (net of protocol fee)`],
+        ]);
+    },
+};
+//# sourceMappingURL=claim.js.map

package/dist/cli/commands/claim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim.js","sourceRoot":"","sources":["../../../src/cli/commands/claim.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAGtB;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAAgB;IACvC,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,yDAAyD;IAClE,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,IAAI;IACX,KAAK,CAAC,GAAG,CAAC,OAAuB;QAC/B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QACjD,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;QACvC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,UAAU,CAAC,oCAAoC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE;YACzC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,kEAAkE;YAClE,kEAAkE;YAClE,qEAAqE;YACrE,oEAAoE;YACpE,qDAAqD;YACrD,GAAG,CAAC,IAAI,CACN,qJAAqJ,CACtJ,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACxD,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAE7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YACpE,MAAM,IAAI,QAAQ,CAChB,UAAU,OAAO,CAAC,OAAO,qCAAqC,EAC9D;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,QAAQ,MAAM,CAAC,QAAQ,yEAAyE,eAAe,gFAAgF,QAAQ,MAAM;aACpN,CACF,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,0EAA0E;QAC1E,8CAA8C;QAC9C,IAAI,gBAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,gBAAgB,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;iBACtD,gBAAgB,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,QAAQ,CAChB,6EAA6E,EAC7E;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,wFAAwF,aAAa,CACzG,KAAK,CACN,EAAE;gBACH,KAAK,EAAE,KAAK;aACb,CACF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACxE,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,QAAQ,CAAC,6CAA6C,EAAE;gBAChE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,gGAAgG,QAAQ,EAAE;aACjH,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAClC,MAAM,EACN,OAAO,EACP,kBAAkB,CAAC,MAAM,CAAC,CAC3B,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;YACrC,QAAQ;YACR,kEAAkE;YAClE,aAAa,EAAE,gBAAgB,CAAC,MAAM,CAAC;gBACrC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;YACnD,cAAc,EAAE,EAAE;YAClB,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;SAC9B,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,CAAC;YACT,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,SAAS;YAClB,kBAAkB,EAAE,gBAAgB;SACrC,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtB,GAAG,CAAC,KAAK,CAAC;YACR,CAAC,UAAU,EAAE,QAAQ,CAAC;YACtB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC;YAC7B,CAAC,SAAS,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC,wBAAwB,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/cli/commands/close.d.ts

@@ -0,0 +1,3 @@
+import type { CommandSpec } from "../context.js";
+export declare const closeCommand: CommandSpec;
+//# sourceMappingURL=close.d.ts.map

package/dist/cli/commands/close.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"close.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/close.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAkB,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjE,eAAO,MAAM,YAAY,EAAE,WA4D1B,CAAC"}

package/dist/cli/commands/close.js

@@ -0,0 +1,55 @@
+import { assertTestnetRpc, parseBytes32 } from "../config.js";
+import { usageError } from "../errors.js";
+import { signRecoveryMandate } from "../mandate.js";
+import { assertCanPayGas } from "../preflight.js";
+import { writeClientOptions } from "../deps.js";
+import { isPolicyEnforced, resolveCliWallet } from "../wallet.js";
+export const closeCommand = {
+    name: "close",
+    summary: "Stop the clock on a stream so the unspent budget can be reclaimed",
+    usage: "metrik close <streamId>",
+    flags: [],
+    signs: true,
+    async run(context) {
+        const { args, config, env, out, deps } = context;
+        const [streamIdArg] = args.positionals;
+        if (streamIdArg === undefined) {
+            throw usageError("metrik close requires a <streamId>");
+        }
+        const streamId = parseBytes32(streamIdArg, "<streamId>");
+        const wallet = await resolveCliWallet(env, {
+            note: out.note,
+            rpcUrl: config.rpcUrl,
+        });
+        const { account } = wallet;
+        const read = deps.createReadClient(config);
+        await assertTestnetRpc(config, () => read.getChainId());
+        await assertCanPayGas(read, account.address);
+        // A policy-enforced wallet signs no mandate of its own: this is a
+        // buyer-recovery action, the escrow gates it on the buyer address and the
+        // broker gates it again on `stream.buyer == wallet`. A locally self-signed
+        // placeholder would add nothing and the broker would refuse to sign it.
+        // See `../spend-policy.ts`.
+        const signedMandate = isPolicyEnforced(wallet)
+            ? null
+            : await signRecoveryMandate(account, config.chainId);
+        const write = deps.createWriteClient(config, account, writeClientOptions(wallet));
+        const result = await write.closeStream({
+            streamId,
+            signedMandate,
+            spentSoFarUsdc: 0n,
+            nowSeconds: deps.nowSeconds(),
+        });
+        out.result({ streamId, txHash: result.txHash, closed: true });
+        out.print("Stream closed.");
+        out.table([
+            ["streamId", streamId],
+            ["tx", result.txHash],
+        ]);
+        out.print("");
+        out.print(`Nothing pushes money back. Reclaim what was never earned:  metrik reclaim ${streamId}`);
+        out.print("That reclaim reverts until the oracle publishes a checkpoint covering the stop time, so it waits and retries for you — leave it running.");
+        out.print(`Next time:  metrik reclaim <streamId> --close-first  does this close and that reclaim in one command.`);
+    },
+};
+//# sourceMappingURL=close.js.map

package/dist/cli/commands/close.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"close.js","sourceRoot":"","sources":["../../../src/cli/commands/close.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGlE,MAAM,CAAC,MAAM,YAAY,GAAgB;IACvC,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,mEAAmE;IAC5E,KAAK,EAAE,yBAAyB;IAChC,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,IAAI;IACX,KAAK,CAAC,GAAG,CAAC,OAAuB;QAC/B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;QACjD,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;QACvC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,UAAU,CAAC,oCAAoC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE;YACzC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACxD,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAE7C,kEAAkE;QAClE,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,4BAA4B;QAC5B,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC;YAC5C,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAClC,MAAM,EACN,OAAO,EACP,kBAAkB,CAAC,MAAM,CAAC,CAC3B,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;YACrC,QAAQ;YACR,aAAa;YACb,cAAc,EAAE,EAAE;YAClB,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;SAC9B,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC;YACR,CAAC,UAAU,EAAE,QAAQ,CAAC;YACtB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;SACtB,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACd,GAAG,CAAC,KAAK,CACP,6EAA6E,QAAQ,EAAE,CACxF,CAAC;QACF,GAAG,CAAC,KAAK,CACP,0IAA0I,CAC3I,CAAC;QACF,GAAG,CAAC,KAAK,CACP,uGAAuG,CACxG,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/cli/commands/discover.d.ts

@@ -0,0 +1,3 @@
+import type { CommandSpec } from "../context.js";
+export declare const discoverCommand: CommandSpec;
+//# sourceMappingURL=discover.d.ts.map

package/dist/cli/commands/discover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/discover.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAkB,WAAW,EAAE,MAAM,eAAe,CAAC;AAIjE,eAAO,MAAM,eAAe,EAAE,WAuM7B,CAAC"}