@agenticprimitives/treasury-service-agent 0.0.0-alpha.4

package/dist/plans.js

@@ -0,0 +1,47 @@
+// Plan templates (spec 283). Every treasury skill compiles into one of these shapes so the gating order is
+// uniform and auditable. The authority gates (`.authorize`/`.guard`) call the host-injected
+// entitlement/delegation/policy evaluators; `.step` calls a registered provider (or the built-in
+// `ledger.reserve`/`ledger.finalize`). No arbitrary execution — a skill is exactly its plan.
+import { primitivePlan, ref } from '@agenticprimitives/service-agent';
+import { TREASURY_CAPABILITIES } from './capabilities.js';
+/** Public read: a single provider step, output passthrough. No authority gates (public data). */
+export function readPlan(id, capability, args) {
+    return primitivePlan(id).step('result', capability, args).output({ result: ref('result') });
+}
+/** Authenticated read: caller-entitlement gate, then the read. (Reading a managed account's state.) */
+export function authedReadPlan(id, capability, args, action, resource) {
+    return primitivePlan(id)
+        .authorize('entitled', 'entitlement', action, { resource, input: args })
+        .step('result', capability, args)
+        .output({ result: ref('result') });
+}
+/** Signing: full gating (entitlement ∩ delegation ∩ policy), then a provider signature. No ledger. */
+export function signPlan(id, args, action, resource) {
+    return primitivePlan(id)
+        .authorize('entitled', 'entitlement', action, { resource, input: args })
+        .authorize('delegated', 'delegation', action, { resource, input: args })
+        .guard('policy', action, { resource, input: args })
+        .step('signed', TREASURY_CAPABILITIES.sign, args)
+        .output({ result: ref('signed') });
+}
+/** Value-moving skill: full gating → ledger.reserve → provider execute → ledger.finalize → output. */
+export function spendPlan(opts) {
+    return primitivePlan(opts.id)
+        .authorize('entitled', 'entitlement', opts.action, { resource: opts.resource, input: opts.stepArgs })
+        .authorize('delegated', 'delegation', opts.action, { resource: opts.resource, input: opts.stepArgs })
+        .guard('policy', opts.action, { resource: opts.resource, input: opts.stepArgs })
+        .step('reserve', 'ledger.reserve', opts.ledger)
+        .step('exec', opts.capability, opts.stepArgs)
+        .step('final', 'ledger.finalize', { reservationId: ref('reserve', 'reservationId'), settlement: ref('exec') })
+        .output({ result: ref('exec'), journal: ref('final', 'journalId') });
+}
+/** Admin/manage skill (delegation mint/revoke, entitlement issue/consume): full gating, no ledger. */
+export function adminPlan(id, capability, args, action, resource) {
+    return primitivePlan(id)
+        .authorize('entitled', 'entitlement', action, { resource, input: args })
+        .authorize('delegated', 'delegation', action, { resource, input: args })
+        .guard('policy', action, { resource, input: args })
+        .step('result', capability, args)
+        .output({ result: ref('result') });
+}
+//# sourceMappingURL=plans.js.map

package/dist/plans.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plans.js","sourceRoot":"","sources":["../src/plans.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,4FAA4F;AAC5F,iGAAiG;AACjG,6FAA6F;AAC7F,OAAO,EAAE,aAAa,EAAE,GAAG,EAAsB,MAAM,kCAAkC,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,iGAAiG;AACjG,MAAM,UAAU,QAAQ,CAAC,EAAU,EAAE,UAAkB,EAAE,IAA6B;IACpF,OAAO,aAAa,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,UAAkB,EAAE,IAA6B,EAAE,MAAc,EAAE,QAA4B;IACxI,OAAO,aAAa,CAAC,EAAE,CAAC;SACrB,SAAS,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACvE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC;SAChC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,QAAQ,CAAC,EAAU,EAAE,IAA6B,EAAE,MAAc,EAAE,QAA4B;IAC9G,OAAO,aAAa,CAAC,EAAE,CAAC;SACrB,SAAS,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACvE,SAAS,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACvE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SAClD,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC;SAChD,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACvC,CAAC;AAaD,sGAAsG;AACtG,MAAM,UAAU,SAAS,CAAC,IAAmB;IAC3C,OAAO,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;SAC1B,SAAS,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;SACpG,SAAS,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;SACpG,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;SAC/E,IAAI,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC;SAC9C,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC;SAC5C,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;SAC7G,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,SAAS,CAAC,EAAU,EAAE,UAAkB,EAAE,IAA6B,EAAE,MAAc,EAAE,QAA4B;IACnI,OAAO,aAAa,CAAC,EAAE,CAAC;SACrB,SAAS,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACvE,SAAS,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACvE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SAClD,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC;SAChC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACvC,CAAC"}

package/dist/plugins/defi-plugin.d.ts

@@ -0,0 +1,54 @@
+import type { PlanKind, Primitive } from '@agenticprimitives/service-agent';
+/** A provider is a service-agent `Primitive`. */
+export type PrimitiveProvider = Primitive;
+export interface DeFiPluginManifest {
+    pluginId: string;
+    version: string;
+    /** Capability ids this plugin's providers advertise (the authoritative allowlist). */
+    capabilities: string[];
+    chainNamespaces: string[];
+    networks: string[];
+    planKinds: PlanKind[];
+    supportsQuote: boolean;
+    supportsSimulation: boolean;
+    supportsCancellation: boolean;
+    supportsRecovery: boolean;
+    /** Identifier of the audit scope this plugin was reviewed under. */
+    auditBoundary: string;
+}
+/** A plugin's self-report that a capability is live right now (feeds ActiveSkillAssertion health). */
+export interface PrimitiveCapabilityAssertion {
+    capability: string;
+    healthy: boolean;
+    reason?: string;
+}
+export interface AssertionContext {
+    nowSeconds: number;
+}
+export interface PluginHealth {
+    healthy: boolean;
+    reasons?: string[];
+}
+export interface DeFiPrimitivePlugin {
+    manifest(): DeFiPluginManifest;
+    assertions(ctx: AssertionContext): Promise<PrimitiveCapabilityAssertion[]>;
+    providers(): PrimitiveProvider[];
+    health(): Promise<PluginHealth>;
+}
+export declare class PluginManifestError extends Error {
+}
+/** Structural manifest validation (fail-closed). */
+export declare function validatePluginManifest(m: DeFiPluginManifest): void;
+/** The narrowed sink a plugin install is allowed to touch — provider registration ONLY (least privilege). */
+export interface ProviderSink {
+    register(provider: PrimitiveProvider): void;
+}
+export interface InstalledPlugin {
+    pluginId: string;
+    capabilities: string[];
+    providerIds: string[];
+}
+/** Install a plugin's providers into a registration sink under least privilege. Fail-closed: a provider
+ *  advertising a capability the manifest didn't declare is rejected (no capability smuggling). */
+export declare function installPlugin(sink: ProviderSink, plugin: DeFiPrimitivePlugin): InstalledPlugin;
+//# sourceMappingURL=defi-plugin.d.ts.map

package/dist/plugins/defi-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defi-plugin.d.ts","sourceRoot":"","sources":["../../src/plugins/defi-plugin.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAE5E,iDAAiD;AACjD,MAAM,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAE1C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oEAAoE;IACpE,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,sGAAsG;AACtG,MAAM,WAAW,4BAA4B;IAAG,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACvG,MAAM,WAAW,gBAAgB;IAAG,UAAU,EAAE,MAAM,CAAA;CAAE;AACxD,MAAM,WAAW,YAAY;IAAG,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE;AAEtE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,IAAI,kBAAkB,CAAC;IAC/B,UAAU,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,4BAA4B,EAAE,CAAC,CAAC;IAC3E,SAAS,IAAI,iBAAiB,EAAE,CAAC;IACjC,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;CACjC;AAED,qBAAa,mBAAoB,SAAQ,KAAK;CAAG;AAEjD,oDAAoD;AACpD,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAIlE;AAED,6GAA6G;AAC7G,MAAM,WAAW,YAAY;IAAG,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAA;CAAE;AAE7E,MAAM,WAAW,eAAe;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE;AAEpG;kGACkG;AAClG,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,mBAAmB,GAAG,eAAe,CAe9F"}

package/dist/plugins/defi-plugin.js

@@ -0,0 +1,30 @@
+export class PluginManifestError extends Error {
+}
+/** Structural manifest validation (fail-closed). */
+export function validatePluginManifest(m) {
+    if (!m.pluginId || !m.version)
+        throw new PluginManifestError('plugin manifest needs pluginId + version');
+    if (!m.capabilities?.length)
+        throw new PluginManifestError(`plugin ${m.pluginId} declares no capabilities`);
+    if (!m.auditBoundary)
+        throw new PluginManifestError(`plugin ${m.pluginId} needs an auditBoundary`);
+}
+/** Install a plugin's providers into a registration sink under least privilege. Fail-closed: a provider
+ *  advertising a capability the manifest didn't declare is rejected (no capability smuggling). */
+export function installPlugin(sink, plugin) {
+    const m = plugin.manifest();
+    validatePluginManifest(m);
+    const declared = new Set(m.capabilities);
+    const providerIds = [];
+    for (const provider of plugin.providers()) {
+        for (const cap of provider.capabilities) {
+            if (!declared.has(cap.id)) {
+                throw new PluginManifestError(`plugin ${m.pluginId} provider ${provider.primitiveId} advertises undeclared capability ${cap.id}`);
+            }
+        }
+        sink.register(provider);
+        providerIds.push(provider.primitiveId);
+    }
+    return { pluginId: m.pluginId, capabilities: m.capabilities, providerIds };
+}
+//# sourceMappingURL=defi-plugin.js.map

package/dist/plugins/defi-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defi-plugin.js","sourceRoot":"","sources":["../../src/plugins/defi-plugin.ts"],"names":[],"mappings":"AAwCA,MAAM,OAAO,mBAAoB,SAAQ,KAAK;CAAG;AAEjD,oDAAoD;AACpD,MAAM,UAAU,sBAAsB,CAAC,CAAqB;IAC1D,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,MAAM,IAAI,mBAAmB,CAAC,0CAA0C,CAAC,CAAC;IACzG,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM;QAAE,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC,QAAQ,2BAA2B,CAAC,CAAC;IAC5G,IAAI,CAAC,CAAC,CAAC,aAAa;QAAE,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC,QAAQ,yBAAyB,CAAC,CAAC;AACrG,CAAC;AAOD;kGACkG;AAClG,MAAM,UAAU,aAAa,CAAC,IAAkB,EAAE,MAA2B;IAC3E,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC5B,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC,QAAQ,aAAa,QAAQ,CAAC,WAAW,qCAAqC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACpI,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxB,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC;AAC7E,CAAC"}

package/dist/profiles.d.ts

@@ -0,0 +1,92 @@
+/** Read-only: everything that observes, nothing that moves value or signs. */
+export declare const readonlyProfile: {
+    id: string;
+    definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+    skillIds: string[];
+};
+/** Payments: read-only + native/token transfers (the real x402/transfer path). */
+export declare const paymentsProfile: {
+    id: string;
+    definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+    skillIds: string[];
+};
+/** Markets: payments + swap/perp/prediction trade execution. */
+export declare const marketsProfile: {
+    id: string;
+    definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+    skillIds: string[];
+};
+/** Administration: signing, raw-tx send, delegation + entitlement management (all `private`). */
+export declare const administrationProfile: {
+    id: string;
+    definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+    skillIds: string[];
+};
+/** Portfolio: read the book + rebalance toward targets. */
+export declare const portfolioProfile: {
+    id: string;
+    definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+    skillIds: string[];
+};
+/** Yield: lending + staking + liquidity + vaults (supply-side DeFi). */
+export declare const yieldProfile: {
+    id: string;
+    definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+    skillIds: string[];
+};
+/** Cross-chain: bridge quote / execute / status / recover. */
+export declare const crossChainProfile: {
+    id: string;
+    definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+    skillIds: string[];
+};
+/** Full: the entire catalog (wallet baseline + DeFi families). */
+export declare const fullProfile: {
+    id: string;
+    definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+    skillIds: string[];
+};
+export declare const TREASURY_PROFILES: {
+    readonly readonly: {
+        id: string;
+        definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+        skillIds: string[];
+    };
+    readonly payments: {
+        id: string;
+        definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+        skillIds: string[];
+    };
+    readonly markets: {
+        id: string;
+        definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+        skillIds: string[];
+    };
+    readonly administration: {
+        id: string;
+        definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+        skillIds: string[];
+    };
+    readonly portfolio: {
+        id: string;
+        definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+        skillIds: string[];
+    };
+    readonly yield: {
+        id: string;
+        definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+        skillIds: string[];
+    };
+    readonly crossChain: {
+        id: string;
+        definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+        skillIds: string[];
+    };
+    readonly full: {
+        id: string;
+        definitions: import("@agenticprimitives/service-agent").AnySkillDefinition[];
+        skillIds: string[];
+    };
+};
+export type TreasuryProfileId = keyof typeof TREASURY_PROFILES;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../src/profiles.ts"],"names":[],"mappings":"AA8BA,8EAA8E;AAC9E,eAAO,MAAM,eAAe;;;;CAM1B,CAAC;AAEH,kFAAkF;AAClF,eAAO,MAAM,eAAe;;;;CAG1B,CAAC;AAEH,gEAAgE;AAChE,eAAO,MAAM,cAAc;;;;CAGzB,CAAC;AAEH,iGAAiG;AACjG,eAAO,MAAM,qBAAqB;;;;CAIhC,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,gBAAgB;;;;CAE3B,CAAC;AAEH,wEAAwE;AACxE,eAAO,MAAM,YAAY;;;;CAKvB,CAAC;AAEH,8DAA8D;AAC9D,eAAO,MAAM,iBAAiB;;;;CAE5B,CAAC;AAEH,kEAAkE;AAClE,eAAO,MAAM,WAAW;;;;CAA2E,CAAC;AAEpG,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CASpB,CAAC;AACX,MAAM,MAAM,iBAAiB,GAAG,MAAM,OAAO,iBAAiB,CAAC"}

package/dist/profiles.js

@@ -0,0 +1,60 @@
+// Treasury profiles (spec 283): named bundles of catalog skills a deployment can assert as a set. A host
+// defines a profile, then asserts only the skills whose required provider capabilities are present — so a
+// `full` profile on a host with just the payments providers degrades to the payments skills (the rest land
+// in the assertion report's `unavailable`). Profiles are inclusion sets, not authority — entitlement and
+// delegation are still decided per call.
+import { defineProfile } from '@agenticprimitives/service-agent';
+import { ALL_TREASURY_SKILLS, accountActivity, accountBalance, accountList, delegationGrant, delegationRevoke, entitlementCheck, entitlementConsume, entitlementIssue, marketDataOhlcv, marketDataPrice, networkList, networkStatus, perpClose, perpOpen, perpPositions, predictionBet, predictionMarkets, serviceInfo, signMessage, signTypedData, swapExecute, swapQuote, transferNative, transferToken, txSend, txSimulate, } from './catalog.js';
+import { DEFI_SKILLS, bridgeExecute, bridgeQuote, bridgeStatus, lendingBorrow, lendingPosition, lendingRepay, lendingSupply, lendingWithdraw, liquidityAdd, liquidityCollectFees, liquidityPosition, liquidityRemove, portfolioExposure, portfolioRebalance, portfolioSnapshot, portfolioValue, stakingClaim, stakingPosition, stakingStake, stakingUnstake, vaultDeposit, vaultMigrate, vaultPosition, vaultWithdraw, } from './catalog-defi.js';
+/** Read-only: everything that observes, nothing that moves value or signs. */
+export const readonlyProfile = defineProfile('treasury.readonly', [
+    serviceInfo, networkList, networkStatus,
+    accountList, accountBalance, accountActivity,
+    marketDataPrice, marketDataOhlcv,
+    swapQuote, perpPositions, predictionMarkets, entitlementCheck,
+    txSimulate,
+]);
+/** Payments: read-only + native/token transfers (the real x402/transfer path). */
+export const paymentsProfile = defineProfile('treasury.payments', [
+    ...readonlyProfile.definitions,
+    transferNative, transferToken,
+]);
+/** Markets: payments + swap/perp/prediction trade execution. */
+export const marketsProfile = defineProfile('treasury.markets', [
+    ...paymentsProfile.definitions,
+    swapExecute, perpOpen, perpClose, predictionBet,
+]);
+/** Administration: signing, raw-tx send, delegation + entitlement management (all `private`). */
+export const administrationProfile = defineProfile('treasury.administration', [
+    signMessage, signTypedData, txSend,
+    delegationGrant, delegationRevoke,
+    entitlementIssue, entitlementConsume,
+]);
+/** Portfolio: read the book + rebalance toward targets. */
+export const portfolioProfile = defineProfile('treasury.portfolio', [
+    portfolioSnapshot, portfolioValue, portfolioExposure, portfolioRebalance,
+]);
+/** Yield: lending + staking + liquidity + vaults (supply-side DeFi). */
+export const yieldProfile = defineProfile('treasury.yield', [
+    lendingPosition, lendingSupply, lendingRepay, lendingWithdraw, lendingBorrow,
+    stakingPosition, stakingStake, stakingUnstake, stakingClaim,
+    liquidityPosition, liquidityAdd, liquidityRemove, liquidityCollectFees,
+    vaultPosition, vaultDeposit, vaultWithdraw, vaultMigrate,
+]);
+/** Cross-chain: bridge quote / execute / status / recover. */
+export const crossChainProfile = defineProfile('treasury.cross-chain', [
+    bridgeQuote, bridgeStatus, bridgeExecute,
+]);
+/** Full: the entire catalog (wallet baseline + DeFi families). */
+export const fullProfile = defineProfile('treasury.full', [...ALL_TREASURY_SKILLS, ...DEFI_SKILLS]);
+export const TREASURY_PROFILES = {
+    readonly: readonlyProfile,
+    payments: paymentsProfile,
+    markets: marketsProfile,
+    administration: administrationProfile,
+    portfolio: portfolioProfile,
+    yield: yieldProfile,
+    crossChain: crossChainProfile,
+    full: fullProfile,
+};
+//# sourceMappingURL=profiles.js.map

package/dist/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../src/profiles.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,0GAA0G;AAC1G,2GAA2G;AAC3G,yGAAyG;AACzG,yCAAyC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EACL,mBAAmB,EACnB,eAAe,EAAE,cAAc,EAAE,WAAW,EAC5C,eAAe,EAAE,gBAAgB,EACjC,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EACtD,eAAe,EAAE,eAAe,EAChC,WAAW,EAAE,aAAa,EAC1B,SAAS,EAAE,QAAQ,EAAE,aAAa,EAClC,aAAa,EAAE,iBAAiB,EAChC,WAAW,EAAE,WAAW,EAAE,aAAa,EACvC,WAAW,EAAE,SAAS,EACtB,cAAc,EAAE,aAAa,EAC7B,MAAM,EAAE,UAAU,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,WAAW,EACX,aAAa,EAAE,WAAW,EAAE,YAAY,EACxC,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAC5E,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,eAAe,EACtE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,EACxE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAC3D,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,GACzD,MAAM,mBAAmB,CAAC;AAE3B,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC,mBAAmB,EAAE;IAChE,WAAW,EAAE,WAAW,EAAE,aAAa;IACvC,WAAW,EAAE,cAAc,EAAE,eAAe;IAC5C,eAAe,EAAE,eAAe;IAChC,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,gBAAgB;IAC7D,UAAU;CACX,CAAC,CAAC;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC,mBAAmB,EAAE;IAChE,GAAG,eAAe,CAAC,WAAW;IAC9B,cAAc,EAAE,aAAa;CAC9B,CAAC,CAAC;AAEH,gEAAgE;AAChE,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC,kBAAkB,EAAE;IAC9D,GAAG,eAAe,CAAC,WAAW;IAC9B,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa;CAChD,CAAC,CAAC;AAEH,iGAAiG;AACjG,MAAM,CAAC,MAAM,qBAAqB,GAAG,aAAa,CAAC,yBAAyB,EAAE;IAC5E,WAAW,EAAE,aAAa,EAAE,MAAM;IAClC,eAAe,EAAE,gBAAgB;IACjC,gBAAgB,EAAE,kBAAkB;CACrC,CAAC,CAAC;AAEH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAa,CAAC,oBAAoB,EAAE;IAClE,iBAAiB,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB;CACzE,CAAC,CAAC;AAEH,wEAAwE;AACxE,MAAM,CAAC,MAAM,YAAY,GAAG,aAAa,CAAC,gBAAgB,EAAE;IAC1D,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa;IAC5E,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY;IAC3D,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,oBAAoB;IACtE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY;CACzD,CAAC,CAAC;AAEH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC,sBAAsB,EAAE;IACrE,WAAW,EAAE,YAAY,EAAE,aAAa;CACzC,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC,eAAe,EAAE,CAAC,GAAG,mBAAmB,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;AAEpG,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,QAAQ,EAAE,eAAe;IACzB,QAAQ,EAAE,eAAe;IACzB,OAAO,EAAE,cAAc;IACvB,cAAc,EAAE,qBAAqB;IACrC,SAAS,EAAE,gBAAgB;IAC3B,KAAK,EAAE,YAAY;IACnB,UAAU,EAAE,iBAAiB;IAC7B,IAAI,EAAE,WAAW;CACT,CAAC"}

package/dist/receipt.d.ts

@@ -0,0 +1,16 @@
+import type { ExecutionReceipt } from '@agenticprimitives/service-agent';
+export interface TreasurySummary {
+    receiptId: string;
+    agent: string;
+    skill: string;
+    status: ExecutionReceipt['status'];
+    /** Did every authority gate allow? (false on any deny or if a gate is missing.) */
+    authorized: boolean;
+    /** Provider capability bindings exercised (e.g. "fake-transfer:transfer.execute"). */
+    providers: string[];
+    /** A canonical audit event name: treasury.<skill-tail>.<outcome>. */
+    auditEvent: string;
+    reason?: string;
+}
+export declare function summarizeTreasuryReceipt(receipt: ExecutionReceipt): TreasurySummary;
+//# sourceMappingURL=receipt.d.ts.map

package/dist/receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.d.ts","sourceRoot":"","sources":["../src/receipt.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,mFAAmF;IACnF,UAAU,EAAE,OAAO,CAAC;IACpB,sFAAsF;IACtF,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,gBAAgB,GAAG,eAAe,CAcnF"}

package/dist/receipt.js

@@ -0,0 +1,16 @@
+export function summarizeTreasuryReceipt(receipt) {
+    const authorized = receipt.authority.length === 0 ? true : receipt.authority.every((a) => a.allow);
+    const tail = receipt.skill.id.replace(/^treasury\./, '');
+    const outcome = receipt.status === 'completed' ? 'completed' : 'failed';
+    return {
+        receiptId: receipt.receiptId,
+        agent: receipt.agentId,
+        skill: receipt.skill.id,
+        status: receipt.status,
+        authorized,
+        providers: receipt.execution.primitiveBindings,
+        auditEvent: `treasury.${tail}.${outcome}`,
+        reason: receipt.reason,
+    };
+}
+//# sourceMappingURL=receipt.js.map

package/dist/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../src/receipt.ts"],"names":[],"mappings":"AAmBA,MAAM,UAAU,wBAAwB,CAAC,OAAyB;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnG,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxE,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,OAAO;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QACvB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU;QACV,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,iBAAiB;QAC9C,UAAU,EAAE,YAAY,IAAI,IAAI,OAAO,EAAE;QACzC,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC"}

package/dist/risk/risk-policy.d.ts

@@ -0,0 +1,44 @@
+export interface RiskPolicy {
+    /** Per-protocol exposure ceiling, basis points of total value. */
+    maxProtocolExposureBps?: number;
+    /** Aggregate exposure ceiling, bps. */
+    maxTotalExposureBps?: number;
+    /** Max allowed leverage (e.g. 3 = 3x). */
+    maxLeverage?: number;
+    /** Minimum idle reserve (decimal string, smallest unit). */
+    minLiquidityReserve?: string;
+    /** Max acceptable oracle age (seconds). */
+    maxOracleStalenessSeconds?: number;
+    /** Minimum buffer above a liquidation threshold, bps. */
+    minLiquidationBufferBps?: number;
+}
+export interface ExposureState {
+    totalValue: string;
+    perProtocolBps: Record<string, number>;
+    totalExposureBps: number;
+    leverage: number;
+    liquidityReserve: string;
+    oracleAgeSeconds: number;
+    liquidationBufferBps: number;
+}
+export interface RiskBreach {
+    code: string;
+    detail: string;
+}
+export interface RiskVerdict {
+    allowed: boolean;
+    breaches: RiskBreach[];
+}
+/** Evaluate an exposure snapshot against a policy. allowed === (no breaches). Fail-closed: a policy field
+ *  the snapshot can't satisfy is a breach, not a pass. */
+export declare function evaluateRisk(state: ExposureState, policy: RiskPolicy): RiskVerdict;
+/** Build an ExposureState from per-protocol exposure values + scalars (helper for hosts/tests). */
+export declare function aggregateExposure(args: {
+    totalValue: string;
+    perProtocol: Record<string, number>;
+    leverage?: number;
+    liquidityReserve?: string;
+    oracleAgeSeconds?: number;
+    liquidationBufferBps?: number;
+}): ExposureState;
+//# sourceMappingURL=risk-policy.d.ts.map

package/dist/risk/risk-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-policy.d.ts","sourceRoot":"","sources":["../../src/risk/risk-policy.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,UAAU;IACzB,kEAAkE;IAClE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,uCAAuC;IACvC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2CAA2C;IAC3C,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,yDAAyD;IACzD,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC5D,MAAM,WAAW,WAAW;IAAG,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,UAAU,EAAE,CAAA;CAAE;AAEzE;0DAC0D;AAC1D,wBAAgB,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,GAAG,WAAW,CA4BlF;AAED,mGAAmG;AACnG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,GAAG,aAAa,CAWhB"}

package/dist/risk/risk-policy.js

@@ -0,0 +1,50 @@
+// Risk engine (spec 284 PR-F). Deterministic, fail-closed evaluation of an exposure snapshot against a
+// risk policy — the substrate the strategy controller and ActiveSkillAssertion health checks consume.
+// Pure: no chain reads (the host feeds an ExposureState), no ambient time/randomness.
+/** Evaluate an exposure snapshot against a policy. allowed === (no breaches). Fail-closed: a policy field
+ *  the snapshot can't satisfy is a breach, not a pass. */
+export function evaluateRisk(state, policy) {
+    const breaches = [];
+    // NEW-TSA-5: a non-finite (NaN / Infinity) snapshot value makes a `>` / `<` comparison silently false, so a
+    // reserve / leverage / exposure breach would pass unnoticed (fall-open). Fail-closed: when a policy field is
+    // set and the snapshot value it checks is non-finite, that IS a breach — we can't prove compliance.
+    const nf = (n) => !Number.isFinite(n);
+    if (policy.maxProtocolExposureBps !== undefined) {
+        for (const [protocol, bps] of Object.entries(state.perProtocolBps)) {
+            if (nf(bps) || bps > policy.maxProtocolExposureBps)
+                breaches.push({ code: 'protocol-exposure-exceeded', detail: `${protocol}: ${bps}bps > ${policy.maxProtocolExposureBps}bps` });
+        }
+    }
+    if (policy.maxTotalExposureBps !== undefined && (nf(state.totalExposureBps) || state.totalExposureBps > policy.maxTotalExposureBps)) {
+        breaches.push({ code: 'total-exposure-exceeded', detail: `${state.totalExposureBps}bps > ${policy.maxTotalExposureBps}bps` });
+    }
+    if (policy.maxLeverage !== undefined && (nf(state.leverage) || state.leverage > policy.maxLeverage)) {
+        breaches.push({ code: 'leverage-exceeded', detail: `${state.leverage} > ${policy.maxLeverage}` });
+    }
+    if (policy.minLiquidityReserve !== undefined) {
+        const reserve = Number(state.liquidityReserve);
+        if (nf(reserve) || reserve < Number(policy.minLiquidityReserve))
+            breaches.push({ code: 'liquidity-reserve-below-min', detail: `${state.liquidityReserve} < ${policy.minLiquidityReserve}` });
+    }
+    if (policy.maxOracleStalenessSeconds !== undefined && (nf(state.oracleAgeSeconds) || state.oracleAgeSeconds > policy.maxOracleStalenessSeconds)) {
+        breaches.push({ code: 'oracle-stale', detail: `${state.oracleAgeSeconds}s > ${policy.maxOracleStalenessSeconds}s` });
+    }
+    if (policy.minLiquidationBufferBps !== undefined && (nf(state.liquidationBufferBps) || state.liquidationBufferBps < policy.minLiquidationBufferBps)) {
+        breaches.push({ code: 'liquidation-buffer-too-thin', detail: `${state.liquidationBufferBps}bps < ${policy.minLiquidationBufferBps}bps` });
+    }
+    return { allowed: breaches.length === 0, breaches };
+}
+/** Build an ExposureState from per-protocol exposure values + scalars (helper for hosts/tests). */
+export function aggregateExposure(args) {
+    const totalExposureBps = Object.values(args.perProtocol).reduce((a, b) => a + b, 0);
+    return {
+        totalValue: args.totalValue,
+        perProtocolBps: args.perProtocol,
+        totalExposureBps,
+        leverage: args.leverage ?? 1,
+        liquidityReserve: args.liquidityReserve ?? '0',
+        oracleAgeSeconds: args.oracleAgeSeconds ?? 0,
+        liquidationBufferBps: args.liquidationBufferBps ?? 10_000,
+    };
+}
+//# sourceMappingURL=risk-policy.js.map

package/dist/risk/risk-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-policy.js","sourceRoot":"","sources":["../../src/risk/risk-policy.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,sGAAsG;AACtG,sFAAsF;AA8BtF;0DAC0D;AAC1D,MAAM,UAAU,YAAY,CAAC,KAAoB,EAAE,MAAkB;IACnE,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,4GAA4G;IAC5G,6GAA6G;IAC7G,oGAAoG;IACpG,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YACnE,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,MAAM,CAAC,sBAAsB;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,GAAG,QAAQ,KAAK,GAAG,SAAS,MAAM,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;QACpL,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACpI,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,gBAAgB,SAAS,MAAM,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;IAChI,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACpG,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,MAAM,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC/C,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,gBAAgB,MAAM,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IAC/L,CAAC;IACD,IAAI,MAAM,CAAC,yBAAyB,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAChJ,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,gBAAgB,OAAO,MAAM,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,MAAM,CAAC,uBAAuB,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,KAAK,CAAC,oBAAoB,GAAG,MAAM,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACpJ,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,oBAAoB,SAAS,MAAM,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;IAC5I,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAAC,IAOjC;IACC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,cAAc,EAAE,IAAI,CAAC,WAAW;QAChC,gBAAgB;QAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC;QAC5B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,GAAG;QAC9C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,CAAC;QAC5C,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,MAAM;KAC1D,CAAC;AACJ,CAAC"}

package/dist/schemas.d.ts

@@ -0,0 +1,68 @@
+import type { Schema } from '@agenticprimitives/service-agent';
+import type { AssetType } from './capabilities.js';
+/** A CAIP-2-ish network id, e.g. "eip155:84532". Opaque to the catalog. */
+export type NetworkId = string;
+/** An account the treasury can act on — the SA address (canonical id) or a provider-scoped account id. */
+export type AccountRef = string;
+export interface AssetRef {
+    type: AssetType;
+    /** Token contract address for erc20; omitted/"native" for the native asset. */
+    address?: string;
+    /** Optional human symbol for display only — never authoritative. */
+    symbol?: string;
+}
+export interface AssetAmount {
+    asset: AssetRef;
+    /** Decimal string, smallest unit. */
+    amount: string;
+}
+export interface AccountQuery {
+    account: AccountRef;
+    network?: NetworkId;
+}
+export interface BalanceResult {
+    account: AccountRef;
+    balances: AssetAmount[];
+}
+export interface TransferInput {
+    account: AccountRef;
+    network: NetworkId;
+    to: string;
+    asset: AssetRef;
+    amount: string;
+    memo?: string;
+}
+export interface TransferResult {
+    txHash: string;
+    to: string;
+    amount: string;
+}
+export interface SignInput {
+    account: AccountRef;
+    payload: string;
+    kind: 'message' | 'typed-data';
+}
+export interface SignResult {
+    signature: string;
+}
+export interface SwapQuoteInput {
+    network: NetworkId;
+    sell: AssetRef;
+    buy: AssetRef;
+    amount: string;
+}
+export interface SwapExecuteInput extends SwapQuoteInput {
+    account: AccountRef;
+    maxSlippageBps?: number;
+}
+export interface RawTxInput {
+    account: AccountRef;
+    network: NetworkId;
+    to: string;
+    value?: string;
+    data?: string;
+}
+/** Minimal structural validator. Checks presence of required keys + that each is a non-empty string when
+ *  declared `string`. Returns the value typed as T (no coercion). Throws on the first missing/empty field. */
+export declare function objectSchema<T>(name: string, required: Record<string, 'string' | 'number' | 'object'>): Schema<T>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,2EAA2E;AAC3E,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAC/B,0GAA0G;AAC1G,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,SAAS,CAAC;IAChB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,QAAQ,CAAC;IAChB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAAG,OAAO,EAAE,UAAU,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,CAAA;CAAE;AAC1E,MAAM,WAAW,aAAa;IAAG,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,WAAW,EAAE,CAAA;CAAE;AAE/E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,SAAS,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,cAAc;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAE9E,MAAM,WAAW,SAAS;IAAG,OAAO,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,YAAY,CAAA;CAAE;AACnG,MAAM,WAAW,UAAU;IAAG,SAAS,EAAE,MAAM,CAAA;CAAE;AAEjD,MAAM,WAAW,cAAc;IAAG,OAAO,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACrG,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IAAG,OAAO,EAAE,UAAU,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE;AAEzG,MAAM,WAAW,UAAU;IAAG,OAAO,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AAElH;8GAC8G;AAC9G,wBAAgB,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAejH"}

package/dist/schemas.js

@@ -0,0 +1,24 @@
+/** Minimal structural validator. Checks presence of required keys + that each is a non-empty string when
+ *  declared `string`. Returns the value typed as T (no coercion). Throws on the first missing/empty field. */
+export function objectSchema(name, required) {
+    return {
+        parse(value) {
+            if (!value || typeof value !== 'object')
+                throw new Error(`[treasury] ${name}: expected an object`);
+            const v = value;
+            for (const [key, kind] of Object.entries(required)) {
+                const got = v[key];
+                if (got === undefined || got === null)
+                    throw new Error(`[treasury] ${name}: missing "${key}"`);
+                if (kind === 'string' && (typeof got !== 'string' || got.length === 0))
+                    throw new Error(`[treasury] ${name}: "${key}" must be a non-empty string`);
+                if (kind === 'number' && typeof got !== 'number')
+                    throw new Error(`[treasury] ${name}: "${key}" must be a number`);
+                if (kind === 'object' && typeof got !== 'object')
+                    throw new Error(`[treasury] ${name}: "${key}" must be an object`);
+            }
+            return value;
+        },
+    };
+}
+//# sourceMappingURL=schemas.js.map

package/dist/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AA8CA;8GAC8G;AAC9G,MAAM,UAAU,YAAY,CAAI,IAAY,EAAE,QAAwD;IACpG,OAAO;QACL,KAAK,CAAC,KAAc;YAClB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,sBAAsB,CAAC,CAAC;YACnG,MAAM,CAAC,GAAG,KAAgC,CAAC;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;gBACnB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,cAAc,GAAG,GAAG,CAAC,CAAC;gBAC/F,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,MAAM,GAAG,8BAA8B,CAAC,CAAC;gBACnJ,IAAI,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,MAAM,GAAG,oBAAoB,CAAC,CAAC;gBACnH,IAAI,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,MAAM,GAAG,qBAAqB,CAAC,CAAC;YACtH,CAAC;YACD,OAAO,KAAU,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/solvers/broker.d.ts

@@ -0,0 +1,24 @@
+import type { ResolvedTreasuryOrder } from '../intents/resolved-treasury-order.js';
+import type { SolverContext, TreasuryPlanQuote, TreasurySolver } from './solver-port.js';
+import { type RankWeights, type RankedQuote, type SelectionReceipt } from './quote-ranking.js';
+export interface SolveOptions {
+    weights?: RankWeights;
+    /** When true (default), each quote is validated and invalid ones are excluded from ranking. */
+    validate?: boolean;
+}
+export interface SolveResult {
+    quotes: TreasuryPlanQuote[];
+    rejected: {
+        quoteId: string;
+        solverId: string;
+        violations: string[];
+    }[];
+    ranked: RankedQuote[];
+    selection: SelectionReceipt;
+}
+export declare class SolverBroker {
+    private solvers;
+    register(solver: TreasurySolver): this;
+    solve(order: ResolvedTreasuryOrder, ctx: SolverContext, opts?: SolveOptions): Promise<SolveResult>;
+}
+//# sourceMappingURL=broker.d.ts.map

package/dist/solvers/broker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.d.ts","sourceRoot":"","sources":["../../src/solvers/broker.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAA2D,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGxJ,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,QAAQ,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IACxE,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,SAAS,EAAE,gBAAgB,CAAC;CAC7B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,OAAO,CAAwB;IAEvC,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;IAKhC,KAAK,CAAC,KAAK,EAAE,qBAAqB,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;CA+B7G"}