@agentsmarket/cli 0.1.1 → 0.5.0

package/dist/lib/pipeline-spec.js

@@ -0,0 +1,273 @@
+/**
+ * Pipeline spec validation — shared between `agentsmarket run` and `agentsmarket validate`.
+ *
+ * Returns:
+ *   { ok: true, usesStages, warnings }  — spec is valid
+ *   { ok: false, error }                — spec has issue
+ *
+ * v0.2 additions:
+ *   - `uses@version` syntax validation (semver-like hint; full validation at runtime)
+ *   - `output_format: structured_json` requires non-empty `fields: [...]`
+ *   - `mcp_servers`/`mcp_tools` are arrays of strings (declaration-level only)
+ *   - `working_dir` is a non-empty string
+ *   - `uses_parallel` (v0.3) is rejected with a clear message
+ *
+ * v0.3 R6 additions (Provider ≠ Model):
+ *   - When a stage declares `provider:`, the (provider, model) pair must be
+ *     registered in `PROVIDER_REGISTRY` (openai, anthropic, minimax,
+ *     openrouter, replicate). Validated via `validateProviderModel()` from
+ *     `@agentsmarket/pipeline-runtime`. Auto-dispatch by model name removed.
+ */
+import { validateProviderModel } from '@agentsmarket/pipeline-runtime';
+export const COST_PER_LLM_CALL_USDC = 0.01;
+const VERSION_HINT_RE = /^[A-Za-z0-9._+\-]{1,32}$/;
+const MCP_NAME_RE = /^[a-z][a-z0-9_-]{0,63}$/;
+const OUTPUT_FORMAT_VALUES = new Set(['text', 'code', 'markdown', 'structured_json']);
+const WORKING_DIR_HINT_RE = /^[./~A-Za-z0-9_\-/ ]{1,512}$/;
+export function validatePipelineSpec(spec) {
+    if (!spec || typeof spec !== 'object') {
+        return { ok: false, error: 'spec must be an object' };
+    }
+    const s = spec;
+    if (!s.name || typeof s.name !== 'string') {
+        return { ok: false, error: 'spec.name is required (string)' };
+    }
+    if (!Array.isArray(s.stages) || s.stages.length === 0) {
+        return { ok: false, error: 'spec.stages[] is required and must be non-empty' };
+    }
+    const seenIds = new Set();
+    const usesStages = [];
+    const warnings = [];
+    for (let i = 0; i < s.stages.length; i++) {
+        const stage = s.stages[i];
+        if (!stage || typeof stage !== 'object') {
+            return { ok: false, error: `stages[${i}] must be an object` };
+        }
+        if (!stage.id || typeof stage.id !== 'string') {
+            return { ok: false, error: `stages[${i}].id is required (string)` };
+        }
+        if (seenIds.has(stage.id)) {
+            return { ok: false, error: `duplicate stage id: '${stage.id}'` };
+        }
+        seenIds.add(stage.id);
+        if (stage.uses_parallel !== undefined) {
+            return {
+                ok: false,
+                error: `stage '${stage.id}': 'uses_parallel' is v0.3+ and not supported by v0.2 runtime. Use 'uses:' (sequential) or split into multiple stages.`,
+            };
+        }
+        const hasModel = typeof stage.model === 'string' && stage.model.length > 0;
+        const hasUses = stage.uses !== undefined;
+        const hasPrompt = typeof stage.prompt === 'string' && stage.prompt.length > 0;
+        if (!hasModel && !hasUses && !hasPrompt) {
+            return {
+                ok: false,
+                error: `stage '${stage.id}': must have 'model'+'prompt' (LLM), 'uses' (skill), or just 'prompt'`,
+            };
+        }
+        if (hasUses) {
+            usesStages.push(stage.id);
+            const usesErr = validateUsesSyntax(stage.uses, stage.id);
+            if (usesErr)
+                return { ok: false, error: usesErr };
+        }
+        if (stage.output_format !== undefined) {
+            if (typeof stage.output_format !== 'string' || !OUTPUT_FORMAT_VALUES.has(stage.output_format)) {
+                return {
+                    ok: false,
+                    error: `stage '${stage.id}': output_format must be one of text|code|markdown|structured_json`,
+                };
+            }
+            if (stage.output_format === 'structured_json') {
+                if (!Array.isArray(stage.fields) || stage.fields.length === 0) {
+                    return {
+                        ok: false,
+                        error: `stage '${stage.id}': output_format=structured_json requires 'fields: [...]' with at least one entry`,
+                    };
+                }
+                for (const f of stage.fields) {
+                    if (typeof f !== 'string' || f.length === 0) {
+                        return {
+                            ok: false,
+                            error: `stage '${stage.id}': every entry in 'fields' must be a non-empty string`,
+                        };
+                    }
+                }
+            }
+        }
+        if (stage.mcp_servers !== undefined) {
+            if (!Array.isArray(stage.mcp_servers)) {
+                return { ok: false, error: `stage '${stage.id}': mcp_servers must be an array of strings` };
+            }
+            for (const name of stage.mcp_servers) {
+                if (typeof name !== 'string' || !MCP_NAME_RE.test(name)) {
+                    return {
+                        ok: false,
+                        error: `stage '${stage.id}': mcp_servers entries must match /^[a-z][a-z0-9_-]{0,63}$/ — got '${String(name)}'`,
+                    };
+                }
+            }
+            warnings.push(`stage '${stage.id}': mcp_servers declared but not executed in v0.2 (forward-compat for v0.3)`);
+        }
+        if (stage.mcp_tools !== undefined) {
+            if (!Array.isArray(stage.mcp_tools)) {
+                return { ok: false, error: `stage '${stage.id}': mcp_tools must be an array of strings` };
+            }
+            for (const name of stage.mcp_tools) {
+                if (typeof name !== 'string' || !MCP_NAME_RE.test(name)) {
+                    return {
+                        ok: false,
+                        error: `stage '${stage.id}': mcp_tools entries must match /^[a-z][a-z0-9_-]{0,63}$/ — got '${String(name)}'`,
+                    };
+                }
+            }
+            warnings.push(`stage '${stage.id}': mcp_tools declared but not executed in v0.2 (forward-compat for v0.3)`);
+        }
+        if (stage.working_dir !== undefined && stage.working_dir !== null) {
+            if (typeof stage.working_dir !== 'string' || !WORKING_DIR_HINT_RE.test(stage.working_dir)) {
+                return {
+                    ok: false,
+                    error: `stage '${stage.id}': working_dir must be a non-empty path-like string`,
+                };
+            }
+            warnings.push(`stage '${stage.id}': working_dir is CLI-only — server execution will log 'working_dir_ignored_on_server'`);
+        }
+        if (stage.provider !== undefined) {
+            if (typeof stage.provider !== 'string') {
+                return {
+                    ok: false,
+                    error: `stage '${stage.id}': provider must be a string (got ${typeof stage.provider})`,
+                };
+            }
+            if (stage.provider.length === 0) {
+                return {
+                    ok: false,
+                    error: `stage '${stage.id}': provider must be a non-empty string`,
+                };
+            }
+            const stageModel = stage.model ?? s.defaults?.model ?? 'MiniMax-M3';
+            try {
+                validateProviderModel(stage.provider, stageModel);
+            }
+            catch (e) {
+                const msg = e instanceof Error ? e.message : String(e);
+                return {
+                    ok: false,
+                    error: `stage '${stage.id}': ${msg}`,
+                };
+            }
+        }
+        if (stage.retry !== undefined) {
+            const err = validateRetryConfig(stage.retry, stage.id);
+            if (err)
+                return { ok: false, error: err };
+        }
+        if (stage.run_if !== undefined) {
+            if (typeof stage.run_if !== 'string' || stage.run_if.length === 0) {
+                return { ok: false, error: `stage '${stage.id}': run_if must be a non-empty string` };
+            }
+        }
+        if (stage.when !== undefined) {
+            const err = validateWhenInSpec(stage.when, stage.id);
+            if (err)
+                return { ok: false, error: err };
+        }
+    }
+    return { ok: true, usesStages, warnings };
+}
+function validateWhenInSpec(when, stageId) {
+    if (typeof when === 'object' && when !== null && !Array.isArray(when)) {
+        const w = when;
+        if (Array.isArray(w.all)) {
+            for (const c of w.all) {
+                if (typeof c !== 'string') {
+                    return `stage '${stageId}': when.all entries must be strings`;
+                }
+            }
+        }
+        else if (Array.isArray(w.any)) {
+            for (const c of w.any) {
+                if (typeof c !== 'string') {
+                    return `stage '${stageId}': when.any entries must be strings`;
+                }
+            }
+        }
+        else {
+            return `stage '${stageId}': when object must have 'all' or 'any' array`;
+        }
+    }
+    else if (typeof when !== 'string') {
+        return `stage '${stageId}': when must be a string or object with all/any`;
+    }
+    return null;
+}
+function validateRetryConfig(retry, stageId) {
+    if (typeof retry !== 'object' || retry === null || Array.isArray(retry)) {
+        return `stage '${stageId}': retry must be an object`;
+    }
+    const r = retry;
+    if (r.attempts !== undefined) {
+        if (typeof r.attempts !== 'number' || r.attempts < 1 || r.attempts > 10 || !Number.isInteger(r.attempts)) {
+            return `stage '${stageId}': retry.attempts must be an integer 1..10 (got ${String(r.attempts)})`;
+        }
+    }
+    if (r.backoff !== undefined && !['exponential', 'linear', 'fixed'].includes(String(r.backoff))) {
+        return `stage '${stageId}': retry.backoff must be one of exponential|linear|fixed (got ${String(r.backoff)})`;
+    }
+    if (r.retryable_status !== undefined) {
+        if (!Array.isArray(r.retryable_status)) {
+            return `stage '${stageId}': retry.retryable_status must be an array of HTTP status codes`;
+        }
+        for (const code of r.retryable_status) {
+            if (typeof code !== 'number' || code < 100 || code > 599 || !Number.isInteger(code)) {
+                return `stage '${stageId}': retry.retryable_status entries must be integers 100..599 (got ${String(code)})`;
+            }
+        }
+    }
+    if (r.initial_ms !== undefined) {
+        if (typeof r.initial_ms !== 'number' || r.initial_ms < 0) {
+            return `stage '${stageId}': retry.initial_ms must be a non-negative number`;
+        }
+    }
+    return null;
+}
+function validateUsesSyntax(uses, stageId) {
+    if (typeof uses === 'string') {
+        if (uses.length === 0)
+            return `stage '${stageId}': empty 'uses' string`;
+        const err = validateUsesEntrySyntax(uses, stageId, 0);
+        return err;
+    }
+    if (Array.isArray(uses)) {
+        if (uses.length === 0)
+            return `stage '${stageId}': empty 'uses' array`;
+        for (let j = 0; j < uses.length; j++) {
+            const item = uses[j];
+            if (typeof item !== 'string') {
+                return `stage '${stageId}': uses[${j}] must be a string (got ${typeof item})`;
+            }
+            const err = validateUsesEntrySyntax(item, stageId, j);
+            if (err)
+                return err;
+        }
+        return null;
+    }
+    return `stage '${stageId}': 'uses' must be a string or array of strings`;
+}
+function validateUsesEntrySyntax(raw, stageId, idx) {
+    const at = raw.lastIndexOf('@');
+    if (at === -1) {
+        return null;
+    }
+    if (at === 0)
+        return `stage '${stageId}': uses[${idx}] starts with '@' (empty skill id)`;
+    if (at === raw.length - 1)
+        return `stage '${stageId}': uses[${idx}] ends with '@' (empty version)`;
+    const id = raw.slice(0, at);
+    const version = raw.slice(at + 1);
+    if (!VERSION_HINT_RE.test(version)) {
+        return `stage '${stageId}': uses[${idx}] version part '${version}' is not a valid identifier (allowed: alphanumeric, '.', '_', '+', '-')`;
+    }
+    return null;
+}
+//# sourceMappingURL=pipeline-spec.js.map

package/dist/lib/pipeline-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline-spec.js","sourceRoot":"","sources":["../../src/lib/pipeline-spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAiCvE,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAM3C,MAAM,eAAe,GAAG,0BAA0B,CAAC;AACnD,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;AACtF,MAAM,mBAAmB,GAAG,8BAA8B,CAAC;AAE3D,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,CAAC,GAAG,IAAwB,CAAC;IACnC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,qBAAqB,EAAE,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,2BAA2B,EAAE,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC;QACnE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEtB,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,wHAAwH;aAClJ,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;QACzC,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9E,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,uEAAuE;aACjG,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YACzD,IAAI,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACpD,CAAC;QAED,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC9F,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,oEAAoE;iBAC9F,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,aAAa,KAAK,iBAAiB,EAAE,CAAC;gBAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC9D,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,mFAAmF;qBAC7G,CAAC;gBACJ,CAAC;gBACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC7B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC5C,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,uDAAuD;yBACjF,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,4CAA4C,EAAE,CAAC;YAC9F,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxD,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,sEAAsE,MAAM,CAAC,IAAI,CAAC,GAAG;qBAC/G,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,IAAI,CACX,UAAU,KAAK,CAAC,EAAE,4EAA4E,CAC/F,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,0CAA0C,EAAE,CAAC;YAC5F,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACnC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxD,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,oEAAoE,MAAM,CAAC,IAAI,CAAC,GAAG;qBAC7G,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,IAAI,CACX,UAAU,KAAK,CAAC,EAAE,0EAA0E,CAC7F,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAClE,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1F,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,qDAAqD;iBAC/E,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,IAAI,CACX,UAAU,KAAK,CAAC,EAAE,wFAAwF,CAC3G,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACvC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,qCAAqC,OAAO,KAAK,CAAC,QAAQ,GAAG;iBACvF,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,wCAAwC;iBAClE,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,IAAI,YAAY,CAAC;YACpE,IAAI,CAAC;gBACH,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,MAAM,GAAG,EAAE;iBACrC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YACvD,IAAI,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,sCAAsC,EAAE,CAAC;YACxF,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa,EAAE,OAAe;IACxD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gBACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC1B,OAAO,UAAU,OAAO,qCAAqC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gBACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC1B,OAAO,UAAU,OAAO,qCAAqC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,UAAU,OAAO,+CAA+C,CAAC;QAC1E,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,UAAU,OAAO,iDAAiD,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,OAAe;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,UAAU,OAAO,4BAA4B,CAAC;IACvD,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzG,OAAO,UAAU,OAAO,mDAAmD,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnG,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC/F,OAAO,UAAU,OAAO,iEAAiE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAChH,CAAC;IACD,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvC,OAAO,UAAU,OAAO,iEAAiE,CAAC;QAC5F,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpF,OAAO,UAAU,OAAO,oEAAoE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9G,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,UAAU,OAAO,mDAAmD,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa,EAAE,OAAe;IACxD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,UAAU,OAAO,wBAAwB,CAAC;QACxE,MAAM,GAAG,GAAG,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,UAAU,OAAO,uBAAuB,CAAC;QACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OAAO,UAAU,OAAO,WAAW,CAAC,2BAA2B,OAAO,IAAI,GAAG,CAAC;YAChF,CAAC;YACD,MAAM,GAAG,GAAG,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YACtD,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC;QACtB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,UAAU,OAAO,gDAAgD,CAAC;AAC3E,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAW,EAAE,OAAe,EAAE,GAAW;IACxE,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,UAAU,OAAO,WAAW,GAAG,oCAAoC,CAAC;IACzF,IAAI,EAAE,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,UAAU,OAAO,WAAW,GAAG,iCAAiC,CAAC;IACnG,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,UAAU,OAAO,WAAW,GAAG,mBAAmB,OAAO,yEAAyE,CAAC;IAC5I,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentsmarket/cli",
-  "version": "0.1.1",
+  "version": "0.5.0",
   "description": "CLI for agentsmarket.world — agent identity, wallet, and skill invocations",
   "license": "MIT",
   "type": "module",
@@ -14,23 +14,31 @@
   ],
   "scripts": {
     "build": "tsc",
-    "test": "node --test --import tsx/esm tests/*.test.ts",
+    "test": "vitest run",
     "dev": "tsx src/index.ts",
     "lint": "tsc --noEmit"
   },
   "dependencies": {
+    "@agentsmarket/generator": "workspace:*",
+    "@agentsmarket/pipeline-runtime": "workspace:*",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "@noble/curves": "^2.4.0",
     "@noble/hashes": "^2.4.0",
+    "@scure/bip32": "^2.4.0",
+    "@scure/bip39": "^2.4.0",
     "commander": "^12.1.0",
+    "ethers": "^6.17.0",
+    "js-yaml": "^4.1.0",
     "zod": "^3.25"
   },
   "devDependencies": {
+    "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.0.0",
     "tsx": "^4.19.0",
-    "typescript": "^5.6.0"
+    "typescript": "^5.6.0",
+    "vitest": "^4.1.11"
   },
   "engines": {
     "node": ">=20"
   }
-}
+}

package/dist/lib/keys.d.ts

@@ -1,69 +0,0 @@
-/**
- * Ed25519 key management for agentsmarket agents.
- *
- * Uses Node.js built-in `crypto` (RFC 8032 compliant). NO external crypto
- * dependencies — battle-tested by the Node.js team.
- *
- * SECURITY: This is the foundation of agent identity. If keys are generated
- * incorrectly, agents lose their identity, reputation, and any funds.
- * Every function here is unit-tested.
- */
-import * as crypto from 'node:crypto';
-/**
- * Pair of Ed25519 keys for an agent.
- */
-export interface AgentKeypair {
-    publicKey: crypto.KeyObject;
-    privateKey: crypto.KeyObject;
-}
-/**
- * Generate a fresh Ed25519 keypair.
- * Uses Node's built-in crypto (constant-time, side-channel resistant).
- */
-export declare function generateKeypair(): AgentKeypair;
-/**
- * Derive agent_id from public key.
- *
- * Format: "ed25519:" + base64url(raw 32-byte Ed25519 public key)
- * Example: "ed25519:wdlEEYI0rCNkobjR0d1aPJBl6v2HQ4Sqh8C5FZ3mNoE"
- *
- * The base64url encoding has no padding and uses URL-safe characters.
- */
-export declare function agentIdFromPublicKey(publicKey: crypto.KeyObject): string;
-/**
- * Export public key as raw 32-byte buffer.
- *
- * SPKI DER for Ed25519 ends with the BIT STRING containing the 32-byte key.
- * The last 32 bytes of the DER encoding ARE the raw public key.
- */
-export declare function exportPublicKeyRaw(publicKey: crypto.KeyObject): Buffer;
-/**
- * Export public key as hex string (64 chars).
- * Useful for debugging.
- */
-export declare function exportPublicKeyHex(publicKey: crypto.KeyObject): string;
-/**
- * Sign a message with the private key.
- *
- * Returns 64-byte Ed25519 signature.
- *
- * Ed25519 doesn't use a separate hash algorithm — first arg to crypto.sign is null.
- */
-export declare function signMessage(privateKey: crypto.KeyObject, message: Buffer | Uint8Array): Buffer;
-/**
- * Verify a signature against a public key and message.
- * Returns true if valid, false otherwise.
- */
-export declare function verifySignature(publicKey: crypto.KeyObject, message: Buffer | Uint8Array, signature: Buffer | Uint8Array): boolean;
-/**
- * Load private key from PEM string (PKCS8 format).
- */
-export declare function loadPrivateKey(pem: string): crypto.KeyObject;
-/**
- * Derive public key from private key.
- */
-export declare function derivePublicKey(privateKey: crypto.KeyObject): crypto.KeyObject;
-/**
- * Export private key as PEM string (PKCS8 format, standard).
- */
-export declare function exportPrivateKeyPem(privateKey: crypto.KeyObject): string;

package/dist/lib/keys.js

@@ -1,85 +0,0 @@
-/**
- * Ed25519 key management for agentsmarket agents.
- *
- * Uses Node.js built-in `crypto` (RFC 8032 compliant). NO external crypto
- * dependencies — battle-tested by the Node.js team.
- *
- * SECURITY: This is the foundation of agent identity. If keys are generated
- * incorrectly, agents lose their identity, reputation, and any funds.
- * Every function here is unit-tested.
- */
-import * as crypto from 'node:crypto';
-/**
- * Generate a fresh Ed25519 keypair.
- * Uses Node's built-in crypto (constant-time, side-channel resistant).
- */
-export function generateKeypair() {
-    const { publicKey, privateKey } = crypto.generateKeyPairSync('ed25519');
-    return { publicKey, privateKey };
-}
-/**
- * Derive agent_id from public key.
- *
- * Format: "ed25519:" + base64url(raw 32-byte Ed25519 public key)
- * Example: "ed25519:wdlEEYI0rCNkobjR0d1aPJBl6v2HQ4Sqh8C5FZ3mNoE"
- *
- * The base64url encoding has no padding and uses URL-safe characters.
- */
-export function agentIdFromPublicKey(publicKey) {
-    const raw = exportPublicKeyRaw(publicKey);
-    return 'ed25519:' + raw.toString('base64url');
-}
-/**
- * Export public key as raw 32-byte buffer.
- *
- * SPKI DER for Ed25519 ends with the BIT STRING containing the 32-byte key.
- * The last 32 bytes of the DER encoding ARE the raw public key.
- */
-export function exportPublicKeyRaw(publicKey) {
-    const der = publicKey.export({ format: 'der', type: 'spki' });
-    return Buffer.from(der).subarray(-32);
-}
-/**
- * Export public key as hex string (64 chars).
- * Useful for debugging.
- */
-export function exportPublicKeyHex(publicKey) {
-    return exportPublicKeyRaw(publicKey).toString('hex');
-}
-/**
- * Sign a message with the private key.
- *
- * Returns 64-byte Ed25519 signature.
- *
- * Ed25519 doesn't use a separate hash algorithm — first arg to crypto.sign is null.
- */
-export function signMessage(privateKey, message) {
-    const signature = crypto.sign(null, Buffer.from(message), privateKey);
-    return Buffer.from(signature);
-}
-/**
- * Verify a signature against a public key and message.
- * Returns true if valid, false otherwise.
- */
-export function verifySignature(publicKey, message, signature) {
-    return crypto.verify(null, Buffer.from(message), publicKey, Buffer.from(signature));
-}
-/**
- * Load private key from PEM string (PKCS8 format).
- */
-export function loadPrivateKey(pem) {
-    return crypto.createPrivateKey(pem);
-}
-/**
- * Derive public key from private key.
- */
-export function derivePublicKey(privateKey) {
-    return crypto.createPublicKey(privateKey);
-}
-/**
- * Export private key as PEM string (PKCS8 format, standard).
- */
-export function exportPrivateKeyPem(privateKey) {
-    return privateKey.export({ format: 'pem', type: 'pkcs8' });
-}
-//# sourceMappingURL=keys.js.map

package/dist/lib/keys.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/lib/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAUtC;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAA2B;IAC9D,MAAM,GAAG,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC1C,OAAO,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAA2B;IAC5D,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAA2B;IAC5D,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,UAA4B,EAAE,OAA4B;IACpF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,SAA2B,EAC3B,OAA4B,EAC5B,SAA8B;IAE9B,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,UAA4B;IAC1D,OAAO,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAA4B;IAC9D,OAAO,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAW,CAAC;AACvE,CAAC"}

package/dist/lib/payment-keys.d.ts

@@ -1,25 +0,0 @@
-/**
- * Secp256k1 key management for USDC payments (EIP-3009).
- *
- * Separate from Ed25519 agent identity keys. Agent has BOTH:
- * - Ed25519 (agent.key): identity + HTTP request signing
- * - secp256k1 (payment.key): USDC payment authorization signing
- *
- * Both are saved as PKCS8 PEM (mode 0600). Node crypto handles both.
- */
-import * as crypto from 'node:crypto';
-export interface PaymentKeypair {
-    publicKey: crypto.KeyObject;
-    privateKey: crypto.KeyObject;
-}
-export declare function generatePaymentKeypair(): PaymentKeypair;
-export declare function exportPaymentPublicKeyRaw(key: crypto.KeyObject): Buffer;
-export declare function exportPaymentPublicKeyHex(key: crypto.KeyObject): string;
-export declare function exportPaymentAddress(key: crypto.KeyObject): string;
-export declare function loadPaymentPrivateKey(pem: string): crypto.KeyObject;
-export declare function exportPaymentPrivateKeyPem(privateKey: crypto.KeyObject): string;
-/**
- * Sign a 32-byte message hash with secp256k1 (used for EIP-3009).
- * Returns 65-byte signature: r (32) || s (32) || v (1, value 27 or 28).
- */
-export declare function signSecp256k1(privateKey: crypto.KeyObject, msgHash: Buffer): Buffer;

package/dist/lib/payment-keys.js

@@ -1,55 +0,0 @@
-/**
- * Secp256k1 key management for USDC payments (EIP-3009).
- *
- * Separate from Ed25519 agent identity keys. Agent has BOTH:
- * - Ed25519 (agent.key): identity + HTTP request signing
- * - secp256k1 (payment.key): USDC payment authorization signing
- *
- * Both are saved as PKCS8 PEM (mode 0600). Node crypto handles both.
- */
-import * as crypto from 'node:crypto';
-export function generatePaymentKeypair() {
-    const { publicKey, privateKey } = crypto.generateKeyPairSync('ec', { namedCurve: 'secp256k1' });
-    return { publicKey, privateKey };
-}
-function toPublicKey(key) {
-    return key.type === 'private' ? crypto.createPublicKey(key) : key;
-}
-export function exportPaymentPublicKeyRaw(key) {
-    const der = toPublicKey(key).export({ format: 'der', type: 'spki' });
-    return Buffer.from(der).subarray(-65).subarray(1);
-}
-export function exportPaymentPublicKeyHex(key) {
-    return '0x' + exportPaymentPublicKeyRaw(key).toString('hex');
-}
-export function exportPaymentAddress(key) {
-    const uncompressed = exportPaymentPublicKeyRaw(key);
-    const hash = crypto.createHash('sha256').update(uncompressed).digest();
-    return '0x' + hash.subarray(-20).toString('hex');
-}
-export function loadPaymentPrivateKey(pem) {
-    return crypto.createPrivateKey(pem);
-}
-export function exportPaymentPrivateKeyPem(privateKey) {
-    return privateKey.export({ format: 'pem', type: 'pkcs8' });
-}
-/**
- * Sign a 32-byte message hash with secp256k1 (used for EIP-3009).
- * Returns 65-byte signature: r (32) || s (32) || v (1, value 27 or 28).
- */
-export function signSecp256k1(privateKey, msgHash) {
-    const sig = crypto.sign('sha256', msgHash, { key: privateKey, dsaEncoding: 'der' });
-    const der = Buffer.from(sig);
-    if (der.length < 8)
-        throw new Error('invalid DER signature');
-    const rLen = der[3];
-    const sLen = der[4 + rLen];
-    const r = der.subarray(4, 4 + rLen);
-    const sStart = 4 + rLen + 2;
-    const s = der.subarray(sStart, sStart + sLen);
-    let rPadded = r.length === 32 ? r : (r.length < 32 ? Buffer.concat([Buffer.alloc(32 - r.length), r]) : r.subarray(-32));
-    let sPadded = s.length === 32 ? s : (s.length < 32 ? Buffer.concat([Buffer.alloc(32 - s.length), s]) : s.subarray(-32));
-    const v = 27 + (der[der.length - 1] & 1);
-    return Buffer.concat([rPadded, sPadded, Buffer.from([v])]);
-}
-//# sourceMappingURL=payment-keys.js.map

package/dist/lib/payment-keys.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"payment-keys.js","sourceRoot":"","sources":["../../src/lib/payment-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAOtC,MAAM,UAAU,sBAAsB;IACpC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;IAChG,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,WAAW,CAAC,GAAqB;IACxC,OAAO,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAqB;IAC7D,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAqB;IAC7D,OAAO,IAAI,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAqB;IACxD,MAAM,YAAY,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;IACvE,OAAO,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,OAAO,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,UAA4B;IACrE,OAAO,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAW,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,UAA4B,EAAE,OAAe;IACzE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9C,IAAI,OAAO,GAAG,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxH,IAAI,OAAO,GAAG,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxH,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC"}

package/dist/lib/payment.d.ts

@@ -1,27 +0,0 @@
-/**
- * EIP-3009 receiveWithAuthorization message builder + signer (CLI side).
- *
- * Phase 2 MVP: build the typed data for USDC on Base Sepolia, sign with
- * secp256k1, submit to server. Server verifies signature, nonce uniqueness,
- * and time window.
- */
-import type { KeyObject } from 'node:crypto';
-export interface Eip3009Payload {
-    from: string;
-    to: string;
-    value: string;
-    validAfter: string;
-    validBefore: string;
-    nonce: string;
-    v: number;
-    r: string;
-    s: string;
-}
-export interface BuildAuthorizationParams {
-    privateKey: KeyObject;
-    to: string;
-    valueUsdcBaseUnits: string | number;
-    validForSeconds?: number;
-}
-export declare function buildAndSignAuthorization(params: BuildAuthorizationParams): Eip3009Payload;
-export declare function loadPaymentKey(pem: string): KeyObject;