@agirails/sdk 2.0.1-beta → 2.0.2

package/dist/utils/validation.js

@@ -1,12 +1,37 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateAddress = validateAddress;
-exports.validateAmount = validateAmount;
-exports.validateDeadline = validateDeadline;
-exports.validateDisputeWindow = validateDisputeWindow;
-exports.validateTxId = validateTxId;
+exports.validateEndpointURL = exports.validateTxId = exports.validateDisputeWindow = exports.validateDeadline = exports.validateAmount = exports.validateAddress = void 0;
 const ethers_1 = require("ethers");
 const errors_1 = require("../errors");
+/**
+ * Input validation utilities
+ */
+/**
+ * Validate Ethereum address
+ */
 function validateAddress(address, fieldName = 'address') {
     if (!address || !(0, ethers_1.isAddress)(address)) {
         throw new errors_1.InvalidAddressError(address);
@@ -15,22 +40,35 @@ function validateAddress(address, fieldName = 'address') {
         throw new errors_1.ValidationError(fieldName, 'Address cannot be zero address');
     }
 }
+exports.validateAddress = validateAddress;
+/**
+ * Validate amount (must be > 0)
+ */
 function validateAmount(amount, _fieldName = 'amount') {
+    // Handle null/undefined before calling toString()
     if (!amount) {
-        throw new errors_1.InvalidAmountError(String(amount));
+        throw new errors_1.InvalidAmountError(String(amount)); // Convert safely to string
     }
     if (amount <= 0n) {
         throw new errors_1.InvalidAmountError(amount.toString());
     }
 }
+exports.validateAmount = validateAmount;
+/**
+ * Validate deadline (must be future timestamp)
+ */
 function validateDeadline(deadline, fieldName = 'deadline') {
     const now = Math.floor(Date.now() / 1000);
     if (deadline <= now) {
         throw new errors_1.ValidationError(fieldName, `Deadline must be in the future (now: ${now}, deadline: ${deadline})`);
     }
 }
+exports.validateDeadline = validateDeadline;
+/**
+ * Validate dispute window (max 30 days per spec)
+ */
 function validateDisputeWindow(disputeWindow, fieldName = 'disputeWindow') {
-    const MAX_DISPUTE_WINDOW = 30 * 24 * 60 * 60;
+    const MAX_DISPUTE_WINDOW = 30 * 24 * 60 * 60; // 30 days in seconds
     if (disputeWindow < 0) {
         throw new errors_1.ValidationError(fieldName, 'Dispute window cannot be negative');
     }
@@ -38,9 +76,148 @@ function validateDisputeWindow(disputeWindow, fieldName = 'disputeWindow') {
         throw new errors_1.ValidationError(fieldName, `Dispute window exceeds maximum (${MAX_DISPUTE_WINDOW}s = 30 days)`);
     }
 }
+exports.validateDisputeWindow = validateDisputeWindow;
+/**
+ * Validate transaction ID format
+ */
 function validateTxId(txId, fieldName = 'txId') {
     if (!txId || !txId.match(/^0x[a-fA-F0-9]{64}$/)) {
         throw new errors_1.ValidationError(fieldName, 'Invalid transaction ID format (expected bytes32)');
     }
 }
+exports.validateTxId = validateTxId;
+/**
+ * Check if IP address is private/local (SSRF protection)
+ *
+ * SECURITY FIX (H-1): Comprehensive private IP detection
+ * - IPv4: 127.0.0.0/8, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 169.254.0.0/16
+ * - IPv6: ::1, fc00::/7, fd00::/8, fe80::/10
+ * - IPv4-mapped IPv6: ::ffff:127.0.0.0/8, ::ffff:10.0.0.0/8, etc.
+ *
+ * @param ip - IP address (v4 or v6, no brackets)
+ * @returns true if IP is private/local
+ */
+function isPrivateIP(ip) {
+    // Remove IPv6 brackets if present
+    const cleanIP = ip.replace(/^\[|\]$/g, '');
+    // IPv4 patterns
+    const ipv4PrivatePatterns = [
+        /^127\./, // Loopback
+        /^10\./, // Private class A
+        /^172\.(1[6-9]|2\d|3[01])\./, // Private class B (172.16-172.31)
+        /^192\.168\./, // Private class C
+        /^169\.254\./, // Link-local / AWS metadata
+        /^0\./, // Invalid source
+        /^localhost$/i // Localhost hostname
+    ];
+    for (const pattern of ipv4PrivatePatterns) {
+        if (pattern.test(cleanIP)) {
+            return true;
+        }
+    }
+    // IPv6 patterns (without brackets)
+    const ipv6PrivatePatterns = [
+        /^::1$/, // IPv6 loopback
+        /^::ffff:127\./, // IPv4-mapped localhost
+        /^::ffff:10\./, // IPv4-mapped private 10.x
+        /^::ffff:192\.168\./, // IPv4-mapped private 192.168.x
+        /^::ffff:172\.(1[6-9]|2\d|3[01])\./, // IPv4-mapped private 172.16-31.x
+        /^::ffff:169\.254\./, // IPv4-mapped link-local (CRITICAL: AWS metadata)
+        /^fc00:/i, // IPv6 ULA fc00::/7
+        /^fd/i, // IPv6 ULA fd00::/8
+        /^fe80:/i // IPv6 link-local fe80::/10
+    ];
+    for (const pattern of ipv6PrivatePatterns) {
+        if (pattern.test(cleanIP)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Validate endpoint URL (for AgentRegistry)
+ *
+ * SECURITY FIX (H-1): Enhanced SSRF protection with DNS resolution
+ *
+ * Security checks:
+ * - Valid URL format
+ * - HTTPS or IPFS protocols only
+ * - Maximum length 256 characters
+ * - DNS resolution check (hostname → IP validation)
+ * - No private/local IP addresses (SSRF protection)
+ * - Blocks AWS metadata endpoint (169.254.169.254)
+ * - Fail-secure: if DNS lookup fails, reject
+ *
+ * **CRITICAL**: This function is now ASYNC due to DNS resolution.
+ * All callers MUST await this function.
+ *
+ * @param endpoint - URL to validate
+ * @param fieldName - Field name for error messages
+ * @throws {ValidationError} If endpoint is invalid or points to private IP
+ */
+async function validateEndpointURL(endpoint, fieldName = 'endpoint') {
+    if (!endpoint || endpoint.length === 0) {
+        throw new errors_1.ValidationError(fieldName, 'Endpoint is required');
+    }
+    const MAX_LENGTH = 256;
+    if (endpoint.length > MAX_LENGTH) {
+        throw new errors_1.ValidationError(fieldName, `Endpoint exceeds maximum length (${MAX_LENGTH})`);
+    }
+    let parsedUrl;
+    try {
+        parsedUrl = new URL(endpoint);
+    }
+    catch (e) {
+        throw new errors_1.ValidationError(fieldName, 'Endpoint must be a valid URL');
+    }
+    const allowedProtocols = ['https:', 'ipfs:'];
+    if (!allowedProtocols.includes(parsedUrl.protocol)) {
+        throw new errors_1.ValidationError(fieldName, `Endpoint protocol must be one of: ${allowedProtocols.join(', ')}`);
+    }
+    // SECURITY FIX (H-1): First check hostname syntax
+    // URL().hostname strips brackets from IPv6 addresses
+    const hostname = parsedUrl.hostname;
+    // Check if hostname itself looks like a private IP (bypass DNS for direct IPs)
+    if (isPrivateIP(hostname)) {
+        throw new errors_1.ValidationError(fieldName, `Endpoint hostname "${hostname}" is a private/local address (SSRF protection)`);
+    }
+    // SECURITY FIX (H-1): DNS resolution check
+    // Resolve hostname to IP address(es) and validate each resolved IP
+    // This prevents DNS rebinding attacks where hostname resolves to private IP
+    if (parsedUrl.protocol === 'https:') {
+        try {
+            // Dynamic import for Node.js dns module (not available in browser)
+            // If running in browser, skip DNS check (browsers have their own SSRF protection)
+            const dns = await Promise.resolve().then(() => __importStar(require('dns'))).catch(() => null);
+            if (dns) {
+                // Resolve hostname to ALL IP addresses and validate each (prevents AAAA/A bypass)
+                const results = await dns.promises.lookup(hostname, { all: true });
+                for (const { address, family } of results) {
+                    // Validate resolved IP is not private
+                    if (isPrivateIP(address)) {
+                        throw new errors_1.ValidationError(fieldName, `Endpoint hostname "${hostname}" resolves to private IP address ${address} (SSRF protection). ` +
+                            `This could be an attempt to access internal services. ` +
+                            `IP family: IPv${family}`);
+                    }
+                    // SECURITY FIX (H-1): CRITICAL - Block AWS metadata endpoint explicitly
+                    if (address === '169.254.169.254') {
+                        throw new errors_1.ValidationError(fieldName, `Endpoint resolves to AWS metadata endpoint (169.254.169.254). ` +
+                            `This is blocked for security reasons (credential theft prevention).`);
+                    }
+                }
+            }
+        }
+        catch (error) {
+            // SECURITY FIX (H-1): Fail-secure - if DNS lookup fails, reject
+            // Don't allow requests to unresolvable hostnames (could be DNS rebinding setup)
+            if (error instanceof errors_1.ValidationError) {
+                throw error; // Re-throw validation errors
+            }
+            throw new errors_1.ValidationError(fieldName, `Failed to resolve hostname "${hostname}": ${error.message}. ` +
+                `DNS resolution is required for SSRF protection (fail-secure mode).`);
+        }
+    }
+    // IPFS endpoints skip DNS check (no DNS resolution for IPFS CIDs)
+}
+exports.validateEndpointURL = validateEndpointURL;
 //# sourceMappingURL=validation.js.map

package/dist/utils/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":";;AAcA,0CAQC;AAKD,wCASC;AAKD,4CASC;AAKD,sDAgBC;AAKD,oCAIC;AAhFD,mCAA+C;AAC/C,sCAImB;AASnB,SAAgB,eAAe,CAAC,OAAe,EAAE,YAAoB,SAAS;IAC5E,IAAI,CAAC,OAAO,IAAI,CAAC,IAAA,kBAAS,EAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,4BAAmB,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,OAAO,KAAK,IAAA,mBAAU,EAAC,4CAA4C,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,wBAAe,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAKD,SAAgB,cAAc,CAAC,MAAc,EAAE,aAAqB,QAAQ;IAE1E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,2BAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,2BAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAKD,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,YAAoB,UAAU;IAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1C,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,IAAI,wBAAe,CACvB,SAAS,EACT,wCAAwC,GAAG,eAAe,QAAQ,GAAG,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAKD,SAAgB,qBAAqB,CACnC,aAAqB,EACrB,YAAoB,eAAe;IAEnC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAE7C,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,wBAAe,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;QACvC,MAAM,IAAI,wBAAe,CACvB,SAAS,EACT,mCAAmC,kBAAkB,cAAc,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAKD,SAAgB,YAAY,CAAC,IAAY,EAAE,YAAoB,MAAM;IACnE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,wBAAe,CAAC,SAAS,EAAE,kDAAkD,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAA+C;AAC/C,sCAImB;AAEnB;;GAEG;AAEH;;GAEG;AACH,SAAgB,eAAe,CAAC,OAAe,EAAE,YAAoB,SAAS;IAC5E,IAAI,CAAC,OAAO,IAAI,CAAC,IAAA,kBAAS,EAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,4BAAmB,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,OAAO,KAAK,IAAA,mBAAU,EAAC,4CAA4C,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,wBAAe,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AARD,0CAQC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,MAAc,EAAE,aAAqB,QAAQ;IAC1E,kDAAkD;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,2BAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,2BAA2B;IAC3E,CAAC;IAED,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,2BAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AATD,wCASC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,YAAoB,UAAU;IAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1C,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,IAAI,wBAAe,CACvB,SAAS,EACT,wCAAwC,GAAG,eAAe,QAAQ,GAAG,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AATD,4CASC;AAED;;GAEG;AACH,SAAgB,qBAAqB,CACnC,aAAqB,EACrB,YAAoB,eAAe;IAEnC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,qBAAqB;IAEnE,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,wBAAe,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;QACvC,MAAM,IAAI,wBAAe,CACvB,SAAS,EACT,mCAAmC,kBAAkB,cAAc,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAhBD,sDAgBC;AAED;;GAEG;AACH,SAAgB,YAAY,CAAC,IAAY,EAAE,YAAoB,MAAM;IACnE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,wBAAe,CAAC,SAAS,EAAE,kDAAkD,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAJD,oCAIC;AAED;;;;;;;;;;GAUG;AACH,SAAS,WAAW,CAAC,EAAU;IAC7B,kCAAkC;IAClC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAE3C,gBAAgB;IAChB,MAAM,mBAAmB,GAAG;QAC1B,QAAQ,EAAuB,WAAW;QAC1C,OAAO,EAAwB,kBAAkB;QACjD,4BAA4B,EAAG,kCAAkC;QACjE,aAAa,EAAkB,kBAAkB;QACjD,aAAa,EAAkB,4BAA4B;QAC3D,MAAM,EAAyB,iBAAiB;QAChD,cAAc,CAAiB,qBAAqB;KACrD,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,MAAM,mBAAmB,GAAG;QAC1B,OAAO,EAAwB,gBAAgB;QAC/C,eAAe,EAAgB,wBAAwB;QACvD,cAAc,EAAiB,2BAA2B;QAC1D,oBAAoB,EAAW,gCAAgC;QAC/D,mCAAmC,EAAG,kCAAkC;QACxE,oBAAoB,EAAW,kDAAkD;QACjF,SAAS,EAAsB,oBAAoB;QACnD,MAAM,EAAyB,oBAAoB;QACnD,SAAS,CAAsB,4BAA4B;KAC5D,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACI,KAAK,UAAU,mBAAmB,CAAC,QAAgB,EAAE,YAAoB,UAAU;IACxF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,wBAAe,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC;IACvB,IAAI,QAAQ,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,wBAAe,CAAC,SAAS,EAAE,oCAAoC,UAAU,GAAG,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,SAAc,CAAC;IACnB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,wBAAe,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,wBAAe,CACvB,SAAS,EACT,qCAAqC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnE,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,qDAAqD;IACrD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IAEpC,+EAA+E;IAC/E,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,wBAAe,CACvB,SAAS,EACT,sBAAsB,QAAQ,gDAAgD,CAC/E,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,mEAAmE;IACnE,4EAA4E;IAC5E,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,mEAAmE;YACnE,kFAAkF;YAClF,MAAM,GAAG,GAAG,MAAM,kDAAO,KAAK,IAAE,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAElD,IAAI,GAAG,EAAE,CAAC;gBACR,kFAAkF;gBAClF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;gBAEnE,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;oBAC1C,sCAAsC;oBACtC,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;wBACzB,MAAM,IAAI,wBAAe,CACvB,SAAS,EACT,sBAAsB,QAAQ,oCAAoC,OAAO,sBAAsB;4BAC7F,wDAAwD;4BACxD,iBAAiB,MAAM,EAAE,CAC5B,CAAC;oBACJ,CAAC;oBAED,wEAAwE;oBACxE,IAAI,OAAO,KAAK,iBAAiB,EAAE,CAAC;wBAClC,MAAM,IAAI,wBAAe,CACvB,SAAS,EACT,gEAAgE;4BAC9D,qEAAqE,CACxE,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,gEAAgE;YAChE,gFAAgF;YAChF,IAAI,KAAK,YAAY,wBAAe,EAAE,CAAC;gBACrC,MAAM,KAAK,CAAC,CAAC,6BAA6B;YAC5C,CAAC;YAED,MAAM,IAAI,wBAAe,CACvB,SAAS,EACT,+BAA+B,QAAQ,MAAM,KAAK,CAAC,OAAO,IAAI;gBAC9D,oEAAoE,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kEAAkE;AACpE,CAAC;AAvFD,kDAuFC"}

package/package.json

@@ -1,23 +1,30 @@
 {
   "name": "@agirails/sdk",
-  "version": "2.0.1-beta",
-  "description": "Protocol SDK for ACTP (Agent Commerce Transaction Protocol)",
+  "version": "2.0.2",
+  "description": "AGIRAILS SDK for the ACTP (Agent Commerce Transaction Protocol) - Unified mock + blockchain support",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "bin": {
+    "actp": "./bin/actp"
+  },
   "files": [
     "dist",
     "src",
-    "README.md"
+    "!src/**/*.test.ts",
+    "!src/**/*.spec.ts",
+    "bin",
+    "README.md",
+    "LICENSE"
   ],
   "scripts": {
     "build": "tsc",
-    "test": "jest",
+    "test": "jest --runInBand",
+    "test:watch": "jest --watch --runInBand",
+    "test:coverage": "jest --coverage --runInBand",
     "test:onchain": "hardhat test",
-    "test:watch": "jest --watch",
-    "test:coverage": "jest --coverage",
-    "lint": "eslint src/**/*.ts",
-    "format": "prettier --write \"src/**/*.ts\"",
-    "prepublishOnly": "npm run build && npm test && npm run test:onchain",
+    "lint": "eslint src --ext .ts",
+    "format": "prettier --write 'src/**/*.ts'",
+    "prepublishOnly": "npm run build && npm test",
     "test:setup": "ts-node test-scripts/00-setup.ts",
     "test:happy-path": "ts-node test-scripts/01-happy-path.ts",
     "test:dispute": "ts-node test-scripts/02-dispute.ts",
@@ -27,49 +34,59 @@
     "test:all": "npm run test:setup && npm run test:happy-path && npm run test:dispute && npm run test:cancel"
   },
   "keywords": [
+    "agirails",
     "actp",
-    "agent-commerce",
     "blockchain",
+    "escrow",
+    "payments",
+    "ai-agents",
+    "cli",
+    "agent-commerce",
     "ethereum",
     "base",
-    "smart-contracts",
-    "ai-agents",
-    "escrow"
+    "smart-contracts"
   ],
   "author": "AGIRAILS Inc.",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
-    "url": "https://github.com/agirails/sdk-js"
+    "url": "https://github.com/agirails/sdk"
   },
   "bugs": {
-    "url": "https://github.com/agirails/sdk-js/issues"
+    "url": "https://github.com/agirails/sdk/issues"
   },
-  "homepage": "https://github.com/agirails/sdk-js#readme",
+  "homepage": "https://github.com/agirails/sdk#readme",
   "dependencies": {
-    "@ethereum-attestation-service/eas-sdk": "^1.6.1",
-    "dotenv": "^17.2.3",
-    "ethers": "^6.15.0",
-    "fast-json-stable-stringify": "^2.1.0",
-    "kubo-rpc-client": "^3.0.1"
+    "@aws-sdk/client-s3": "3.943.0",
+    "@ethereum-attestation-service/eas-sdk": "1.6.1",
+    "@irys/sdk": "0.2.11",
+    "commander": "11.1.0",
+    "did-resolver": "4.1.0",
+    "dotenv": "17.2.3",
+    "ethers": "6.15.0",
+    "ethr-did-resolver": "11.0.5",
+    "fast-json-stable-stringify": "2.1.0",
+    "kubo-rpc-client": "3.0.1",
+    "proper-lockfile": "4.1.2"
   },
   "devDependencies": {
-    "@nomicfoundation/hardhat-ethers": "^3.0.0",
-    "@types/chai": "^4.3.11",
-    "@types/fast-json-stable-stringify": "^2.1.0",
-    "@types/jest": "^29.5.0",
-    "@types/mocha": "^10.0.6",
-    "@types/node": "^20.0.0",
-    "@typescript-eslint/eslint-plugin": "^6.0.0",
-    "@typescript-eslint/parser": "^6.0.0",
-    "chai": "^4.3.8",
-    "eslint": "^8.50.0",
-    "hardhat": "^2.19.4",
-    "jest": "^29.7.0",
-    "prettier": "^3.0.0",
-    "ts-jest": "^29.1.1",
-    "ts-node": "^10.9.1",
-    "typescript": "^5.2.0"
+    "@nomicfoundation/hardhat-ethers": "3.0.0",
+    "@types/chai": "4.3.11",
+    "@types/fast-json-stable-stringify": "2.1.0",
+    "@types/jest": "29.5.11",
+    "@types/mocha": "10.0.6",
+    "@types/node": "20.10.0",
+    "@types/proper-lockfile": "4.1.4",
+    "@typescript-eslint/eslint-plugin": "6.0.0",
+    "@typescript-eslint/parser": "6.0.0",
+    "chai": "4.3.8",
+    "eslint": "8.50.0",
+    "hardhat": "2.19.4",
+    "jest": "29.7.0",
+    "prettier": "3.0.0",
+    "ts-jest": "29.1.1",
+    "ts-node": "10.9.1",
+    "typescript": "5.3.3"
   },
   "engines": {
     "node": ">=16.0.0"