@agirails/sdk 4.0.0-beta.9 → 4.0.0

package/README.md

@@ -516,6 +516,30 @@ This TypeScript SDK maintains **full parity** with the Python SDK:
 - **EAS Integration**: Ethereum Attestation Service for delivery proofs
 - **ERC-8004 Reputation**: On-chain settlement/dispute feedback after ACTP transactions
 - **Input Validation**: All user inputs validated before processing
+- **SSRF Guard on Negotiation Channels**: Both `QuoteChannel` and `RelayChannel` route consumer-supplied base URLs through `assertSafePeerUrl`, rejecting loopback, RFC1918, link-local (incl. cloud metadata `169.254.169.254`), and IPv4-mapped IPv6 bypass shapes by default. Opt-in dev escape: `allowInsecureTargets: true`.
+
+### Runtime secret handling
+
+How the SDK treats wallet keys and other sensitive material:
+
+**What the SDK reads:**
+- `ACTP_KEYSTORE_BASE64` + `ACTP_KEY_PASSWORD` — encrypted keystore (preferred for CI / deploy targets). The base64 blob and the password should live in **separate secret scopes** (different vaults, env groups, or teams) so neither alone is sufficient.
+- `ACTP_PRIVATE_KEY` — raw hex private key. **Testnet only**; the SDK refuses this path on `mainnet` mode and routes you to the keystore pattern instead.
+- `.actp/keystore.json` + `ACTP_KEY_PASSWORD` — the on-disk file the keystore env vars are derived from.
+- `AGIRAILS_PUBLISH_KEY` — *public* client identifier for the publish proxy (same threat model as a Firebase / Stripe publishable key; safe to embed, no privileged scope).
+
+**What the SDK never reads:**
+- CLI inline flags for keys, mnemonics, signed payloads, or tokens. No `--key`, `--mnemonic`, `--secret`, or `--token` flag exists on any `actp` subcommand. This avoids the `ps` / shell history / CI-log leakage class (CWE-532, CWE-312).
+
+**What the SDK logs:**
+- The cached *address* derived from the resolved key (for diagnostic confirmation). Never the key, mnemonic, or password.
+- Bundler / paymaster RPC errors verbatim, which can include the smart-wallet address but not the signer key.
+
+**What `actp init` does for downstream consumers:**
+- Adds `.actp/`, `.env`, and `.env.*` to `.gitignore` so a forgetful operator can't accidentally commit a populated `.env`.
+- Writes a starter `.env.example` documenting the keystore + RPC schema with **placeholder values only**.
+
+If a CI / deployment context needs sensitive material, prefer file-based delivery (mounted secrets, encrypted-at-rest stores) over env vars where the platform supports it, and never echo command lines through `set -x` while ACTP env vars are populated.
 
 ### Transaction Confirmations
 

package/dist/abi/ACTPKernel.json

@@ -16,10 +16,33 @@
                 "name": "_feeRecipient",
                 "type": "address",
                 "internalType": "address"
+            },
+            {
+                "name": "_agentRegistry",
+                "type": "address",
+                "internalType": "address"
+            },
+            {
+                "name": "_usdc",
+                "type": "address",
+                "internalType": "address"
             }
         ],
         "stateMutability": "nonpayable"
     },
+    {
+        "type": "function",
+        "name": "ARCHIVE_ALLOCATION_BPS",
+        "inputs": [],
+        "outputs": [
+            {
+                "name": "",
+                "type": "uint16",
+                "internalType": "uint16"
+            }
+        ],
+        "stateMutability": "view"
+    },
     {
         "type": "function",
         "name": "DEFAULT_DISPUTE_WINDOW",
@@ -72,6 +95,19 @@
         ],
         "stateMutability": "view"
     },
+    {
+        "type": "function",
+        "name": "MAX_DISPUTE_BOND_BPS",
+        "inputs": [],
+        "outputs": [
+            {
+                "name": "",
+                "type": "uint16",
+                "internalType": "uint16"
+            }
+        ],
+        "stateMutability": "view"
+    },
     {
         "type": "function",
         "name": "MAX_DISPUTE_WINDOW",
@@ -150,6 +186,19 @@
         ],
         "stateMutability": "view"
     },
+    {
+        "type": "function",
+        "name": "MIN_DISPUTE_BOND",
+        "inputs": [],
+        "outputs": [
+            {
+                "name": "",
+                "type": "uint256",
+                "internalType": "uint256"
+            }
+        ],
+        "stateMutability": "view"
+    },
     {
         "type": "function",
         "name": "MIN_DISPUTE_WINDOW",
@@ -163,6 +212,19 @@
         ],
         "stateMutability": "view"
     },
+    {
+        "type": "function",
+        "name": "MIN_FEE",
+        "inputs": [],
+        "outputs": [
+            {
+                "name": "",
+                "type": "uint256",
+                "internalType": "uint256"
+            }
+        ],
+        "stateMutability": "view"
+    },
     {
         "type": "function",
         "name": "MIN_TRANSACTION_AMOUNT",
@@ -176,6 +238,19 @@
         ],
         "stateMutability": "view"
     },
+    {
+        "type": "function",
+        "name": "USDC",
+        "inputs": [],
+        "outputs": [
+            {
+                "name": "",
+                "type": "address",
+                "internalType": "contract IERC20"
+            }
+        ],
+        "stateMutability": "view"
+    },
     {
         "type": "function",
         "name": "acceptAdmin",
@@ -183,6 +258,24 @@
         "outputs": [],
         "stateMutability": "nonpayable"
     },
+    {
+        "type": "function",
+        "name": "acceptQuote",
+        "inputs": [
+            {
+                "name": "transactionId",
+                "type": "bytes32",
+                "internalType": "bytes32"
+            },
+            {
+                "name": "newAmount",
+                "type": "uint256",
+                "internalType": "uint256"
+            }
+        ],
+        "outputs": [],
+        "stateMutability": "nonpayable"
+    },
     {
         "type": "function",
         "name": "admin",
@@ -196,6 +289,19 @@
         ],
         "stateMutability": "view"
     },
+    {
+        "type": "function",
+        "name": "agentRegistry",
+        "inputs": [],
+        "outputs": [
+            {
+                "name": "",
+                "type": "address",
+                "internalType": "contract IAgentRegistry"
+            }
+        ],
+        "stateMutability": "view"
+    },
     {
         "type": "function",
         "name": "anchorAttestation",
@@ -288,6 +394,26 @@
         ],
         "stateMutability": "view"
     },
+    {
+        "type": "function",
+        "name": "archiveTreasury",
+        "inputs": [],
+        "outputs": [
+            {
+                "name": "",
+                "type": "address",
+                "internalType": "address"
+            }
+        ],
+        "stateMutability": "view"
+    },
+    {
+        "type": "function",
+        "name": "cancelAgentRegistryUpdate",
+        "inputs": [],
+        "outputs": [],
+        "stateMutability": "nonpayable"
+    },
     {
         "type": "function",
         "name": "cancelEconomicParamsUpdate",
@@ -349,6 +475,44 @@
         ],
         "stateMutability": "nonpayable"
     },
+    {
+        "type": "function",
+        "name": "disputeBondBps",
+        "inputs": [],
+        "outputs": [
+            {
+                "name": "",
+                "type": "uint16",
+                "internalType": "uint16"
+            }
+        ],
+        "stateMutability": "view"
+    },
+    {
+        "type": "function",
+        "name": "emergencyRecoverUSDC",
+        "inputs": [
+            {
+                "name": "recipient",
+                "type": "address",
+                "internalType": "address"
+            },
+            {
+                "name": "amount",
+                "type": "uint256",
+                "internalType": "uint256"
+            }
+        ],
+        "outputs": [],
+        "stateMutability": "nonpayable"
+    },
+    {
+        "type": "function",
+        "name": "executeAgentRegistryUpdate",
+        "inputs": [],
+        "outputs": [],
+        "stateMutability": "nonpayable"
+    },
     {
         "type": "function",
         "name": "executeEconomicParamsUpdate",
@@ -488,6 +652,16 @@
                         "type": "uint16",
                         "internalType": "uint16"
                     },
+                    {
+                        "name": "requesterPenaltyBpsLocked",
+                        "type": "uint16",
+                        "internalType": "uint16"
+                    },
+                    {
+                        "name": "disputeBondBpsLocked",
+                        "type": "uint16",
+                        "internalType": "uint16"
+                    },
                     {
                         "name": "agentId",
                         "type": "uint256",
@@ -555,6 +729,25 @@
         ],
         "stateMutability": "view"
     },
+    {
+        "type": "function",
+        "name": "mediatorRevokedAt",
+        "inputs": [
+            {
+                "name": "",
+                "type": "address",
+                "internalType": "address"
+            }
+        ],
+        "outputs": [
+            {
+                "name": "",
+                "type": "uint256",
+                "internalType": "uint256"
+            }
+        ],
+        "stateMutability": "view"
+    },
     {
         "type": "function",
         "name": "pause",
@@ -645,6 +838,44 @@
         "outputs": [],
         "stateMutability": "nonpayable"
     },
+    {
+        "type": "function",
+        "name": "reputationProcessedBy",
+        "inputs": [
+            {
+                "name": "",
+                "type": "bytes32",
+                "internalType": "bytes32"
+            }
+        ],
+        "outputs": [
+            {
+                "name": "",
+                "type": "address",
+                "internalType": "address"
+            }
+        ],
+        "stateMutability": "view"
+    },
+    {
+        "type": "function",
+        "name": "requesterNonces",
+        "inputs": [
+            {
+                "name": "",
+                "type": "address",
+                "internalType": "address"
+            }
+        ],
+        "outputs": [
+            {
+                "name": "",
+                "type": "uint256",
+                "internalType": "uint256"
+            }
+        ],
+        "stateMutability": "view"
+    },
     {
         "type": "function",
         "name": "requesterPenaltyBps",
@@ -658,6 +889,19 @@
         ],
         "stateMutability": "view"
     },
+    {
+        "type": "function",
+        "name": "scheduleAgentRegistryUpdate",
+        "inputs": [
+            {
+                "name": "newRegistry",
+                "type": "address",
+                "internalType": "address"
+            }
+        ],
+        "outputs": [],
+        "stateMutability": "nonpayable"
+    },
     {
         "type": "function",
         "name": "scheduleEconomicParams",
@@ -676,6 +920,19 @@
         "outputs": [],
         "stateMutability": "nonpayable"
     },
+    {
+        "type": "function",
+        "name": "setArchiveTreasury",
+        "inputs": [
+            {
+                "name": "_archiveTreasury",
+                "type": "address",
+                "internalType": "address"
+            }
+        ],
+        "outputs": [],
+        "stateMutability": "nonpayable"
+    },
     {
         "type": "function",
         "name": "transferAdmin",
@@ -719,6 +976,19 @@
         "outputs": [],
         "stateMutability": "nonpayable"
     },
+    {
+        "type": "function",
+        "name": "updateDisputeBondBps",
+        "inputs": [
+            {
+                "name": "newBps",
+                "type": "uint16",
+                "internalType": "uint16"
+            }
+        ],
+        "outputs": [],
+        "stateMutability": "nonpayable"
+    },
     {
         "type": "function",
         "name": "updateFeeRecipient",
@@ -783,6 +1053,132 @@
         ],
         "anonymous": false
     },
+    {
+        "type": "event",
+        "name": "AgentRegistryUpdateCancelled",
+        "inputs": [
+            {
+                "name": "newRegistry",
+                "type": "address",
+                "indexed": true,
+                "internalType": "address"
+            },
+            {
+                "name": "timestamp",
+                "type": "uint256",
+                "indexed": false,
+                "internalType": "uint256"
+            }
+        ],
+        "anonymous": false
+    },
+    {
+        "type": "event",
+        "name": "AgentRegistryUpdateScheduled",
+        "inputs": [
+            {
+                "name": "newRegistry",
+                "type": "address",
+                "indexed": true,
+                "internalType": "address"
+            },
+            {
+                "name": "executeAfter",
+                "type": "uint256",
+                "indexed": false,
+                "internalType": "uint256"
+            }
+        ],
+        "anonymous": false
+    },
+    {
+        "type": "event",
+        "name": "AgentRegistryUpdated",
+        "inputs": [
+            {
+                "name": "oldRegistry",
+                "type": "address",
+                "indexed": true,
+                "internalType": "address"
+            },
+            {
+                "name": "newRegistry",
+                "type": "address",
+                "indexed": true,
+                "internalType": "address"
+            }
+        ],
+        "anonymous": false
+    },
+    {
+        "type": "event",
+        "name": "ArchivePayoutMismatch",
+        "inputs": [
+            {
+                "name": "transactionId",
+                "type": "bytes32",
+                "indexed": true,
+                "internalType": "bytes32"
+            },
+            {
+                "name": "expected",
+                "type": "uint256",
+                "indexed": false,
+                "internalType": "uint256"
+            },
+            {
+                "name": "actual",
+                "type": "uint256",
+                "indexed": false,
+                "internalType": "uint256"
+            }
+        ],
+        "anonymous": false
+    },
+    {
+        "type": "event",
+        "name": "ArchiveTreasuryFailed",
+        "inputs": [
+            {
+                "name": "transactionId",
+                "type": "bytes32",
+                "indexed": true,
+                "internalType": "bytes32"
+            },
+            {
+                "name": "amount",
+                "type": "uint256",
+                "indexed": false,
+                "internalType": "uint256"
+            },
+            {
+                "name": "reason",
+                "type": "bytes",
+                "indexed": false,
+                "internalType": "bytes"
+            }
+        ],
+        "anonymous": false
+    },
+    {
+        "type": "event",
+        "name": "ArchiveTreasuryUpdated",
+        "inputs": [
+            {
+                "name": "oldTreasury",
+                "type": "address",
+                "indexed": true,
+                "internalType": "address"
+            },
+            {
+                "name": "newTreasury",
+                "type": "address",
+                "indexed": true,
+                "internalType": "address"
+            }
+        ],
+        "anonymous": false
+    },
     {
         "type": "event",
         "name": "AttestationAnchored",
@@ -963,6 +1359,31 @@
         ],
         "anonymous": false
     },
+    {
+        "type": "event",
+        "name": "EmergencyUSDCRecovered",
+        "inputs": [
+            {
+                "name": "recipient",
+                "type": "address",
+                "indexed": true,
+                "internalType": "address"
+            },
+            {
+                "name": "amount",
+                "type": "uint256",
+                "indexed": false,
+                "internalType": "uint256"
+            },
+            {
+                "name": "timestamp",
+                "type": "uint256",
+                "indexed": false,
+                "internalType": "uint256"
+            }
+        ],
+        "anonymous": false
+    },
     {
         "type": "event",
         "name": "EscrowLinked",
@@ -1288,6 +1709,37 @@
         ],
         "anonymous": false
     },
+    {
+        "type": "event",
+        "name": "QuoteAccepted",
+        "inputs": [
+            {
+                "name": "transactionId",
+                "type": "bytes32",
+                "indexed": true,
+                "internalType": "bytes32"
+            },
+            {
+                "name": "oldAmount",
+                "type": "uint256",
+                "indexed": false,
+                "internalType": "uint256"
+            },
+            {
+                "name": "newAmount",
+                "type": "uint256",
+                "indexed": false,
+                "internalType": "uint256"
+            },
+            {
+                "name": "timestamp",
+                "type": "uint256",
+                "indexed": false,
+                "internalType": "uint256"
+            }
+        ],
+        "anonymous": false
+    },
     {
         "type": "event",
         "name": "StateTransitioned",
@@ -1381,57 +1833,19 @@
         "anonymous": false
     },
     {
-        "type": "function",
-        "name": "acceptQuote",
-        "inputs": [
-            {
-                "name": "transactionId",
-                "type": "bytes32",
-                "internalType": "bytes32"
-            },
-            {
-                "name": "newAmount",
-                "type": "uint256",
-                "internalType": "uint256"
-            }
-        ],
-        "outputs": [],
-        "stateMutability": "nonpayable"
+        "type": "error",
+        "name": "ReentrancyGuardReentrantCall",
+        "inputs": []
     },
     {
-        "type": "event",
-        "name": "QuoteAccepted",
+        "type": "error",
+        "name": "SafeERC20FailedOperation",
         "inputs": [
             {
-                "name": "transactionId",
-                "type": "bytes32",
-                "indexed": true,
-                "internalType": "bytes32"
-            },
-            {
-                "name": "oldAmount",
-                "type": "uint256",
-                "indexed": false,
-                "internalType": "uint256"
-            },
-            {
-                "name": "newAmount",
-                "type": "uint256",
-                "indexed": false,
-                "internalType": "uint256"
-            },
-            {
-                "name": "timestamp",
-                "type": "uint256",
-                "indexed": false,
-                "internalType": "uint256"
+                "name": "token",
+                "type": "address",
+                "internalType": "address"
             }
-        ],
-        "anonymous": false
-    },
-    {
-        "type": "error",
-        "name": "ReentrancyGuardReentrantCall",
-        "inputs": []
+        ]
     }
 ]

package/dist/cli/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWpC,OAAO,EAAE,MAAM,EAAiB,MAAM,iBAAiB,CAAC;AAQxD,wBAAgB,iBAAiB,IAAI,OAAO,CAgC3C;AAQD,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oFAAoF;IACpF,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,iBAAe,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAkSzF;AAoOD,OAAO,EAAE,OAAO,EAAE,CAAC"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYpC,OAAO,EAAE,MAAM,EAAiB,MAAM,iBAAiB,CAAC;AAQxD,wBAAgB,iBAAiB,IAAI,OAAO,CAgC3C;AAQD,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oFAAoF;IACpF,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,iBAAe,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA2SzF;AAoOD,OAAO,EAAE,OAAO,EAAE,CAAC"}