@agirails/sdk 4.0.0-beta.9 → 4.1.0

package/dist/cli/utils/config.js

@@ -31,7 +31,7 @@ var __importStar = (this && this.__importStar) || function (mod) {
     return result;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveIdentityPath = exports.addToRailwayignore = exports.addToDockerignore = exports.addToGitignore = exports.validateConfigForMode = exports.validatePrivateKey = exports.validateAddress = exports.setConfigValue = exports.getConfigValue = exports.updateConfig = exports.saveConfig = exports.loadConfig = exports.isInitialized = exports.getConfigPath = exports.getActpDir = exports.CONFIG_DEFAULTS = void 0;
+exports.resolveIdentityPath = exports.addToRailwayignore = exports.addToDockerignore = exports.writeEnvExample = exports.addToGitignore = exports.validateConfigForMode = exports.validatePrivateKey = exports.validateAddress = exports.setConfigValue = exports.getConfigValue = exports.updateConfig = exports.saveConfig = exports.loadConfig = exports.isInitialized = exports.getConfigPath = exports.getActpDir = exports.CONFIG_DEFAULTS = void 0;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 /**
@@ -222,18 +222,70 @@ function addToGitignore(projectRoot = process.cwd()) {
     if (fs.existsSync(gitignorePath)) {
         content = fs.readFileSync(gitignorePath, 'utf-8');
     }
-    // Check if .actp is already in gitignore (whole-line match to avoid false positives from comments)
-    if (/^\.actp\/?$/m.test(content)) {
+    // Apex audit FIND-012(b): consumers regularly commit `.env` files
+    // containing ACTP_KEY_PASSWORD or ACTP_PRIVATE_KEY without realising
+    // it. The dockerignore / railwayignore helpers already cover `.env`
+    // patterns; gitignore covered only `.actp/` before this fix. Now
+    // adds the same `.env` patterns to `.gitignore` so a downstream
+    // `actp init` user is protected at the git boundary too.
+    const desired = [
+        { pattern: /^\.actp\/?$/m, line: '.actp/' },
+        { pattern: /^\.env$/m, line: '.env' },
+        { pattern: /^\.env\.\*$/m, line: '.env.*' },
+    ];
+    const missing = desired.filter(({ pattern }) => !pattern.test(content));
+    if (missing.length === 0)
         return;
-    }
-    // Add .actp to gitignore
+    const header = '# ACTP — local state + secrets (do not commit)\n';
+    const headerPresent = content.includes(header.trim());
     const newContent = content +
-        (content.endsWith('\n') ? '' : '\n') +
-        '# ACTP local state (contains mock blockchain state)\n' +
-        '.actp/\n';
+        (content.length > 0 && !content.endsWith('\n') ? '\n' : '') +
+        (headerPresent ? '' : header) +
+        missing.map((m) => m.line).join('\n') + '\n';
     fs.writeFileSync(gitignorePath, newContent, 'utf-8');
 }
 exports.addToGitignore = addToGitignore;
+/**
+ * Write a starter `.env.example` to the project root if one isn't already
+ * present. Apex audit FIND-012(b): downstream agents that read secrets
+ * from `.env` need a documented schema with placeholder values, not raw
+ * keys committed to git. The example commits to git; the live `.env`
+ * sits in `.gitignore` (see `addToGitignore` above).
+ *
+ * Idempotent: if `.env.example` already exists, leaves it alone — the
+ * project owner may have customised it.
+ */
+function writeEnvExample(projectRoot = process.cwd()) {
+    const envExamplePath = path.join(projectRoot, '.env.example');
+    assertNotSymlink(envExamplePath);
+    if (fs.existsSync(envExamplePath))
+        return;
+    const content = '# ACTP runtime secrets — never commit a populated `.env` to git.\n' +
+        '#\n' +
+        '# `actp init` adds `.env` and `.env.*` to .gitignore so the live\n' +
+        '# file stays local. This example is committed to document the schema.\n' +
+        '#\n' +
+        '# Wallet selection (pick ONE of the two patterns):\n' +
+        '#\n' +
+        '# Pattern A — encrypted keystore + password (recommended for CI / deploy):\n' +
+        '#   ACTP_KEYSTORE_BASE64=<base64 of your .actp/keystore.json>\n' +
+        '#   ACTP_KEY_PASSWORD=<password that decrypts the keystore>\n' +
+        '# Tip: `actp deploy:env` formats both for your env target.\n' +
+        '#\n' +
+        '# Pattern B — raw private key (testnet ONLY; mainnet refuses this path):\n' +
+        '#   ACTP_PRIVATE_KEY=0x...\n' +
+        '#\n' +
+        '# Network selector:\n' +
+        '#   ACTP_NETWORK=testnet     # mock | testnet | mainnet\n' +
+        '#\n' +
+        '# Optional overrides:\n' +
+        '#   BASE_SEPOLIA_RPC=https://...    # custom Base Sepolia RPC\n' +
+        '#   BASE_MAINNET_RPC=https://...    # custom Base mainnet RPC\n' +
+        '#   CDP_API_KEY=...                 # Coinbase Cloud bundler / paymaster\n' +
+        '#   PIMLICO_API_KEY=...             # Pimlico bundler / paymaster\n';
+    fs.writeFileSync(envExamplePath, content, 'utf-8');
+}
+exports.writeEnvExample = writeEnvExample;
 // ============================================================================
 // Ignore File Management (AIP-13)
 // ============================================================================

package/dist/cli/utils/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/cli/utils/config.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AA6D7B;;GAEG;AACU,QAAA,eAAe,GAAc;IACxC,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,KAAK;CACf,CAAC;AAEF,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,UAAU,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AALD,gCAKC;AAED;;GAEG;AACH,SAAgB,aAAa,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,CAAC;AAC3D,CAAC;AAFD,sCAEC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,SAAgB,aAAa,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IAC/D,OAAO,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC;AACnD,CAAC;AAFD,sCAEC;AAED;;;;;;GAMG;AACH,SAAgB,UAAU,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IAC5D,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAE9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,2CAA2C;YACzC,gCAAgC,CACnC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;QAE5C,2BAA2B;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,4CAA4C;QAC5C,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAQ,MAA6C,CAAC,UAAU,CAAC;QACnE,CAAC;QACD,uEAAuE;QACvE,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAQ,MAA6C,CAAC,UAAU,CAAC;QACnE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,0BAA0B,UAAU,IAAI;gBACtC,+CAA+C,CAClD,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAzCD,gCAyCC;AAED;;;;;GAKG;AACH,SAAgB,UAAU,CACxB,MAAiB,EACjB,cAAsB,OAAO,CAAC,GAAG,EAAE;IAEnC,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,UAAU,MAAM,CAAC;IAErC,gCAAgC;IAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC;QACH,2CAA2C;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,qBAAqB;QAC3F,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,8BAA8B;QAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AA7BD,gCA6BC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAC1B,OAA2B,EAC3B,cAAsB,OAAO,CAAC,GAAG,EAAE;IAEnC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;IAC1C,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjC,OAAO,OAAO,CAAC;AACjB,CAAC;AARD,oCAQC;AAED;;GAEG;AACH,SAAgB,cAAc,CAC5B,GAAM,EACN,cAAsB,OAAO,CAAC,GAAG,EAAE;IAEnC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAND,wCAMC;AAED;;GAEG;AACH,SAAgB,cAAc,CAC5B,GAAM,EACN,KAAmB,EACnB,cAAsB,OAAO,CAAC,GAAG,EAAE;IAEnC,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAwB,EAAE,WAAW,CAAC,CAAC;AACpE,CAAC;AAND,wCAMC;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;GAEG;AACH,SAAgB,eAAe,CAAC,OAAe;IAC7C,OAAO,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAFD,0CAEC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,8BAA8B;IAC9B,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7D,OAAO,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC9C,CAAC;AAJD,gDAIC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,MAAiB;IACrD,oCAAoC;IACpC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,qBAAqB,MAAM,CAAC,OAAO,KAAK;YACtC,+CAA+C,CAClD,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;AAC5E,CAAC;AAXD,sDAWC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH,SAAgB,cAAc,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IAChE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAE3D,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,mGAAmG;IACnG,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,OAAO;IACT,CAAC;IAED,yBAAyB;IACzB,MAAM,UAAU,GACd,OAAO;QACP,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACpC,uDAAuD;QACvD,UAAU,CAAC;IAEb,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AArBD,wCAqBC;AAED,+EAA+E;AAC/E,kCAAkC;AAClC,+EAA+E;AAE/E,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;AACrE,MAAM,aAAa,GAAG,qCAAqC,CAAC;AAE5D;;;GAGG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,oDAAoD,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+DAA+D;QAC/D,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAE3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,8DAA8D;IAC9D,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAChF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAExC,MAAM,UAAU,GACd,OAAO;QACP,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,aAAa,GAAG,IAAI;QACpB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAEnC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IACnE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;AAC5D,CAAC;AAFD,8CAEC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IACpE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC7D,CAAC;AAFD,gDAEC;AAED,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,SAAgB,mBAAmB,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IACrE,wCAAwC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7D,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;gBAAE,OAAO,YAAY,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IAED,4DAA4D;IAC5D,0EAA0E;IAC1E,0DAA0D;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC;QAChG,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,MAAM,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CACzC,CAAC;QAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,8EAA8E;gBAC9E,8DAA8D;gBAC9D,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBACnE,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;gBACzE,MAAM,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAxCD,kDAwCC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/cli/utils/config.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AA6D7B;;GAEG;AACU,QAAA,eAAe,GAAc;IACxC,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,KAAK;CACf,CAAC;AAEF,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,UAAU,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AALD,gCAKC;AAED;;GAEG;AACH,SAAgB,aAAa,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,CAAC;AAC3D,CAAC;AAFD,sCAEC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,SAAgB,aAAa,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IAC/D,OAAO,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC;AACnD,CAAC;AAFD,sCAEC;AAED;;;;;;GAMG;AACH,SAAgB,UAAU,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IAC5D,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAE9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,2CAA2C;YACzC,gCAAgC,CACnC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;QAE5C,2BAA2B;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,4CAA4C;QAC5C,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAQ,MAA6C,CAAC,UAAU,CAAC;QACnE,CAAC;QACD,uEAAuE;QACvE,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAQ,MAA6C,CAAC,UAAU,CAAC;QACnE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,0BAA0B,UAAU,IAAI;gBACtC,+CAA+C,CAClD,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAzCD,gCAyCC;AAED;;;;;GAKG;AACH,SAAgB,UAAU,CACxB,MAAiB,EACjB,cAAsB,OAAO,CAAC,GAAG,EAAE;IAEnC,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,UAAU,MAAM,CAAC;IAErC,gCAAgC;IAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC;QACH,2CAA2C;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,qBAAqB;QAC3F,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,8BAA8B;QAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AA7BD,gCA6BC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAC1B,OAA2B,EAC3B,cAAsB,OAAO,CAAC,GAAG,EAAE;IAEnC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;IAC1C,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjC,OAAO,OAAO,CAAC;AACjB,CAAC;AARD,oCAQC;AAED;;GAEG;AACH,SAAgB,cAAc,CAC5B,GAAM,EACN,cAAsB,OAAO,CAAC,GAAG,EAAE;IAEnC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAND,wCAMC;AAED;;GAEG;AACH,SAAgB,cAAc,CAC5B,GAAM,EACN,KAAmB,EACnB,cAAsB,OAAO,CAAC,GAAG,EAAE;IAEnC,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAwB,EAAE,WAAW,CAAC,CAAC;AACpE,CAAC;AAND,wCAMC;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;GAEG;AACH,SAAgB,eAAe,CAAC,OAAe;IAC7C,OAAO,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAFD,0CAEC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,8BAA8B;IAC9B,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7D,OAAO,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC9C,CAAC;AAJD,gDAIC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,MAAiB;IACrD,oCAAoC;IACpC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,qBAAqB,MAAM,CAAC,OAAO,KAAK;YACtC,+CAA+C,CAClD,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;AAC5E,CAAC;AAXD,sDAWC;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH,SAAgB,cAAc,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IAChE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAE3D,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,kEAAkE;IAClE,qEAAqE;IACrE,oEAAoE;IACpE,iEAAiE;IACjE,gEAAgE;IAChE,yDAAyD;IACzD,MAAM,OAAO,GAA6C;QACxD,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3C,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;QACrC,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC5C,CAAC;IAEF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEjC,MAAM,MAAM,GAAG,kDAAkD,CAAC;IAClE,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAEtD,MAAM,UAAU,GACd,OAAO;QACP,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAE/C,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAjCD,wCAiCC;AAED;;;;;;;;;GASG;AACH,SAAgB,eAAe,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IACjE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC9D,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO;IAE1C,MAAM,OAAO,GACX,oEAAoE;QACpE,KAAK;QACL,oEAAoE;QACpE,yEAAyE;QACzE,KAAK;QACL,sDAAsD;QACtD,KAAK;QACL,8EAA8E;QAC9E,iEAAiE;QACjE,+DAA+D;QAC/D,8DAA8D;QAC9D,KAAK;QACL,4EAA4E;QAC5E,8BAA8B;QAC9B,KAAK;QACL,uBAAuB;QACvB,2DAA2D;QAC3D,KAAK;QACL,yBAAyB;QACzB,iEAAiE;QACjE,iEAAiE;QACjE,4EAA4E;QAC5E,qEAAqE,CAAC;IAExE,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC;AA/BD,0CA+BC;AAED,+EAA+E;AAC/E,kCAAkC;AAClC,+EAA+E;AAE/E,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;AACrE,MAAM,aAAa,GAAG,qCAAqC,CAAC;AAE5D;;;GAGG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,oDAAoD,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+DAA+D;QAC/D,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAE3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,8DAA8D;IAC9D,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAChF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAExC,MAAM,UAAU,GACd,OAAO;QACP,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,aAAa,GAAG,IAAI;QACpB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAEnC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IACnE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;AAC5D,CAAC;AAFD,8CAEC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IACpE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC7D,CAAC;AAFD,gDAEC;AAED,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,SAAgB,mBAAmB,CAAC,cAAsB,OAAO,CAAC,GAAG,EAAE;IACrE,wCAAwC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7D,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;gBAAE,OAAO,YAAY,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IAED,4DAA4D;IAC5D,0EAA0E;IAC1E,0DAA0D;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC;QAChG,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,MAAM,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CACzC,CAAC;QAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,8EAA8E;gBAC9E,8DAA8D;gBAC9D,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBACnE,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;gBACzE,MAAM,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAxCD,kDAwCC"}

package/dist/config/agirailsmd.d.ts

@@ -52,7 +52,8 @@ export declare function stripPublishMetadata(frontmatter: Record<string, unknown
  *
  * @param content - Raw file content (string)
  * @returns Parsed config with frontmatter object and body string
- * @throws Error if content has no valid YAML frontmatter
+ * @throws Error if content has no valid YAML frontmatter, exceeds the
+ *   size bound, or uses more YAML aliases than the conservative cap
  */
 export declare function parseAgirailsMd(content: string): AgirailsMdConfig;
 /**

package/dist/config/agirailsmd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agirailsmd.d.ts","sourceRoot":"","sources":["../../src/config/agirailsmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AASH,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,cAAc,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,sHASxB,CAAC;AAEX;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAMD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAkCjE;AAMD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAqCpD;AAkBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,CAGvE;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,IAAI,EAAE,MAAM,GACX,oBAAoB,CAmBtB;AAMD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,IAAI,EAAE,MAAM,GACX,MAAM,CASR"}
+{"version":3,"file":"agirailsmd.d.ts","sourceRoot":"","sources":["../../src/config/agirailsmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AASH,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,cAAc,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,sHASxB,CAAC;AAEX;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAgCD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CA2CjE;AAMD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAqCpD;AAkBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,CAGvE;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,IAAI,EAAE,MAAM,GACX,oBAAoB,CAmBtB;AAMD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,IAAI,EAAE,MAAM,GACX,MAAM,CASR"}

package/dist/config/agirailsmd.js

@@ -60,14 +60,45 @@ exports.stripPublishMetadata = stripPublishMetadata;
 // ============================================================================
 // Parser
 // ============================================================================
+/**
+ * Hard cap on raw AGIRAILS.md content size before YAML parsing.
+ *
+ * Apex audit FIND-016 (2026-05-17 source-level): the CLI runs in
+ * untrusted contexts — CI jobs, cloned repos, PR workspaces, generated
+ * project directories. Any of those can contain an attacker-controlled
+ * `AGIRAILS.md` that is parsed by `health`, `verify`, `publish`, or
+ * `init` without ever crossing a network boundary. The size bound is
+ * a defence-in-depth wall against the YAML resource-exhaustion class
+ * (deep nesting, malicious anchors / aliases) even though `yaml`
+ * v2 already defaults `maxAliasCount` to 100. Canonical AGIRAILS.md
+ * files are ~2-10 KB; 256 KB leaves comfortable headroom for legitimate
+ * long-form `body` content while still tripping on adversarial blobs.
+ */
+const MAX_AGIRAILSMD_BYTES = 256000;
+/**
+ * Tightened `maxAliasCount` for the AGIRAILS.md frontmatter parse.
+ *
+ * Canonical AGIRAILS.md files never use YAML aliases / anchors. We pin
+ * the limit to a small constant rather than the library default of 100
+ * so a malicious file that plants aliases trips the parser early
+ * instead of consuming CPU walking an expansion graph.
+ */
+const FRONTMATTER_MAX_ALIAS_COUNT = 10;
 /**
  * Parse an AGIRAILS.md file into frontmatter + body.
  *
  * @param content - Raw file content (string)
  * @returns Parsed config with frontmatter object and body string
- * @throws Error if content has no valid YAML frontmatter
+ * @throws Error if content has no valid YAML frontmatter, exceeds the
+ *   size bound, or uses more YAML aliases than the conservative cap
  */
 function parseAgirailsMd(content) {
+    // FIND-016 size bound — must fire before any YAML / regex work so a
+    // hostile file can't burn CPU in normalisation either.
+    if (content.length > MAX_AGIRAILSMD_BYTES) {
+        throw new Error(`AGIRAILS.md exceeds ${MAX_AGIRAILSMD_BYTES} bytes (got ${content.length}). ` +
+            'Canonical files are typically 2-10 KB; refusing to parse a file this large.');
+    }
     // Normalize line endings to LF (handles CRLF from Windows)
     const trimmed = content.replace(/\r\n/g, '\n').replace(/\r/g, '\n').trimStart();
     if (!trimmed.startsWith('---')) {
@@ -83,7 +114,7 @@ function parseAgirailsMd(content) {
     // Parse YAML
     let frontmatter;
     try {
-        frontmatter = (0, yaml_1.parse)(yamlContent);
+        frontmatter = (0, yaml_1.parse)(yamlContent, { maxAliasCount: FRONTMATTER_MAX_ALIAS_COUNT });
     }
     catch (err) {
         const message = err instanceof Error ? err.message : String(err);

package/dist/config/agirailsmd.js.map

@@ -1 +1 @@
-{"version":3,"file":"agirailsmd.js","sourceRoot":"","sources":["../../src/config/agirailsmd.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AAEH,mCAAgC;AAChC,+BAAsE;AAsBtE,+EAA+E;AAC/E,oDAAoD;AACpD,+EAA+E;AAE/E;;;;GAIG;AACU,QAAA,qBAAqB,GAAG;IACnC,aAAa;IACb,cAAc;IACd,YAAY;IACZ,YAAY;IACZ,iBAAiB;IACjB,QAAQ;IACR,UAAU;IACV,KAAK;CACG,CAAC;AAEX;;;GAGG;AACH,SAAgB,oBAAoB,CAClC,WAAoC;IAEpC,MAAM,QAAQ,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,6BAAqB,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AARD,oDAQC;AAED,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,OAAe;IAC7C,2DAA2D;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;IAEhF,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,mBAAmB;IACnB,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACjD,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,qBAAqB;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa;IAE3D,aAAa;IACb,IAAI,WAAoC,CAAC;IACzC,IAAI,CAAC;QACH,WAAW,GAAG,IAAA,YAAS,EAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO;QACL,WAAW;QACX,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;KACnD,CAAC;AACJ,CAAC;AAlCD,0CAkCC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,SAAgB,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4EAA4E;IAC5E,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,8EAA8E;QAC9E,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE9C,8DAA8D;QAC9D,uFAAuF;QACvF,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CACtC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,SAAS,CAC5F,CAAC;QAEF,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AArCD,oCAqCC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI;SACR,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,YAAY;SACnC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU;SAC/B,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,qCAAqC;SACnE,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAC,CAAC,wBAAwB;AACrC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,OAAe;IAC/C,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACvD,OAAO,0BAA0B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC;AAHD,8CAGC;AAED;;;;;;;;;GASG;AACH,SAAgB,0BAA0B,CACxC,WAAoC,EACpC,IAAY;IAEZ,iEAAiE;IACjE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAEnD,iEAAiE;IACjE,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,eAAM,CAAC,SAAS,CAAC,eAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;IAE3E,+BAA+B;IAC/B,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,eAAM,CAAC,SAAS,CAAC,eAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;IAElE,wBAAwB;IACxB,MAAM,UAAU,GAAG,eAAM,CAAC,SAAS,CACjC,eAAM,CAAC,MAAM,CAAC,CAAC,eAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,eAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC5E,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC;AAtBD,gEAsBC;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;;;;;GAMG;AACH,SAAgB,mBAAmB,CACjC,WAAoC,EACpC,IAAY;IAEZ,MAAM,OAAO,GAAG,IAAA,gBAAa,EAAC,WAAW,EAAE;QACzC,SAAS,EAAE,GAAG;QACd,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC,OAAO,EAAE,CAAC;IAEb,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;IAElE,OAAO,QAAQ,OAAO,UAAU,cAAc,EAAE,CAAC;AACnD,CAAC;AAZD,kDAYC"}
+{"version":3,"file":"agirailsmd.js","sourceRoot":"","sources":["../../src/config/agirailsmd.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AAEH,mCAAgC;AAChC,+BAAsE;AAsBtE,+EAA+E;AAC/E,oDAAoD;AACpD,+EAA+E;AAE/E;;;;GAIG;AACU,QAAA,qBAAqB,GAAG;IACnC,aAAa;IACb,cAAc;IACd,YAAY;IACZ,YAAY;IACZ,iBAAiB;IACjB,QAAQ;IACR,UAAU;IACV,KAAK;CACG,CAAC;AAEX;;;GAGG;AACH,SAAgB,oBAAoB,CAClC,WAAoC;IAEpC,MAAM,QAAQ,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,6BAAqB,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AARD,oDAQC;AAED,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E;;;;;;;;;;;;;GAaG;AACH,MAAM,oBAAoB,GAAG,MAAO,CAAC;AAErC;;;;;;;GAOG;AACH,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAEvC;;;;;;;GAOG;AACH,SAAgB,eAAe,CAAC,OAAe;IAC7C,oEAAoE;IACpE,uDAAuD;IACvD,IAAI,OAAO,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,uBAAuB,oBAAoB,eAAe,OAAO,CAAC,MAAM,KAAK;YAC7E,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;IAEhF,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,mBAAmB;IACnB,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACjD,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,qBAAqB;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa;IAE3D,aAAa;IACb,IAAI,WAAoC,CAAC;IACzC,IAAI,CAAC;QACH,WAAW,GAAG,IAAA,YAAS,EAAC,WAAW,EAAE,EAAE,aAAa,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACvF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO;QACL,WAAW;QACX,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;KACnD,CAAC;AACJ,CAAC;AA3CD,0CA2CC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,SAAgB,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4EAA4E;IAC5E,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,8EAA8E;QAC9E,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE9C,8DAA8D;QAC9D,uFAAuF;QACvF,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CACtC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,SAAS,CAC5F,CAAC;QAEF,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AArCD,oCAqCC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI;SACR,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,YAAY;SACnC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU;SAC/B,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,qCAAqC;SACnE,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAC,CAAC,wBAAwB;AACrC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,OAAe;IAC/C,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACvD,OAAO,0BAA0B,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC;AAHD,8CAGC;AAED;;;;;;;;;GASG;AACH,SAAgB,0BAA0B,CACxC,WAAoC,EACpC,IAAY;IAEZ,iEAAiE;IACjE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAEnD,iEAAiE;IACjE,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,eAAM,CAAC,SAAS,CAAC,eAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;IAE3E,+BAA+B;IAC/B,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,eAAM,CAAC,SAAS,CAAC,eAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;IAElE,wBAAwB;IACxB,MAAM,UAAU,GAAG,eAAM,CAAC,SAAS,CACjC,eAAM,CAAC,MAAM,CAAC,CAAC,eAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,eAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC5E,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC;AAtBD,gEAsBC;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;;;;;GAMG;AACH,SAAgB,mBAAmB,CACjC,WAAoC,EACpC,IAAY;IAEZ,MAAM,OAAO,GAAG,IAAA,gBAAa,EAAC,WAAW,EAAE;QACzC,SAAS,EAAE,GAAG;QACd,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC,OAAO,EAAE,CAAC;IAEb,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;IAElE,OAAO,QAAQ,OAAO,UAAU,cAAc,EAAE,CAAC;AACnD,CAAC;AAZD,kDAYC"}

package/dist/config/networks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"networks.d.ts","sourceRoot":"","sources":["../../src/config/networks.ts"],"names":[],"mappings":"AAqDA;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,iBAAiB,EAAE,MAAM,CAAC;QAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB;;;;;;WAMG;QACH,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,uBAAuB,CAAC,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,GAAG,EAAE;QACH,iBAAiB,EAAE,MAAM,CAAC;QAC1B,uBAAuB,CAAC,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,WAAW,EAAE;QACX,YAAY,EAAE,MAAM,CAAC;QACrB,oBAAoB,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B;;;;;;OAMG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAEnC;;;OAGG;IACH,EAAE,CAAC,EAAE;QACH,uCAAuC;QACvC,UAAU,EAAE,MAAM,CAAC;QACnB,0CAA0C;QAC1C,kBAAkB,EAAE,MAAM,CAAC;QAC3B,uBAAuB;QACvB,WAAW,EAAE;YACX,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC;QACF,oCAAoC;QACpC,aAAa,EAAE;YACb,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC;KACH,CAAC;CACH;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,aAwC1B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,aAyC1B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAGlD,CAAC;AAEF;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAgDzD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CA0BjE"}
+{"version":3,"file":"networks.d.ts","sourceRoot":"","sources":["../../src/config/networks.ts"],"names":[],"mappings":"AAqDA;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,iBAAiB,EAAE,MAAM,CAAC;QAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB;;;;;;WAMG;QACH,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,uBAAuB,CAAC,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,GAAG,EAAE;QACH,iBAAiB,EAAE,MAAM,CAAC;QAC1B,uBAAuB,CAAC,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,WAAW,EAAE;QACX,YAAY,EAAE,MAAM,CAAC;QACrB,oBAAoB,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B;;;;;;OAMG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAEnC;;;OAGG;IACH,EAAE,CAAC,EAAE;QACH,uCAAuC;QACvC,UAAU,EAAE,MAAM,CAAC;QACnB,0CAA0C;QAC1C,kBAAkB,EAAE,MAAM,CAAC;QAC3B,uBAAuB;QACvB,WAAW,EAAE;YACX,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC;QACF,oCAAoC;QACpC,aAAa,EAAE;YACb,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC;KACH,CAAC;CACH;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,aAyC1B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,aAwC1B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAGlD,CAAC;AAEF;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAgDzD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CA0BjE"}

package/dist/config/networks.js

@@ -58,17 +58,18 @@ exports.BASE_SEPOLIA = {
     rpcUrl: BASE_SEPOLIA_RPC_URL,
     blockExplorer: 'https://sepolia.basescan.org',
     contracts: {
-        // Redeployed 2026-04-15: kernel + vault + registry + treasury + relay.
+        // Redeployed 2026-05-19 alongside mainnet to align ABI shape
+        // (INV-30 disputeBondBpsLocked + AIP-14 / d9c6e8e requesterPenaltyBpsLocked).
         // See agirails/actp-kernel deployments/base-sepolia.json for details.
-        actpKernel: '0xE83cba71C445B4f658D88E4F179FccB9E1454F97',
-        escrowVault: '0x0DAbBF59C40C1804488a84237C87971b2a7f5f5f',
+        actpKernel: '0x9d25A874f046185d9237Cd4954C88D2B74B0021b',
+        escrowVault: '0x7dF07327090efcA73DCBa70414aA3131Fc6d2efB',
         usdc: '0x444b4e1A65949AB2ac75979D5d0166Eb7A248Ccb', // MockUSDC (unchanged)
         eas: '0x4200000000000000000000000000000000000021',
         easSchemaRegistry: '0x4200000000000000000000000000000000000020',
-        agentRegistry: '0x40ca9b043220ecc26b0b280fe6a02861eadc2448',
+        agentRegistry: '0xD91F9aBfBf60b4a2Fd5317ab0cDF3F44faB5D656',
         identityRegistry: '0xce9749c768b425fab0daa0331047d1340ec99a88', // unchanged (no kernel ref)
-        archiveTreasury: '0x6acb954550b6a5135da9df5ac224cff33d697351',
-        x402Relay: '0x110b25bb3d45c40dfcf34bb451aa7069b2a1cb3b',
+        archiveTreasury: '0x2eE4f7bE289fc9EFC2F9f2D6E53e50abDF23A3eb',
+        x402Relay: '0x110b25bb3d45c40dfcf34bb451aa7069b2a1cb3b', // deprecated; not redeployed
         erc8004IdentityRegistry: '0x8004A818BFB912233c491871b3d84c89A494BD9e',
     },
     eas: {
@@ -78,7 +79,7 @@ exports.BASE_SEPOLIA = {
         maxFeePerGas: ethers_1.ethers.parseUnits('2', 'gwei'),
         maxPriorityFeePerGas: ethers_1.ethers.parseUnits('1', 'gwei')
     },
-    actpKernelDeploymentBlock: 40239703, // 2026-04-15 redeploy
+    actpKernelDeploymentBlock: 41725686, // 2026-05-19 V4 redeploy
     // AIP-12: Account Abstraction
     aa: {
         entryPoint: '0x5FF137D4b0FDCD49DcA30c7CF57E578a026d2789',
@@ -102,14 +103,13 @@ exports.BASE_MAINNET = {
     rpcUrl: BASE_MAINNET_RPC_URL,
     blockExplorer: 'https://basescan.org',
     contracts: {
-        actpKernel: '0x132B9eB321dBB57c828B083844287171BDC92d29',
-        escrowVault: '0x6aAF45882c4b0dD34130ecC790bb5Ec6be7fFb99',
+        actpKernel: '0x048c811352e8a3fECd5b0Ec4AA2c2b94083CC842',
+        escrowVault: '0x262D5912A9612F0c66dA5d13B4E678D50ebC44b5',
         usdc: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913',
         eas: '0x4200000000000000000000000000000000000021',
         easSchemaRegistry: '0x4200000000000000000000000000000000000020',
-        agentRegistry: '0x6fB222CF3DDdf37Bcb248EE7BBBA42Fb41901de8',
-        archiveTreasury: '0x0516C411C0E8d75D17A768022819a0a4FB3cA2f2',
-        x402Relay: '0x81DFb954A3D58FEc24Fc9c946aC2C71a911609F8',
+        agentRegistry: '0x64Cb18bfb3CC1aCb1370a3B01613391D3561a009',
+        archiveTreasury: '0x6159A80Ce8362aBB2307FbaB4Ed4D3F4A4231Acc',
         erc8004IdentityRegistry: '0x8004A169FB4a3325136EB29fA0ceB6D2e539a432',
     },
     eas: {
@@ -123,7 +123,7 @@ exports.BASE_MAINNET = {
      * SECURITY: $1,000 max transaction limit for production safety.
      */
     maxTransactionAmount: 1000,
-    actpKernelDeploymentBlock: 41935749,
+    actpKernelDeploymentBlock: 46212266,
     // AIP-12: Account Abstraction
     aa: {
         entryPoint: '0x5FF137D4b0FDCD49DcA30c7CF57E578a026d2789',

package/dist/config/networks.js.map

@@ -1 +1 @@
-{"version":3,"file":"networks.js","sourceRoot":"","sources":["../../src/config/networks.ts"],"names":[],"mappings":";;;AAAA,mCAAgC;AAEhC,+EAA+E;AAC/E,kCAAkC;AAClC,+EAA+E;AAC/E,+DAA+D;AAC/D,2EAA2E;AAC3E,8DAA8D;AAC9D,EAAE;AACF,gEAAgE;AAChE,2DAA2D;AAC3D,mDAAmD;AACnD,+EAA+E;AAE/E,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;AACxF,uEAAuE;AACvE,sEAAsE;AACtE,oEAAoE;AACpE,qEAAqE;AACrE,wEAAwE;AACxE,sDAAsD;AACtD,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,iCAAiC,CAAC;AAE/F,2EAA2E;AAC3E,0EAA0E;AAC1E,yEAAyE;AACzE,yEAAyE;AACzE,uEAAuE;AACvE,wDAAwD;AACxD,EAAE;AACF,yEAAyE;AACzE,uEAAuE;AACvE,YAAY;AACZ,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,kCAAkC,CAAC;AAC7F,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,4BAA4B,CAAC;AAExF,SAAS,kBAAkB,CAAC,GAAY;IACtC,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5B,OAAO,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,SAAS,qBAAqB,CAAC,WAAmB,EAAE,QAAiB;IACnE,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,OAAO,6CAA6C,WAAW,IAAI,cAAc,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,QAAiB;IAC9D,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,OAAO,6BAA6B,OAAO,eAAe,WAAW,EAAE,CAAC;AAC1E,CAAC;AA4ED;;GAEG;AACU,QAAA,YAAY,GAAkB;IACzC,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,KAAK;IACd,MAAM,EAAE,oBAAoB;IAC5B,aAAa,EAAE,8BAA8B;IAC7C,SAAS,EAAE;QACT,uEAAuE;QACvE,sEAAsE;QACtE,UAAU,EAAE,4CAA4C;QACxD,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,4CAA4C,EAAE,uBAAuB;QAC3E,GAAG,EAAE,4CAA4C;QACjD,iBAAiB,EAAE,4CAA4C;QAC/D,aAAa,EAAE,4CAA4C;QAC3D,gBAAgB,EAAE,4CAA4C,EAAE,4BAA4B;QAC5F,eAAe,EAAE,4CAA4C;QAC7D,SAAS,EAAE,4CAA4C;QACvD,uBAAuB,EAAE,4CAA4C;KACtE;IACD,GAAG,EAAE;QACH,iBAAiB,EAAE,oEAAoE;KACxF;IACD,WAAW,EAAE;QACX,YAAY,EAAE,eAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;QAC5C,oBAAoB,EAAE,eAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;KACrD;IACD,yBAAyB,EAAE,QAAQ,EAAE,sBAAsB;IAC3D,8BAA8B;IAC9B,EAAE,EAAE;QACF,UAAU,EAAE,4CAA4C;QACxD,kBAAkB,EAAE,4CAA4C;QAChE,WAAW,EAAE;YACX,QAAQ,EAAE,qBAAqB,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAC5E,OAAO,EAAE,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;SACtE;QACD,aAAa,EAAE;YACb,QAAQ,EAAE,qBAAqB,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC9E,OAAO,EAAE,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;SACxE;KACF;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,YAAY,GAAkB;IACzC,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,oBAAoB;IAC5B,aAAa,EAAE,sBAAsB;IACrC,SAAS,EAAE;QACT,UAAU,EAAE,4CAA4C;QACxD,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,4CAA4C;QAClD,GAAG,EAAE,4CAA4C;QACjD,iBAAiB,EAAE,4CAA4C;QAC/D,aAAa,EAAE,4CAA4C;QAC3D,eAAe,EAAE,4CAA4C;QAC7D,SAAS,EAAE,4CAA4C;QACvD,uBAAuB,EAAE,4CAA4C;KACtE;IACD,GAAG,EAAE;QACH,iBAAiB,EAAE,oEAAoE;KACxF;IACD,WAAW,EAAE;QACX,YAAY,EAAE,eAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;QAC9C,oBAAoB,EAAE,eAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;KACvD;IACD;;OAEG;IACH,oBAAoB,EAAE,IAAI;IAC1B,yBAAyB,EAAE,QAAQ;IACnC,8BAA8B;IAC9B,EAAE,EAAE;QACF,UAAU,EAAE,4CAA4C;QACxD,kBAAkB,EAAE,4CAA4C;QAChE,WAAW,EAAE;YACX,QAAQ,EAAE,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YACpE,OAAO,EAAE,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;SACrE;QACD,aAAa,EAAE;YACb,QAAQ,EAAE,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACtE,OAAO,EAAE,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;SACvE;KACF;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,QAAQ,GAAkC;IACrD,cAAc,EAAE,oBAAY;IAC5B,cAAc,EAAE,oBAAY;CAC7B,CAAC;AAEF;;GAEG;AACH,SAAgB,UAAU,CAAC,OAAe;IACxC,MAAM,MAAM,GAAG,gBAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,yBAAyB,MAAM,CAAC,IAAI,CAAC,gBAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAE9B,wCAAwC;IACxC,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,SAAS,EAAE;YACT,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,UAAU;YACvC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW;YACzC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI;YAC3B,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG;YACzB,iBAAiB,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB;YACrD,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,aAAa;YAC7C,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,gBAAgB;YACnD,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,eAAe;YACjD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS;YACrC,uBAAuB,EAAE,MAAM,CAAC,SAAS,CAAC,uBAAuB;SAClE;QACD,GAAG,EAAE;YACH,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB;YAC/C,uBAAuB,EAAE,MAAM,CAAC,GAAG,CAAC,uBAAuB;SAC5D;QACD,WAAW,EAAE;YACX,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY;YAC7C,oBAAoB,EAAE,MAAM,CAAC,WAAW,CAAC,oBAAoB;SAC9D;QACD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACd,EAAE,EAAE;gBACF,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,UAAU;gBAChC,kBAAkB,EAAE,MAAM,CAAC,EAAE,CAAC,kBAAkB;gBAChD,WAAW,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE;gBACzC,aAAa,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE;aAC9C;SACF,CAAC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAhDD,gCAgDC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,OAAe;IAC5C,OAAO,OAAO,IAAI,gBAAQ,CAAC;AAC7B,CAAC;AAFD,wCAEC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,MAAqB;IACzD,MAAM,WAAW,GAAG,4CAA4C,CAAC;IACjE,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,mCAAmC,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,OAAO,QAAQ;YAClF,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACtC,gEAAgE;YAChE,4BAA4B,MAAM,CAAC,IAAI,IAAI;YAC3C,8DAA8D;YAC9D,qCAAqC,CACtC,CAAC;IACJ,CAAC;AACH,CAAC;AA1BD,sDA0BC"}
+{"version":3,"file":"networks.js","sourceRoot":"","sources":["../../src/config/networks.ts"],"names":[],"mappings":";;;AAAA,mCAAgC;AAEhC,+EAA+E;AAC/E,kCAAkC;AAClC,+EAA+E;AAC/E,+DAA+D;AAC/D,2EAA2E;AAC3E,8DAA8D;AAC9D,EAAE;AACF,gEAAgE;AAChE,2DAA2D;AAC3D,mDAAmD;AACnD,+EAA+E;AAE/E,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;AACxF,uEAAuE;AACvE,sEAAsE;AACtE,oEAAoE;AACpE,qEAAqE;AACrE,wEAAwE;AACxE,sDAAsD;AACtD,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,iCAAiC,CAAC;AAE/F,2EAA2E;AAC3E,0EAA0E;AAC1E,yEAAyE;AACzE,yEAAyE;AACzE,uEAAuE;AACvE,wDAAwD;AACxD,EAAE;AACF,yEAAyE;AACzE,uEAAuE;AACvE,YAAY;AACZ,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,kCAAkC,CAAC;AAC7F,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,4BAA4B,CAAC;AAExF,SAAS,kBAAkB,CAAC,GAAY;IACtC,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5B,OAAO,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,SAAS,qBAAqB,CAAC,WAAmB,EAAE,QAAiB;IACnE,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,OAAO,6CAA6C,WAAW,IAAI,cAAc,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,QAAiB;IAC9D,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,OAAO,6BAA6B,OAAO,eAAe,WAAW,EAAE,CAAC;AAC1E,CAAC;AA4ED;;GAEG;AACU,QAAA,YAAY,GAAkB;IACzC,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,KAAK;IACd,MAAM,EAAE,oBAAoB;IAC5B,aAAa,EAAE,8BAA8B;IAC7C,SAAS,EAAE;QACT,6DAA6D;QAC7D,8EAA8E;QAC9E,sEAAsE;QACtE,UAAU,EAAE,4CAA4C;QACxD,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,4CAA4C,EAAE,uBAAuB;QAC3E,GAAG,EAAE,4CAA4C;QACjD,iBAAiB,EAAE,4CAA4C;QAC/D,aAAa,EAAE,4CAA4C;QAC3D,gBAAgB,EAAE,4CAA4C,EAAE,4BAA4B;QAC5F,eAAe,EAAE,4CAA4C;QAC7D,SAAS,EAAE,4CAA4C,EAAE,6BAA6B;QACtF,uBAAuB,EAAE,4CAA4C;KACtE;IACD,GAAG,EAAE;QACH,iBAAiB,EAAE,oEAAoE;KACxF;IACD,WAAW,EAAE;QACX,YAAY,EAAE,eAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;QAC5C,oBAAoB,EAAE,eAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;KACrD;IACD,yBAAyB,EAAE,QAAQ,EAAE,yBAAyB;IAC9D,8BAA8B;IAC9B,EAAE,EAAE;QACF,UAAU,EAAE,4CAA4C;QACxD,kBAAkB,EAAE,4CAA4C;QAChE,WAAW,EAAE;YACX,QAAQ,EAAE,qBAAqB,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAC5E,OAAO,EAAE,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;SACtE;QACD,aAAa,EAAE;YACb,QAAQ,EAAE,qBAAqB,CAAC,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC9E,OAAO,EAAE,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;SACxE;KACF;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,YAAY,GAAkB;IACzC,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,oBAAoB;IAC5B,aAAa,EAAE,sBAAsB;IACrC,SAAS,EAAE;QACT,UAAU,EAAE,4CAA4C;QACxD,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,4CAA4C;QAClD,GAAG,EAAE,4CAA4C;QACjD,iBAAiB,EAAE,4CAA4C;QAC/D,aAAa,EAAE,4CAA4C;QAC3D,eAAe,EAAE,4CAA4C;QAC7D,uBAAuB,EAAE,4CAA4C;KACtE;IACD,GAAG,EAAE;QACH,iBAAiB,EAAE,oEAAoE;KACxF;IACD,WAAW,EAAE;QACX,YAAY,EAAE,eAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;QAC9C,oBAAoB,EAAE,eAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;KACvD;IACD;;OAEG;IACH,oBAAoB,EAAE,IAAI;IAC1B,yBAAyB,EAAE,QAAQ;IACnC,8BAA8B;IAC9B,EAAE,EAAE;QACF,UAAU,EAAE,4CAA4C;QACxD,kBAAkB,EAAE,4CAA4C;QAChE,WAAW,EAAE;YACX,QAAQ,EAAE,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YACpE,OAAO,EAAE,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;SACrE;QACD,aAAa,EAAE;YACb,QAAQ,EAAE,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACtE,OAAO,EAAE,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;SACvE;KACF;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,QAAQ,GAAkC;IACrD,cAAc,EAAE,oBAAY;IAC5B,cAAc,EAAE,oBAAY;CAC7B,CAAC;AAEF;;GAEG;AACH,SAAgB,UAAU,CAAC,OAAe;IACxC,MAAM,MAAM,GAAG,gBAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,yBAAyB,MAAM,CAAC,IAAI,CAAC,gBAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAE9B,wCAAwC;IACxC,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,SAAS,EAAE;YACT,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,UAAU;YACvC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW;YACzC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI;YAC3B,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG;YACzB,iBAAiB,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB;YACrD,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,aAAa;YAC7C,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,gBAAgB;YACnD,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,eAAe;YACjD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS;YACrC,uBAAuB,EAAE,MAAM,CAAC,SAAS,CAAC,uBAAuB;SAClE;QACD,GAAG,EAAE;YACH,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB;YAC/C,uBAAuB,EAAE,MAAM,CAAC,GAAG,CAAC,uBAAuB;SAC5D;QACD,WAAW,EAAE;YACX,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY;YAC7C,oBAAoB,EAAE,MAAM,CAAC,WAAW,CAAC,oBAAoB;SAC9D;QACD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACd,EAAE,EAAE;gBACF,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,UAAU;gBAChC,kBAAkB,EAAE,MAAM,CAAC,EAAE,CAAC,kBAAkB;gBAChD,WAAW,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE;gBACzC,aAAa,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE;aAC9C;SACF,CAAC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAhDD,gCAgDC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,OAAe;IAC5C,OAAO,OAAO,IAAI,gBAAQ,CAAC;AAC7B,CAAC;AAFD,wCAEC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,MAAqB;IACzD,MAAM,WAAW,GAAG,4CAA4C,CAAC;IACjE,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,mCAAmC,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,OAAO,QAAQ;YAClF,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACtC,gEAAgE;YAChE,4BAA4B,MAAM,CAAC,IAAI,IAAI;YAC3C,8DAA8D;YAC9D,qCAAqC,CACtC,CAAC;IACJ,CAAC;AACH,CAAC;AA1BD,sDA0BC"}

package/dist/errors/X402Errors.d.ts

@@ -21,6 +21,10 @@ export declare class X402Error extends ACTPError {
  *
  * Most common cause: walletProvider does not implement the optional
  * `signTypedData()` method that x402 v2 requires for EIP-712 signing.
+ *
+ * @cause x402 adapter configuration is missing or invalid (no wallet, no recipient address, malformed scheme).
+ * @fix Read the error `details` for the specific config gap. See /recipes/per-call-api for canonical setup.
+ * @recovery user-action
  */
 export declare class X402ConfigError extends X402Error {
     constructor(message: string, details?: Record<string, unknown>);
@@ -29,6 +33,10 @@ export declare class X402ConfigError extends X402Error {
  * Thrown when paymaster rejects sponsored tx because agent isn't published
  * in AgentRegistry. The one-time Permit2 approve needed to enable Smart Wallet
  * x402 payments requires the agent to pass the paymaster policy gate.
+ *
+ * @cause Attempted x402 settlement before publishing the agent (no AgentID, no AgentRegistry entry).
+ * @fix Run `actp publish` to register the agent. See /recipes/keystore-and-deployment.
+ * @recovery user-action
  */
 export declare class X402PublishRequiredError extends X402Error {
     constructor();
@@ -41,6 +49,10 @@ export declare class X402PublishRequiredError extends X402Error {
  * holder, and it does NOT delegate to ERC-1271 for contract wallets.
  * Smart Wallets must use the Permit2 path, which the server must advertise
  * by setting `extra.assetTransferMethod = "permit2"` in payment requirements.
+ *
+ * @cause Configured wallet provider does not implement the EIP-3009 typed-data signing required by x402, or the server only offers EIP-3009 (not Permit2) and the wallet is a Smart Wallet.
+ * @fix Switch to `wallet=auto` (Coinbase Smart Wallet supports it via Permit2) or use an EOA wallet that implements `signTypedData_v4` per EIP-712. Or ask the server to advertise Permit2.
+ * @recovery user-action
  */
 export declare class X402UnsupportedWalletError extends X402Error {
     constructor(message: string, details?: Record<string, unknown>);
@@ -48,6 +60,10 @@ export declare class X402UnsupportedWalletError extends X402Error {
 /**
  * Thrown when the server's payment-required response offers no network
  * that the client's `allowedNetworks` configuration accepts.
+ *
+ * @cause x402 v2 only supports mainnet on AGIRAILS; attempted use on testnet or mock.
+ * @fix Switch network to `mainnet`, or use ACTP escrow on testnet for development.
+ * @recovery user-action
  */
 export declare class X402NetworkNotAllowedError extends X402Error {
     constructor(message: string, details?: Record<string, unknown>);
@@ -55,6 +71,10 @@ export declare class X402NetworkNotAllowedError extends X402Error {
 /**
  * Thrown when the server's required payment amount exceeds the client's
  * `maxAmountPerTx` safety cap. Default cap is $1 USDC.
+ *
+ * @cause x402 server-issued price exceeds the consumer's max acceptable amount (per `pay()` config or app guard).
+ * @fix Raise `maxAmountPerTx`, or treat the call as too expensive and route to ACTP escrow with negotiated pricing.
+ * @recovery user-action
  */
 export declare class X402AmountExceededError extends X402Error {
     constructor(message: string, details?: Record<string, unknown>);
@@ -62,12 +82,20 @@ export declare class X402AmountExceededError extends X402Error {
 /**
  * Thrown when the one-time Permit2 approve transaction fails for any reason
  * other than paymaster gate (which throws X402PublishRequiredError instead).
+ *
+ * @cause USDC `transferWithAuthorization` (EIP-3009) authorization step failed. Common: signature replay, expired authorization, or insufficient balance.
+ * @fix Re-sign with a fresh nonce; check USDC balance; verify the EIP-3009 typed-data domain matches Base mainnet.
+ * @recovery retry-safe
  */
 export declare class X402ApprovalFailedError extends X402Error {
     constructor(message: string, details?: Record<string, unknown>);
 }
 /**
  * Thrown when walletProvider.signTypedData() fails to produce a signature.
+ *
+ * @cause EIP-712 typed-data signing of the x402 payment authorization failed at the wallet provider level.
+ * @fix Confirm the wallet's chainId matches the network. For `wallet=auto`, ensure the keystore is loaded and the Smart Wallet is registered.
+ * @recovery must-investigate
  */
 export declare class X402SignatureFailedError extends X402Error {
     constructor(message: string, details?: Record<string, unknown>);
@@ -77,9 +105,13 @@ export declare class X402SignatureFailedError extends X402Error {
  * a `payment-response` header confirming on-chain settlement.
  *
  * Per x402 v2 spec, facilitator sets this header ONLY after settlement is
- * mined and confirmed. Absence means the payment is UNCONFIRMED — it may have
+ * mined and confirmed. Absence means the payment is UNCONFIRMED. It may have
  * been lost to a reorg, stuck in mempool, or the facilitator/server may be
  * misbehaving. Do not treat as success.
+ *
+ * @cause x402 settlement attempted but the prior payment authorization proof isn't on file (server lost state, replayed stale request, or facilitator/server misbehavior).
+ * @fix Re-initiate the payment flow from `pay()` with a new authorization. Verify the settlement on-chain via tx hash before treating as final. State is per-request, not persisted across SDK reboots.
+ * @recovery retry-safe
  */
 export declare class X402SettlementProofMissingError extends X402Error {
     constructor(message?: string);
@@ -87,6 +119,10 @@ export declare class X402SettlementProofMissingError extends X402Error {
 /**
  * Thrown when the payment attempt returns a non-2xx HTTP status after
  * signing and submitting the payment payload.
+ *
+ * @cause x402 transfer transaction failed on-chain (revert during USDC transfer step) or server returned non-2xx.
+ * @fix Read the tx hash from error details, inspect on Basescan. Often: balance check failed, recipient invalid, or paymaster rejected sponsorship.
+ * @recovery must-investigate
  */
 export declare class X402PaymentFailedError extends X402Error {
     constructor(message: string, details?: Record<string, unknown>);

package/dist/errors/X402Errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"X402Errors.d.ts","sourceRoot":"","sources":["../../src/errors/X402Errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;GAGG;AACH,qBAAa,SAAU,SAAQ,SAAS;gBAC1B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAK7E;AAED;;;;;GAKG;AACH,qBAAa,eAAgB,SAAQ,SAAS;gBAChC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;;GAIG;AACH,qBAAa,wBAAyB,SAAQ,SAAS;;CAUtD;AAED;;;;;;;;GAQG;AACH,qBAAa,0BAA2B,SAAQ,SAAS;gBAC3C,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,SAAS;gBAC3C,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,SAAS;gBACxC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,SAAS;gBACxC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,SAAS;gBACzC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;;;;;;GAQG;AACH,qBAAa,+BAAgC,SAAQ,SAAS;gBAChD,OAAO,CAAC,EAAE,MAAM;CAU7B;AAED;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,SAAS;gBACvC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAGxD"}
+{"version":3,"file":"X402Errors.d.ts","sourceRoot":"","sources":["../../src/errors/X402Errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;GAGG;AACH,qBAAa,SAAU,SAAQ,SAAS;gBAC1B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAK7E;AAED;;;;;;;;;GASG;AACH,qBAAa,eAAgB,SAAQ,SAAS;gBAChC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;;;;;;GAQG;AACH,qBAAa,wBAAyB,SAAQ,SAAS;;CAUtD;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,0BAA2B,SAAQ,SAAS;gBAC3C,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;;;;;GAOG;AACH,qBAAa,0BAA2B,SAAQ,SAAS;gBAC3C,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;;;;;GAOG;AACH,qBAAa,uBAAwB,SAAQ,SAAS;gBACxC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;;;;;GAOG;AACH,qBAAa,uBAAwB,SAAQ,SAAS;gBACxC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;;;;GAMG;AACH,qBAAa,wBAAyB,SAAQ,SAAS;gBACzC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,+BAAgC,SAAQ,SAAS;gBAChD,OAAO,CAAC,EAAE,MAAM;CAU7B;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAuB,SAAQ,SAAS;gBACvC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAGxD"}

package/dist/errors/X402Errors.js

@@ -29,6 +29,10 @@ exports.X402Error = X402Error;
  *
  * Most common cause: walletProvider does not implement the optional
  * `signTypedData()` method that x402 v2 requires for EIP-712 signing.
+ *
+ * @cause x402 adapter configuration is missing or invalid (no wallet, no recipient address, malformed scheme).
+ * @fix Read the error `details` for the specific config gap. See /recipes/per-call-api for canonical setup.
+ * @recovery user-action
  */
 class X402ConfigError extends X402Error {
     constructor(message, details) {
@@ -41,6 +45,10 @@ exports.X402ConfigError = X402ConfigError;
  * Thrown when paymaster rejects sponsored tx because agent isn't published
  * in AgentRegistry. The one-time Permit2 approve needed to enable Smart Wallet
  * x402 payments requires the agent to pass the paymaster policy gate.
+ *
+ * @cause Attempted x402 settlement before publishing the agent (no AgentID, no AgentRegistry entry).
+ * @fix Run `actp publish` to register the agent. See /recipes/keystore-and-deployment.
+ * @recovery user-action
  */
 class X402PublishRequiredError extends X402Error {
     constructor() {
@@ -59,6 +67,10 @@ exports.X402PublishRequiredError = X402PublishRequiredError;
  * holder, and it does NOT delegate to ERC-1271 for contract wallets.
  * Smart Wallets must use the Permit2 path, which the server must advertise
  * by setting `extra.assetTransferMethod = "permit2"` in payment requirements.
+ *
+ * @cause Configured wallet provider does not implement the EIP-3009 typed-data signing required by x402, or the server only offers EIP-3009 (not Permit2) and the wallet is a Smart Wallet.
+ * @fix Switch to `wallet=auto` (Coinbase Smart Wallet supports it via Permit2) or use an EOA wallet that implements `signTypedData_v4` per EIP-712. Or ask the server to advertise Permit2.
+ * @recovery user-action
  */
 class X402UnsupportedWalletError extends X402Error {
     constructor(message, details) {
@@ -70,6 +82,10 @@ exports.X402UnsupportedWalletError = X402UnsupportedWalletError;
 /**
  * Thrown when the server's payment-required response offers no network
  * that the client's `allowedNetworks` configuration accepts.
+ *
+ * @cause x402 v2 only supports mainnet on AGIRAILS; attempted use on testnet or mock.
+ * @fix Switch network to `mainnet`, or use ACTP escrow on testnet for development.
+ * @recovery user-action
  */
 class X402NetworkNotAllowedError extends X402Error {
     constructor(message, details) {
@@ -81,6 +97,10 @@ exports.X402NetworkNotAllowedError = X402NetworkNotAllowedError;
 /**
  * Thrown when the server's required payment amount exceeds the client's
  * `maxAmountPerTx` safety cap. Default cap is $1 USDC.
+ *
+ * @cause x402 server-issued price exceeds the consumer's max acceptable amount (per `pay()` config or app guard).
+ * @fix Raise `maxAmountPerTx`, or treat the call as too expensive and route to ACTP escrow with negotiated pricing.
+ * @recovery user-action
  */
 class X402AmountExceededError extends X402Error {
     constructor(message, details) {
@@ -92,6 +112,10 @@ exports.X402AmountExceededError = X402AmountExceededError;
 /**
  * Thrown when the one-time Permit2 approve transaction fails for any reason
  * other than paymaster gate (which throws X402PublishRequiredError instead).
+ *
+ * @cause USDC `transferWithAuthorization` (EIP-3009) authorization step failed. Common: signature replay, expired authorization, or insufficient balance.
+ * @fix Re-sign with a fresh nonce; check USDC balance; verify the EIP-3009 typed-data domain matches Base mainnet.
+ * @recovery retry-safe
  */
 class X402ApprovalFailedError extends X402Error {
     constructor(message, details) {
@@ -102,6 +126,10 @@ class X402ApprovalFailedError extends X402Error {
 exports.X402ApprovalFailedError = X402ApprovalFailedError;
 /**
  * Thrown when walletProvider.signTypedData() fails to produce a signature.
+ *
+ * @cause EIP-712 typed-data signing of the x402 payment authorization failed at the wallet provider level.
+ * @fix Confirm the wallet's chainId matches the network. For `wallet=auto`, ensure the keystore is loaded and the Smart Wallet is registered.
+ * @recovery must-investigate
  */
 class X402SignatureFailedError extends X402Error {
     constructor(message, details) {
@@ -115,9 +143,13 @@ exports.X402SignatureFailedError = X402SignatureFailedError;
  * a `payment-response` header confirming on-chain settlement.
  *
  * Per x402 v2 spec, facilitator sets this header ONLY after settlement is
- * mined and confirmed. Absence means the payment is UNCONFIRMED — it may have
+ * mined and confirmed. Absence means the payment is UNCONFIRMED. It may have
  * been lost to a reorg, stuck in mempool, or the facilitator/server may be
  * misbehaving. Do not treat as success.
+ *
+ * @cause x402 settlement attempted but the prior payment authorization proof isn't on file (server lost state, replayed stale request, or facilitator/server misbehavior).
+ * @fix Re-initiate the payment flow from `pay()` with a new authorization. Verify the settlement on-chain via tx hash before treating as final. State is per-request, not persisted across SDK reboots.
+ * @recovery retry-safe
  */
 class X402SettlementProofMissingError extends X402Error {
     constructor(message) {
@@ -132,6 +164,10 @@ exports.X402SettlementProofMissingError = X402SettlementProofMissingError;
 /**
  * Thrown when the payment attempt returns a non-2xx HTTP status after
  * signing and submitting the payment payload.
+ *
+ * @cause x402 transfer transaction failed on-chain (revert during USDC transfer step) or server returned non-2xx.
+ * @fix Read the tx hash from error details, inspect on Basescan. Often: balance check failed, recipient invalid, or paymaster rejected sponsorship.
+ * @recovery must-investigate
  */
 class X402PaymentFailedError extends X402Error {
     constructor(message, details) {

package/dist/errors/X402Errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"X402Errors.js","sourceRoot":"","sources":["../../src/errors/X402Errors.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAEH,2CAAwC;AAExC;;;GAGG;AACH,MAAa,SAAU,SAAQ,qBAAS;IACtC,YAAY,OAAe,EAAE,IAAY,EAAE,OAAiC;QAC1E,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAND,8BAMC;AAED;;;;;GAKG;AACH,MAAa,eAAgB,SAAQ,SAAS;IAC5C,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AALD,0CAKC;AAED;;;;GAIG;AACH,MAAa,wBAAyB,SAAQ,SAAS;IACrD;QACE,KAAK,CACH,2EAA2E;YACzE,wEAAwE;YACxE,sEAAsE,EACxE,uBAAuB,CACxB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAVD,4DAUC;AAED;;;;;;;;GAQG;AACH,MAAa,0BAA2B,SAAQ,SAAS;IACvD,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AALD,gEAKC;AAED;;;GAGG;AACH,MAAa,0BAA2B,SAAQ,SAAS;IACvD,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AALD,gEAKC;AAED;;;GAGG;AACH,MAAa,uBAAwB,SAAQ,SAAS;IACpD,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAED;;;GAGG;AACH,MAAa,uBAAwB,SAAQ,SAAS;IACpD,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAED;;GAEG;AACH,MAAa,wBAAyB,SAAQ,SAAS;IACrD,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,uBAAuB,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AALD,4DAKC;AAED;;;;;;;;GAQG;AACH,MAAa,+BAAgC,SAAQ,SAAS;IAC5D,YAAY,OAAgB;QAC1B,KAAK,CACH,OAAO;YACL,sEAAsE;gBACpE,mFAAmF;gBACnF,kEAAkE,EACtE,+BAA+B,CAChC,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAXD,0EAWC;AAED;;;GAGG;AACH,MAAa,sBAAuB,SAAQ,SAAS;IACnD,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AALD,wDAKC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,oBAAoB,CAAC,CAAU;IAC7C,IAAI,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,4DAA4D,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACtF,CAAC;AAHD,oDAGC"}
+{"version":3,"file":"X402Errors.js","sourceRoot":"","sources":["../../src/errors/X402Errors.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAEH,2CAAwC;AAExC;;;GAGG;AACH,MAAa,SAAU,SAAQ,qBAAS;IACtC,YAAY,OAAe,EAAE,IAAY,EAAE,OAAiC;QAC1E,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAND,8BAMC;AAED;;;;;;;;;GASG;AACH,MAAa,eAAgB,SAAQ,SAAS;IAC5C,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AALD,0CAKC;AAED;;;;;;;;GAQG;AACH,MAAa,wBAAyB,SAAQ,SAAS;IACrD;QACE,KAAK,CACH,2EAA2E;YACzE,wEAAwE;YACxE,sEAAsE,EACxE,uBAAuB,CACxB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAVD,4DAUC;AAED;;;;;;;;;;;;GAYG;AACH,MAAa,0BAA2B,SAAQ,SAAS;IACvD,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AALD,gEAKC;AAED;;;;;;;GAOG;AACH,MAAa,0BAA2B,SAAQ,SAAS;IACvD,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AALD,gEAKC;AAED;;;;;;;GAOG;AACH,MAAa,uBAAwB,SAAQ,SAAS;IACpD,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAED;;;;;;;GAOG;AACH,MAAa,uBAAwB,SAAQ,SAAS;IACpD,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAED;;;;;;GAMG;AACH,MAAa,wBAAyB,SAAQ,SAAS;IACrD,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,uBAAuB,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AALD,4DAKC;AAED;;;;;;;;;;;;GAYG;AACH,MAAa,+BAAgC,SAAQ,SAAS;IAC5D,YAAY,OAAgB;QAC1B,KAAK,CACH,OAAO;YACL,sEAAsE;gBACpE,mFAAmF;gBACnF,kEAAkE,EACtE,+BAA+B,CAChC,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAXD,0EAWC;AAED;;;;;;;GAOG;AACH,MAAa,sBAAuB,SAAQ,SAAS;IACnD,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AALD,wDAKC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,oBAAoB,CAAC,CAAU;IAC7C,IAAI,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,4DAA4D,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACtF,CAAC;AAHD,oDAGC"}