@blindmarket/sdk 0.6.1 → 0.6.2

package/dist/types.d.ts

@@ -81,6 +81,43 @@ export interface OpenTask {
     status: number;
     taskHash?: Hex;
 }
+/**
+ * Body of `POST /api/v1/tasks` — mirrors `createTaskSchema` in
+ * `backend/src/routes/tasks.ts`. The poster is the authenticated caller; the
+ * deadline is derived on-chain from `duration`.
+ */
+export interface CreateTaskRequest {
+    /** bytes32 commitment to the brief (0x + 64 hex) — sha256 of the ciphertext. */
+    taskHash: Hex;
+    /** Payment token address (USDC on Base; the zero address = native on 0G). */
+    token: Address;
+    /** Reward, as an integer string in the payment token's smallest unit. */
+    amount: string;
+    locationZone: string;
+    /** Task duration in SECONDS, as a string. */
+    duration: string;
+    targetExecutorType?: 'human' | 'agent';
+    /**
+     * 'oracle' is deliberately absent: it is reserved/unwired and the index route
+     * rejects it (400 VERIFICATION_MODE_UNSUPPORTED).
+     */
+    verificationMode?: 'manual' | 'auto' | 'agent';
+    /** Designated verifier — only with verificationMode 'agent'. */
+    verifierAddress?: Address;
+    /**
+     * REQUIRED in practice for 'auto': `POST /a2a/tasks/index` rejects an 'auto'
+     * task without at least one real check (400 AUTO_CRITERIA_REQUIRED) —
+     * min_length, contains_keywords, required_fields, expected_schema,
+     * regex_pattern, rubric, forbidden_phrases or expected_answer. Send the same
+     * criteria to both calls.
+     */
+    verificationCriteria?: Record<string, unknown>;
+    requiredCapabilities?: AgentCapability[];
+    /** 0G Storage root hash of the (encrypted) brief. */
+    rootHash?: string;
+    /** Lowercased executor address → hex ECIES blob (no 0x) of the brief AES key. */
+    wrappedKeys?: Record<string, string>;
+}
 export interface CreateTaskTx {
     unsignedTx: {
         to: Address;
@@ -92,9 +129,13 @@ export interface TaskDetail extends OpenTask {
     metadata?: Record<string, unknown>;
     a2aState?: A2ATaskState;
 }
+/** Mirrors `A2ATaskStateStatus` in `backend/src/types.ts`. */
+export type A2ATaskStatus = 'open' | 'accepted' | 'in_progress' | 'submitted' | 'awaiting_verification' | 'verified' | 'completed' | 'failed';
 export interface A2ATaskState {
     taskId: string;
-    status: string;
+    /** One of A2ATaskStatus; left open so a newer backend doesn't break parsing. */
+    status: A2ATaskStatus | (string & {});
+    failedReason?: string;
     executorAddress?: string;
     acceptedAt?: string;
     submittedAt?: string;
@@ -115,6 +156,31 @@ export interface A2ATaskState {
     verifyTxHash?: Hex;
     wrappedKeys?: Record<string, string>;
 }
+/**
+ * Public task metadata as served by the unauthenticated browse surface
+ * (`projectPublicMeta` in the backend): key material is stripped, and
+ * `rootHash` appears only on public tasks.
+ */
+export interface A2APublicTaskMeta {
+    taskId: string;
+    targetExecutorType?: 'human' | 'agent';
+    verificationMode?: string;
+    requiredCapabilities?: AgentCapability[];
+    posterAddress?: string;
+    /** Which escrow holds the task. Absent on rows indexed before the field existed. */
+    chain?: 'base' | '0g';
+    /** Unix seconds. */
+    deadline?: number;
+    privacy?: 'public';
+    hasEncryptedBrief?: boolean;
+    rootHash?: string;
+    [key: string]: unknown;
+}
+/** One entry of `GET /api/v1/a2a/tasks` (and /tasks/posted, /executions). */
+export interface A2ATaskEntry {
+    meta: A2APublicTaskMeta;
+    state: A2ATaskState;
+}
 export interface ExecutorProfile {
     address: Address;
     displayName: string;
@@ -129,8 +195,9 @@ export interface ExecutorProfile {
     minReward?: string;
     preferredCapabilities?: AgentCapability[];
     /** Settlement chains the executor declared at registration. `null` means it
-     *  never declared any, which the backend treats as 0G and Base. Absent from
-     *  backends that predate the field. */
+     *  never declared any. Informational: the backend stores it but does not
+     *  filter offers or /accept by it. Absent from backends that predate the
+     *  field. */
     supportedChains?: string[] | null;
     registeredAt: string;
     decayedScore?: number;
@@ -138,29 +205,46 @@ export interface ExecutorProfile {
     avgRating?: number;
 }
 export interface RegisterExecutorInput {
-    address: Address;
+    /**
+     * Ignored by the backend: the registered executor is ALWAYS the wallet that
+     * owns the API key. Kept optional for source compatibility.
+     */
+    address?: Address;
     displayName: string;
     capabilities: AgentCapability[];
+    /** Uncompressed secp256k1 public key: 130 hex chars, leading `04`, NO 0x prefix. */
     publicKey: string;
     agentCardUrl?: string;
     mcpEndpointUrl?: string;
     minReward?: string;
     preferredCapabilities?: AgentCapability[];
     /** Settlement chains ('0g', 'base', …) this executor can sign
-     *  `submitEvidence` on. The backend only offers and assigns it tasks
-     *  escrowed on these chains. Omitted: the backend's default, 0G and Base.
-     *  Backends that predate the field ignore it. */
+     *  `submitEvidence` on. A DECLARATION ONLY: the backend stores it on the
+     *  executor record and does not filter offers or /accept by it, so the
+     *  caller must check a task's chain (`entry.meta.chain`) before accepting —
+     *  WorkerRuntime does. Backends that predate the field drop it. */
     supportedChains?: string[];
 }
-/** Params for BlindMarket.createAgent() — generates wallet + registers executor in one call. */
+/** Params for BlindMarket.createAgent() — derives the pubkey from your key + registers the executor in one call. */
 export interface CreateAgentParams {
+    /**
+     * Private key of the wallet that OWNS the API key. The backend registers the
+     * API key's owner as the executor (never an address from the request), wraps
+     * briefs to the public key registered here, and builds `submitEvidence` for
+     * the owner address — so this must be that wallet's key. Never sent to the
+     * backend; only its public half is. Defaults to
+     * `BlindMarketConfig.executor.privateKey`. With neither, a random wallet is
+     * generated (it can decrypt briefs but cannot sign `submitEvidence` for the
+     * owner's address).
+     */
+    privateKey?: string;
     /** Display name for the agent in the marketplace. */
     displayName: string;
     /** Capabilities this agent offers. Use AgentCap.DATA_PROCESSING etc. */
     capabilities: AgentCapability[];
     /** Which of the above the agent prefers (subset of capabilities). */
     preferredCapabilities?: AgentCapability[];
-    /** Minimum reward per task (wei string). */
+    /** Minimum reward per task, as an integer string in the payment token's smallest unit (USDC: 6 decimals). */
     minReward?: string;
     /** Agent card URL for marketplace display. */
     agentCardUrl?: string;
@@ -172,9 +256,12 @@ export interface CreateAgentParams {
 }
 /** Result of BlindMarket.createAgent(). */
 export interface CreateAgentResult {
+    /** The registered executor — `executor.address` is the API key's owner wallet. */
     executor: ExecutorProfile;
+    /** The wallet of the `privateKey` you passed in, or the generated one. */
     wallet: {
         address: Address;
+        /** Uncompressed secp256k1 public key, 0x-prefixed (`0x04…`); registered without the 0x. */
         publicKey: string;
         privateKey: string;
     };

package/dist/worker/Worker.d.ts

@@ -45,9 +45,11 @@ export declare class Worker {
     decryptInstructions(input: DecryptInstructionsInput): Promise<Uint8Array>;
     submitEvidence(input: SubmitEvidenceInput): Promise<SubmitEvidenceResult>;
     /**
-     * Worker escape hatch: reclaim escrow after the deadline if completeVerification
-     * was never called. Payment released per contract logic (85% worker, 15% treasury
-     * or full refund depending on submission state — see BlindEscrow.claimTimeout).
+     * Reclaim escrow after the deadline if completeVerification was never called.
+     * BlindEscrow.claimTimeout is `onlyAgent`: only the POSTER can call it, and it
+     * refunds the poster the full escrowed amount — the worker is paid nothing on
+     * a timeout (the 90% worker / 10% platform split applies only to a passed
+     * verification). Called from a worker wallet this reverts.
      */
     claimTimeout(taskId: TaskId): Promise<TxReceiptLike>;
 }

package/dist/worker/Worker.js

@@ -41,9 +41,11 @@ export class Worker {
         return { rootHash, txHash: receipt.hash, receipt };
     }
     /**
-     * Worker escape hatch: reclaim escrow after the deadline if completeVerification
-     * was never called. Payment released per contract logic (85% worker, 15% treasury
-     * or full refund depending on submission state — see BlindEscrow.claimTimeout).
+     * Reclaim escrow after the deadline if completeVerification was never called.
+     * BlindEscrow.claimTimeout is `onlyAgent`: only the POSTER can call it, and it
+     * refunds the poster the full escrowed amount — the worker is paid nothing on
+     * a timeout (the 90% worker / 10% platform split applies only to a passed
+     * verification). Called from a worker wallet this reverts.
      */
     async claimTimeout(taskId) {
         const receipt = await this.deps.escrow.claimTimeout(taskId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blindmarket/sdk",
-  "version": "0.6.1",
+  "version": "0.6.2",
   "description": "BlindMarket SDK — deploy agents, assign workers, verify evidence",
   "author": "BlindMarket Team",
   "license": "MIT",
@@ -32,7 +32,8 @@
   ],
   "type": "module",
   "files": [
-    "dist"
+    "dist",
+    "CHANGELOG.md"
   ],
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -52,13 +53,16 @@
   },
   "scripts": {
     "build": "tsc",
-    "dev": "tsc --watch"
+    "dev": "tsc --watch",
+    "test": "vitest run"
   },
   "dependencies": {
-    "ethers": "6.13.1"
+    "ethers": "6.17.0"
   },
   "devDependencies": {
     "@types/node": "^22.15.3",
-    "typescript": "^5.7.3"
+    "fast-check": "^4.10.1",
+    "typescript": "^5.7.3",
+    "vitest": "^4.1.11"
   }
 }