@botanary/agent 0.1.0-alpha.1

package/dist/runtime.js

@@ -0,0 +1,559 @@
+import { exactActionInput, actionBinding, validateExactAction, exactActionReceipt } from './exact-action.js';
+import { keccak256, toHex, encodePacked, encodeAbiParameters } from 'viem';
+import { PairingCodeManager } from './pairing-code.js';
+import { AgentApiClient } from './transport.js';
+import { BotanaryApiError } from './errors.js';
+import { recoverAddress } from 'viem';
+import { publicIdentity, hex, record, resourceId, invalidResponse, unsignedUserOp, readyRequirement, apiCallStatus } from './validation.js';
+/**
+ * Poll `get` until the op reports a terminal status or `budgetMs` is spent, then return whatever the
+ * backend last said - VERBATIM. A budget lapse returns the real `pending` answer; this helper never
+ * invents a status, and never blocks forever.
+ *
+ * Pure and injectable (clock + sleep) so its behaviour is testable without timers or a network.
+ */
+export async function awaitTerminalWith(get, opId, budgetMs, now, sleep) {
+    if (!Number.isFinite(budgetMs) || budgetMs < 0 || budgetMs > 3_600_000)
+        throw new Error('Invalid wait budget.');
+    const started = now();
+    let last = await get(opId);
+    while (['pending', 'pending_approval', 'submitted', 'queued'].includes(String(last.status)) && now() - started < budgetMs) {
+        await sleep(1_500);
+        last = await get(opId);
+    }
+    return last;
+}
+/** Re-mint this many ms before the backend's own `expiresAt` - session TTL is an hour
+ *  (`agent-session.store.ts`), so this is a small, deliberately conservative margin, not a tuned value. */
+const SESSION_REFRESH_SKEW_MS = 30_000;
+/** How long `callApi` polls a `pending_approval` call before giving up and reporting its OWN timeout -
+ *  distinct from the backend's `expired`, which is a real verdict (see `callApi`'s decline branch).
+ *  Matches the backend's own `REQUIREMENT_TTL_MS` (`botanary-be/src/common/x402-ttl.ts`, 5 minutes),
+ *  copied rather than imported because this package is deploy-isolated from botanary-be (no shared
+ *  import, ever - see the workspace AGENTS.md). A longer budget here would just keep polling after the
+ *  backend itself has already started answering `expired`. */
+const APPROVAL_POLL_BUDGET_MS = 5 * 60 * 1000;
+/** Default API origin. The shared runtime reads no environment variables; its host supplies overrides. */
+export const DEFAULT_API_BASE_URL = 'https://api.app.botanary.xyz';
+/** Per-instance agent identity and sessions. The signer owns all private-key storage. */
+export class AgentRuntime {
+    #store;
+    #api;
+    #apiBaseUrl;
+    #provenance;
+    #identity = null;
+    #pairing = null;
+    #session = null;
+    #identityPending = null;
+    #mintPending = null;
+    #generation = 0;
+    constructor(signer, options = {}) {
+        this.#store = signer;
+        this.#apiBaseUrl = options.baseUrl ?? DEFAULT_API_BASE_URL;
+        this.#api = options.transport ?? new AgentApiClient(this.#apiBaseUrl, options.fetch);
+        this.#provenance = options.provenance ?? {};
+    }
+    get apiBaseUrl() { return this.#apiBaseUrl; }
+    get identityMaterialized() { return this.#identity !== null || this.#identityPending !== null; }
+    setProvenance(value) { this.#provenance = value; }
+    replaceSigner(signer) {
+        if (this.identityMaterialized)
+            throw new Error('Cannot replace a materialized agent signer.');
+        this.#store = signer;
+        this.reset();
+    }
+    /** The agent's public identity, creating it on first call if none exists yet. Cached for the life of
+     *  this runtime (the address/fingerprint cannot change without a forget(), which calls reset()). */
+    async identity() {
+        if (this.#identity)
+            return this.#identity;
+        if (this.#identityPending)
+            return this.#identityPending;
+        const generation = this.#generation;
+        const pending = (async () => {
+            let value;
+            try {
+                value = await this.#store.ensure();
+            }
+            catch {
+                throw this.#signerFailure();
+            }
+            if (generation !== this.#generation)
+                throw this.#signerFailure();
+            const identity = publicIdentity(value);
+            this.#identity = identity;
+            return identity;
+        })();
+        this.#identityPending = pending;
+        try {
+            return await pending;
+        }
+        finally {
+            if (this.#identityPending === pending)
+                this.#identityPending = null;
+        }
+    }
+    #signerFailure() {
+        const error = new BotanaryApiError('The agent signer could not complete the request.', 0);
+        error.code = 'signer_error';
+        return error;
+    }
+    async #signHash(hash) {
+        hex(hash, 32);
+        const generation = this.#generation;
+        const identity = await this.identity();
+        if (generation !== this.#generation)
+            throw this.#signerFailure();
+        try {
+            const signature = await this.#store.signHash(hash);
+            hex(signature, 65);
+            const recovered = await recoverAddress({ hash, signature });
+            if (generation !== this.#generation || recovered.toLowerCase() !== identity.address.toLowerCase())
+                throw this.#signerFailure();
+            return signature;
+        }
+        catch {
+            throw this.#signerFailure();
+        }
+    }
+    async pairingCode() {
+        const pairing = await this.#ensurePairing();
+        return pairing.current();
+    }
+    async regeneratePairingCode() {
+        const pairing = await this.#ensurePairing();
+        return pairing.regenerate();
+    }
+    async pair() {
+        const code = await this.pairingCode();
+        const timestamp = Math.floor(Date.now() / 1000);
+        const identity = await this.identity();
+        const message = `${code.code}|${timestamp}`;
+        const messageHash = keccak256(toHex(message));
+        await this.#api.post('/v1/agents/pair', {
+            code: code.code,
+            publicKey: identity.publicKey,
+            timestamp,
+            signature: await this.#signHash(messageHash),
+            // Provenance travels WITH THE SIGNED PROOF, not with the owner's claim, so which tool a pairing
+            // says it is gets fixed by the connector that actually holds the key. Omitted entirely rather
+            // than sent as null when nothing was reported - the backend's DTO makes both optional, and a
+            // stored null must mean "reported nothing", never "reported the empty string".
+            ...(this.#provenance.client ? { client: this.#provenance.client } : {}),
+            ...(this.#provenance.profile ? { profile: this.#provenance.profile } : {}),
+        });
+        return code;
+    }
+    /** Mint a FRESH session unconditionally (bypasses the cache - this is what re-minting after expiry or
+     *  a 401 calls). Also (re)populates the cache, so an ordinary tool call right after this one reuses it
+     *  via `ensureSession()` instead of minting again. */
+    async mintSession() {
+        if (this.#mintPending)
+            return this.#mintPending;
+        const generation = this.#generation;
+        const pending = (async () => {
+            const identity = await this.identity();
+            const challenge = record(await this.#api.post('/v1/agents/session/nonce', { address: identity.address }));
+            hex(challenge.nonce, 32);
+            if (generation !== this.#generation)
+                throw this.#signerFailure();
+            const signature = await this.#signHash(challenge.nonce);
+            const response = record(await this.#api.post('/v1/agents/session', {
+                address: identity.address, nonce: challenge.nonce, signature,
+            }));
+            if (typeof response.token !== 'string' || !/^ags_[a-f0-9]{64}$/.test(response.token) ||
+                typeof response.expiresAt !== 'string' || !Number.isFinite(Date.parse(response.expiresAt)) ||
+                Date.parse(response.expiresAt) <= Date.now() || Date.parse(response.expiresAt) > Date.now() + 3_660_000)
+                invalidResponse();
+            if (generation !== this.#generation)
+                throw this.#signerFailure();
+            this.#session = { token: response.token, safeUntil: Date.parse(response.expiresAt) - SESSION_REFRESH_SKEW_MS };
+            return response.token;
+        })();
+        this.#mintPending = pending;
+        try {
+            return await pending;
+        }
+        finally {
+            if (this.#mintPending === pending)
+                this.#mintPending = null;
+        }
+    }
+    /** The token every read/build/spend call below actually uses: the cached session if it is still safe
+     *  to reuse, otherwise a freshly minted one. This is what makes "every tool call does not re-mint" true
+     *  without any caller having to think about session lifetime. */
+    async ensureSession() {
+        if (this.#session && this.#session.safeUntil > Date.now())
+            return this.#session.token;
+        return this.mintSession();
+    }
+    /** `GET /agents/me` - this agent's own identity, its bound account, and its live grant if any (or an
+     *  honest `grant: null`). Re-mints the session once and retries on a 401 (a token that expired between
+     *  `ensureSession()`'s check and the request landing, or one the backend otherwise no longer honors). */
+    async me() {
+        return this.#withSession((token) => this.#api.get('/v1/agents/me', token));
+    }
+    /** `GET /balance` - the account address and its token/holdings breakdown, exactly as the backend
+     *  reports it. */
+    async getBalance() {
+        return this.#withSession((token) => this.#api.get('/v1/balance', token));
+    }
+    /** `GET /agents/requests` - every approval request this agent has filed, with the owner's verdict
+     *  (`status`, `declineReason`) and deadline. The read half of `request_approval`: without it an agent
+     *  files a request it can never learn the outcome of. */
+    async listRequests() {
+        return this.#withSession((token) => this.#api.get('/v1/agents/requests', token));
+    }
+    /** `GET /chains` - every chain this build serves, each with the `chainTier` that decides what it can
+     *  do (`watch` read-only, `basic` no AgentGuard, `botanary` full authority). */
+    async listChains() {
+        return this.#withSession((token) => this.#api.get('/v1/chains', token));
+    }
+    /** `GET /gas/methods` - only the gas methods actually AVAILABLE on the given chain (the backend
+     *  filters unavailable/sponsored ones out itself). Every parameter is optional and passed through
+     *  untouched; `key` is the Stellar/Solana key-keyed lane, `chainId` the EVM numeric one. */
+    async getGasMethods(params) {
+        const query = new URLSearchParams();
+        if (params.chainId !== undefined)
+            query.set('chainId', String(params.chainId));
+        if (params.accountId)
+            query.set('accountId', params.accountId);
+        if (params.key)
+            query.set('key', params.key);
+        const suffix = query.toString();
+        return this.#withSession((token) => this.#api.get(`/v1/gas/methods${suffix ? `?${suffix}` : ''}`, token));
+    }
+    /** `GET /account` - SINGULAR: the one account this agent's session resolves to, optionally for a
+     *  specific chain. Carries `address` and `deploymentStatus`. */
+    async getAccount(params) {
+        const query = new URLSearchParams();
+        if (params.chainId !== undefined)
+            query.set('chainId', String(params.chainId));
+        const suffix = query.toString();
+        return this.#withSession((token) => this.#api.get(`/v1/account${suffix ? `?${suffix}` : ''}`, token));
+    }
+    /** Build and verify a bound action. Submission is explicit and attempted at most once per handle. */
+    async prepareExactAction(input, binding) {
+        const request = exactActionInput(input);
+        const expected = actionBinding(binding, request);
+        const generation = this.#generation;
+        const response = await this.#withSession(token => this.#api.post(`/v1/delegations/${expected.delegationId}/actions/exact`, request, token), false);
+        const built = await validateExactAction(response, request, expected);
+        let attempt;
+        return Object.freeze({ userOpHash: built.userOpHash, execution: built.execution, submit: () => {
+                if (!attempt)
+                    attempt = (async () => {
+                        if (generation !== this.#generation)
+                            throw this.#signerFailure();
+                        const token = await this.ensureSession();
+                        if (generation !== this.#generation)
+                            throw this.#signerFailure();
+                        return exactActionReceipt(await this.spendUnderGrant(built.userOp, built.userOpHash, expected.permissionId, token, 'delegated_action'), built.userOpHash);
+                    })();
+                return attempt;
+            }, reconcile: () => this.getUserOpByHash(request.chainId, built.userOpHash) });
+    }
+    /**
+     * `POST /delegations/{delegationId}/actions` - an UNSIGNED delegated-action op, built in the
+     * delegation's OWN Smart Sessions nonce lane with fixed native gas (the session validator cannot
+     * gas-estimate a stub signature). This is the ONLY build lane a session-key signature can validate:
+     * `POST /money/send/build` (this package's earlier, WRONG choice) builds in the Kernel account's ROOT
+     * nonce lane for the OWNER's key - an op built there, then signed with this agent's session key and
+     * wrapped in `spendUnderGrant`'s USE envelope, would route validation to the root ECDSA validator,
+     * which cannot parse a `(bytes1, bytes32, bytes)` envelope as a 65-byte ECDSA signature. `delegationId`
+     * is this agent's OWN grant id (`GET /agents/me`'s `grant.id` - never invented, never another agent's:
+     * the backend refuses that with a named 403, see the workspace's delegation.controller.ts). `amount` is
+     * DISPLAY units (e.g. `12.5` for 12.5 USDC), matching `DelegatedActionInput.amount` - never wei.
+     * `token`, when given, disambiguates which of the delegation's budgeted tokens to move - a contract
+     * address or CAIP-19 asset ref (Task A11), required whenever the grant budgets more than one
+     * stablecoin. Omitted, the backend defaults to it ONLY when exactly one token is budgeted; a
+     * multi-budget grant given neither refuses rather than silently picking the first (`propose_payment`
+     * always resolves and passes one - see `agent-actions.ts`).
+     */
+    async buildDelegatedAction(params) {
+        const body = {
+            recipient: params.recipient,
+            amount: params.amount,
+            ...(params.token ? { token: params.token } : {}),
+        };
+        return this.#withSession((token) => this.#api.post(`/v1/delegations/${params.delegationId}/actions`, body, token), false);
+    }
+    /**
+     * `POST /delegations/{delegationId}/actions` with `action: 'swap'` - the SAME endpoint, the same session
+     * nonce lane and the same fixed gas as `buildDelegatedAction` above; only the body's shape differs. The
+     * backend discriminates on `action` explicitly and NEVER infers it from the presence of `tokenIn`, so a
+     * transfer body with a typo stays a 422 on the wrong field rather than silently becoming a swap.
+     *
+     * Symbols, not addresses: unlike `buildDelegatedAction`'s `token` (Task A11), this shape was NOT widened
+     * to accept an address or asset ref - the backend re-resolves both legs from ITS OWN per-chain manifest,
+     * which is the same resolution `buildGrant` used when it compiled the venue's `EQ` rule, so the two
+     * cannot disagree. `propose_swap` (`agent-actions.ts`) still takes an address/asset ref from ITS OWN
+     * caller (`assetIn`/`assetOut`) and resolves each to a verified symbol before calling this - so the
+     * package-external argument names moved even though this wire shape did not. `amountIn` is DISPLAY
+     * units (e.g. `25` for 25 USDC), matching `amount` on the transfer shape.
+     *
+     * The op this produces is ONE call into `GrantExecutor.executeUnderGrantWithAllowance` - approve, route,
+     * zero, assert no residual - which the grant's session authorises only when the grant named a
+     * `swapVenue`. A grant without one has no such action at all and the backend declines
+     * `grant_swap_not_authorised` rather than handing back an op Smart Sessions would refuse in validation.
+     */
+    async buildDelegatedSwap(params) {
+        const body = {
+            action: 'swap',
+            tokenIn: params.tokenIn,
+            tokenOut: params.tokenOut,
+            amountIn: params.amountIn,
+            ...(params.maxSlippageBps != null ? { maxSlippageBps: params.maxSlippageBps } : {}),
+        };
+        return this.#withSession((token) => this.#api.post(`/v1/delegations/${params.delegationId}/actions`, body, token), false);
+    }
+    /** `POST /agents/requests` - the "ask" half of the design (Flow 7d step 5): raise a request naming the
+     *  calls that were declined and why, returning which bound was crossed and the deadline exactly as the
+     *  backend computed them. */
+    async raiseRequest(calls, reason) {
+        return this.#withSession((token) => this.#api.post('/v1/agents/requests', { calls, reason }, token), false);
+    }
+    /**
+     * Sign a built op as the grant's session key and relay it. The USE envelope is EXACTLY the three lines
+     * `botanary-fe/src/lib/wallet/signing.ts:49` already uses - `SmartSessionMode.USE` is `0x00`, and the
+     * packing is `(bytes1, bytes32, bytes)`. Reproduced rather than re-derived: a second encoding of the same
+     * envelope is a second thing to get byte-exact, and only one of them would be tested.
+     *
+     * `intentType` is the SAME value the build response itself reported (`UserOpBuildResult.intentType`,
+     * `'delegated_action'` for `buildDelegatedAction`'s builds) - never assumed or hardcoded here, so the
+     * relay always describes what was actually built, which is what `OrchestratorService.submit` uses to
+     * label the audit trail entry.
+     *
+     * Returns the backend's OWN relay response (status/txHash/error, whatever `POST /userops` actually
+     * said) rather than nothing - a caller (`propose_payment`) reporting success has to report what the
+     * backend reported, never a string this package made up.
+     */
+    async spendUnderGrant(userOp, userOpHash, permissionId, token, intentType) {
+        unsignedUserOp(userOp);
+        hex(userOpHash, 32);
+        hex(permissionId, 32);
+        const raw = await this.#signHash(userOpHash);
+        const signature = encodePacked(['bytes1', 'bytes32', 'bytes'], ['0x00', permissionId, raw]);
+        try {
+            return await this.#api.post('/v1/userops', { userOp: { ...userOp, signature }, userOpHash, intentType }, token);
+        }
+        catch (error) {
+            if (error instanceof BotanaryApiError)
+                error.userOpHash = userOpHash;
+            throw error;
+        }
+    }
+    /** `GET /userops/{opId}` - the receipt for an op THIS agent relayed. Reachable only because that route
+     *  now carries `@AgentAllowed()`; before that it 403'd an `ags_` token before the handler ran. */
+    async getUserOp(opId) {
+        resourceId(opId);
+        return this.#withSession((token) => this.#api.get(`/v1/userops/${opId}`, token));
+    }
+    /** Read the original agent submission without building or signing another operation. */
+    async getUserOpByHash(chainId, hash) {
+        if (!Number.isSafeInteger(chainId) || chainId < 1)
+            invalidResponse();
+        hex(hash, 32);
+        return exactActionReceipt(await this.#withSession(token => this.#api.get(`/v1/userops/by-hash/${chainId}/${hash}`, token)), hash);
+    }
+    /** Follow an op to a terminal status, bounded. See `awaitTerminalWith`. */
+    async awaitTerminal(opId, budgetMs) {
+        return awaitTerminalWith((id) => this.getUserOp(id), opId, budgetMs, () => Date.now(), (ms) => new Promise((r) => setTimeout(r, ms)));
+    }
+    /** `GET /apis/providers` - the ranked, searchable catalog of API providers on a chain, with each
+     *  provider's endpoint count, verified count, minimum and maximum price in atomic units (nullable).
+     *  Does NOT call an endpoint or spend anything. Returns
+     *  `{ providers, total, hidden, reasons, reasonsTruncated }`.
+     *
+     *  The route is `/apis/providers`, not the `/apis/list` this file used to call: the backend's
+     *  api-catalog controller serves `providers` and `providers/:providerId` and has no `list` route at
+     *  all, so the old path 404s. botanary-mcp@0.6.1 was published with this corrected route but the
+     *  change was never committed, which is how the repository came to describe a dead endpoint while
+     *  the published package worked. */
+    async listApis(chainId) {
+        return this.#withSession((token) => this.#api.get(`/v1/apis/providers?chainId=${chainId}`, token));
+    }
+    /** `GET /apis/providers/{providerId}` - one provider with a page of its endpoints, each with its
+     *  live price as measured or declared (nullable), and whether it is payable on this chain. Returns
+     *  the `ApiProviderDetail` shape, with an `endpoints` array. */
+    async getApiProvider(providerId, chainId) {
+        const query = chainId !== undefined ? `?chainId=${chainId}` : '';
+        return this.#withSession((token) => this.#api.get(`/v1/apis/providers/${providerId}${query}`, token));
+    }
+    /**
+     * Call a paid third-party API endpoint and pay for it from the owner's wallet, within the budget the
+     * owner committed on chain. Build -> sign -> relay, exactly like every other spending lane here.
+     *
+     * This used to `POST /v1/apis/calls`, a route that has never existed - the contract has
+     * `/apis/calls/requirements` and `/apis/calls/relay`, and there is no composite. There could not be
+     * one: a single endpoint would have to sign, and the backend holds no key. So the two halves are both
+     * real calls, with the signature produced HERE, from this agent's own key.
+     *
+     * `payload` is a 32-byte EIP-712 digest over an EIP-3009 `TransferWithAuthorization`. Signing it
+     * authorises exactly one transfer, of a value and to a recipient the digest already fixes; USDC
+     * verifies the result via ERC-1271 against the owner's account, which routes to
+     * `X402PaymentValidator` and is refused unless this agent key is inside a live budget.
+     */
+    async callApi(params) {
+        const built = await this.#withSession(token => this.#api.post('/v1/apis/calls/requirements', params, token), false);
+        resourceId(built?.requirementId);
+        if (!['ready', 'pending_approval'].includes(built.status))
+            invalidResponse();
+        return this.#finishApiRequirement(built);
+    }
+    /** Read durable submission status first. A submitted payment is never signed or forwarded again. */
+    async resumeApi(requirementId, budgetMs = APPROVAL_POLL_BUDGET_MS) {
+        resourceId(requirementId);
+        const status = apiCallStatus(await this.#withSession(token => this.#api.get(`/v1/apis/calls/relay/${requirementId}`, token)), requirementId);
+        if (status.status === 'ready')
+            return this.#finishApiRequirement({ requirementId, status: 'ready', ...readyRequirement(status.ready) }, budgetMs);
+        if (status.status !== 'pending_approval')
+            return status;
+        return this.#finishApiRequirement({ requirementId, status: 'pending_approval', approvalId: requirementId, expiresAt: '' }, budgetMs);
+    }
+    async #finishApiRequirement(built, budgetMs = APPROVAL_POLL_BUDGET_MS) {
+        let ready;
+        if (built.status === 'pending_approval') {
+            // Task 11's confirmation threshold: the digest is withheld until the owner answers. The poll
+            // route's own `'pending'` status IS the exact sentinel `awaitTerminalWith` already knows to loop
+            // past (see that function's own doc comment), so this reuses it rather than growing a second
+            // copy of the same loop `awaitTerminal` already runs for a userOp. Read as `Record<string,
+            // unknown>` through the helper (its own contract - see doc comment: "returns whatever the
+            // backend last said, VERBATIM") and cast once here, where the endpoint's real shape is known.
+            const polled = (await awaitTerminalWith((id) => this.#withSession(token => this.#api.get(`/v1/apis/calls/requirements/${id}`, token)), built.requirementId, budgetMs, () => Date.now(), (ms) => new Promise((r) => setTimeout(r, ms))));
+            if (polled.status === 'approved' &&
+                polled.payload &&
+                polled.authorization &&
+                polled.index !== undefined &&
+                polled.validator) {
+                ready = {
+                    payload: polled.payload,
+                    authorization: polled.authorization,
+                    index: polled.index,
+                    validator: polled.validator,
+                };
+            }
+            else {
+                // 'declined' and 'expired' are the backend's own terminal verdicts. A lingering 'pending' here
+                // means OUR OWN poll budget ran out while the owner still had not answered - a client-side
+                // timeout, not a server one (the backend's own requirement TTL outlives this budget on
+                // purpose - see APPROVAL_POLL_BUDGET_MS). Every branch below is a STRUCTURED decline, never a
+                // thrown error: the caller's ordinary result-handling path must see it, the same way it sees
+                // any other decline this lane reports, and none of them ever attempts a signature - there is
+                // no digest to sign for a call the owner did not approve.
+                const declineReason = polled.status === 'declined'
+                    ? 'owner_declined'
+                    : polled.status === 'expired'
+                        ? 'approval_timed_out'
+                        : 'approval_still_pending';
+                const message = declineReason === 'owner_declined'
+                    ? 'The owner declined this call. Nothing was signed and nothing was charged.'
+                    : declineReason === 'approval_timed_out'
+                        ? 'The owner did not respond before the approval window closed. Nothing was signed and ' +
+                            'nothing was charged.'
+                        : 'The owner has not answered yet. Nothing was signed or charged. Resume this requirement ' +
+                            'or ask the owner to check their pending approvals.';
+                if (!['pending', 'declined', 'expired'].includes(polled.status))
+                    invalidResponse();
+                return { status: polled.status === 'pending' ? 'pending_approval' : 'declined', declineReason, message,
+                    requirementId: built.requirementId, approvalId: built.status === 'pending_approval' ? built.approvalId : undefined };
+            }
+        }
+        else {
+            ready = built;
+        }
+        ready = readyRequirement(ready);
+        const identity = await this.identity();
+        const rawSig = await this.#signHash(ready.payload);
+        // For an ERC-7579 (Kernel) owner - the only account type this product creates - the relay
+        // signature is NOT a bare 65-byte ECDSA signature. Kernel reads sig[0] as its validator-routing
+        // byte, so posting `rawSig` directly routes to whatever r[0] happens to be, which can never
+        // verify. The envelope below is what `X402PaymentValidator.isValidSignatureWithSender` decodes at
+        // step 1, and `botanary-contracts/test/X402PaymentValidator.integration.t.sol` pins the exact byte
+        // layout. `rawSig` itself stays a signature over the RAW digest - the validator recovers against
+        // the raw digest at step 13 deliberately, so the agent signs EIP-3009 typed data the way any x402
+        // client would, and this envelope is an account-side wrapper the agent's own signature never sees
+        // (never double-wrap: `signHash` above is the only signature produced here).
+        const signature = encodePacked(['bytes1', 'address', 'bytes'], [
+            '0x01',
+            ready.validator,
+            encodeAbiParameters([
+                { type: 'address' },
+                {
+                    type: 'tuple',
+                    components: [
+                        { name: 'from', type: 'address' },
+                        { name: 'to', type: 'address' },
+                        { name: 'value', type: 'uint256' },
+                        { name: 'validAfter', type: 'uint256' },
+                        { name: 'validBefore', type: 'uint256' },
+                        { name: 'nonce', type: 'bytes32' },
+                    ],
+                },
+                { type: 'uint32' },
+                { type: 'bytes' },
+            ], [
+                identity.address,
+                {
+                    from: ready.authorization.from,
+                    to: ready.authorization.to,
+                    value: BigInt(ready.authorization.value),
+                    validAfter: BigInt(ready.authorization.validAfter),
+                    validBefore: BigInt(ready.authorization.validBefore),
+                    nonce: ready.authorization.nonce,
+                },
+                ready.index,
+                rawSig,
+            ]),
+        ]);
+        try {
+            return apiCallStatus(await this.#withSession(token => this.#api.post('/v1/apis/calls/relay', { requirementId: built.requirementId, signature }, token), false), built.requirementId);
+        }
+        catch (error) {
+            if (error instanceof BotanaryApiError)
+                error.requirementId = built.requirementId;
+            throw error;
+        }
+    }
+    /** `GET /apis/budget` - remaining authorizations, per-call maximum, expiry and epoch for this agent
+     *  on a chain. Does NOT tell you which endpoints this agent may reach. */
+    async getApiBudget(chainId) {
+        return this.#withSession((token) => this.#api.get(`/v1/apis/budget?chainId=${chainId}`, token));
+    }
+    /** Drops cached identity/pairing/session state. Call after `store.forget()` so the next call re-derives
+     *  from storage (and, in the ordinary case, creates a brand new identity) instead of continuing to serve
+     *  an in-memory identity - or a session minted for it - whose key is now gone. */
+    reset() {
+        this.#generation += 1;
+        this.#identityPending = null;
+        this.#mintPending = null;
+        this.#identity = null;
+        this.#pairing = null;
+        this.#session = null;
+    }
+    async #ensurePairing() {
+        if (!this.#pairing) {
+            const identity = await this.identity();
+            this.#pairing ??= new PairingCodeManager(identity.fingerprint);
+        }
+        return this.#pairing;
+    }
+    /** Run `fn` against a valid session token; on a 401 (the cached token expired or was revoked
+     *  server-side between calls), mint exactly one fresh session and retry once. Any other failure - a
+     *  4xx policy decline, a 5xx - is the backend's own answer and is never swallowed or retried. */
+    async #withSession(fn, retryRead = true) {
+        const token = await this.ensureSession();
+        try {
+            return await fn(token);
+        }
+        catch (e) {
+            if (retryRead && e instanceof BotanaryApiError && e.status === 401) {
+                const fresh = this.#session && this.#session.token !== token
+                    ? await this.ensureSession() : await this.mintSession();
+                return await fn(fresh);
+            }
+            throw e;
+        }
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/dist/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,mBAAmB,EAAE,kBAAkB,EAAmG,MAAM,mBAAmB,CAAC;AAC9M,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAY,MAAM,MAAM,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAoB,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAuB,MAAM,gBAAgB,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAI5I;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAuD,EACvD,IAAY,EACZ,QAAgB,EAChB,GAAiB,EACjB,KAAoC;IAEpC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAChH,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;IACtB,IAAI,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,SAAS,EAAE,kBAAkB,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,EAAE,GAAG,OAAO,GAAG,QAAQ,EAAE,CAAC;QAC1H,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD;2GAC2G;AAC3G,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC;;;;;8DAK8D;AAC9D,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C,0GAA0G;AAC1G,MAAM,CAAC,MAAM,oBAAoB,GAAG,8BAA8B,CAAC;AAEnE,yFAAyF;AACzF,MAAM,OAAO,YAAY;IACvB,MAAM,CAAc;IACX,IAAI,CAAiB;IACrB,WAAW,CAAS;IAC7B,WAAW,CAAwC;IACnD,SAAS,GAAyB,IAAI,CAAC;IACvC,QAAQ,GAA8B,IAAI,CAAC;IAC3C,QAAQ,GAAyB,IAAI,CAAC;IACtC,gBAAgB,GAAkC,IAAI,CAAC;IACvD,YAAY,GAA2B,IAAI,CAAC;IAC5C,WAAW,GAAG,CAAC,CAAC;IAEhB,YAAY,MAAmB,EAAE,UAK7B,EAAE;QACJ,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,OAAO,IAAI,oBAAoB,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACrF,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,IAAI,UAAU,KAAa,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACrD,IAAc,oBAAoB,KAAc,OAAO,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC;IACzG,aAAa,CAAC,KAA4C,IAAU,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC;IAC/F,aAAa,CAAC,MAAmB;QACzC,IAAI,IAAI,CAAC,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;wGACoG;IACpG,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,IAAI,IAAI,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC;QACxD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBAAC,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAAC,CAAC;YAClF,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;YAC1B,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;QAChC,IAAI,CAAC;YAAC,OAAO,MAAM,OAAO,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAI,IAAI,CAAC,gBAAgB,KAAK,OAAO;gBAAE,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAAC,CAAC;IAChH,CAAC;IAED,cAAc;QACZ,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,kDAAkD,EAAE,CAAC,CAAC,CAAC;QAC1F,KAAK,CAAC,IAAI,GAAG,cAAc,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAS;QACvB,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnD,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACnB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5D,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/H,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC,UAAU,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACtC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS;YACT,SAAS,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YAC5C,gGAAgG;YAChG,8FAA8F;YAC9F,6FAA6F;YAC7F,+EAA+E;YAC/E,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;0DAEsD;IACtD,KAAK,CAAC,WAAW;QACf,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC1G,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACzB,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YACjE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBACjE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS;aAC7D,CAAC,CAAC,CAAC;YACJ,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAChF,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAC1F,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAAE,eAAe,EAAE,CAAC;YAC/H,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YACjE,IAAI,CAAC,QAAQ,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,uBAAuB,EAAE,CAAC;YAC/G,OAAO,QAAQ,CAAC,KAAK,CAAC;QACxB,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;QAC5B,IAAI,CAAC;YAAC,OAAO,MAAM,OAAO,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO;gBAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAAC,CAAC;IACxG,CAAC;IAED;;qEAEiE;IACjE,KAAK,CAAC,aAAa;QACjB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtF,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAED;;6GAEyG;IACzG,KAAK,CAAC,EAAE;QACN,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAY,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IACxF,CAAC;IAED;sBACkB;IAClB,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAA0B,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;IACpG,CAAC;IAED;;6DAEyD;IACzD,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,qBAAqB,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED;oFACgF;IAChF,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;IACnF,CAAC;IAED;;gGAE4F;IAC5F,KAAK,CAAC,aAAa,CAAC,MAA8D;QAChF,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/E,IAAI,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,GAAG;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,kBAAkB,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAC9E,CAAC;IACJ,CAAC;IAED;oEACgE;IAChE,KAAK,CAAC,UAAU,CAAC,MAA4B;QAC3C,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,cAAc,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAC1E,CAAC;IACJ,CAAC;IAED,qGAAqG;IACrG,KAAK,CAAC,kBAAkB,CAAC,KAAuB,EAAE,OAA8C;QAC9F,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAC9D,mBAAmB,QAAQ,CAAC,YAAY,gBAAgB,EAAE,OAAO,EAAE,KAAK,CACzE,EAAE,KAAK,CAAC,CAAC;QACV,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrE,IAAI,OAAqD,CAAC;QAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE;gBAC5F,IAAI,CAAC,OAAO;oBAAE,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;wBAClC,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW;4BAAE,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;wBACjE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;wBACzC,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW;4BAAE,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;wBACjE,OAAO,kBAAkB,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,KAAK,EAAE,kBAAkB,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;oBAC5J,CAAC,CAAC,EAAE,CAAC;gBACL,OAAO,OAAO,CAAC;YACjB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,oBAAoB,CAAC,MAK1B;QACC,MAAM,IAAI,GAAG;YACX,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD,CAAC;QACF,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAoB,mBAAmB,MAAM,CAAC,YAAY,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,EAChG,KAAK,CACN,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAMxB;QACC,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpF,CAAC;QACF,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAoB,mBAAmB,MAAM,CAAC,YAAY,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,EAChG,KAAK,CACN,CAAC;IACJ,CAAC;IAED;;iCAE6B;IAC7B,KAAK,CAAC,YAAY,CAAC,KAAyB,EAAE,MAAc;QAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAmB,qBAAqB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EACjF,KAAK,CACN,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,eAAe,CACnB,MAAsB,EACtB,UAAe,EACf,YAAiB,EACjB,KAAa,EACb,UAAkB;QAElB,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACzB,aAAa,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,KAAK,CACnF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB;gBAAE,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;YACrE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;sGACkG;IAClG,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAA0B,eAAe,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,IAAS;QAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;YAAE,eAAe,EAAE,CAAC;QACrE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,OAAO,kBAAkB,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,uBAAuB,OAAO,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7I,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,QAAgB;QAChD,OAAO,iBAAiB,CACtB,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAC1B,IAAI,EACJ,QAAQ,EACR,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAChB,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAC9C,CAAC;IACJ,CAAC;IAED;;;;;;;;;wCASoC;IACpC,KAAK,CAAC,QAAQ,CAAC,OAAe;QAC5B,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,8BAA8B,OAAO,EAAE,EAAE,KAAK,CAAC,CACvE,CAAC;IACJ,CAAC;IAED;;oEAEgE;IAChE,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,OAAgB;QACvD,MAAM,KAAK,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,sBAAsB,UAAU,GAAG,KAAK,EAAE,EAAE,KAAK,CAAC,CAC1E,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,OAAO,CAAC,MAQb;QACC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAC3D,6BAA6B,EAAE,MAAM,EAAE,KAAK,CAC7C,EAAE,KAAK,CAAC,CAAC;QACV,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,eAAe,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,oGAAoG;IACpG,KAAK,CAAC,SAAS,CAAC,aAAqB,EAAE,QAAQ,GAAG,uBAAuB;QACvE,UAAU,CAAC,aAAa,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,wBAAwB,aAAa,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QACtJ,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAClJ,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB;YAAE,OAAO,MAAM,CAAC;QACxD,OAAO,IAAI,CAAC,qBAAqB,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IACvI,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,KAAkC,EAAE,QAAQ,GAAG,uBAAuB;QAC9F,IAAI,KAA0F,CAAC;QAC/F,IAAI,KAAK,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YACxC,6FAA6F;YAC7F,iGAAiG;YACjG,6FAA6F;YAC7F,2FAA2F;YAC3F,0FAA0F;YAC1F,8FAA8F;YAC9F,MAAM,MAAM,GAAG,CAAC,MAAM,iBAAiB,CACrC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAA0B,+BAA+B,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,EACtH,KAAK,CAAC,aAAa,EACnB,QAAQ,EACR,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAChB,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAC9C,CAMA,CAAC;YAEF,IACE,MAAM,CAAC,MAAM,KAAK,UAAU;gBAC5B,MAAM,CAAC,OAAO;gBACd,MAAM,CAAC,aAAa;gBACpB,MAAM,CAAC,KAAK,KAAK,SAAS;gBAC1B,MAAM,CAAC,SAAS,EAChB,CAAC;gBACD,KAAK,GAAG;oBACN,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,+FAA+F;gBAC/F,2FAA2F;gBAC3F,uFAAuF;gBACvF,8FAA8F;gBAC9F,6FAA6F;gBAC7F,6FAA6F;gBAC7F,0DAA0D;gBAC1D,MAAM,aAAa,GACjB,MAAM,CAAC,MAAM,KAAK,UAAU;oBAC1B,CAAC,CAAC,gBAAgB;oBAClB,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;wBAC3B,CAAC,CAAC,oBAAoB;wBACtB,CAAC,CAAC,wBAAwB,CAAC;gBACjC,MAAM,OAAO,GACX,aAAa,KAAK,gBAAgB;oBAChC,CAAC,CAAC,2EAA2E;oBAC7E,CAAC,CAAC,aAAa,KAAK,oBAAoB;wBACtC,CAAC,CAAC,sFAAsF;4BACtF,sBAAsB;wBACxB,CAAC,CAAC,yFAAyF;4BACzF,oDAAoD,CAAC;gBAC7D,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;oBAAE,eAAe,EAAE,CAAC;gBACnF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO;oBACpG,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACzH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;QAED,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnD,0FAA0F;QAC1F,gGAAgG;QAChG,4FAA4F;QAC5F,kGAAkG;QAClG,mGAAmG;QACnG,iGAAiG;QACjG,kGAAkG;QAClG,kGAAkG;QAClG,6EAA6E;QAC7E,MAAM,SAAS,GAAG,YAAY,CAC5B,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,EAC9B;YACE,MAAM;YACN,KAAK,CAAC,SAAS;YACf,mBAAmB,CACjB;gBACE,EAAE,IAAI,EAAE,SAAS,EAAE;gBACnB;oBACE,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE;wBACV,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;wBACjC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;wBAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;wBAClC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;wBACvC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;wBACxC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;qBACnC;iBACF;gBACD,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAClB,EAAE,IAAI,EAAE,OAAO,EAAE;aAClB,EACD;gBACE,QAAQ,CAAC,OAAO;gBAChB;oBACE,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI;oBAC9B,EAAE,EAAE,KAAK,CAAC,aAAa,CAAC,EAAE;oBAC1B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC;oBACxC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC;oBAClD,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC;oBACpD,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK;iBACjC;gBACD,KAAK,CAAC,KAAK;gBACX,MAAM;aACP,CACF;SACF,CACF,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,aAAa,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAClE,sBAAsB,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,KAAK,CACjF,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB;gBAAE,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;YACjF,MAAM,KAAK,CAAC;QACd,CAAC;IACL,CAAC;IAED;8EAC0E;IAC1E,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,2BAA2B,OAAO,EAAE,EAAE,KAAK,CAAC,CACpE,CAAC;IACJ,CAAC;IAED;;sFAEkF;IAClF,KAAK;QACH,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;qGAEiG;IACjG,KAAK,CAAC,YAAY,CAAI,EAAiC,EAAE,SAAS,GAAG,IAAI;QACvE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,SAAS,IAAI,CAAC,YAAY,gBAAgB,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,KAAK;oBAC1D,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC1D,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;CACF"}

package/dist/signer.d.ts

@@ -0,0 +1,33 @@
+import type { Hex } from 'viem';
+/** Public metadata only. The runtime never accepts or exports a private key. */
+export interface AgentIdentity {
+    address: Hex;
+    publicKey: Hex;
+    fingerprint: string;
+    createdAt: string;
+    /** A non-secret description of the injected signer, such as an HSM or desktop keychain. */
+    backend: string;
+}
+/** A server, HSM or desktop adapter supplies signing without exposing key material. */
+export interface AgentSigner {
+    ensure(): Promise<AgentIdentity>;
+    /** EIP-191 personal message signing, used for app registration proofs. */
+    sign(message: string): Promise<Hex>;
+    /** Raw secp256k1 digest signing, used by existing agent sessions and grant execution. */
+    signHash(hash: Hex): Promise<Hex>;
+}
+/** Adapts an already-owned viem-compatible account. Key loading remains the caller's responsibility. */
+export declare function createViemAgentSigner(account: {
+    address: Hex;
+    publicKey: Hex;
+    signMessage(input: {
+        message: string;
+    }): Promise<Hex>;
+    sign(input: {
+        hash: Hex;
+    }): Promise<Hex>;
+}, options?: {
+    backend?: string;
+    createdAt?: string;
+}): AgentSigner;
+//# sourceMappingURL=signer.d.ts.map

package/dist/signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAGhC,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,GAAG,CAAC;IACb,SAAS,EAAE,GAAG,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,2FAA2F;IAC3F,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,MAAM,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IACjC,0EAA0E;IAC1E,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,yFAAyF;IACzF,QAAQ,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CACnC;AAED,wGAAwG;AACxG,wBAAgB,qBAAqB,CAAC,OAAO,EAAE;IAC7C,OAAO,EAAE,GAAG,CAAC;IACb,SAAS,EAAE,GAAG,CAAC;IACf,WAAW,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,GAAG,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CAC1C,EAAE,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,WAAW,CAStE"}

package/dist/signer.js

@@ -0,0 +1,13 @@
+import { deriveFingerprint } from './fingerprint.js';
+/** Adapts an already-owned viem-compatible account. Key loading remains the caller's responsibility. */
+export function createViemAgentSigner(account, options = {}) {
+    const identity = { address: account.address, publicKey: account.publicKey,
+        fingerprint: deriveFingerprint(account.address), backend: options.backend ?? 'injected',
+        createdAt: options.createdAt ?? new Date().toISOString() };
+    return {
+        ensure: async () => ({ ...identity }),
+        sign: message => account.signMessage({ message }),
+        signHash: hash => account.sign({ hash }),
+    };
+}
+//# sourceMappingURL=signer.js.map