@curless/agentbank-sdk 0.0.1

package/README.md

@@ -0,0 +1,61 @@
+# @curless/agentbank-sdk
+
+Official SDK for **agentbank** — agent-commerce payments. Wraps the
+agentbank API: agent OAuth, agent/customer management, and the Pay
+spend-control plane.
+
+```bash
+npm install @curless/agentbank-sdk
+```
+
+## Quick start
+
+### Admin (manage agents, fund, approve)
+
+```ts
+import { Agentbank } from '@curless/agentbank-sdk';
+
+const ab = new Agentbank({
+  baseUrl: 'https://api.agentbank.example',
+  apiKey: 'agb_admin_...', // an agentbank:admin / pay:admin key
+});
+
+// 1. create an agent + a spend policy
+const agent = await ab.agents.create({
+  name: 'procurement-bot',
+  spendPolicy: { perTransactionLimit: 50_00, dailyLimit: 500_00, approvalRequiredAbove: 100_00 },
+});
+
+// 2. fund it (after an org deposit), and issue it a client credential
+await ab.pay.deposit({ amount: 1000_00, currency: 'USD' });
+await ab.pay.fundAgent(agent.id, { amount: 500_00, currency: 'USD' });
+const cred = await ab.agents.issueCredential(agent.id); // cred.secret shown once
+```
+
+### Agent (spend, with auto-managed token)
+
+```ts
+// Exchanges the credential for short-lived tokens; auto-refreshes.
+const agentClient = Agentbank.withClientCredentials({
+  baseUrl: 'https://api.agentbank.example',
+  clientSecret: cred.secret, // the agb_… issued above
+});
+
+const auth = await agentClient.pay.authorize({
+  agentId: agent.id,
+  merchantRef: 'acme.example',
+  amount: 12_00, // minor units
+  idempotencyKey: 'order-123',
+});
+// auth.status: 'authorized' | 'pending_approval' | 'denied'
+if (auth.status === 'authorized') {
+  await agentClient.pay.capture(auth.id);
+}
+```
+
+## Notes
+
+- **Amounts** are minor-unit integers (USD = cents).
+- **Errors** throw `AgentbankError` with `.status` + `.code`.
+- ESM-only; Node ≥ 18 (uses global `fetch`).
+- Pass `fetch` in the constructor to inject a custom implementation (tests, proxies).

package/dist/client.d.ts

@@ -0,0 +1,36 @@
+import { AgentsResource } from './resources/agents.js';
+import { OAuthResource } from './resources/oauth.js';
+import { PayResource } from './resources/pay.js';
+export type FetchLike = typeof fetch;
+export type RequestOptions = {
+    query?: Record<string, string | number | undefined>;
+    body?: unknown;
+    idempotencyKey?: string;
+    skipAuth?: boolean;
+};
+export type AgentbankOptions = {
+    baseUrl: string;
+    apiKey?: string;
+    accessToken?: string;
+    fetch?: FetchLike;
+};
+export declare class Agentbank {
+    readonly baseUrl: string;
+    private readonly fetchImpl;
+    private readonly staticToken;
+    private tokenProvider;
+    readonly oauth: OAuthResource;
+    readonly agents: AgentsResource;
+    readonly pay: PayResource;
+    constructor(opts: AgentbankOptions);
+    static withClientCredentials(opts: {
+        baseUrl: string;
+        clientSecret: string;
+        scope?: string;
+        fetch?: FetchLike;
+    }): Agentbank;
+    private resolveToken;
+    /** @internal */
+    request<T>(method: string, path: string, opts?: RequestOptions, retried?: boolean): Promise<T>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAErC,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAGhB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB,CAAC;AAMF,qBAAa,SAAS;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD,OAAO,CAAC,aAAa,CAA4B;IAEjD,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;gBAEd,IAAI,EAAE,gBAAgB;IAalC,MAAM,CAAC,qBAAqB,CAAC,IAAI,EAAE;QACjC,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,SAAS,CAAC;KACnB,GAAG,SAAS;YAaC,YAAY;IAK1B,gBAAgB;IACV,OAAO,CAAC,CAAC,EACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,cAAmB,EACzB,OAAO,UAAQ,GACd,OAAO,CAAC,CAAC,CAAC;CAiCd"}

package/dist/client.js

@@ -0,0 +1,94 @@
+import { AgentbankError } from './errors.js';
+import { AgentsResource } from './resources/agents.js';
+import { OAuthResource } from './resources/oauth.js';
+import { PayResource } from './resources/pay.js';
+// agentbank API client. Wraps the HTTP surface with typed resources,
+// bearer auth, idempotency, and typed errors.
+export class Agentbank {
+    baseUrl;
+    fetchImpl;
+    staticToken;
+    tokenProvider;
+    oauth;
+    agents;
+    pay;
+    constructor(opts) {
+        this.baseUrl = opts.baseUrl.replace(/\/+$/, '');
+        this.fetchImpl = opts.fetch ?? fetch;
+        this.staticToken = opts.accessToken ?? opts.apiKey;
+        this.oauth = new OAuthResource(this);
+        this.agents = new AgentsResource(this);
+        this.pay = new PayResource(this);
+    }
+    // Build a client that auto-mints + caches + refreshes an agent access
+    // token from a client credential (the agb_… secret issued to an agent).
+    // Tokens are fetched lazily, reused until ~30s before expiry, and
+    // force-refreshed once on a 401.
+    static withClientCredentials(opts) {
+        const client = new Agentbank({ baseUrl: opts.baseUrl, fetch: opts.fetch });
+        let cached;
+        client.tokenProvider = async (forceRefresh) => {
+            const now = Math.floor(Date.now() / 1000);
+            if (!forceRefresh && cached && cached.exp - now > 30)
+                return cached.token;
+            const t = await client.oauth.token({ clientSecret: opts.clientSecret, scope: opts.scope });
+            cached = { token: t.access_token, exp: now + t.expires_in };
+            return cached.token;
+        };
+        return client;
+    }
+    async resolveToken(forceRefresh) {
+        if (this.tokenProvider)
+            return this.tokenProvider(forceRefresh);
+        return this.staticToken;
+    }
+    /** @internal */
+    async request(method, path, opts = {}, retried = false) {
+        const url = new URL(`${this.baseUrl}${path}`);
+        if (opts.query) {
+            for (const [k, v] of Object.entries(opts.query)) {
+                if (v !== undefined)
+                    url.searchParams.set(k, String(v));
+            }
+        }
+        const headers = { 'content-type': 'application/json' };
+        if (!opts.skipAuth) {
+            const token = await this.resolveToken(false);
+            if (token)
+                headers.authorization = `Bearer ${token}`;
+        }
+        if (opts.idempotencyKey)
+            headers['idempotency-key'] = opts.idempotencyKey;
+        const res = await this.fetchImpl(url.toString(), {
+            method,
+            headers,
+            body: opts.body === undefined ? undefined : JSON.stringify(opts.body),
+        });
+        // Auth token expired/revoked mid-flight → refresh once and retry.
+        if (res.status === 401 && this.tokenProvider && !opts.skipAuth && !retried) {
+            await this.tokenProvider(true);
+            return this.request(method, path, opts, true);
+        }
+        const text = await res.text();
+        const json = text ? JSON.parse(text) : undefined;
+        if (!res.ok)
+            throw toError(res.status, json);
+        return json;
+    }
+}
+// Map both agentbank's `{ error: { code, message, details } }` and the
+// OAuth `{ error, error_description }` shapes to AgentbankError.
+const toError = (status, json) => {
+    if (json && typeof json === 'object') {
+        const o = json;
+        if (o.error && typeof o.error === 'object') {
+            const e = o.error;
+            return new AgentbankError(status, String(e.code ?? 'error'), String(e.message ?? 'request failed'), e.details);
+        }
+        if (typeof o.error === 'string') {
+            return new AgentbankError(status, o.error, String(o.error_description ?? o.error));
+        }
+    }
+    return new AgentbankError(status, 'error', `request failed with status ${status}`);
+};
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAwBjD,qEAAqE;AACrE,8CAA8C;AAC9C,MAAM,OAAO,SAAS;IACX,OAAO,CAAS;IACR,SAAS,CAAY;IACrB,WAAW,CAAqB;IACzC,aAAa,CAA4B;IAExC,KAAK,CAAgB;IACrB,MAAM,CAAiB;IACvB,GAAG,CAAc;IAE1B,YAAY,IAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC;QACnD,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,kEAAkE;IAClE,iCAAiC;IACjC,MAAM,CAAC,qBAAqB,CAAC,IAK5B;QACC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3E,IAAI,MAAkD,CAAC;QACvD,MAAM,CAAC,aAAa,GAAG,KAAK,EAAE,YAAY,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,YAAY,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,GAAG,GAAG,GAAG,EAAE;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC;YAC1E,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3F,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC;YAC5D,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,YAAqB;QAC9C,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,gBAAgB;IAChB,KAAK,CAAC,OAAO,CACX,MAAc,EACd,IAAY,EACZ,OAAuB,EAAE,EACzB,OAAO,GAAG,KAAK;QAEf,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,KAAK,SAAS;oBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,KAAK;gBAAE,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;QAE1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YAC/C,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;SACtE,CAAC,CAAC;QAEH,kEAAkE;QAClE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3E,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9D,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7C,OAAO,IAAS,CAAC;IACnB,CAAC;CACF;AAED,uEAAuE;AACvE,iEAAiE;AACjE,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,IAAa,EAAkB,EAAE;IAChE,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAgC,CAAC;YAC7C,OAAO,IAAI,cAAc,CACvB,MAAM,EACN,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,EACzB,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,gBAAgB,CAAC,EACrC,CAAC,CAAC,OAAO,CACV,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,8BAA8B,MAAM,EAAE,CAAC,CAAC;AACrF,CAAC,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,7 @@
+export declare class AgentbankError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly details?: unknown;
+    constructor(status: number, code: string, message: string, details?: unknown);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAGA,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBAEf,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO;CAO7E"}

package/dist/errors.js

@@ -0,0 +1,16 @@
+// Thrown for any non-2xx agentbank response. `code` is the agentbank
+// error code (e.g. CONFLICT, FORBIDDEN) or the OAuth error code
+// (e.g. invalid_client); `status` is the HTTP status.
+export class AgentbankError extends Error {
+    status;
+    code;
+    details;
+    constructor(status, code, message, details) {
+        super(message);
+        this.name = 'AgentbankError';
+        this.status = status;
+        this.code = code;
+        this.details = details;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,gEAAgE;AAChE,sDAAsD;AACtD,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,MAAM,CAAS;IACf,IAAI,CAAS;IACb,OAAO,CAAW;IAE3B,YAAY,MAAc,EAAE,IAAY,EAAE,OAAe,EAAE,OAAiB;QAC1E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { Agentbank } from './client.js';
+export type { AgentbankOptions, FetchLike, RequestOptions } from './client.js';
+export { AgentbankError } from './errors.js';
+export type { CreateAgentInput, UpdateAgentInput, AgentCredentialScope, } from './resources/agents.js';
+export type { AuthorizeSpendInput } from './resources/pay.js';
+export type { Agent, AgentCredential, AgentCredentialSummary, AgentStatus, Paginated, SpendAuthorization, SpendAuthorizationStatus, SpendPolicy, TokenResponse, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,YAAY,EACV,KAAK,EACL,eAAe,EACf,sBAAsB,EACtB,WAAW,EACX,SAAS,EACT,kBAAkB,EAClB,wBAAwB,EACxB,WAAW,EACX,aAAa,GACd,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { Agentbank } from './client.js';
+export { AgentbankError } from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/dist/resources/agents.d.ts

@@ -0,0 +1,38 @@
+import type { Agentbank } from '../client.js';
+import type { Agent, AgentCredential, AgentCredentialSummary, AgentStatus, Paginated, SpendPolicy } from '../types.js';
+export type CreateAgentInput = {
+    name: string;
+    description?: string;
+    defaultCurrency?: string;
+    spendPolicy?: SpendPolicy;
+};
+export type UpdateAgentInput = {
+    name?: string;
+    description?: string;
+    status?: AgentStatus;
+    defaultCurrency?: string;
+    spendPolicy?: SpendPolicy;
+};
+export type AgentCredentialScope = 'agent:spend' | 'agent:execute';
+export declare class AgentsResource {
+    private readonly client;
+    constructor(client: Agentbank);
+    create(input: CreateAgentInput): Promise<Agent>;
+    list(params?: {
+        limit?: number;
+        offset?: number;
+    }): Promise<Paginated<Agent>>;
+    get(agentId: string): Promise<Agent>;
+    update(agentId: string, patch: UpdateAgentInput): Promise<Agent>;
+    issueCredential(agentId: string, opts?: {
+        name?: string;
+        scopes?: AgentCredentialScope[];
+    }): Promise<AgentCredential>;
+    listCredentials(agentId: string): Promise<{
+        data: AgentCredentialSummary[];
+    }>;
+    revokeCredential(agentId: string, keyId: string): Promise<{
+        revoked: string;
+    }>;
+}
+//# sourceMappingURL=agents.d.ts.map

package/dist/resources/agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/resources/agents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EACV,KAAK,EACL,eAAe,EACf,sBAAsB,EACtB,WAAW,EACX,SAAS,EACT,WAAW,EACZ,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG,eAAe,CAAC;AAGnE,qBAAa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,SAAS;IAE9C,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC;IAI/C,IAAI,CAAC,MAAM,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAIjF,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAIpC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC;IAShE,eAAe,CACb,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAA;KAAO,GAC5D,OAAO,CAAC,eAAe,CAAC;IAQ3B,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,sBAAsB,EAAE,CAAA;KAAE,CAAC;IAO7E,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAM/E"}

package/dist/resources/agents.js

@@ -0,0 +1,34 @@
+// Agent / customer management (requires an agentbank:admin credential).
+export class AgentsResource {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    create(input) {
+        return this.client.request('POST', '/v1/agents', { body: input });
+    }
+    list(params = {}) {
+        return this.client.request('GET', '/v1/agents', { query: params });
+    }
+    get(agentId) {
+        return this.client.request('GET', `/v1/agents/${encodeURIComponent(agentId)}`);
+    }
+    update(agentId, patch) {
+        return this.client.request('PATCH', `/v1/agents/${encodeURIComponent(agentId)}`, {
+            body: patch,
+        });
+    }
+    // Issue an OAuth client credential bound to this agent. The plaintext
+    // `secret` is returned only once — store it; exchange it for tokens via
+    // Agentbank.withClientCredentials({ clientSecret }).
+    issueCredential(agentId, opts = {}) {
+        return this.client.request('POST', `/v1/agents/${encodeURIComponent(agentId)}/credentials`, { body: opts });
+    }
+    listCredentials(agentId) {
+        return this.client.request('GET', `/v1/agents/${encodeURIComponent(agentId)}/credentials`);
+    }
+    revokeCredential(agentId, keyId) {
+        return this.client.request('DELETE', `/v1/agents/${encodeURIComponent(agentId)}/credentials/${encodeURIComponent(keyId)}`);
+    }
+}
+//# sourceMappingURL=agents.js.map

package/dist/resources/agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/resources/agents.ts"],"names":[],"mappings":"AA2BA,wEAAwE;AACxE,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,MAAiB;QAAjB,WAAM,GAAN,MAAM,CAAW;IAAG,CAAC;IAElD,MAAM,CAAC,KAAuB;QAC5B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAQ,MAAM,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC,SAA8C,EAAE;QACnD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAmB,KAAK,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAQ,KAAK,EAAE,cAAc,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,CAAC,OAAe,EAAE,KAAuB;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAQ,OAAO,EAAE,cAAc,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE;YACtF,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,qDAAqD;IACrD,eAAe,CACb,OAAe,EACf,OAA2D,EAAE;QAE7D,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,MAAM,EACN,cAAc,kBAAkB,CAAC,OAAO,CAAC,cAAc,EACvD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,OAAe;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,KAAK,EACL,cAAc,kBAAkB,CAAC,OAAO,CAAC,cAAc,CACxD,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,OAAe,EAAE,KAAa;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,QAAQ,EACR,cAAc,kBAAkB,CAAC,OAAO,CAAC,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;CACF"}

package/dist/resources/oauth.d.ts

@@ -0,0 +1,12 @@
+import type { Agentbank } from '../client.js';
+import type { TokenResponse } from '../types.js';
+export declare class OAuthResource {
+    private readonly client;
+    constructor(client: Agentbank);
+    token(opts: {
+        clientSecret: string;
+        scope?: string;
+    }): Promise<TokenResponse>;
+    revoke(token: string): Promise<void>;
+}
+//# sourceMappingURL=oauth.d.ts.map

package/dist/resources/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/resources/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,SAAS;IAK9C,KAAK,CAAC,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IAYvE,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAM3C"}

package/dist/resources/oauth.js

@@ -0,0 +1,27 @@
+export class OAuthResource {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    // Exchange an agent client credential (agb_… secret) for a short-lived
+    // access token (client-credentials grant). `skipAuth` because this IS
+    // the auth endpoint — it must not attach a bearer token.
+    token(opts) {
+        return this.client.request('POST', '/oauth/token', {
+            skipAuth: true,
+            body: {
+                grant_type: 'client_credentials',
+                client_secret: opts.clientSecret,
+                ...(opts.scope ? { scope: opts.scope } : {}),
+            },
+        });
+    }
+    // Revoke a token (agb_ client credential or an agent JWT). Always 200.
+    async revoke(token) {
+        await this.client.request('POST', '/oauth/revoke', {
+            skipAuth: true,
+            body: { token },
+        });
+    }
+}
+//# sourceMappingURL=oauth.js.map

package/dist/resources/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/resources/oauth.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,MAAiB;QAAjB,WAAM,GAAN,MAAM,CAAW;IAAG,CAAC;IAElD,uEAAuE;IACvE,sEAAsE;IACtE,yDAAyD;IACzD,KAAK,CAAC,IAA8C;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAgB,MAAM,EAAE,cAAc,EAAE;YAChE,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE;gBACJ,UAAU,EAAE,oBAAoB;gBAChC,aAAa,EAAE,IAAI,CAAC,YAAY;gBAChC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7C;SACF,CAAC,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAU,MAAM,EAAE,eAAe,EAAE;YAC1D,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,EAAE,KAAK,EAAE;SAChB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/resources/pay.d.ts

@@ -0,0 +1,45 @@
+import type { Agentbank } from '../client.js';
+import type { Paginated, SpendAuthorization, SpendAuthorizationStatus } from '../types.js';
+export type AuthorizeSpendInput = {
+    agentId: string;
+    merchantRef: string;
+    amount: number;
+    mcc?: string;
+    currency?: string;
+    protocol?: 'acp' | 'x402' | 'vcc' | 'direct';
+    expiresInSeconds?: number;
+    idempotencyKey?: string;
+};
+export declare class PayResource {
+    private readonly client;
+    constructor(client: Agentbank);
+    authorize(input: AuthorizeSpendInput): Promise<SpendAuthorization>;
+    list(params?: {
+        status?: SpendAuthorizationStatus;
+        agentId?: string;
+        limit?: number;
+        offset?: number;
+    }): Promise<Paginated<SpendAuthorization>>;
+    get(authId: string): Promise<SpendAuthorization>;
+    capture(authId: string, opts?: {
+        amount?: number;
+    }): Promise<SpendAuthorization>;
+    release(authId: string): Promise<SpendAuthorization>;
+    approve(authId: string): Promise<SpendAuthorization>;
+    deny(authId: string, opts?: {
+        reason?: string;
+    }): Promise<SpendAuthorization>;
+    deposit(opts: {
+        amount: number;
+        currency?: string;
+    }): Promise<{
+        ok: boolean;
+    }>;
+    fundAgent(agentId: string, opts: {
+        amount: number;
+        currency?: string;
+    }): Promise<{
+        ok: boolean;
+    }>;
+}
+//# sourceMappingURL=pay.d.ts.map

package/dist/resources/pay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pay.d.ts","sourceRoot":"","sources":["../../src/resources/pay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE3F,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAKF,qBAAa,WAAW;IACV,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,SAAS;IAE9C,SAAS,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQlE,IAAI,CACF,MAAM,GAAE;QACN,MAAM,CAAC,EAAE,wBAAwB,CAAC;QAClC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACZ,GACL,OAAO,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAMzC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAOhD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQpF,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQpD,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQpD,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IASjF,OAAO,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC;IAK9E,SAAS,CACP,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1C,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC;CAO5B"}

package/dist/resources/pay.js

@@ -0,0 +1,45 @@
+// Pay-side spend control plane. `authorize`/`capture`/`release` need an
+// agent:spend credential; `approve`/`deny`/`deposit`/`fundAgent` need
+// pay:admin.
+export class PayResource {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    authorize(input) {
+        const { idempotencyKey, ...body } = input;
+        return this.client.request('POST', '/v1/pay/authorizations', {
+            body,
+            idempotencyKey,
+        });
+    }
+    list(params = {}) {
+        return this.client.request('GET', '/v1/pay/authorizations', {
+            query: params,
+        });
+    }
+    get(authId) {
+        return this.client.request('GET', `/v1/pay/authorizations/${encodeURIComponent(authId)}`);
+    }
+    capture(authId, opts = {}) {
+        return this.client.request('POST', `/v1/pay/authorizations/${encodeURIComponent(authId)}/capture`, { body: opts });
+    }
+    release(authId) {
+        return this.client.request('POST', `/v1/pay/authorizations/${encodeURIComponent(authId)}/release`, { body: {} });
+    }
+    approve(authId) {
+        return this.client.request('POST', `/v1/pay/authorizations/${encodeURIComponent(authId)}/approve`, { body: {} });
+    }
+    deny(authId, opts = {}) {
+        return this.client.request('POST', `/v1/pay/authorizations/${encodeURIComponent(authId)}/deny`, { body: opts });
+    }
+    // Record an enterprise deposit into the org's funded balance (admin).
+    deposit(opts) {
+        return this.client.request('POST', '/v1/pay/deposits', { body: opts });
+    }
+    // Allocate budget from org funding to an agent (admin).
+    fundAgent(agentId, opts) {
+        return this.client.request('POST', `/v1/pay/agents/${encodeURIComponent(agentId)}/funding`, { body: opts });
+    }
+}
+//# sourceMappingURL=pay.js.map

package/dist/resources/pay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pay.js","sourceRoot":"","sources":["../../src/resources/pay.ts"],"names":[],"mappings":"AAeA,wEAAwE;AACxE,sEAAsE;AACtE,aAAa;AACb,MAAM,OAAO,WAAW;IACO;IAA7B,YAA6B,MAAiB;QAAjB,WAAM,GAAN,MAAM,CAAW;IAAG,CAAC;IAElD,SAAS,CAAC,KAA0B;QAClC,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAqB,MAAM,EAAE,wBAAwB,EAAE;YAC/E,IAAI;YACJ,cAAc;SACf,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CACF,SAKI,EAAE;QAEN,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAgC,KAAK,EAAE,wBAAwB,EAAE;YACzF,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,MAAc;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,KAAK,EACL,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,EAAE,CACvD,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,MAAc,EAAE,OAA4B,EAAE;QACpD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,MAAM,EACN,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,UAAU,EAC9D,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,MAAM,EACN,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,UAAU,EAC9D,EAAE,IAAI,EAAE,EAAE,EAAE,CACb,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,MAAM,EACN,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,UAAU,EAC9D,EAAE,IAAI,EAAE,EAAE,EAAE,CACb,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAc,EAAE,OAA4B,EAAE;QACjD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,MAAM,EACN,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAC3D,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,OAAO,CAAC,IAA2C;QACjD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAkB,MAAM,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,wDAAwD;IACxD,SAAS,CACP,OAAe,EACf,IAA2C;QAE3C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,MAAM,EACN,kBAAkB,kBAAkB,CAAC,OAAO,CAAC,UAAU,EACvD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,64 @@
+export type AgentStatus = 'active' | 'paused' | 'revoked';
+export type SpendPolicy = {
+    perTransactionLimit?: number;
+    dailyLimit?: number;
+    monthlyLimit?: number;
+    approvalRequiredAbove?: number;
+    mccAllowlist?: string[];
+    merchantAllowlist?: string[];
+};
+export type Agent = {
+    id: string;
+    name: string;
+    description?: string | null;
+    status: AgentStatus;
+    defaultCurrency: string;
+    spendPolicy: SpendPolicy;
+    createdAt: string;
+    updatedAt: string;
+};
+export type AgentCredential = {
+    id: string;
+    agentId: string;
+    scopes: string[];
+    secret: string;
+};
+export type AgentCredentialSummary = {
+    id: string;
+    name: string;
+    prefix: string;
+    scopes: string[];
+    createdAt: string;
+    revokedAt: string | null;
+};
+export type SpendAuthorizationStatus = 'pending_approval' | 'authorized' | 'captured' | 'released' | 'denied' | 'expired';
+export type SpendAuthorization = {
+    id: string;
+    organizationId: string;
+    agentId: string;
+    merchantRef: string;
+    mcc?: string | null;
+    amount: number;
+    currency: string;
+    protocol: string;
+    status: SpendAuthorizationStatus;
+    reason?: string | null;
+    capturedAmount?: number | null;
+    expiresAt?: string | null;
+    createdAt: string;
+};
+export type Paginated<T> = {
+    data: T[];
+    pagination: {
+        limit: number;
+        offset: number;
+        count: number;
+    };
+};
+export type TokenResponse = {
+    access_token: string;
+    token_type: string;
+    expires_in: number;
+    scope: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1D,MAAM,MAAM,WAAW,GAAG;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,KAAK,GAAG;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,WAAW,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAGF,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAChC,kBAAkB,GAClB,YAAY,GACZ,UAAU,GACV,UAAU,GACV,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,wBAAwB,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI;IACzB,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@curless/agentbank-sdk",
+  "version": "0.0.1",
+  "description": "Official SDK for agentbank — agent-commerce payments: OAuth, agent management, and the Pay spend-control plane.",
+  "license": "MIT",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": ["dist", "README.md"],
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "clean": "rm -rf dist",
+    "prepublishOnly": "npm run build"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.1",
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.9"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": ["agentbank", "curless", "agent", "payments", "sdk", "oauth", "pay"]
+}