@deeprelay/mcp 0.0.1 → 0.1.0

package/dist/tools/write/index.js

@@ -0,0 +1,159 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeTools = exports.WEBHOOK_EVENT_TYPES = exports.spendingLimitUpdateTool = exports.spendingLimitClearTool = exports.paymentLinkTools = exports.WriteNothingToDo = exports.WRITE_TIER_SENTENCE = exports.defineWriteTool = exports.CONFIRMATION_TOKEN_SHAPE = void 0;
+// The write tier (Phase 104, D-02/D-03/D-09/D-10). Authored fresh (D-12).
+//
+// Eight mutations, none of which charges the account, and every one of which
+// confirms once. Each is built with defineWriteTool (define.ts), which wraps
+// the tool in withWriteConfirmation and puts elicitation in front of that same
+// handshake, so no write can be registered without its confirmation.
+//
+//   deeprelay_webhooks_create         — returns the signing secret ONCE
+//   deeprelay_webhooks_delete         — destructive; the secret is gone for good
+//   deeprelay_videos_cancel           — destructive; releases the session's
+//                                       video reservation (D-02/D-07)
+//   deeprelay_spending_limit_update   — lower-only (spending-limit.ts)
+//   deeprelay_spending_limit_clear    — destructive; removes the limit entirely,
+//                                       "nothing to clear" is not an error
+//                                       (spending-limit.ts, Plan 104-12)
+//   deeprelay_subscription_checkout   — link only (payment-links.ts, D-09)
+//   deeprelay_billing_portal          — link only (payment-links.ts, D-09)
+//   deeprelay_deposits_create_crypto  — link only, off at boot (payment-links.ts, D-03)
+const sdk_1 = require("@deeprelay/sdk");
+const zod_1 = require("zod");
+const video_reads_js_1 = require("../readonly/video-reads.js");
+const define_js_1 = require("./define.js");
+const payment_links_js_1 = require("./payment-links.js");
+const spending_limit_js_1 = require("./spending-limit.js");
+var define_js_2 = require("./define.js");
+Object.defineProperty(exports, "CONFIRMATION_TOKEN_SHAPE", { enumerable: true, get: function () { return define_js_2.CONFIRMATION_TOKEN_SHAPE; } });
+Object.defineProperty(exports, "defineWriteTool", { enumerable: true, get: function () { return define_js_2.defineWriteTool; } });
+Object.defineProperty(exports, "WRITE_TIER_SENTENCE", { enumerable: true, get: function () { return define_js_2.WRITE_TIER_SENTENCE; } });
+Object.defineProperty(exports, "WriteNothingToDo", { enumerable: true, get: function () { return define_js_2.WriteNothingToDo; } });
+var payment_links_js_2 = require("./payment-links.js");
+Object.defineProperty(exports, "paymentLinkTools", { enumerable: true, get: function () { return payment_links_js_2.paymentLinkTools; } });
+var spending_limit_js_2 = require("./spending-limit.js");
+Object.defineProperty(exports, "spendingLimitClearTool", { enumerable: true, get: function () { return spending_limit_js_2.spendingLimitClearTool; } });
+Object.defineProperty(exports, "spendingLimitUpdateTool", { enumerable: true, get: function () { return spending_limit_js_2.spendingLimitUpdateTool; } });
+/**
+ * The webhook events an agent may subscribe to. The API also accepts
+ * instance.* events, but those belong to the unpublished GPU-instance surface
+ * (Phase 101 D-04) and are not offered here.
+ */
+exports.WEBHOOK_EVENT_TYPES = ["video.completed", "video.failed"];
+function endpointView(endpoint) {
+    return {
+        id: endpoint.id,
+        url: endpoint.url,
+        event_types: endpoint.eventTypes,
+        enabled: endpoint.enabled,
+        created_at: endpoint.createdAt,
+    };
+}
+const webhooksCreateTool = (0, define_js_1.defineWriteTool)({
+    name: "deeprelay_webhooks_create",
+    title: "Create a webhook endpoint",
+    description: "Register an HTTPS URL that deeprelay will SEND event data to (video.completed, video.failed). The endpoint's " +
+        "signing secret is returned exactly once, in this tool's result, and can never be read again: tell the user to " +
+        "store it immediately. Charges nothing.",
+    inputSchema: {
+        url: zod_1.z
+            .url({ protocol: /^https$/, hostname: zod_1.z.regexes.domain })
+            .describe("The https:// URL deeprelay will POST events to."),
+        event_types: zod_1.z
+            .array(zod_1.z.enum(exports.WEBHOOK_EVENT_TYPES))
+            .min(1)
+            .describe("Events to deliver to this URL. At least one."),
+    },
+    destructive: false,
+    question: (args) => `deeprelay will send event data to ${args.url}. Create this webhook endpoint?`,
+    context: "creating a webhook endpoint",
+    async quote(args) {
+        return {
+            summary: `deeprelay will SEND event data to ${args.url} for: ${args.event_types.join(", ")}. ` +
+                "The signing secret is shown once, in the result, and never again.",
+            resolvedParams: { url: args.url, event_types: args.event_types },
+        };
+    },
+    async execute(p, config) {
+        const endpoint = await new sdk_1.WebhooksApi(config).createWebhookEndpoint({
+            createWebhookEndpointRequest: { url: p.url, eventTypes: p.event_types },
+        });
+        const secret = endpoint.secret;
+        if (typeof secret !== "string" || secret === "") {
+            return {
+                lead: `Webhook endpoint ${endpoint.id} created. The API returned no signing secret for it.`,
+                payload: endpointView(endpoint),
+            };
+        }
+        return {
+            lead: `Webhook endpoint ${endpoint.id} created. The signing_secret below is shown ONCE and never again — ` +
+                "store it now; it cannot be retrieved later.",
+            payload: endpointView(endpoint),
+            revealOnce: { signing_secret: secret },
+        };
+    },
+});
+const webhooksDeleteTool = (0, define_js_1.defineWriteTool)({
+    name: "deeprelay_webhooks_delete",
+    title: "Delete a webhook endpoint",
+    description: "Delete a webhook endpoint. deeprelay stops sending events to it, and its signing secret is lost for good: " +
+        "re-creating the endpoint issues a different secret. This cannot be undone. Charges nothing.",
+    inputSchema: {
+        webhook_endpoint_id: zod_1.z.string().min(1).describe("Endpoint id, as returned by deeprelay_webhooks_list."),
+    },
+    destructive: true,
+    question: (args) => `Delete webhook endpoint ${args.webhook_endpoint_id}? This cannot be undone.`,
+    context: "deleting a webhook endpoint",
+    async quote(args) {
+        return {
+            summary: `Delete webhook endpoint ${args.webhook_endpoint_id}. deeprelay stops sending events to it and its signing ` +
+                "secret is permanently lost. This cannot be undone.",
+            resolvedParams: { webhook_endpoint_id: args.webhook_endpoint_id },
+        };
+    },
+    async execute(p, config) {
+        await new sdk_1.WebhooksApi(config).deleteWebhookEndpoint({ id: p.webhook_endpoint_id });
+        return {
+            lead: `Webhook endpoint ${p.webhook_endpoint_id} deleted. Its signing secret no longer exists.`,
+            payload: { id: p.webhook_endpoint_id, deleted: true },
+        };
+    },
+});
+const videosCancelTool = (0, define_js_1.defineWriteTool)({
+    name: "deeprelay_videos_cancel",
+    title: "Cancel a video generation job",
+    description: "Cancel a queued or in-progress video job. A cancelled job is never billed, and this session's reservation for " +
+        "it is released. A job that already completed cannot be cancelled. This cannot be undone.",
+    inputSchema: {
+        video_id: zod_1.z.string().min(1).describe("Video job id, as returned by deeprelay_videos_create."),
+    },
+    destructive: true,
+    question: (args) => `Cancel video job ${args.video_id}? This cannot be undone.`,
+    context: "cancelling a video job",
+    async quote(args) {
+        return {
+            summary: `Cancel video job ${args.video_id}. Its output is abandoned; a cancelled job is not billed.`,
+            resolvedParams: { video_id: args.video_id },
+        };
+    },
+    async execute(p, config) {
+        const job = await new sdk_1.InferenceApi(config).cancelVideo({ id: p.video_id });
+        // Settles through budget.settleVideo: cancelled releases the hold.
+        const view = (0, video_reads_js_1.observeVideoJob)(job);
+        return {
+            lead: `Video job ${job.id} is now ${String(job.status)}. Session reservation: ${String(view.session_settlement)}.`,
+            payload: view,
+        };
+    },
+});
+/** The eight write tools, in WRITE_TOOLS order (test/write.test.ts asserts it). */
+exports.writeTools = [
+    webhooksCreateTool,
+    webhooksDeleteTool,
+    spending_limit_js_1.spendingLimitUpdateTool,
+    spending_limit_js_1.spendingLimitClearTool,
+    ...payment_links_js_1.paymentLinkTools,
+    videosCancelTool,
+];
+//# sourceMappingURL=index.js.map

package/dist/tools/write/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/write/index.ts"],"names":[],"mappings":";;;AAAA,0EAA0E;AAC1E,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,qEAAqE;AACrE,EAAE;AACF,wEAAwE;AACxE,iFAAiF;AACjF,4EAA4E;AAC5E,sEAAsE;AACtE,uEAAuE;AACvE,iFAAiF;AACjF,2EAA2E;AAC3E,yEAAyE;AACzE,2EAA2E;AAC3E,2EAA2E;AAC3E,wFAAwF;AACxF,wCAAiF;AACjF,6BAAwB;AAExB,+DAA6D;AAE7D,2CAA8C;AAC9C,yDAAsD;AACtD,2DAAsF;AAEtF,yCAQqB;AAPnB,qHAAA,wBAAwB,OAAA;AACxB,4GAAA,eAAe,OAAA;AACf,gHAAA,mBAAmB,OAAA;AAInB,6GAAA,gBAAgB,OAAA;AAElB,uDAAsD;AAA7C,oHAAA,gBAAgB,OAAA;AACzB,yDAAsF;AAA7E,2HAAA,sBAAsB,OAAA;AAAE,4HAAA,uBAAuB,OAAA;AAExD;;;;GAIG;AACU,QAAA,mBAAmB,GAAG,CAAC,iBAAiB,EAAE,cAAc,CAAU,CAAC;AAEhF,SAAS,YAAY,CAAC,QAAyB;IAC7C,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,UAAU,EAAE,QAAQ,CAAC,SAAS;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,kBAAkB,GAAG,IAAA,2BAAe,EAAC;IACzC,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,2BAA2B;IAClC,WAAW,EACT,+GAA+G;QAC/G,gHAAgH;QAChH,wCAAwC;IAC1C,WAAW,EAAE;QACX,GAAG,EAAE,OAAC;aACH,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;aACxD,QAAQ,CAAC,iDAAiD,CAAC;QAC9D,WAAW,EAAE,OAAC;aACX,KAAK,CAAC,OAAC,CAAC,IAAI,CAAC,2BAAmB,CAAC,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,8CAA8C,CAAC;KAC5D;IACD,WAAW,EAAE,KAAK;IAClB,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,qCAAqC,IAAI,CAAC,GAAG,iCAAiC;IAClG,OAAO,EAAE,6BAA6B;IACtC,KAAK,CAAC,KAAK,CAAC,IAAI;QACd,OAAO;YACL,OAAO,EACL,qCAAqC,IAAI,CAAC,GAAG,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACrF,mEAAmE;YACrE,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;SACjE,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM;QACrB,MAAM,QAAQ,GAAG,MAAM,IAAI,iBAAW,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC;YACnE,4BAA4B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE;SACxE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YAChD,OAAO;gBACL,IAAI,EAAE,oBAAoB,QAAQ,CAAC,EAAE,sDAAsD;gBAC3F,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC;aAChC,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EACF,oBAAoB,QAAQ,CAAC,EAAE,qEAAqE;gBACpG,6CAA6C;YAC/C,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC;YAC/B,UAAU,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE;SACvC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,IAAA,2BAAe,EAAC;IACzC,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,2BAA2B;IAClC,WAAW,EACT,4GAA4G;QAC5G,6FAA6F;IAC/F,WAAW,EAAE;QACX,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC;KACxG;IACD,WAAW,EAAE,IAAI;IACjB,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,IAAI,CAAC,mBAAmB,0BAA0B;IACjG,OAAO,EAAE,6BAA6B;IACtC,KAAK,CAAC,KAAK,CAAC,IAAI;QACd,OAAO;YACL,OAAO,EACL,2BAA2B,IAAI,CAAC,mBAAmB,yDAAyD;gBAC5G,oDAAoD;YACtD,cAAc,EAAE,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE;SAClE,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM;QACrB,MAAM,IAAI,iBAAW,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACnF,OAAO;YACL,IAAI,EAAE,oBAAoB,CAAC,CAAC,mBAAmB,gDAAgD;YAC/F,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE;SACtD,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,IAAA,2BAAe,EAAC;IACvC,IAAI,EAAE,yBAAyB;IAC/B,KAAK,EAAE,+BAA+B;IACtC,WAAW,EACT,gHAAgH;QAChH,0FAA0F;IAC5F,WAAW,EAAE;QACX,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;KAC9F;IACD,WAAW,EAAE,IAAI;IACjB,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,IAAI,CAAC,QAAQ,0BAA0B;IAC/E,OAAO,EAAE,wBAAwB;IACjC,KAAK,CAAC,KAAK,CAAC,IAAI;QACd,OAAO;YACL,OAAO,EAAE,oBAAoB,IAAI,CAAC,QAAQ,2DAA2D;YACrG,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;SAC5C,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM;QACrB,MAAM,GAAG,GAAG,MAAM,IAAI,kBAAY,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3E,mEAAmE;QACnE,MAAM,IAAI,GAAG,IAAA,gCAAe,EAAC,GAAG,CAAC,CAAC;QAClC,OAAO;YACL,IAAI,EAAE,aAAa,GAAG,CAAC,EAAE,WAAW,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG;YAClH,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,mFAAmF;AACtE,QAAA,UAAU,GAAqB;IAC1C,kBAAkB;IAClB,kBAAkB;IAClB,2CAAuB;IACvB,0CAAsB;IACtB,GAAG,mCAAgB;IACnB,gBAAgB;CACjB,CAAC"}

package/dist/tools/write/payment-links.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "../types.js";
+export declare const CRYPTO_NOT_ENABLED: string;
+export declare const paymentLinkTools: ToolDefinition[];

package/dist/tools/write/payment-links.js

@@ -0,0 +1,161 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.paymentLinkTools = exports.CRYPTO_NOT_ENABLED = void 0;
+// Payment-link writes: subscription checkout, billing portal, crypto deposit
+// (Phase 104 D-03/D-09). Authored fresh (D-12).
+//
+// None of these moves money. Each creates a link (or a deposit address) the
+// user acts on outside the agent, in their own browser or wallet, and nothing
+// is charged until they do. They still confirm once like every write (D-10),
+// with no price quote, because there is nothing to price (D-09).
+//
+// Status wording is tool-specific where the shared mapper would mislead:
+//   * Subscription checkout returns 503 by design on deployments without a
+//     configured Stripe price. That is "not available here", not "retry".
+//   * Crypto deposits 404 when the account's crypto_deposits_enabled is false.
+//     That is final for this account; the agent must not retry. The tool is
+//     also off at boot (enabledAtBoot: false) and advertised only when the
+//     account has the feature (D-03).
+const sdk_1 = require("@deeprelay/sdk");
+const zod_1 = require("zod");
+const define_js_1 = require("./define.js");
+const LINK_ONLY = "It only creates a link and never charges: nothing is paid until the user completes it themselves.";
+const httpsUrl = (what) => zod_1.z
+    .url({ protocol: /^https$/, hostname: zod_1.z.regexes.domain })
+    .describe(`https:// URL ${what}.`);
+const SUBSCRIPTION_UNAVAILABLE = "Subscription checkout is not available on this deployment yet.";
+const SUBSCRIPTION_FORBIDDEN = "Not permitted — managing the subscription requires the org-admin role on this deeprelay account.";
+/** 503 is by design where no Stripe price is configured: legible, not a retry prompt. */
+function subscriptionError(status) {
+    if (status === 503) {
+        return SUBSCRIPTION_UNAVAILABLE;
+    }
+    if (status === 403) {
+        return SUBSCRIPTION_FORBIDDEN;
+    }
+    return undefined;
+}
+exports.CRYPTO_NOT_ENABLED = "Crypto deposits are not enabled for this account — this tool cannot be used here. Do not retry; use " +
+    "deeprelay_subscription_checkout or the dashboard to add funds.";
+const CRYPTO_UNAVAILABLE = "Crypto deposit service is temporarily unavailable — try later.";
+function iso(d) {
+    return d instanceof Date && !Number.isNaN(d.getTime()) ? d.toISOString() : null;
+}
+const subscriptionCheckoutTool = (0, define_js_1.defineWriteTool)({
+    name: "deeprelay_subscription_checkout",
+    title: "Create a subscription checkout link",
+    description: "Create a checkout link the user opens in their browser to subscribe to a deeprelay plan (the default plan when " +
+        `plan_key is omitted). ${LINK_ONLY} Requires the org-admin role.`,
+    inputSchema: {
+        plan_key: zod_1.z.string().min(1).optional().describe("Plan to subscribe to. Omit for the default plan."),
+        success_url: httpsUrl("the browser returns to after a completed checkout").optional(),
+        cancel_url: httpsUrl("the browser returns to if checkout is abandoned").optional(),
+    },
+    destructive: false,
+    question: (args) => `This will create a checkout link for plan ${args.plan_key ?? "default"} — confirm?`,
+    context: "creating a subscription checkout link",
+    async quote(args) {
+        return {
+            summary: `Create a subscription checkout link for plan ${args.plan_key ?? "default"}. ` +
+                "Nothing is charged until the user completes checkout in their browser.",
+            resolvedParams: { plan_key: args.plan_key, success_url: args.success_url, cancel_url: args.cancel_url },
+        };
+    },
+    async execute(p, config) {
+        const session = await new sdk_1.BillingApi(config).createSubscriptionCheckout({
+            subscriptionCheckoutRequest: { planKey: p.plan_key, successUrl: p.success_url, cancelUrl: p.cancel_url },
+        });
+        return {
+            lead: "Checkout link created. Give it to the user to open in their browser; nothing is charged until they " +
+                "complete checkout there.",
+            payload: {
+                checkout_url: session.checkoutUrl,
+                session_id: session.sessionId,
+                plan: session.plan,
+            },
+        };
+    },
+    overrideError: subscriptionError,
+});
+const billingPortalTool = (0, define_js_1.defineWriteTool)({
+    name: "deeprelay_billing_portal",
+    title: "Create a billing portal link",
+    description: "Create a link to the billing portal, where the user manages their subscription and payment methods in their " +
+        `browser. ${LINK_ONLY} Requires the org-admin role.`,
+    inputSchema: {
+        return_url: httpsUrl("the browser returns to when the user leaves the portal").optional(),
+    },
+    destructive: false,
+    question: "This will create a billing portal link — confirm?",
+    context: "creating a billing portal link",
+    async quote(args) {
+        return {
+            summary: "Create a billing portal link. Nothing is charged by creating or opening it.",
+            resolvedParams: { return_url: args.return_url },
+        };
+    },
+    async execute(p, config) {
+        const portal = await new sdk_1.BillingApi(config).createSubscriptionPortal({
+            subscriptionPortalRequest: { returnUrl: p.return_url },
+        });
+        return {
+            lead: "Billing portal link created. Give it to the user to open in their browser.",
+            payload: { portal_url: portal.portalUrl },
+        };
+    },
+    overrideError: subscriptionError,
+});
+const cryptoDepositCreateTool = (0, define_js_1.defineWriteTool)({
+    name: "deeprelay_deposits_create_crypto",
+    title: "Create a crypto deposit",
+    description: "Available only on accounts with crypto deposits enabled. Creates a deposit request and returns the address and " +
+        "exact amount the user sends from their own wallet to add prepaid credit. It never charges and moves no funds " +
+        "itself: only the user's own transfer does. Deposits expire if unpaid; check progress with deeprelay_deposits_get.",
+    inputSchema: {
+        amount_cents: zod_1.z.number().int().min(100).describe("Amount to deposit, in US cents (minimum 100)."),
+        chain: zod_1.z.enum(sdk_1.CreateCryptoDepositRequestChainEnum).describe("Blockchain to send on."),
+        asset: zod_1.z.enum(sdk_1.CreateCryptoDepositRequestAssetEnum).describe("Stablecoin to send."),
+    },
+    destructive: false,
+    enabledAtBoot: false,
+    question: (args) => `This will create a $${(args.amount_cents / 100).toFixed(2)} ${args.asset.toUpperCase()} deposit address on ` +
+        `${args.chain} — confirm?`,
+    context: "creating a crypto deposit",
+    async quote(args) {
+        return {
+            summary: `Create a crypto deposit request for $${(args.amount_cents / 100).toFixed(2)} in ${args.asset.toUpperCase()} ` +
+                `on ${args.chain}. No funds move until the user sends them from their own wallet.`,
+            resolvedParams: { amount_cents: args.amount_cents, chain: args.chain, asset: args.asset },
+        };
+    },
+    async execute(p, config) {
+        const deposit = await new sdk_1.BillingApi(config).createCryptoDeposit({
+            createCryptoDepositRequest: { amountCents: p.amount_cents, chain: p.chain, asset: p.asset },
+        });
+        return {
+            lead: "Deposit created. The user sends exactly pay_amount of the asset to pay_address from their own wallet " +
+                "before expires_at; credit is applied once the transfer confirms.",
+            payload: {
+                deposit_id: deposit.depositId,
+                status: deposit.status,
+                chain: deposit.chain,
+                asset: deposit.asset,
+                pay_address: deposit.payAddress ?? null,
+                pay_amount: deposit.payAmount ?? null,
+                amount_usd_cents: deposit.amountUsdCents,
+                expires_at: iso(deposit.expiresAt),
+            },
+        };
+    },
+    overrideError(status) {
+        if (status === 404) {
+            return exports.CRYPTO_NOT_ENABLED;
+        }
+        if (status !== undefined && status >= 500) {
+            return CRYPTO_UNAVAILABLE;
+        }
+        return undefined;
+    },
+});
+exports.paymentLinkTools = [subscriptionCheckoutTool, billingPortalTool, cryptoDepositCreateTool];
+//# sourceMappingURL=payment-links.js.map

package/dist/tools/write/payment-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-links.js","sourceRoot":"","sources":["../../../src/tools/write/payment-links.ts"],"names":[],"mappings":";;;AAAA,6EAA6E;AAC7E,gDAAgD;AAChD,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,iEAAiE;AACjE,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,0EAA0E;AAC1E,+EAA+E;AAC/E,4EAA4E;AAC5E,2EAA2E;AAC3E,sCAAsC;AACtC,wCAIwB;AACxB,6BAAwB;AAGxB,2CAA8C;AAE9C,MAAM,SAAS,GAAG,mGAAmG,CAAC;AAEtH,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAChC,OAAC;KACE,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;KACxD,QAAQ,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC;AAEvC,MAAM,wBAAwB,GAAG,gEAAgE,CAAC;AAClG,MAAM,sBAAsB,GAC1B,kGAAkG,CAAC;AAErG,yFAAyF;AACzF,SAAS,iBAAiB,CAAC,MAA0B;IACnD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,wBAAwB,CAAC;IAClC,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAEY,QAAA,kBAAkB,GAC7B,sGAAsG;IACtG,gEAAgE,CAAC;AACnE,MAAM,kBAAkB,GAAG,gEAAgE,CAAC;AAE5F,SAAS,GAAG,CAAC,CAAmB;IAC9B,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClF,CAAC;AAED,MAAM,wBAAwB,GAAG,IAAA,2BAAe,EAAC;IAC/C,IAAI,EAAE,iCAAiC;IACvC,KAAK,EAAE,qCAAqC;IAC5C,WAAW,EACT,iHAAiH;QACjH,yBAAyB,SAAS,+BAA+B;IACnE,WAAW,EAAE;QACX,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;QACnG,WAAW,EAAE,QAAQ,CAAC,mDAAmD,CAAC,CAAC,QAAQ,EAAE;QACrF,UAAU,EAAE,QAAQ,CAAC,iDAAiD,CAAC,CAAC,QAAQ,EAAE;KACnF;IACD,WAAW,EAAE,KAAK;IAClB,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,6CAA6C,IAAI,CAAC,QAAQ,IAAI,SAAS,aAAa;IACxG,OAAO,EAAE,uCAAuC;IAChD,KAAK,CAAC,KAAK,CAAC,IAAI;QACd,OAAO;YACL,OAAO,EACL,gDAAgD,IAAI,CAAC,QAAQ,IAAI,SAAS,IAAI;gBAC9E,wEAAwE;YAC1E,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;SACxG,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM;QACrB,MAAM,OAAO,GAAG,MAAM,IAAI,gBAAU,CAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC;YACtE,2BAA2B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE;SACzG,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EACF,qGAAqG;gBACrG,0BAA0B;YAC5B,OAAO,EAAE;gBACP,YAAY,EAAE,OAAO,CAAC,WAAW;gBACjC,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB;SACF,CAAC;IACJ,CAAC;IACD,aAAa,EAAE,iBAAiB;CACjC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,IAAA,2BAAe,EAAC;IACxC,IAAI,EAAE,0BAA0B;IAChC,KAAK,EAAE,8BAA8B;IACrC,WAAW,EACT,8GAA8G;QAC9G,YAAY,SAAS,+BAA+B;IACtD,WAAW,EAAE;QACX,UAAU,EAAE,QAAQ,CAAC,wDAAwD,CAAC,CAAC,QAAQ,EAAE;KAC1F;IACD,WAAW,EAAE,KAAK;IAClB,QAAQ,EAAE,mDAAmD;IAC7D,OAAO,EAAE,gCAAgC;IACzC,KAAK,CAAC,KAAK,CAAC,IAAI;QACd,OAAO;YACL,OAAO,EAAE,6EAA6E;YACtF,cAAc,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;SAChD,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,gBAAU,CAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC;YACnE,yBAAyB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE;SACvD,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,4EAA4E;YAClF,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE;SAC1C,CAAC;IACJ,CAAC;IACD,aAAa,EAAE,iBAAiB;CACjC,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,IAAA,2BAAe,EAAC;IAC9C,IAAI,EAAE,kCAAkC;IACxC,KAAK,EAAE,yBAAyB;IAChC,WAAW,EACT,iHAAiH;QACjH,+GAA+G;QAC/G,mHAAmH;IACrH,WAAW,EAAE;QACX,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;QACjG,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,yCAAmC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QACrF,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,yCAAmC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;KACnF;IACD,WAAW,EAAE,KAAK;IAClB,aAAa,EAAE,KAAK;IACpB,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CACjB,uBAAuB,CAAC,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,sBAAsB;QAC7G,GAAG,IAAI,CAAC,KAAK,aAAa;IAC5B,OAAO,EAAE,2BAA2B;IACpC,KAAK,CAAC,KAAK,CAAC,IAAI;QACd,OAAO;YACL,OAAO,EACL,wCAAwC,CAAC,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG;gBAC9G,MAAM,IAAI,CAAC,KAAK,kEAAkE;YACpF,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;SAC1F,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM;QACrB,MAAM,OAAO,GAAG,MAAM,IAAI,gBAAU,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC;YAC/D,0BAA0B,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;SAC5F,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EACF,uGAAuG;gBACvG,kEAAkE;YACpE,OAAO,EAAE;gBACP,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,WAAW,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;gBACvC,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;gBACrC,gBAAgB,EAAE,OAAO,CAAC,cAAc;gBACxC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;aACnC;SACF,CAAC;IACJ,CAAC;IACD,aAAa,CAAC,MAAM;QAClB,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,0BAAkB,CAAC;QAC5B,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAC1C,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAC,CAAC;AAEU,QAAA,gBAAgB,GAAqB,CAAC,wBAAwB,EAAE,iBAAiB,EAAE,uBAAuB,CAAC,CAAC"}

package/dist/tools/write/spending-limit.d.ts

@@ -0,0 +1,2 @@
+export declare const spendingLimitUpdateTool: import("../types.js").ToolDefinition;
+export declare const spendingLimitClearTool: import("../types.js").ToolDefinition;

package/dist/tools/write/spending-limit.js

@@ -0,0 +1,229 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.spendingLimitClearTool = exports.spendingLimitUpdateTool = void 0;
+// The spending-limit write tools (Phase 104 D-03). Authored fresh (D-12).
+//
+//   deeprelay_spending_limit_update — lower-only (carrying Phase 82 D-06)
+//   deeprelay_spending_limit_clear  — remove the limit entirely (Plan 104-12:
+//                                     @deeprelay/sdk@0.2.0 ships
+//                                     BillingApi.deleteSpendingLimit)
+//
+// So from the agent's side a limit can be lowered or cleared, never raised.
+// Raising is done in the dashboard.
+//
+// The update tool may only tighten the limit, never raise it. That is enforced
+// structurally, twice:
+//
+//   quote   — GET the current limit. A requested monthly (or daily) value that
+//             is not strictly below the current one throws
+//             QuoteUnavailableError, so no confirmation token is minted: a
+//             raise cannot be confirmed, not merely "is discouraged".
+//   execute — GET again and re-apply the same checks. A token lives for its
+//             whole TTL and the limit can move during it, so time-of-check
+//             must be time-of-use.
+//
+// The PUT resends every field (enforcement, auto-terminate hours, daily
+// limit) from the fresh GET, because the API has no partial update: an
+// omitted field is defaulted server-side, which could silently change
+// behaviour the confirmation never described (T-104-25).
+//
+// The clear tool quotes against a live GET and re-reads at execute, the same
+// time-of-check/time-of-use discipline as the update. "No limit configured"
+// (the API's typed 404 `no_spending_limit`, on either the GET or the DELETE)
+// is a plain "nothing to clear" result, never an error: the account is
+// already in the state the user asked for.
+const sdk_1 = require("@deeprelay/sdk");
+const zod_1 = require("zod");
+const errors_js_1 = require("../../errors.js");
+const define_js_1 = require("./define.js");
+/** Run the limit GET; a 404 means "no limit configured" and becomes undefined. */
+async function orNoLimit(read) {
+    try {
+        return await read();
+    }
+    catch (err) {
+        if ((0, errors_js_1.httpStatusOf)(err) === 404) {
+            return undefined;
+        }
+        throw err;
+    }
+}
+function usd(v) {
+    return `$${v.toFixed(2)}`;
+}
+/** The reason a request is not a decrease against `current`, or undefined when it is. */
+function notADecrease(current, monthly, daily) {
+    if (current === undefined) {
+        return undefined;
+    }
+    if (monthly >= current.monthlyLimitDollars) {
+        return `${usd(monthly)} is not a decrease from the current ${usd(current.monthlyLimitDollars)}/month limit`;
+    }
+    if (daily !== undefined && current.dailyLimitDollars !== undefined && daily >= current.dailyLimitDollars) {
+        return `${usd(daily)} is not a decrease from the current ${usd(current.dailyLimitDollars)}/day limit`;
+    }
+    return undefined;
+}
+const LOWER_ONLY = "This tool only lowers limits; raises are done in the dashboard.";
+exports.spendingLimitUpdateTool = (0, define_js_1.defineWriteTool)({
+    name: "deeprelay_spending_limit_update",
+    title: "Lower the deeprelay spending limit",
+    description: "LOWER the account's monthly spending limit (and optionally the daily one). Lower-only: a value at or above the " +
+        "current limit is refused before any confirmation is offered, and raising a limit is done in the dashboard. " +
+        "Requires the org-admin role. To remove the limit entirely use deeprelay_spending_limit_clear instead. Check " +
+        "the current value first with deeprelay_spending_limit_get. Charges nothing.",
+    inputSchema: {
+        monthly_limit_dollars: zod_1.z.number().positive().describe("New monthly limit in US dollars. Must be below the current one."),
+        daily_limit_dollars: zod_1.z
+            .number()
+            .positive()
+            .optional()
+            .describe("New daily limit in US dollars. If a daily limit exists, must be below it."),
+    },
+    destructive: false,
+    question: (args) => `Lower the monthly spending limit to ${usd(args.monthly_limit_dollars)}?`,
+    context: "updating the spending limit",
+    async quote(args, config) {
+        const current = await orNoLimit(() => new sdk_1.BillingApi(config).getSpendingLimit());
+        const refusal = notADecrease(current, args.monthly_limit_dollars, args.daily_limit_dollars);
+        if (refusal !== undefined) {
+            throw new errors_js_1.QuoteUnavailableError(`Refused: ${refusal}. ${LOWER_ONLY}`);
+        }
+        const monthlyPart = current === undefined
+            ? `Set a monthly spending limit of ${usd(args.monthly_limit_dollars)} (none is configured today)`
+            : `Lower the monthly spending limit from ${usd(current.monthlyLimitDollars)} to ${usd(args.monthly_limit_dollars)}`;
+        const dailyPart = args.daily_limit_dollars === undefined
+            ? ""
+            : current?.dailyLimitDollars === undefined
+                ? `, and set a daily limit of ${usd(args.daily_limit_dollars)}`
+                : `, and lower the daily limit from ${usd(current.dailyLimitDollars)} to ${usd(args.daily_limit_dollars)}`;
+        const plan = {
+            monthly_limit_dollars: args.monthly_limit_dollars,
+            daily_limit_dollars: args.daily_limit_dollars,
+            previous_monthly: current?.monthlyLimitDollars,
+            previous_daily: current?.dailyLimitDollars,
+            enforcement: current?.enforcement,
+            auto_terminate_hours: current?.autoTerminateHours,
+        };
+        return {
+            summary: `${monthlyPart}${dailyPart}. Raising it again cannot be done through this server.`,
+            resolvedParams: plan,
+        };
+    },
+    async execute(p, config) {
+        const fresh = await orNoLimit(() => new sdk_1.BillingApi(config).getSpendingLimit());
+        if (notADecrease(fresh, p.monthly_limit_dollars, p.daily_limit_dollars) !== undefined) {
+            throw new errors_js_1.QuoteUnavailableError("Refused at execution: the limit changed since the quote. The confirmation has been discarded.");
+        }
+        // Resend every field; prefer the fresh record, fall back to what was quoted.
+        const request = {
+            monthlyLimitDollars: p.monthly_limit_dollars,
+            dailyLimitDollars: p.daily_limit_dollars ?? fresh?.dailyLimitDollars ?? p.previous_daily,
+            enforcement: (fresh?.enforcement ?? p.enforcement),
+            autoTerminateHours: fresh?.autoTerminateHours ?? p.auto_terminate_hours,
+        };
+        const updated = await new sdk_1.BillingApi(config).updateSpendingLimit({ updateSpendingLimitRequest: request });
+        return {
+            lead: `Spending limit is now ${usd(updated.monthlyLimitDollars)}/month` +
+                (updated.dailyLimitDollars === undefined ? "." : ` and ${usd(updated.dailyLimitDollars)}/day.`),
+            payload: {
+                previous_monthly_limit_dollars: fresh?.monthlyLimitDollars ?? null,
+                monthly_limit_dollars: updated.monthlyLimitDollars,
+                daily_limit_dollars: updated.dailyLimitDollars ?? null,
+                enforcement: updated.enforcement,
+                current_month_spend_dollars: updated.currentMonthSpendDollars,
+                percent_used: updated.percentUsed,
+            },
+        };
+    },
+});
+/** The API's typed code for "this org has no spending limit", on GET and DELETE alike. */
+const NO_SPENDING_LIMIT = "no_spending_limit";
+/** A 404 carrying the typed `no_spending_limit` code; any other 404 is a real error. */
+async function isNoSpendingLimit(err) {
+    if ((0, errors_js_1.httpStatusOf)(err) !== 404) {
+        return false;
+    }
+    return (await (0, errors_js_1.readErrorEnvelope)(err)).code === NO_SPENDING_LIMIT;
+}
+/**
+ * Clear-path read: only the API's typed `no_spending_limit` 404 means "nothing
+ * to clear". Any other 404 (a proxy, a missing route) is a real error, so the
+ * agent is never told "no limit is configured" when one may exist.
+ */
+async function orTypedNoLimit(read) {
+    try {
+        return await read();
+    }
+    catch (err) {
+        if (await isNoSpendingLimit(err)) {
+            return undefined;
+        }
+        throw err;
+    }
+}
+const NOTHING_TO_CLEAR = {
+    lead: "No spending limit is configured on this account, so there is nothing to clear. Nothing was changed.",
+    payload: { cleared: false, reason: NO_SPENDING_LIMIT },
+};
+function limitPhrase(monthly, daily) {
+    return daily === undefined ? `${usd(monthly)}/month limit` : `${usd(monthly)}/month limit and the ${usd(daily)}/day cap`;
+}
+exports.spendingLimitClearTool = (0, define_js_1.defineWriteTool)({
+    name: "deeprelay_spending_limit_clear",
+    title: "Clear the deeprelay spending limit",
+    description: "REMOVE the account's spending limit entirely: the monthly limit and the daily cap. Afterwards inference is " +
+        "bounded only by the account balance. Requires the org-admin role. If no limit is configured this reports " +
+        "that there is nothing to clear and changes nothing. A new limit can be set again with " +
+        "deeprelay_spending_limit_update. Charges nothing.",
+    inputSchema: {},
+    destructive: true,
+    question: "Remove the spending limit entirely? Inference will then be bounded only by the account balance.",
+    context: "clearing the spending limit",
+    async quote(_args, config) {
+        const current = await orTypedNoLimit(() => new sdk_1.BillingApi(config).getSpendingLimit());
+        if (current === undefined) {
+            throw new define_js_1.WriteNothingToDo(NOTHING_TO_CLEAR);
+        }
+        const plan = {
+            previous_monthly: current.monthlyLimitDollars,
+            previous_daily: current.dailyLimitDollars,
+        };
+        return {
+            summary: `This removes the ${limitPhrase(current.monthlyLimitDollars, current.dailyLimitDollars)} entirely — ` +
+                "inference is then bounded only by the account balance.",
+            resolvedParams: plan,
+        };
+    },
+    async execute(p, config) {
+        const fresh = await orTypedNoLimit(() => new sdk_1.BillingApi(config).getSpendingLimit());
+        if (fresh === undefined) {
+            throw new define_js_1.WriteNothingToDo(NOTHING_TO_CLEAR);
+        }
+        if (fresh.monthlyLimitDollars !== p.previous_monthly || fresh.dailyLimitDollars !== p.previous_daily) {
+            throw new errors_js_1.QuoteUnavailableError("Refused at execution: the limit changed since the quote. The confirmation has been discarded.");
+        }
+        try {
+            await new sdk_1.BillingApi(config).deleteSpendingLimit();
+        }
+        catch (err) {
+            // Cleared by someone else between the re-read and the DELETE.
+            if (await isNoSpendingLimit(err)) {
+                throw new define_js_1.WriteNothingToDo(NOTHING_TO_CLEAR);
+            }
+            throw err;
+        }
+        return {
+            lead: `Spending limit cleared. Removed: the ${limitPhrase(p.previous_monthly, p.previous_daily)}. ` +
+                "Inference is now bounded only by the account balance.",
+            payload: {
+                cleared: true,
+                previous: {
+                    monthly_limit_dollars: p.previous_monthly,
+                    daily_limit_dollars: p.previous_daily ?? null,
+                },
+            },
+        };
+    },
+});
+//# sourceMappingURL=spending-limit.js.map

package/dist/tools/write/spending-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spending-limit.js","sourceRoot":"","sources":["../../../src/tools/write/spending-limit.ts"],"names":[],"mappings":";;;AAAA,0EAA0E;AAC1E,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,iEAAiE;AACjE,sEAAsE;AACtE,EAAE;AACF,4EAA4E;AAC5E,oCAAoC;AACpC,EAAE;AACF,+EAA+E;AAC/E,uBAAuB;AACvB,EAAE;AACF,+EAA+E;AAC/E,2DAA2D;AAC3D,2EAA2E;AAC3E,sEAAsE;AACtE,4EAA4E;AAC5E,2EAA2E;AAC3E,mCAAmC;AACnC,EAAE;AACF,wEAAwE;AACxE,uEAAuE;AACvE,sEAAsE;AACtE,yDAAyD;AACzD,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,uEAAuE;AACvE,2CAA2C;AAC3C,wCAAiG;AACjG,6BAAwB;AAExB,+CAAyF;AACzF,2CAAgE;AAYhE,kFAAkF;AAClF,KAAK,UAAU,SAAS,CAAC,IAAkC;IACzD,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,IAAA,wBAAY,EAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5B,CAAC;AAED,yFAAyF;AACzF,SAAS,YAAY,CACnB,OAAkC,EAClC,OAAe,EACf,KAAyB;IAEzB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAC3C,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,uCAAuC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,cAAc,CAAC;IAC9G,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,KAAK,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACzG,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,uCAAuC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC;IACxG,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,GAAG,iEAAiE,CAAC;AAExE,QAAA,uBAAuB,GAAG,IAAA,2BAAe,EAAC;IACrD,IAAI,EAAE,iCAAiC;IACvC,KAAK,EAAE,oCAAoC;IAC3C,WAAW,EACT,iHAAiH;QACjH,6GAA6G;QAC7G,8GAA8G;QAC9G,6EAA6E;IAC/E,WAAW,EAAE;QACX,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;QACxH,mBAAmB,EAAE,OAAC;aACnB,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,EAAE;aACV,QAAQ,CAAC,2EAA2E,CAAC;KACzF;IACD,WAAW,EAAE,KAAK;IAClB,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,uCAAuC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG;IAC7F,OAAO,EAAE,6BAA6B;IACtC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM;QACtB,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,gBAAU,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5F,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,iCAAqB,CAAC,YAAY,OAAO,KAAK,UAAU,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,WAAW,GACf,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,mCAAmC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,6BAA6B;YACjG,CAAC,CAAC,yCAAyC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACxH,MAAM,SAAS,GACb,IAAI,CAAC,mBAAmB,KAAK,SAAS;YACpC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,OAAO,EAAE,iBAAiB,KAAK,SAAS;gBACxC,CAAC,CAAC,8BAA8B,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE;gBAC/D,CAAC,CAAC,oCAAoC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACjH,MAAM,IAAI,GAAsB;YAC9B,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;YACjD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,gBAAgB,EAAE,OAAO,EAAE,mBAAmB;YAC9C,cAAc,EAAE,OAAO,EAAE,iBAAiB;YAC1C,WAAW,EAAE,OAAO,EAAE,WAAW;YACjC,oBAAoB,EAAE,OAAO,EAAE,kBAAkB;SAClD,CAAC;QACF,OAAO;YACL,OAAO,EAAE,GAAG,WAAW,GAAG,SAAS,wDAAwD;YAC3F,cAAc,EAAE,IAAI;SACrB,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM;QACrB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,gBAAU,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC/E,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC,mBAAmB,CAAC,KAAK,SAAS,EAAE,CAAC;YACtF,MAAM,IAAI,iCAAqB,CAC7B,+FAA+F,CAChG,CAAC;QACJ,CAAC;QACD,6EAA6E;QAC7E,MAAM,OAAO,GAA+B;YAC1C,mBAAmB,EAAE,CAAC,CAAC,qBAAqB;YAC5C,iBAAiB,EAAE,CAAC,CAAC,mBAAmB,IAAI,KAAK,EAAE,iBAAiB,IAAI,CAAC,CAAC,cAAc;YACxF,WAAW,EAAE,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,WAAW,CAA8C;YAC/F,kBAAkB,EAAE,KAAK,EAAE,kBAAkB,IAAI,CAAC,CAAC,oBAAoB;SACxE,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,gBAAU,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,EAAE,0BAA0B,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1G,OAAO;YACL,IAAI,EACF,yBAAyB,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ;gBACjE,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC;YACjG,OAAO,EAAE;gBACP,8BAA8B,EAAE,KAAK,EAAE,mBAAmB,IAAI,IAAI;gBAClE,qBAAqB,EAAE,OAAO,CAAC,mBAAmB;gBAClD,mBAAmB,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI;gBACtD,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,2BAA2B,EAAE,OAAO,CAAC,wBAAwB;gBAC7D,YAAY,EAAE,OAAO,CAAC,WAAW;aAClC;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,0FAA0F;AAC1F,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAE9C,wFAAwF;AACxF,KAAK,UAAU,iBAAiB,CAAC,GAAY;IAC3C,IAAI,IAAA,wBAAY,EAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,MAAM,IAAA,6BAAiB,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,IAAkC;IAC9D,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,MAAM,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,qGAAqG;IAC3G,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE;CACvD,CAAC;AAQF,SAAS,WAAW,CAAC,OAAe,EAAE,KAAyB;IAC7D,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,wBAAwB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;AAC3H,CAAC;AAEY,QAAA,sBAAsB,GAAG,IAAA,2BAAe,EAAC;IACpD,IAAI,EAAE,gCAAgC;IACtC,KAAK,EAAE,oCAAoC;IAC3C,WAAW,EACT,6GAA6G;QAC7G,2GAA2G;QAC3G,wFAAwF;QACxF,mDAAmD;IACrD,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,IAAI;IACjB,QAAQ,EAAE,iGAAiG;IAC3G,OAAO,EAAE,6BAA6B;IACtC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM;QACvB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,gBAAU,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACtF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,4BAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,IAAI,GAA2B;YACnC,gBAAgB,EAAE,OAAO,CAAC,mBAAmB;YAC7C,cAAc,EAAE,OAAO,CAAC,iBAAiB;SAC1C,CAAC;QACF,OAAO;YACL,OAAO,EACL,oBAAoB,WAAW,CAAC,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC,iBAAiB,CAAC,cAAc;gBACrG,wDAAwD;YAC1D,cAAc,EAAE,IAAI;SACrB,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM;QACrB,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,gBAAU,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACpF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,4BAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,KAAK,CAAC,mBAAmB,KAAK,CAAC,CAAC,gBAAgB,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,CAAC,cAAc,EAAE,CAAC;YACrG,MAAM,IAAI,iCAAqB,CAC7B,+FAA+F,CAChG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,gBAAU,CAAC,MAAM,CAAC,CAAC,mBAAmB,EAAE,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,8DAA8D;YAC9D,IAAI,MAAM,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,4BAAgB,CAAC,gBAAgB,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO;YACL,IAAI,EACF,wCAAwC,WAAW,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI;gBAC7F,uDAAuD;YACzD,OAAO,EAAE;gBACP,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE;oBACR,qBAAqB,EAAE,CAAC,CAAC,gBAAgB;oBACzC,mBAAmB,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;iBAC9C;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,3 @@
+/** Reported when package.json cannot be read. Matches the committed placeholder. */
+export declare const FALLBACK_VERSION = "0.0.0-dev";
+export declare function readVersion(): string;

package/dist/version.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FALLBACK_VERSION = void 0;
+exports.readVersion = readVersion;
+// The package's own version, read at runtime (Phase 104, D-12: authored fresh).
+//
+// Two places need the same number: the server identity MCP clients see in the
+// handshake, and the outbound User-Agent that auth.ts stamps on every API
+// call. Keeping it in its own module lets auth.ts import it without importing
+// the server entry point.
+//
+// The value is read from package.json at runtime rather than compiled in, so a
+// release that injects the version into package.json is reported correctly
+// without a rebuild. The compiled file is dist/version.js, so the manifest is
+// one directory up. Under vitest the source file is src/version.ts, which also
+// sits one directory below package.json.
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+/** Reported when package.json cannot be read. Matches the committed placeholder. */
+exports.FALLBACK_VERSION = "0.0.0-dev";
+function readVersion() {
+    try {
+        const manifest = JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(__dirname, "..", "package.json"), "utf8"));
+        if (typeof manifest === "object" && manifest !== null) {
+            const version = manifest.version;
+            if (typeof version === "string" && version.trim() !== "") {
+                return version;
+            }
+        }
+    }
+    catch {
+        // An unreadable manifest must never stop the server from starting.
+    }
+    return exports.FALLBACK_VERSION;
+}
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":";;;AAkBA,kCAeC;AAjCD,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,0BAA0B;AAC1B,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,yCAAyC;AACzC,qCAAuC;AACvC,yCAAiC;AAEjC,oFAAoF;AACvE,QAAA,gBAAgB,GAAG,WAAW,CAAC;AAE5C,SAAgB,WAAW;IACzB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAClC,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAC5D,CAAC;QACF,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtD,MAAM,OAAO,GAAI,QAAkC,CAAC,OAAO,CAAC;YAC5D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACzD,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;IACD,OAAO,wBAAgB,CAAC;AAC1B,CAAC"}