@elisym/sdk 0.14.0 → 0.15.1

package/dist/index.d.cts

@@ -4,6 +4,7 @@ import { A as Asset } from './assets-C-nzSYD4.cjs';
 export { C as Chain, K as KNOWN_ASSETS, N as NATIVE_SOL, U as USDC_SOLANA_DEVNET, a as assetByKey, b as assetKey, f as formatAssetAmount, p as parseAssetAmount, r as resolveAssetFromPaymentRequest, c as resolveKnownAsset } from './assets-C-nzSYD4.cjs';
 import { z } from 'zod';
 export { G as GlobalConfig, a as GlobalConfigSchema, S as SessionSpendLimitEntry, b as SessionSpendLimitEntrySchema } from './global-schema-CddHP2nk.cjs';
+export { R as RateLimitDecision, S as SlidingWindowLimiter, a as SlidingWindowLimiterOptions, c as createSlidingWindowLimiter } from './rateLimiter-CoEmZkSX.cjs';
 
 declare class ElisymIdentity {
     private _secretKey;
@@ -291,6 +292,12 @@ interface BuildTransactionOptions {
      * attached either way.
      */
     jobEventId?: string;
+    /**
+     * elisym-config program ID. Used to derive the `NetworkStats` PDA targeted
+     * by the appended `increment_stats` instruction. Defaults to the devnet
+     * deployment when omitted.
+     */
+    programId?: Address;
 }
 
 declare class NostrPool {
@@ -661,6 +668,7 @@ declare class SolanaPaymentStrategy implements PaymentStrategy {
  */
 declare function buildPaymentInstructions(paymentRequest: PaymentRequestData, payerSigner: Signer, options?: {
     jobEventId?: string;
+    programId?: Address;
 }): Promise<readonly unknown[]>;
 /**
  * Convenience wrapper: fetch the on-chain protocol config first, then build a
@@ -970,6 +978,24 @@ interface AggregateNetworkStatsOptions {
  * up as a positive delta, so it is naturally excluded.
  */
 declare function aggregateNetworkStats(rpc: Rpc<SolanaRpcApi>, options?: AggregateNetworkStatsOptions): Promise<NetworkStatsResult>;
+/**
+ * Best-effort network stats read from the on-chain `NetworkStats` PDA
+ * maintained by the elisym-config program. One `getAccountInfo` call - no
+ * signature scans, no per-tx aggregation.
+ *
+ * The PDA is incremented by the client SDK alongside each payment and is not
+ * yet bound to a verified transfer, so totals can be inflated cheaply by a
+ * malicious caller. Authoritative tracking will land with the escrow rewrite.
+ *
+ * Returns `null` when the PDA has not been initialized yet (admin must call
+ * `initialize_stats` once after program upgrade).
+ */
+interface OnchainNetworkStats {
+    jobCount: number;
+    volumeNative: bigint;
+    volumeUsdc: bigint;
+}
+declare function getNetworkStats(rpc: Rpc<SolanaRpcApi>, programId: Address): Promise<OnchainNetworkStats | null>;
 
 /**
  * Snapshot of the on-chain elisym-config program state.
@@ -1032,50 +1058,6 @@ declare class BoundedSet<T> {
     add(item: T): void;
 }
 
-/**
- * Sliding-window rate limiter keyed by an arbitrary string (typically a
- * customer pubkey). Each key gets at most `maxPerWindow` requests inside a
- * rolling `windowMs`. Stale timestamps are pruned lazily on every `check`.
- * When the tracked-key set grows past `maxKeys`, the least-recently-used
- * key is evicted so an attacker cannot exhaust memory by cycling keys.
- *
- * Thread-safety: not required. Designed for single-threaded JS consumers
- * (Node/Bun event loops, browser main thread). No timers - pruning happens
- * inside `check` and `prune`.
- */
-interface SlidingWindowLimiterOptions {
-    /** Rolling window width, in ms. */
-    windowMs: number;
-    /** Max hits allowed per key inside the window. */
-    maxPerWindow: number;
-    /** Cap on total tracked keys. LRU-evicted past this cap. */
-    maxKeys: number;
-}
-interface RateLimitDecision {
-    allowed: boolean;
-    /** Wall-clock timestamp (ms) when the limit window will reset for this key. */
-    resetAt: number;
-    /** Number of hits inside the current window after this call (or the attempted hit if denied). */
-    count: number;
-}
-interface SlidingWindowLimiter {
-    /** Record a hit against `key`; return whether it was allowed. */
-    check(key: string, now?: number): RateLimitDecision;
-    /**
-     * Inspect the current state for `key` without recording a hit. Useful
-     * when a single request must clear multiple limiters and callers want
-     * to avoid double-counting against one limiter after another denies.
-     */
-    peek(key: string, now?: number): RateLimitDecision;
-    /** Drop entries whose windows have fully elapsed. Bounded memory hygiene. */
-    prune(now?: number): void;
-    /** Current number of tracked keys. */
-    size(): number;
-    /** Clear all state. */
-    reset(): void;
-}
-declare function createSlidingWindowLimiter(options: SlidingWindowLimiterOptions): SlidingWindowLimiter;
-
 /**
  * Canonical pino redact paths for the elisym stack. Plugin, CLI, MCP, and
  * any downstream integrator should consume these arrays directly - one
@@ -1180,4 +1162,4 @@ declare const LIMITS: {
     readonly MAX_CAPABILITY_LENGTH: 64;
 };
 
-export { type Agent, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, type RateLimitDecision, SECRET_REDACT_PATHS, type Signer, type SlidingWindowLimiter, type SlidingWindowLimiterOptions, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
+export { type Agent, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };

package/dist/index.d.ts

@@ -4,6 +4,7 @@ import { A as Asset } from './assets-C-nzSYD4.js';
 export { C as Chain, K as KNOWN_ASSETS, N as NATIVE_SOL, U as USDC_SOLANA_DEVNET, a as assetByKey, b as assetKey, f as formatAssetAmount, p as parseAssetAmount, r as resolveAssetFromPaymentRequest, c as resolveKnownAsset } from './assets-C-nzSYD4.js';
 import { z } from 'zod';
 export { G as GlobalConfig, a as GlobalConfigSchema, S as SessionSpendLimitEntry, b as SessionSpendLimitEntrySchema } from './global-schema-CddHP2nk.js';
+export { R as RateLimitDecision, S as SlidingWindowLimiter, a as SlidingWindowLimiterOptions, c as createSlidingWindowLimiter } from './rateLimiter-CoEmZkSX.js';
 
 declare class ElisymIdentity {
     private _secretKey;
@@ -291,6 +292,12 @@ interface BuildTransactionOptions {
      * attached either way.
      */
     jobEventId?: string;
+    /**
+     * elisym-config program ID. Used to derive the `NetworkStats` PDA targeted
+     * by the appended `increment_stats` instruction. Defaults to the devnet
+     * deployment when omitted.
+     */
+    programId?: Address;
 }
 
 declare class NostrPool {
@@ -661,6 +668,7 @@ declare class SolanaPaymentStrategy implements PaymentStrategy {
  */
 declare function buildPaymentInstructions(paymentRequest: PaymentRequestData, payerSigner: Signer, options?: {
     jobEventId?: string;
+    programId?: Address;
 }): Promise<readonly unknown[]>;
 /**
  * Convenience wrapper: fetch the on-chain protocol config first, then build a
@@ -970,6 +978,24 @@ interface AggregateNetworkStatsOptions {
  * up as a positive delta, so it is naturally excluded.
  */
 declare function aggregateNetworkStats(rpc: Rpc<SolanaRpcApi>, options?: AggregateNetworkStatsOptions): Promise<NetworkStatsResult>;
+/**
+ * Best-effort network stats read from the on-chain `NetworkStats` PDA
+ * maintained by the elisym-config program. One `getAccountInfo` call - no
+ * signature scans, no per-tx aggregation.
+ *
+ * The PDA is incremented by the client SDK alongside each payment and is not
+ * yet bound to a verified transfer, so totals can be inflated cheaply by a
+ * malicious caller. Authoritative tracking will land with the escrow rewrite.
+ *
+ * Returns `null` when the PDA has not been initialized yet (admin must call
+ * `initialize_stats` once after program upgrade).
+ */
+interface OnchainNetworkStats {
+    jobCount: number;
+    volumeNative: bigint;
+    volumeUsdc: bigint;
+}
+declare function getNetworkStats(rpc: Rpc<SolanaRpcApi>, programId: Address): Promise<OnchainNetworkStats | null>;
 
 /**
  * Snapshot of the on-chain elisym-config program state.
@@ -1032,50 +1058,6 @@ declare class BoundedSet<T> {
     add(item: T): void;
 }
 
-/**
- * Sliding-window rate limiter keyed by an arbitrary string (typically a
- * customer pubkey). Each key gets at most `maxPerWindow` requests inside a
- * rolling `windowMs`. Stale timestamps are pruned lazily on every `check`.
- * When the tracked-key set grows past `maxKeys`, the least-recently-used
- * key is evicted so an attacker cannot exhaust memory by cycling keys.
- *
- * Thread-safety: not required. Designed for single-threaded JS consumers
- * (Node/Bun event loops, browser main thread). No timers - pruning happens
- * inside `check` and `prune`.
- */
-interface SlidingWindowLimiterOptions {
-    /** Rolling window width, in ms. */
-    windowMs: number;
-    /** Max hits allowed per key inside the window. */
-    maxPerWindow: number;
-    /** Cap on total tracked keys. LRU-evicted past this cap. */
-    maxKeys: number;
-}
-interface RateLimitDecision {
-    allowed: boolean;
-    /** Wall-clock timestamp (ms) when the limit window will reset for this key. */
-    resetAt: number;
-    /** Number of hits inside the current window after this call (or the attempted hit if denied). */
-    count: number;
-}
-interface SlidingWindowLimiter {
-    /** Record a hit against `key`; return whether it was allowed. */
-    check(key: string, now?: number): RateLimitDecision;
-    /**
-     * Inspect the current state for `key` without recording a hit. Useful
-     * when a single request must clear multiple limiters and callers want
-     * to avoid double-counting against one limiter after another denies.
-     */
-    peek(key: string, now?: number): RateLimitDecision;
-    /** Drop entries whose windows have fully elapsed. Bounded memory hygiene. */
-    prune(now?: number): void;
-    /** Current number of tracked keys. */
-    size(): number;
-    /** Clear all state. */
-    reset(): void;
-}
-declare function createSlidingWindowLimiter(options: SlidingWindowLimiterOptions): SlidingWindowLimiter;
-
 /**
  * Canonical pino redact paths for the elisym stack. Plugin, CLI, MCP, and
  * any downstream integrator should consume these arrays directly - one
@@ -1180,4 +1162,4 @@ declare const LIMITS: {
     readonly MAX_CAPABILITY_LENGTH: 64;
 };
 
-export { type Agent, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, type RateLimitDecision, SECRET_REDACT_PATHS, type Signer, type SlidingWindowLimiter, type SlidingWindowLimiterOptions, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
+export { type Agent, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };

package/dist/index.js

@@ -1,7 +1,7 @@
+import { pipe, createTransactionMessage, setTransactionMessageFeePayerSigner, setTransactionMessageLifetimeUsingBlockhash, setTransactionMessageComputeUnitLimit, setTransactionMessageComputeUnitPrice, appendTransactionMessageInstructions, signTransactionMessageWithSigners, address, AccountRole, isAddress, getProgramDerivedAddress, assertAccountExists, getAddressDecoder, fetchEncodedAccount, transformEncoder, getStructEncoder, fixEncoderSize, getBytesEncoder, getU64Encoder, getBooleanEncoder, decodeAccount, upgradeRoleToSigner, getStructDecoder, fixDecoderSize, getBytesDecoder, getU8Decoder, getU64Decoder, getU128Decoder, getI64Decoder, getOptionDecoder, getU16Decoder, getBooleanDecoder, isTransactionSigner as isTransactionSigner$1 } from '@solana/kit';
 import { getAddMemoInstruction } from '@solana-program/memo';
 import { getTransferSolInstruction } from '@solana-program/system';
 import { findAssociatedTokenPda, TOKEN_PROGRAM_ADDRESS, getCreateAssociatedTokenIdempotentInstruction, ASSOCIATED_TOKEN_PROGRAM_ADDRESS, getTransferCheckedInstruction } from '@solana-program/token';
-import { pipe, createTransactionMessage, setTransactionMessageFeePayerSigner, setTransactionMessageLifetimeUsingBlockhash, setTransactionMessageComputeUnitLimit, setTransactionMessageComputeUnitPrice, appendTransactionMessageInstructions, signTransactionMessageWithSigners, address, AccountRole, isAddress, getProgramDerivedAddress, assertAccountExists, getAddressDecoder, fetchEncodedAccount, decodeAccount, getStructDecoder, fixDecoderSize, getBytesDecoder, getU8Decoder, getOptionDecoder, getU16Decoder, getBooleanDecoder, getI64Decoder } from '@solana/kit';
 import Decimal3 from 'decimal.js-light';
 import { z } from 'zod';
 import { verifyEvent, finalizeEvent, getPublicKey, nip19, generateSecretKey, SimplePool } from 'nostr-tools';
@@ -103,8 +103,107 @@ async function fetchMaybeConfig(rpc, address4, config) {
   const maybeAccount = await fetchEncodedAccount(rpc, address4, config);
   return decodeConfig(maybeAccount);
 }
+function getNetworkStatsDecoder() {
+  return getStructDecoder([
+    ["discriminator", fixDecoderSize(getBytesDecoder(), 8)],
+    ["version", getU8Decoder()],
+    ["bump", getU8Decoder()],
+    ["jobCount", getU64Decoder()],
+    ["volumeNative", getU128Decoder()],
+    ["volumeUsdc", getU128Decoder()],
+    ["lastUpdated", getI64Decoder()],
+    ["reserved", fixDecoderSize(getBytesDecoder(), 128)]
+  ]);
+}
+function decodeNetworkStats(encodedAccount) {
+  return decodeAccount(
+    encodedAccount,
+    getNetworkStatsDecoder()
+  );
+}
+async function fetchMaybeNetworkStats(rpc, address4, config) {
+  const maybeAccount = await fetchEncodedAccount(rpc, address4, config);
+  return decodeNetworkStats(maybeAccount);
+}
+var ELISYM_CONFIG_PROGRAM_ADDRESS = "BrX1CRkSgvcjxBvc2bgc3QqgWjinusofDmeP7ZVxvwrE";
 if (process.env.NODE_ENV !== "production") ;
+function expectAddress(value) {
+  if (!value) {
+    throw new Error("Expected a Address.");
+  }
+  if (typeof value === "object" && "address" in value) {
+    return value.address;
+  }
+  if (Array.isArray(value)) {
+    return value[0];
+  }
+  return value;
+}
+function getAccountMetaFactory(programAddress, optionalAccountStrategy) {
+  return (account) => {
+    if (!account.value) {
+      return Object.freeze({
+        address: programAddress,
+        role: AccountRole.READONLY
+      });
+    }
+    const writableRole = account.isWritable ? AccountRole.WRITABLE : AccountRole.READONLY;
+    return Object.freeze({
+      address: expectAddress(account.value),
+      role: isTransactionSigner(account.value) ? upgradeRoleToSigner(writableRole) : writableRole,
+      ...isTransactionSigner(account.value) ? { signer: account.value } : {}
+    });
+  };
+}
+function isTransactionSigner(value) {
+  return !!value && typeof value === "object" && "address" in value && isTransactionSigner$1(value);
+}
+var INCREMENT_STATS_DISCRIMINATOR = new Uint8Array([
+  145,
+  78,
+  96,
+  206,
+  45,
+  21,
+  111,
+  175
+]);
+function getIncrementStatsInstructionDataEncoder() {
+  return transformEncoder(
+    getStructEncoder([
+      ["discriminator", fixEncoderSize(getBytesEncoder(), 8)],
+      ["amount", getU64Encoder()],
+      ["isNative", getBooleanEncoder()]
+    ]),
+    (value) => ({ ...value, discriminator: INCREMENT_STATS_DISCRIMINATOR })
+  );
+}
+function getIncrementStatsInstruction(input, config) {
+  const programAddress = config?.programAddress ?? ELISYM_CONFIG_PROGRAM_ADDRESS;
+  const originalAccounts = {
+    stats: { value: input.stats ?? null, isWritable: true },
+    eventAuthority: { value: input.eventAuthority ?? null, isWritable: false },
+    program: { value: input.program ?? null, isWritable: false }
+  };
+  const accounts = originalAccounts;
+  const args = { ...input };
+  const getAccountMeta = getAccountMetaFactory(programAddress);
+  const instruction = {
+    accounts: [
+      getAccountMeta(accounts.stats),
+      getAccountMeta(accounts.eventAuthority),
+      getAccountMeta(accounts.program)
+    ],
+    programAddress,
+    data: getIncrementStatsInstructionDataEncoder().encode(
+      args
+    )
+  };
+  return instruction;
+}
 var CONFIG_SEED = "config";
+var STATS_SEED = "network_stats";
+var EVENT_AUTHORITY_SEED = "__event_authority";
 async function deriveConfigAddress(programId) {
   const [pda] = await getProgramDerivedAddress({
     programAddress: programId,
@@ -112,6 +211,20 @@ async function deriveConfigAddress(programId) {
   });
   return pda;
 }
+async function deriveNetworkStatsAddress(programId) {
+  const [pda] = await getProgramDerivedAddress({
+    programAddress: programId,
+    seeds: [new TextEncoder().encode(STATS_SEED)]
+  });
+  return pda;
+}
+async function deriveEventAuthorityAddress(programId) {
+  const [pda] = await getProgramDerivedAddress({
+    programAddress: programId,
+    seeds: [new TextEncoder().encode(EVENT_AUTHORITY_SEED)]
+  });
+  return pda;
+}
 
 // src/config/onchain.ts
 var CACHE_TTL_MS = 6e4;
@@ -573,7 +686,8 @@ var SolanaPaymentStrategy = class {
       throw new Error(`Invalid computeUnitLimit: ${computeUnitLimit}. Must be a positive integer.`);
     }
     const paymentInstructions = await buildPaymentInstructions(paymentRequest, payerSigner, {
-      jobEventId: options?.jobEventId
+      jobEventId: options?.jobEventId,
+      programId: options?.programId
     });
     const priorityFeeMicroLamports = options?.priorityFeeMicroLamports ?? await estimatePriorityFeeMicroLamports(rpc, {
       percentile: options?.priorityFeePercentile ?? DEFAULT_PRIORITY_FEE_PERCENTILE
@@ -875,8 +989,21 @@ async function buildPaymentInstructions(paymentRequest, payerSigner, options) {
   const recipient = address(paymentRequest.recipient);
   const reference = address(paymentRequest.reference);
   const protocolTag = address(ELISYM_PROTOCOL_TAG);
+  const programId = options?.programId ?? getProtocolProgramId("devnet");
   const feeAmount = paymentRequest.fee_amount ?? 0;
   const providerAmount = paymentRequest.fee_address && feeAmount > 0 ? paymentRequest.amount - feeAmount : paymentRequest.amount;
+  const statsPda = await deriveNetworkStatsAddress(programId);
+  const eventAuthority = await deriveEventAuthorityAddress(programId);
+  const incrementStatsIx = getIncrementStatsInstruction(
+    {
+      stats: statsPda,
+      eventAuthority,
+      program: programId,
+      amount: BigInt(paymentRequest.amount),
+      isNative: !resolveAssetFromPaymentRequest(paymentRequest).mint
+    },
+    { programAddress: programId }
+  );
   if (providerAmount <= 0) {
     throw new Error(
       `Fee amount (${feeAmount}) exceeds or equals total amount (${paymentRequest.amount}). Cannot create transaction with non-positive provider amount.`
@@ -912,6 +1039,7 @@ async function buildPaymentInstructions(paymentRequest, payerSigner, options) {
         })
       );
     }
+    instructions2.push(incrementStatsIx);
     return instructions2;
   }
   const mint = address(asset.mint);
@@ -990,6 +1118,7 @@ async function buildPaymentInstructions(paymentRequest, payerSigner, options) {
       })
     );
   }
+  instructions.push(incrementStatsIx);
   return instructions;
 }
 async function createPaymentRequestWithOnchainConfig(rpc, programId, recipient, amount, options) {
@@ -3193,6 +3322,18 @@ function accumulateNativeDeltas(pre, post, volumeByAsset) {
     }
   }
 }
+async function getNetworkStats(rpc, programId) {
+  const statsPda = await deriveNetworkStatsAddress(programId);
+  const account = await fetchMaybeNetworkStats(rpc, statsPda);
+  if (!account.exists) {
+    return null;
+  }
+  return {
+    jobCount: Number(account.data.jobCount),
+    volumeNative: account.data.volumeNative,
+    volumeUsdc: account.data.volumeUsdc
+  };
+}
 var SessionSpendLimitEntrySchema = z.object({
   chain: z.enum(["solana"]),
   token: z.string().min(1).max(16).regex(/^[a-z0-9]+$/, "token must be lowercase alphanumeric"),
@@ -3397,6 +3538,6 @@ function makeCensor() {
   };
 }
 
-export { BoundedSet, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, ElisymIdentity, GlobalConfigSchema, INPUT_REDACT_PATHS, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, NostrPool, PROTOCOL_PROGRAM_ID_DEVNET, PaymentRequestSchema, PingService, RELAYS, SECRET_REDACT_PATHS, SessionSpendLimitEntrySchema, SolanaPaymentStrategy, USDC_SOLANA_DEVNET, aggregateNetworkStats, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatAssetAmount, formatFeeBreakdown, formatNetworkBaseline, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveAssetFromPaymentRequest, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
+export { BoundedSet, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, ElisymIdentity, GlobalConfigSchema, INPUT_REDACT_PATHS, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, NostrPool, PROTOCOL_PROGRAM_ID_DEVNET, PaymentRequestSchema, PingService, RELAYS, SECRET_REDACT_PATHS, SessionSpendLimitEntrySchema, SolanaPaymentStrategy, USDC_SOLANA_DEVNET, aggregateNetworkStats, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatAssetAmount, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveAssetFromPaymentRequest, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map