@elisym/sdk 0.17.0 → 0.19.0

package/dist/index.d.cts

@@ -56,6 +56,37 @@ interface PaymentInfo {
     /** Display symbol (e.g. 'SOL', 'USDC'). */
     symbol?: string;
 }
+/**
+ * Legal/operational policy published by an agent (NIP-23 long-form article,
+ * kind 30023). One event per `(pubkey, type)` slot; replaceable by `d`-tag.
+ *
+ * `type` is open vocabulary - common values: `tos`, `privacy`, `refund`,
+ * `aup`, `sla`, `dpa`, `jurisdiction`. Validation regex `POLICY_TYPE_REGEX`.
+ */
+interface AgentPolicy {
+    type: string;
+    version: string;
+    title: string;
+    summary?: string;
+    /** Full markdown body. */
+    content: string;
+    /** NIP-19 `naddr` reference, e.g. for sharing or migration to dedicated kind. */
+    naddr: string;
+    /** Underlying NIP-23 d-tag (e.g. `elisym-policy-tos`). */
+    dTag: string;
+    /** Event `created_at` in unix seconds (NIP-23 spec: defaults to publication date). */
+    publishedAt: number;
+    eventId: string;
+    authorPubkey: string;
+}
+/** Input shape for `PoliciesService.publishPolicy`. */
+interface PolicyInput {
+    type: string;
+    version: string;
+    title: string;
+    summary?: string;
+    content: string;
+}
 /** Agent discovered from the network. */
 interface Agent {
     pubkey: string;
@@ -597,6 +628,33 @@ declare class PingService {
     sendPong(identity: ElisymIdentity, recipientPubkey: string, nonce: string): Promise<void>;
 }
 
+declare class PoliciesService {
+    private pool;
+    constructor(pool: NostrPool);
+    /**
+     * Fetch all elisym policies published by `pubkey`. Verifies signatures,
+     * dedupes by d-tag (latest `created_at` wins), and returns sorted by `type`
+     * for deterministic UI rendering.
+     *
+     * Returns `[]` on empty result. Network errors propagate to the caller.
+     */
+    fetchPolicies(pubkey: string): Promise<AgentPolicy[]>;
+    /**
+     * Publish a policy as a NIP-23 long-form article (kind 30023). Replaces any
+     * existing policy of the same `type` for this pubkey via the addressable
+     * `(kind, pubkey, d-tag)` slot.
+     */
+    publishPolicy(identity: ElisymIdentity, input: PolicyInput): Promise<{
+        eventId: string;
+        naddr: string;
+    }>;
+    /**
+     * Tombstone a policy by publishing an empty replacement under the same
+     * `(kind, pubkey, d-tag)` slot. Readers skip events with empty content.
+     */
+    deletePolicy(identity: ElisymIdentity, type: string): Promise<string>;
+}
+
 interface ElisymClientFullConfig extends ElisymClientConfig {
     payment?: PaymentStrategy;
     /** Custom upload URL for file uploads (defaults to nostr.build). */
@@ -608,11 +666,50 @@ declare class ElisymClient {
     readonly marketplace: MarketplaceService;
     readonly ping: PingService;
     readonly media: MediaService;
+    readonly policies: PoliciesService;
     readonly payment: PaymentStrategy;
     constructor(config?: ElisymClientFullConfig);
     close(): void;
 }
 
+/**
+ * Customer-facing error feedback that arrives via `subscribeToJobUpdates`'s
+ * `onError` callback can come from many places:
+ *
+ *   - The runtime's stable `Agent temporarily unavailable` string when the
+ *     LLM health gate refuses a job (preflight) or an in-flight skill
+ *     surfaced a billing/invalid signal.
+ *   - The runtime's `Internal processing error` sanitization mask for any
+ *     "<Provider> API error: ..." string that leaks out of an LLM call.
+ *   - Raw script-skill failures the runtime forwards as-is when the
+ *     message does not contain "API" - e.g. shell scripts that reach
+ *     Anthropic's `count_tokens` endpoint and exit 1 with the body in
+ *     stderr instead of using the canonical exit-42 contract.
+ *   - Generic transport errors (timeouts, "Provider returned an error",
+ *     rate-limit refusals, payment errors).
+ *
+ * Customers don't care which path produced the error - they care whether
+ * the agent is down (try later, payment recoverable) or something else
+ * went wrong (their input, their wallet, etc). This classifier collapses
+ * the first three categories into a single `agent-unavailable` kind so
+ * the UI can render one stable message regardless of how the underlying
+ * provider chose to surface the failure.
+ *
+ * Markers are kept as a permissive superset of every billing/auth phrase
+ * the CLI and skill scripts are known to emit. Adding a new marker is
+ * always safe; removing one risks classifying a real outage as `unknown`.
+ */
+type JobErrorKind = 'agent-unavailable' | 'unknown';
+/**
+ * Classify a customer-facing error string surfaced via
+ * `JobUpdateCallbacks.onError` into a stable kind the UI can branch on.
+ *
+ * Match is case-insensitive against the message text. Returns
+ * `agent-unavailable` for any known billing/auth/invalid-key signal;
+ * `unknown` for everything else (timeouts, validation errors, transport).
+ */
+declare function classifyJobError(message: string): JobErrorKind;
+
 declare class SolanaPaymentStrategy implements PaymentStrategy {
     readonly chain = "solana";
     calculateFee(amount: number, config: ProtocolConfigInput): number;
@@ -1092,10 +1189,17 @@ declare function makeCensor(): (value: unknown, path: string[]) => string;
 
 declare const RELAYS: string[];
 declare const KIND_APP_HANDLER = 31990;
+declare const KIND_LONG_FORM_ARTICLE = 30023;
 declare const KIND_JOB_REQUEST_BASE = 5000;
 declare const KIND_JOB_RESULT_BASE = 6000;
 declare const KIND_JOB_FEEDBACK = 7000;
 declare const DEFAULT_KIND_OFFSET = 100;
+/** Discovery tag attached to elisym agent policy events (kind 30023). */
+declare const POLICY_T_TAG = "elisym-policy";
+/** d-tag prefix for policy events: full d-tag = `<prefix><type>` (e.g. `elisym-policy-tos`). */
+declare const POLICY_D_TAG_PREFIX = "elisym-policy-";
+/** Validation regex for policy `type` slug. Lowercase ASCII + hyphen, 1-32 chars, no leading/trailing hyphen. */
+declare const POLICY_TYPE_REGEX: RegExp;
 /** Default job request kind (5000 + 100). */
 declare const KIND_JOB_REQUEST: number;
 /** Default job result kind (6000 + 100). */
@@ -1160,6 +1264,12 @@ declare const LIMITS: {
     readonly MAX_DESCRIPTION_LENGTH: 500;
     readonly MAX_AGENT_NAME_LENGTH: 64;
     readonly MAX_CAPABILITY_LENGTH: 64;
+    readonly MAX_POLICY_CONTENT_LENGTH: 50000;
+    readonly MAX_POLICIES_PER_AGENT: 12;
+    readonly MAX_POLICY_TYPE_LENGTH: 32;
+    readonly MAX_POLICY_TITLE_LENGTH: 120;
+    readonly MAX_POLICY_SUMMARY_LENGTH: 280;
+    readonly MAX_POLICY_VERSION_LENGTH: 32;
 };
 
-export { type Agent, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
+export { type Agent, type AgentPolicy, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobErrorKind, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_LONG_FORM_ARTICLE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, POLICY_D_TAG_PREFIX, POLICY_TYPE_REGEX, POLICY_T_TAG, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, PoliciesService, type PolicyInput, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };

package/dist/index.d.ts

@@ -56,6 +56,37 @@ interface PaymentInfo {
     /** Display symbol (e.g. 'SOL', 'USDC'). */
     symbol?: string;
 }
+/**
+ * Legal/operational policy published by an agent (NIP-23 long-form article,
+ * kind 30023). One event per `(pubkey, type)` slot; replaceable by `d`-tag.
+ *
+ * `type` is open vocabulary - common values: `tos`, `privacy`, `refund`,
+ * `aup`, `sla`, `dpa`, `jurisdiction`. Validation regex `POLICY_TYPE_REGEX`.
+ */
+interface AgentPolicy {
+    type: string;
+    version: string;
+    title: string;
+    summary?: string;
+    /** Full markdown body. */
+    content: string;
+    /** NIP-19 `naddr` reference, e.g. for sharing or migration to dedicated kind. */
+    naddr: string;
+    /** Underlying NIP-23 d-tag (e.g. `elisym-policy-tos`). */
+    dTag: string;
+    /** Event `created_at` in unix seconds (NIP-23 spec: defaults to publication date). */
+    publishedAt: number;
+    eventId: string;
+    authorPubkey: string;
+}
+/** Input shape for `PoliciesService.publishPolicy`. */
+interface PolicyInput {
+    type: string;
+    version: string;
+    title: string;
+    summary?: string;
+    content: string;
+}
 /** Agent discovered from the network. */
 interface Agent {
     pubkey: string;
@@ -597,6 +628,33 @@ declare class PingService {
     sendPong(identity: ElisymIdentity, recipientPubkey: string, nonce: string): Promise<void>;
 }
 
+declare class PoliciesService {
+    private pool;
+    constructor(pool: NostrPool);
+    /**
+     * Fetch all elisym policies published by `pubkey`. Verifies signatures,
+     * dedupes by d-tag (latest `created_at` wins), and returns sorted by `type`
+     * for deterministic UI rendering.
+     *
+     * Returns `[]` on empty result. Network errors propagate to the caller.
+     */
+    fetchPolicies(pubkey: string): Promise<AgentPolicy[]>;
+    /**
+     * Publish a policy as a NIP-23 long-form article (kind 30023). Replaces any
+     * existing policy of the same `type` for this pubkey via the addressable
+     * `(kind, pubkey, d-tag)` slot.
+     */
+    publishPolicy(identity: ElisymIdentity, input: PolicyInput): Promise<{
+        eventId: string;
+        naddr: string;
+    }>;
+    /**
+     * Tombstone a policy by publishing an empty replacement under the same
+     * `(kind, pubkey, d-tag)` slot. Readers skip events with empty content.
+     */
+    deletePolicy(identity: ElisymIdentity, type: string): Promise<string>;
+}
+
 interface ElisymClientFullConfig extends ElisymClientConfig {
     payment?: PaymentStrategy;
     /** Custom upload URL for file uploads (defaults to nostr.build). */
@@ -608,11 +666,50 @@ declare class ElisymClient {
     readonly marketplace: MarketplaceService;
     readonly ping: PingService;
     readonly media: MediaService;
+    readonly policies: PoliciesService;
     readonly payment: PaymentStrategy;
     constructor(config?: ElisymClientFullConfig);
     close(): void;
 }
 
+/**
+ * Customer-facing error feedback that arrives via `subscribeToJobUpdates`'s
+ * `onError` callback can come from many places:
+ *
+ *   - The runtime's stable `Agent temporarily unavailable` string when the
+ *     LLM health gate refuses a job (preflight) or an in-flight skill
+ *     surfaced a billing/invalid signal.
+ *   - The runtime's `Internal processing error` sanitization mask for any
+ *     "<Provider> API error: ..." string that leaks out of an LLM call.
+ *   - Raw script-skill failures the runtime forwards as-is when the
+ *     message does not contain "API" - e.g. shell scripts that reach
+ *     Anthropic's `count_tokens` endpoint and exit 1 with the body in
+ *     stderr instead of using the canonical exit-42 contract.
+ *   - Generic transport errors (timeouts, "Provider returned an error",
+ *     rate-limit refusals, payment errors).
+ *
+ * Customers don't care which path produced the error - they care whether
+ * the agent is down (try later, payment recoverable) or something else
+ * went wrong (their input, their wallet, etc). This classifier collapses
+ * the first three categories into a single `agent-unavailable` kind so
+ * the UI can render one stable message regardless of how the underlying
+ * provider chose to surface the failure.
+ *
+ * Markers are kept as a permissive superset of every billing/auth phrase
+ * the CLI and skill scripts are known to emit. Adding a new marker is
+ * always safe; removing one risks classifying a real outage as `unknown`.
+ */
+type JobErrorKind = 'agent-unavailable' | 'unknown';
+/**
+ * Classify a customer-facing error string surfaced via
+ * `JobUpdateCallbacks.onError` into a stable kind the UI can branch on.
+ *
+ * Match is case-insensitive against the message text. Returns
+ * `agent-unavailable` for any known billing/auth/invalid-key signal;
+ * `unknown` for everything else (timeouts, validation errors, transport).
+ */
+declare function classifyJobError(message: string): JobErrorKind;
+
 declare class SolanaPaymentStrategy implements PaymentStrategy {
     readonly chain = "solana";
     calculateFee(amount: number, config: ProtocolConfigInput): number;
@@ -1092,10 +1189,17 @@ declare function makeCensor(): (value: unknown, path: string[]) => string;
 
 declare const RELAYS: string[];
 declare const KIND_APP_HANDLER = 31990;
+declare const KIND_LONG_FORM_ARTICLE = 30023;
 declare const KIND_JOB_REQUEST_BASE = 5000;
 declare const KIND_JOB_RESULT_BASE = 6000;
 declare const KIND_JOB_FEEDBACK = 7000;
 declare const DEFAULT_KIND_OFFSET = 100;
+/** Discovery tag attached to elisym agent policy events (kind 30023). */
+declare const POLICY_T_TAG = "elisym-policy";
+/** d-tag prefix for policy events: full d-tag = `<prefix><type>` (e.g. `elisym-policy-tos`). */
+declare const POLICY_D_TAG_PREFIX = "elisym-policy-";
+/** Validation regex for policy `type` slug. Lowercase ASCII + hyphen, 1-32 chars, no leading/trailing hyphen. */
+declare const POLICY_TYPE_REGEX: RegExp;
 /** Default job request kind (5000 + 100). */
 declare const KIND_JOB_REQUEST: number;
 /** Default job result kind (6000 + 100). */
@@ -1160,6 +1264,12 @@ declare const LIMITS: {
     readonly MAX_DESCRIPTION_LENGTH: 500;
     readonly MAX_AGENT_NAME_LENGTH: 64;
     readonly MAX_CAPABILITY_LENGTH: 64;
+    readonly MAX_POLICY_CONTENT_LENGTH: 50000;
+    readonly MAX_POLICIES_PER_AGENT: 12;
+    readonly MAX_POLICY_TYPE_LENGTH: 32;
+    readonly MAX_POLICY_TITLE_LENGTH: 120;
+    readonly MAX_POLICY_SUMMARY_LENGTH: 280;
+    readonly MAX_POLICY_VERSION_LENGTH: 32;
 };
 
-export { type Agent, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
+export { type Agent, type AgentPolicy, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobErrorKind, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_LONG_FORM_ARTICLE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, POLICY_D_TAG_PREFIX, POLICY_TYPE_REGEX, POLICY_T_TAG, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, PoliciesService, type PolicyInput, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };

package/dist/index.js

@@ -16,10 +16,14 @@ var RELAYS = [
   "wss://relay.snort.social"
 ];
 var KIND_APP_HANDLER = 31990;
+var KIND_LONG_FORM_ARTICLE = 30023;
 var KIND_JOB_REQUEST_BASE = 5e3;
 var KIND_JOB_RESULT_BASE = 6e3;
 var KIND_JOB_FEEDBACK = 7e3;
 var DEFAULT_KIND_OFFSET = 100;
+var POLICY_T_TAG = "elisym-policy";
+var POLICY_D_TAG_PREFIX = "elisym-policy-";
+var POLICY_TYPE_REGEX = /^[a-z0-9](?:[a-z0-9-]{0,30}[a-z0-9])?$/;
 var KIND_JOB_REQUEST = KIND_JOB_REQUEST_BASE + DEFAULT_KIND_OFFSET;
 var KIND_JOB_RESULT = KIND_JOB_RESULT_BASE + DEFAULT_KIND_OFFSET;
 function jobRequestKind(offset) {
@@ -72,7 +76,13 @@ var LIMITS = {
   MAX_CAPABILITIES: 20,
   MAX_DESCRIPTION_LENGTH: 500,
   MAX_AGENT_NAME_LENGTH: 64,
-  MAX_CAPABILITY_LENGTH: 64
+  MAX_CAPABILITY_LENGTH: 64,
+  MAX_POLICY_CONTENT_LENGTH: 5e4,
+  MAX_POLICIES_PER_AGENT: 12,
+  MAX_POLICY_TYPE_LENGTH: 32,
+  MAX_POLICY_TITLE_LENGTH: 120,
+  MAX_POLICY_SUMMARY_LENGTH: 280,
+  MAX_POLICY_VERSION_LENGTH: 32
 };
 function getConfigDecoder() {
   return getStructDecoder([
@@ -2700,6 +2710,184 @@ var PingService = class _PingService {
     await this.pool.publishAll(pongEvent);
   }
 };
+function dTagFor(type) {
+  return `${POLICY_D_TAG_PREFIX}${type}`;
+}
+function validatePolicyInput(input) {
+  if (!POLICY_TYPE_REGEX.test(input.type)) {
+    throw new Error(
+      `Invalid policy type "${input.type}". Must be lowercase ASCII + hyphen, 1-${LIMITS.MAX_POLICY_TYPE_LENGTH} chars, no leading/trailing hyphen.`
+    );
+  }
+  if (input.version.length === 0 || input.version.length > LIMITS.MAX_POLICY_VERSION_LENGTH) {
+    throw new Error(
+      `Policy version must be 1-${LIMITS.MAX_POLICY_VERSION_LENGTH} chars (got ${input.version.length}).`
+    );
+  }
+  if (input.title.length === 0 || input.title.length > LIMITS.MAX_POLICY_TITLE_LENGTH) {
+    throw new Error(
+      `Policy title must be 1-${LIMITS.MAX_POLICY_TITLE_LENGTH} chars (got ${input.title.length}).`
+    );
+  }
+  if (input.summary !== void 0 && input.summary.length > LIMITS.MAX_POLICY_SUMMARY_LENGTH) {
+    throw new Error(
+      `Policy summary too long: ${input.summary.length} chars (max ${LIMITS.MAX_POLICY_SUMMARY_LENGTH}).`
+    );
+  }
+  if (input.content.length === 0) {
+    throw new Error("Policy content cannot be empty.");
+  }
+  if (input.content.length > LIMITS.MAX_POLICY_CONTENT_LENGTH) {
+    throw new Error(
+      `Policy content too long: ${input.content.length} chars (max ${LIMITS.MAX_POLICY_CONTENT_LENGTH}).`
+    );
+  }
+}
+function parsePolicyEvent(event) {
+  if (!verifyEvent(event)) {
+    return null;
+  }
+  if (event.kind !== KIND_LONG_FORM_ARTICLE) {
+    return null;
+  }
+  if (!event.content || event.content.length > LIMITS.MAX_POLICY_CONTENT_LENGTH) {
+    return null;
+  }
+  const dTag = event.tags.find((tag) => tag[0] === "d")?.[1];
+  if (!dTag || !dTag.startsWith(POLICY_D_TAG_PREFIX)) {
+    return null;
+  }
+  const type = event.tags.find((tag) => tag[0] === "policy_type")?.[1];
+  if (!type || !POLICY_TYPE_REGEX.test(type)) {
+    return null;
+  }
+  const version = event.tags.find((tag) => tag[0] === "policy_version")?.[1];
+  if (!version || version.length > LIMITS.MAX_POLICY_VERSION_LENGTH) {
+    return null;
+  }
+  const title = event.tags.find((tag) => tag[0] === "title")?.[1];
+  if (!title || title.length > LIMITS.MAX_POLICY_TITLE_LENGTH) {
+    return null;
+  }
+  const summaryTag = event.tags.find((tag) => tag[0] === "summary")?.[1];
+  const summary = summaryTag !== void 0 && summaryTag.length <= LIMITS.MAX_POLICY_SUMMARY_LENGTH ? summaryTag : void 0;
+  const naddr = nip19.naddrEncode({
+    kind: KIND_LONG_FORM_ARTICLE,
+    pubkey: event.pubkey,
+    identifier: dTag,
+    relays: []
+  });
+  return {
+    type,
+    version,
+    title,
+    summary,
+    content: event.content,
+    naddr,
+    dTag,
+    publishedAt: event.created_at,
+    eventId: event.id,
+    authorPubkey: event.pubkey
+  };
+}
+var PoliciesService = class {
+  constructor(pool) {
+    this.pool = pool;
+  }
+  /**
+   * Fetch all elisym policies published by `pubkey`. Verifies signatures,
+   * dedupes by d-tag (latest `created_at` wins), and returns sorted by `type`
+   * for deterministic UI rendering.
+   *
+   * Returns `[]` on empty result. Network errors propagate to the caller.
+   */
+  async fetchPolicies(pubkey) {
+    const filter = {
+      kinds: [KIND_LONG_FORM_ARTICLE],
+      authors: [pubkey],
+      "#t": [POLICY_T_TAG]
+    };
+    const events = await this.pool.querySync(filter);
+    const latestByDTag = /* @__PURE__ */ new Map();
+    for (const event of events) {
+      const dTag = event.tags.find((tag) => tag[0] === "d")?.[1] ?? "";
+      const prev = latestByDTag.get(dTag);
+      if (!prev || event.created_at > prev.created_at) {
+        latestByDTag.set(dTag, event);
+      }
+    }
+    const policies = [];
+    for (const event of latestByDTag.values()) {
+      const parsed = parsePolicyEvent(event);
+      if (parsed) {
+        policies.push(parsed);
+      }
+    }
+    policies.sort((a, b) => a.type.localeCompare(b.type));
+    return policies;
+  }
+  /**
+   * Publish a policy as a NIP-23 long-form article (kind 30023). Replaces any
+   * existing policy of the same `type` for this pubkey via the addressable
+   * `(kind, pubkey, d-tag)` slot.
+   */
+  async publishPolicy(identity, input) {
+    validatePolicyInput(input);
+    const dTag = dTagFor(input.type);
+    const tags = [
+      ["d", dTag],
+      ["t", POLICY_T_TAG],
+      ["title", input.title],
+      ["policy_type", input.type],
+      ["policy_version", input.version]
+    ];
+    if (input.summary) {
+      tags.push(["summary", input.summary]);
+    }
+    const event = finalizeEvent(
+      {
+        kind: KIND_LONG_FORM_ARTICLE,
+        created_at: Math.floor(Date.now() / 1e3),
+        tags,
+        content: input.content
+      },
+      identity.secretKey
+    );
+    await this.pool.publishAll(event);
+    const naddr = nip19.naddrEncode({
+      kind: KIND_LONG_FORM_ARTICLE,
+      pubkey: event.pubkey,
+      identifier: dTag,
+      relays: []
+    });
+    return { eventId: event.id, naddr };
+  }
+  /**
+   * Tombstone a policy by publishing an empty replacement under the same
+   * `(kind, pubkey, d-tag)` slot. Readers skip events with empty content.
+   */
+  async deletePolicy(identity, type) {
+    if (!POLICY_TYPE_REGEX.test(type)) {
+      throw new Error(`Invalid policy type "${type}".`);
+    }
+    const dTag = dTagFor(type);
+    const event = finalizeEvent(
+      {
+        kind: KIND_LONG_FORM_ARTICLE,
+        created_at: Math.floor(Date.now() / 1e3),
+        tags: [
+          ["d", dTag],
+          ["t", POLICY_T_TAG],
+          ["policy_type", type]
+        ],
+        content: ""
+      },
+      identity.secretKey
+    );
+    await this.pool.publishAll(event);
+    return event.id;
+  }
+};
 
 // src/primitives/bounded-set.ts
 var BoundedSet = class {
@@ -3008,6 +3196,7 @@ var ElisymClient = class {
   marketplace;
   ping;
   media;
+  policies;
   payment;
   constructor(config = {}) {
     this.pool = new NostrPool(config.relays ?? RELAYS);
@@ -3015,12 +3204,39 @@ var ElisymClient = class {
     this.marketplace = new MarketplaceService(this.pool);
     this.ping = new PingService(this.pool);
     this.media = new MediaService(config.uploadUrl);
+    this.policies = new PoliciesService(this.pool);
     this.payment = config.payment ?? new SolanaPaymentStrategy();
   }
   close() {
     this.pool.close();
   }
 };
+
+// src/services/jobErrors.ts
+var AGENT_UNAVAILABLE_MARKERS = [
+  "agent temporarily unavailable",
+  "internal processing error",
+  "invalid x-api-key",
+  "invalid api key",
+  "invalid_api_key",
+  "x-api-key",
+  "credit balance",
+  "billing",
+  "insufficient",
+  "insufficient_quota",
+  "authentication_error",
+  "unauthorized",
+  "unauthenticated"
+];
+function classifyJobError(message) {
+  const lower = message.toLowerCase();
+  for (const marker of AGENT_UNAVAILABLE_MARKERS) {
+    if (lower.includes(marker)) {
+      return "agent-unavailable";
+    }
+  }
+  return "unknown";
+}
 var DEFAULT_COMPUTE_UNIT_LIMIT2 = 2e5;
 var DEFAULT_PRIORITY_FEE_PERCENTILE2 = 75;
 var BASE_FEE_LAMPORTS_PER_SIGNATURE = 5000n;
@@ -3546,6 +3762,6 @@ function makeCensor() {
   };
 }
 
-export { BoundedSet, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, ElisymIdentity, GlobalConfigSchema, INPUT_REDACT_PATHS, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, NostrPool, PROTOCOL_PROGRAM_ID_DEVNET, PaymentRequestSchema, PingService, RELAYS, SECRET_REDACT_PATHS, SessionSpendLimitEntrySchema, SolanaPaymentStrategy, USDC_SOLANA_DEVNET, aggregateNetworkStats, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatAssetAmount, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveAssetFromPaymentRequest, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
+export { BoundedSet, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, ElisymIdentity, GlobalConfigSchema, INPUT_REDACT_PATHS, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_LONG_FORM_ARTICLE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, NostrPool, POLICY_D_TAG_PREFIX, POLICY_TYPE_REGEX, POLICY_T_TAG, PROTOCOL_PROGRAM_ID_DEVNET, PaymentRequestSchema, PingService, PoliciesService, RELAYS, SECRET_REDACT_PATHS, SessionSpendLimitEntrySchema, SolanaPaymentStrategy, USDC_SOLANA_DEVNET, aggregateNetworkStats, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatAssetAmount, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveAssetFromPaymentRequest, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map