@elisym/sdk 0.18.1 → 0.20.0

package/dist/index.d.cts

@@ -56,6 +56,37 @@ interface PaymentInfo {
     /** Display symbol (e.g. 'SOL', 'USDC'). */
     symbol?: string;
 }
+/**
+ * Legal/operational policy published by an agent (NIP-23 long-form article,
+ * kind 30023). One event per `(pubkey, type)` slot; replaceable by `d`-tag.
+ *
+ * `type` is open vocabulary - common values: `tos`, `privacy`, `refund`,
+ * `aup`, `sla`, `dpa`, `jurisdiction`. Validation regex `POLICY_TYPE_REGEX`.
+ */
+interface AgentPolicy {
+    type: string;
+    version: string;
+    title: string;
+    summary?: string;
+    /** Full markdown body. */
+    content: string;
+    /** NIP-19 `naddr` reference, e.g. for sharing or migration to dedicated kind. */
+    naddr: string;
+    /** Underlying NIP-23 d-tag (e.g. `elisym-policy-tos`). */
+    dTag: string;
+    /** Event `created_at` in unix seconds (NIP-23 spec: defaults to publication date). */
+    publishedAt: number;
+    eventId: string;
+    authorPubkey: string;
+}
+/** Input shape for `PoliciesService.publishPolicy`. */
+interface PolicyInput {
+    type: string;
+    version: string;
+    title: string;
+    summary?: string;
+    content: string;
+}
 /** Agent discovered from the network. */
 interface Agent {
     pubkey: string;
@@ -597,6 +628,33 @@ declare class PingService {
     sendPong(identity: ElisymIdentity, recipientPubkey: string, nonce: string): Promise<void>;
 }
 
+declare class PoliciesService {
+    private pool;
+    constructor(pool: NostrPool);
+    /**
+     * Fetch all elisym policies published by `pubkey`. Verifies signatures,
+     * dedupes by d-tag (latest `created_at` wins), and returns sorted by `type`
+     * for deterministic UI rendering.
+     *
+     * Returns `[]` on empty result. Network errors propagate to the caller.
+     */
+    fetchPolicies(pubkey: string): Promise<AgentPolicy[]>;
+    /**
+     * Publish a policy as a NIP-23 long-form article (kind 30023). Replaces any
+     * existing policy of the same `type` for this pubkey via the addressable
+     * `(kind, pubkey, d-tag)` slot.
+     */
+    publishPolicy(identity: ElisymIdentity, input: PolicyInput): Promise<{
+        eventId: string;
+        naddr: string;
+    }>;
+    /**
+     * Tombstone a policy by publishing an empty replacement under the same
+     * `(kind, pubkey, d-tag)` slot. Readers skip events with empty content.
+     */
+    deletePolicy(identity: ElisymIdentity, type: string): Promise<string>;
+}
+
 interface ElisymClientFullConfig extends ElisymClientConfig {
     payment?: PaymentStrategy;
     /** Custom upload URL for file uploads (defaults to nostr.build). */
@@ -608,6 +666,7 @@ declare class ElisymClient {
     readonly marketplace: MarketplaceService;
     readonly ping: PingService;
     readonly media: MediaService;
+    readonly policies: PoliciesService;
     readonly payment: PaymentStrategy;
     constructor(config?: ElisymClientFullConfig);
     close(): void;
@@ -1130,10 +1189,17 @@ declare function makeCensor(): (value: unknown, path: string[]) => string;
 
 declare const RELAYS: string[];
 declare const KIND_APP_HANDLER = 31990;
+declare const KIND_LONG_FORM_ARTICLE = 30023;
 declare const KIND_JOB_REQUEST_BASE = 5000;
 declare const KIND_JOB_RESULT_BASE = 6000;
 declare const KIND_JOB_FEEDBACK = 7000;
 declare const DEFAULT_KIND_OFFSET = 100;
+/** Discovery tag attached to elisym agent policy events (kind 30023). */
+declare const POLICY_T_TAG = "elisym-policy";
+/** d-tag prefix for policy events: full d-tag = `<prefix><type>` (e.g. `elisym-policy-tos`). */
+declare const POLICY_D_TAG_PREFIX = "elisym-policy-";
+/** Validation regex for policy `type` slug. Lowercase ASCII + hyphen, 1-32 chars, no leading/trailing hyphen. */
+declare const POLICY_TYPE_REGEX: RegExp;
 /** Default job request kind (5000 + 100). */
 declare const KIND_JOB_REQUEST: number;
 /** Default job result kind (6000 + 100). */
@@ -1198,6 +1264,12 @@ declare const LIMITS: {
     readonly MAX_DESCRIPTION_LENGTH: 500;
     readonly MAX_AGENT_NAME_LENGTH: 64;
     readonly MAX_CAPABILITY_LENGTH: 64;
+    readonly MAX_POLICY_CONTENT_LENGTH: 50000;
+    readonly MAX_POLICIES_PER_AGENT: 12;
+    readonly MAX_POLICY_TYPE_LENGTH: 32;
+    readonly MAX_POLICY_TITLE_LENGTH: 120;
+    readonly MAX_POLICY_SUMMARY_LENGTH: 280;
+    readonly MAX_POLICY_VERSION_LENGTH: 32;
 };
 
-export { type Agent, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobErrorKind, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
+export { type Agent, type AgentPolicy, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobErrorKind, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_LONG_FORM_ARTICLE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, POLICY_D_TAG_PREFIX, POLICY_TYPE_REGEX, POLICY_T_TAG, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, PoliciesService, type PolicyInput, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };

package/dist/index.d.ts

@@ -56,6 +56,37 @@ interface PaymentInfo {
     /** Display symbol (e.g. 'SOL', 'USDC'). */
     symbol?: string;
 }
+/**
+ * Legal/operational policy published by an agent (NIP-23 long-form article,
+ * kind 30023). One event per `(pubkey, type)` slot; replaceable by `d`-tag.
+ *
+ * `type` is open vocabulary - common values: `tos`, `privacy`, `refund`,
+ * `aup`, `sla`, `dpa`, `jurisdiction`. Validation regex `POLICY_TYPE_REGEX`.
+ */
+interface AgentPolicy {
+    type: string;
+    version: string;
+    title: string;
+    summary?: string;
+    /** Full markdown body. */
+    content: string;
+    /** NIP-19 `naddr` reference, e.g. for sharing or migration to dedicated kind. */
+    naddr: string;
+    /** Underlying NIP-23 d-tag (e.g. `elisym-policy-tos`). */
+    dTag: string;
+    /** Event `created_at` in unix seconds (NIP-23 spec: defaults to publication date). */
+    publishedAt: number;
+    eventId: string;
+    authorPubkey: string;
+}
+/** Input shape for `PoliciesService.publishPolicy`. */
+interface PolicyInput {
+    type: string;
+    version: string;
+    title: string;
+    summary?: string;
+    content: string;
+}
 /** Agent discovered from the network. */
 interface Agent {
     pubkey: string;
@@ -597,6 +628,33 @@ declare class PingService {
     sendPong(identity: ElisymIdentity, recipientPubkey: string, nonce: string): Promise<void>;
 }
 
+declare class PoliciesService {
+    private pool;
+    constructor(pool: NostrPool);
+    /**
+     * Fetch all elisym policies published by `pubkey`. Verifies signatures,
+     * dedupes by d-tag (latest `created_at` wins), and returns sorted by `type`
+     * for deterministic UI rendering.
+     *
+     * Returns `[]` on empty result. Network errors propagate to the caller.
+     */
+    fetchPolicies(pubkey: string): Promise<AgentPolicy[]>;
+    /**
+     * Publish a policy as a NIP-23 long-form article (kind 30023). Replaces any
+     * existing policy of the same `type` for this pubkey via the addressable
+     * `(kind, pubkey, d-tag)` slot.
+     */
+    publishPolicy(identity: ElisymIdentity, input: PolicyInput): Promise<{
+        eventId: string;
+        naddr: string;
+    }>;
+    /**
+     * Tombstone a policy by publishing an empty replacement under the same
+     * `(kind, pubkey, d-tag)` slot. Readers skip events with empty content.
+     */
+    deletePolicy(identity: ElisymIdentity, type: string): Promise<string>;
+}
+
 interface ElisymClientFullConfig extends ElisymClientConfig {
     payment?: PaymentStrategy;
     /** Custom upload URL for file uploads (defaults to nostr.build). */
@@ -608,6 +666,7 @@ declare class ElisymClient {
     readonly marketplace: MarketplaceService;
     readonly ping: PingService;
     readonly media: MediaService;
+    readonly policies: PoliciesService;
     readonly payment: PaymentStrategy;
     constructor(config?: ElisymClientFullConfig);
     close(): void;
@@ -1130,10 +1189,17 @@ declare function makeCensor(): (value: unknown, path: string[]) => string;
 
 declare const RELAYS: string[];
 declare const KIND_APP_HANDLER = 31990;
+declare const KIND_LONG_FORM_ARTICLE = 30023;
 declare const KIND_JOB_REQUEST_BASE = 5000;
 declare const KIND_JOB_RESULT_BASE = 6000;
 declare const KIND_JOB_FEEDBACK = 7000;
 declare const DEFAULT_KIND_OFFSET = 100;
+/** Discovery tag attached to elisym agent policy events (kind 30023). */
+declare const POLICY_T_TAG = "elisym-policy";
+/** d-tag prefix for policy events: full d-tag = `<prefix><type>` (e.g. `elisym-policy-tos`). */
+declare const POLICY_D_TAG_PREFIX = "elisym-policy-";
+/** Validation regex for policy `type` slug. Lowercase ASCII + hyphen, 1-32 chars, no leading/trailing hyphen. */
+declare const POLICY_TYPE_REGEX: RegExp;
 /** Default job request kind (5000 + 100). */
 declare const KIND_JOB_REQUEST: number;
 /** Default job result kind (6000 + 100). */
@@ -1198,6 +1264,12 @@ declare const LIMITS: {
     readonly MAX_DESCRIPTION_LENGTH: 500;
     readonly MAX_AGENT_NAME_LENGTH: 64;
     readonly MAX_CAPABILITY_LENGTH: 64;
+    readonly MAX_POLICY_CONTENT_LENGTH: 50000;
+    readonly MAX_POLICIES_PER_AGENT: 12;
+    readonly MAX_POLICY_TYPE_LENGTH: 32;
+    readonly MAX_POLICY_TITLE_LENGTH: 120;
+    readonly MAX_POLICY_SUMMARY_LENGTH: 280;
+    readonly MAX_POLICY_VERSION_LENGTH: 32;
 };
 
-export { type Agent, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobErrorKind, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
+export { type Agent, type AgentPolicy, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobErrorKind, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_LONG_FORM_ARTICLE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, POLICY_D_TAG_PREFIX, POLICY_TYPE_REGEX, POLICY_T_TAG, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, PoliciesService, type PolicyInput, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };

package/dist/index.js

@@ -16,10 +16,14 @@ var RELAYS = [
   "wss://relay.snort.social"
 ];
 var KIND_APP_HANDLER = 31990;
+var KIND_LONG_FORM_ARTICLE = 30023;
 var KIND_JOB_REQUEST_BASE = 5e3;
 var KIND_JOB_RESULT_BASE = 6e3;
 var KIND_JOB_FEEDBACK = 7e3;
 var DEFAULT_KIND_OFFSET = 100;
+var POLICY_T_TAG = "elisym-policy";
+var POLICY_D_TAG_PREFIX = "elisym-policy-";
+var POLICY_TYPE_REGEX = /^[a-z0-9](?:[a-z0-9-]{0,30}[a-z0-9])?$/;
 var KIND_JOB_REQUEST = KIND_JOB_REQUEST_BASE + DEFAULT_KIND_OFFSET;
 var KIND_JOB_RESULT = KIND_JOB_RESULT_BASE + DEFAULT_KIND_OFFSET;
 function jobRequestKind(offset) {
@@ -72,7 +76,13 @@ var LIMITS = {
   MAX_CAPABILITIES: 20,
   MAX_DESCRIPTION_LENGTH: 500,
   MAX_AGENT_NAME_LENGTH: 64,
-  MAX_CAPABILITY_LENGTH: 64
+  MAX_CAPABILITY_LENGTH: 64,
+  MAX_POLICY_CONTENT_LENGTH: 5e4,
+  MAX_POLICIES_PER_AGENT: 12,
+  MAX_POLICY_TYPE_LENGTH: 32,
+  MAX_POLICY_TITLE_LENGTH: 120,
+  MAX_POLICY_SUMMARY_LENGTH: 280,
+  MAX_POLICY_VERSION_LENGTH: 32
 };
 function getConfigDecoder() {
   return getStructDecoder([
@@ -2700,6 +2710,184 @@ var PingService = class _PingService {
     await this.pool.publishAll(pongEvent);
   }
 };
+function dTagFor(type) {
+  return `${POLICY_D_TAG_PREFIX}${type}`;
+}
+function validatePolicyInput(input) {
+  if (!POLICY_TYPE_REGEX.test(input.type)) {
+    throw new Error(
+      `Invalid policy type "${input.type}". Must be lowercase ASCII + hyphen, 1-${LIMITS.MAX_POLICY_TYPE_LENGTH} chars, no leading/trailing hyphen.`
+    );
+  }
+  if (input.version.length === 0 || input.version.length > LIMITS.MAX_POLICY_VERSION_LENGTH) {
+    throw new Error(
+      `Policy version must be 1-${LIMITS.MAX_POLICY_VERSION_LENGTH} chars (got ${input.version.length}).`
+    );
+  }
+  if (input.title.length === 0 || input.title.length > LIMITS.MAX_POLICY_TITLE_LENGTH) {
+    throw new Error(
+      `Policy title must be 1-${LIMITS.MAX_POLICY_TITLE_LENGTH} chars (got ${input.title.length}).`
+    );
+  }
+  if (input.summary !== void 0 && input.summary.length > LIMITS.MAX_POLICY_SUMMARY_LENGTH) {
+    throw new Error(
+      `Policy summary too long: ${input.summary.length} chars (max ${LIMITS.MAX_POLICY_SUMMARY_LENGTH}).`
+    );
+  }
+  if (input.content.length === 0) {
+    throw new Error("Policy content cannot be empty.");
+  }
+  if (input.content.length > LIMITS.MAX_POLICY_CONTENT_LENGTH) {
+    throw new Error(
+      `Policy content too long: ${input.content.length} chars (max ${LIMITS.MAX_POLICY_CONTENT_LENGTH}).`
+    );
+  }
+}
+function parsePolicyEvent(event) {
+  if (!verifyEvent(event)) {
+    return null;
+  }
+  if (event.kind !== KIND_LONG_FORM_ARTICLE) {
+    return null;
+  }
+  if (!event.content || event.content.length > LIMITS.MAX_POLICY_CONTENT_LENGTH) {
+    return null;
+  }
+  const dTag = event.tags.find((tag) => tag[0] === "d")?.[1];
+  if (!dTag || !dTag.startsWith(POLICY_D_TAG_PREFIX)) {
+    return null;
+  }
+  const type = event.tags.find((tag) => tag[0] === "policy_type")?.[1];
+  if (!type || !POLICY_TYPE_REGEX.test(type)) {
+    return null;
+  }
+  const version = event.tags.find((tag) => tag[0] === "policy_version")?.[1];
+  if (!version || version.length > LIMITS.MAX_POLICY_VERSION_LENGTH) {
+    return null;
+  }
+  const title = event.tags.find((tag) => tag[0] === "title")?.[1];
+  if (!title || title.length > LIMITS.MAX_POLICY_TITLE_LENGTH) {
+    return null;
+  }
+  const summaryTag = event.tags.find((tag) => tag[0] === "summary")?.[1];
+  const summary = summaryTag !== void 0 && summaryTag.length <= LIMITS.MAX_POLICY_SUMMARY_LENGTH ? summaryTag : void 0;
+  const naddr = nip19.naddrEncode({
+    kind: KIND_LONG_FORM_ARTICLE,
+    pubkey: event.pubkey,
+    identifier: dTag,
+    relays: []
+  });
+  return {
+    type,
+    version,
+    title,
+    summary,
+    content: event.content,
+    naddr,
+    dTag,
+    publishedAt: event.created_at,
+    eventId: event.id,
+    authorPubkey: event.pubkey
+  };
+}
+var PoliciesService = class {
+  constructor(pool) {
+    this.pool = pool;
+  }
+  /**
+   * Fetch all elisym policies published by `pubkey`. Verifies signatures,
+   * dedupes by d-tag (latest `created_at` wins), and returns sorted by `type`
+   * for deterministic UI rendering.
+   *
+   * Returns `[]` on empty result. Network errors propagate to the caller.
+   */
+  async fetchPolicies(pubkey) {
+    const filter = {
+      kinds: [KIND_LONG_FORM_ARTICLE],
+      authors: [pubkey],
+      "#t": [POLICY_T_TAG]
+    };
+    const events = await this.pool.querySync(filter);
+    const latestByDTag = /* @__PURE__ */ new Map();
+    for (const event of events) {
+      const dTag = event.tags.find((tag) => tag[0] === "d")?.[1] ?? "";
+      const prev = latestByDTag.get(dTag);
+      if (!prev || event.created_at > prev.created_at) {
+        latestByDTag.set(dTag, event);
+      }
+    }
+    const policies = [];
+    for (const event of latestByDTag.values()) {
+      const parsed = parsePolicyEvent(event);
+      if (parsed) {
+        policies.push(parsed);
+      }
+    }
+    policies.sort((a, b) => a.type.localeCompare(b.type));
+    return policies;
+  }
+  /**
+   * Publish a policy as a NIP-23 long-form article (kind 30023). Replaces any
+   * existing policy of the same `type` for this pubkey via the addressable
+   * `(kind, pubkey, d-tag)` slot.
+   */
+  async publishPolicy(identity, input) {
+    validatePolicyInput(input);
+    const dTag = dTagFor(input.type);
+    const tags = [
+      ["d", dTag],
+      ["t", POLICY_T_TAG],
+      ["title", input.title],
+      ["policy_type", input.type],
+      ["policy_version", input.version]
+    ];
+    if (input.summary) {
+      tags.push(["summary", input.summary]);
+    }
+    const event = finalizeEvent(
+      {
+        kind: KIND_LONG_FORM_ARTICLE,
+        created_at: Math.floor(Date.now() / 1e3),
+        tags,
+        content: input.content
+      },
+      identity.secretKey
+    );
+    await this.pool.publishAll(event);
+    const naddr = nip19.naddrEncode({
+      kind: KIND_LONG_FORM_ARTICLE,
+      pubkey: event.pubkey,
+      identifier: dTag,
+      relays: []
+    });
+    return { eventId: event.id, naddr };
+  }
+  /**
+   * Tombstone a policy by publishing an empty replacement under the same
+   * `(kind, pubkey, d-tag)` slot. Readers skip events with empty content.
+   */
+  async deletePolicy(identity, type) {
+    if (!POLICY_TYPE_REGEX.test(type)) {
+      throw new Error(`Invalid policy type "${type}".`);
+    }
+    const dTag = dTagFor(type);
+    const event = finalizeEvent(
+      {
+        kind: KIND_LONG_FORM_ARTICLE,
+        created_at: Math.floor(Date.now() / 1e3),
+        tags: [
+          ["d", dTag],
+          ["t", POLICY_T_TAG],
+          ["policy_type", type]
+        ],
+        content: ""
+      },
+      identity.secretKey
+    );
+    await this.pool.publishAll(event);
+    return event.id;
+  }
+};
 
 // src/primitives/bounded-set.ts
 var BoundedSet = class {
@@ -3008,6 +3196,7 @@ var ElisymClient = class {
   marketplace;
   ping;
   media;
+  policies;
   payment;
   constructor(config = {}) {
     this.pool = new NostrPool(config.relays ?? RELAYS);
@@ -3015,6 +3204,7 @@ var ElisymClient = class {
     this.marketplace = new MarketplaceService(this.pool);
     this.ping = new PingService(this.pool);
     this.media = new MediaService(config.uploadUrl);
+    this.policies = new PoliciesService(this.pool);
     this.payment = config.payment ?? new SolanaPaymentStrategy();
   }
   close() {
@@ -3572,6 +3762,6 @@ function makeCensor() {
   };
 }
 
-export { BoundedSet, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, ElisymIdentity, GlobalConfigSchema, INPUT_REDACT_PATHS, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, NostrPool, PROTOCOL_PROGRAM_ID_DEVNET, PaymentRequestSchema, PingService, RELAYS, SECRET_REDACT_PATHS, SessionSpendLimitEntrySchema, SolanaPaymentStrategy, USDC_SOLANA_DEVNET, aggregateNetworkStats, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatAssetAmount, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveAssetFromPaymentRequest, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
+export { BoundedSet, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, ElisymIdentity, GlobalConfigSchema, INPUT_REDACT_PATHS, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_LONG_FORM_ARTICLE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, NostrPool, POLICY_D_TAG_PREFIX, POLICY_TYPE_REGEX, POLICY_T_TAG, PROTOCOL_PROGRAM_ID_DEVNET, PaymentRequestSchema, PingService, PoliciesService, RELAYS, SECRET_REDACT_PATHS, SessionSpendLimitEntrySchema, SolanaPaymentStrategy, USDC_SOLANA_DEVNET, aggregateNetworkStats, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatAssetAmount, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveAssetFromPaymentRequest, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map