@elisym/sdk 0.21.1 → 0.23.0

package/dist/index.d.cts

@@ -3,7 +3,7 @@ import { Filter, Event } from 'nostr-tools';
 import { A as Asset } from './assets-C-nzSYD4.cjs';
 export { C as Chain, K as KNOWN_ASSETS, N as NATIVE_SOL, U as USDC_SOLANA_DEVNET, a as assetByKey, b as assetKey, f as formatAssetAmount, p as parseAssetAmount, r as resolveAssetFromPaymentRequest, c as resolveKnownAsset } from './assets-C-nzSYD4.cjs';
 import { z } from 'zod';
-export { G as GlobalConfig, a as GlobalConfigSchema, S as SessionSpendLimitEntry, b as SessionSpendLimitEntrySchema } from './global-schema-CddHP2nk.cjs';
+export { G as GlobalConfig, a as GlobalConfigSchema, S as SessionSpendLimitEntry, b as SessionSpendLimitEntrySchema } from './global-schema-BsVFDtkt.cjs';
 export { R as RateLimitDecision, S as SlidingWindowLimiter, a as SlidingWindowLimiterOptions, c as createSlidingWindowLimiter } from './rateLimiter-CoEmZkSX.cjs';
 
 declare class ElisymIdentity {
@@ -151,6 +151,13 @@ interface JobUpdateCallbacks {
     onFeedback?: (status: string, amount?: number, paymentRequest?: string, senderPubkey?: string) => void;
     onResult?: (content: string, eventId: string) => void;
     onError?: (error: string) => void;
+    /**
+     * Fired when the result wait window expires without a result - a distinct,
+     * structured signal from `onError`. When omitted, the timeout is delivered
+     * through `onError` as a "Timed out waiting..." string for backwards
+     * compatibility.
+     */
+    onTimeout?: (timeoutMs: number) => void;
 }
 interface JobSubscriptionOptions {
     jobEventId: string;
@@ -709,6 +716,17 @@ type JobErrorKind = 'agent-unavailable' | 'unknown';
  * `unknown` for everything else (timeouts, validation errors, transport).
  */
 declare function classifyJobError(message: string): JobErrorKind;
+/**
+ * Signalled via `JobUpdateCallbacks.onTimeout` (and thrown by helpers that
+ * await a result) when the wait window expires without a result. This is a
+ * distinct, structured signal from a genuine provider/transport error, so
+ * callers can branch on the type instead of substring-matching "timed out"
+ * on a free-form error message (which masks real errors that happen to
+ * mention a timeout).
+ */
+declare class JobWaitTimeoutError extends Error {
+    constructor(timeoutMs?: number);
+}
 
 declare class SolanaPaymentStrategy implements PaymentStrategy {
     readonly chain = "solana";
@@ -1035,7 +1053,16 @@ declare function parsePaymentRequest(input: string, options?: ParseOptions): Par
  */
 type QuickVerifyReason = 'not_found' | 'tx_failed' | 'recipient_mismatch' | 'rpc_error' | 'invalid_input';
 interface QuickVerifyResult {
-    verified: boolean;
+    /**
+     * True when the recipient address received funds in this transaction.
+     *
+     * NOTE: this is NOT proof of a valid elisym job payment. It does not check
+     * the payment `reference` key or that the amount matches the job price - it
+     * is a best-effort signal for the fast discovery-ranking path, where the
+     * original payment request is unavailable. For an authoritative check
+     * (amount + reference) use `SolanaPaymentStrategy.verifyPayment`.
+     */
+    receivedFunds: boolean;
     txSignature: string;
     reason?: QuickVerifyReason;
 }
@@ -1087,6 +1114,12 @@ declare function aggregateNetworkStats(rpc: Rpc<SolanaRpcApi>, options?: Aggrega
  * Returns `null` when the PDA has not been initialized yet (admin must call
  * `initialize_stats` once after program upgrade).
  */
+/**
+ * Best-effort network counters read from the on-chain PDA. These are NOT bound
+ * to verified transfers and can be inflated by a malicious caller, so present
+ * them as approximate/unverified, never as authoritative proof of activity. For
+ * a transfer-derived figure use `aggregateNetworkStats`.
+ */
 interface OnchainNetworkStats {
     jobCount: number;
     volumeNative: bigint;
@@ -1260,6 +1293,7 @@ declare const DEFAULTS: {
 declare const LIMITS: {
     readonly MAX_INPUT_LENGTH: 100000;
     readonly MAX_TIMEOUT_SECS: 600;
+    readonly MAX_EXECUTION_SECS: 2147483;
     readonly MAX_CAPABILITIES: 20;
     readonly MAX_DESCRIPTION_LENGTH: 500;
     readonly MAX_AGENT_NAME_LENGTH: 64;
@@ -1272,4 +1306,4 @@ declare const LIMITS: {
     readonly MAX_POLICY_VERSION_LENGTH: 32;
 };
 
-export { type Agent, type AgentPolicy, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobErrorKind, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_LONG_FORM_ARTICLE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, POLICY_D_TAG_PREFIX, POLICY_TYPE_REGEX, POLICY_T_TAG, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, PoliciesService, type PolicyInput, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
+export { type Agent, type AgentPolicy, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobErrorKind, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, JobWaitTimeoutError, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_LONG_FORM_ARTICLE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, POLICY_D_TAG_PREFIX, POLICY_TYPE_REGEX, POLICY_T_TAG, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, PoliciesService, type PolicyInput, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };

package/dist/index.d.ts

@@ -3,7 +3,7 @@ import { Filter, Event } from 'nostr-tools';
 import { A as Asset } from './assets-C-nzSYD4.js';
 export { C as Chain, K as KNOWN_ASSETS, N as NATIVE_SOL, U as USDC_SOLANA_DEVNET, a as assetByKey, b as assetKey, f as formatAssetAmount, p as parseAssetAmount, r as resolveAssetFromPaymentRequest, c as resolveKnownAsset } from './assets-C-nzSYD4.js';
 import { z } from 'zod';
-export { G as GlobalConfig, a as GlobalConfigSchema, S as SessionSpendLimitEntry, b as SessionSpendLimitEntrySchema } from './global-schema-CddHP2nk.js';
+export { G as GlobalConfig, a as GlobalConfigSchema, S as SessionSpendLimitEntry, b as SessionSpendLimitEntrySchema } from './global-schema-BsVFDtkt.js';
 export { R as RateLimitDecision, S as SlidingWindowLimiter, a as SlidingWindowLimiterOptions, c as createSlidingWindowLimiter } from './rateLimiter-CoEmZkSX.js';
 
 declare class ElisymIdentity {
@@ -151,6 +151,13 @@ interface JobUpdateCallbacks {
     onFeedback?: (status: string, amount?: number, paymentRequest?: string, senderPubkey?: string) => void;
     onResult?: (content: string, eventId: string) => void;
     onError?: (error: string) => void;
+    /**
+     * Fired when the result wait window expires without a result - a distinct,
+     * structured signal from `onError`. When omitted, the timeout is delivered
+     * through `onError` as a "Timed out waiting..." string for backwards
+     * compatibility.
+     */
+    onTimeout?: (timeoutMs: number) => void;
 }
 interface JobSubscriptionOptions {
     jobEventId: string;
@@ -709,6 +716,17 @@ type JobErrorKind = 'agent-unavailable' | 'unknown';
  * `unknown` for everything else (timeouts, validation errors, transport).
  */
 declare function classifyJobError(message: string): JobErrorKind;
+/**
+ * Signalled via `JobUpdateCallbacks.onTimeout` (and thrown by helpers that
+ * await a result) when the wait window expires without a result. This is a
+ * distinct, structured signal from a genuine provider/transport error, so
+ * callers can branch on the type instead of substring-matching "timed out"
+ * on a free-form error message (which masks real errors that happen to
+ * mention a timeout).
+ */
+declare class JobWaitTimeoutError extends Error {
+    constructor(timeoutMs?: number);
+}
 
 declare class SolanaPaymentStrategy implements PaymentStrategy {
     readonly chain = "solana";
@@ -1035,7 +1053,16 @@ declare function parsePaymentRequest(input: string, options?: ParseOptions): Par
  */
 type QuickVerifyReason = 'not_found' | 'tx_failed' | 'recipient_mismatch' | 'rpc_error' | 'invalid_input';
 interface QuickVerifyResult {
-    verified: boolean;
+    /**
+     * True when the recipient address received funds in this transaction.
+     *
+     * NOTE: this is NOT proof of a valid elisym job payment. It does not check
+     * the payment `reference` key or that the amount matches the job price - it
+     * is a best-effort signal for the fast discovery-ranking path, where the
+     * original payment request is unavailable. For an authoritative check
+     * (amount + reference) use `SolanaPaymentStrategy.verifyPayment`.
+     */
+    receivedFunds: boolean;
     txSignature: string;
     reason?: QuickVerifyReason;
 }
@@ -1087,6 +1114,12 @@ declare function aggregateNetworkStats(rpc: Rpc<SolanaRpcApi>, options?: Aggrega
  * Returns `null` when the PDA has not been initialized yet (admin must call
  * `initialize_stats` once after program upgrade).
  */
+/**
+ * Best-effort network counters read from the on-chain PDA. These are NOT bound
+ * to verified transfers and can be inflated by a malicious caller, so present
+ * them as approximate/unverified, never as authoritative proof of activity. For
+ * a transfer-derived figure use `aggregateNetworkStats`.
+ */
 interface OnchainNetworkStats {
     jobCount: number;
     volumeNative: bigint;
@@ -1260,6 +1293,7 @@ declare const DEFAULTS: {
 declare const LIMITS: {
     readonly MAX_INPUT_LENGTH: 100000;
     readonly MAX_TIMEOUT_SECS: 600;
+    readonly MAX_EXECUTION_SECS: 2147483;
     readonly MAX_CAPABILITIES: 20;
     readonly MAX_DESCRIPTION_LENGTH: 500;
     readonly MAX_AGENT_NAME_LENGTH: 64;
@@ -1272,4 +1306,4 @@ declare const LIMITS: {
     readonly MAX_POLICY_VERSION_LENGTH: 32;
 };
 
-export { type Agent, type AgentPolicy, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobErrorKind, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_LONG_FORM_ARTICLE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, POLICY_D_TAG_PREFIX, POLICY_TYPE_REGEX, POLICY_T_TAG, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, PoliciesService, type PolicyInput, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
+export { type Agent, type AgentPolicy, type AggregateNetworkStatsOptions, Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type EstimateSolFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobErrorKind, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, JobWaitTimeoutError, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_LONG_FORM_ARTICLE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkBaselineEstimate, type NetworkBaselineOptions, type NetworkStats, type NetworkStatsResult, NostrPool, type OnchainNetworkStats, POLICY_D_TAG_PREFIX, POLICY_TYPE_REGEX, POLICY_T_TAG, PROTOCOL_PROGRAM_ID_DEVNET, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentAssetRef, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, PoliciesService, type PolicyInput, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, type QuickVerifyReason, type QuickVerifyResult, RELAYS, type RankKey, SECRET_REDACT_PATHS, type Signer, type SolFeeEstimate, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, aggregateNetworkStats, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };

package/dist/index.js

@@ -73,6 +73,11 @@ var DEFAULTS = {
 var LIMITS = {
   MAX_INPUT_LENGTH: 1e5,
   MAX_TIMEOUT_SECS: 600,
+  // Upper bound for execution budgets (`max_execution_secs` / `execution_timeout_secs`).
+  // Distinct from MAX_TIMEOUT_SECS (the result-wait cap): execution budgets may be
+  // hours, so this exists only to keep `secs * 1000` within Node's setTimeout limit
+  // (2_147_483_647 ms) - a larger value overflows and fires the timer immediately.
+  MAX_EXECUTION_SECS: 2147483,
   MAX_CAPABILITIES: 20,
   MAX_DESCRIPTION_LENGTH: 500,
   MAX_AGENT_NAME_LENGTH: 64,
@@ -1467,6 +1472,7 @@ var DiscoveryService = class {
       return agents;
     }
     const deliveredJobsByProvider = /* @__PURE__ */ new Map();
+    const customerByJob = /* @__PURE__ */ new Map();
     for (const ev of resultEvents) {
       if (!verifyEvent(ev)) {
         continue;
@@ -1486,8 +1492,13 @@ var DiscoveryService = class {
           deliveredJobsByProvider.set(ev.pubkey, delivered);
         }
         delivered.add(jobEventId);
+        const customerPubkey = ev.tags.find((tag) => tag[0] === "p")?.[1];
+        if (customerPubkey) {
+          customerByJob.set(jobEventId, customerPubkey);
+        }
       }
     }
+    const countedRatings = /* @__PURE__ */ new Set();
     for (const ev of feedbackEvents) {
       if (!verifyEvent(ev)) {
         continue;
@@ -1503,19 +1514,25 @@ var DiscoveryService = class {
       if (ev.created_at > agent.lastSeen) {
         agent.lastSeen = ev.created_at;
       }
+      const jobEventId = ev.tags.find((tag) => tag[0] === "e")?.[1];
+      const hasDeliveredResult = jobEventId !== void 0 && deliveredJobsByProvider.get(targetPubkey)?.has(jobEventId) === true;
+      const jobCustomer = jobEventId !== void 0 ? customerByJob.get(jobEventId) : void 0;
+      const authoredByCustomer = jobCustomer !== void 0 && ev.pubkey === jobCustomer;
       const rating = ev.tags.find((tag) => tag[0] === "rating")?.[1];
-      if (rating === "1" || rating === "0") {
-        agent.totalRatingCount = (agent.totalRatingCount ?? 0) + 1;
-        if (rating === "1") {
-          agent.positiveCount = (agent.positiveCount ?? 0) + 1;
+      if ((rating === "1" || rating === "0") && hasDeliveredResult && authoredByCustomer) {
+        const ratingKey = `${ev.pubkey}:${jobEventId}`;
+        if (!countedRatings.has(ratingKey)) {
+          countedRatings.add(ratingKey);
+          agent.totalRatingCount = (agent.totalRatingCount ?? 0) + 1;
+          if (rating === "1") {
+            agent.positiveCount = (agent.positiveCount ?? 0) + 1;
+          }
         }
       }
       const status = ev.tags.find((tag) => tag[0] === "status")?.[1];
       const txTag = ev.tags.find((tag) => tag[0] === "tx");
       const txSignature = txTag?.[1];
-      const jobEventId = ev.tags.find((tag) => tag[0] === "e")?.[1];
-      const hasDeliveredResult = jobEventId !== void 0 && deliveredJobsByProvider.get(targetPubkey)?.has(jobEventId) === true;
-      if (status === "payment-completed" && typeof txSignature === "string" && txSignature && hasDeliveredResult) {
+      if (status === "payment-completed" && typeof txSignature === "string" && txSignature && hasDeliveredResult && authoredByCustomer) {
         if (!agent.lastPaidJobAt || ev.created_at > agent.lastPaidJobAt) {
           agent.lastPaidJobAt = ev.created_at;
           agent.lastPaidJobTx = txSignature;
@@ -1991,7 +2008,11 @@ var MarketplaceService = class {
       if (!resolved) {
         done();
         try {
-          cb.onError?.(`Timed out waiting for response (${timeoutMs / 1e3}s).`);
+          if (cb.onTimeout) {
+            cb.onTimeout(timeoutMs);
+          } else {
+            cb.onError?.(`Timed out waiting for response (${timeoutMs / 1e3}s).`);
+          }
         } catch {
         }
       }
@@ -3237,6 +3258,14 @@ function classifyJobError(message) {
   }
   return "unknown";
 }
+var JobWaitTimeoutError = class extends Error {
+  constructor(timeoutMs) {
+    super(
+      timeoutMs === void 0 ? "Timed out waiting for job result" : `Timed out waiting for job result (${Math.round(timeoutMs / 1e3)}s)`
+    );
+    this.name = "JobWaitTimeoutError";
+  }
+};
 var DEFAULT_COMPUTE_UNIT_LIMIT2 = 2e5;
 var DEFAULT_PRIORITY_FEE_PERCENTILE2 = 75;
 var BASE_FEE_LAMPORTS_PER_SIGNATURE = 5000n;
@@ -3387,35 +3416,43 @@ function formatNetworkBaseline(estimate) {
   return `Estimated network gas: ${total} SOL (${parts.join(" + ")}).`;
 }
 var NEGATIVE_CACHE_TTL_MS = 6e4;
+var MAX_CACHE_ENTRIES = 5e3;
 var verifyCache = /* @__PURE__ */ new Map();
 function clearQuickVerifyCache() {
   verifyCache.clear();
 }
 async function verifyJobPaymentQuick(rpc, txSignature, expectedRecipient) {
   if (!txSignature) {
-    return { verified: false, txSignature: "", reason: "invalid_input" };
+    return { receivedFunds: false, txSignature: "", reason: "invalid_input" };
   }
   if (!expectedRecipient || !isAddress(expectedRecipient)) {
-    return { verified: false, txSignature, reason: "invalid_input" };
+    return { receivedFunds: false, txSignature, reason: "invalid_input" };
   }
   const cacheKey2 = `${txSignature}:${expectedRecipient}`;
   const cached = verifyCache.get(cacheKey2);
   if (cached) {
-    if (cached.result.verified) {
+    if (cached.result.receivedFunds) {
       return cached.result;
     }
     if (Date.now() - cached.cachedAt < NEGATIVE_CACHE_TTL_MS) {
       return cached.result;
     }
+    verifyCache.delete(cacheKey2);
   }
   const result = await doVerifyOnce(rpc, txSignature, expectedRecipient);
+  if (verifyCache.size >= MAX_CACHE_ENTRIES) {
+    const oldest = verifyCache.keys().next().value;
+    if (oldest !== void 0) {
+      verifyCache.delete(oldest);
+    }
+  }
   verifyCache.set(cacheKey2, { result, cachedAt: Date.now() });
   return result;
 }
 async function doVerifyOnce(rpc, txSignature, expectedRecipient) {
   const sigStr = txSignature;
   if (!rpc || typeof rpc.getTransaction !== "function") {
-    return { verified: false, txSignature: sigStr, reason: "rpc_error" };
+    return { receivedFunds: false, txSignature: sigStr, reason: "rpc_error" };
   }
   let tx;
   try {
@@ -3425,13 +3462,13 @@ async function doVerifyOnce(rpc, txSignature, expectedRecipient) {
       maxSupportedTransactionVersion: 0
     }).send();
   } catch {
-    return { verified: false, txSignature: sigStr, reason: "rpc_error" };
+    return { receivedFunds: false, txSignature: sigStr, reason: "rpc_error" };
   }
   if (!tx) {
-    return { verified: false, txSignature: sigStr, reason: "not_found" };
+    return { receivedFunds: false, txSignature: sigStr, reason: "not_found" };
   }
   if (!tx.meta || tx.meta.err) {
-    return { verified: false, txSignature: sigStr, reason: "tx_failed" };
+    return { receivedFunds: false, txSignature: sigStr, reason: "tx_failed" };
   }
   const accountKeys = tx.transaction.message.accountKeys;
   const recipientStr = expectedRecipient;
@@ -3445,7 +3482,7 @@ async function doVerifyOnce(rpc, txSignature, expectedRecipient) {
       if (pre !== void 0 && post !== void 0) {
         const delta = BigInt(post) - BigInt(pre);
         if (delta > 0n) {
-          return { verified: true, txSignature: sigStr };
+          return { receivedFunds: true, txSignature: sigStr };
         }
       }
     }
@@ -3463,11 +3500,11 @@ async function doVerifyOnce(rpc, txSignature, expectedRecipient) {
       const preAmount = pre ? BigInt(pre.uiTokenAmount.amount) : 0n;
       const postAmount = BigInt(post.uiTokenAmount.amount);
       if (postAmount > preAmount) {
-        return { verified: true, txSignature: sigStr };
+        return { receivedFunds: true, txSignature: sigStr };
       }
     }
   }
-  return { verified: false, txSignature: sigStr, reason: "recipient_mismatch" };
+  return { receivedFunds: false, txSignature: sigStr, reason: "recipient_mismatch" };
 }
 var DEFAULT_LIMIT = 1e3;
 var NATIVE_KEY = "native";
@@ -3562,7 +3599,12 @@ var SessionSpendLimitEntrySchema = z.object({
   chain: z.enum(["solana"]),
   token: z.string().min(1).max(16).regex(/^[a-z0-9]+$/, "token must be lowercase alphanumeric"),
   mint: z.string().min(1).max(64).optional(),
-  amount: z.number().positive().finite()
+  // Stored as a string to preserve the operator's exact decimal text (avoids
+  // Number round-tripping to scientific notation). Legacy configs persisted a
+  // number; accept both and normalize to a positive-decimal string.
+  amount: z.union([z.string(), z.number()]).transform((value) => typeof value === "number" ? String(value) : value.trim()).refine((value) => /^\d+(?:\.\d+)?$/.test(value) && /[1-9]/.test(value), {
+    message: 'amount must be a positive decimal (e.g. "0.5", "1")'
+  })
 }).strict();
 var GlobalConfigSchema = z.object({
   session_spend_limits: z.array(SessionSpendLimitEntrySchema).max(16).optional()
@@ -3762,6 +3804,6 @@ function makeCensor() {
   };
 }
 
-export { BoundedSet, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, ElisymIdentity, GlobalConfigSchema, INPUT_REDACT_PATHS, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_LONG_FORM_ARTICLE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, NostrPool, POLICY_D_TAG_PREFIX, POLICY_TYPE_REGEX, POLICY_T_TAG, PROTOCOL_PROGRAM_ID_DEVNET, PaymentRequestSchema, PingService, PoliciesService, RELAYS, SECRET_REDACT_PATHS, SessionSpendLimitEntrySchema, SolanaPaymentStrategy, USDC_SOLANA_DEVNET, aggregateNetworkStats, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatAssetAmount, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveAssetFromPaymentRequest, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
+export { BoundedSet, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ELISYM_PROTOCOL_TAG, ElisymClient, ElisymIdentity, GlobalConfigSchema, INPUT_REDACT_PATHS, JobWaitTimeoutError, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_LONG_FORM_ARTICLE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, NostrPool, POLICY_D_TAG_PREFIX, POLICY_TYPE_REGEX, POLICY_T_TAG, PROTOCOL_PROGRAM_ID_DEVNET, PaymentRequestSchema, PingService, PoliciesService, RELAYS, SECRET_REDACT_PATHS, SessionSpendLimitEntrySchema, SolanaPaymentStrategy, USDC_SOLANA_DEVNET, aggregateNetworkStats, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, classifyJobError, clearPriorityFeeCache, clearProtocolConfigCache, clearQuickVerifyCache, compareAgentsByRank, computeRankKey, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimateNetworkBaseline, estimatePriorityFeeMicroLamports, estimateSolFeeLamports, formatAssetAmount, formatFeeBreakdown, formatNetworkBaseline, formatSol, getNetworkStats, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveAssetFromPaymentRequest, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, verifyJobPaymentQuick };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map