@elisym/sdk 0.22.0 → 0.23.0

package/dist/index.d.cts

@@ -3,7 +3,7 @@ import { Filter, Event } from 'nostr-tools';
 import { A as Asset } from './assets-C-nzSYD4.cjs';
 export { C as Chain, K as KNOWN_ASSETS, N as NATIVE_SOL, U as USDC_SOLANA_DEVNET, a as assetByKey, b as assetKey, f as formatAssetAmount, p as parseAssetAmount, r as resolveAssetFromPaymentRequest, c as resolveKnownAsset } from './assets-C-nzSYD4.cjs';
 import { z } from 'zod';
-export { G as GlobalConfig, a as GlobalConfigSchema, S as SessionSpendLimitEntry, b as SessionSpendLimitEntrySchema } from './global-schema-CddHP2nk.cjs';
+export { G as GlobalConfig, a as GlobalConfigSchema, S as SessionSpendLimitEntry, b as SessionSpendLimitEntrySchema } from './global-schema-BsVFDtkt.cjs';
 export { R as RateLimitDecision, S as SlidingWindowLimiter, a as SlidingWindowLimiterOptions, c as createSlidingWindowLimiter } from './rateLimiter-CoEmZkSX.cjs';
 
 declare class ElisymIdentity {
@@ -1053,7 +1053,16 @@ declare function parsePaymentRequest(input: string, options?: ParseOptions): Par
  */
 type QuickVerifyReason = 'not_found' | 'tx_failed' | 'recipient_mismatch' | 'rpc_error' | 'invalid_input';
 interface QuickVerifyResult {
-    verified: boolean;
+    /**
+     * True when the recipient address received funds in this transaction.
+     *
+     * NOTE: this is NOT proof of a valid elisym job payment. It does not check
+     * the payment `reference` key or that the amount matches the job price - it
+     * is a best-effort signal for the fast discovery-ranking path, where the
+     * original payment request is unavailable. For an authoritative check
+     * (amount + reference) use `SolanaPaymentStrategy.verifyPayment`.
+     */
+    receivedFunds: boolean;
     txSignature: string;
     reason?: QuickVerifyReason;
 }
@@ -1105,6 +1114,12 @@ declare function aggregateNetworkStats(rpc: Rpc<SolanaRpcApi>, options?: Aggrega
  * Returns `null` when the PDA has not been initialized yet (admin must call
  * `initialize_stats` once after program upgrade).
  */
+/**
+ * Best-effort network counters read from the on-chain PDA. These are NOT bound
+ * to verified transfers and can be inflated by a malicious caller, so present
+ * them as approximate/unverified, never as authoritative proof of activity. For
+ * a transfer-derived figure use `aggregateNetworkStats`.
+ */
 interface OnchainNetworkStats {
     jobCount: number;
     volumeNative: bigint;

package/dist/index.d.ts

@@ -3,7 +3,7 @@ import { Filter, Event } from 'nostr-tools';
 import { A as Asset } from './assets-C-nzSYD4.js';
 export { C as Chain, K as KNOWN_ASSETS, N as NATIVE_SOL, U as USDC_SOLANA_DEVNET, a as assetByKey, b as assetKey, f as formatAssetAmount, p as parseAssetAmount, r as resolveAssetFromPaymentRequest, c as resolveKnownAsset } from './assets-C-nzSYD4.js';
 import { z } from 'zod';
-export { G as GlobalConfig, a as GlobalConfigSchema, S as SessionSpendLimitEntry, b as SessionSpendLimitEntrySchema } from './global-schema-CddHP2nk.js';
+export { G as GlobalConfig, a as GlobalConfigSchema, S as SessionSpendLimitEntry, b as SessionSpendLimitEntrySchema } from './global-schema-BsVFDtkt.js';
 export { R as RateLimitDecision, S as SlidingWindowLimiter, a as SlidingWindowLimiterOptions, c as createSlidingWindowLimiter } from './rateLimiter-CoEmZkSX.js';
 
 declare class ElisymIdentity {
@@ -1053,7 +1053,16 @@ declare function parsePaymentRequest(input: string, options?: ParseOptions): Par
  */
 type QuickVerifyReason = 'not_found' | 'tx_failed' | 'recipient_mismatch' | 'rpc_error' | 'invalid_input';
 interface QuickVerifyResult {
-    verified: boolean;
+    /**
+     * True when the recipient address received funds in this transaction.
+     *
+     * NOTE: this is NOT proof of a valid elisym job payment. It does not check
+     * the payment `reference` key or that the amount matches the job price - it
+     * is a best-effort signal for the fast discovery-ranking path, where the
+     * original payment request is unavailable. For an authoritative check
+     * (amount + reference) use `SolanaPaymentStrategy.verifyPayment`.
+     */
+    receivedFunds: boolean;
     txSignature: string;
     reason?: QuickVerifyReason;
 }
@@ -1105,6 +1114,12 @@ declare function aggregateNetworkStats(rpc: Rpc<SolanaRpcApi>, options?: Aggrega
  * Returns `null` when the PDA has not been initialized yet (admin must call
  * `initialize_stats` once after program upgrade).
  */
+/**
+ * Best-effort network counters read from the on-chain PDA. These are NOT bound
+ * to verified transfers and can be inflated by a malicious caller, so present
+ * them as approximate/unverified, never as authoritative proof of activity. For
+ * a transfer-derived figure use `aggregateNetworkStats`.
+ */
 interface OnchainNetworkStats {
     jobCount: number;
     volumeNative: bigint;

package/dist/index.js

@@ -1472,6 +1472,7 @@ var DiscoveryService = class {
       return agents;
     }
     const deliveredJobsByProvider = /* @__PURE__ */ new Map();
+    const customerByJob = /* @__PURE__ */ new Map();
     for (const ev of resultEvents) {
       if (!verifyEvent(ev)) {
         continue;
@@ -1491,8 +1492,13 @@ var DiscoveryService = class {
           deliveredJobsByProvider.set(ev.pubkey, delivered);
         }
         delivered.add(jobEventId);
+        const customerPubkey = ev.tags.find((tag) => tag[0] === "p")?.[1];
+        if (customerPubkey) {
+          customerByJob.set(jobEventId, customerPubkey);
+        }
       }
     }
+    const countedRatings = /* @__PURE__ */ new Set();
     for (const ev of feedbackEvents) {
       if (!verifyEvent(ev)) {
         continue;
@@ -1508,19 +1514,25 @@ var DiscoveryService = class {
       if (ev.created_at > agent.lastSeen) {
         agent.lastSeen = ev.created_at;
       }
+      const jobEventId = ev.tags.find((tag) => tag[0] === "e")?.[1];
+      const hasDeliveredResult = jobEventId !== void 0 && deliveredJobsByProvider.get(targetPubkey)?.has(jobEventId) === true;
+      const jobCustomer = jobEventId !== void 0 ? customerByJob.get(jobEventId) : void 0;
+      const authoredByCustomer = jobCustomer !== void 0 && ev.pubkey === jobCustomer;
       const rating = ev.tags.find((tag) => tag[0] === "rating")?.[1];
-      if (rating === "1" || rating === "0") {
-        agent.totalRatingCount = (agent.totalRatingCount ?? 0) + 1;
-        if (rating === "1") {
-          agent.positiveCount = (agent.positiveCount ?? 0) + 1;
+      if ((rating === "1" || rating === "0") && hasDeliveredResult && authoredByCustomer) {
+        const ratingKey = `${ev.pubkey}:${jobEventId}`;
+        if (!countedRatings.has(ratingKey)) {
+          countedRatings.add(ratingKey);
+          agent.totalRatingCount = (agent.totalRatingCount ?? 0) + 1;
+          if (rating === "1") {
+            agent.positiveCount = (agent.positiveCount ?? 0) + 1;
+          }
         }
       }
       const status = ev.tags.find((tag) => tag[0] === "status")?.[1];
       const txTag = ev.tags.find((tag) => tag[0] === "tx");
       const txSignature = txTag?.[1];
-      const jobEventId = ev.tags.find((tag) => tag[0] === "e")?.[1];
-      const hasDeliveredResult = jobEventId !== void 0 && deliveredJobsByProvider.get(targetPubkey)?.has(jobEventId) === true;
-      if (status === "payment-completed" && typeof txSignature === "string" && txSignature && hasDeliveredResult) {
+      if (status === "payment-completed" && typeof txSignature === "string" && txSignature && hasDeliveredResult && authoredByCustomer) {
         if (!agent.lastPaidJobAt || ev.created_at > agent.lastPaidJobAt) {
           agent.lastPaidJobAt = ev.created_at;
           agent.lastPaidJobTx = txSignature;
@@ -3404,35 +3416,43 @@ function formatNetworkBaseline(estimate) {
   return `Estimated network gas: ${total} SOL (${parts.join(" + ")}).`;
 }
 var NEGATIVE_CACHE_TTL_MS = 6e4;
+var MAX_CACHE_ENTRIES = 5e3;
 var verifyCache = /* @__PURE__ */ new Map();
 function clearQuickVerifyCache() {
   verifyCache.clear();
 }
 async function verifyJobPaymentQuick(rpc, txSignature, expectedRecipient) {
   if (!txSignature) {
-    return { verified: false, txSignature: "", reason: "invalid_input" };
+    return { receivedFunds: false, txSignature: "", reason: "invalid_input" };
   }
   if (!expectedRecipient || !isAddress(expectedRecipient)) {
-    return { verified: false, txSignature, reason: "invalid_input" };
+    return { receivedFunds: false, txSignature, reason: "invalid_input" };
   }
   const cacheKey2 = `${txSignature}:${expectedRecipient}`;
   const cached = verifyCache.get(cacheKey2);
   if (cached) {
-    if (cached.result.verified) {
+    if (cached.result.receivedFunds) {
       return cached.result;
     }
     if (Date.now() - cached.cachedAt < NEGATIVE_CACHE_TTL_MS) {
       return cached.result;
     }
+    verifyCache.delete(cacheKey2);
   }
   const result = await doVerifyOnce(rpc, txSignature, expectedRecipient);
+  if (verifyCache.size >= MAX_CACHE_ENTRIES) {
+    const oldest = verifyCache.keys().next().value;
+    if (oldest !== void 0) {
+      verifyCache.delete(oldest);
+    }
+  }
   verifyCache.set(cacheKey2, { result, cachedAt: Date.now() });
   return result;
 }
 async function doVerifyOnce(rpc, txSignature, expectedRecipient) {
   const sigStr = txSignature;
   if (!rpc || typeof rpc.getTransaction !== "function") {
-    return { verified: false, txSignature: sigStr, reason: "rpc_error" };
+    return { receivedFunds: false, txSignature: sigStr, reason: "rpc_error" };
   }
   let tx;
   try {
@@ -3442,13 +3462,13 @@ async function doVerifyOnce(rpc, txSignature, expectedRecipient) {
       maxSupportedTransactionVersion: 0
     }).send();
   } catch {
-    return { verified: false, txSignature: sigStr, reason: "rpc_error" };
+    return { receivedFunds: false, txSignature: sigStr, reason: "rpc_error" };
   }
   if (!tx) {
-    return { verified: false, txSignature: sigStr, reason: "not_found" };
+    return { receivedFunds: false, txSignature: sigStr, reason: "not_found" };
   }
   if (!tx.meta || tx.meta.err) {
-    return { verified: false, txSignature: sigStr, reason: "tx_failed" };
+    return { receivedFunds: false, txSignature: sigStr, reason: "tx_failed" };
   }
   const accountKeys = tx.transaction.message.accountKeys;
   const recipientStr = expectedRecipient;
@@ -3462,7 +3482,7 @@ async function doVerifyOnce(rpc, txSignature, expectedRecipient) {
       if (pre !== void 0 && post !== void 0) {
         const delta = BigInt(post) - BigInt(pre);
         if (delta > 0n) {
-          return { verified: true, txSignature: sigStr };
+          return { receivedFunds: true, txSignature: sigStr };
         }
       }
     }
@@ -3480,11 +3500,11 @@ async function doVerifyOnce(rpc, txSignature, expectedRecipient) {
       const preAmount = pre ? BigInt(pre.uiTokenAmount.amount) : 0n;
       const postAmount = BigInt(post.uiTokenAmount.amount);
       if (postAmount > preAmount) {
-        return { verified: true, txSignature: sigStr };
+        return { receivedFunds: true, txSignature: sigStr };
       }
     }
   }
-  return { verified: false, txSignature: sigStr, reason: "recipient_mismatch" };
+  return { receivedFunds: false, txSignature: sigStr, reason: "recipient_mismatch" };
 }
 var DEFAULT_LIMIT = 1e3;
 var NATIVE_KEY = "native";
@@ -3579,7 +3599,12 @@ var SessionSpendLimitEntrySchema = z.object({
   chain: z.enum(["solana"]),
   token: z.string().min(1).max(16).regex(/^[a-z0-9]+$/, "token must be lowercase alphanumeric"),
   mint: z.string().min(1).max(64).optional(),
-  amount: z.number().positive().finite()
+  // Stored as a string to preserve the operator's exact decimal text (avoids
+  // Number round-tripping to scientific notation). Legacy configs persisted a
+  // number; accept both and normalize to a positive-decimal string.
+  amount: z.union([z.string(), z.number()]).transform((value) => typeof value === "number" ? String(value) : value.trim()).refine((value) => /^\d+(?:\.\d+)?$/.test(value) && /[1-9]/.test(value), {
+    message: 'amount must be a positive decimal (e.g. "0.5", "1")'
+  })
 }).strict();
 var GlobalConfigSchema = z.object({
   session_spend_limits: z.array(SessionSpendLimitEntrySchema).max(16).optional()