@elisym/sdk 0.6.0 → 0.8.0

package/dist/index.d.cts

@@ -624,6 +624,48 @@ type ParseResult = {
  */
 declare function parsePaymentRequest(input: string, options?: ParseOptions): ParseResult;
 
+/**
+ * Multi-asset / multi-chain payment model.
+ *
+ * `Asset` describes a currency a customer can spend: native coins (SOL, ETH, BTC)
+ * or tokens (SPL, ERC-20). `assetKey` produces a stable string id for Map lookups.
+ *
+ * Today only `NATIVE_SOL` is in `KNOWN_ASSETS`. SPL (USDC) and other chains are
+ * extended by adding entries to `KNOWN_ASSETS` and, where relevant, to the
+ * MCP `DEFAULT_SESSION_LIMITS` catalogue.
+ */
+type Chain = 'solana';
+interface Asset {
+    chain: Chain;
+    /** Lowercase token id: 'sol', 'usdc', 'btc', 'eth'. */
+    token: string;
+    /** SPL mint / ERC-20 contract. Undefined for a native coin. */
+    mint?: string;
+    /** Subunits per whole (9 SOL, 6 USDC, 8 BTC, 18 ETH). */
+    decimals: number;
+    /** Display symbol: 'SOL', 'USDC'. */
+    symbol: string;
+}
+declare const NATIVE_SOL: Asset;
+declare const KNOWN_ASSETS: readonly Asset[];
+/** Stable Map key for `Asset`. Same shape regardless of Asset identity. */
+declare function assetKey(a: Pick<Asset, 'chain' | 'token' | 'mint'>): string;
+/** Find a known asset by (chain, token, mint). Returns undefined if unknown. */
+declare function resolveKnownAsset(chain: string, token: string, mint?: string): Asset | undefined;
+/** Reverse lookup: given an assetKey string, return the known asset or undefined. */
+declare function assetByKey(key: string): Asset | undefined;
+/**
+ * Parse a human amount string ("0.5", "1", "0.000001") into raw subunits (BigInt).
+ * Uses integer math to avoid float precision issues.
+ *
+ * Throws on: empty, negative, zero, malformed, too many fractional digits, or
+ * a value exceeding `Number.MAX_SAFE_INTEGER` (to keep downstream `Number(...)`
+ * call-sites safe).
+ */
+declare function parseAssetAmount(asset: Asset, human: string): bigint;
+/** Format raw subunits back to `"<whole>.<frac> <SYMBOL>"`. Keeps all `decimals` digits. */
+declare function formatAssetAmount(asset: Asset, raw: bigint): string;
+
 /**
  * Snapshot of the on-chain elisym-config program state.
  *
@@ -658,6 +700,73 @@ interface GetProtocolConfigOptions {
  */
 declare function getProtocolConfig(rpc: Rpc<SolanaRpcApi>, programId: Address, options?: GetProtocolConfigOptions): Promise<ProtocolConfig>;
 
+/**
+ * Global (not per-agent) config stored at `~/.elisym/config.yaml`.
+ *
+ * Currently holds only session-spend-limit overrides; other top-level fields
+ * may be added later. The loader tolerates a missing file (returns `{}`), but
+ * fails fast on malformed YAML or schema violations.
+ */
+
+declare const SessionSpendLimitEntrySchema: z.ZodObject<{
+    chain: z.ZodEnum<["solana"]>;
+    token: z.ZodString;
+    mint: z.ZodOptional<z.ZodString>;
+    amount: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    amount: number;
+    chain: "solana";
+    token: string;
+    mint?: string | undefined;
+}, {
+    amount: number;
+    chain: "solana";
+    token: string;
+    mint?: string | undefined;
+}>;
+declare const GlobalConfigSchema: z.ZodObject<{
+    session_spend_limits: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        chain: z.ZodEnum<["solana"]>;
+        token: z.ZodString;
+        mint: z.ZodOptional<z.ZodString>;
+        amount: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }, {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }>, "many">>;
+}, "strict", z.ZodTypeAny, {
+    session_spend_limits?: {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }[] | undefined;
+}, {
+    session_spend_limits?: {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }[] | undefined;
+}>;
+type SessionSpendLimitEntry = z.infer<typeof SessionSpendLimitEntrySchema>;
+type GlobalConfig = z.infer<typeof GlobalConfigSchema>;
+/**
+ * Read and validate `~/.elisym/config.yaml`. Returns `{}` if missing. Throws
+ * on malformed YAML or schema violations — the MCP server treats these as fatal
+ * at startup rather than silently ignoring bad overrides.
+ */
+declare function loadGlobalConfig(path: string): Promise<GlobalConfig>;
+/** Write the config YAML atomically. Validates via Zod before writing. */
+declare function writeGlobalConfig(path: string, config: GlobalConfig): Promise<void>;
+
 /** Encrypt plaintext using NIP-44 v2 (sender secret key + recipient public key). */
 declare function nip44Encrypt(plaintext: string, senderSk: Uint8Array, recipientPubkey: string): string;
 /** Decrypt ciphertext using NIP-44 v2 (receiver secret key + sender public key). */
@@ -685,6 +794,82 @@ declare class BoundedSet<T> {
     add(item: T): void;
 }
 
+/**
+ * Sliding-window rate limiter keyed by an arbitrary string (typically a
+ * customer pubkey). Each key gets at most `maxPerWindow` requests inside a
+ * rolling `windowMs`. Stale timestamps are pruned lazily on every `check`.
+ * When the tracked-key set grows past `maxKeys`, the least-recently-used
+ * key is evicted so an attacker cannot exhaust memory by cycling keys.
+ *
+ * Thread-safety: not required. Designed for single-threaded JS consumers
+ * (Node/Bun event loops, browser main thread). No timers - pruning happens
+ * inside `check` and `prune`.
+ */
+interface SlidingWindowLimiterOptions {
+    /** Rolling window width, in ms. */
+    windowMs: number;
+    /** Max hits allowed per key inside the window. */
+    maxPerWindow: number;
+    /** Cap on total tracked keys. LRU-evicted past this cap. */
+    maxKeys: number;
+}
+interface RateLimitDecision {
+    allowed: boolean;
+    /** Wall-clock timestamp (ms) when the limit window will reset for this key. */
+    resetAt: number;
+    /** Number of hits inside the current window after this call (or the attempted hit if denied). */
+    count: number;
+}
+interface SlidingWindowLimiter {
+    /** Record a hit against `key`; return whether it was allowed. */
+    check(key: string, now?: number): RateLimitDecision;
+    /**
+     * Inspect the current state for `key` without recording a hit. Useful
+     * when a single request must clear multiple limiters and callers want
+     * to avoid double-counting against one limiter after another denies.
+     */
+    peek(key: string, now?: number): RateLimitDecision;
+    /** Drop entries whose windows have fully elapsed. Bounded memory hygiene. */
+    prune(now?: number): void;
+    /** Current number of tracked keys. */
+    size(): number;
+    /** Clear all state. */
+    reset(): void;
+}
+declare function createSlidingWindowLimiter(options: SlidingWindowLimiterOptions): SlidingWindowLimiter;
+
+/**
+ * Canonical pino redact paths for the elisym stack. Plugin, CLI, MCP, and
+ * any downstream integrator should consume these arrays directly - one
+ * source of truth for "fields that carry user input or secrets".
+ *
+ * Wire them into a pino instance like:
+ *
+ *   import pino from 'pino';
+ *   import { DEFAULT_REDACT_PATHS, makeCensor } from '@elisym/sdk';
+ *   const logger = pino({
+ *     redact: { paths: DEFAULT_REDACT_PATHS, censor: makeCensor() },
+ *   });
+ */
+/**
+ * Field paths that carry Nostr / Solana secret keys or operator secrets.
+ * Censored as `[REDACTED]`.
+ */
+declare const SECRET_REDACT_PATHS: string[];
+/**
+ * Field paths that carry customer-confidential text (LLM prompts, raw
+ * event content, job input). Censored as `[INPUT REDACTED]` so log
+ * readers can distinguish redacted input from redacted secrets.
+ */
+declare const INPUT_REDACT_PATHS: string[];
+/**
+ * Union of the two arrays, in the order pino's redact engine should
+ * visit them. Prefer this when wiring a new logger so no downstream
+ * consumer forgets half the set.
+ */
+declare const DEFAULT_REDACT_PATHS: string[];
+declare function makeCensor(): (value: unknown, path: string[]) => string;
+
 declare const RELAYS: string[];
 declare const KIND_APP_HANDLER = 31990;
 declare const KIND_JOB_REQUEST_BASE = 5000;
@@ -760,4 +945,4 @@ declare const LIMITS: {
     readonly MAX_CAPABILITY_LENGTH: 64;
 };
 
-export { type Agent, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DiscoveryService, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type GetProtocolConfigOptions, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkStats, NostrPool, PROTOCOL_FEE_BPS, PROTOCOL_PROGRAM_ID_DEVNET, PROTOCOL_TREASURY, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, RELAYS, type Signer, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, createPaymentRequestWithOnchainConfig, estimatePriorityFeeMicroLamports, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry };
+export { type Agent, type Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, type Chain, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type GetProtocolConfigOptions, type GlobalConfig, GlobalConfigSchema, INPUT_REDACT_PATHS, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, type Network, type NetworkStats, NostrPool, PROTOCOL_FEE_BPS, PROTOCOL_PROGRAM_ID_DEVNET, PROTOCOL_TREASURY, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, RELAYS, type RateLimitDecision, SECRET_REDACT_PATHS, type SessionSpendLimitEntry, SessionSpendLimitEntrySchema, type Signer, type SlidingWindowLimiter, type SlidingWindowLimiterOptions, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimatePriorityFeeMicroLamports, formatAssetAmount, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, loadGlobalConfig, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, writeGlobalConfig };

package/dist/index.d.ts

@@ -624,6 +624,48 @@ type ParseResult = {
  */
 declare function parsePaymentRequest(input: string, options?: ParseOptions): ParseResult;
 
+/**
+ * Multi-asset / multi-chain payment model.
+ *
+ * `Asset` describes a currency a customer can spend: native coins (SOL, ETH, BTC)
+ * or tokens (SPL, ERC-20). `assetKey` produces a stable string id for Map lookups.
+ *
+ * Today only `NATIVE_SOL` is in `KNOWN_ASSETS`. SPL (USDC) and other chains are
+ * extended by adding entries to `KNOWN_ASSETS` and, where relevant, to the
+ * MCP `DEFAULT_SESSION_LIMITS` catalogue.
+ */
+type Chain = 'solana';
+interface Asset {
+    chain: Chain;
+    /** Lowercase token id: 'sol', 'usdc', 'btc', 'eth'. */
+    token: string;
+    /** SPL mint / ERC-20 contract. Undefined for a native coin. */
+    mint?: string;
+    /** Subunits per whole (9 SOL, 6 USDC, 8 BTC, 18 ETH). */
+    decimals: number;
+    /** Display symbol: 'SOL', 'USDC'. */
+    symbol: string;
+}
+declare const NATIVE_SOL: Asset;
+declare const KNOWN_ASSETS: readonly Asset[];
+/** Stable Map key for `Asset`. Same shape regardless of Asset identity. */
+declare function assetKey(a: Pick<Asset, 'chain' | 'token' | 'mint'>): string;
+/** Find a known asset by (chain, token, mint). Returns undefined if unknown. */
+declare function resolveKnownAsset(chain: string, token: string, mint?: string): Asset | undefined;
+/** Reverse lookup: given an assetKey string, return the known asset or undefined. */
+declare function assetByKey(key: string): Asset | undefined;
+/**
+ * Parse a human amount string ("0.5", "1", "0.000001") into raw subunits (BigInt).
+ * Uses integer math to avoid float precision issues.
+ *
+ * Throws on: empty, negative, zero, malformed, too many fractional digits, or
+ * a value exceeding `Number.MAX_SAFE_INTEGER` (to keep downstream `Number(...)`
+ * call-sites safe).
+ */
+declare function parseAssetAmount(asset: Asset, human: string): bigint;
+/** Format raw subunits back to `"<whole>.<frac> <SYMBOL>"`. Keeps all `decimals` digits. */
+declare function formatAssetAmount(asset: Asset, raw: bigint): string;
+
 /**
  * Snapshot of the on-chain elisym-config program state.
  *
@@ -658,6 +700,73 @@ interface GetProtocolConfigOptions {
  */
 declare function getProtocolConfig(rpc: Rpc<SolanaRpcApi>, programId: Address, options?: GetProtocolConfigOptions): Promise<ProtocolConfig>;
 
+/**
+ * Global (not per-agent) config stored at `~/.elisym/config.yaml`.
+ *
+ * Currently holds only session-spend-limit overrides; other top-level fields
+ * may be added later. The loader tolerates a missing file (returns `{}`), but
+ * fails fast on malformed YAML or schema violations.
+ */
+
+declare const SessionSpendLimitEntrySchema: z.ZodObject<{
+    chain: z.ZodEnum<["solana"]>;
+    token: z.ZodString;
+    mint: z.ZodOptional<z.ZodString>;
+    amount: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    amount: number;
+    chain: "solana";
+    token: string;
+    mint?: string | undefined;
+}, {
+    amount: number;
+    chain: "solana";
+    token: string;
+    mint?: string | undefined;
+}>;
+declare const GlobalConfigSchema: z.ZodObject<{
+    session_spend_limits: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        chain: z.ZodEnum<["solana"]>;
+        token: z.ZodString;
+        mint: z.ZodOptional<z.ZodString>;
+        amount: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }, {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }>, "many">>;
+}, "strict", z.ZodTypeAny, {
+    session_spend_limits?: {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }[] | undefined;
+}, {
+    session_spend_limits?: {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }[] | undefined;
+}>;
+type SessionSpendLimitEntry = z.infer<typeof SessionSpendLimitEntrySchema>;
+type GlobalConfig = z.infer<typeof GlobalConfigSchema>;
+/**
+ * Read and validate `~/.elisym/config.yaml`. Returns `{}` if missing. Throws
+ * on malformed YAML or schema violations — the MCP server treats these as fatal
+ * at startup rather than silently ignoring bad overrides.
+ */
+declare function loadGlobalConfig(path: string): Promise<GlobalConfig>;
+/** Write the config YAML atomically. Validates via Zod before writing. */
+declare function writeGlobalConfig(path: string, config: GlobalConfig): Promise<void>;
+
 /** Encrypt plaintext using NIP-44 v2 (sender secret key + recipient public key). */
 declare function nip44Encrypt(plaintext: string, senderSk: Uint8Array, recipientPubkey: string): string;
 /** Decrypt ciphertext using NIP-44 v2 (receiver secret key + sender public key). */
@@ -685,6 +794,82 @@ declare class BoundedSet<T> {
     add(item: T): void;
 }
 
+/**
+ * Sliding-window rate limiter keyed by an arbitrary string (typically a
+ * customer pubkey). Each key gets at most `maxPerWindow` requests inside a
+ * rolling `windowMs`. Stale timestamps are pruned lazily on every `check`.
+ * When the tracked-key set grows past `maxKeys`, the least-recently-used
+ * key is evicted so an attacker cannot exhaust memory by cycling keys.
+ *
+ * Thread-safety: not required. Designed for single-threaded JS consumers
+ * (Node/Bun event loops, browser main thread). No timers - pruning happens
+ * inside `check` and `prune`.
+ */
+interface SlidingWindowLimiterOptions {
+    /** Rolling window width, in ms. */
+    windowMs: number;
+    /** Max hits allowed per key inside the window. */
+    maxPerWindow: number;
+    /** Cap on total tracked keys. LRU-evicted past this cap. */
+    maxKeys: number;
+}
+interface RateLimitDecision {
+    allowed: boolean;
+    /** Wall-clock timestamp (ms) when the limit window will reset for this key. */
+    resetAt: number;
+    /** Number of hits inside the current window after this call (or the attempted hit if denied). */
+    count: number;
+}
+interface SlidingWindowLimiter {
+    /** Record a hit against `key`; return whether it was allowed. */
+    check(key: string, now?: number): RateLimitDecision;
+    /**
+     * Inspect the current state for `key` without recording a hit. Useful
+     * when a single request must clear multiple limiters and callers want
+     * to avoid double-counting against one limiter after another denies.
+     */
+    peek(key: string, now?: number): RateLimitDecision;
+    /** Drop entries whose windows have fully elapsed. Bounded memory hygiene. */
+    prune(now?: number): void;
+    /** Current number of tracked keys. */
+    size(): number;
+    /** Clear all state. */
+    reset(): void;
+}
+declare function createSlidingWindowLimiter(options: SlidingWindowLimiterOptions): SlidingWindowLimiter;
+
+/**
+ * Canonical pino redact paths for the elisym stack. Plugin, CLI, MCP, and
+ * any downstream integrator should consume these arrays directly - one
+ * source of truth for "fields that carry user input or secrets".
+ *
+ * Wire them into a pino instance like:
+ *
+ *   import pino from 'pino';
+ *   import { DEFAULT_REDACT_PATHS, makeCensor } from '@elisym/sdk';
+ *   const logger = pino({
+ *     redact: { paths: DEFAULT_REDACT_PATHS, censor: makeCensor() },
+ *   });
+ */
+/**
+ * Field paths that carry Nostr / Solana secret keys or operator secrets.
+ * Censored as `[REDACTED]`.
+ */
+declare const SECRET_REDACT_PATHS: string[];
+/**
+ * Field paths that carry customer-confidential text (LLM prompts, raw
+ * event content, job input). Censored as `[INPUT REDACTED]` so log
+ * readers can distinguish redacted input from redacted secrets.
+ */
+declare const INPUT_REDACT_PATHS: string[];
+/**
+ * Union of the two arrays, in the order pino's redact engine should
+ * visit them. Prefer this when wiring a new logger so no downstream
+ * consumer forgets half the set.
+ */
+declare const DEFAULT_REDACT_PATHS: string[];
+declare function makeCensor(): (value: unknown, path: string[]) => string;
+
 declare const RELAYS: string[];
 declare const KIND_APP_HANDLER = 31990;
 declare const KIND_JOB_REQUEST_BASE = 5000;
@@ -760,4 +945,4 @@ declare const LIMITS: {
     readonly MAX_CAPABILITY_LENGTH: 64;
 };
 
-export { type Agent, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DiscoveryService, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type GetProtocolConfigOptions, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkStats, NostrPool, PROTOCOL_FEE_BPS, PROTOCOL_PROGRAM_ID_DEVNET, PROTOCOL_TREASURY, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, RELAYS, type Signer, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, createPaymentRequestWithOnchainConfig, estimatePriorityFeeMicroLamports, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry };
+export { type Agent, type Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, type Chain, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type GetProtocolConfigOptions, type GlobalConfig, GlobalConfigSchema, INPUT_REDACT_PATHS, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, type Network, type NetworkStats, NostrPool, PROTOCOL_FEE_BPS, PROTOCOL_PROGRAM_ID_DEVNET, PROTOCOL_TREASURY, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, RELAYS, type RateLimitDecision, SECRET_REDACT_PATHS, type SessionSpendLimitEntry, SessionSpendLimitEntrySchema, type Signer, type SlidingWindowLimiter, type SlidingWindowLimiterOptions, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimatePriorityFeeMicroLamports, formatAssetAmount, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, loadGlobalConfig, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, writeGlobalConfig };