@elisym/sdk 0.6.0 → 0.8.0

package/dist/index.js

@@ -4,6 +4,10 @@ import Decimal2 from 'decimal.js-light';
 import { z } from 'zod';
 import { verifyEvent, finalizeEvent, getPublicKey, nip19, generateSecretKey, SimplePool } from 'nostr-tools';
 import * as nip44 from 'nostr-tools/nip44';
+import { readFile, mkdir, writeFile, rename } from 'node:fs/promises';
+import YAML2 from 'yaml';
+import { randomBytes } from 'node:crypto';
+import { dirname } from 'node:path';
 
 // src/constants.ts
 var RELAYS = [
@@ -2331,6 +2335,129 @@ var ElisymClient = class {
     this.pool.close();
   }
 };
+
+// src/payment/assets.ts
+var NATIVE_SOL = {
+  chain: "solana",
+  token: "sol",
+  decimals: 9,
+  symbol: "SOL"
+};
+var KNOWN_ASSETS = [NATIVE_SOL];
+function assetKey(a) {
+  return a.mint ? `${a.chain}:${a.token}:${a.mint}` : `${a.chain}:${a.token}`;
+}
+function resolveKnownAsset(chain, token, mint) {
+  const key = mint ? `${chain}:${token}:${mint}` : `${chain}:${token}`;
+  return KNOWN_ASSETS.find((asset) => assetKey(asset) === key);
+}
+function assetByKey(key) {
+  return KNOWN_ASSETS.find((asset) => assetKey(asset) === key);
+}
+var DECIMAL_RE = /^(\d+\.\d*|\d*\.\d+|\d+)$/;
+function parseAssetAmount(asset, human) {
+  const trimmed = human.trim();
+  if (!trimmed) {
+    throw new Error(`${asset.symbol} amount is empty`);
+  }
+  if (trimmed.startsWith("-")) {
+    throw new Error(`${asset.symbol} amount cannot be negative`);
+  }
+  if (!DECIMAL_RE.test(trimmed)) {
+    throw new Error(
+      `${asset.symbol} amount must be a non-negative decimal (e.g. "0.5", "1"); got "${human}"`
+    );
+  }
+  const dotPos = trimmed.indexOf(".");
+  let wholePart;
+  if (dotPos === -1) {
+    wholePart = trimmed;
+  } else if (dotPos === 0) {
+    wholePart = "0";
+  } else {
+    wholePart = trimmed.slice(0, dotPos);
+  }
+  const fracPart = dotPos === -1 ? "" : trimmed.slice(dotPos + 1);
+  if (fracPart.length > asset.decimals) {
+    throw new Error(
+      `${asset.symbol} amount has too many decimals (max ${asset.decimals}); got "${human}"`
+    );
+  }
+  const unit = 10n ** BigInt(asset.decimals);
+  const whole = BigInt(wholePart);
+  const frac = fracPart ? BigInt(fracPart.padEnd(asset.decimals, "0")) : 0n;
+  const raw = whole * unit + frac;
+  if (raw === 0n) {
+    throw new Error(`${asset.symbol} amount must be positive; got "${human}"`);
+  }
+  if (raw > BigInt(Number.MAX_SAFE_INTEGER)) {
+    throw new Error(
+      `${asset.symbol} amount exceeds safe range (max ${Number.MAX_SAFE_INTEGER} subunits)`
+    );
+  }
+  return raw;
+}
+function formatAssetAmount(asset, raw) {
+  const sign = raw < 0n ? "-" : "";
+  const abs = raw < 0n ? -raw : raw;
+  const unit = 10n ** BigInt(asset.decimals);
+  const whole = abs / unit;
+  const frac = abs % unit;
+  if (asset.decimals === 0) {
+    return `${sign}${whole} ${asset.symbol}`;
+  }
+  return `${sign}${whole}.${frac.toString().padStart(asset.decimals, "0")} ${asset.symbol}`;
+}
+async function writeFileAtomic(path, data, mode) {
+  await mkdir(dirname(path), { recursive: true });
+  const tmpPath = `${path}.tmp.${randomBytes(6).toString("hex")}`;
+  await writeFile(tmpPath, data, { mode });
+  try {
+    await rename(tmpPath, path);
+  } catch (e) {
+    try {
+      const { unlink } = await import('node:fs/promises');
+      await unlink(tmpPath);
+    } catch {
+    }
+    throw e;
+  }
+}
+
+// src/config/global.ts
+var SessionSpendLimitEntrySchema = z.object({
+  chain: z.enum(["solana"]),
+  token: z.string().min(1).max(16).regex(/^[a-z0-9]+$/, "token must be lowercase alphanumeric"),
+  mint: z.string().min(1).max(64).optional(),
+  amount: z.number().positive().finite()
+}).strict();
+var GlobalConfigSchema = z.object({
+  session_spend_limits: z.array(SessionSpendLimitEntrySchema).max(16).optional()
+}).strict();
+function isEnoent(e) {
+  return typeof e === "object" && e !== null && "code" in e && e.code === "ENOENT";
+}
+async function loadGlobalConfig(path) {
+  let raw;
+  try {
+    raw = await readFile(path, "utf-8");
+  } catch (e) {
+    if (isEnoent(e)) {
+      return {};
+    }
+    throw e;
+  }
+  if (raw.trim() === "") {
+    return {};
+  }
+  const parsed = YAML2.parse(raw);
+  return GlobalConfigSchema.parse(parsed ?? {});
+}
+async function writeGlobalConfig(path, config) {
+  const validated = GlobalConfigSchema.parse(config);
+  const body = YAML2.stringify(validated);
+  await writeFileAtomic(path, body, 420);
+}
 function formatSol(lamports) {
   const sol = new Decimal2(lamports).div(LAMPORTS_PER_SOL);
   if (sol.gte(1e6)) {
@@ -2387,6 +2514,141 @@ function validateAgentName(name) {
   }
 }
 
-export { BoundedSet, DEFAULTS, DEFAULT_KIND_OFFSET, DiscoveryService, ElisymClient, ElisymIdentity, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NostrPool, PROTOCOL_FEE_BPS, PROTOCOL_PROGRAM_ID_DEVNET, PROTOCOL_TREASURY, PaymentRequestSchema, PingService, RELAYS, SolanaPaymentStrategy, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, createPaymentRequestWithOnchainConfig, estimatePriorityFeeMicroLamports, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry };
+// src/primitives/rateLimiter.ts
+function createSlidingWindowLimiter(options) {
+  const { windowMs, maxPerWindow, maxKeys } = options;
+  if (windowMs <= 0) {
+    throw new RangeError("windowMs must be > 0");
+  }
+  if (maxPerWindow <= 0) {
+    throw new RangeError("maxPerWindow must be > 0");
+  }
+  if (maxKeys <= 0) {
+    throw new RangeError("maxKeys must be > 0");
+  }
+  const entries = /* @__PURE__ */ new Map();
+  function evictIfNeeded() {
+    while (entries.size > maxKeys) {
+      const oldestKey = entries.keys().next().value;
+      if (oldestKey === void 0) {
+        return;
+      }
+      entries.delete(oldestKey);
+    }
+  }
+  return {
+    peek(key, now = Date.now()) {
+      const entry = entries.get(key);
+      if (!entry) {
+        return { allowed: true, resetAt: now + windowMs, count: 0 };
+      }
+      const cutoff = now - windowMs;
+      const fresh = entry.hits.filter((timestamp) => timestamp > cutoff);
+      return {
+        allowed: fresh.length < maxPerWindow,
+        resetAt: (fresh[0] ?? now) + windowMs,
+        count: fresh.length
+      };
+    },
+    check(key, now = Date.now()) {
+      const entry = entries.get(key) ?? { hits: [] };
+      const cutoff = now - windowMs;
+      const fresh = entry.hits.filter((timestamp) => timestamp > cutoff);
+      if (fresh.length >= maxPerWindow) {
+        entries.delete(key);
+        entries.set(key, { hits: fresh });
+        return {
+          allowed: false,
+          resetAt: (fresh[0] ?? now) + windowMs,
+          count: fresh.length
+        };
+      }
+      fresh.push(now);
+      entries.delete(key);
+      entries.set(key, { hits: fresh });
+      evictIfNeeded();
+      return {
+        allowed: true,
+        resetAt: (fresh[0] ?? now) + windowMs,
+        count: fresh.length
+      };
+    },
+    prune(now = Date.now()) {
+      const cutoff = now - windowMs;
+      for (const [key, entry] of entries) {
+        const fresh = entry.hits.filter((timestamp) => timestamp > cutoff);
+        if (fresh.length === 0) {
+          entries.delete(key);
+        } else if (fresh.length !== entry.hits.length) {
+          entry.hits = fresh;
+        }
+      }
+    },
+    size() {
+      return entries.size;
+    },
+    reset() {
+      entries.clear();
+    }
+  };
+}
+
+// src/primitives/logRedact.ts
+var SECRET_REDACT_PATHS = [
+  "*.ELISYM_NOSTR_PRIVATE_KEY",
+  "*.ELISYM_SOLANA_PRIVATE_KEY",
+  "*.nostrPrivateKeyHex",
+  "*.solanaPrivateKeyBase58",
+  "*.secretKey",
+  "*.secret",
+  "ELISYM_NOSTR_PRIVATE_KEY",
+  "ELISYM_SOLANA_PRIVATE_KEY",
+  // Canonical on-disk `.secrets.json` field names. Logging the whole
+  // `secrets` object, or any single field directly, must not leak.
+  "llm_api_key",
+  "nostr_secret_key",
+  "solana_secret_key",
+  "*.llm_api_key",
+  "*.nostr_secret_key",
+  "*.solana_secret_key",
+  "secrets",
+  "*.secrets"
+];
+var INPUT_REDACT_PATHS = [
+  "content",
+  "input",
+  "prompt",
+  "*.content",
+  "*.input",
+  "*.prompt",
+  "event.content",
+  "*.event.content",
+  // JobLedger entries carry the raw Nostr event JSON (which embeds
+  // `event.content`) and the full LLM `resultContent` - both are
+  // customer-confidential and must never land in a structured log.
+  "rawEventJson",
+  "resultContent",
+  "*.rawEventJson",
+  "*.resultContent"
+];
+var DEFAULT_REDACT_PATHS = [...SECRET_REDACT_PATHS, ...INPUT_REDACT_PATHS];
+var INPUT_REDACT_LEAVES = /* @__PURE__ */ new Set([
+  "content",
+  "input",
+  "prompt",
+  "rawEventJson",
+  "resultContent"
+]);
+function makeCensor() {
+  return (_value, path) => {
+    const last = path[path.length - 1];
+    if (last !== void 0 && INPUT_REDACT_LEAVES.has(last)) {
+      return "[INPUT REDACTED]";
+    }
+    return "[REDACTED]";
+  };
+}
+
+export { BoundedSet, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ElisymClient, ElisymIdentity, GlobalConfigSchema, INPUT_REDACT_PATHS, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, NostrPool, PROTOCOL_FEE_BPS, PROTOCOL_PROGRAM_ID_DEVNET, PROTOCOL_TREASURY, PaymentRequestSchema, PingService, RELAYS, SECRET_REDACT_PATHS, SessionSpendLimitEntrySchema, SolanaPaymentStrategy, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimatePriorityFeeMicroLamports, formatAssetAmount, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, loadGlobalConfig, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, writeGlobalConfig };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map