@elisym/sdk 0.7.0 → 0.8.0

package/dist/index.d.cts

@@ -624,6 +624,48 @@ type ParseResult = {
  */
 declare function parsePaymentRequest(input: string, options?: ParseOptions): ParseResult;
 
+/**
+ * Multi-asset / multi-chain payment model.
+ *
+ * `Asset` describes a currency a customer can spend: native coins (SOL, ETH, BTC)
+ * or tokens (SPL, ERC-20). `assetKey` produces a stable string id for Map lookups.
+ *
+ * Today only `NATIVE_SOL` is in `KNOWN_ASSETS`. SPL (USDC) and other chains are
+ * extended by adding entries to `KNOWN_ASSETS` and, where relevant, to the
+ * MCP `DEFAULT_SESSION_LIMITS` catalogue.
+ */
+type Chain = 'solana';
+interface Asset {
+    chain: Chain;
+    /** Lowercase token id: 'sol', 'usdc', 'btc', 'eth'. */
+    token: string;
+    /** SPL mint / ERC-20 contract. Undefined for a native coin. */
+    mint?: string;
+    /** Subunits per whole (9 SOL, 6 USDC, 8 BTC, 18 ETH). */
+    decimals: number;
+    /** Display symbol: 'SOL', 'USDC'. */
+    symbol: string;
+}
+declare const NATIVE_SOL: Asset;
+declare const KNOWN_ASSETS: readonly Asset[];
+/** Stable Map key for `Asset`. Same shape regardless of Asset identity. */
+declare function assetKey(a: Pick<Asset, 'chain' | 'token' | 'mint'>): string;
+/** Find a known asset by (chain, token, mint). Returns undefined if unknown. */
+declare function resolveKnownAsset(chain: string, token: string, mint?: string): Asset | undefined;
+/** Reverse lookup: given an assetKey string, return the known asset or undefined. */
+declare function assetByKey(key: string): Asset | undefined;
+/**
+ * Parse a human amount string ("0.5", "1", "0.000001") into raw subunits (BigInt).
+ * Uses integer math to avoid float precision issues.
+ *
+ * Throws on: empty, negative, zero, malformed, too many fractional digits, or
+ * a value exceeding `Number.MAX_SAFE_INTEGER` (to keep downstream `Number(...)`
+ * call-sites safe).
+ */
+declare function parseAssetAmount(asset: Asset, human: string): bigint;
+/** Format raw subunits back to `"<whole>.<frac> <SYMBOL>"`. Keeps all `decimals` digits. */
+declare function formatAssetAmount(asset: Asset, raw: bigint): string;
+
 /**
  * Snapshot of the on-chain elisym-config program state.
  *
@@ -658,6 +700,73 @@ interface GetProtocolConfigOptions {
  */
 declare function getProtocolConfig(rpc: Rpc<SolanaRpcApi>, programId: Address, options?: GetProtocolConfigOptions): Promise<ProtocolConfig>;
 
+/**
+ * Global (not per-agent) config stored at `~/.elisym/config.yaml`.
+ *
+ * Currently holds only session-spend-limit overrides; other top-level fields
+ * may be added later. The loader tolerates a missing file (returns `{}`), but
+ * fails fast on malformed YAML or schema violations.
+ */
+
+declare const SessionSpendLimitEntrySchema: z.ZodObject<{
+    chain: z.ZodEnum<["solana"]>;
+    token: z.ZodString;
+    mint: z.ZodOptional<z.ZodString>;
+    amount: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    amount: number;
+    chain: "solana";
+    token: string;
+    mint?: string | undefined;
+}, {
+    amount: number;
+    chain: "solana";
+    token: string;
+    mint?: string | undefined;
+}>;
+declare const GlobalConfigSchema: z.ZodObject<{
+    session_spend_limits: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        chain: z.ZodEnum<["solana"]>;
+        token: z.ZodString;
+        mint: z.ZodOptional<z.ZodString>;
+        amount: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }, {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }>, "many">>;
+}, "strict", z.ZodTypeAny, {
+    session_spend_limits?: {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }[] | undefined;
+}, {
+    session_spend_limits?: {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }[] | undefined;
+}>;
+type SessionSpendLimitEntry = z.infer<typeof SessionSpendLimitEntrySchema>;
+type GlobalConfig = z.infer<typeof GlobalConfigSchema>;
+/**
+ * Read and validate `~/.elisym/config.yaml`. Returns `{}` if missing. Throws
+ * on malformed YAML or schema violations — the MCP server treats these as fatal
+ * at startup rather than silently ignoring bad overrides.
+ */
+declare function loadGlobalConfig(path: string): Promise<GlobalConfig>;
+/** Write the config YAML atomically. Validates via Zod before writing. */
+declare function writeGlobalConfig(path: string, config: GlobalConfig): Promise<void>;
+
 /** Encrypt plaintext using NIP-44 v2 (sender secret key + recipient public key). */
 declare function nip44Encrypt(plaintext: string, senderSk: Uint8Array, recipientPubkey: string): string;
 /** Decrypt ciphertext using NIP-44 v2 (receiver secret key + sender public key). */
@@ -836,4 +945,4 @@ declare const LIMITS: {
     readonly MAX_CAPABILITY_LENGTH: 64;
 };
 
-export { type Agent, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkStats, NostrPool, PROTOCOL_FEE_BPS, PROTOCOL_PROGRAM_ID_DEVNET, PROTOCOL_TREASURY, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, RELAYS, type RateLimitDecision, SECRET_REDACT_PATHS, type Signer, type SlidingWindowLimiter, type SlidingWindowLimiterOptions, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimatePriorityFeeMicroLamports, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry };
+export { type Agent, type Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, type Chain, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type GetProtocolConfigOptions, type GlobalConfig, GlobalConfigSchema, INPUT_REDACT_PATHS, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, type Network, type NetworkStats, NostrPool, PROTOCOL_FEE_BPS, PROTOCOL_PROGRAM_ID_DEVNET, PROTOCOL_TREASURY, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, RELAYS, type RateLimitDecision, SECRET_REDACT_PATHS, type SessionSpendLimitEntry, SessionSpendLimitEntrySchema, type Signer, type SlidingWindowLimiter, type SlidingWindowLimiterOptions, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimatePriorityFeeMicroLamports, formatAssetAmount, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, loadGlobalConfig, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, writeGlobalConfig };

package/dist/index.d.ts

@@ -624,6 +624,48 @@ type ParseResult = {
  */
 declare function parsePaymentRequest(input: string, options?: ParseOptions): ParseResult;
 
+/**
+ * Multi-asset / multi-chain payment model.
+ *
+ * `Asset` describes a currency a customer can spend: native coins (SOL, ETH, BTC)
+ * or tokens (SPL, ERC-20). `assetKey` produces a stable string id for Map lookups.
+ *
+ * Today only `NATIVE_SOL` is in `KNOWN_ASSETS`. SPL (USDC) and other chains are
+ * extended by adding entries to `KNOWN_ASSETS` and, where relevant, to the
+ * MCP `DEFAULT_SESSION_LIMITS` catalogue.
+ */
+type Chain = 'solana';
+interface Asset {
+    chain: Chain;
+    /** Lowercase token id: 'sol', 'usdc', 'btc', 'eth'. */
+    token: string;
+    /** SPL mint / ERC-20 contract. Undefined for a native coin. */
+    mint?: string;
+    /** Subunits per whole (9 SOL, 6 USDC, 8 BTC, 18 ETH). */
+    decimals: number;
+    /** Display symbol: 'SOL', 'USDC'. */
+    symbol: string;
+}
+declare const NATIVE_SOL: Asset;
+declare const KNOWN_ASSETS: readonly Asset[];
+/** Stable Map key for `Asset`. Same shape regardless of Asset identity. */
+declare function assetKey(a: Pick<Asset, 'chain' | 'token' | 'mint'>): string;
+/** Find a known asset by (chain, token, mint). Returns undefined if unknown. */
+declare function resolveKnownAsset(chain: string, token: string, mint?: string): Asset | undefined;
+/** Reverse lookup: given an assetKey string, return the known asset or undefined. */
+declare function assetByKey(key: string): Asset | undefined;
+/**
+ * Parse a human amount string ("0.5", "1", "0.000001") into raw subunits (BigInt).
+ * Uses integer math to avoid float precision issues.
+ *
+ * Throws on: empty, negative, zero, malformed, too many fractional digits, or
+ * a value exceeding `Number.MAX_SAFE_INTEGER` (to keep downstream `Number(...)`
+ * call-sites safe).
+ */
+declare function parseAssetAmount(asset: Asset, human: string): bigint;
+/** Format raw subunits back to `"<whole>.<frac> <SYMBOL>"`. Keeps all `decimals` digits. */
+declare function formatAssetAmount(asset: Asset, raw: bigint): string;
+
 /**
  * Snapshot of the on-chain elisym-config program state.
  *
@@ -658,6 +700,73 @@ interface GetProtocolConfigOptions {
  */
 declare function getProtocolConfig(rpc: Rpc<SolanaRpcApi>, programId: Address, options?: GetProtocolConfigOptions): Promise<ProtocolConfig>;
 
+/**
+ * Global (not per-agent) config stored at `~/.elisym/config.yaml`.
+ *
+ * Currently holds only session-spend-limit overrides; other top-level fields
+ * may be added later. The loader tolerates a missing file (returns `{}`), but
+ * fails fast on malformed YAML or schema violations.
+ */
+
+declare const SessionSpendLimitEntrySchema: z.ZodObject<{
+    chain: z.ZodEnum<["solana"]>;
+    token: z.ZodString;
+    mint: z.ZodOptional<z.ZodString>;
+    amount: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    amount: number;
+    chain: "solana";
+    token: string;
+    mint?: string | undefined;
+}, {
+    amount: number;
+    chain: "solana";
+    token: string;
+    mint?: string | undefined;
+}>;
+declare const GlobalConfigSchema: z.ZodObject<{
+    session_spend_limits: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        chain: z.ZodEnum<["solana"]>;
+        token: z.ZodString;
+        mint: z.ZodOptional<z.ZodString>;
+        amount: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }, {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }>, "many">>;
+}, "strict", z.ZodTypeAny, {
+    session_spend_limits?: {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }[] | undefined;
+}, {
+    session_spend_limits?: {
+        amount: number;
+        chain: "solana";
+        token: string;
+        mint?: string | undefined;
+    }[] | undefined;
+}>;
+type SessionSpendLimitEntry = z.infer<typeof SessionSpendLimitEntrySchema>;
+type GlobalConfig = z.infer<typeof GlobalConfigSchema>;
+/**
+ * Read and validate `~/.elisym/config.yaml`. Returns `{}` if missing. Throws
+ * on malformed YAML or schema violations — the MCP server treats these as fatal
+ * at startup rather than silently ignoring bad overrides.
+ */
+declare function loadGlobalConfig(path: string): Promise<GlobalConfig>;
+/** Write the config YAML atomically. Validates via Zod before writing. */
+declare function writeGlobalConfig(path: string, config: GlobalConfig): Promise<void>;
+
 /** Encrypt plaintext using NIP-44 v2 (sender secret key + recipient public key). */
 declare function nip44Encrypt(plaintext: string, senderSk: Uint8Array, recipientPubkey: string): string;
 /** Decrypt ciphertext using NIP-44 v2 (receiver secret key + sender public key). */
@@ -836,4 +945,4 @@ declare const LIMITS: {
     readonly MAX_CAPABILITY_LENGTH: 64;
 };
 
-export { type Agent, BoundedSet, type BuildTransactionOptions, type CapabilityCard, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type GetProtocolConfigOptions, INPUT_REDACT_PATHS, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, type Network, type NetworkStats, NostrPool, PROTOCOL_FEE_BPS, PROTOCOL_PROGRAM_ID_DEVNET, PROTOCOL_TREASURY, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, RELAYS, type RateLimitDecision, SECRET_REDACT_PATHS, type Signer, type SlidingWindowLimiter, type SlidingWindowLimiterOptions, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimatePriorityFeeMicroLamports, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry };
+export { type Agent, type Asset, BoundedSet, type BuildTransactionOptions, type CapabilityCard, type Chain, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ElisymClient, type ElisymClientConfig, type ElisymClientFullConfig, ElisymIdentity, type EstimatePriorityFeeOptions, type GetProtocolConfigOptions, type GlobalConfig, GlobalConfigSchema, INPUT_REDACT_PATHS, type Job, type JobStatus, type JobSubscriptionOptions, type JobUpdateCallbacks, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, type Network, type NetworkStats, NostrPool, PROTOCOL_FEE_BPS, PROTOCOL_PROGRAM_ID_DEVNET, PROTOCOL_TREASURY, type ParseOptions, type ParseResult, type ParsedPaymentRequest, type PaymentInfo, type PaymentRequestData, PaymentRequestSchema, type PaymentStrategy, type PaymentValidationCode, type PaymentValidationError, type PingResult, PingService, type ProtocolCluster, type ProtocolConfig, type ProtocolConfigInput, RELAYS, type RateLimitDecision, SECRET_REDACT_PATHS, type SessionSpendLimitEntry, SessionSpendLimitEntrySchema, type Signer, type SlidingWindowLimiter, type SlidingWindowLimiterOptions, SolanaPaymentStrategy, type SubCloser, type SubmitJobOptions, type VerifyOptions, type VerifyResult, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimatePriorityFeeMicroLamports, formatAssetAmount, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, loadGlobalConfig, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, writeGlobalConfig };

package/dist/index.js

@@ -4,6 +4,10 @@ import Decimal2 from 'decimal.js-light';
 import { z } from 'zod';
 import { verifyEvent, finalizeEvent, getPublicKey, nip19, generateSecretKey, SimplePool } from 'nostr-tools';
 import * as nip44 from 'nostr-tools/nip44';
+import { readFile, mkdir, writeFile, rename } from 'node:fs/promises';
+import YAML2 from 'yaml';
+import { randomBytes } from 'node:crypto';
+import { dirname } from 'node:path';
 
 // src/constants.ts
 var RELAYS = [
@@ -2331,6 +2335,129 @@ var ElisymClient = class {
     this.pool.close();
   }
 };
+
+// src/payment/assets.ts
+var NATIVE_SOL = {
+  chain: "solana",
+  token: "sol",
+  decimals: 9,
+  symbol: "SOL"
+};
+var KNOWN_ASSETS = [NATIVE_SOL];
+function assetKey(a) {
+  return a.mint ? `${a.chain}:${a.token}:${a.mint}` : `${a.chain}:${a.token}`;
+}
+function resolveKnownAsset(chain, token, mint) {
+  const key = mint ? `${chain}:${token}:${mint}` : `${chain}:${token}`;
+  return KNOWN_ASSETS.find((asset) => assetKey(asset) === key);
+}
+function assetByKey(key) {
+  return KNOWN_ASSETS.find((asset) => assetKey(asset) === key);
+}
+var DECIMAL_RE = /^(\d+\.\d*|\d*\.\d+|\d+)$/;
+function parseAssetAmount(asset, human) {
+  const trimmed = human.trim();
+  if (!trimmed) {
+    throw new Error(`${asset.symbol} amount is empty`);
+  }
+  if (trimmed.startsWith("-")) {
+    throw new Error(`${asset.symbol} amount cannot be negative`);
+  }
+  if (!DECIMAL_RE.test(trimmed)) {
+    throw new Error(
+      `${asset.symbol} amount must be a non-negative decimal (e.g. "0.5", "1"); got "${human}"`
+    );
+  }
+  const dotPos = trimmed.indexOf(".");
+  let wholePart;
+  if (dotPos === -1) {
+    wholePart = trimmed;
+  } else if (dotPos === 0) {
+    wholePart = "0";
+  } else {
+    wholePart = trimmed.slice(0, dotPos);
+  }
+  const fracPart = dotPos === -1 ? "" : trimmed.slice(dotPos + 1);
+  if (fracPart.length > asset.decimals) {
+    throw new Error(
+      `${asset.symbol} amount has too many decimals (max ${asset.decimals}); got "${human}"`
+    );
+  }
+  const unit = 10n ** BigInt(asset.decimals);
+  const whole = BigInt(wholePart);
+  const frac = fracPart ? BigInt(fracPart.padEnd(asset.decimals, "0")) : 0n;
+  const raw = whole * unit + frac;
+  if (raw === 0n) {
+    throw new Error(`${asset.symbol} amount must be positive; got "${human}"`);
+  }
+  if (raw > BigInt(Number.MAX_SAFE_INTEGER)) {
+    throw new Error(
+      `${asset.symbol} amount exceeds safe range (max ${Number.MAX_SAFE_INTEGER} subunits)`
+    );
+  }
+  return raw;
+}
+function formatAssetAmount(asset, raw) {
+  const sign = raw < 0n ? "-" : "";
+  const abs = raw < 0n ? -raw : raw;
+  const unit = 10n ** BigInt(asset.decimals);
+  const whole = abs / unit;
+  const frac = abs % unit;
+  if (asset.decimals === 0) {
+    return `${sign}${whole} ${asset.symbol}`;
+  }
+  return `${sign}${whole}.${frac.toString().padStart(asset.decimals, "0")} ${asset.symbol}`;
+}
+async function writeFileAtomic(path, data, mode) {
+  await mkdir(dirname(path), { recursive: true });
+  const tmpPath = `${path}.tmp.${randomBytes(6).toString("hex")}`;
+  await writeFile(tmpPath, data, { mode });
+  try {
+    await rename(tmpPath, path);
+  } catch (e) {
+    try {
+      const { unlink } = await import('node:fs/promises');
+      await unlink(tmpPath);
+    } catch {
+    }
+    throw e;
+  }
+}
+
+// src/config/global.ts
+var SessionSpendLimitEntrySchema = z.object({
+  chain: z.enum(["solana"]),
+  token: z.string().min(1).max(16).regex(/^[a-z0-9]+$/, "token must be lowercase alphanumeric"),
+  mint: z.string().min(1).max(64).optional(),
+  amount: z.number().positive().finite()
+}).strict();
+var GlobalConfigSchema = z.object({
+  session_spend_limits: z.array(SessionSpendLimitEntrySchema).max(16).optional()
+}).strict();
+function isEnoent(e) {
+  return typeof e === "object" && e !== null && "code" in e && e.code === "ENOENT";
+}
+async function loadGlobalConfig(path) {
+  let raw;
+  try {
+    raw = await readFile(path, "utf-8");
+  } catch (e) {
+    if (isEnoent(e)) {
+      return {};
+    }
+    throw e;
+  }
+  if (raw.trim() === "") {
+    return {};
+  }
+  const parsed = YAML2.parse(raw);
+  return GlobalConfigSchema.parse(parsed ?? {});
+}
+async function writeGlobalConfig(path, config) {
+  const validated = GlobalConfigSchema.parse(config);
+  const body = YAML2.stringify(validated);
+  await writeFileAtomic(path, body, 420);
+}
 function formatSol(lamports) {
   const sol = new Decimal2(lamports).div(LAMPORTS_PER_SOL);
   if (sol.gte(1e6)) {
@@ -2522,6 +2649,6 @@ function makeCensor() {
   };
 }
 
-export { BoundedSet, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ElisymClient, ElisymIdentity, INPUT_REDACT_PATHS, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NostrPool, PROTOCOL_FEE_BPS, PROTOCOL_PROGRAM_ID_DEVNET, PROTOCOL_TREASURY, PaymentRequestSchema, PingService, RELAYS, SECRET_REDACT_PATHS, SolanaPaymentStrategy, assertExpiry, assertLamports, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimatePriorityFeeMicroLamports, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, makeCensor, nip44Decrypt, nip44Encrypt, parsePaymentRequest, pickPercentileFee, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry };
+export { BoundedSet, DEFAULTS, DEFAULT_KIND_OFFSET, DEFAULT_REDACT_PATHS, DiscoveryService, ElisymClient, ElisymIdentity, GlobalConfigSchema, INPUT_REDACT_PATHS, KIND_APP_HANDLER, KIND_JOB_FEEDBACK, KIND_JOB_REQUEST, KIND_JOB_REQUEST_BASE, KIND_JOB_RESULT, KIND_JOB_RESULT_BASE, KIND_PING, KIND_PONG, KNOWN_ASSETS, LAMPORTS_PER_SOL, LIMITS, MarketplaceService, MediaService, NATIVE_SOL, NostrPool, PROTOCOL_FEE_BPS, PROTOCOL_PROGRAM_ID_DEVNET, PROTOCOL_TREASURY, PaymentRequestSchema, PingService, RELAYS, SECRET_REDACT_PATHS, SessionSpendLimitEntrySchema, SolanaPaymentStrategy, assertExpiry, assertLamports, assetByKey, assetKey, buildPaymentInstructions, calculateProtocolFee, clearPriorityFeeCache, clearProtocolConfigCache, createPaymentRequestWithOnchainConfig, createSlidingWindowLimiter, estimatePriorityFeeMicroLamports, formatAssetAmount, formatSol, getProtocolConfig, getProtocolProgramId, jobRequestKind, jobResultKind, loadGlobalConfig, makeCensor, nip44Decrypt, nip44Encrypt, parseAssetAmount, parsePaymentRequest, pickPercentileFee, resolveKnownAsset, timeAgo, toDTag, truncateKey, validateAgentName, validateExpiry, writeGlobalConfig };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map