@envarai/envarpay 0.2.0-alpha.8 → 2026.1025.1

package/examples/seller.json

@@ -1,52 +1,169 @@
 {
   "configVersion": 1,
-  "agent": {"id": "hermes-researcher", "name": "我的研究助手"},
+  "agent": {
+    "id": "hermes-researcher",
+    "name": "我的研究助手"
+  },
   "paymentProfiles": {
-    "base-usdc": {
-      "adapter": "x402", "scheme": "exact", "network": "eip155:84532",
-      "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
-      "payTo": "0x2222222222222222222222222222222222222222",
-      "facilitatorUrl": "https://facilitator.example"
-    },
-    "stripe-usd": {"adapter": "mpp", "method": "stripe", "intent": "charge", "currency": "usd", "accountRef": "seller-stripe"}
+    "envar-usd": {
+      "adapter": "envar_balance",
+      "currency": "usd",
+      "accountRef": "envar"
+    }
   },
   "services": [
     {
-      "id": "research", "name": "竞品调研", "revision": 1,
-      "execution": {"type": "a2a", "cardUrl": "http://hermes:9000/research/agent-card.json"},
+      "id": "research",
+      "name": "竞品调研",
+      "revision": 1,
+      "execution": {
+        "type": "a2a",
+        "cardUrl": "http://hermes:9000/research/agent-card.json"
+      },
       "contract": {
         "inputSchema": {
           "$schema": "https://json-schema.org/draft/2020-12/schema",
-          "type": "object", "additionalProperties": false, "required": ["topic", "competitors"],
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "topic",
+            "competitors"
+          ],
           "properties": {
-            "topic": {"type": "string", "minLength": 1, "maxLength": 500},
-            "competitors": {"type": "array", "minItems": 1, "maxItems": 3, "uniqueItems": true, "items": {"type": "string", "minLength": 1, "maxLength": 120}}
+            "topic": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 500
+            },
+            "competitors": {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 3,
+              "uniqueItems": true,
+              "items": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 120
+              }
+            }
           }
         },
-        "deliverables": ["report.md", "comparison.csv"], "targetDurationSeconds": 600, "includedRevisions": 0
+        "deliverables": [
+          "report.md",
+          "comparison.csv"
+        ],
+        "targetDurationSeconds": 600,
+        "includedRevisions": 0
       },
       "offers": [
-        {"id": "usdc-once", "pricing": {"kind": "fixed", "amount": "3000000"}, "collection": {"kind": "upfront"}, "paymentProfile": "base-usdc"},
-        {"id": "card-once", "pricing": {"kind": "fixed", "amount": "300"}, "collection": {"kind": "upfront"}, "paymentProfile": "stripe-usd"}
+        {
+          "id": "balance-once",
+          "pricing": {
+            "kind": "fixed",
+            "amount": "3000000"
+          },
+          "collection": {
+            "kind": "upfront"
+          },
+          "paymentProfile": "envar-usd"
+        }
       ]
     },
     {
-      "id": "summary-preview", "name": "免费试读", "revision": 1,
-      "execution": {"type": "a2a", "cardUrl": "http://hermes:9000/preview/agent-card.json"},
+      "id": "summary-preview",
+      "name": "免费试读",
+      "revision": 1,
+      "execution": {
+        "type": "a2a",
+        "cardUrl": "http://hermes:9000/preview/agent-card.json"
+      },
       "contract": {
-        "inputSchema": {"type": "object", "additionalProperties": false, "required": ["text"], "properties": {"text": {"type": "string", "minLength": 1, "maxLength": 500}}},
-        "deliverables": ["summary.txt"], "targetDurationSeconds": 60, "includedRevisions": 0
+        "inputSchema": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "text"
+          ],
+          "properties": {
+            "text": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 500
+            }
+          }
+        },
+        "deliverables": [
+          "summary.txt"
+        ],
+        "targetDurationSeconds": 60,
+        "includedRevisions": 0
       },
-      "offers": [{"id": "free", "pricing": {"kind": "free"}, "collection": {"kind": "none"}}]
+      "offers": [
+        {
+          "id": "free",
+          "pricing": {
+            "kind": "free"
+          },
+          "collection": {
+            "kind": "none"
+          }
+        }
+      ]
     },
     {
-      "id": "translation", "name": "文档翻译", "revision": 1,
-      "execution": {"type": "a2a", "cardUrl": "http://openclaw:9000/translate/agent-card.json"},
+      "id": "translation",
+      "name": "文档翻译",
+      "revision": 1,
+      "execution": {
+        "type": "a2a",
+        "cardUrl": "http://openclaw:9000/translate/agent-card.json"
+      },
       "contract": {
-        "inputSchema": {"type": "object", "additionalProperties": false, "required": ["documents"], "properties": {"documents": {"type": "array", "minItems": 1, "maxItems": 20, "items": {"type": "string", "minLength": 1, "maxLength": 10000}}}},
-        "deliverables": ["translations.json"], "targetDurationSeconds": 600, "includedRevisions": 0
+        "inputSchema": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "documents"
+          ],
+          "properties": {
+            "documents": {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 20,
+              "items": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 10000
+              }
+            }
+          }
+        },
+        "deliverables": [
+          "translations.json"
+        ],
+        "targetDurationSeconds": 600,
+        "includedRevisions": 0
       },
-      "offers": [{"id": "per-document", "pricing": {"kind": "quantity", "unit": "document", "unitAmount": "100000", "quantity": {"pointer": "/documents", "measure": "count", "min": 1, "max": 20}}, "collection": {"kind": "upfront"}, "paymentProfile": "base-usdc"}]
+      "offers": [
+        {
+          "id": "per-document",
+          "pricing": {
+            "kind": "quantity",
+            "unit": "document",
+            "unitAmount": "100000",
+            "quantity": {
+              "pointer": "/documents",
+              "measure": "count",
+              "min": 1,
+              "max": 20
+            }
+          },
+          "collection": {
+            "kind": "upfront"
+          },
+          "paymentProfile": "envar-usd"
+        }
+      ]
     }
   ]
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@envarai/envarpay",
-  "version": "0.2.0-alpha.8",
-  "description": "Independent A2A service commerce, budgeted buyers and x402/MPP payments",
+  "version": "2026.1025.1",
+  "description": "A2A services with Envar account-balance payments",
   "type": "module",
   "license": "MIT",
   "engines": {
@@ -20,18 +20,10 @@
       "types": "./dist/commerce/runtime.d.ts",
       "import": "./dist/commerce/runtime.js"
     },
-    "./client": {
-      "types": "./dist/commerce/client-runtime.d.ts",
-      "import": "./dist/commerce/client-runtime.js"
-    },
     "./server": {
       "types": "./dist/commerce/runtime.d.ts",
       "import": "./dist/commerce/runtime.js"
     },
-    "./mpp": {
-      "types": "./dist/commerce/mpp-runtime.d.ts",
-      "import": "./dist/commerce/mpp-runtime.js"
-    },
     "./envar": {
       "types": "./dist/commerce/envar.d.ts",
       "import": "./dist/commerce/envar.js"
@@ -42,7 +34,8 @@
     "README.md",
     "LICENSE",
     "schemas",
-    "examples"
+    "examples",
+    "runtime"
   ],
   "repository": {
     "type": "git",
@@ -51,24 +44,22 @@
   },
   "publishConfig": {
     "access": "public",
-    "tag": "next"
+    "tag": "latest"
   },
   "scripts": {
-    "build": "tsc",
-    "test": "npm run build && node --test test/*.test.mjs",
-    "prepack": "npm run build"
+    "build": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\" && tsc",
+    "test": "npm run build && node --test test/*.test.mjs ../../scripts/release.test.mjs",
+    "prepack": "npm run build",
+    "version:date": "node ../../scripts/release-version.mjs"
   },
   "dependencies": {
     "@a2a-js/sdk": "1.2.1",
     "@modelcontextprotocol/sdk": "^1.31.0",
-    "@x402/core": "2.24.0",
-    "@x402/evm": "2.24.0",
-    "@x402/extensions": "2.24.0",
     "ajv": "8.20.0",
     "ajv-formats": "3.0.1",
     "canonicalize": "2.1.0",
-    "mppx": "0.13.1",
-    "viem": "2.57.1"
+    "yaml": "2.8.2",
+    "zod": "4.6.5"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/runtime/hermes-setup-probe.py

@@ -0,0 +1,109 @@
+"""Read owner-local Hermes settings through a private pipe; never calls a model."""
+
+import json
+import os
+import shlex
+import sys
+from pathlib import Path
+
+try:
+    import hermes_yaml as yaml
+except ImportError:
+    import yaml
+
+
+def inspect(home):
+    home = Path(home or os.environ.get("HERMES_HOME", "~/.hermes")).expanduser().resolve()
+    config = yaml.safe_load((home / "config.yaml").read_text()) or {}
+    model = config.get("model", {})
+    if isinstance(model, str):
+        model = {"default": model}
+    provider_id = str(model.get("provider", "")).removeprefix("custom:")
+    provider = config.get("providers", {}).get(provider_id, {})
+    dotenv = {}
+    if (home / ".env").exists():
+        for line in (home / ".env").read_text().splitlines():
+            key, sep, value = line.partition("=")
+            if sep and not key.strip().startswith("#"):
+                dotenv[key.strip()] = value.strip().strip("\"'")
+    key_file = None
+    command = shlex.split(provider.get("key_cmd", ""))
+    if len(command) == 2 and command[0] == "cat":
+        key_file = str(Path(command[1]).expanduser().resolve())
+    key = (
+        provider.get("api_key")
+        or provider.get("key")
+        or dotenv.get(provider.get("key_env", ""))
+        or os.environ.get(provider.get("key_env", ""))
+        or dotenv.get("OPENAI_API_KEY")
+        or os.environ.get("OPENAI_API_KEY")
+    )
+    base = (
+        provider.get("api")
+        or provider.get("base_url")
+        or model.get("base_url")
+        or dotenv.get("OPENAI_BASE_URL")
+        or os.environ.get("OPENAI_BASE_URL")
+    )
+    if not model.get("default") or not base or not (key_file or key):
+        raise ValueError("Model configuration unavailable")
+    if key_file and (not Path(key_file).is_file() or not Path(key_file).read_text().strip()):
+        raise ValueError("Model key unavailable")
+    roots = [home / "skills"]
+    roots.extend(
+        Path(os.path.expandvars(str(p))).expanduser().resolve()
+        for p in config.get("skills", {}).get("external_dirs", [])
+    )
+    skills = []
+    seen = set()
+    for root in roots:
+        for entry in sorted(root.rglob("SKILL.md")) if root.is_dir() else []:
+            if entry.is_symlink():
+                continue
+            raw = entry.read_text()
+            front = raw.split("---", 2)
+            meta = yaml.safe_load(front[1]) if raw.startswith("---\n") and len(front) == 3 else {}
+            name = (meta or {}).get("name")
+            if not isinstance(name, str) or name in seen:
+                continue
+            seen.add(name)
+            files = []
+            unsupported = False
+            for file in entry.parent.rglob("*"):
+                if file.is_symlink():
+                    unsupported = True
+                elif file.is_file():
+                    if file.suffix.lower() not in {".md", ".txt"} and file.name != "LICENSE":
+                        unsupported = True
+                    files.append(str(file.relative_to(entry.parent)))
+            skills.append(
+                {
+                    "name": name,
+                    "path": str(entry.parent),
+                    "description": str((meta or {}).get("description", ""))[:500],
+                    "textPackage": not unsupported,
+                    "files": len(files),
+                }
+            )
+    return {
+        "home": str(home),
+        "python": sys.executable,
+        "model": model["default"],
+        "baseUrl": base,
+        "apiKeyFile": key_file,
+        "apiKey": None if key_file else key,
+        "skills": skills,
+        "skillRoots": [str(root) for root in roots],
+    }
+
+
+if __name__ == "__main__":
+    try:
+        print(json.dumps(inspect(sys.argv[1] if len(sys.argv) > 1 else None)))
+    except Exception:
+        print(
+            "Cannot read this Hermes model configuration. "
+            "Configure an OpenAI-compatible model with a base URL and a local API key first.",
+            file=sys.stderr,
+        )
+        sys.exit(1)

package/runtime/hermes-skill-inventory.py

@@ -0,0 +1,108 @@
+"""Bounded, metadata-only local inventory. Never reads model credentials or executes Skills."""
+
+import hashlib
+import json
+import os
+import re
+import sys
+from pathlib import Path
+
+try:
+    import hermes_yaml as yaml
+except ImportError:
+    import yaml
+
+
+def inventory(home):
+    home = Path(home or os.environ.get("HERMES_HOME", "~/.hermes")).expanduser().resolve()
+    config = yaml.safe_load((home / "config.yaml").read_text()) or {}
+    roots = [home / "skills"]
+    roots.extend(
+        Path(os.path.expandvars(str(p))).expanduser().resolve()
+        for p in config.get("skills", {}).get("external_dirs", [])
+    )
+    result, seen = [], set()
+    for root in roots:
+        if not root.is_dir():
+            continue
+        for folder, directories, files in os.walk(root, followlinks=False):
+            directories[:] = sorted(
+                d
+                for d in directories
+                if not d.startswith(".") and not (Path(folder) / d).is_symlink()
+            )
+            if len(Path(folder).relative_to(root).parts) > 10:
+                directories[:] = []
+                continue
+            if "SKILL.md" not in files:
+                continue
+            entry = Path(folder) / "SKILL.md"
+            if entry.is_symlink() or entry.stat().st_size > 48000:
+                continue
+            raw = entry.read_text()
+            front = raw.split("---", 2)
+            try:
+                meta = (
+                    yaml.safe_load(front[1]) if raw.startswith("---\n") and len(front) == 3 else {}
+                )
+            except Exception:
+                continue
+            name = (meta or {}).get("name")
+            if (
+                not isinstance(name, str)
+                or not re.fullmatch(r"[a-z][a-z0-9-]{0,63}", name)
+                or name in seen
+            ):
+                continue
+            seen.add(name)
+            package, size, supported = [], 0, True
+            for subfolder, dirs, names in os.walk(entry.parent, followlinks=False):
+                for d in dirs[:]:
+                    if (Path(subfolder) / d).is_symlink():
+                        supported = False
+                        dirs.remove(d)
+                if len(Path(subfolder).relative_to(entry.parent).parts) > 10:
+                    supported = False
+                    dirs[:] = []
+                for file_name in sorted(names):
+                    file = Path(subfolder) / file_name
+                    if file.is_symlink() or not file.is_file() or file.stat().st_size > 512 * 1024:
+                        supported = False
+                        continue
+                    size += file.stat().st_size
+                    if size > 1024 * 1024 or len(package) >= 128:
+                        supported = False
+                        break
+                    if (file.suffix.lower() not in {".md", ".txt"} and file.name != "LICENSE"
+                            and str(file.relative_to(entry.parent)) not in {".clawhub/origin.json", ".openclaw/source-origin.json"}):
+                        supported = False
+                    package.append(
+                        [
+                            str(file.relative_to(entry.parent)),
+                            hashlib.sha256(file.read_bytes()).hexdigest(),
+                        ]
+                    )
+            digest = hashlib.sha256(
+                json.dumps(sorted(package), separators=(",", ":")).encode()
+            ).hexdigest()
+            result.append(
+                {
+                    "name": name,
+                    "digest": digest,
+                    "path": str(entry.parent),
+                    "description": str((meta or {}).get("description", ""))[:500],
+                    "supported": supported,
+                }
+            )
+            directories[:] = []
+            if len(result) >= 128:
+                return result
+    return result
+
+
+if __name__ == "__main__":
+    try:
+        print(json.dumps(inventory(sys.argv[1] if len(sys.argv) > 1 else None)))
+    except Exception:
+        print("Skill inventory unavailable", file=sys.stderr)
+        sys.exit(1)

package/schemas/envarpay.config.schema.json

@@ -38,20 +38,11 @@
       "propertyNames": {
         "$ref": "#/$defs/id"
       },
-      "additionalProperties": {
-        "oneOf": [
-          {
-            "$ref": "#/$defs/x402"
-          },
-          {
-            "$ref": "#/$defs/mpp"
-          }
-        ]
-      }
+      "additionalProperties": { "$ref": "#/$defs/envarBalance" }
     },
     "services": {
       "type": "array",
-      "minItems": 1,
+      "minItems": 0,
       "maxItems": 64,
       "items": {
         "$ref": "#/$defs/service"
@@ -67,77 +58,20 @@
       "type": "string",
       "pattern": "^[1-9][0-9]{0,77}$"
     },
-    "address": {
-      "type": "string",
-      "pattern": "^0x[0-9a-fA-F]{40}$"
-    },
     "httpUrl": {
       "type": "string",
       "format": "uri",
       "pattern": "^https?://",
       "maxLength": 2048
     },
-    "x402": {
+    "envarBalance": {
       "type": "object",
       "additionalProperties": false,
-      "required": [
-        "adapter",
-        "scheme",
-        "network",
-        "asset",
-        "payTo",
-        "facilitatorUrl"
-      ],
+      "required": ["adapter", "currency", "accountRef"],
       "properties": {
-        "adapter": {
-          "const": "x402"
-        },
-        "scheme": {
-          "const": "exact"
-        },
-        "network": {
-          "type": "string",
-          "pattern": "^eip155:[1-9][0-9]*$"
-        },
-        "asset": {
-          "$ref": "#/$defs/address"
-        },
-        "payTo": {
-          "$ref": "#/$defs/address"
-        },
-        "facilitatorUrl": {
-          "type": "string",
-          "format": "uri",
-          "pattern": "^https://"
-        }
-      }
-    },
-    "mpp": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": [
-        "adapter",
-        "method",
-        "intent",
-        "currency",
-        "accountRef"
-      ],
-      "properties": {
-        "adapter": {
-          "const": "mpp"
-        },
-        "method": {
-          "const": "stripe"
-        },
-        "intent": {
-          "const": "charge"
-        },
-        "currency": {
-          "const": "usd"
-        },
-        "accountRef": {
-          "$ref": "#/$defs/id"
-        }
+        "adapter": { "const": "envar_balance" },
+        "currency": { "const": "usd" },
+        "accountRef": { "$ref": "#/$defs/id" }
       }
     },
     "service": {