@kroxy/kroxy 1.0.20 → 1.0.21

package/dist/src/client.js

@@ -92,8 +92,8 @@ export function postJob(jobId, description, capability, budgetUsdc, conditionsJs
 }
 export function acceptBid(jobId, bidId) {
     // Security hardening: private keys are never sent over HTTP request bodies.
-    // Bid acceptance now uses server-side demo-mode flow only until client-side
-    // signing + registration is wired end-to-end.
+    // In live mode, the API must be configured with KROXY_PAYER_PRIVATE_KEY.
+    // In demo mode, the API generates a synthetic escrow.
     return apiPost(`/api/jobs/${jobId}/accept/${bidId}`, {});
 }
 export function getJob(jobId) {

package/dist/src/tools/hire.js

@@ -89,6 +89,15 @@ function buildReceipt(opts) {
     }
     return lines.join('\n');
 }
+async function waitForBidWithRetries(jobId, waitMs, retries) {
+    for (let attempt = 0; attempt <= retries; attempt++) {
+        const jobWithBid = await pollJob(jobId, (j) => Boolean(j.bids?.length), waitMs);
+        if (jobWithBid?.bids?.length) {
+            return { jobWithBid, attempts: attempt + 1 };
+        }
+    }
+    return { jobWithBid: null, attempts: retries + 1 };
+}
 export async function executeHire(params) {
     const privateKey = process.env.KROXY_AGENT_PRIVATE_KEY;
     const demoMode = process.env.KROXY_DEMO_MODE === '1' || (!process.env.KROXY_DEMO_MODE && !privateKey);
@@ -98,13 +107,13 @@ export async function executeHire(params) {
     const nexusUrl = process.env.NEXUS_URL ?? (demoMode ? `${apiBase}/demo-agent` : 'http://localhost:3003');
     if (!wallet)
         throw new Error('KROXY_AGENT_WALLET is not configured. Run kroxy_setup to diagnose.');
-    if (!demoMode) {
-        throw new Error('Live-mode bid acceptance is disabled for security. Private keys are never sent over API calls. Set KROXY_DEMO_MODE=1.');
-    }
     const task = params.task;
     const maxPrice = params.maxPrice ?? 5.0;
     const minRep = params.minRep ?? 0;
     const capability = params.capability ?? detectCapability(task);
+    const bidWaitSeconds = Math.max(30, parseInt(process.env.KROXY_BID_WAIT_SECONDS ?? '60', 10));
+    const bidRetries = Math.max(0, parseInt(process.env.KROXY_BID_RETRIES ?? '2', 10));
+    const bidWaitMs = bidWaitSeconds * 1000;
     const jobId = `job_${Date.now()}_${randomBytes(3).toString('hex')}`;
     const startMs = Date.now();
     // 1. Find matching agents
@@ -125,10 +134,10 @@ export async function executeHire(params) {
     // 3. Post job with verifier conditions pointing at Nexus
     const conditions = buildConditions(nexusUrl, jobId);
     const job = await postJob(jobId, task, capability, maxPrice, conditions, wallet);
-    // 4. Wait for a bid (up to 60s)
-    const jobWithBid = await pollJob(job.id, (j) => Boolean(j.bids?.length), 60_000);
+    // 4. Wait for a bid with retries (default: 3 windows × 60s)
+    const { jobWithBid, attempts } = await waitForBidWithRetries(job.id, bidWaitMs, bidRetries);
     if (!jobWithBid?.bids?.length) {
-        throw new Error(`No bids received within 60 seconds (jobId: ${job.id}). ` +
+        throw new Error(`No bids received after ${attempts} attempt(s) of ${bidWaitSeconds}s (jobId: ${job.id}). ` +
             `The agent may be offline — use kroxy_browse to check availability.`);
     }
     const bid = jobWithBid.bids[0];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kroxy/kroxy",
-  "version": "1.0.20",
+  "version": "1.0.21",
   "type": "module",
   "description": "Trustless agent-to-agent payments via USDC escrow on Base blockchain",
   "license": "MIT",