@net-mesh/core 0.30.0 → 0.31.0

package/README.md

@@ -31,8 +31,11 @@ The five feature flags that gate the storage / query / OS surfaces on this bindi
 | `netdb` | `NetDb` composition (requires `cortex`); the `net_netdb_*` FFI entry points ship with this feature. |
 | `meshdb` | `MeshQuery`, `MeshQueryRunner`, `QueryBuilder`, `Predicate`, `InMemoryChainReader`, plus the `libnet_meshdb` cdylib. |
 | `meshos` | `MeshOsDaemonSdk`, `MeshOsDaemonHandle`, plus the `libnet_meshos` cdylib. |
+| `consent` | `CapabilityId`, `ConsentPolicy`, `PinStore` — the local consent / pin surface (no mesh dep). In the default features. |
+| `mcp` | `classifyMcpServer`, `lowerMcpTool` — the MCP bridge pure helpers. In the default features. |
 
-Enable at build time:
+Enable at build time (`consent` + `mcp` are on by default — add them explicitly
+if you build with `--no-default-features`):
 
 ```bash
 napi build --platform --release --features "cortex netdb redex-disk meshdb meshos"

package/errors.d.ts

@@ -4,6 +4,9 @@ export declare class CortexError extends Error {
 export declare class NetDbError extends Error {
     constructor(detail?: string);
 }
+export declare class GatewayError extends Error {
+    constructor(detail?: string);
+}
 export declare class RpcError extends Error {
     constructor(detail?: string);
 }

package/errors.js

@@ -17,12 +17,13 @@
 // Prefixes mirror `ERR_*_PREFIX` in `bindings/node/src/cortex.rs`
 // and `bindings/node/src/mesh_rpc.rs`. Keep the strings in lockstep.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RpcCapabilityDeniedError = exports.RpcCancelledError = exports.RpcCodecError = exports.RpcTransportError = exports.RpcServerError = exports.RpcTimeoutError = exports.RpcNoRouteError = exports.RpcError = exports.NetDbError = exports.CortexError = void 0;
+exports.RpcCapabilityDeniedError = exports.RpcCancelledError = exports.RpcCodecError = exports.RpcTransportError = exports.RpcServerError = exports.RpcTimeoutError = exports.RpcNoRouteError = exports.RpcError = exports.GatewayError = exports.NetDbError = exports.CortexError = void 0;
 exports.classifyError = classifyError;
 exports.extractMessage = extractMessage;
 const ERR_CORTEX_PREFIX = 'cortex:';
 const ERR_NETDB_PREFIX = 'netdb:';
 const ERR_NRPC_PREFIX = 'nrpc:';
+const ERR_GATEWAY_PREFIX = 'gateway:';
 class CortexError extends Error {
     constructor(detail) {
         super(detail ?? 'cortex adapter error');
@@ -39,6 +40,18 @@ class NetDbError extends Error {
     }
 }
 exports.NetDbError = NetDbError;
+// The CapabilityGateway throws (rejects) ONLY for transport/programming
+// failures behind a `gateway:` prefix — e.g. the mesh node was shut down at
+// construction. Gate *outcomes* (denied / requires_payment_approval / …) are
+// never thrown: they are the status-JSON string the method resolves to.
+class GatewayError extends Error {
+    constructor(detail) {
+        super(detail ?? 'capability gateway error');
+        this.name = 'GatewayError';
+        Object.setPrototypeOf(this, GatewayError.prototype);
+    }
+}
+exports.GatewayError = GatewayError;
 // nRPC error hierarchy. Mirrors net::adapter::net::mesh_rpc::RpcError;
 // the napi binding's mesh_rpc.rs::nrpc_err_from_inner emits each
 // variant under a stable kind segment after the `nrpc:` prefix:
@@ -179,6 +192,9 @@ function classifyError(e) {
     if (msg.startsWith(ERR_NRPC_PREFIX)) {
         return classifyRpcError(msg);
     }
+    if (msg.startsWith(ERR_GATEWAY_PREFIX)) {
+        return new GatewayError(msg);
+    }
     return e;
 }
 /**

package/index.d.ts

@@ -181,6 +181,98 @@ export declare class BlobRef {
   static treeFromParts(uri: string, rootHash: Buffer, totalSize: bigint, depth: number): BlobRef
 }
 
+export declare class CapabilityGateway {
+  constructor(mesh: NetMesh, pinStorePath?: string | undefined | null, paymentPolicyPath?: string | undefined | null, paymentProfile?: string | undefined | null, paymentUnsafeMockAutoAllow?: boolean | undefined | null, paymentSignerAddress?: string | undefined | null, paymentSigner?: ((arg: string) => Promise<string>) | undefined | null, paymentSignerSvmAddress?: string | undefined | null, paymentSignerSvm?: ((arg: string) => Promise<string>) | undefined | null, paymentSignerXrplAddress?: string | undefined | null, paymentSignerXrpl?: ((arg: string) => Promise<string>) | undefined | null)
+  /**
+   * Release the internal mesh-node reference so the underlying `NetMesh` can
+   * be `shutdown()` deterministically. A `#[napi]` class is GC-finalized, not
+   * scope-dropped, so without this the gateway's retained node clone keeps
+   * `NetMesh.shutdown()` (which needs sole ownership of the node) failing
+   * until GC runs. Call it before `mesh.shutdown()`. Idempotent; after
+   * `close()`, `search` / `describe` / `invoke` resolve to a structured
+   * `closed` status (never a throw). The operator approval verbs still work —
+   * they reopen the spend-policy store, independent of the node.
+   */
+  close(): void
+  /** The machine-shared pin store path this gateway consults, if any. */
+  get pinStorePath(): string | null
+  /**
+   * Search the mesh for capabilities matching `query` (substring over id /
+   * name / description). Resolves to `{"status":"ok","capabilities":[...]}`
+   * (each row carries `requires_approval`), or `{"status":"<err>","error":...}`.
+   * An empty index is `ok` with an empty list — never an error.
+   */
+  search(query: string): Promise<string>
+  /**
+   * Describe one capability by its `provider/capability` id. Resolves to a
+   * JSON string with the full schema + `requires_approval` + `pricing_terms`,
+   * or `{"status":"<err>","error":...}`.
+   */
+  describe(capId: string): Promise<string>
+  /**
+   * Invoke a capability through the consent gate. `argumentsJson` is the
+   * tool's own arguments as a JSON object string (default `{}`).
+   *
+   * Resolves to a JSON string whose `status` is one of `ok`,
+   * `requires_approval`, `requires_payment_approval`, `validation_error`,
+   * `denied`, `not_found`, `transport_error`, `no_daemon`, or `error`. Never
+   * rejects for a gate outcome; a malformed id / arguments is itself a
+   * structured error.
+   */
+  invoke(capId: string, argumentsJson?: string | undefined | null): Promise<string>
+  /**
+   * Approve a held payment quote under operator policy, resolving a prior
+   * `requires_payment_approval` so the next `invoke` redeems it. Resolves to
+   * `{"status":"ok","quote_id":...,"changed":bool}`, or a structured
+   * `no_payment_policy` / `error`. Operator surface — `invoke` only *requests*
+   * approval; this grants it.
+   */
+  approvePayment(quoteId: string): Promise<string>
+  /**
+   * Reject / remove a payment approval record. Resolves to
+   * `{"status":"ok","quote_id":...,"changed":bool}`, or a structured error.
+   */
+  rejectPayment(quoteId: string): Promise<string>
+  /**
+   * The quote ids awaiting approval, for a consent UX to render. Resolves to
+   * `{"status":"ok","pending":[quote_id, ...]}`, or a structured error.
+   */
+  pendingPayments(): Promise<string>
+  /**
+   * Today's reserved spend total for a `(network, x402 asset)` pair, as the
+   * canonical atomic-amount string. Resolves to
+   * `{"status":"ok","network":...,"asset":...,"spent":"<atomic>"}`, or a
+   * structured error. `network` / `asset` are the x402 wire values.
+   */
+  spentToday(network: string, asset: string): Promise<string>
+}
+
+/**
+ * A capability's canonical identity: `provider/capability`. Construction
+ * and parsing canonicalize the provider (whitespace, `0x`-hex node ids),
+ * so a pin or consent record keyed through this type can never miss a
+ * differently spelled twin. Purely a parse / inspect helper — the
+ * consent and pin APIs take the `provider/capability` string directly
+ * and canonicalize internally.
+ */
+export declare class CapabilityId {
+  /** Build from parts. The provider is canonicalized. */
+  constructor(provider: string, capability: string)
+  /**
+   * Parse the `provider/capability` display form (splits on the FIRST
+   * `/`; the capability half may itself contain `/`). Throws
+   * `consent: ...` on a missing or empty half.
+   */
+  static parse(s: string): CapabilityId
+  /** The provider node qualifier (canonical spelling). */
+  get provider(): string
+  /** The capability / tool name. */
+  get capability(): string
+  /** The `provider/capability` display / wire form. */
+  display(): string
+  toString(): string
+}
+
 /**
  * Producer-facing chunking-strategy value type for the v0.3
  * Tree store path. SDK consumers construct an instance via the
@@ -286,6 +378,41 @@ export declare class ClientStreamCall {
   close(): Promise<void>
 }
 
+/**
+ * The consumer-side consent gate: a config allowlist plus a set of pinned
+ * capabilities, deciding per capability + wire credential status. The
+ * decision logic is the SDK's — this class only carries state.
+ */
+export declare class ConsentPolicy {
+  /**
+   * An empty policy: with no entries, EVERY discovered capability
+   * requires approval (a wire credential status — including `"none"` —
+   * is never trusted).
+   */
+  constructor()
+  /** Allowlist a capability (operator config) — a standing pre-approval. */
+  allow(capId: string): void
+  /** Record an approved pin. */
+  pin(capId: string): void
+  /** Remove a pin. */
+  unpin(capId: string): void
+  /** Is the capability pinned? */
+  isPinned(capId: string): boolean
+  /** The pinned capabilities' display ids, sorted. */
+  pinned(): Array<string>
+  /**
+   * Decide whether the capability, with the given wire credential
+   * status, may be invoked: `"allowed"` or `"requires_approval"`. The
+   * decision is the SDK enum's stable string form — never re-derive it.
+   */
+  decide(capId: string, credentialStatus: string): string
+  /**
+   * Convenience: does invoking the capability require approval the
+   * operator has not granted?
+   */
+  requiresApproval(capId: string, credentialStatus: string): boolean
+}
+
 /**
  * Handle returned by [`DaemonRuntime::spawn`]. Identifies a
  * specific daemon by its `origin_hash`; cloning the JS object
@@ -1013,6 +1140,36 @@ export declare class JsResponseSink {
   send(body: Buffer): boolean
 }
 
+/**
+ * A live publication of a node's own local tools (from
+ * `NetMesh.publishTools`). Hold it to keep the tools announced + served;
+ * [`withdraw`](Self::withdraw) reverses it (re-announcing the remainder), and
+ * dropping it (or [`stop`](Self::stop)) unregisters the services.
+ */
+export declare class LocalPublicationHandle {
+  /**
+   * The served tool ids (channel-safe; a sanitized id differs from the
+   * original name). Empty once withdrawn / stopped.
+   */
+  get tools(): Array<string>
+  /** Tool names skipped because they had no usable id (an empty name). */
+  get skippedTools(): Array<string>
+  /** Whether the publication is still live. */
+  get serving(): boolean
+  /**
+   * Withdraw the publication immediately: re-announce the remaining
+   * publications' set so peers stop advertising these tools, then stop the
+   * services. Idempotent — a second call resolves to a no-op.
+   */
+  withdraw(): Promise<void>
+  /**
+   * Stop serving (unregister the services on drop; unlike
+   * [`withdraw`](Self::withdraw) this does not re-announce — the announcement
+   * reconciles at the next registry change). Idempotent.
+   */
+  stop(): void
+}
+
 export declare class LogStream {
   /**
    * Resolve to the next log record, or `null` when the stream
@@ -1933,6 +2090,12 @@ export declare class NetMesh {
   static create(options: MeshOptions): Promise<NetMesh>
   /** Get this node's Noise public key (hex-encoded). */
   publicKey(): string
+  /**
+   * This node's actual bound socket address (`"ip:port"`). With
+   * `bindAddr: "127.0.0.1:0"` the OS assigns the port; read it here to
+   * hand to a peer's `connect(...)`. Mirrors the Python `local_addr`.
+   */
+  localAddr(): string
   /**
    * Get this node's ID. Returned as `BigInt` so full u64
    * precision is preserved — keypair-derived node_ids
@@ -2139,6 +2302,28 @@ export declare class NetMesh {
   unregisterPlacementFilter(id: string): boolean
   /** Whether `id` is currently registered. Mainly for tests. */
   hasPlacementFilter(id: string): boolean
+  /**
+   * Publish this node's OWN local `tools` as mesh capabilities, backed by
+   * a JS **async** `handler`. Each tool is
+   * `{ name, description?, inputSchema }` (`inputSchema` a JSON-object
+   * string); the `handler` is
+   * `(args: { toolName, argumentsJson }) => Promise<{ text, isError? }>`,
+   * called when a consumer invokes a tool — its resolved `text` is the
+   * tool's output (`isError: true` flags a tool-level failure). A
+   * consumer discovers + invokes these through the ordinary
+   * `CapabilityGateway`; no consume-side change.
+   *
+   * `options.ownerOrigin` scopes admission: an `originHash` (BigInt)
+   * admits only that caller; omit it to admit **only this node itself**
+   * (fail-closed default — the tools are backed by an arbitrary local
+   * callback). Set `options.allowAnyCaller = true` to explicitly admit
+   * every mesh peer (overrides `ownerOrigin`; gate invocations yourself).
+   *
+   * Resolves to a [`LocalPublicationHandle`](crate::publish::LocalPublicationHandle)
+   * that must be held to keep the tools published. This node must be
+   * `start()`ed. (Requires the `publish` feature.)
+   */
+  publishTools(tools: Array<PublishToolJs>, handler: (arg: ToolInvokeArgs) => Promise<ToolCallResultJs>, options?: PublishOptions | undefined | null): Promise<LocalPublicationHandle>
   /**
    * Walk the local capability fold for every AI tool
    * published in the mesh and return one
@@ -2376,6 +2561,101 @@ export declare class OperatorRegistry {
   verifyBundle(signatures: Array<OperatorSignatureJs>, payload: Buffer, threshold: number): void
 }
 
+export declare class PaymentProvider {
+  /**
+   * Build a provider over a started `mesh`. `statePath` is the settlement
+   * store file — it holds the replay/idempotency index and **must be
+   * durable + single-owner** (a temp path loses paid quotes across
+   * restarts). `billingLogPath` optionally records the immutable
+   * `net.billing.event@1` stream.
+   */
+  constructor(mesh: NetMesh, statePath: string, billingLogPath?: string | undefined | null)
+  /**
+   * Release the mesh node + tear down the quote/pay wire so the underlying
+   * `NetMesh` can be `shutdown()` deterministically (a `#[napi]` class is
+   * GC-finalized, not scope-dropped). Call it — plus `stop()`/`withdraw()`
+   * on any handles from `publishPaidTools` — before `mesh.shutdown()`.
+   * Idempotent; after `close()`, `publishPaidTools` throws. `readBilling`
+   * + `providerEntityId` still work (they hold no node reference).
+   */
+  close(): void
+  /**
+   * The node's 32-byte mesh entity id — the provider identity these tools
+   * price + quote under. Pass it to `buildPricingTerms`.
+   */
+  get providerEntityId(): Buffer
+  /**
+   * The immutable billing events this provider recorded, oldest first —
+   * each a `net.billing.event@1` JSON string. Read-only (billing is
+   * emitted by the engine; this only reads). Requires a `billingLogPath`
+   * at construction, else rejects.
+   */
+  readBilling(): Promise<Array<string>>
+  /**
+   * Publish priced tools, gated by this provider's payment engine. `tools`
+   * + `handler` + `options` are exactly as on `NetMesh.publishTools`;
+   * `pricing` maps a tool name to its `net.pricing.terms@1` JSON (from
+   * `buildPricingTerms`). A priced tool serves only **after** its quote is
+   * paid + redeemed (at-most-once, against this same engine). Fail-closed:
+   * an empty `pricing` map throws (use `NetMesh.publishTools` for free
+   * tools); a pricing key naming no published tool is a publish error.
+   * Resolves to a `LocalPublicationHandle` — hold it to keep serving.
+   */
+  publishPaidTools(tools: Array<PublishToolJs>, handler: (arg: ToolInvokeArgs) => Promise<ToolCallResultJs>, pricing: Record<string, string>, options?: PublishOptions | undefined | null): Promise<LocalPublicationHandle>
+}
+
+/**
+ * The persistent, machine-shared pin store — a *path-scoped handle*, with
+ * Promise-returning methods.
+ *
+ * Reads load a fresh snapshot of the file; every mutation runs a full
+ * load→apply→save transaction under the SDK's cross-process advisory
+ * lock on napi's tokio runtime, so a concurrent `net mcp pin` CLI
+ * invocation, a running `net mcp serve` shim, or another handle can never
+ * be clobbered by a stale snapshot.
+ *
+ * `request` is the model-callable verb (only ever writes a *pending*
+ * record); `approve` / `reject` are operator verbs — keep them out of any
+ * model loop.
+ */
+export declare class PinStore {
+  /**
+   * A handle on the pin store file at `path`. The file need not exist
+   * yet — a missing store reads as empty and is created on the first
+   * mutation.
+   */
+  constructor(path: string)
+  /** The store's file path. */
+  get path(): string
+  /**
+   * Record a pin **request** (the model-callable verb). Writes a
+   * `"pending"` record if none exists; an existing record — pending or
+   * approved — is left untouched (a request never upgrades a pin).
+   * Resolves to the resulting state.
+   */
+  request(capId: string): Promise<string>
+  /**
+   * **Approve** a pin (operator verb; creates the record if absent).
+   * Resolves to whether this changed the stored state.
+   */
+  approve(capId: string): Promise<boolean>
+  /**
+   * **Reject / remove** a pin entirely (operator verb). Resolves to
+   * whether a record was removed.
+   */
+  reject(capId: string): Promise<boolean>
+  /** Is the capability approved (fresh snapshot)? */
+  isApproved(capId: string): Promise<boolean>
+  /** The capability's state — `"pending"`, `"approved"`, or `null`. */
+  state(capId: string): Promise<string | null>
+  /** Every approved capability's display id, sorted. */
+  approved(): Promise<Array<string>>
+  /** Every pending capability's display id, sorted. */
+  pending(): Promise<Array<string>>
+  /** All records as `{ capId, state }` objects, sorted by capId. */
+  list(): Promise<Array<PinRecordJs>>
+}
+
 /**
  * Fluent builder for the common-ops query shape. Each
  * chainable method returns a fresh builder so callers can
@@ -3309,6 +3589,22 @@ export declare function blobPublish(adapterId: string, uri: string, data: Buffer
  */
 export declare function blobResolve(adapterId: string, payload: Buffer): Promise<Buffer>
 
+/**
+ * Author the canonical `net.pricing.terms@1` JSON string that prices a
+ * capability — to hand to `publishPaidTools` or announce at discovery.
+ *
+ * `providerEntityId` is the node's 32-byte mesh entity id
+ * (`PaymentProvider.providerEntityId`) — the identity that issues quotes for
+ * these terms. Only the public id crosses; keys never do. `requirementsJson` is
+ * a JSON array of x402 `PaymentRequirements` objects (`scheme`, `network`,
+ * `amount`, `asset`, `payTo`, `maxTimeoutSeconds`, optional `extra` — the x402
+ * camelCase wire names); one entry per acceptable `(scheme, network, asset)`.
+ * Returns the canonical, byte-preserved terms string — opaque downstream and
+ * echoed verbatim at discovery. Throws on a bad entity id, malformed JSON, or
+ * an empty list.
+ */
+export declare function buildPricingTerms(providerEntityId: Buffer, capability: string, requirementsJson: string): string
+
 /**
  * Cache policy as a tagged plain-object shape. `kind` is one
  * of `"permanent"` (cache until LRU eviction; use only when
@@ -3564,6 +3860,19 @@ export interface ChannelConfigJs {
  */
 export declare function channelHash(channel: string): bigint
 
+/**
+ * Classify a wrapped MCP server's credential exposure. Returns the status
+ * label: `"credentialed"`, `"external_api"`, `"unknown"`, or `"none"`.
+ *
+ * Conservative by construction (the classifier is the bridge's one Rust
+ * implementation): detection can never yield the ungated `"none"` — only
+ * `credentialOverride="no-credentials"` with `force=true` can, mirroring
+ * `net wrap --no-credentials --force`. Only env KEYS drive detection;
+ * values are never inspected beyond presence and never appear in the
+ * result.
+ */
+export declare function classifyMcpServer(program: string, args: Array<string>, envs: Array<EnvPairJs>, credentialOverride?: string | undefined | null, force?: boolean | undefined | null): string
+
 /**
  * A captured CortEX adapter state snapshot, suitable for
  * `openFromSnapshot`. Callers persist both fields together.
@@ -3578,6 +3887,15 @@ export interface CortexSnapshot {
   lastSeq?: bigint
 }
 
+/**
+ * Does a wire-declared credential status require local consent before the
+ * capability may be invoked? Implements the core trust boundary: a wire
+ * `"none"` is NOT trusted (it gates like `"unknown"`), so even `"none"`
+ * (and any unrecognised value) returns `true` — a discovered capability
+ * can only ever over-gate, never bypass consent.
+ */
+export declare function credentialRequiresConsent(status: string): boolean
+
 /**
  * Supervisor → daemon control event, in the cross-binding wire
  * form. Variants:
@@ -3763,6 +4081,16 @@ export declare function decodeWindow(row: ResultRow): WindowBoundary | null
  */
 export declare function delegateToken(signer: Identity, parentBytes: Buffer, newSubject: Buffer, restrictedScope: Array<string>): Buffer
 
+/**
+ * One env addition passed to the wrapped server — only the KEY drives
+ * classification; the value is never inspected beyond presence and never
+ * appears in a result.
+ */
+export interface EnvPairJs {
+  key: string
+  value: string
+}
+
 /** Configuration options for creating an EventBus. */
 export interface EventBusOptions {
   /** Number of shards (defaults to CPU core count) */
@@ -4158,6 +4486,34 @@ export interface LogRecordJs {
   message: string
 }
 
+/**
+ * The lowered-tool DTO. `descriptor` is the `net_sdk` ToolDescriptor as a
+ * JSON-encoded string (`JSON.parse` it), and `bridgeMetadata` the
+ * `tool::<id>::<field>` announcement metadata (classification labels
+ * only, never a secret).
+ */
+export interface LoweredToolJs {
+  /** The channel-safe (possibly sanitized) service id. */
+  toolId: string
+  /** The original tool name `tools/call` must use. */
+  mcpName: string
+  /** The Net discovery descriptor, JSON-encoded (`JSON.parse` it). */
+  descriptor: string
+  /** `tool::<id>::<field>` announcement metadata — labels only. */
+  bridgeMetadata: Record<string, string>
+}
+
+/**
+ * Lower one MCP `tools/list` entry (as its JSON object string) to the Net
+ * discovery shape.
+ *
+ * `credentialStatus` takes the exact label the classifier produced
+ * (including a forced `"none"` — this is trusted local input, not a wire
+ * value); `substitutability` is `"provider_local"` (default) or
+ * `"provider_equivalent"`.
+ */
+export declare function lowerMcpTool(toolJson: string, serverVersion: string, credentialStatus: string, substitutability?: string | undefined | null): LoweredToolJs
+
 /**
  * Maintenance state projection. The `kind` discriminator carries
  * the variant; `sinceMs` / `deadlineRemainingMs` / `reason` are
@@ -4327,6 +4683,22 @@ export interface MeshOptions {
    * without `--features port-mapping`.
    */
   tryPortMapping?: boolean
+  /**
+   * Opt out of channel authorization: when `true`, no
+   * `ChannelConfigRegistry` is installed on the node, so
+   * membership/subscribe requests aren't gated against
+   * per-channel config (any channel is reachable). Default
+   * `false` — the registry is installed and unconfigured
+   * channels are rejected with `UnknownChannel`.
+   *
+   * Required for dynamic-channel surfaces whose channels
+   * aren't pre-registered — notably `publishTools` (the
+   * served tools + describe service ride dynamically-named
+   * channels). Mirrors the Python binding's
+   * `permissive_channels`. Leave `false` for
+   * production nodes that pre-register their channels.
+   */
+  permissiveChannels?: boolean
 }
 
 export interface MeshOsConfigJs {
@@ -4581,6 +4953,14 @@ export interface PeerSnapshotJs {
   forkedFrom?: bigint
 }
 
+/** One pin record — the JS shape `{ capId, state }`. */
+export interface PinRecordJs {
+  /** The capability's `provider/capability` display id. */
+  capId: string
+  /** `"pending"` or `"approved"`. */
+  state: string
+}
+
 /**
  * Candidate handed to the JS placement-filter predicate.
  *
@@ -4711,6 +5091,29 @@ export interface PublishFailureJs {
   message: string
 }
 
+/** Optional knobs for [`NetMesh::publish_tools`](crate::NetMesh). */
+export interface PublishOptions {
+  /** Server version string used in the lowering. Default `"0"`. */
+  version?: string
+  /**
+   * Restrict invocation to a single caller origin (an `originHash`, as
+   * BigInt). Omit to admit **only this node itself** — the fail-closed
+   * default, since the tools are backed by an arbitrary local callback.
+   */
+  ownerOrigin?: bigint
+  /**
+   * Admit **every** mesh peer (overrides `ownerOrigin`). Default `false`.
+   * You must gate invocations yourself when you set this.
+   */
+  allowAnyCaller?: boolean
+  /**
+   * Per-call handler timeout in milliseconds. Default `120000`. The total
+   * budget across the handler returning its Promise and that Promise
+   * resolving.
+   */
+  handlerTimeoutMs?: number
+}
+
 /** Per-peer report returned by `publish`. */
 export interface PublishReportJs {
   /** Total subscribers the publisher attempted to reach. */
@@ -4721,6 +5124,25 @@ export interface PublishReportJs {
   errors: Array<PublishFailureJs>
 }
 
+/**
+ * One tool to publish: `name` + optional `description` + its input JSON Schema
+ * as a JSON object string. Consumers invoke it as `provider/<sanitizedName>`.
+ */
+export interface PublishToolJs {
+  /**
+   * The tool's name (its original name; the served id is a sanitized,
+   * channel-safe form).
+   */
+  name: string
+  /** Human-readable description shown on describe. Optional. */
+  description?: string
+  /**
+   * The tool's input JSON Schema, as a JSON object string (e.g.
+   * `'{"type":"object","properties":{...}}'`).
+   */
+  inputSchema: string
+}
+
 /** A materialized RedEX event: `seq` + `payload`. */
 export interface RedexEventJs {
   seq: bigint
@@ -5353,6 +5775,21 @@ export interface TokenInfo {
  */
 export declare function tokenIsExpired(bytes: Buffer): boolean
 
+/**
+ * The JS tool handler's return object: the tool's text output plus an optional
+ * tool-level error flag.
+ */
+export interface ToolCallResultJs {
+  /** The tool's text output. */
+  text: string
+  /**
+   * `true` iff the tool ran but produced an error *result* — a tool-level
+   * failure, distinct from a transport failure (which is a thrown / rejected
+   * Promise). Default `false`.
+   */
+  isError?: boolean
+}
+
 /**
  * Wire-compatible mirror of the substrate's
  * [`ToolDescriptor`](net::adapter::net::cortex::tool::ToolDescriptor).
@@ -5375,9 +5812,28 @@ export interface ToolDescriptorJs {
   stateless: boolean
   streaming: boolean
   tags: Array<string>
+  /**
+   * `net.pricing.terms@1` envelope as canonical JSON when the tool is
+   * paid; `None` = free. Opaque to the binding (byte-preserved — payment
+   * semantics live in `net-payments`). Surfaced so `listTools()` reports
+   * the announced price `watchTools()` already carries; displaying a price
+   * never implies authorization to spend it.
+   */
+  pricingTerms?: string
   nodeCount: number
 }
 
+/** The argument object handed to the JS tool handler. */
+export interface ToolInvokeArgs {
+  /**
+   * The invoked tool's original name (the `name` you published, not the
+   * sanitized id).
+   */
+  toolName: string
+  /** The invocation arguments as a JSON object string (default `{}`). */
+  argumentsJson: string
+}
+
 export interface ToolJs {
   toolId: string
   name?: string

package/index.js

@@ -77,8 +77,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-android-arm64')
         const bindingPackageVersion = require('@net-mesh/core-android-arm64/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -93,8 +93,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-android-arm-eabi')
         const bindingPackageVersion = require('@net-mesh/core-android-arm-eabi/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -114,8 +114,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-win32-x64-gnu')
         const bindingPackageVersion = require('@net-mesh/core-win32-x64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -130,8 +130,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-win32-x64-msvc')
         const bindingPackageVersion = require('@net-mesh/core-win32-x64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -147,8 +147,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-win32-ia32-msvc')
         const bindingPackageVersion = require('@net-mesh/core-win32-ia32-msvc/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -163,8 +163,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-win32-arm64-msvc')
         const bindingPackageVersion = require('@net-mesh/core-win32-arm64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -182,8 +182,8 @@ function requireNative() {
     try {
       const binding = require('@net-mesh/core-darwin-universal')
       const bindingPackageVersion = require('@net-mesh/core-darwin-universal/package.json').version
-      if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-        throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
       }
       return binding
     } catch (e) {
@@ -198,8 +198,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-darwin-x64')
         const bindingPackageVersion = require('@net-mesh/core-darwin-x64/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -214,8 +214,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-darwin-arm64')
         const bindingPackageVersion = require('@net-mesh/core-darwin-arm64/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -234,8 +234,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-freebsd-x64')
         const bindingPackageVersion = require('@net-mesh/core-freebsd-x64/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -250,8 +250,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-freebsd-arm64')
         const bindingPackageVersion = require('@net-mesh/core-freebsd-arm64/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -271,8 +271,8 @@ function requireNative() {
         try {
           const binding = require('@net-mesh/core-linux-x64-musl')
           const bindingPackageVersion = require('@net-mesh/core-linux-x64-musl/package.json').version
-          if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -287,8 +287,8 @@ function requireNative() {
         try {
           const binding = require('@net-mesh/core-linux-x64-gnu')
           const bindingPackageVersion = require('@net-mesh/core-linux-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -305,8 +305,8 @@ function requireNative() {
         try {
           const binding = require('@net-mesh/core-linux-arm64-musl')
           const bindingPackageVersion = require('@net-mesh/core-linux-arm64-musl/package.json').version
-          if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -321,8 +321,8 @@ function requireNative() {
         try {
           const binding = require('@net-mesh/core-linux-arm64-gnu')
           const bindingPackageVersion = require('@net-mesh/core-linux-arm64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -339,8 +339,8 @@ function requireNative() {
         try {
           const binding = require('@net-mesh/core-linux-arm-musleabihf')
           const bindingPackageVersion = require('@net-mesh/core-linux-arm-musleabihf/package.json').version
-          if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -355,8 +355,8 @@ function requireNative() {
         try {
           const binding = require('@net-mesh/core-linux-arm-gnueabihf')
           const bindingPackageVersion = require('@net-mesh/core-linux-arm-gnueabihf/package.json').version
-          if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -373,8 +373,8 @@ function requireNative() {
         try {
           const binding = require('@net-mesh/core-linux-loong64-musl')
           const bindingPackageVersion = require('@net-mesh/core-linux-loong64-musl/package.json').version
-          if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -389,8 +389,8 @@ function requireNative() {
         try {
           const binding = require('@net-mesh/core-linux-loong64-gnu')
           const bindingPackageVersion = require('@net-mesh/core-linux-loong64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -407,8 +407,8 @@ function requireNative() {
         try {
           const binding = require('@net-mesh/core-linux-riscv64-musl')
           const bindingPackageVersion = require('@net-mesh/core-linux-riscv64-musl/package.json').version
-          if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -423,8 +423,8 @@ function requireNative() {
         try {
           const binding = require('@net-mesh/core-linux-riscv64-gnu')
           const bindingPackageVersion = require('@net-mesh/core-linux-riscv64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -440,8 +440,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-linux-ppc64-gnu')
         const bindingPackageVersion = require('@net-mesh/core-linux-ppc64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -456,8 +456,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-linux-s390x-gnu')
         const bindingPackageVersion = require('@net-mesh/core-linux-s390x-gnu/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -476,8 +476,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-openharmony-arm64')
         const bindingPackageVersion = require('@net-mesh/core-openharmony-arm64/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -492,8 +492,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-openharmony-x64')
         const bindingPackageVersion = require('@net-mesh/core-openharmony-x64/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -508,8 +508,8 @@ function requireNative() {
       try {
         const binding = require('@net-mesh/core-openharmony-arm')
         const bindingPackageVersion = require('@net-mesh/core-openharmony-arm/package.json').version
-        if (bindingPackageVersion !== '0.30.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.30.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.31.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.31.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -593,8 +593,11 @@ module.exports.AuditQuery = nativeBinding.AuditQuery
 module.exports.AuditStream = nativeBinding.AuditStream
 module.exports.BandwidthClass = nativeBinding.BandwidthClass
 module.exports.BlobRef = nativeBinding.BlobRef
+module.exports.CapabilityGateway = nativeBinding.CapabilityGateway
+module.exports.CapabilityId = nativeBinding.CapabilityId
 module.exports.ChunkingStrategy = nativeBinding.ChunkingStrategy
 module.exports.ClientStreamCall = nativeBinding.ClientStreamCall
+module.exports.ConsentPolicy = nativeBinding.ConsentPolicy
 module.exports.DaemonHandle = nativeBinding.DaemonHandle
 module.exports.DaemonRuntime = nativeBinding.DaemonRuntime
 module.exports.DeckClient = nativeBinding.DeckClient
@@ -611,6 +614,7 @@ module.exports.Identity = nativeBinding.Identity
 module.exports.InMemoryChainReader = nativeBinding.InMemoryChainReader
 module.exports.JsRequestStream = nativeBinding.JsRequestStream
 module.exports.JsResponseSink = nativeBinding.JsResponseSink
+module.exports.LocalPublicationHandle = nativeBinding.LocalPublicationHandle
 module.exports.LogStream = nativeBinding.LogStream
 module.exports.MemoriesAdapter = nativeBinding.MemoriesAdapter
 module.exports.MemoriesSnapshotAndWatch = nativeBinding.MemoriesSnapshotAndWatch
@@ -629,6 +633,8 @@ module.exports.NetMesh = nativeBinding.NetMesh
 module.exports.NetStream = nativeBinding.NetStream
 module.exports.OperatorIdentity = nativeBinding.OperatorIdentity
 module.exports.OperatorRegistry = nativeBinding.OperatorRegistry
+module.exports.PaymentProvider = nativeBinding.PaymentProvider
+module.exports.PinStore = nativeBinding.PinStore
 module.exports.QueryBuilder = nativeBinding.QueryBuilder
 module.exports.Redex = nativeBinding.Redex
 module.exports.RedexFile = nativeBinding.RedexFile
@@ -656,9 +662,12 @@ module.exports.blobAdapterIds = nativeBinding.blobAdapterIds
 module.exports.blobAdapterRegistered = nativeBinding.blobAdapterRegistered
 module.exports.blobPublish = nativeBinding.blobPublish
 module.exports.blobResolve = nativeBinding.blobResolve
+module.exports.buildPricingTerms = nativeBinding.buildPricingTerms
 module.exports.cachePolicyPermanent = nativeBinding.cachePolicyPermanent
 module.exports.cachePolicyTimeBound = nativeBinding.cachePolicyTimeBound
 module.exports.channelHash = nativeBinding.channelHash
+module.exports.classifyMcpServer = nativeBinding.classifyMcpServer
+module.exports.credentialRequiresConsent = nativeBinding.credentialRequiresConsent
 module.exports.DATAFORTS_BLOB_BANDWIDTH_CLASS_SUPPORTED = nativeBinding.DATAFORTS_BLOB_BANDWIDTH_CLASS_SUPPORTED
 module.exports.DATAFORTS_BLOB_CDC_SUPPORTED = nativeBinding.DATAFORTS_BLOB_CDC_SUPPORTED
 module.exports.DATAFORTS_BLOB_ERASURE_SUPPORTED = nativeBinding.DATAFORTS_BLOB_ERASURE_SUPPORTED
@@ -670,6 +679,7 @@ module.exports.delegateToken = nativeBinding.delegateToken
 module.exports.generateNetKeypair = nativeBinding.generateNetKeypair
 module.exports.isBlobRef = nativeBinding.isBlobRef
 module.exports.isTransferStreamId = nativeBinding.isTransferStreamId
+module.exports.lowerMcpTool = nativeBinding.lowerMcpTool
 module.exports.MemoriesOrderBy = nativeBinding.MemoriesOrderBy
 module.exports.nextTransferStreamId = nativeBinding.nextTransferStreamId
 module.exports.normalizeGpuVendor = nativeBinding.normalizeGpuVendor

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@net-mesh/core",
-  "version": "0.30.0",
+  "version": "0.31.0",
   "description": "High-performance, schema-agnostic event bus for AI runtime workloads",
   "main": "index.js",
   "types": "index.d.ts",
@@ -97,13 +97,13 @@
     "node": ">=20"
   },
   "optionalDependencies": {
-    "@net-mesh/core-win32-x64-msvc": "0.30.0",
-    "@net-mesh/core-win32-arm64-msvc": "0.30.0",
-    "@net-mesh/core-darwin-x64": "0.30.0",
-    "@net-mesh/core-darwin-arm64": "0.30.0",
-    "@net-mesh/core-linux-x64-gnu": "0.30.0",
-    "@net-mesh/core-linux-x64-musl": "0.30.0",
-    "@net-mesh/core-linux-arm64-gnu": "0.30.0",
-    "@net-mesh/core-linux-arm64-musl": "0.30.0"
+    "@net-mesh/core-win32-x64-msvc": "0.31.0",
+    "@net-mesh/core-win32-arm64-msvc": "0.31.0",
+    "@net-mesh/core-darwin-x64": "0.31.0",
+    "@net-mesh/core-darwin-arm64": "0.31.0",
+    "@net-mesh/core-linux-x64-gnu": "0.31.0",
+    "@net-mesh/core-linux-x64-musl": "0.31.0",
+    "@net-mesh/core-linux-arm64-gnu": "0.31.0",
+    "@net-mesh/core-linux-arm64-musl": "0.31.0"
   }
 }

package/tool.d.ts

@@ -63,6 +63,13 @@ export interface ToolDescriptor {
     streaming: boolean;
     /** Free-form host-attached tags (e.g. `["web", "research"]`). */
     tags: string[];
+    /**
+     * `net.pricing.terms@1` envelope as canonical JSON when the tool is
+     * paid. Opaque to the binding (payment semantics live in
+     * `@net-mesh/payments`); absent = free. Displaying a price never
+     * implies authorization to spend it.
+     */
+    pricingTerms?: string;
     /** How many nodes currently serve this `(toolId, version)`. */
     nodeCount: number;
 }