@paybond/kit 0.11.0 → 0.11.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (33) hide show
  1. package/README.md +59 -15
  2. package/dist/cli/agent/demo-loaders.d.ts +4 -0
  3. package/dist/cli/agent/demo-loaders.js +66 -0
  4. package/dist/cli/commands/agent.js +5 -4
  5. package/dist/dev/trace-buffer.js +1 -1
  6. package/dist/mcp-server.js +1 -1
  7. package/package.json +1 -1
  8. package/templates/manifest.json +9 -9
  9. package/templates/openai-shopping-agent/.github/workflows/smoke.yml +1 -1
  10. package/templates/openai-shopping-agent/package-lock.json +1525 -0
  11. package/templates/openai-shopping-agent/package.json +1 -1
  12. package/templates/paybond-aws-operator/.github/workflows/smoke.yml +1 -1
  13. package/templates/paybond-aws-operator/package-lock.json +151 -0
  14. package/templates/paybond-aws-operator/package.json +1 -1
  15. package/templates/paybond-claude-agents-demo/.github/workflows/smoke.yml +1 -1
  16. package/templates/paybond-claude-agents-demo/package-lock.json +1489 -0
  17. package/templates/paybond-claude-agents-demo/package.json +1 -1
  18. package/templates/paybond-invoice-agent/requirements.txt +1 -1
  19. package/templates/paybond-mcp-coding-agent/.github/workflows/smoke.yml +1 -1
  20. package/templates/paybond-mcp-coding-agent/package-lock.json +151 -0
  21. package/templates/paybond-mcp-coding-agent/package.json +1 -1
  22. package/templates/paybond-openai-agents-demo/.github/workflows/smoke.yml +1 -1
  23. package/templates/paybond-openai-agents-demo/package-lock.json +1525 -0
  24. package/templates/paybond-openai-agents-demo/package.json +1 -1
  25. package/templates/paybond-procurement-agent/.github/workflows/smoke.yml +1 -1
  26. package/templates/paybond-procurement-agent/package-lock.json +151 -0
  27. package/templates/paybond-procurement-agent/package.json +1 -1
  28. package/templates/paybond-travel-agent/.github/workflows/smoke.yml +1 -1
  29. package/templates/paybond-travel-agent/package-lock.json +444 -0
  30. package/templates/paybond-travel-agent/package.json +1 -1
  31. package/templates/paybond-vercel-shopping-agent/.github/workflows/smoke.yml +1 -1
  32. package/templates/paybond-vercel-shopping-agent/package-lock.json +265 -0
  33. package/templates/paybond-vercel-shopping-agent/package.json +1 -1
@@ -8,7 +8,7 @@
8
8
  "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation saas.provision_seat --requested-spend-cents 2900 --evidence-preset cost_and_completion --result-body '{\"status\":\"completed\",\"cost_cents\":2900}' --format json"
9
9
  },
10
10
  "dependencies": {
11
- "@paybond/kit": "^0.11.0",
11
+ "@paybond/kit": "^0.11.1",
12
12
  "@openai/agents": "^0.4.0",
13
13
  "zod": "^4.2.0"
14
14
  },
@@ -14,7 +14,7 @@ jobs:
14
14
  with:
15
15
  node-version: "22"
16
16
  cache: npm
17
- - run: npm install
17
+ - run: npm ci
18
18
  - run: npm run smoke
19
19
  env:
20
20
  PAYBOND_API_KEY: ${{ secrets.PAYBOND_SANDBOX_API_KEY }}
@@ -0,0 +1,151 @@
1
+ {
2
+ "name": "paybond-procurement-agent",
3
+ "lockfileVersion": 3,
4
+ "requires": true,
5
+ "packages": {
6
+ "": {
7
+ "name": "paybond-procurement-agent",
8
+ "dependencies": {
9
+ "@paybond/kit": "^0.11.1"
10
+ },
11
+ "devDependencies": {
12
+ "@types/node": "^22.10.1",
13
+ "typescript": "^5.7.2"
14
+ },
15
+ "engines": {
16
+ "node": ">=22"
17
+ }
18
+ },
19
+ "node_modules/@noble/ed25519": {
20
+ "version": "2.3.0",
21
+ "resolved": "https://registry.npmjs.org/@noble/ed25519/-/ed25519-2.3.0.tgz",
22
+ "integrity": "sha512-M7dvXL2B92/M7dw9+gzuydL8qn/jiqNHaoR3Q+cb1q1GHV7uwE17WCyFMG+Y+TZb5izcaXk5TdJRrDUxHXL78A==",
23
+ "license": "MIT",
24
+ "funding": {
25
+ "url": "https://paulmillr.com/funding/"
26
+ }
27
+ },
28
+ "node_modules/@noble/hashes": {
29
+ "version": "1.8.0",
30
+ "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.8.0.tgz",
31
+ "integrity": "sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A==",
32
+ "license": "MIT",
33
+ "engines": {
34
+ "node": "^14.21.3 || >=16"
35
+ },
36
+ "funding": {
37
+ "url": "https://paulmillr.com/funding/"
38
+ }
39
+ },
40
+ "node_modules/@noble/secp256k1": {
41
+ "version": "2.3.0",
42
+ "resolved": "https://registry.npmjs.org/@noble/secp256k1/-/secp256k1-2.3.0.tgz",
43
+ "integrity": "sha512-0TQed2gcBbIrh7Ccyw+y/uZQvbJwm7Ao4scBUxqpBCcsOlZG0O4KGfjtNAy/li4W8n1xt3dxrwJ0beZ2h2G6Kw==",
44
+ "license": "MIT",
45
+ "funding": {
46
+ "url": "https://paulmillr.com/funding/"
47
+ }
48
+ },
49
+ "node_modules/@paybond/kit": {
50
+ "version": "0.11.1",
51
+ "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.1.tgz",
52
+ "integrity": "sha512-YsWnXy308OrBP734ZBt/gcvUK8Zh6ATwWYVhocNYRM3tIVcCyZ4MC+oMKYdnZh+xXIx0qx3QvqH+cU6tFTXo+A==",
53
+ "license": "Apache-2.0",
54
+ "dependencies": {
55
+ "@noble/ed25519": "^2.2.1",
56
+ "@noble/hashes": "^1.7.1",
57
+ "@noble/secp256k1": "^2.2.3",
58
+ "blake3": "^2.1.7",
59
+ "uuid": "^14.0.0"
60
+ },
61
+ "bin": {
62
+ "paybond": "dist/cli.js",
63
+ "paybond-init": "dist/init.js",
64
+ "paybond-kit-login": "dist/login.js",
65
+ "paybond-mcp-server": "dist/mcp-server.js"
66
+ },
67
+ "engines": {
68
+ "node": ">=22"
69
+ },
70
+ "peerDependencies": {
71
+ "@anthropic-ai/claude-agent-sdk": ">=0.2.100",
72
+ "@langchain/core": ">=0.3.0",
73
+ "@langchain/langgraph": ">=0.2.50",
74
+ "@openai/agents": ">=0.12.0",
75
+ "ai": ">=4.0.0",
76
+ "zod": "^3.25.32 || ^4.2.0"
77
+ },
78
+ "peerDependenciesMeta": {
79
+ "@anthropic-ai/claude-agent-sdk": {
80
+ "optional": true
81
+ },
82
+ "@langchain/core": {
83
+ "optional": true
84
+ },
85
+ "@langchain/langgraph": {
86
+ "optional": true
87
+ },
88
+ "@openai/agents": {
89
+ "optional": true
90
+ },
91
+ "ai": {
92
+ "optional": true
93
+ },
94
+ "zod": {
95
+ "optional": true
96
+ }
97
+ }
98
+ },
99
+ "node_modules/@types/node": {
100
+ "version": "22.20.0",
101
+ "resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.0.tgz",
102
+ "integrity": "sha512-QWlFW2wf3nTjC13/DqRnBpR4ZO36VJH/JVBkA/vcnmbTBNQIlnObqyqZE1tUR7+Ni23Lda8R1BxMfbXRpCUx5g==",
103
+ "dev": true,
104
+ "license": "MIT",
105
+ "dependencies": {
106
+ "undici-types": "~6.21.0"
107
+ }
108
+ },
109
+ "node_modules/blake3": {
110
+ "version": "2.1.7",
111
+ "resolved": "https://registry.npmjs.org/blake3/-/blake3-2.1.7.tgz",
112
+ "integrity": "sha512-5d+TdKJvju96IyEaGJ0eO6CHbckWi+NBrCezGYM/WsnI3R03aLL2TWfsuZSh1rs0fTv/L3ps/r0vykjYurcIwA==",
113
+ "hasInstallScript": true,
114
+ "license": "MIT"
115
+ },
116
+ "node_modules/typescript": {
117
+ "version": "5.9.3",
118
+ "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
119
+ "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
120
+ "dev": true,
121
+ "license": "Apache-2.0",
122
+ "bin": {
123
+ "tsc": "bin/tsc",
124
+ "tsserver": "bin/tsserver"
125
+ },
126
+ "engines": {
127
+ "node": ">=14.17"
128
+ }
129
+ },
130
+ "node_modules/undici-types": {
131
+ "version": "6.21.0",
132
+ "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
133
+ "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
134
+ "dev": true,
135
+ "license": "MIT"
136
+ },
137
+ "node_modules/uuid": {
138
+ "version": "14.0.1",
139
+ "resolved": "https://registry.npmjs.org/uuid/-/uuid-14.0.1.tgz",
140
+ "integrity": "sha512-6ZxzVpzDXDa3bJWaHilVayA+BH/1zmxCJoVgvmqJnid/gPoKHxUrS/aC/T6LGQtNHT+XHG9fXPJB4d+IrU30Ew==",
141
+ "funding": [
142
+ "https://github.com/sponsors/broofa",
143
+ "https://github.com/sponsors/ctavan"
144
+ ],
145
+ "license": "MIT",
146
+ "bin": {
147
+ "uuid": "dist-node/bin/uuid"
148
+ }
149
+ }
150
+ }
151
+ }
@@ -8,7 +8,7 @@
8
8
  "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation procurement.submit_po --requested-spend-cents 12000 --evidence-preset cost_and_completion --result-body '{\"status\":\"completed\",\"cost_cents\":12000}' --format json"
9
9
  },
10
10
  "dependencies": {
11
- "@paybond/kit": "^0.11.0"
11
+ "@paybond/kit": "^0.11.1"
12
12
  },
13
13
  "devDependencies": {
14
14
  "@types/node": "^22.10.1",
@@ -14,7 +14,7 @@ jobs:
14
14
  with:
15
15
  node-version: "22"
16
16
  cache: npm
17
- - run: npm install
17
+ - run: npm ci
18
18
  - run: npm run smoke
19
19
  env:
20
20
  PAYBOND_API_KEY: ${{ secrets.PAYBOND_SANDBOX_API_KEY }}
@@ -0,0 +1,444 @@
1
+ {
2
+ "name": "paybond-travel-agent",
3
+ "lockfileVersion": 3,
4
+ "requires": true,
5
+ "packages": {
6
+ "": {
7
+ "name": "paybond-travel-agent",
8
+ "dependencies": {
9
+ "@langchain/core": "^1.2.1",
10
+ "@langchain/langgraph": "^1.4.7",
11
+ "@paybond/kit": "^0.11.1",
12
+ "zod": "^4.2.0"
13
+ },
14
+ "devDependencies": {
15
+ "@types/node": "^22.10.1",
16
+ "typescript": "^5.7.2"
17
+ },
18
+ "engines": {
19
+ "node": ">=22"
20
+ }
21
+ },
22
+ "node_modules/@cfworker/json-schema": {
23
+ "version": "4.1.1",
24
+ "resolved": "https://registry.npmjs.org/@cfworker/json-schema/-/json-schema-4.1.1.tgz",
25
+ "integrity": "sha512-gAmrUZSGtKc3AiBL71iNWxDsyUC5uMaKKGdvzYsBoTW/xi42JQHl7eKV2OYzCUqvc+D2RCcf7EXY2iCyFIk6og==",
26
+ "license": "MIT"
27
+ },
28
+ "node_modules/@langchain/core": {
29
+ "version": "1.2.1",
30
+ "resolved": "https://registry.npmjs.org/@langchain/core/-/core-1.2.1.tgz",
31
+ "integrity": "sha512-NNG/cC5FGuHDOAP56h0ddp8Rfk8p+othWzEK5RV9JIG6RvnF5vGa5r0AEGtKfQieed7s1kC42GuIzVOBvMBL/g==",
32
+ "license": "MIT",
33
+ "dependencies": {
34
+ "@cfworker/json-schema": "^4.0.2",
35
+ "@standard-schema/spec": "^1.1.0",
36
+ "js-tiktoken": "^1.0.12",
37
+ "langsmith": ">=0.5.0 <1.0.0",
38
+ "mustache": "^4.2.0",
39
+ "p-queue": "^6.6.2",
40
+ "zod": "^3.25.76 || ^4"
41
+ },
42
+ "engines": {
43
+ "node": ">=20"
44
+ }
45
+ },
46
+ "node_modules/@langchain/langgraph": {
47
+ "version": "1.4.7",
48
+ "resolved": "https://registry.npmjs.org/@langchain/langgraph/-/langgraph-1.4.7.tgz",
49
+ "integrity": "sha512-2tcyf3QGC7v89kqSxMCtRvzg/3L/4yHtOaWC49A8KieCciWJs7LGaxHoPB6QRxXyUgyR+Zg9Q1ss/XJIE+JuSQ==",
50
+ "license": "MIT",
51
+ "dependencies": {
52
+ "@langchain/langgraph-checkpoint": "^1.1.3",
53
+ "@langchain/langgraph-sdk": "~1.9.25",
54
+ "@langchain/protocol": "^0.0.18",
55
+ "@standard-schema/spec": "1.1.0"
56
+ },
57
+ "engines": {
58
+ "node": ">=18"
59
+ },
60
+ "peerDependencies": {
61
+ "@langchain/core": "^1.1.48",
62
+ "zod": "^3.25.32 || ^4.2.0"
63
+ }
64
+ },
65
+ "node_modules/@langchain/langgraph-checkpoint": {
66
+ "version": "1.1.3",
67
+ "resolved": "https://registry.npmjs.org/@langchain/langgraph-checkpoint/-/langgraph-checkpoint-1.1.3.tgz",
68
+ "integrity": "sha512-wgzdQNeEsdw1e+4lvlj0tdq/RYR/k1vPin10g0ymGoehZDDgd9nvIllGXSXN4TFgF9sf5qQP/KTkOcLfeseIhA==",
69
+ "license": "MIT",
70
+ "engines": {
71
+ "node": ">=18"
72
+ },
73
+ "peerDependencies": {
74
+ "@langchain/core": "^1.1.48"
75
+ }
76
+ },
77
+ "node_modules/@langchain/langgraph-sdk": {
78
+ "version": "1.9.25",
79
+ "resolved": "https://registry.npmjs.org/@langchain/langgraph-sdk/-/langgraph-sdk-1.9.25.tgz",
80
+ "integrity": "sha512-mRKW8zyQUaHox+HirRFMRrPqOvNbQI3xeXDt6kkk4PbBg77V92bsO1WzUVNrmJ81zCkvxyOrWSK8D6ioCj0a8A==",
81
+ "license": "MIT",
82
+ "dependencies": {
83
+ "@langchain/protocol": "^0.0.18",
84
+ "@types/json-schema": "^7.0.15",
85
+ "p-queue": "^9.0.1",
86
+ "p-retry": "^7.1.1"
87
+ },
88
+ "peerDependencies": {
89
+ "@langchain/core": "^1.1.48",
90
+ "react": "^18 || ^19",
91
+ "react-dom": "^18 || ^19",
92
+ "svelte": "^4.0.0 || ^5.0.0",
93
+ "vue": "^3.0.0"
94
+ },
95
+ "peerDependenciesMeta": {
96
+ "react": {
97
+ "optional": true
98
+ },
99
+ "react-dom": {
100
+ "optional": true
101
+ },
102
+ "svelte": {
103
+ "optional": true
104
+ },
105
+ "vue": {
106
+ "optional": true
107
+ }
108
+ }
109
+ },
110
+ "node_modules/@langchain/langgraph-sdk/node_modules/eventemitter3": {
111
+ "version": "5.0.4",
112
+ "resolved": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-5.0.4.tgz",
113
+ "integrity": "sha512-mlsTRyGaPBjPedk6Bvw+aqbsXDtoAyAzm5MO7JgU+yVRyMQ5O8bD4Kcci7BS85f93veegeCPkL8R4GLClnjLFw==",
114
+ "license": "MIT"
115
+ },
116
+ "node_modules/@langchain/langgraph-sdk/node_modules/p-queue": {
117
+ "version": "9.3.0",
118
+ "resolved": "https://registry.npmjs.org/p-queue/-/p-queue-9.3.0.tgz",
119
+ "integrity": "sha512-7NED7xhQ74Ngp4JP/2e0VZHp7vSWfJfqeiR92jPgxsz6m0Se4P03YoTKa9dDXyZ3r6P616gUXttrB6nnHYKang==",
120
+ "license": "MIT",
121
+ "dependencies": {
122
+ "eventemitter3": "^5.0.4",
123
+ "p-timeout": "^7.0.0"
124
+ },
125
+ "engines": {
126
+ "node": ">=20"
127
+ },
128
+ "funding": {
129
+ "url": "https://github.com/sponsors/sindresorhus"
130
+ }
131
+ },
132
+ "node_modules/@langchain/langgraph-sdk/node_modules/p-timeout": {
133
+ "version": "7.0.1",
134
+ "resolved": "https://registry.npmjs.org/p-timeout/-/p-timeout-7.0.1.tgz",
135
+ "integrity": "sha512-AxTM2wDGORHGEkPCt8yqxOTMgpfbEHqF51f/5fJCmwFC3C/zNcGT63SymH2ttOAaiIws2zVg4+izQCjrakcwHg==",
136
+ "license": "MIT",
137
+ "engines": {
138
+ "node": ">=20"
139
+ },
140
+ "funding": {
141
+ "url": "https://github.com/sponsors/sindresorhus"
142
+ }
143
+ },
144
+ "node_modules/@langchain/protocol": {
145
+ "version": "0.0.18",
146
+ "resolved": "https://registry.npmjs.org/@langchain/protocol/-/protocol-0.0.18.tgz",
147
+ "integrity": "sha512-XW1egQtPfsGI41w2AMZNFZrUIwFSQHTjVMZs0OaTpCAvht/QLoaPN8FQcsysMVypOhupG28J29yOorrc70otBQ==",
148
+ "license": "MIT"
149
+ },
150
+ "node_modules/@noble/ed25519": {
151
+ "version": "2.3.0",
152
+ "resolved": "https://registry.npmjs.org/@noble/ed25519/-/ed25519-2.3.0.tgz",
153
+ "integrity": "sha512-M7dvXL2B92/M7dw9+gzuydL8qn/jiqNHaoR3Q+cb1q1GHV7uwE17WCyFMG+Y+TZb5izcaXk5TdJRrDUxHXL78A==",
154
+ "license": "MIT",
155
+ "funding": {
156
+ "url": "https://paulmillr.com/funding/"
157
+ }
158
+ },
159
+ "node_modules/@noble/hashes": {
160
+ "version": "1.8.0",
161
+ "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.8.0.tgz",
162
+ "integrity": "sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A==",
163
+ "license": "MIT",
164
+ "engines": {
165
+ "node": "^14.21.3 || >=16"
166
+ },
167
+ "funding": {
168
+ "url": "https://paulmillr.com/funding/"
169
+ }
170
+ },
171
+ "node_modules/@noble/secp256k1": {
172
+ "version": "2.3.0",
173
+ "resolved": "https://registry.npmjs.org/@noble/secp256k1/-/secp256k1-2.3.0.tgz",
174
+ "integrity": "sha512-0TQed2gcBbIrh7Ccyw+y/uZQvbJwm7Ao4scBUxqpBCcsOlZG0O4KGfjtNAy/li4W8n1xt3dxrwJ0beZ2h2G6Kw==",
175
+ "license": "MIT",
176
+ "funding": {
177
+ "url": "https://paulmillr.com/funding/"
178
+ }
179
+ },
180
+ "node_modules/@paybond/kit": {
181
+ "version": "0.11.1",
182
+ "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.1.tgz",
183
+ "integrity": "sha512-pwsPg8qmmmQHB/uxaWHwfMbwMj+hF4FO8QcBHoGYD/W7/3TImhfCceKe0xK2MgiGJEqQqN395u7cegXF2yoG0A==",
184
+ "license": "Apache-2.0",
185
+ "dependencies": {
186
+ "@noble/ed25519": "^2.2.1",
187
+ "@noble/hashes": "^1.7.1",
188
+ "@noble/secp256k1": "^2.2.3",
189
+ "blake3": "^2.1.7",
190
+ "uuid": "^14.0.0"
191
+ },
192
+ "bin": {
193
+ "paybond": "dist/cli.js",
194
+ "paybond-init": "dist/init.js",
195
+ "paybond-kit-login": "dist/login.js",
196
+ "paybond-mcp-server": "dist/mcp-server.js"
197
+ },
198
+ "engines": {
199
+ "node": ">=22"
200
+ },
201
+ "peerDependencies": {
202
+ "@anthropic-ai/claude-agent-sdk": ">=0.2.100",
203
+ "@langchain/core": ">=0.3.0",
204
+ "@langchain/langgraph": ">=0.2.50",
205
+ "@openai/agents": ">=0.12.0",
206
+ "ai": ">=4.0.0",
207
+ "zod": "^3.25.32 || ^4.2.0"
208
+ },
209
+ "peerDependenciesMeta": {
210
+ "@anthropic-ai/claude-agent-sdk": {
211
+ "optional": true
212
+ },
213
+ "@langchain/core": {
214
+ "optional": true
215
+ },
216
+ "@langchain/langgraph": {
217
+ "optional": true
218
+ },
219
+ "@openai/agents": {
220
+ "optional": true
221
+ },
222
+ "ai": {
223
+ "optional": true
224
+ },
225
+ "zod": {
226
+ "optional": true
227
+ }
228
+ }
229
+ },
230
+ "node_modules/@standard-schema/spec": {
231
+ "version": "1.1.0",
232
+ "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
233
+ "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==",
234
+ "license": "MIT"
235
+ },
236
+ "node_modules/@types/json-schema": {
237
+ "version": "7.0.15",
238
+ "resolved": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz",
239
+ "integrity": "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==",
240
+ "license": "MIT"
241
+ },
242
+ "node_modules/@types/node": {
243
+ "version": "22.20.0",
244
+ "resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.0.tgz",
245
+ "integrity": "sha512-QWlFW2wf3nTjC13/DqRnBpR4ZO36VJH/JVBkA/vcnmbTBNQIlnObqyqZE1tUR7+Ni23Lda8R1BxMfbXRpCUx5g==",
246
+ "dev": true,
247
+ "license": "MIT",
248
+ "dependencies": {
249
+ "undici-types": "~6.21.0"
250
+ }
251
+ },
252
+ "node_modules/base64-js": {
253
+ "version": "1.5.1",
254
+ "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
255
+ "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==",
256
+ "funding": [
257
+ {
258
+ "type": "github",
259
+ "url": "https://github.com/sponsors/feross"
260
+ },
261
+ {
262
+ "type": "patreon",
263
+ "url": "https://www.patreon.com/feross"
264
+ },
265
+ {
266
+ "type": "consulting",
267
+ "url": "https://feross.org/support"
268
+ }
269
+ ],
270
+ "license": "MIT"
271
+ },
272
+ "node_modules/blake3": {
273
+ "version": "2.1.7",
274
+ "resolved": "https://registry.npmjs.org/blake3/-/blake3-2.1.7.tgz",
275
+ "integrity": "sha512-5d+TdKJvju96IyEaGJ0eO6CHbckWi+NBrCezGYM/WsnI3R03aLL2TWfsuZSh1rs0fTv/L3ps/r0vykjYurcIwA==",
276
+ "hasInstallScript": true,
277
+ "license": "MIT"
278
+ },
279
+ "node_modules/eventemitter3": {
280
+ "version": "4.0.7",
281
+ "resolved": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-4.0.7.tgz",
282
+ "integrity": "sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw==",
283
+ "license": "MIT"
284
+ },
285
+ "node_modules/is-network-error": {
286
+ "version": "1.3.2",
287
+ "resolved": "https://registry.npmjs.org/is-network-error/-/is-network-error-1.3.2.tgz",
288
+ "integrity": "sha512-PhBY86zaxNZUuWP6h13Vu5oFe0XY6/UlKzQnYFELzGVHygP3MxmvTfYSG7GN3aIab/iWudSMgjSnG9Dq+nHrgA==",
289
+ "license": "MIT",
290
+ "engines": {
291
+ "node": ">=16"
292
+ },
293
+ "funding": {
294
+ "url": "https://github.com/sponsors/sindresorhus"
295
+ }
296
+ },
297
+ "node_modules/js-tiktoken": {
298
+ "version": "1.0.21",
299
+ "resolved": "https://registry.npmjs.org/js-tiktoken/-/js-tiktoken-1.0.21.tgz",
300
+ "integrity": "sha512-biOj/6M5qdgx5TKjDnFT1ymSpM5tbd3ylwDtrQvFQSu0Z7bBYko2dF+W/aUkXUPuk6IVpRxk/3Q2sHOzGlS36g==",
301
+ "license": "MIT",
302
+ "dependencies": {
303
+ "base64-js": "^1.5.1"
304
+ }
305
+ },
306
+ "node_modules/langsmith": {
307
+ "version": "0.7.15",
308
+ "resolved": "https://registry.npmjs.org/langsmith/-/langsmith-0.7.15.tgz",
309
+ "integrity": "sha512-huRfzLKcREE+ABkqKEriXK8Ax9V+xuV3d3x4PINEGi+hi4qyTvB4Nc2dpLSyfW/Ioj6+6d7T8majjWCe7mXc8A==",
310
+ "license": "MIT",
311
+ "dependencies": {
312
+ "p-queue": "6.6.2"
313
+ },
314
+ "peerDependencies": {
315
+ "@opentelemetry/api": "*",
316
+ "@opentelemetry/exporter-trace-otlp-proto": "*",
317
+ "@opentelemetry/sdk-trace-base": "*",
318
+ "openai": "*",
319
+ "ws": ">=7"
320
+ },
321
+ "peerDependenciesMeta": {
322
+ "@opentelemetry/api": {
323
+ "optional": true
324
+ },
325
+ "@opentelemetry/exporter-trace-otlp-proto": {
326
+ "optional": true
327
+ },
328
+ "@opentelemetry/sdk-trace-base": {
329
+ "optional": true
330
+ },
331
+ "openai": {
332
+ "optional": true
333
+ },
334
+ "ws": {
335
+ "optional": true
336
+ }
337
+ }
338
+ },
339
+ "node_modules/mustache": {
340
+ "version": "4.2.0",
341
+ "resolved": "https://registry.npmjs.org/mustache/-/mustache-4.2.0.tgz",
342
+ "integrity": "sha512-71ippSywq5Yb7/tVYyGbkBggbU8H3u5Rz56fH60jGFgr8uHwxs+aSKeqmluIVzM0m0kB7xQjKS6qPfd0b2ZoqQ==",
343
+ "license": "MIT",
344
+ "bin": {
345
+ "mustache": "bin/mustache"
346
+ }
347
+ },
348
+ "node_modules/p-finally": {
349
+ "version": "1.0.0",
350
+ "resolved": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz",
351
+ "integrity": "sha512-LICb2p9CB7FS+0eR1oqWnHhp0FljGLZCWBE9aix0Uye9W8LTQPwMTYVGWQWIw9RdQiDg4+epXQODwIYJtSJaow==",
352
+ "license": "MIT",
353
+ "engines": {
354
+ "node": ">=4"
355
+ }
356
+ },
357
+ "node_modules/p-queue": {
358
+ "version": "6.6.2",
359
+ "resolved": "https://registry.npmjs.org/p-queue/-/p-queue-6.6.2.tgz",
360
+ "integrity": "sha512-RwFpb72c/BhQLEXIZ5K2e+AhgNVmIejGlTgiB9MzZ0e93GRvqZ7uSi0dvRF7/XIXDeNkra2fNHBxTyPDGySpjQ==",
361
+ "license": "MIT",
362
+ "dependencies": {
363
+ "eventemitter3": "^4.0.4",
364
+ "p-timeout": "^3.2.0"
365
+ },
366
+ "engines": {
367
+ "node": ">=8"
368
+ },
369
+ "funding": {
370
+ "url": "https://github.com/sponsors/sindresorhus"
371
+ }
372
+ },
373
+ "node_modules/p-retry": {
374
+ "version": "7.1.1",
375
+ "resolved": "https://registry.npmjs.org/p-retry/-/p-retry-7.1.1.tgz",
376
+ "integrity": "sha512-J5ApzjyRkkf601HpEeykoiCvzHQjWxPAHhyjFcEUP2SWq0+35NKh8TLhpLw+Dkq5TZBFvUM6UigdE9hIVYTl5w==",
377
+ "license": "MIT",
378
+ "dependencies": {
379
+ "is-network-error": "^1.1.0"
380
+ },
381
+ "engines": {
382
+ "node": ">=20"
383
+ },
384
+ "funding": {
385
+ "url": "https://github.com/sponsors/sindresorhus"
386
+ }
387
+ },
388
+ "node_modules/p-timeout": {
389
+ "version": "3.2.0",
390
+ "resolved": "https://registry.npmjs.org/p-timeout/-/p-timeout-3.2.0.tgz",
391
+ "integrity": "sha512-rhIwUycgwwKcP9yTOOFK/AKsAopjjCakVqLHePO3CC6Mir1Z99xT+R63jZxAT5lFZLa2inS5h+ZS2GvR99/FBg==",
392
+ "license": "MIT",
393
+ "dependencies": {
394
+ "p-finally": "^1.0.0"
395
+ },
396
+ "engines": {
397
+ "node": ">=8"
398
+ }
399
+ },
400
+ "node_modules/typescript": {
401
+ "version": "5.9.3",
402
+ "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
403
+ "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
404
+ "dev": true,
405
+ "license": "Apache-2.0",
406
+ "bin": {
407
+ "tsc": "bin/tsc",
408
+ "tsserver": "bin/tsserver"
409
+ },
410
+ "engines": {
411
+ "node": ">=14.17"
412
+ }
413
+ },
414
+ "node_modules/undici-types": {
415
+ "version": "6.21.0",
416
+ "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
417
+ "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
418
+ "dev": true,
419
+ "license": "MIT"
420
+ },
421
+ "node_modules/uuid": {
422
+ "version": "14.0.1",
423
+ "resolved": "https://registry.npmjs.org/uuid/-/uuid-14.0.1.tgz",
424
+ "integrity": "sha512-6ZxzVpzDXDa3bJWaHilVayA+BH/1zmxCJoVgvmqJnid/gPoKHxUrS/aC/T6LGQtNHT+XHG9fXPJB4d+IrU30Ew==",
425
+ "funding": [
426
+ "https://github.com/sponsors/broofa",
427
+ "https://github.com/sponsors/ctavan"
428
+ ],
429
+ "license": "MIT",
430
+ "bin": {
431
+ "uuid": "dist-node/bin/uuid"
432
+ }
433
+ },
434
+ "node_modules/zod": {
435
+ "version": "4.4.3",
436
+ "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
437
+ "integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==",
438
+ "license": "MIT",
439
+ "funding": {
440
+ "url": "https://github.com/sponsors/colinhacks"
441
+ }
442
+ }
443
+ }
444
+ }
@@ -8,7 +8,7 @@
8
8
  "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation travel.book_hotel --requested-spend-cents 18700 --evidence-preset cost_and_completion --result-body '{\"status\":\"completed\",\"cost_cents\":18700}' --format json"
9
9
  },
10
10
  "dependencies": {
11
- "@paybond/kit": "^0.11.0",
11
+ "@paybond/kit": "^0.11.1",
12
12
  "@langchain/core": "^1.2.1",
13
13
  "@langchain/langgraph": "^1.4.7",
14
14
  "zod": "^4.2.0"
@@ -14,7 +14,7 @@ jobs:
14
14
  with:
15
15
  node-version: "22"
16
16
  cache: npm
17
- - run: npm install
17
+ - run: npm ci
18
18
  - run: npm run smoke
19
19
  env:
20
20
  PAYBOND_API_KEY: ${{ secrets.PAYBOND_SANDBOX_API_KEY }}