@paybond/kit 0.11.10 → 0.12.0

package/README.md

@@ -70,7 +70,7 @@ npx -p @paybond/kit paybond agent sandbox smoke \
   --format json
 ```
 
-With `--policy-file`, Kit sends `completion_preset` from the tool's `evidence_preset` and omits `evidence_schema` and `template_id` (Gateway rejects conflicting bootstrap fields). Requires `@paybond/kit` 0.11.10+.
+With `--policy-file`, Kit sends `completion_preset` from the tool's `evidence_preset` and omits `evidence_schema` and `template_id` (Gateway rejects conflicting bootstrap fields). Requires `@paybond/kit` 0.11.11+.
 
 `agent sandbox smoke` only requires `@paybond/kit`. Framework demo commands (`agent demo vercel-ai smoke`, etc.) load their optional peers on demand.
 
@@ -170,7 +170,7 @@ Core SDK:
 - `Paybond.open(...)` for API-key-only, tenant-derived hosted sessions
 - `HarborClient` for capability verification, intent creation, x402 funding, evidence submission, and ledger reads
 - `paybond.signal` and `paybond.fraud` on `Paybond` sessions opened from one service-account API key
-- `PaybondIntents` helpers for principal-signed intent creation, x402 funding, and payee-signed evidence submission
+- `PaybondIntents` helpers for principal-signed intent creation, x402 funding, payee-signed evidence submission, and settlement confirmation
 - `PaybondSpendGuard`, `authorizeSpend`, and `guardTool` for spend-named wrappers around capability verification
 - Runtime-neutral and framework aliases: `paybondAgentToolSpendGuard`, `paybondRuntimeNeutralToolSpendGuard`, `paybondLangGraphToolSpendGuard`, and `paybondMCPToolSpendGuard`
 - `paybondRuntimeToolCallAdapter` for agent SDKs and custom runtimes that expose a tool-call object plus an application-owned executor

package/completion-presets/catalog.json

@@ -950,7 +950,8 @@
       },
       "scope": "tool_completion",
       "rail_hints": [
-        "x402_usdc_base"
+        "x402_usdc_base",
+        "stripe_mpp"
       ],
       "forbidden_evidence_fields": [
         "payment_session_id",
@@ -1063,7 +1064,8 @@
       },
       "scope": "tool_completion",
       "rail_hints": [
-        "x402_usdc_base"
+        "x402_usdc_base",
+        "stripe_mpp"
       ],
       "forbidden_evidence_fields": [
         "payment_session_id",
@@ -1158,7 +1160,8 @@
       },
       "scope": "tool_completion",
       "rail_hints": [
-        "x402_usdc_base"
+        "x402_usdc_base",
+        "stripe_mpp"
       ],
       "forbidden_evidence_fields": [
         "payment_session_id",
@@ -1182,6 +1185,374 @@
         "schema_digest_hex": "30a152fec1fa2965578938f26b82c805263f15e324db1be345453dc65598cc9c",
         "canonical_schema_digest_hex": "30a152fec1fa2965578938f26b82c805263f15e324db1be345453dc65598cc9c"
       }
+    },
+    {
+      "preset_id": "x402_saas_api_purchase",
+      "kind": "vendor_pack",
+      "archetype_preset_id": "api_response_ok",
+      "title": "x402 SaaS API purchase",
+      "description": "SaaS seat or API subscription purchase behind an x402-funded intent. Maps subscription_id to vendor_ref_id with seat_count metadata.",
+      "harbor_template_id": "api_response_v1",
+      "parameters": {
+        "http_status_path": [
+          "http_status"
+        ],
+        "expected_http_status": 200
+      },
+      "evidence_field_map": {
+        "subscription_id": "vendor_ref_id",
+        "http_status": "http_status",
+        "response_digest": "response_digest"
+      },
+      "vendor_evidence_schema": {
+        "type": "object",
+        "properties": {
+          "subscription_id": {
+            "type": "string",
+            "description": "SaaS subscription or seat purchase reference"
+          },
+          "seat_count": {
+            "type": "integer",
+            "description": "Number of seats or API units purchased"
+          },
+          "http_status": {
+            "type": "integer"
+          },
+          "response_digest": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "subscription_id",
+          "seat_count",
+          "http_status",
+          "response_digest"
+        ]
+      },
+      "evidence_schema": {
+        "type": "object",
+        "properties": {
+          "http_status": {
+            "type": "integer"
+          },
+          "vendor_ref_id": {
+            "type": "string"
+          },
+          "response_digest": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "http_status",
+          "vendor_ref_id",
+          "response_digest"
+        ]
+      },
+      "vendor_sample_evidence": {
+        "subscription_id": "sub_9kExample",
+        "seat_count": 5,
+        "http_status": 200,
+        "response_digest": "blake3:7f83b1657ff1fc53b92dc18148a1d65dfc2d4b1fa3d677284addd200126d9069"
+      },
+      "sample_evidence": {
+        "http_status": 200,
+        "vendor_ref_id": "sub_9kExample",
+        "response_digest": "blake3:7f83b1657ff1fc53b92dc18148a1d65dfc2d4b1fa3d677284addd200126d9069"
+      },
+      "sample_failing_evidence": {
+        "http_status": 402,
+        "vendor_ref_id": "sub_9kExample",
+        "response_digest": "blake3:7f83b1657ff1fc53b92dc18148a1d65dfc2d4b1fa3d677284addd200126d9069"
+      },
+      "human_summary": "Release when HTTP status is 200 with subscription_id mapped to vendor_ref_id, seat_count present, and response_digest bound to the API body.",
+      "recommended_amount_cents": 2500,
+      "spend_hints": {
+        "approval_threshold_cents": 5000,
+        "per_tool_max_cents": 25000
+      },
+      "scope": "tool_completion",
+      "rail_hints": [
+        "x402_usdc_base",
+        "stripe_mpp"
+      ],
+      "forbidden_evidence_fields": [
+        "payment_session_id",
+        "authorization_id",
+        "capture_id",
+        "void_id",
+        "x402_payment_session_id",
+        "onchain_transaction_hashes"
+      ],
+      "anti_patterns": [
+        "Do not submit Coinbase payment-session or authorization payloads as tool-completion evidence.",
+        "Do not use Stripe PaymentIntent ids as SaaS purchase proof — bind subscription_id from the vendor API response."
+      ],
+      "vendor_contract": {
+        "provider": "x402",
+        "api_version": "x402_saas_api_v1",
+        "contract_kind": "json_schema",
+        "quality_fields": [
+          "subscription_id",
+          "seat_count",
+          "response_digest"
+        ],
+        "schema_digest_hex": "7b1f5efa6aa2ffa4aa6029ea7dc025107f7bdbe96d20b9d834fb197ff85f842e",
+        "canonical_schema_digest_hex": "95a6b806adf78cab5fbb4f7bb871d1114268620c0d12cf61cfa8405558ea2577"
+      }
+    },
+    {
+      "preset_id": "x402_travel_booking",
+      "kind": "vendor_pack",
+      "archetype_preset_id": "cost_and_completion",
+      "title": "x402 travel booking",
+      "description": "Travel booking completion on the x402_usdc_base rail with confirmation_number, total_cents budget cap, and fare_class metadata.",
+      "harbor_template_id": "completion_budget_v1",
+      "parameters": {
+        "status_path": [
+          "status"
+        ],
+        "expected_status": "completed",
+        "cost_path": [
+          "total_cents"
+        ]
+      },
+      "evidence_field_map": {
+        "confirmation_number": "confirmation_number",
+        "total_cents": "total_cents",
+        "fare_class": "fare_class",
+        "status": "status"
+      },
+      "vendor_evidence_schema": {
+        "type": "object",
+        "properties": {
+          "confirmation_number": {
+            "type": "string"
+          },
+          "total_cents": {
+            "type": "integer"
+          },
+          "fare_class": {
+            "type": "string"
+          },
+          "status": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "confirmation_number",
+          "total_cents",
+          "fare_class",
+          "status"
+        ]
+      },
+      "evidence_schema": {
+        "type": "object",
+        "properties": {
+          "confirmation_number": {
+            "type": "string"
+          },
+          "total_cents": {
+            "type": "integer"
+          },
+          "fare_class": {
+            "type": "string"
+          },
+          "status": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "confirmation_number",
+          "total_cents",
+          "fare_class",
+          "status"
+        ]
+      },
+      "vendor_sample_evidence": {
+        "confirmation_number": "AA-8JZ3QK",
+        "total_cents": 19750,
+        "fare_class": "economy",
+        "status": "completed"
+      },
+      "sample_evidence": {
+        "confirmation_number": "AA-8JZ3QK",
+        "total_cents": 19750,
+        "fare_class": "economy",
+        "status": "completed"
+      },
+      "sample_failing_evidence": {
+        "confirmation_number": "AA-8JZ3QK",
+        "total_cents": 19750,
+        "fare_class": "business",
+        "status": "failed"
+      },
+      "human_summary": "Release when status is completed and total_cents is within the intent budget. confirmation_number and fare_class are schema-validated metadata.",
+      "recommended_amount_cents": 20000,
+      "spend_hints": {
+        "approval_threshold_cents": 10000,
+        "per_tool_max_cents": 50000
+      },
+      "scope": "tool_completion",
+      "rail_hints": [
+        "x402_usdc_base",
+        "stripe_mpp"
+      ],
+      "forbidden_evidence_fields": [
+        "payment_session_id",
+        "authorization_id",
+        "capture_id",
+        "void_id",
+        "x402_payment_session_id",
+        "onchain_transaction_hashes"
+      ],
+      "anti_patterns": [
+        "Do not submit Coinbase authorization or payment-session payloads as tool-completion evidence."
+      ],
+      "vendor_contract": {
+        "provider": "x402",
+        "api_version": "x402_travel_booking_v1",
+        "contract_kind": "json_schema",
+        "quality_fields": [
+          "confirmation_number",
+          "fare_class",
+          "total_cents"
+        ],
+        "schema_digest_hex": "2fb55ee27008a7d59d2df78f80dc144121e54056c71f53c62c90c5f00200dd91",
+        "canonical_schema_digest_hex": "2fb55ee27008a7d59d2df78f80dc144121e54056c71f53c62c90c5f00200dd91"
+      }
+    },
+    {
+      "preset_id": "invoice_payment_confirmed",
+      "kind": "vendor_pack",
+      "archetype_preset_id": "webhook_confirmed",
+      "title": "Invoice payment confirmed",
+      "description": "Accounts-payable invoice payment confirmed via vendor webhook with invoice_number and payment_reference fields. Rail-agnostic — not payment-rail funding webhooks.",
+      "harbor_template_id": "webhook_confirmation_v1",
+      "parameters": {
+        "event_type_path": [
+          "event_type"
+        ],
+        "expected_event_type": "invoice.paid"
+      },
+      "evidence_field_map": {
+        "invoice_number": "invoice_number",
+        "payment_reference": "payment_reference",
+        "webhook_event_id": "webhook_event_id",
+        "event_type": "event_type",
+        "payload_digest": "payload_digest"
+      },
+      "vendor_evidence_schema": {
+        "type": "object",
+        "properties": {
+          "invoice_number": {
+            "type": "string",
+            "description": "Vendor invoice number (e.g. INV-2026-0042)"
+          },
+          "payment_reference": {
+            "type": "string",
+            "description": "Vendor payment or remittance reference id"
+          },
+          "webhook_event_id": {
+            "type": "string"
+          },
+          "event_type": {
+            "type": "string"
+          },
+          "payload_digest": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "invoice_number",
+          "payment_reference",
+          "webhook_event_id",
+          "event_type",
+          "payload_digest"
+        ]
+      },
+      "evidence_schema": {
+        "type": "object",
+        "properties": {
+          "invoice_number": {
+            "type": "string"
+          },
+          "payment_reference": {
+            "type": "string"
+          },
+          "webhook_event_id": {
+            "type": "string"
+          },
+          "event_type": {
+            "type": "string"
+          },
+          "payload_digest": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "invoice_number",
+          "payment_reference",
+          "webhook_event_id",
+          "event_type",
+          "payload_digest"
+        ]
+      },
+      "vendor_sample_evidence": {
+        "invoice_number": "INV-2026-0042",
+        "payment_reference": "pay_ref_8JZ3QK",
+        "webhook_event_id": "wh_inv_9kExample",
+        "event_type": "invoice.paid",
+        "payload_digest": "blake3:2c26b46b68ffc68ff99b453c1d3041340e45ee0e6daef0f4c932b8d4b8e8bb2e"
+      },
+      "sample_evidence": {
+        "invoice_number": "INV-2026-0042",
+        "payment_reference": "pay_ref_8JZ3QK",
+        "webhook_event_id": "wh_inv_9kExample",
+        "event_type": "invoice.paid",
+        "payload_digest": "blake3:2c26b46b68ffc68ff99b453c1d3041340e45ee0e6daef0f4c932b8d4b8e8bb2e"
+      },
+      "sample_failing_evidence": {
+        "invoice_number": "INV-2026-0042",
+        "payment_reference": "pay_ref_8JZ3QK",
+        "webhook_event_id": "wh_inv_9kExample",
+        "event_type": "invoice.voided",
+        "payload_digest": "blake3:2c26b46b68ffc68ff99b453c1d3041340e45ee0e6daef0f4c932b8d4b8e8bb2e"
+      },
+      "human_summary": "Release when event_type is invoice.paid with invoice_number, payment_reference, webhook_event_id, and payload_digest present.",
+      "recommended_amount_cents": 50000,
+      "spend_hints": {
+        "approval_threshold_cents": 25000,
+        "per_tool_max_cents": 250000
+      },
+      "scope": "tool_completion",
+      "forbidden_evidence_fields": [
+        "payment_intent_id",
+        "mandate_id",
+        "latest_charge_id",
+        "transfer_id",
+        "refund_id",
+        "stripe_event_id",
+        "payment_session_id",
+        "authorization_id",
+        "x402_payment_session_id",
+        "onchain_transaction_hashes"
+      ],
+      "anti_patterns": [
+        "Do not use Stripe payment_intent.succeeded or Coinbase authorization webhooks as tool-completion evidence.",
+        "Do not submit x402 payment-session ids as invoice payment proof."
+      ],
+      "vendor_contract": {
+        "provider": "generic",
+        "api_version": "invoice_payment_v1",
+        "contract_kind": "json_schema",
+        "quality_fields": [
+          "invoice_number",
+          "payment_reference",
+          "payload_digest"
+        ],
+        "schema_digest_hex": "c185be62f1add3fb051604db007f3649137b8141e43efb5c82811db3dcd7678c",
+        "canonical_schema_digest_hex": "9bc60cfc5ed0a4233d4c6041120ad5af56ace2fb454779563c1e0b01f966ad18"
+      }
     }
   ]
 }

package/completion-presets/catalog.sha256

@@ -1 +1 @@
-6b3fc4f2c568bd9de61e96c18b345c815a4ffea73fc1212f2e6fe601817a8483
+a738febc9ee8b5b66f05991c4582ba24e6857cdc574196b0aeefc5c77e192ea9

package/dist/agent/facade.js

@@ -1,6 +1,8 @@
 import { createPaybondClaudeAgentsConfig } from "../claude-agents/config.js";
 import { createPaybondOpenAIAgentsConfig } from "../openai-agents/index.js";
 import { isKnownPolicyPresetId, resolvePolicyPresetPath } from "../policy/presets.js";
+import { createPaybondCloudflareAgentsConfig } from "../cloudflare-agents/config.js";
+import { createPaybondMastraConfig } from "../mastra/config.js";
 import { createPaybondVercelAgentConfig } from "../vercel-ai/config.js";
 import { createPaybondGenericAgentConfig, createPaybondGenericInputGuard, } from "./generic-runner.js";
 import { instrumentPaybondAgent, PaybondInstrumentRuntime, } from "./instrument.js";
@@ -58,6 +60,13 @@ export function toPaybondAgentResult(result) {
                 hooks.allowedTools = result.claudeAgentsConfig.allowedTools;
             }
             break;
+        case "mastra":
+            break;
+        case "cloudflare-agents":
+            if (result.toolApproval) {
+                hooks.toolApproval = result.toolApproval;
+            }
+            break;
         default: {
             const exhaustive = result.framework;
             throw new Error(`unsupported guarded agent framework: ${String(exhaustive)}`);
@@ -102,6 +111,10 @@ export function wrapPaybondTools(run, tools, options) {
             return createPaybondOpenAIAgentsConfig(run, tools).tools;
         case "claude-agents":
             return createPaybondClaudeAgentsConfig(run, tools).agentTools;
+        case "mastra":
+            return createPaybondMastraConfig(run, tools).tools;
+        case "cloudflare-agents":
+            return createPaybondCloudflareAgentsConfig(run, tools).tools;
         case "langgraph":
             throw new Error('framework "langgraph" does not wrap tools in place; use instrument() or createPaybondLangGraphHooks(run)');
         default: {

package/dist/agent/guarded-agent.d.ts

@@ -11,7 +11,7 @@ import type { PaybondToolRegistry } from "./registry.js";
 import type { PaybondAgentRunHost } from "./run.js";
 import { PaybondAgentRun } from "./run.js";
 import type { PaybondRunBindingAttachInput } from "./types.js";
-export type GuardedAgentFramework = "generic" | "openai-agents" | "vercel-ai" | "langgraph" | "claude-agents";
+export type GuardedAgentFramework = "generic" | "openai-agents" | "vercel-ai" | "langgraph" | "claude-agents" | "mastra" | "cloudflare-agents";
 export type CreateGuardedAgentInput<TTools = unknown> = {
     policy: PaybondPolicyLoadSource | PaybondPolicy;
     /** Agent-agnostic wrapping when omitted. Pass a framework only when SDK-specific hooks are required. */

package/dist/agent/guarded-agent.js

@@ -3,6 +3,8 @@ import { PaybondPolicy } from "../policy/load.js";
 import { createPaybondVercelAgentConfig } from "../vercel-ai/config.js";
 import { createPaybondLangGraphHooks } from "../langgraph/config.js";
 import { createPaybondClaudeAgentsConfig, } from "../claude-agents/config.js";
+import { createPaybondCloudflareAgentsConfig, } from "../cloudflare-agents/config.js";
+import { createPaybondMastraConfig, } from "../mastra/config.js";
 import { createPaybondGenericAgentConfig, } from "./generic-runner.js";
 import { PaybondAgentRun } from "./run.js";
 async function resolvePolicy(source) {
@@ -90,6 +92,23 @@ export async function createGuardedAgent(paybond, input) {
                 claudeAgentsConfig,
             };
         }
+        case "mastra": {
+            const config = createPaybondMastraConfig(run, input.tools);
+            return {
+                ...base,
+                framework: "mastra",
+                agentTools: config.tools,
+            };
+        }
+        case "cloudflare-agents": {
+            const config = createPaybondCloudflareAgentsConfig(run, input.tools);
+            return {
+                ...base,
+                framework: "cloudflare-agents",
+                agentTools: config.tools,
+                toolApproval: config.toolApproval,
+            };
+        }
         default: {
             const exhaustive = framework;
             throw new Error(`unsupported guarded agent framework: ${String(exhaustive)}`);

package/dist/agent/index.d.ts

@@ -1,3 +1,4 @@
+export { PaybondAgentFacade, createPaybondAgentCallable, type GetAgentReceiptInput, type PaybondAgentCallable, } from "./receipt-client.js";
 export { createGuardedAgent, createGuardedAgentRunner, type CreateGuardedAgentInput, type CreateGuardedAgentResult, type CreateGuardedAgentResultBase, type GuardedAgentFramework, } from "./guarded-agent.js";
 export { createPaybondAgent, resolveAgentPolicySource, toPaybondAgentResult, wrapPaybondTools, type PaybondAgentHooks, type PaybondAgentInput, type PaybondAgentResult, type PaybondInstrumentInput, type PaybondWrapToolsOptions, } from "./facade.js";
 export { PaybondInstrumentBuilder, PaybondInstrumented, PaybondInstrumentRuntime, PaybondLazyContextError, PaybondUnboundContextError, discoverPolicyFromAgent, discoverToolNames, discoverToolsFromAgent, inlinePolicyToDocument, instrumentPaybondAgent, instrumentPaybondClaudeAgents, instrumentPaybondLangGraph, instrumentPaybondMCP, instrumentPaybondOpenAI, instrumentPaybondVercel, isInlinePolicy, isInstrumentableAgentObject, readPaybondAgentInstrumentation, type PaybondAgentInstrumentation, type PaybondInlinePolicy, type PaybondInstrumentAgentOptions, type PaybondInstrumentAttachInput, type PaybondInstrumentBinding, type PaybondInstrumentContext, type PaybondInstrumentContextInput, type PaybondInstrumentContextProvider, } from "./instrument.js";
@@ -10,4 +11,4 @@ export { PaybondToolInterceptor } from "./interceptor.js";
 export { PaybondToolRegistry, createPaybondToolRegistry, } from "./registry.js";
 export { PaybondAgentRun, PaybondAgentRunFacade, type PaybondAgentRunHost, } from "./run.js";
 export { agentRegistryDocumentToConfig, buildSmokeRegistry, loadAgentRegistryFile, parseAgentRegistryText, validateAgentRegistryDocument, type AgentRegistryFileDocument, type AgentRegistryValidationResult, } from "./registry-file.js";
-export { PaybondAgentRunBindError, PaybondAutoEvidenceError, PaybondAutoEvidenceSubmitError, PaybondEvidenceSubmitError, PaybondToolRegistryValidationError, PaybondUnregisteredSideEffectingToolError, type PaybondAgentRunBindInput, type PaybondAuthorizeToolCallInput, type PaybondEvidenceMapper, type PaybondInterceptEvidenceResult, type PaybondInterceptWrapExecuteInput, type PaybondInterceptWrapExecuteResult, type PaybondRunBinding, type PaybondRunBindingAttachInput, type PaybondRunBindingSandboxBootstrapInput, type PaybondRunProductionEvidenceCredentials, type PaybondRunGuard, type PaybondSideEffectingToolEntry, type PaybondSideEffectingToolPolicy, type PaybondSpendResolver, type PaybondToolCallContext, type PaybondToolInputGuardAllowDecision, type PaybondToolInputGuardApprovalRequiredDecision, type PaybondToolInputGuardDecision, type PaybondToolInputGuardDenyDecision, type PaybondToolRegistryConfig, type PaybondToolResolution, type PaybondTraceEvent, type PaybondTraceSink, } from "./types.js";
+export { PaybondAgentRunBindError, PaybondAutoEvidenceError, PaybondAutoEvidenceSubmitError, PaybondEvidenceSubmitError, PaybondToolRegistryValidationError, PaybondUnregisteredSideEffectingToolError, type PaybondAgentRunBindInput, type PaybondAuthorizeToolCallInput, type PaybondEvidenceMapper, type PaybondExternalAttestationMapper, type PaybondInterceptEvidenceResult, type PaybondInterceptWrapExecuteInput, type PaybondInterceptWrapExecuteResult, type PaybondRunBinding, type PaybondRunBindingAttachInput, type PaybondRunBindingSandboxBootstrapInput, type PaybondRunProductionEvidenceCredentials, type PaybondRunGuard, type PaybondSideEffectingToolEntry, type PaybondSideEffectingToolPolicy, type PaybondSpendResolver, type PaybondToolCallContext, type PaybondToolInputGuardAllowDecision, type PaybondToolInputGuardApprovalRequiredDecision, type PaybondToolInputGuardDecision, type PaybondToolInputGuardDenyDecision, type PaybondToolRegistryConfig, type PaybondToolResolution, type PaybondTraceEvent, type PaybondTraceSink, } from "./types.js";

package/dist/agent/index.js

@@ -1,3 +1,4 @@
+export { PaybondAgentFacade, createPaybondAgentCallable, } from "./receipt-client.js";
 export { createGuardedAgent, createGuardedAgentRunner, } from "./guarded-agent.js";
 export { createPaybondAgent, resolveAgentPolicySource, toPaybondAgentResult, wrapPaybondTools, } from "./facade.js";
 export { PaybondInstrumentBuilder, PaybondInstrumented, PaybondInstrumentRuntime, PaybondLazyContextError, PaybondUnboundContextError, discoverPolicyFromAgent, discoverToolNames, discoverToolsFromAgent, inlinePolicyToDocument, instrumentPaybondAgent, instrumentPaybondClaudeAgents, instrumentPaybondLangGraph, instrumentPaybondMCP, instrumentPaybondOpenAI, instrumentPaybondVercel, isInlinePolicy, isInstrumentableAgentObject, readPaybondAgentInstrumentation, } from "./instrument.js";

package/dist/agent/instrument.d.ts

@@ -154,3 +154,9 @@ export declare function instrumentPaybondClaudeAgents<TTools>(paybond: PaybondAg
 export declare function instrumentPaybondMCP<TTools>(paybond: PaybondAgentRunHost, input: Omit<PaybondInstrumentBaseInput<TTools>, "framework"> & {
     tools: TTools;
 }): Promise<PaybondInstrumented<TTools> | PaybondInstrumentRuntime<TTools>>;
+export declare function instrumentPaybondMastra<TTools>(paybond: PaybondAgentRunHost, input: Omit<PaybondInstrumentBaseInput<TTools>, "framework"> & {
+    tools: TTools;
+}): Promise<PaybondInstrumented<TTools> | PaybondInstrumentRuntime<TTools>>;
+export declare function instrumentPaybondCloudflareAgents<TTools>(paybond: PaybondAgentRunHost, input: Omit<PaybondInstrumentBaseInput<TTools>, "framework"> & {
+    tools: TTools;
+}): Promise<PaybondInstrumented<TTools> | PaybondInstrumentRuntime<TTools>>;

package/dist/agent/instrument.js

@@ -440,3 +440,9 @@ export function instrumentPaybondClaudeAgents(paybond, input) {
 export function instrumentPaybondMCP(paybond, input) {
     return frameworkInstrument(paybond, "generic", input);
 }
+export function instrumentPaybondMastra(paybond, input) {
+    return frameworkInstrument(paybond, "mastra", input);
+}
+export function instrumentPaybondCloudflareAgents(paybond, input) {
+    return frameworkInstrument(paybond, "cloudflare-agents", input);
+}

package/dist/agent/interceptor.d.ts

@@ -21,4 +21,13 @@ export declare class PaybondToolInterceptor {
     wrapExecute<TResult>(input: PaybondInterceptWrapExecuteInput<TResult>): Promise<PaybondInterceptWrapExecuteResult<TResult>>;
     private resolveSideEffectingCall;
     private submitAutoEvidence;
+    /**
+     * Composes an unsigned Agent Receipt Standard draft (Phase 1) after a successful
+     * authorize → execute → evidence cycle. Never signed or persisted here; Phase 2 covers
+     * compose/sign/persist. Best-effort: returns `undefined` instead of throwing whenever
+     * required receipt fields (agent context, principal/operator DID, policy template, pinned
+     * policy digest, or a Harbor decision id) are unavailable on this binding or call.
+     */
+    private buildReceiptDraft;
+    private resolveToolExternalAttestations;
 }