@paybond/kit 0.11.10 → 0.12.0

package/templates/paybond-mastra-travel-agent/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "paybond-mastra-travel-agent",
+  "private": false,
+  "type": "module",
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "start": "node dist/index.js",
+    "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation travel.book_hotel --requested-spend-cents 18700 --result-body '{\"status\":\"completed\",\"cost_cents\":18700}' --format json"
+  },
+  "dependencies": {
+    "@paybond/kit": "^0.11.11",
+    "@mastra/core": "^1.49.0",
+    "zod": "^4.2.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.1",
+    "typescript": "^5.7.2"
+  },
+  "engines": {
+    "node": ">=22"
+  }
+}

package/templates/paybond-mastra-travel-agent/paybond.policy.yaml

@@ -0,0 +1,22 @@
+# Reference implementation — edit freely. Regenerate with:
+# paybond policy init --preset travel --out paybond.policy.yaml
+
+version: 1
+name: travel-agent-v1
+default_deny: true
+
+tools:
+  travel.book_hotel:
+    side_effecting: true
+    max_spend_cents: 20000
+    evidence_preset: cost_and_completion
+
+  search.web:
+    side_effecting: false
+
+intent:
+  allowed_tools:
+    - travel.book_hotel
+  budget:
+    currency: usd
+    max_spend_usd: 200

package/templates/paybond-mastra-travel-agent/src/index.ts

@@ -0,0 +1,22 @@
+/**
+ * Travel booking agent (Mastra) — sandbox demo using bundled Kit helpers (no live LLM).
+ */
+import { createPaybondClient } from "./paybond.config.js";
+import { runMastraSandboxDemo } from "@paybond/kit/mastra";
+
+async function main(): Promise<void> {
+  const paybond = await createPaybondClient();
+  try {
+    const demo = await runMastraSandboxDemo({
+      paybond,
+      operation: "travel.book_hotel",
+      requestedSpendCents: 18700,
+      evidencePreset: "cost_and_completion",
+    });
+    console.log(JSON.stringify(demo, null, 2));
+  } finally {
+    await paybond.aclose();
+  }
+}
+
+void main();

package/templates/paybond-mastra-travel-agent/src/paybond.config.ts

@@ -0,0 +1,51 @@
+import { Paybond } from "@paybond/kit";
+
+declare const process: {
+  env: Record<string, string | undefined>;
+};
+
+function readEnvValue(body: string, key: string): string | undefined {
+  const pattern = new RegExp("^\\s*(?:export\\s+)?" + key + "\\s*=\\s*(.*)$", "m");
+  const match = body.match(pattern);
+  if (!match) return undefined;
+  let value = (match[1] ?? "").trim();
+  if (value.startsWith('"') && value.endsWith('"')) {
+    try {
+      value = JSON.parse(value);
+    } catch {
+      value = value.slice(1, -1);
+    }
+  } else if (value.startsWith("'") && value.endsWith("'")) {
+    value = value.slice(1, -1);
+  }
+  return value.trim() || undefined;
+}
+
+export async function loadPaybondEnvFile(envFile = ".env.local"): Promise<void> {
+  if (process.env.PAYBOND_API_KEY?.trim()) return;
+  let body: string;
+  try {
+    const { readFile } = await import("node:fs/promises");
+    body = await readFile(envFile, "utf8");
+  } catch (err) {
+    if ((err).code === "ENOENT") return;
+    throw err;
+  }
+  const apiKey = readEnvValue(body, "PAYBOND_API_KEY");
+  if (apiKey) {
+    process.env.PAYBOND_API_KEY = apiKey;
+  }
+}
+
+export async function createPaybondClient(): Promise<Paybond> {
+  await loadPaybondEnvFile(".env.local");
+  const apiKey = process.env.PAYBOND_API_KEY?.trim();
+  if (!apiKey) {
+    throw new Error("PAYBOND_API_KEY is required; run paybond login");
+  }
+  return Paybond.open({
+    apiKey,
+    gatewayBaseUrl: process.env.PAYBOND_GATEWAY_URL ?? process.env.PAYBOND_GATEWAY_BASE_URL,
+    expectedEnvironment: "sandbox",
+  });
+}

package/templates/paybond-mastra-travel-agent/tsconfig.json

@@ -0,0 +1,13 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "outDir": "dist",
+    "rootDir": "src",
+    "strict": true,
+    "skipLibCheck": true,
+    "declaration": true
+  },
+  "include": ["src/**/*.ts"]
+}

package/templates/paybond-mcp-coding-agent/package-lock.json

@@ -6,7 +6,7 @@
     "": {
       "name": "paybond-mcp-coding-agent",
       "dependencies": {
-        "@paybond/kit": "^0.11.10"
+        "@paybond/kit": "^0.12.0"
       },
       "devDependencies": {
         "@types/node": "^22.10.1",
@@ -47,9 +47,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.11.10",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.10.tgz",
-      "integrity": "sha512-RURqB5veDSVtWgeIsmgWI1+CgSyAudhZjhbRt6M9EOVbFF/47yYQLGIXbnqrxpthfV98jPE35p+4k0qtKLw/mw==",
+      "version": "0.12.0",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.12.0.tgz",
+      "integrity": "sha512-iAluOkqE8aINum1GF/LkR6Oi04xH9cNCZDJRF5BBFUQMqcNUpN1g/zNQK78jIGVlwcssexnLmiet31Z0NJ5jbg==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",
@@ -58,7 +58,7 @@
         "ajv": "^8.17.1",
         "blake3": "^2.1.7",
         "uuid": "^14.0.0",
-        "zod": "^4.4.3"
+        "zod": "^3.25.32 || ^4.2.0"
       },
       "bin": {
         "paybond": "dist/cli.js",
@@ -73,7 +73,9 @@
         "@anthropic-ai/claude-agent-sdk": ">=0.2.100",
         "@langchain/core": ">=0.3.0",
         "@langchain/langgraph": ">=0.2.50",
+        "@mastra/core": ">=1.0.0",
         "@openai/agents": ">=0.12.0",
+        "agents": ">=0.10.0",
         "ai": ">=4.0.0",
         "zod": "^3.25.32 || ^4.2.0"
       },
@@ -87,9 +89,15 @@
         "@langchain/langgraph": {
           "optional": true
         },
+        "@mastra/core": {
+          "optional": true
+        },
         "@openai/agents": {
           "optional": true
         },
+        "agents": {
+          "optional": true
+        },
         "ai": {
           "optional": true
         },

package/templates/paybond-mcp-coding-agent/package.json

@@ -8,7 +8,7 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation deploy.preview --requested-spend-cents 500 --result-body '{\"status\":\"completed\",\"cost_cents\":500}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.10"
+    "@paybond/kit": "^0.11.11"
   },
   "devDependencies": {
     "@types/node": "^22.10.1",

package/templates/paybond-openai-agents-demo/package-lock.json

@@ -7,7 +7,7 @@
       "name": "paybond-openai-agents-demo",
       "dependencies": {
         "@openai/agents": "^0.4.0",
-        "@paybond/kit": "^0.11.10",
+        "@paybond/kit": "^0.12.0",
         "zod": "^4.2.0"
       },
       "devDependencies": {
@@ -169,9 +169,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.11.10",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.10.tgz",
-      "integrity": "sha512-RURqB5veDSVtWgeIsmgWI1+CgSyAudhZjhbRt6M9EOVbFF/47yYQLGIXbnqrxpthfV98jPE35p+4k0qtKLw/mw==",
+      "version": "0.12.0",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.12.0.tgz",
+      "integrity": "sha512-iAluOkqE8aINum1GF/LkR6Oi04xH9cNCZDJRF5BBFUQMqcNUpN1g/zNQK78jIGVlwcssexnLmiet31Z0NJ5jbg==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",
@@ -180,7 +180,7 @@
         "ajv": "^8.17.1",
         "blake3": "^2.1.7",
         "uuid": "^14.0.0",
-        "zod": "^4.4.3"
+        "zod": "^3.25.32 || ^4.2.0"
       },
       "bin": {
         "paybond": "dist/cli.js",
@@ -195,7 +195,9 @@
         "@anthropic-ai/claude-agent-sdk": ">=0.2.100",
         "@langchain/core": ">=0.3.0",
         "@langchain/langgraph": ">=0.2.50",
+        "@mastra/core": ">=1.0.0",
         "@openai/agents": ">=0.12.0",
+        "agents": ">=0.10.0",
         "ai": ">=4.0.0",
         "zod": "^3.25.32 || ^4.2.0"
       },
@@ -209,9 +211,15 @@
         "@langchain/langgraph": {
           "optional": true
         },
+        "@mastra/core": {
+          "optional": true
+        },
         "@openai/agents": {
           "optional": true
         },
+        "agents": {
+          "optional": true
+        },
         "ai": {
           "optional": true
         },
@@ -798,9 +806,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.12.27",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.27.tgz",
-      "integrity": "sha512-1yrb/+w6HWQJrUCLkJ2IF5jNIPvvFkblV5RNOYl6bV+OA6p9GLcMpHFFGTosSvHvcAUibuUukRqhlYI4z32C7Q==",
+      "version": "4.12.28",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.28.tgz",
+      "integrity": "sha512-YwUvVpSF7m1yOblFPrU3Hbo8XhPheBoiyfGuII6z19LnOr6JpDnyyp7LFNrfV56wS8tpvtBFGRISHN02pDdLOA==",
       "license": "MIT",
       "optional": true,
       "engines": {

package/templates/paybond-openai-agents-demo/package.json

@@ -8,7 +8,7 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation saas.provision_seat --requested-spend-cents 2900 --result-body '{\"status\":\"completed\",\"cost_cents\":2900}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.10",
+    "@paybond/kit": "^0.11.11",
     "@openai/agents": "^0.4.0",
     "zod": "^4.2.0"
   },

package/templates/paybond-procurement-agent/package-lock.json

@@ -6,7 +6,7 @@
     "": {
       "name": "paybond-procurement-agent",
       "dependencies": {
-        "@paybond/kit": "^0.11.10"
+        "@paybond/kit": "^0.12.0"
       },
       "devDependencies": {
         "@types/node": "^22.10.1",
@@ -47,9 +47,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.11.10",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.10.tgz",
-      "integrity": "sha512-RURqB5veDSVtWgeIsmgWI1+CgSyAudhZjhbRt6M9EOVbFF/47yYQLGIXbnqrxpthfV98jPE35p+4k0qtKLw/mw==",
+      "version": "0.12.0",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.12.0.tgz",
+      "integrity": "sha512-iAluOkqE8aINum1GF/LkR6Oi04xH9cNCZDJRF5BBFUQMqcNUpN1g/zNQK78jIGVlwcssexnLmiet31Z0NJ5jbg==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",
@@ -58,7 +58,7 @@
         "ajv": "^8.17.1",
         "blake3": "^2.1.7",
         "uuid": "^14.0.0",
-        "zod": "^4.4.3"
+        "zod": "^3.25.32 || ^4.2.0"
       },
       "bin": {
         "paybond": "dist/cli.js",
@@ -73,7 +73,9 @@
         "@anthropic-ai/claude-agent-sdk": ">=0.2.100",
         "@langchain/core": ">=0.3.0",
         "@langchain/langgraph": ">=0.2.50",
+        "@mastra/core": ">=1.0.0",
         "@openai/agents": ">=0.12.0",
+        "agents": ">=0.10.0",
         "ai": ">=4.0.0",
         "zod": "^3.25.32 || ^4.2.0"
       },
@@ -87,9 +89,15 @@
         "@langchain/langgraph": {
           "optional": true
         },
+        "@mastra/core": {
+          "optional": true
+        },
         "@openai/agents": {
           "optional": true
         },
+        "agents": {
+          "optional": true
+        },
         "ai": {
           "optional": true
         },

package/templates/paybond-procurement-agent/package.json

@@ -8,7 +8,7 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation procurement.submit_po --requested-spend-cents 12000 --result-body '{\"status\":\"completed\",\"cost_cents\":12000}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.10"
+    "@paybond/kit": "^0.11.11"
   },
   "devDependencies": {
     "@types/node": "^22.10.1",

package/templates/paybond-travel-agent/package-lock.json

@@ -8,7 +8,7 @@
       "dependencies": {
         "@langchain/core": "^1.2.1",
         "@langchain/langgraph": "^1.4.7",
-        "@paybond/kit": "^0.11.10",
+        "@paybond/kit": "^0.12.0",
         "zod": "^4.2.0"
       },
       "devDependencies": {
@@ -178,9 +178,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.11.10",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.10.tgz",
-      "integrity": "sha512-RURqB5veDSVtWgeIsmgWI1+CgSyAudhZjhbRt6M9EOVbFF/47yYQLGIXbnqrxpthfV98jPE35p+4k0qtKLw/mw==",
+      "version": "0.12.0",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.12.0.tgz",
+      "integrity": "sha512-iAluOkqE8aINum1GF/LkR6Oi04xH9cNCZDJRF5BBFUQMqcNUpN1g/zNQK78jIGVlwcssexnLmiet31Z0NJ5jbg==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",
@@ -189,7 +189,7 @@
         "ajv": "^8.17.1",
         "blake3": "^2.1.7",
         "uuid": "^14.0.0",
-        "zod": "^4.4.3"
+        "zod": "^3.25.32 || ^4.2.0"
       },
       "bin": {
         "paybond": "dist/cli.js",
@@ -204,7 +204,9 @@
         "@anthropic-ai/claude-agent-sdk": ">=0.2.100",
         "@langchain/core": ">=0.3.0",
         "@langchain/langgraph": ">=0.2.50",
+        "@mastra/core": ">=1.0.0",
         "@openai/agents": ">=0.12.0",
+        "agents": ">=0.10.0",
         "ai": ">=4.0.0",
         "zod": "^3.25.32 || ^4.2.0"
       },
@@ -218,9 +220,15 @@
         "@langchain/langgraph": {
           "optional": true
         },
+        "@mastra/core": {
+          "optional": true
+        },
         "@openai/agents": {
           "optional": true
         },
+        "agents": {
+          "optional": true
+        },
         "ai": {
           "optional": true
         },
@@ -350,9 +358,9 @@
       "license": "MIT"
     },
     "node_modules/langsmith": {
-      "version": "0.7.15",
-      "resolved": "https://registry.npmjs.org/langsmith/-/langsmith-0.7.15.tgz",
-      "integrity": "sha512-huRfzLKcREE+ABkqKEriXK8Ax9V+xuV3d3x4PINEGi+hi4qyTvB4Nc2dpLSyfW/Ioj6+6d7T8majjWCe7mXc8A==",
+      "version": "0.7.16",
+      "resolved": "https://registry.npmjs.org/langsmith/-/langsmith-0.7.16.tgz",
+      "integrity": "sha512-Cn4PL7ujYQwxAOotesBhOuF2xsEIcW6mwKW41SXhu3WyjmU0R+ywCdbHYMSYh6QCaLg9pTluJMw2+L5ApyrZHg==",
       "license": "MIT",
       "dependencies": {
         "p-queue": "6.6.2"

package/templates/paybond-travel-agent/package.json

@@ -8,7 +8,7 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation travel.book_hotel --requested-spend-cents 18700 --result-body '{\"status\":\"completed\",\"cost_cents\":18700}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.10",
+    "@paybond/kit": "^0.11.11",
     "@langchain/core": "^1.2.1",
     "@langchain/langgraph": "^1.4.7",
     "zod": "^4.2.0"

package/templates/paybond-vercel-shopping-agent/package-lock.json

@@ -6,7 +6,7 @@
     "": {
       "name": "paybond-vercel-shopping-agent",
       "dependencies": {
-        "@paybond/kit": "^0.11.10",
+        "@paybond/kit": "^0.12.0",
         "ai": "^5.0.0",
         "zod": "^4.2.0"
       },
@@ -104,9 +104,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.11.10",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.10.tgz",
-      "integrity": "sha512-RURqB5veDSVtWgeIsmgWI1+CgSyAudhZjhbRt6M9EOVbFF/47yYQLGIXbnqrxpthfV98jPE35p+4k0qtKLw/mw==",
+      "version": "0.12.0",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.12.0.tgz",
+      "integrity": "sha512-iAluOkqE8aINum1GF/LkR6Oi04xH9cNCZDJRF5BBFUQMqcNUpN1g/zNQK78jIGVlwcssexnLmiet31Z0NJ5jbg==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",
@@ -115,7 +115,7 @@
         "ajv": "^8.17.1",
         "blake3": "^2.1.7",
         "uuid": "^14.0.0",
-        "zod": "^4.4.3"
+        "zod": "^3.25.32 || ^4.2.0"
       },
       "bin": {
         "paybond": "dist/cli.js",
@@ -130,7 +130,9 @@
         "@anthropic-ai/claude-agent-sdk": ">=0.2.100",
         "@langchain/core": ">=0.3.0",
         "@langchain/langgraph": ">=0.2.50",
+        "@mastra/core": ">=1.0.0",
         "@openai/agents": ">=0.12.0",
+        "agents": ">=0.10.0",
         "ai": ">=4.0.0",
         "zod": "^3.25.32 || ^4.2.0"
       },
@@ -144,9 +146,15 @@
         "@langchain/langgraph": {
           "optional": true
         },
+        "@mastra/core": {
+          "optional": true
+        },
         "@openai/agents": {
           "optional": true
         },
+        "agents": {
+          "optional": true
+        },
         "ai": {
           "optional": true
         },

package/templates/paybond-vercel-shopping-agent/package.json

@@ -8,7 +8,7 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation commerce.checkout --requested-spend-cents 4500 --result-body '{\"status\":\"completed\",\"cost_cents\":4500}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.10",
+    "@paybond/kit": "^0.11.11",
     "ai": "^5.0.0",
     "zod": "^4.2.0"
   },