@paybond/kit 0.12.4 → 0.12.6

package/templates/paybond-crewai-procurement-agent/crew.py

@@ -0,0 +1,117 @@
+"""CrewAI procurement crew with Paybond spend gates on tool calls.
+
+Requires OPENAI_API_KEY (or your CrewAI LLM provider env) for a live kickoff.
+For Harbor authorize + evidence without an LLM, use `python app.py` instead.
+"""
+
+from __future__ import annotations
+
+import asyncio
+import json
+import os
+
+from crewai import Agent, Crew, Process, Task
+from crewai.tools import tool
+
+from paybond_config import create_paybond_client
+
+
+@tool("procurement.search_catalog")
+def search_catalog(query: str) -> str:
+    """Search the procurement catalog (read-only; not side-effecting)."""
+    return json.dumps(
+        {
+            "query": query,
+            "items": [
+                {"sku": "LAP-14", "vendor_id": "vendor-acme", "unit_cents": 12000},
+                {"sku": "MON-27", "vendor_id": "vendor-north", "unit_cents": 8900},
+            ],
+        }
+    )
+
+
+@tool("procurement.submit_po")
+def submit_po(vendor_id: str, amount_cents: int) -> str:
+    """Submit a purchase order. Paybond Harbor must approve before this runs."""
+    return json.dumps(
+        {
+            "status": "completed",
+            "vendor_id": vendor_id,
+            "cost_cents": amount_cents,
+            "po_id": f"po-{vendor_id}-{amount_cents}",
+        }
+    )
+
+
+async def build_crew() -> Crew:
+    paybond = await create_paybond_client()
+    result = await paybond.agent(
+        policy="./paybond.policy.yaml",
+        framework="crewai",
+        tools=[search_catalog, submit_po],
+    )
+    guarded_tools = result.tools
+
+    buyer = Agent(
+        role="Procurement buyer",
+        goal="Find a catalog item and submit a purchase order within policy limits",
+        backstory="You buy hardware for an engineering team and never exceed approved spend.",
+        tools=guarded_tools,
+        verbose=True,
+        allow_delegation=False,
+    )
+    reviewer = Agent(
+        role="Spend reviewer",
+        goal="Confirm the PO amount stays under the Harbor budget and summarize the receipt",
+        backstory="You enforce corporate spend controls and call out denials or approval holds.",
+        verbose=True,
+        allow_delegation=False,
+    )
+
+    find_item = Task(
+        description=(
+            "Search the catalog for a 14-inch laptop. "
+            "Then submit a PO for vendor-acme at 12000 cents using procurement.submit_po."
+        ),
+        expected_output="JSON PO confirmation or a clear Paybond deny/hold message",
+        agent=buyer,
+    )
+    review = Task(
+        description=(
+            "Review the buyer result. If Paybond denied or held spend, explain why. "
+            "If approved, summarize vendor_id, cost_cents, and po_id."
+        ),
+        expected_output="Short spend-control summary for an operator",
+        agent=reviewer,
+        context=[find_item],
+    )
+
+    crew = Crew(
+        agents=[buyer, reviewer],
+        tasks=[find_item, review],
+        process=Process.sequential,
+        verbose=True,
+    )
+    # Keep the Paybond client alive for the crew lifetime via closure.
+    crew._paybond_client = paybond  # type: ignore[attr-defined]
+    return crew
+
+
+async def main() -> None:
+    if not os.environ.get("OPENAI_API_KEY", "").strip():
+        raise SystemExit(
+            "OPENAI_API_KEY is required for crew kickoff. "
+            "Use `python app.py` for a no-LLM Harbor smoke, or set your LLM key."
+        )
+    crew = await build_crew()
+    try:
+        output = crew.kickoff()
+        print(output)
+    finally:
+        paybond = getattr(crew, "_paybond_client", None)
+        if paybond is not None:
+            await paybond.aclose()
+
+
+if __name__ == "__main__":
+    asyncio.run(main())

package/templates/paybond-crewai-procurement-agent/package.json

@@ -0,0 +1,6 @@
+{
+  "private": true,
+  "scripts": {
+    "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation procurement.submit_po --requested-spend-cents 12000 --result-body '{\"status\":\"completed\",\"cost_cents\":12000}' --format json"
+  }
+}

package/templates/paybond-crewai-procurement-agent/paybond.policy.yaml

@@ -0,0 +1,28 @@
+# Reference implementation — edit freely. Regenerate with:
+# edit paybond.policy.yaml directly
+
+version: 1
+name: procurement-agent-v1
+default_deny: true
+
+tools:
+  procurement.submit_po:
+    side_effecting: true
+    spend_from_args: amount_cents
+    evidence_preset: cost_and_completion
+
+  procurement.list_vendors:
+    side_effecting: false
+
+  procurement.get_quote:
+    side_effecting: false
+
+  procurement.search_catalog:
+    side_effecting: false
+
+intent:
+  allowed_tools:
+    - procurement.submit_po
+  budget:
+    currency: usd
+    max_spend_usd: 250

package/templates/paybond-crewai-procurement-agent/paybond_config.py

@@ -0,0 +1,45 @@
+import os
+from pathlib import Path
+
+from paybond_kit import Paybond
+
+
+def _read_env_value(body: str, key: str) -> str | None:
+    for raw_line in body.splitlines():
+        line = raw_line.strip()
+        for prefix in (f"export {key}=", f"{key}="):
+            if line.startswith(prefix):
+                value = line[len(prefix):].strip()
+                if len(value) >= 2 and value[0] == value[-1] and value[0] in "'\"":
+                    value = value[1:-1]
+                return value.strip() or None
+    return None
+
+
+def load_paybond_env_file(env_file: str = ".env.local") -> None:
+    if os.environ.get("PAYBOND_API_KEY", "").strip():
+        return
+    path = Path(env_file)
+    try:
+        body = path.read_text(encoding="utf-8")
+    except FileNotFoundError:
+        return
+    api_key = _read_env_value(body, "PAYBOND_API_KEY")
+    if api_key:
+        os.environ["PAYBOND_API_KEY"] = api_key
+
+
+async def create_paybond_client() -> Paybond:
+    load_paybond_env_file(".env.local")
+    api_key = os.environ.get("PAYBOND_API_KEY", "").strip()
+    if not api_key:
+        raise RuntimeError("PAYBOND_API_KEY is required; run paybond login")
+    return await Paybond.open(
+        api_key=api_key,
+        gateway_base_url=(
+            os.environ.get("PAYBOND_GATEWAY_URL")
+            or os.environ.get("PAYBOND_GATEWAY_BASE_URL")
+            or "https://api.paybond.ai"
+        ),
+        expected_environment="sandbox",
+    )

package/templates/paybond-crewai-procurement-agent/requirements.txt

@@ -0,0 +1,2 @@
+paybond-kit[crewai]>=0.12.6
+crewai>=0.80.0

package/templates/paybond-invoice-agent/requirements.txt

@@ -1,2 +1,2 @@
-paybond-kit>=0.11.11
+paybond-kit>=0.12.6
 langgraph>=1.2.0

package/templates/paybond-mastra-travel-agent/package-lock.json

@@ -7,12 +7,12 @@
       "name": "paybond-mastra-travel-agent",
       "dependencies": {
         "@mastra/core": "^1.49.0",
-        "@paybond/kit": "^0.12.4",
+        "@paybond/kit": "^0.12.6",
         "zod": "^4.2.0"
       },
       "devDependencies": {
         "@types/node": "^22.10.1",
-        "typescript": "^5.7.2"
+        "typescript": "^7.0.2"
       },
       "engines": {
         "node": ">=22"
@@ -412,9 +412,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.12.4",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.12.4.tgz",
-      "integrity": "sha512-Wo2v0MBEdrvxGcSSJ/hG1TGOfw/hm0TTnpVXH70PVq0Y+xL97o4J9A1Z2dKVdfRnp5O0KM0AkJKA2MeOQ7qkFw==",
+      "version": "0.12.6",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.12.6.tgz",
+      "integrity": "sha512-rkZ+7SjXm3aZ9TIGkCYvwTWV+NPRxuol+UmBGd0NPzOilHmHhP84aYH1Ro4syVA2pqIdyqCItSszGQMETPjNTA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",
@@ -436,6 +436,7 @@
       },
       "peerDependencies": {
         "@anthropic-ai/claude-agent-sdk": ">=0.2.100",
+        "@google/adk": ">=1.0.0",
         "@langchain/core": ">=0.3.0",
         "@langchain/langgraph": ">=0.2.50",
         "@mastra/core": ">=1.0.0",
@@ -448,6 +449,9 @@
         "@anthropic-ai/claude-agent-sdk": {
           "optional": true
         },
+        "@google/adk": {
+          "optional": true
+        },
         "@langchain/core": {
           "optional": true
         },
@@ -594,6 +598,346 @@
       "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==",
       "license": "MIT"
     },
+    "node_modules/@typescript/typescript-aix-ppc64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-aix-ppc64/-/typescript-aix-ppc64-7.0.2.tgz",
+      "integrity": "sha512-MTKKkWB7p/0E9xi1d1tHtZ5PiLkGEMIq88pK2CubZjOsLtYTLqhgIgi6zepFa+9GHZ6h05NMCkQxGKiPXMxXtQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "aix"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-darwin-arm64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-darwin-arm64/-/typescript-darwin-arm64-7.0.2.tgz",
+      "integrity": "sha512-gowzar9MwS/aRWp6f3a4KUqzRjAZjOsmGNCM6LcTgXum+dBfgsBVMN+AgvOCCbguXyick6LJhpBszxMebJ8syA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-darwin-x64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-darwin-x64/-/typescript-darwin-x64-7.0.2.tgz",
+      "integrity": "sha512-SZ9xZInqApNlNGc9s0W1VSsktYSOe9cFqNOIqmN1Gs8SmkjKZYFt017G4VwPxASInODuAdbTW7sXiFUf893RgA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-freebsd-arm64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-freebsd-arm64/-/typescript-freebsd-arm64-7.0.2.tgz",
+      "integrity": "sha512-W5NH4y/J0plIIS5b2xvTEkU7JFxyqdMAOgf+Ilhl0vHQXKO5dZoxd+C/jEtq56c4F3wk71RB4BMRQ2XdI+bwYQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-freebsd-x64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-freebsd-x64/-/typescript-freebsd-x64-7.0.2.tgz",
+      "integrity": "sha512-UMGDx5sTpzNw3WiPebH7l90IWfJggEd+egHt/q6p7/Cm3zqoV7VxkGXt+3DxPIw8CcmvAB0j3sVVfbhX+M4Tpw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-linux-arm": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-arm/-/typescript-linux-arm-7.0.2.tgz",
+      "integrity": "sha512-gffT3xPz9sR7j/YJExkyPntrI0P2EP9XbOyWzth2/Gs0RstK+90RBcO0ncXoXy/beYll1SXw846Nf2zdnEz0QQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-linux-arm64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-arm64/-/typescript-linux-arm64-7.0.2.tgz",
+      "integrity": "sha512-Qh4eU4/y3yDjnfjjyPYihMj5/ODIlmt+Bzu17OI+fiSRDW57QmU5SiN63exPRNJPKUzcc1INa1NXdrJ+MqHjUQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-linux-loong64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-loong64/-/typescript-linux-loong64-7.0.2.tgz",
+      "integrity": "sha512-uEHck9i8hoAzXPiYRib1O7miOnz23SxIeVl6F4LXox+qov1K35jHcEW6VHKvZI+pyvl7fZEP4MCU5LYvIq1GuQ==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-linux-mips64el": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-mips64el/-/typescript-linux-mips64el-7.0.2.tgz",
+      "integrity": "sha512-R4KvAMnE43W5Qeqb0Ly56O3mWMWIAgsMyz36DCaycd5nbg/9kzm0liw3JocfRqyJY0KPmzFjbswozXyW0DnIYA==",
+      "cpu": [
+        "mips64el"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-linux-ppc64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-ppc64/-/typescript-linux-ppc64-7.0.2.tgz",
+      "integrity": "sha512-DORx5b3sd/4S7eayxm4FQv+A7CrkUIGRaHiwI8oiHTAI1fAPWhF4J0vAlkC8biAlHSVVwxMQ3tjZ2/DVbnQiiA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-linux-riscv64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-riscv64/-/typescript-linux-riscv64-7.0.2.tgz",
+      "integrity": "sha512-wf0jqEDOjrPRnKwYRyyJDRo11KMbvMFrU+q4zqKyChODBzvlkbhNQfKvLxQCcwTpdDaXSHZTVuh0JoCrKCUMHQ==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-linux-s390x": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-s390x/-/typescript-linux-s390x-7.0.2.tgz",
+      "integrity": "sha512-IkwJc3L7yhytWd/ewjyxNDfOmswCm9GWMJT/ue/dU4aZNbwZeYAetq42VyLmsmSjvoX7z74X6ZaYCtzAr0EuGw==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-linux-x64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-linux-x64/-/typescript-linux-x64-7.0.2.tgz",
+      "integrity": "sha512-EYdf2cNg7rgCWJnxCdJ+F3V39O8ihb37eHAu1LK8oAFizgTQbPOK7zHHXbPt8rX24COqODXeI3sIf0fCXG7H/A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-netbsd-arm64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-netbsd-arm64/-/typescript-netbsd-arm64-7.0.2.tgz",
+      "integrity": "sha512-+polYF4MF04aPpO5FTkHran9yUQDSXqy5GiSDKpsll5jy3l3+g9QLhpf39T+ePtefhXLOGrLl0QIjkQP6VnelA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-netbsd-x64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-netbsd-x64/-/typescript-netbsd-x64-7.0.2.tgz",
+      "integrity": "sha512-8YIT0EHM/3dq10ZOVF/A7pc/YSMtbcecct4rWtexrnSCHOPcpC2KTLXfTCR6vDpnSiY12heNb1GiN/wu+T/FyA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-openbsd-arm64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-openbsd-arm64/-/typescript-openbsd-arm64-7.0.2.tgz",
+      "integrity": "sha512-APT8+ClYnuYm1u9+kgGXoMj2VzWzcymwh2gNSQVySHfkRDGOTVkoWLjCmOQSaO+PoqQ57B0flRp9SA+7GnnkzQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-openbsd-x64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-openbsd-x64/-/typescript-openbsd-x64-7.0.2.tgz",
+      "integrity": "sha512-yX7s+Q0Dln0Dt9tEzZsAjXXR/+ytBM7AlglaqyeMPxQszJ1JhlJdZ6jLA+IzldHtflX81em7lDao1xXu+aRRkg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-sunos-x64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-sunos-x64/-/typescript-sunos-x64-7.0.2.tgz",
+      "integrity": "sha512-dLJDGaLZ1D4HPQn62u1n8mBDkJREwMsAkCdkwd4Ieqw+x3TUyTsqY0YiBCtE6H6OzzgGk3iuZ3vFWRS+E8/d1g==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-win32-arm64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-win32-arm64/-/typescript-win32-arm64-7.0.2.tgz",
+      "integrity": "sha512-Gyl1Vy6OsWesLzmq+EP0Fb7b4Nid5232AvcA2SFcdYreldpNtYFFofPjnt62y9hQy7VTaZp65ICJjuAQRaVcIQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
+    "node_modules/@typescript/typescript-win32-x64": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/@typescript/typescript-win32-x64/-/typescript-win32-x64-7.0.2.tgz",
+      "integrity": "sha512-0BQ3HkAHHlKLSp1qRvf3SUhGpGsDuhB/jgFw75guyqbxJqEaS0Cw/VFO8i2nHglJUzQCRtMMR/IBAKE3ETMC4g==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=16.20.0"
+      }
+    },
     "node_modules/@workflow/serde": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/@workflow/serde/-/serde-4.1.0.tgz",
@@ -1390,9 +1734,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.12.29",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.29.tgz",
-      "integrity": "sha512-1hNiRjawYrLq/4m3DQQjPGFg0VZkk4RjQJDff/excI6Dm9BiL75qxGrd7/c6YOxPdq6AscP3LiXhQ6fKFC1Waw==",
+      "version": "4.12.30",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.30.tgz",
+      "integrity": "sha512-emn+JoJjrN9YTpRDS5it/UI2SO9BAE37T6I3d963RxcZ81G9A4pr2SZTEiiaiKbzx+NKRg5BZ89fCL7gCJCUog==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"
@@ -3092,17 +3436,38 @@
       }
     },
     "node_modules/typescript": {
-      "version": "5.9.3",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
-      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-7.0.2.tgz",
+      "integrity": "sha512-8FYau96o3NKOhbjKi/qNvG/W5jhzxkbdm5sj9AbZ/5T5sWqn3hJgLfGx27sRKZWTvyzCP8dLRBTf5tBTSRVUNA==",
       "dev": true,
       "license": "Apache-2.0",
       "bin": {
-        "tsc": "bin/tsc",
-        "tsserver": "bin/tsserver"
+        "tsc": "bin/tsc"
       },
       "engines": {
-        "node": ">=14.17"
+        "node": ">=16.20.0"
+      },
+      "optionalDependencies": {
+        "@typescript/typescript-aix-ppc64": "7.0.2",
+        "@typescript/typescript-darwin-arm64": "7.0.2",
+        "@typescript/typescript-darwin-x64": "7.0.2",
+        "@typescript/typescript-freebsd-arm64": "7.0.2",
+        "@typescript/typescript-freebsd-x64": "7.0.2",
+        "@typescript/typescript-linux-arm": "7.0.2",
+        "@typescript/typescript-linux-arm64": "7.0.2",
+        "@typescript/typescript-linux-loong64": "7.0.2",
+        "@typescript/typescript-linux-mips64el": "7.0.2",
+        "@typescript/typescript-linux-ppc64": "7.0.2",
+        "@typescript/typescript-linux-riscv64": "7.0.2",
+        "@typescript/typescript-linux-s390x": "7.0.2",
+        "@typescript/typescript-linux-x64": "7.0.2",
+        "@typescript/typescript-netbsd-arm64": "7.0.2",
+        "@typescript/typescript-netbsd-x64": "7.0.2",
+        "@typescript/typescript-openbsd-arm64": "7.0.2",
+        "@typescript/typescript-openbsd-x64": "7.0.2",
+        "@typescript/typescript-sunos-x64": "7.0.2",
+        "@typescript/typescript-win32-arm64": "7.0.2",
+        "@typescript/typescript-win32-x64": "7.0.2"
       }
     },
     "node_modules/undici-types": {

package/templates/paybond-mastra-travel-agent/package.json

@@ -8,13 +8,13 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation travel.book_hotel --requested-spend-cents 18700 --result-body '{\"status\":\"completed\",\"cost_cents\":18700}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.11",
+    "@paybond/kit": "^0.12.6",
     "@mastra/core": "^1.49.0",
     "zod": "^4.2.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.1",
-    "typescript": "^5.7.2"
+    "typescript": "^7.0.2"
   },
   "engines": {
     "node": ">=22"