@paybond/kit 0.12.4 → 0.12.6

package/dist/cli/commands/agent.js

@@ -5,7 +5,7 @@ import { PaybondAutoEvidenceSubmitError, PaybondToolRegistryValidationError, Pay
 import { resolveCliGatewayErrorMessage } from "../http-error-message.js";
 import { runGenericSandboxDemo } from "../../agent/generic-sandbox-demo.js";
 import { runMcpSandboxDemo } from "../../mcp/sandbox-demo.js";
-import { loadRunClaudeAgentsSandboxDemo, loadRunCloudflareAgentsSandboxDemo, loadRunLangGraphSandboxDemo, loadRunMastraSandboxDemo, loadRunOpenAIAgentsSandboxDemo, loadRunVercelAiSandboxDemo, } from "../agent/demo-loaders.js";
+import { loadRunClaudeAgentsSandboxDemo, loadRunCloudflareAgentsSandboxDemo, loadRunGoogleAdkSandboxDemo, loadRunLangGraphSandboxDemo, loadRunMastraSandboxDemo, loadRunOpenAIAgentsSandboxDemo, loadRunVercelAiSandboxDemo, } from "../agent/demo-loaders.js";
 import { buildSmokeRegistry, loadAgentRegistryFile, validateAgentRegistryDocument, } from "../../agent/registry-file.js";
 import { createPaybondToolRegistry } from "../../agent/registry.js";
 import { devTraceStepsFromEvents, devTraceUrl, findDevTraceEventForRun, resolveDevTraceSink, recordSmokeTraceEvent, } from "../../dev/trace-buffer.js";
@@ -1285,6 +1285,39 @@ export async function handleAgentDemoMcpSmoke(ctx, argv) {
         };
     });
 }
+export async function handleAgentDemoCrewaiSmoke(_ctx, argv) {
+    const productionFlag = consumeBooleanFlag(argv, "--production");
+    const runtimeFlag = consumeFlag(productionFlag.rest, "--runtime");
+    const operationFlag = consumeFlag(runtimeFlag.rest, "--operation");
+    const spendFlag = consumeFlag(operationFlag.rest, "--requested-spend-cents");
+    const presetFlag = consumeFlag(spendFlag.rest, "--evidence-preset");
+    if (!operationFlag.value || !spendFlag.value || !presetFlag.value) {
+        throw agentCliError("agent demo crewai smoke requires --operation, --requested-spend-cents, and --evidence-preset", { code: "cli.usage.missing_args", category: "usage" });
+    }
+    throw agentCliError("agent demo crewai smoke is Python-only; install paybond-kit[crewai] and run: paybond agent demo crewai smoke", { code: "cli.usage.unsupported_runtime", category: "usage" });
+}
+export async function handleAgentDemoPydanticAiSmoke(_ctx, argv) {
+    const productionFlag = consumeBooleanFlag(argv, "--production");
+    const runtimeFlag = consumeFlag(productionFlag.rest, "--runtime");
+    const operationFlag = consumeFlag(runtimeFlag.rest, "--operation");
+    const spendFlag = consumeFlag(operationFlag.rest, "--requested-spend-cents");
+    const presetFlag = consumeFlag(spendFlag.rest, "--evidence-preset");
+    if (!operationFlag.value || !spendFlag.value || !presetFlag.value) {
+        throw agentCliError("agent demo pydantic-ai smoke requires --operation, --requested-spend-cents, and --evidence-preset", { code: "cli.usage.missing_args", category: "usage" });
+    }
+    throw agentCliError("agent demo pydantic-ai smoke is Python-only; install paybond-kit[pydantic-ai] and run: paybond agent demo pydantic-ai smoke", { code: "cli.usage.unsupported_runtime", category: "usage" });
+}
+export async function handleAgentDemoMicrosoftAgentFrameworkSmoke(_ctx, argv) {
+    const productionFlag = consumeBooleanFlag(argv, "--production");
+    const runtimeFlag = consumeFlag(productionFlag.rest, "--runtime");
+    const operationFlag = consumeFlag(runtimeFlag.rest, "--operation");
+    const spendFlag = consumeFlag(operationFlag.rest, "--requested-spend-cents");
+    const presetFlag = consumeFlag(spendFlag.rest, "--evidence-preset");
+    if (!operationFlag.value || !spendFlag.value || !presetFlag.value) {
+        throw agentCliError("agent demo microsoft-agent-framework smoke requires --operation, --requested-spend-cents, and --evidence-preset", { code: "cli.usage.missing_args", category: "usage" });
+    }
+    throw agentCliError("agent demo microsoft-agent-framework smoke is Python-only; install paybond-kit[microsoft-agent-framework] and run: paybond agent demo microsoft-agent-framework smoke", { code: "cli.usage.unsupported_runtime", category: "usage" });
+}
 export async function handleAgentDemoOpenAIAgentsSmoke(ctx, argv) {
     const productionFlag = consumeBooleanFlag(argv, "--production");
     const operationFlag = consumeFlag(productionFlag.rest, "--operation");
@@ -1322,6 +1355,43 @@ export async function handleAgentDemoOpenAIAgentsSmoke(ctx, argv) {
         };
     });
 }
+export async function handleAgentDemoGoogleAdkSmoke(ctx, argv) {
+    const productionFlag = consumeBooleanFlag(argv, "--production");
+    const operationFlag = consumeFlag(productionFlag.rest, "--operation");
+    const spendFlag = consumeFlag(operationFlag.rest, "--requested-spend-cents");
+    const presetFlag = consumeFlag(spendFlag.rest, "--evidence-preset");
+    if (!operationFlag.value || !spendFlag.value || !presetFlag.value) {
+        throw agentCliError("agent demo google-adk smoke requires --operation, --requested-spend-cents, and --evidence-preset", { code: "cli.usage.missing_args", category: "usage" });
+    }
+    const requestedSpendCents = parseRequiredNonNegativeInt(spendFlag.value, "--requested-spend-cents");
+    return withPaybondAgentCli(ctx, productionFlag.present, async (session) => {
+        const runGoogleAdkSandboxDemo = await loadRunGoogleAdkSandboxDemo();
+        const demo = await runGoogleAdkSandboxDemo({
+            paybond: session.paybond,
+            operation: operationFlag.value,
+            requestedSpendCents,
+            evidencePreset: presetFlag.value,
+        });
+        if (!demo.evidence?.submitted) {
+            throw agentCliError("Google ADK sandbox demo did not submit evidence", {
+                code: "cli.agent.evidence_failed",
+                exitCode: 5,
+                category: "gateway",
+                details: { tool_result: demo.tool_result },
+            });
+        }
+        if (!demo.authorization.allow) {
+            throw agentCliError("Google ADK sandbox demo authorization was denied", {
+                code: "cli.agent.authorization_denied",
+                details: { tool_result: demo.tool_result },
+            });
+        }
+        return {
+            data: demo,
+            warnings: session.warnings,
+        };
+    });
+}
 function mapToolExecuteError(err, partial) {
     if (err instanceof PaybondSpendDeniedError) {
         return agentCliError(err.message, {
@@ -1457,6 +1527,33 @@ export async function handleAgent(ctx, group, subcommand, argv) {
         }
         return handleAgentDemoClaudeAgentsSmoke(ctx, argv.slice(1));
     }
+    if (group === "demo" && subcommand === "crewai") {
+        if (argv[0] !== "smoke") {
+            throw agentCliError("agent demo crewai requires smoke subcommand", {
+                code: "cli.usage.unknown_command",
+                category: "usage",
+            });
+        }
+        return handleAgentDemoCrewaiSmoke(ctx, argv.slice(1));
+    }
+    if (group === "demo" && subcommand === "pydantic-ai") {
+        if (argv[0] !== "smoke") {
+            throw agentCliError("agent demo pydantic-ai requires smoke subcommand", {
+                code: "cli.usage.unknown_command",
+                category: "usage",
+            });
+        }
+        return handleAgentDemoPydanticAiSmoke(ctx, argv.slice(1));
+    }
+    if (group === "demo" && subcommand === "microsoft-agent-framework") {
+        if (argv[0] !== "smoke") {
+            throw agentCliError("agent demo microsoft-agent-framework requires smoke subcommand", {
+                code: "cli.usage.unknown_command",
+                category: "usage",
+            });
+        }
+        return handleAgentDemoMicrosoftAgentFrameworkSmoke(ctx, argv.slice(1));
+    }
     if (group === "demo" && subcommand === "openai-agents") {
         if (argv[0] !== "smoke") {
             throw agentCliError("agent demo openai-agents requires smoke subcommand", {
@@ -1466,6 +1563,15 @@ export async function handleAgent(ctx, group, subcommand, argv) {
         }
         return handleAgentDemoOpenAIAgentsSmoke(ctx, argv.slice(1));
     }
+    if (group === "demo" && subcommand === "google-adk") {
+        if (argv[0] !== "smoke") {
+            throw agentCliError("agent demo google-adk requires smoke subcommand", {
+                code: "cli.usage.unknown_command",
+                category: "usage",
+            });
+        }
+        return handleAgentDemoGoogleAdkSmoke(ctx, argv.slice(1));
+    }
     if (group === "demo" && subcommand === "mcp") {
         if (argv[0] !== "smoke") {
             throw agentCliError("agent demo mcp requires smoke subcommand", {

package/dist/cli/help.js

@@ -71,7 +71,7 @@ export const COMMAND_HELP = {
     "mandates import": "Usage: paybond mandates import --body <json-file>\n\nExamples:\n  $ paybond mandates import --body mandate.json",
     "a2a card": "Usage: paybond a2a card\n\nExamples:\n  $ paybond a2a card",
     "a2a contracts": "Usage: paybond a2a contracts [--contract-id <id>]\n\nExamples:\n  $ paybond a2a contracts",
-    "init agent-middleware": "Usage: paybond init agent-middleware [--framework <name>] [--out <path>] [--force]\n\nScaffolds an agent middleware integration file (PaybondAgentRun, tool registry, interceptor). Default framework is generic (agent-agnostic).\n\nTypeScript frameworks: generic|claude-agents|openai|langgraph|vercel-ai|mastra|cloudflare-agents|mcp\nPython frameworks: generic|claude-agents|crewai|openai|langgraph|vercel-ai|mcp\n\nExamples:\n  $ paybond init agent-middleware\n  $ paybond init agent-middleware --framework claude-agents --out paybond-claude-agents.ts\n  $ paybond init agent-middleware --framework mastra --out paybond-mastra.ts\n  $ paybond init agent-middleware --framework cloudflare-agents --out paybond-cloudflare-agents.ts\n  $ paybond init agent-middleware --framework mcp --out paybond-mcp.ts\n  $ paybond init agent-middleware --framework crewai --out paybond_crewai.py\n\nDocs: https://docs.paybond.ai/kit/agent-middleware\n\nNext: paybond agent sandbox smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --result-body '{\"status\":\"ok\",\"cost_cents\":100}'",
+    "init agent-middleware": "Usage: paybond init agent-middleware [--framework <name>] [--out <path>] [--force]\n\nScaffolds an agent middleware integration file (PaybondAgentRun, tool registry, interceptor). Default framework is generic (agent-agnostic).\n\nTypeScript frameworks: generic|claude-agents|openai|langgraph|vercel-ai|mastra|cloudflare-agents|google-adk|mcp\nPython frameworks: generic|claude-agents|crewai|pydantic-ai|google-adk|microsoft-agent-framework|openai|langgraph|vercel-ai|mcp\n\nExamples:\n  $ paybond init agent-middleware\n  $ paybond init agent-middleware --framework claude-agents --out paybond-claude-agents.ts\n  $ paybond init agent-middleware --framework mastra --out paybond-mastra.ts\n  $ paybond init agent-middleware --framework cloudflare-agents --out paybond-cloudflare-agents.ts\n  $ paybond init agent-middleware --framework mcp --out paybond-mcp.ts\n  $ paybond init agent-middleware --framework crewai --out paybond_crewai.py\n  $ paybond init agent-middleware --framework pydantic-ai --out paybond_pydantic_ai.py\n  $ paybond init agent-middleware --framework google-adk --out paybond_google_adk.py\n  $ paybond init agent-middleware --framework microsoft-agent-framework --out paybond_microsoft_agent_framework.py\n\nDocs: https://docs.paybond.ai/kit/agent-middleware\n\nNext: paybond agent sandbox smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --result-body '{\"status\":\"ok\",\"cost_cents\":100}'",
     "agent run bind": "Usage: paybond agent run bind [--sandbox] [--production] [--policy-file <path>] [--watch] [--operation <name> --requested-spend-cents <n>] [--completion-preset <id>] [--registry-file <path>] [--run-id <id>] [--attach-intent-id <id> --capability-token <token> --payee-did <did> --payee-signing-seed-hex <hex> --agent-recognition-key-id <id> --agent-recognition-signing-seed-hex <hex>] [--write-env]\n\nBind a run-scoped middleware context via sandbox bootstrap or attach an existing funded intent. Production attach requires payee and agent-recognition signing credentials (flags or APP_PAYEE_DID, APP_PAYEE_SEED_HEX, APP_AGENT_RECOGNITION_KEY_ID, APP_AGENT_RECOGNITION_SEED_HEX). Persists context to .paybond/runs/<run_id>.json (mode 0600). Use --watch with --policy-file to record file-watcher reload config for long-lived processes.\n\nExamples:\n  $ paybond agent run bind --policy-file paybond.policy.yaml --format json\n  $ paybond agent run bind --sandbox --operation travel.book_hotel --requested-spend-cents 20000 --completion-preset cost_and_completion --registry-file ./paybond.agent.registry.yaml --format json\n\nDocs: https://docs.paybond.ai/kit/agent-policy\n\nNext: paybond agent tool execute --help",
     "agent run status": "Usage: paybond agent run status --run-id <id>\n\nInspect a bound run (tenant, intent, allowed tools, policy digest, reload metadata).\n\nExamples:\n  $ paybond agent run status --run-id run-123 --format json\n\nDocs: https://docs.paybond.ai/kit/agent-middleware",
     "agent run trace": "Usage: paybond agent run trace --run-id <id>\n\nShow middleware trace events for a bound run (tool selection, spend authorization, evidence, settlement). Reads .paybond/runs/<run_id>.trace.json written during tool execute.\n\nExamples:\n  $ paybond agent run trace --run-id run-123 --format json\n  $ paybond agent run trace --run-id run-123 --format table\n\nDocs: https://docs.paybond.ai/kit/agent-middleware#trace-events-and-observability",
@@ -87,6 +87,9 @@ export const COMMAND_HELP = {
     "agent demo generic smoke": "Usage: paybond agent demo generic smoke [--production] [--runtime typescript|python] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM agent-agnostic sandbox demo: createPaybondGenericAgentConfig, wrapped execute, and auto-evidence.\n\nExamples:\n  $ paybond agent demo generic smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/agent-agnostic",
     "agent demo claude-agents smoke": "Usage: paybond agent demo claude-agents smoke [--production] [--runtime typescript|python] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM Claude Agent SDK sandbox demo: in-process MCP tool handlers, authorize, execute, and auto-evidence.\n\nExamples:\n  $ paybond agent demo claude-agents smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/claude-agents",
     "agent demo crewai smoke": "Usage: paybond agent demo crewai smoke [--production] [--runtime python] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM CrewAI sandbox demo: guarded @tool execution, authorize, and auto-evidence (Python-only).\n\nExamples:\n  $ paybond agent demo crewai smoke --operation procurement.submit_po --requested-spend-cents 12000 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/crewai",
+    "agent demo pydantic-ai smoke": "Usage: paybond agent demo pydantic-ai smoke [--production] [--runtime python] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM Pydantic AI sandbox demo: guarded Tool execution, authorize, and auto-evidence (Python-only).\n\nExamples:\n  $ paybond agent demo pydantic-ai smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/pydantic-ai",
+    "agent demo google-adk smoke": "Usage: paybond agent demo google-adk smoke [--production] [--runtime typescript|python] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM Google ADK sandbox demo: guarded FunctionTool execution, authorize, and auto-evidence.\n\nExamples:\n  $ paybond agent demo google-adk smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/google-adk",
+    "agent demo microsoft-agent-framework smoke": "Usage: paybond agent demo microsoft-agent-framework smoke [--production] [--runtime python] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM Microsoft Agent Framework sandbox demo: function middleware, authorize, and auto-evidence (Python-only).\n\nExamples:\n  $ paybond agent demo microsoft-agent-framework smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/microsoft-agent-framework",
     "agent demo openai-agents smoke": "Usage: paybond agent demo openai-agents smoke [--production] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM OpenAI Agents SDK sandbox demo: input guardrail pre-check, guarded invoke, and auto-evidence.\n\nExamples:\n  $ paybond agent demo openai-agents smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/openai-agents",
     "agent demo mastra smoke": "Usage: paybond agent demo mastra smoke [--production] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM Mastra sandbox demo: guarded createTool execute, authorize, and auto-evidence (TypeScript-only).\n\nExamples:\n  $ paybond agent demo mastra smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/mastra",
     "agent demo cloudflare-agents smoke": "Usage: paybond agent demo cloudflare-agents smoke [--production] --operation <name> --requested-spend-cents <n> --evidence-preset <id>\n\nBundled no-LLM Cloudflare Agents sandbox demo: guarded AI SDK tool execute, authorize, and auto-evidence (TypeScript-only).\n\nExamples:\n  $ paybond agent demo cloudflare-agents smoke --operation paid-tool --requested-spend-cents 100 --evidence-preset cost_and_completion --format json\n\nDocs: https://docs.paybond.ai/kit/cloudflare-agents",

package/dist/cloudflare-agents/config.d.ts

@@ -15,7 +15,7 @@ export type PaybondCloudflareAgentsConfig<TOOLS extends ToolSet = ToolSet> = {
  * Cloudflare Agents register tools via `getTools()` using the AI SDK `tool()`
  * helper — the same execute boundary as the Vercel AI adapter.
  */
-export declare function paybondCloudflareAgentsWrapTools<TOOLS extends ToolSet>(run: PaybondAgentRun, tools: TOOLS): TOOLS;
+export declare function paybondCloudflareAgentsWrapTools<TOOLS extends ToolSet>(run: PaybondAgentRun, tools: TOOLS, options?: PaybondVercelAgentConfigOptions): TOOLS;
 /**
  * Framework runner helper for Cloudflare Agents `getTools()` / `streamText` wiring.
  *

package/dist/cloudflare-agents/config.js

@@ -6,8 +6,8 @@ import { paybondVercelWrapTools } from "../vercel-ai/wrap-tools.js";
  * Cloudflare Agents register tools via `getTools()` using the AI SDK `tool()`
  * helper — the same execute boundary as the Vercel AI adapter.
  */
-export function paybondCloudflareAgentsWrapTools(run, tools) {
-    return paybondVercelWrapTools(run, tools);
+export function paybondCloudflareAgentsWrapTools(run, tools, options) {
+    return paybondVercelWrapTools(run, tools, options);
 }
 /**
  * Framework runner helper for Cloudflare Agents `getTools()` / `streamText` wiring.

package/dist/google-adk/config.d.ts

@@ -0,0 +1,36 @@
+import type { PaybondAgentRun } from "../agent/run.js";
+/** Minimal Google ADK FunctionTool shape used by the Paybond wrap helpers. */
+export type GoogleAdkFunctionToolLike = {
+    name: string;
+    description: string;
+    isLongRunning?: boolean;
+    execute?: (input: unknown, toolContext?: unknown) => unknown | Promise<unknown>;
+    parameters?: unknown;
+    runAsync?: (req: {
+        args: unknown;
+        toolContext?: unknown;
+    }) => Promise<unknown>;
+};
+/** Google ADK runner config: guarded tools plus incremental `wrapTool`. */
+export type PaybondGoogleAdkConfig = {
+    tools: GoogleAdkFunctionToolLike[];
+    wrapTool: (tool: GoogleAdkFunctionToolLike | unknown) => GoogleAdkFunctionToolLike;
+};
+/** Return true when the optional `@google/adk` peer is importable. */
+export declare function googleAdkRuntimeAvailable(): boolean;
+/**
+ * Wrap Google ADK `FunctionTool` instances with Paybond middleware.
+ *
+ * Returns guarded tools plus a `wrapTool` helper for incremental wiring.
+ * Prefer `new LlmAgent({ tools: config.tools })` with pre-wrapped tools.
+ *
+ * Tenant isolation: wrap uses only authenticated `PaybondAgentRun` context —
+ * never invent tenant IDs from ADK session state or agent names.
+ */
+export declare function createPaybondGoogleAdkConfig(run: PaybondAgentRun, tools: unknown[]): PaybondGoogleAdkConfig;
+/** Alias matching bilingual Kit surface. */
+export declare const instrument: typeof createPaybondGoogleAdkConfig;
+/** Alias matching bilingual Kit surface. */
+export declare const instrumentGoogleAdk: typeof createPaybondGoogleAdkConfig;
+/** Alias matching bilingual Kit surface. */
+export declare const wrapTools: typeof createPaybondGoogleAdkConfig;

package/dist/google-adk/config.js

@@ -0,0 +1,172 @@
+import { createRequire } from "node:module";
+import { PaybondAutoEvidenceSubmitError, PaybondUnregisteredSideEffectingToolError, } from "../agent/types.js";
+import { PaybondSpendApprovalRequiredError, PaybondSpendDeniedError, } from "../index.js";
+let cachedGoogleAdk;
+/**
+ * Lazily resolve the optional `@google/adk` peer dependency.
+ *
+ * Importing this module must not require the peer to be installed.
+ */
+function loadGoogleAdk() {
+    if (cachedGoogleAdk === undefined) {
+        try {
+            const require = createRequire(import.meta.url);
+            cachedGoogleAdk = require("@google/adk");
+        }
+        catch (err) {
+            throw new Error('The Google ADK integration requires the optional peer dependency "@google/adk"; install it with: npm install @google/adk', { cause: err });
+        }
+    }
+    return cachedGoogleAdk;
+}
+/** Return true when the optional `@google/adk` peer is importable. */
+export function googleAdkRuntimeAvailable() {
+    try {
+        loadGoogleAdk();
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function isGoogleAdkFunctionTool(value) {
+    if (typeof value !== "object" || value === null) {
+        return false;
+    }
+    const record = value;
+    if (typeof record.name !== "string" || !record.name.trim()) {
+        return false;
+    }
+    if (typeof record.execute === "function") {
+        return true;
+    }
+    try {
+        const mod = loadGoogleAdk();
+        if (typeof mod.isFunctionTool === "function" && mod.isFunctionTool(value)) {
+            return true;
+        }
+    }
+    catch {
+        // Peer missing — fall through to duck-type check.
+    }
+    return typeof record.runAsync === "function";
+}
+function resolveToolExecute(tool) {
+    if (typeof tool.execute === "function") {
+        return tool.execute.bind(tool);
+    }
+    if (typeof tool.runAsync === "function") {
+        const runAsync = tool.runAsync.bind(tool);
+        return async (input, toolContext) => runAsync({ args: input, toolContext });
+    }
+    throw new TypeError("each Google ADK tool must expose an execute callback or runAsync method");
+}
+function resolveToolCallId(toolContext, fallback) {
+    if (typeof toolContext === "object" && toolContext !== null) {
+        const record = toolContext;
+        for (const key of ["functionCallId", "function_call_id", "toolCallId"]) {
+            const value = record[key];
+            if (typeof value === "string" && value.trim()) {
+                return value.trim();
+            }
+        }
+    }
+    return fallback;
+}
+function paybondErrorMessage(err) {
+    if (err instanceof PaybondUnregisteredSideEffectingToolError) {
+        return `Paybond capability denied: unregistered side-effecting tool (${err.message})`;
+    }
+    if (err instanceof PaybondSpendApprovalRequiredError) {
+        const decisionId = err.result.decisionId;
+        const suffix = decisionId ? ` (decision_id=${decisionId})` : "";
+        const msg = err.result.message ?? err.result.code ?? "approval required";
+        return `Paybond capability approval required: ${msg}${suffix}`;
+    }
+    if (err instanceof PaybondSpendDeniedError) {
+        const msg = err.result.message ?? err.result.code ?? "capability denied";
+        return `Paybond capability denied: ${msg}`;
+    }
+    if (err instanceof PaybondAutoEvidenceSubmitError) {
+        return `Paybond evidence submit failed: ${err.message}`;
+    }
+    return err instanceof Error ? err.message : String(err);
+}
+function rebuildFunctionTool(options) {
+    const { FunctionTool } = loadGoogleAdk();
+    return new FunctionTool(options);
+}
+function wrapGoogleAdkTool(run, tool) {
+    const toolName = tool.name.trim();
+    if (!run.registry.isSideEffecting(toolName)) {
+        return tool;
+    }
+    const originalExecute = resolveToolExecute(tool);
+    const guardedExecute = async (input, toolContext) => {
+        const toolCallId = resolveToolCallId(toolContext, globalThis.crypto.randomUUID());
+        try {
+            const wrapped = await run.interceptor.wrapExecute({
+                toolName,
+                toolCallId,
+                arguments: input,
+                approvalToken: run.getApprovalToken(toolCallId),
+                execute: async () => originalExecute(input, toolContext),
+            });
+            return wrapped.toolResult;
+        }
+        catch (err) {
+            if (err instanceof PaybondUnregisteredSideEffectingToolError) {
+                throw err;
+            }
+            if (err instanceof PaybondSpendApprovalRequiredError ||
+                err instanceof PaybondSpendDeniedError ||
+                err instanceof PaybondAutoEvidenceSubmitError) {
+                // Clear Paybond message so the ADK agent loop surfaces deny/hold/evidence failures.
+                throw new Error(paybondErrorMessage(err), { cause: err });
+            }
+            throw err;
+        }
+    };
+    return rebuildFunctionTool({
+        name: toolName,
+        description: tool.description || `Tool ${toolName}`,
+        parameters: tool.parameters,
+        execute: guardedExecute,
+        isLongRunning: tool.isLongRunning,
+    });
+}
+function normalizeGoogleAdkTools(tools) {
+    if (!Array.isArray(tools)) {
+        throw new TypeError("google-adk framework tools must be a sequence of FunctionTool instances");
+    }
+    return tools.map((tool) => {
+        if (!isGoogleAdkFunctionTool(tool)) {
+            throw new TypeError("each google-adk tool must be a FunctionTool instance with name and execute/runAsync");
+        }
+        return tool;
+    });
+}
+/**
+ * Wrap Google ADK `FunctionTool` instances with Paybond middleware.
+ *
+ * Returns guarded tools plus a `wrapTool` helper for incremental wiring.
+ * Prefer `new LlmAgent({ tools: config.tools })` with pre-wrapped tools.
+ *
+ * Tenant isolation: wrap uses only authenticated `PaybondAgentRun` context —
+ * never invent tenant IDs from ADK session state or agent names.
+ */
+export function createPaybondGoogleAdkConfig(run, tools) {
+    loadGoogleAdk();
+    const normalized = normalizeGoogleAdkTools(tools);
+    const guarded = normalized.map((tool) => wrapGoogleAdkTool(run, tool));
+    return {
+        tools: guarded,
+        wrapTool: (tool) => wrapGoogleAdkTool(run, normalizeGoogleAdkTools([tool])[0]),
+    };
+}
+/** Alias matching bilingual Kit surface. */
+export const instrument = createPaybondGoogleAdkConfig;
+/** Alias matching bilingual Kit surface. */
+export const instrumentGoogleAdk = createPaybondGoogleAdkConfig;
+/** Alias matching bilingual Kit surface. */
+export const wrapTools = createPaybondGoogleAdkConfig;

package/dist/google-adk/index.d.ts

@@ -0,0 +1,2 @@
+export { createPaybondGoogleAdkConfig, googleAdkRuntimeAvailable, instrument, instrumentGoogleAdk, wrapTools, type GoogleAdkFunctionToolLike, type PaybondGoogleAdkConfig, } from "./config.js";
+export { runGoogleAdkSandboxDemo, type RunGoogleAdkSandboxDemoInput, type RunGoogleAdkSandboxDemoResult, } from "./sandbox-demo.js";

package/dist/google-adk/index.js

@@ -0,0 +1,2 @@
+export { createPaybondGoogleAdkConfig, googleAdkRuntimeAvailable, instrument, instrumentGoogleAdk, wrapTools, } from "./config.js";
+export { runGoogleAdkSandboxDemo, } from "./sandbox-demo.js";

package/dist/google-adk/sandbox-demo.d.ts

@@ -0,0 +1,32 @@
+import type { Paybond } from "../index.js";
+export type RunGoogleAdkSandboxDemoInput = {
+    paybond: Paybond;
+    operation?: string;
+    requestedSpendCents?: number;
+    evidencePreset?: string;
+    toolCallId?: string;
+};
+export type RunGoogleAdkSandboxDemoResult = {
+    bind: {
+        run_id: string;
+        tenant_id: string;
+        intent_id: string;
+        capability_token: string;
+        operation: string;
+        sandbox_lifecycle_status?: string;
+    };
+    authorization: {
+        allow: boolean;
+    };
+    tool_result?: unknown;
+    evidence?: {
+        submitted: boolean;
+        sandbox_lifecycle_status?: string;
+        predicate_passed?: boolean | null;
+    };
+    tool_call_id: string;
+};
+/**
+ * No-LLM Google ADK sandbox demo: guarded FunctionTool execution + auto-evidence.
+ */
+export declare function runGoogleAdkSandboxDemo(input: RunGoogleAdkSandboxDemoInput): Promise<RunGoogleAdkSandboxDemoResult>;

package/dist/google-adk/sandbox-demo.js

@@ -0,0 +1,104 @@
+import { createRequire } from "node:module";
+import { createPaybondToolRegistry } from "../agent/registry.js";
+import { createPaybondGoogleAdkConfig } from "./config.js";
+function loadFunctionTool() {
+    try {
+        const require = createRequire(import.meta.url);
+        const mod = require("@google/adk");
+        return mod.FunctionTool;
+    }
+    catch (err) {
+        throw new Error('The Google ADK sandbox demo requires the optional peer dependency "@google/adk"; install it with: npm install @google/adk', { cause: err });
+    }
+}
+/**
+ * No-LLM Google ADK sandbox demo: guarded FunctionTool execution + auto-evidence.
+ */
+export async function runGoogleAdkSandboxDemo(input) {
+    const FunctionTool = loadFunctionTool();
+    const operation = (input.operation ?? "paid-tool").trim();
+    const requestedSpendCents = input.requestedSpendCents ?? 100;
+    const evidencePreset = (input.evidencePreset ?? "cost_and_completion").trim();
+    const toolCallId = (input.toolCallId ?? "google-adk-demo-1").trim();
+    const registry = createPaybondToolRegistry({
+        defaultDeny: true,
+        sideEffecting: {
+            [operation]: {
+                operation,
+                evidencePreset,
+                spendCents: requestedSpendCents,
+                evidenceMapper: (result) => {
+                    const payload = result;
+                    return {
+                        status: payload.status,
+                        cost_cents: payload.cost_cents,
+                    };
+                },
+            },
+        },
+    });
+    const run = await input.paybond.agentRun.bind({
+        bootstrap: {
+            kind: "sandbox",
+            operation,
+            requestedSpendCents,
+            completionPreset: evidencePreset,
+        },
+        registry,
+    });
+    const paidTool = new FunctionTool({
+        name: operation,
+        description: `Paid operation ${operation}`,
+        execute: (args) => {
+            const estimated = typeof args === "object" &&
+                args !== null &&
+                "estimatedPriceCents" in args &&
+                typeof args.estimatedPriceCents ===
+                    "number"
+                ? args.estimatedPriceCents
+                : requestedSpendCents;
+            return { status: "completed", cost_cents: estimated };
+        },
+    });
+    const config = createPaybondGoogleAdkConfig(run, [paidTool]);
+    const guarded = config.tools[0];
+    if (!guarded || typeof guarded.execute !== "function") {
+        throw new Error("google-adk sandbox demo missing guarded tool");
+    }
+    const sandboxStatus = run.binding.sandbox?.sandboxLifecycleStatus;
+    let allow = true;
+    let toolResult;
+    try {
+        toolResult = await guarded.execute({
+            estimatedPriceCents: requestedSpendCents,
+        });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (message.startsWith("Paybond")) {
+            allow = false;
+            toolResult = { error: message };
+        }
+        else {
+            throw err;
+        }
+    }
+    return {
+        bind: {
+            run_id: run.runId,
+            tenant_id: run.tenantId,
+            intent_id: run.intentId,
+            capability_token: run.capabilityToken,
+            operation,
+            sandbox_lifecycle_status: sandboxStatus,
+        },
+        authorization: { allow },
+        tool_result: toolResult,
+        evidence: {
+            submitted: allow,
+            sandbox_lifecycle_status: sandboxStatus,
+            predicate_passed: allow ? true : null,
+        },
+        tool_call_id: toolCallId,
+    };
+}

package/dist/index.d.ts

@@ -1403,6 +1403,9 @@ export declare class Paybond {
     instrumentOpenAI<TTools>(input: Omit<PaybondInstrumentInput<TTools>, "framework"> & {
         tools: TTools;
     }): Promise<PaybondInstrumented<TTools> | PaybondInstrumentRuntime<TTools>>;
+    instrumentGoogleAdk<TTools>(input: Omit<PaybondInstrumentInput<TTools>, "framework"> & {
+        tools: TTools;
+    }): Promise<PaybondInstrumented<TTools> | PaybondInstrumentRuntime<TTools>>;
     instrumentVercel<TTools>(input: Omit<PaybondInstrumentInput<TTools>, "framework"> & {
         tools: TTools;
     }): Promise<PaybondInstrumented<TTools> | PaybondInstrumentRuntime<TTools>>;
@@ -1439,12 +1442,17 @@ export { normalizeCommerceBinding, encodeCommerceBindingToStripeMetadata, decode
 export { validateCompletionEvidence, type CompletionEvidenceValidationReport, } from "./completion-validate-evidence.js";
 export { completionSchemaDigestHex, computeVendorContractDigests, verifyVendorContract, verifyCatalogVendorContracts, type VendorContract, type VendorContractDigests, } from "./completion-contract-digest.js";
 export { contractSnapshotForPreset, mapVendorEvidenceToCanonical, resolveCompletionPreset, } from "./completion-resolve.js";
-export { PaybondAgentRun, PaybondAgentRunBindError, PaybondAgentRunFacade, PaybondEvidenceSubmitError, PaybondFrameworkAdapter, PaybondToolInterceptor, PaybondToolRegistry, PaybondToolRegistryValidationError, PaybondUnregisteredSideEffectingToolError, buildAutoEvidencePayload, createGenericToolExecutor, createGuardedAgent, createGuardedAgentRunner, createPaybondAgent, createPaybondGenericAgentConfig, createPaybondGenericInputGuard, createPaybondToolRegistry, createToolInputGuardAdapter, instrumentPaybondAgent, instrumentPaybondClaudeAgents, instrumentPaybondLangGraph, instrumentPaybondMCP, instrumentPaybondOpenAI, instrumentPaybondVercel, paybondGenericToolExecutorAdapter, paybondToolInputGuardAdapter, resolveAgentPolicySource, toPaybondAgentResult, wrapPaybondTools, PaybondInstrumentBuilder, PaybondInstrumented, PaybondInstrumentRuntime, PaybondLazyContextError, PaybondUnboundContextError, discoverPolicyFromAgent, discoverToolNames, discoverToolsFromAgent, inlinePolicyToDocument, isInlinePolicy, isInstrumentableAgentObject, readPaybondAgentInstrumentation, type CreateGuardedAgentInput, type CreateGuardedAgentResult, type GuardedAgentFramework, type PaybondAgentHooks, type PaybondAgentInput, type PaybondAgentResult, type PaybondAgentRunBindInput, type PaybondAuthorizeToolCallInput, type PaybondEvidenceMapper, type PaybondExternalAttestationMapper, type PaybondGenericAgentConfig, type PaybondGenericToolCall, type PaybondGenericToolDefinition, type PaybondGenericWrappedToolDefinition, type PaybondInlinePolicy, type PaybondAgentInstrumentation, type PaybondInstrumentAgentOptions, type PaybondInstrumentBinding, type PaybondInstrumentContext, type PaybondInstrumentContextInput, type PaybondInstrumentContextProvider, type PaybondInstrumentInput, type PaybondInterceptEvidenceResult, type PaybondInterceptWrapExecuteInput, type PaybondInterceptWrapExecuteResult, type PaybondRunBinding, type PaybondRunBindingAttachInput, type PaybondRunBindingSandboxBootstrapInput, type PaybondRunGuard, type PaybondSideEffectingToolEntry, type PaybondSideEffectingToolPolicy, type PaybondSpendResolver, type PaybondToolCallContext, type PaybondToolInputGuardAllowDecision, type PaybondToolInputGuardApprovalRequiredDecision, type PaybondToolInputGuardDecision, type PaybondToolInputGuardDenyDecision, type PaybondToolInputGuardAdapter, type PaybondToolRegistryConfig, type PaybondToolResolution, type PaybondWrapToolsOptions, } from "./agent/index.js";
+export { PaybondAgentRun, PaybondAgentRunBindError, PaybondAgentRunFacade, PaybondEvidenceSubmitError, PaybondFrameworkAdapter, PaybondToolInterceptor, PaybondToolRegistry, PaybondToolRegistryValidationError, PaybondUnregisteredSideEffectingToolError, buildAutoEvidencePayload, createGenericToolExecutor, createGuardedAgent, createGuardedAgentRunner, createPaybondAgent, createPaybondGenericAgentConfig, createPaybondGenericInputGuard, createPaybondToolRegistry, createToolInputGuardAdapter, instrumentPaybondAgent, instrumentPaybondClaudeAgents, instrumentPaybondLangGraph, instrumentPaybondMCP, instrumentPaybondOpenAI, instrumentPaybondGoogleAdk, instrumentPaybondVercel, paybondGenericToolExecutorAdapter, paybondToolInputGuardAdapter, resolveAgentPolicySource, toPaybondAgentResult, wrapPaybondTools, PaybondInstrumentBuilder, PaybondInstrumented, PaybondInstrumentRuntime, PaybondLazyContextError, PaybondUnboundContextError, discoverPolicyFromAgent, discoverToolNames, discoverToolsFromAgent, inlinePolicyToDocument, isInlinePolicy, isInstrumentableAgentObject, readPaybondAgentInstrumentation, type CreateGuardedAgentInput, type CreateGuardedAgentResult, type GuardedAgentFramework, type PaybondAgentHooks, type PaybondAgentInput, type PaybondAgentResult, type PaybondAgentRunBindInput, type PaybondAuthorizeToolCallInput, type PaybondEvidenceMapper, type PaybondExternalAttestationMapper, type PaybondGenericAgentConfig, type PaybondGenericToolCall, type PaybondGenericToolDefinition, type PaybondGenericWrappedToolDefinition, type PaybondInlinePolicy, type PaybondAgentInstrumentation, type PaybondInstrumentAgentOptions, type PaybondInstrumentBinding, type PaybondInstrumentContext, type PaybondInstrumentContextInput, type PaybondInstrumentContextProvider, type PaybondInstrumentInput, type PaybondInterceptEvidenceResult, type PaybondInterceptWrapExecuteInput, type PaybondInterceptWrapExecuteResult, type PaybondRunBinding, type PaybondRunBindingAttachInput, type PaybondRunBindingSandboxBootstrapInput, type PaybondRunGuard, type PaybondSideEffectingToolEntry, type PaybondSideEffectingToolPolicy, type PaybondSpendResolver, type PaybondToolCallContext, type PaybondToolInputGuardAllowDecision, type PaybondToolInputGuardApprovalRequiredDecision, type PaybondToolInputGuardDecision, type PaybondToolInputGuardDenyDecision, type PaybondToolInputGuardAdapter, type PaybondToolRegistryConfig, type PaybondToolResolution, type PaybondWrapToolsOptions, } from "./agent/index.js";
 export { PaybondAudit, PaybondAuditExports, GatewayAuditExportsClient, parseAuditExportList, parseAuditExportJobGet, verifyAuditManifest, verifyAuditBundleLocal, type AuditExportJobDetail, type AuditExportJobGetResponse, type AuditExportJobSummary, type AuditExportListPage, type AuditVerifyResult, type AuditExportsGateway, } from "./audit/index.js";
 export { PaybondPolicy, composePolicyLayers, composeBundledPresetDefault, domain, guardrails, paybondPolicyPresets, resolveComposedPresetDocument, type LayeredPolicyPresetId, type PaybondPolicyPresets, type PolicyGuardrailLayer, type PolicyPresetId, type VerticalPolicyOptions, } from "./policy/index.js";
 export { getSolutionSmokeDefaults, isKnownSolutionId, listSolutionIds, loadSolutionManifest, paybondSolutionPresets, type PaybondSolutionBundle, type PaybondSolutionPresets, type SolutionId, type SolutionManifest, type SolutionSmokeDefaults, } from "./solutions/index.js";
 export { appendDirectHarborPaymentAuthorization, formatPaymentAuthorizationValue, PAYBOND_PAYMENT_AUTHORIZATION_HEADER, PAYMENT_TRANSPORT_RESPONSE_HEADERS, paymentAuthorizationGatewayHeader, readFundPaymentTransportHeaders, type FundPaymentTransportHeaders, } from "./payment-transport.js";
-export { AGENT_RECEIPT_KIND_V1, AGENT_RECEIPT_SCHEMA_VERSION, AGENT_RECEIPT_SCOPE_ACTION, AGENT_RECEIPT_SCOPE_INTENT_TERMINAL, AGENT_RECEIPT_SIGNING_ALGORITHM_ED25519, AGENT_RECEIPT_VERSION_V1, AGENT_RECEIPT_SIGNING_KEYS_WELL_KNOWN_PATH, AGENT_RECEIPT_WELL_KNOWN_PATH, PAYBOND_AGENT_RECEIPT_ATTESTATIONS_HEADER, PAYBOND_AGENT_RECEIPT_SOURCE_RUN_HEADER, actionReceiptId, attachOperatorAttestationV1, canonicalAgentReceiptBytes, configHashSha256Hex, promptHashSha256Hex, valueDigestSha256Hex, verifyAgentReceiptV1, verifyAgentReceiptV1FromJSON, type AgentReceiptAgentV1, type AgentReceiptAuthorizationV1, type AgentReceiptEvidenceV1, type AgentReceiptExecutionV1, type AgentReceiptExternalAttestationV1, type AgentReceiptMerchantV1, type AgentReceiptOperatorAttestationV1, type AgentReceiptOutcomeV1, type AgentReceiptPaymentV1, type AgentReceiptPolicyV1, type AgentReceiptReferencesV1, type AgentReceiptV1, type ConfigHashInput, type VerifyAgentReceiptV1Options, } from "./agent-receipt.js";
+export { AGENT_RECEIPT_KIND_V1, AGENT_RECEIPT_SCHEMA_VERSION, AGENT_RECEIPT_SCOPE_ACTION, AGENT_RECEIPT_SCOPE_INTENT_TERMINAL, AGENT_RECEIPT_SIGNING_ALGORITHM_ED25519, AGENT_RECEIPT_VERSION_V1, AGENT_RECEIPT_SIGNING_KEYS_WELL_KNOWN_PATH, AGENT_RECEIPT_WELL_KNOWN_PATH, AGENT_RECEIPT_VALIDITY_TIER_OPERATIONAL, AGENT_RECEIPT_VALIDITY_TIER_PRIMARY, AGENT_RECEIPT_VALIDITY_TIER_ATTESTED, EXTERNAL_ATTESTATION_KIND_AGENT_MANDATE_V1, SETTLEMENT_OUTCOME_SETTLED, SETTLEMENT_OUTCOME_PENDING_FINALITY, SETTLEMENT_OUTCOME_REVERSED, SETTLEMENT_OUTCOME_FAILED, PAYBOND_AGENT_RECEIPT_ATTESTATIONS_HEADER, PAYBOND_AGENT_RECEIPT_SOURCE_RUN_HEADER, actionReceiptId, achievedValidityTier, attachOperatorAttestationV1, canonicalAgentReceiptBytes, configHashSha256Hex, continuityFromPrior, promptHashSha256Hex, valueDigestSha256Hex, verifyAgentReceiptV1, verifyAgentReceiptV1FromJSON, verifyContinuityChain, type AgentReceiptAgentV1, type AgentReceiptAuthorizationV1, type AgentReceiptContinuityV1, type AgentReceiptEvidenceV1, type AgentReceiptExecutionV1, type AgentReceiptExternalAttestationV1, type AgentReceiptMerchantV1, type AgentReceiptOperatorAttestationV1, type AgentReceiptOutcomeV1, type AgentReceiptPaymentV1, type AgentReceiptPolicyV1, type AgentReceiptReferencesV1, type AgentReceiptSettlementOutcome, type AgentReceiptV1, type AgentReceiptValidityTier, type ConfigHashInput, type VerifyAgentReceiptV1Options, } from "./agent-receipt.js";
+export { AGENT_RECEIPT_TRANSPARENCY_INCLUSION_PROOF_KIND_V1, AGENT_RECEIPT_TRANSPARENCY_SCHEMA_VERSION, AGENT_RECEIPT_TRANSPARENCY_STH_KIND_V1, merkleLeafHashRFC6962, merkleNodeHashRFC6962, verifyAgentReceiptInclusion, verifySignedTreeHeadV1, type InclusionProofV1, type SignedTreeHeadV1, } from "./agent-receipt-inclusion.js";
+export { ACTA_AGENT_RECEIPT_TYPE, ACTA_SIGNATURE_ALG_EDDSA, projectActaDecisionFromAgentReceipt, projectAgentReceiptToActaDecisionReceipt, type ActaDecision, type ActaDecisionReceiptPayloadV1, type ActaDecisionReceiptSignatureV1, type ActaDecisionReceiptV1, } from "./agent-receipt-acta.js";
+export { PEF_CANON_VERSION_JCS_RFC8785_V1, PEF_CLAIM_TYPE_AGENT_RECEIPT_V1, PEF_RECEIPT_FORMAT_AGENT_RECEIPT_V1, PEF_VERSION_V1, agentReceiptPefFrameId, agentReceiptPefPreimage, agentReceiptPefReceiptHash, buildAgentReceiptPefFrame, jcsCanonicalBytes, verifyAgentReceiptPefFrameId, type AgentReceiptPefFrameV1, type BuildAgentReceiptPefFrameInput, } from "./agent-receipt-pef.js";
+export { AGENT_RECEIPT_SCITT_EXPORT_KIND_V1, AGENT_RECEIPT_SCITT_STATEMENT_KIND_V1, COSE_ALG_EDDSA, buildAgentReceiptScittExport, verifyAgentReceiptScittExport, type AgentReceiptScittExportV1, type AgentReceiptScittStatementV1, type BuildAgentReceiptScittExportInput, } from "./agent-receipt-scitt.js";
+export { AGENT_RECEIPT_OWNER_DISCLOSURE_HPKE_SUITE, AGENT_RECEIPT_OWNER_DISCLOSURE_INFO, AGENT_RECEIPT_OWNER_DISCLOSURE_KIND_V1, AGENT_RECEIPT_OWNER_DISCLOSURE_PLAINTEXT_KIND_V1, AGENT_RECEIPT_OWNER_DISCLOSURE_SCHEMA_VERSION, decryptOwnerDisclosurePackage, deriveOwnerDisclosurePlaintext, encryptOwnerDisclosurePackage, generateX25519KeyPairHex, openHpkeBaseX25519Aes128Gcm, sealHpkeBaseX25519Aes128Gcm, type AgentReceiptOwnerDisclosurePlaintextV1, type AgentReceiptOwnerDisclosureV1, } from "./agent-receipt-owner-disclosure.js";
 export { FORBIDDEN_AGENT_RECEIPT_FIELDS, parseAgentReceiptJSON, validateAgentReceiptJSON, } from "./agent-receipt-prevalidate.js";
 export { AGENT_RECEIPT_EXTERNAL_SOURCE_AP2, AGENT_RECEIPT_EXTERNAL_SOURCE_SEP2828, AGENT_RECEIPT_EXTERNAL_SOURCE_X402, partnerRecordDigestSha256Hex, protocolAuthorizationReceiptToExternalAttestations, protocolSettlementReceiptToExternalAttestations, resolveExternalAttestations, sep2828RecordsToExternalAttestations, signedMandateToExternalAttestations, x402ReceiptToExternalAttestations, type PaybondExternalAttestationInput, } from "./agent-receipt-external-attestations.js";
 export { AGENT_RECEIPT_PDF_EXPORT_DERIVED_VIEW_LABEL, AGENT_RECEIPT_PDF_EXPORT_MANIFEST_KIND, AGENT_RECEIPT_PDF_EXPORT_MANIFEST_SCHEMA_VERSION, FORBIDDEN_PDF_EXPORT_MANIFEST_FIELDS, gateAgentReceiptPDFExport, parseAgentReceiptPDFExportManifestJSON, validateAgentReceiptPDFExportManifestJSON, type AgentReceiptPDFExportFooterStamp, type AgentReceiptPDFExportManifest, type AgentReceiptPDFExportSourceKind, type GateAgentReceiptPDFExportInput, } from "./agent-receipt-pdf-export.js";