@paybond/kit 0.12.5 → 0.12.6

package/dist/vercel-ai/config.d.ts

@@ -1,12 +1,13 @@
 import type { ToolSet } from "ai";
 import type { PaybondAgentRun } from "../agent/run.js";
 import { paybondVercelToolApproval, type PaybondVercelToolApprovalOptions } from "./tool-approval.js";
+import { type PaybondVercelWrapToolsOptions } from "./wrap-tools.js";
 /** Vercel AI SDK runner config: guarded tools plus centralized `toolApproval`. */
 export type PaybondVercelAgentConfig<TOOLS extends ToolSet = ToolSet> = {
     tools: TOOLS;
     toolApproval: ReturnType<typeof paybondVercelToolApproval<TOOLS>>;
 };
-export type PaybondVercelAgentConfigOptions = PaybondVercelToolApprovalOptions;
+export type PaybondVercelAgentConfigOptions = PaybondVercelToolApprovalOptions & PaybondVercelWrapToolsOptions;
 /**
  * Framework runner helper for Vercel AI SDK `generateText` / `streamText`.
  *

package/dist/vercel-ai/config.js

@@ -1,5 +1,5 @@
 import { paybondVercelToolApproval, } from "./tool-approval.js";
-import { paybondVercelWrapTools } from "./wrap-tools.js";
+import { paybondVercelWrapTools, } from "./wrap-tools.js";
 /**
  * Framework runner helper for Vercel AI SDK `generateText` / `streamText`.
  *
@@ -7,7 +7,7 @@ import { paybondVercelWrapTools } from "./wrap-tools.js";
  */
 export function createPaybondVercelAgentConfig(run, tools, options) {
     return {
-        tools: paybondVercelWrapTools(run, tools),
+        tools: paybondVercelWrapTools(run, tools, options),
         toolApproval: paybondVercelToolApproval(run, options),
     };
 }

package/dist/vercel-ai/index.d.ts

@@ -1,4 +1,5 @@
 export { createPaybondVercelAgentConfig, type PaybondVercelAgentConfig, type PaybondVercelAgentConfigOptions, } from "./config.js";
 export { mapPaybondDecisionToVercelToolApproval, paybondVercelToolApproval, type PaybondVercelToolApprovalOptions, } from "./tool-approval.js";
-export { paybondVercelWrapTools } from "./wrap-tools.js";
+export { isProviderExecutedVercelTool, paybondProviderExecutedToolDenialReason, resolveVercelToolFromSet, } from "./provider-executed.js";
+export { paybondVercelWrapTools, type PaybondVercelWrapToolsOptions, } from "./wrap-tools.js";
 export { runVercelAiSandboxDemo, type RunVercelAiSandboxDemoInput, type RunVercelAiSandboxDemoResult, } from "./sandbox-demo.js";

package/dist/vercel-ai/index.js

@@ -1,4 +1,5 @@
 export { createPaybondVercelAgentConfig, } from "./config.js";
 export { mapPaybondDecisionToVercelToolApproval, paybondVercelToolApproval, } from "./tool-approval.js";
-export { paybondVercelWrapTools } from "./wrap-tools.js";
+export { isProviderExecutedVercelTool, paybondProviderExecutedToolDenialReason, resolveVercelToolFromSet, } from "./provider-executed.js";
+export { paybondVercelWrapTools, } from "./wrap-tools.js";
 export { runVercelAiSandboxDemo, } from "./sandbox-demo.js";

package/dist/vercel-ai/provider-executed.d.ts

@@ -0,0 +1,7 @@
+import type { Tool, ToolSet } from "ai";
+/** Returns true when the AI SDK tool is executed on the model provider (not in your process). */
+export declare function isProviderExecutedVercelTool(tool: Tool): boolean;
+/** User-facing denial reason for fail-closed provider-executed tool policy. */
+export declare function paybondProviderExecutedToolDenialReason(): string;
+/** Resolve a tool definition from a Vercel AI SDK toolApproval `tools` map. */
+export declare function resolveVercelToolFromSet<TOOLS extends ToolSet>(tools: TOOLS | undefined, toolName: string): Tool | undefined;

package/dist/vercel-ai/provider-executed.js

@@ -0,0 +1,20 @@
+const PROVIDER_EXECUTED_DENIAL_REASON = "Paybond governs only locally executed registry tools; provider-executed tools bypass Harbor verify and auto-evidence. Remove the tool, execute it locally, or disable denyProviderExecutedTools.";
+/** Returns true when the AI SDK tool is executed on the model provider (not in your process). */
+export function isProviderExecutedVercelTool(tool) {
+    if (typeof tool !== "object" || tool === null) {
+        return false;
+    }
+    return tool.isProviderExecuted === true;
+}
+/** User-facing denial reason for fail-closed provider-executed tool policy. */
+export function paybondProviderExecutedToolDenialReason() {
+    return PROVIDER_EXECUTED_DENIAL_REASON;
+}
+/** Resolve a tool definition from a Vercel AI SDK toolApproval `tools` map. */
+export function resolveVercelToolFromSet(tools, toolName) {
+    if (!tools || typeof tools !== "object") {
+        return undefined;
+    }
+    const record = tools;
+    return record[toolName];
+}

package/dist/vercel-ai/tool-approval.d.ts

@@ -6,6 +6,11 @@ export declare function mapPaybondDecisionToVercelToolApproval(decision: Paybond
 export type PaybondVercelToolApprovalOptions = {
     /** Override Paybond → Vercel approval status mapping (for example custom HITL labels). */
     mapDecision?: (decision: PaybondToolInputGuardDecision) => ToolApprovalStatus;
+    /**
+     * Fail closed on provider-executed tools (`isProviderExecuted: true`).
+     * When enabled, those tool calls are denied at approval time.
+     */
+    denyProviderExecutedTools?: boolean;
 };
 /**
  * Centralized `toolApproval` bridge for Vercel AI SDK `generateText` / `streamText`.

package/dist/vercel-ai/tool-approval.js

@@ -1,4 +1,5 @@
 import { createToolInputGuardAdapter } from "../agent/adapter.js";
+import { isProviderExecutedVercelTool, paybondProviderExecutedToolDenialReason, resolveVercelToolFromSet, } from "./provider-executed.js";
 /** Map a framework-neutral Paybond decision to Vercel AI SDK tool approval status. */
 export function mapPaybondDecisionToVercelToolApproval(decision) {
     if (decision.kind === "allow") {
@@ -18,9 +19,15 @@ export function mapPaybondDecisionToVercelToolApproval(decision) {
 export function paybondVercelToolApproval(run, options) {
     const guard = createToolInputGuardAdapter(run);
     const mapDecision = options?.mapDecision ?? mapPaybondDecisionToVercelToolApproval;
-    const approve = async ({ toolCall, }) => {
+    const approve = async ({ toolCall, tools, }) => {
         const toolName = toolCall.toolName;
         const toolCallId = toolCall.toolCallId;
+        if (options?.denyProviderExecutedTools === true) {
+            const toolDef = resolveVercelToolFromSet(tools, toolName);
+            if (toolDef !== undefined && isProviderExecutedVercelTool(toolDef)) {
+                return { type: "denied", reason: paybondProviderExecutedToolDenialReason() };
+            }
+        }
         if (!run.registry.isSideEffecting(toolName)) {
             const resolution = run.registry.resolveTool(toolName, {
                 allowedTools: run.allowedTools,

package/dist/vercel-ai/wrap-tools.d.ts

@@ -1,9 +1,16 @@
 import type { ToolSet } from "ai";
 import type { PaybondAgentRun } from "../agent/run.js";
+export type PaybondVercelWrapToolsOptions = {
+    /**
+     * Fail closed on provider-executed tools (`isProviderExecuted: true`).
+     * When enabled, those tools cannot run — only locally executed registry tools are governed.
+     */
+    denyProviderExecutedTools?: boolean;
+};
 /**
  * Wrap side-effecting Vercel AI SDK tools with Paybond `wrapExecute` so Harbor
  * verify, spend finalize, and auto-evidence run after successful execution.
  *
  * Read-only and provider-executed tools pass through unchanged.
  */
-export declare function paybondVercelWrapTools<TOOLS extends ToolSet>(run: PaybondAgentRun, tools: TOOLS): TOOLS;
+export declare function paybondVercelWrapTools<TOOLS extends ToolSet>(run: PaybondAgentRun, tools: TOOLS, options?: PaybondVercelWrapToolsOptions): TOOLS;

package/dist/vercel-ai/wrap-tools.js

@@ -1,12 +1,20 @@
+import { isProviderExecutedVercelTool, paybondProviderExecutedToolDenialReason, } from "./provider-executed.js";
 function isClientExecutedTool(tool) {
     if (typeof tool !== "object" || tool === null) {
         return false;
     }
-    const record = tool;
-    if (record.isProviderExecuted === true) {
+    if (isProviderExecutedVercelTool(tool)) {
         return false;
     }
-    return typeof record.execute === "function";
+    return typeof tool.execute === "function";
+}
+function denyProviderExecutedTool(tool, toolName) {
+    return {
+        ...tool,
+        execute: async () => {
+            throw new Error(`${paybondProviderExecutedToolDenialReason()} (tool=${toolName})`);
+        },
+    };
 }
 /**
  * Wrap side-effecting Vercel AI SDK tools with Paybond `wrapExecute` so Harbor
@@ -14,9 +22,14 @@ function isClientExecutedTool(tool) {
  *
  * Read-only and provider-executed tools pass through unchanged.
  */
-export function paybondVercelWrapTools(run, tools) {
+export function paybondVercelWrapTools(run, tools, options) {
     const wrapped = {};
+    const denyProviderExecutedTools = options?.denyProviderExecutedTools === true;
     for (const [toolName, tool] of Object.entries(tools)) {
+        if (denyProviderExecutedTools && isProviderExecutedVercelTool(tool)) {
+            wrapped[toolName] = denyProviderExecutedTool(tool, toolName);
+            continue;
+        }
         if (!isClientExecutedTool(tool) || !run.registry.isSideEffecting(toolName)) {
             wrapped[toolName] = tool;
             continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paybond/kit",
-  "version": "0.12.5",
+  "version": "0.12.6",
   "mcpName": "io.github.nonameuserd/paybond",
   "description": "Paybond Kit for TypeScript: agent spend governance for paid tool calls with spend authorization, evidence receipts, refunds, disputes, hosted Gateway sessions, and settlement.",
   "license": "Apache-2.0",
@@ -30,6 +30,10 @@
       "types": "./dist/openai-agents/index.d.ts",
       "import": "./dist/openai-agents/index.js"
     },
+    "./google-adk": {
+      "types": "./dist/google-adk/index.d.ts",
+      "import": "./dist/google-adk/index.js"
+    },
     "./vercel-ai": {
       "types": "./dist/vercel-ai/index.d.ts",
       "import": "./dist/vercel-ai/index.js"
@@ -131,11 +135,12 @@
   },
   "peerDependencies": {
     "@anthropic-ai/claude-agent-sdk": ">=0.2.100",
+    "@google/adk": ">=1.0.0",
     "@langchain/core": ">=0.3.0",
     "@langchain/langgraph": ">=0.2.50",
     "@mastra/core": ">=1.0.0",
-    "agents": ">=0.10.0",
     "@openai/agents": ">=0.12.0",
+    "agents": ">=0.10.0",
     "ai": ">=4.0.0",
     "zod": "^3.25.32 || ^4.2.0"
   },
@@ -158,6 +163,9 @@
     "@openai/agents": {
       "optional": true
     },
+    "@google/adk": {
+      "optional": true
+    },
     "ai": {
       "optional": true
     },
@@ -176,15 +184,16 @@
   },
   "devDependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.197",
+    "@google/adk": "^1.3.0",
     "@langchain/core": "^1.2.1",
     "@langchain/langgraph": "^1.4.7",
     "@langchain/langgraph-sdk": "^1.9.25",
     "@mastra/core": "^1.49.0",
-    "agents": "^0.17.3",
     "@openai/agents": "^0.12.0",
     "@types/node": "^22.10.0",
+    "agents": "^0.17.3",
     "ai": "^7.0.4",
-    "typescript": "^5.7.2",
+    "typescript": "^7.0.2",
     "vitest": "^4.1.8",
     "zod": "^4.4.3"
   }

package/templates/manifest.json

@@ -16,7 +16,7 @@
         "cost_cents": 18700
       },
       "dependencies": {
-        "@paybond/kit": "^0.11.11",
+        "@paybond/kit": "^0.12.5",
         "@langchain/core": "^1.2.1",
         "@langchain/langgraph": "^1.4.7",
         "zod": "^4.2.0"
@@ -39,13 +39,36 @@
         "cost_cents": 4500
       },
       "dependencies": {
-        "@paybond/kit": "^0.11.11",
+        "@paybond/kit": "^0.12.5",
         "ai": "^5.0.0",
         "zod": "^4.2.0"
       },
       "demo_import": "@paybond/kit/vercel-ai",
       "demo_export": "runVercelAiSandboxDemo"
     },
+    {
+      "id": "cloudflare-shopping-agent",
+      "repo": "paybond-cloudflare-shopping-agent",
+      "title": "Shopping checkout agent (Cloudflare Agents)",
+      "language": "typescript",
+      "framework": "cloudflare-agents",
+      "preset": "shopping",
+      "primary_operation": "commerce.checkout",
+      "requested_spend_cents": 4500,
+      "evidence_preset": "cost_and_completion",
+      "smoke_result_body": {
+        "status": "completed",
+        "cost_cents": 4500
+      },
+      "dependencies": {
+        "@paybond/kit": "^0.12.5",
+        "agents": "^0.10.0",
+        "ai": "^5.0.0",
+        "zod": "^4.2.0"
+      },
+      "demo_import": "@paybond/kit/cloudflare-agents",
+      "demo_export": "runCloudflareAgentsSandboxDemo"
+    },
     {
       "id": "openai-agents-demo",
       "repo": "paybond-openai-agents-demo",
@@ -61,7 +84,7 @@
         "cost_cents": 2900
       },
       "dependencies": {
-        "@paybond/kit": "^0.11.11",
+        "@paybond/kit": "^0.12.5",
         "@openai/agents": "^0.4.0",
         "zod": "^4.2.0"
       },
@@ -83,7 +106,7 @@
         "cost_cents": 4500
       },
       "dependencies": {
-        "@paybond/kit": "^0.11.11",
+        "@paybond/kit": "^0.12.5",
         "@openai/agents": "^0.4.0",
         "zod": "^4.2.0"
       },
@@ -105,7 +128,7 @@
         "cost_cents": 18700
       },
       "dependencies": {
-        "@paybond/kit": "^0.11.11",
+        "@paybond/kit": "^0.12.5",
         "@anthropic-ai/claude-agent-sdk": "^0.2.100",
         "zod": "^4.2.0"
       },
@@ -127,7 +150,7 @@
         "cost_cents": 18700
       },
       "dependencies": {
-        "@paybond/kit": "^0.11.11",
+        "@paybond/kit": "^0.12.5",
         "@mastra/core": "^1.49.0",
         "zod": "^4.2.0"
       },
@@ -150,7 +173,7 @@
         "cost_cents": 500
       },
       "dependencies": {
-        "@paybond/kit": "^0.11.11"
+        "@paybond/kit": "^0.12.5"
       },
       "mcp_tool_policy": "spend-write"
     },
@@ -170,7 +193,7 @@
         "cost_cents": 12000
       },
       "dependencies": {
-        "@paybond/kit": "^0.11.11"
+        "@paybond/kit": "^0.12.5"
       },
       "demo_mode": "generic"
     },
@@ -189,7 +212,7 @@
         "cost_cents": 12500
       },
       "dependencies": {
-        "@paybond/kit": "^0.11.11"
+        "@paybond/kit": "^0.12.5"
       },
       "demo_mode": "generic"
     },
@@ -210,7 +233,7 @@
         "status": "succeeded"
       },
       "dependencies": {
-        "@paybond/kit": "^0.12.1"
+        "@paybond/kit": "^0.12.5"
       },
       "demo_mode": "generic"
     },
@@ -231,7 +254,7 @@
         "shop": "paybond-agent-commerce-dev.myshopify.com"
       },
       "dependencies": {
-        "@paybond/kit": "^0.12.1"
+        "@paybond/kit": "^0.12.5"
       },
       "demo_mode": "generic"
     },
@@ -250,11 +273,33 @@
         "cost_cents": 2900
       },
       "python_dependencies": {
-        "paybond-kit": ">=0.11.11",
+        "paybond-kit": ">=0.12.5",
         "langgraph": ">=1.2.0"
       },
       "demo_import": "paybond_kit.langgraph_sandbox_demo",
       "demo_export": "run_langgraph_sandbox_demo"
+    },
+    {
+      "id": "crewai-procurement-agent",
+      "repo": "paybond-crewai-procurement-agent",
+      "title": "Procurement crew (CrewAI + Paybond spend gates)",
+      "language": "python",
+      "framework": "crewai",
+      "preset": null,
+      "policy_file": "paybond.policy.yaml",
+      "primary_operation": "procurement.submit_po",
+      "requested_spend_cents": 12000,
+      "evidence_preset": "cost_and_completion",
+      "smoke_result_body": {
+        "status": "completed",
+        "cost_cents": 12000
+      },
+      "python_dependencies": {
+        "paybond-kit[crewai]": ">=0.12.5",
+        "crewai": ">=0.80.0"
+      },
+      "demo_import": "paybond_kit.crewai",
+      "demo_export": "run_crewai_sandbox_demo"
     }
   ]
 }