@perkos/agent-sdk 0.7.0 → 0.8.0-rc.1

package/dist/custody/backend.js

@@ -0,0 +1,149 @@
+import { getAddressFromPrivateKey, makeContractCall, fetchCallReadOnlyFunction } from "@stacks/transactions";
+import { PerkOSClient } from "../client.js";
+import { QA_API, QA_CONTRACTS } from "../mcp/server.js";
+import { prepareEvaluationJob, prepareEvaluationSubmission } from "../evaluation-commitments.js";
+import { readPrivateFile } from "./ledger.js";
+import { GAS_PER_ACTION, commitmentInput, guard } from "./permit.js";
+const TOKEN = "SN3VMHXEN64ZZF71JQ5VESXDWTR301XTTXGF4J8F1.sbtc-token";
+const contracts = { ...QA_CONTRACTS, sbtcToken: TOKEN };
+async function safeFetch(input, init) {
+    const url = new URL(input);
+    guard(url.origin === QA_API && !url.username && !url.password && !url.hash);
+    return fetch(url, { ...init, redirect: "error", signal: AbortSignal.timeout(15000) });
+}
+async function get(path) {
+    const response = await safeFetch(QA_API + path);
+    guard(response.ok);
+    guard(Number(response.headers.get("content-length") ?? 0) <= 1048576);
+    const text = await response.text();
+    guard(Buffer.byteLength(text) <= 1048576);
+    return JSON.parse(text);
+}
+async function tip() {
+    const info = await get("/v2/info");
+    guard(info.network_id === 2147483648);
+    guard(Number.isSafeInteger(info.burn_block_height) && Number.isSafeInteger(info.stacks_tip_height));
+    return { burn: BigInt(info.burn_block_height), stacks: BigInt(info.stacks_tip_height) };
+}
+/** Fixed testnet backend. Import/construct does not read a key or contact the network. */
+export function testnetBackend(keyFile) {
+    return {
+        async prepare(p, r, jobId) {
+            const { burn, stacks } = await tip();
+            const wallet = p.profile[p.profile.role], amount = BigInt(p.amount);
+            let captured;
+            // SDK execution is intercepted in memory to obtain its validated plan. No signer or broadcaster here.
+            const client = new PerkOSClient({ network: "testnet", apiUrl: QA_API, contracts,
+                spendingPolicy: { allowedNetworks: ["testnet"], allowedAssets: [p.asset],
+                    maxPerTransaction: { [p.asset]: amount }, maxPerSession: { [p.asset]: amount } },
+                readOnlyTransport: call => {
+                    guard(call.network === "testnet" && Object.values(contracts).some(c => c === call.contract) && /^get-/.test(call.functionName));
+                    const [contractAddress, contractName] = call.contract.split(".");
+                    return fetchCallReadOnlyFunction({ contractAddress: contractAddress, contractName: contractName,
+                        functionName: call.functionName, functionArgs: [...call.functionArgs], senderAddress: call.senderAddress,
+                        network: "testnet", client: { baseUrl: QA_API, fetch: safeFetch } });
+                },
+                signer: { getAddress: async () => wallet, signAndBroadcast: async (plan) => {
+                        guard(!captured);
+                        captured = plan;
+                        return { txid: "0x" + "0".repeat(64) };
+                    } } });
+            const input = commitmentInput(p), prepared = await prepareEvaluationJob(input);
+            const id = jobId ? BigInt(jobId) : undefined;
+            const acceptance = { gross: amount, basisPoints: 200, treasury: p.profile.treasury,
+                rejectionRefund: "net-after-evaluation" };
+            if (r.action === "create") {
+                guard(BigInt(p.expiredAt) > stacks);
+                const policy = await client.getServiceFeePolicy(p.asset);
+                guard(policy.configured && policy.basisPoints === 200 && policy.treasury === p.profile.treasury);
+            }
+            if (!["register", "create"].includes(r.action)) {
+                guard(id !== undefined);
+                const job = await client.getJob(p.asset, id);
+                guard(job && job.client === p.profile.client && job.evaluator === p.profile.evaluator &&
+                    job.treasury === p.profile.treasury && job.description === prepared.description && job.expiredAt === BigInt(p.expiredAt));
+                guard(r.action === "set-budget" || job.budget === amount);
+                const escrow = await client.getEscrowBalance(p.asset, id);
+                if (r.action === "set-budget" || r.action === "fund")
+                    guard(job.status === "open" && escrow === 0n);
+                if (r.action === "assign")
+                    guard(job.status === "funded" && !job.provider && escrow === amount);
+                if (r.action === "submit")
+                    guard(job.status === "funded" && job.provider === p.profile.provider && escrow === amount);
+                if (r.action === "finalize") {
+                    const d = await client.getDecision(p.asset, id);
+                    guard(job.status === "decision-pending" && job.provider === p.profile.provider && escrow === amount &&
+                        d && !d.appealedBy && !d.finalDecision && burn > d.appealDeadline);
+                }
+            }
+            if (p.asset === "sbtc" && r.action !== "register")
+                guard(await client.getConfiguredSbtcToken() === TOKEN);
+            switch (r.action) {
+                case "register":
+                    await client.registerAgent({ name: p.agentName, description: "Controlled QA participant", wallet, endpoints: [] });
+                    break;
+                case "create":
+                    await client.createJob({ asset: p.asset, evaluator: p.profile.evaluator, expiredAt: BigInt(p.expiredAt), description: prepared.description });
+                    break;
+                case "set-budget":
+                    await client.setBudget({ asset: p.asset, jobId: id, amount });
+                    break;
+                case "fund":
+                    await client.fundJob({ asset: p.asset, jobId: id, amount, serviceFeeAcceptance: acceptance });
+                    break;
+                case "assign":
+                    await client.assignProvider({ asset: p.asset, jobId: id, provider: p.profile.provider });
+                    break;
+                case "submit": {
+                    const submission = await prepareEvaluationSubmission({ ...input, provider: p.profile.provider, jobId: jobId, evidence: r.evidence });
+                    await client.submitWork({ asset: p.asset, jobId: id, deliverable: submission.deliverable, serviceFeeAcceptance: acceptance });
+                    break;
+                }
+                case "finalize":
+                    await client.finalizeDecision(p.asset, id);
+                    break;
+            }
+            guard(captured);
+            return captured;
+        },
+        async sign(plan, wallet, expiresAt) {
+            await tip();
+            const nonce = await get(`/extended/v1/address/${wallet}/nonces`);
+            guard(Number.isSafeInteger(nonce.possible_next_nonce) && Number(nonce.possible_next_nonce) >= 0);
+            const expected = nonce.last_executed_tx_nonce === null ? 0 : Number(nonce.last_executed_tx_nonce) + 1;
+            guard(nonce.last_executed_tx_nonce === null || Number.isSafeInteger(nonce.last_executed_tx_nonce));
+            guard(expected === nonce.possible_next_nonce && (nonce.last_mempool_tx_nonce === null ||
+                Number.isSafeInteger(nonce.last_mempool_tx_nonce) && Number(nonce.last_mempool_tx_nonce) < expected));
+            guard(Array.isArray(nonce.detected_missing_nonces) && nonce.detected_missing_nonces.length === 0);
+            // Only reached after durable reservation; private material is never returned to MCP or the journal.
+            guard(Date.now() < Date.parse(expiresAt));
+            const key = readPrivateFile(keyFile, 256).trim();
+            guard(/^[a-fA-F0-9]{64}(01)?$/.test(key) && getAddressFromPrivateKey(key, "testnet") === wallet);
+            const [contractAddress, contractName] = plan.contract.split(".");
+            const tx = await makeContractCall({ contractAddress: contractAddress, contractName: contractName,
+                functionName: plan.functionName, functionArgs: [...plan.functionArgs], senderKey: key,
+                network: "testnet", nonce: BigInt(expected), fee: GAS_PER_ACTION,
+                postConditionMode: "deny", postConditions: [...plan.postConditions] });
+            return { txid: "0x" + tx.txid().replace(/^0x/, ""), bytes: tx.serializeBytes() };
+        },
+        async broadcast(signed) {
+            const response = await safeFetch(QA_API + "/v2/transactions", { method: "POST",
+                headers: { "content-type": "application/octet-stream" }, body: Buffer.from(signed.bytes) });
+            guard(response.ok);
+            const txid = await response.json();
+            guard(typeof txid === "string" && "0x" + txid.replace(/^0x/, "") === signed.txid);
+        },
+        async confirmation(txid) {
+            guard(/^0x[a-f0-9]{64}$/.test(txid));
+            const tx = await get(`/extended/v1/tx/${txid}`);
+            const info = await tip();
+            const result = tx.tx_result;
+            // Six anchored burn confirmations before advancing the wallet workflow; reorg risk is not zero.
+            return { success: tx.tx_id === txid && tx.canonical === true && tx.is_unanchored === false &&
+                    tx.tx_status === "success" && Number.isSafeInteger(tx.burn_block_height) &&
+                    info.burn >= BigInt(tx.burn_block_height) + 6n,
+                result: typeof result?.repr === "string" ? result.repr : "" };
+        },
+    };
+}
+//# sourceMappingURL=backend.js.map

package/dist/custody/backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../src/custody/backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAC7G,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAGjG,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAErE,MAAM,KAAK,GAAG,sDAAsD,CAAC;AACrE,MAAM,SAAS,GAAG,EAAE,GAAG,YAAY,EAAE,SAAS,EAAE,KAAK,EAAW,CAAC;AACjE,KAAK,UAAU,SAAS,CAAC,KAAmB,EAAE,IAAkB;IAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AACD,KAAK,UAAU,GAAG,CAAC,IAAY;IAC7B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;AACrD,CAAC;AACD,KAAK,UAAU,GAAG;IAChB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;IAAC,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IAC1E,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACpG,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,iBAA2B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,iBAA2B,CAAC,EAAE,CAAC;AAC9G,CAAC;AACD,0FAA0F;AAC1F,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK;YACvB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,QAAsC,CAAC;YAC3C,sGAAsG;YACtG,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS;gBAC7E,cAAc,EAAE,EAAE,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;oBACtE,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE;gBAClF,iBAAiB,EAAE,IAAI,CAAC,EAAE;oBACxB,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;oBAChI,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACjE,OAAO,yBAAyB,CAAC,EAAE,eAAe,EAAE,eAAgB,EAAE,YAAY,EAAE,YAAa;wBAC/F,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa;wBACxG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;gBACzE,CAAC;gBACD,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;wBACvE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;wBAAC,QAAQ,GAAG,IAAI,CAAC;wBAAC,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC5E,CAAC,EAAE,EAAE,CAAC,CAAC;YACT,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC/E,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7C,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,GAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ;gBACzF,eAAe,EAAE,sBAA+B,EAAE,CAAC;YACrD,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1B,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC;gBACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACzD,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,WAAW,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACnG,CAAC;YACD,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/C,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;gBACxB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC7C,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS;oBACnF,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC5H,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;gBAC1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;oBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC;gBACpG,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;oBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC;gBAChG,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;oBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC;gBACtH,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;oBAC5B,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAChD,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,kBAAkB,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,KAAK,MAAM;wBACjG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;YACD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;gBAAE,KAAK,CAAC,MAAM,MAAM,CAAC,sBAAsB,EAAE,KAAK,KAAK,CAAC,CAAC;YAC1G,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,UAAU;oBAAE,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;oBAAC,MAAM;gBAC3I,KAAK,QAAQ;oBAAE,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;oBAAC,MAAM;gBACpK,KAAK,YAAY;oBAAE,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAG,EAAE,MAAM,EAAE,CAAC,CAAC;oBAAC,MAAM;gBACzF,KAAK,MAAM;oBAAE,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,CAAC;oBAAC,MAAM;gBACnH,KAAK,QAAQ;oBAAE,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAAC,MAAM;gBAChH,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,UAAU,GAAG,MAAM,2BAA2B,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAS,EAAE,CAAC,CAAC;oBACvI,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAG,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,CAAC;oBAAC,MAAM;gBACxI,CAAC;gBACD,KAAK,UAAU;oBAAE,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,EAAG,CAAC,CAAC;oBAAC,MAAM;YACtE,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,CAAC;YAAC,OAAO,QAAQ,CAAC;QACnC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS;YAChC,MAAM,GAAG,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,wBAAwB,MAAM,SAAS,CAAC,CAAC;YACjE,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;YACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YACtG,KAAK,CAAC,KAAK,CAAC,sBAAsB,KAAK,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;YACnG,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,qBAAqB,KAAK,IAAI;gBACnF,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;YACxG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;YAClG,oGAAoG;YACpG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACjD,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,wBAAwB,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,MAAM,CAAC,CAAC;YACjG,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,EAAE,eAAe,EAAE,eAAgB,EAAE,YAAY,EAAE,YAAa;gBAChG,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,GAAG;gBACrF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,cAAc;gBAChE,iBAAiB,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YACzE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;QACnF,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,MAAM;YACpB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,GAAG,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM;gBAC5E,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9F,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnB,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC5C,KAAK,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QACpF,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,IAAI;YACrB,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACrC,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,GAAG,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,EAAE,CAAC,SAA2C,CAAC;YAC9D,gGAAgG;YAChG,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,EAAE,CAAC,SAAS,KAAK,IAAI,IAAI,EAAE,CAAC,aAAa,KAAK,KAAK;oBACxF,EAAE,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,iBAAiB,CAAC;oBACxE,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,iBAA2B,CAAC,GAAG,EAAE;gBACxD,MAAM,EAAE,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAClE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/custody/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/custody/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/custody/cli.ts"],"names":[],"mappings":""}

package/dist/custody/cli.js

@@ -0,0 +1,43 @@
+#!/usr/bin/env node
+import { parsePermit, guard, hash } from "./permit.js";
+import { readPrivateFile, Ledger } from "./ledger.js";
+import { testnetBackend } from "./backend.js";
+import { CustodyEngine } from "./engine.js";
+import { listenCustody } from "./socket.js";
+async function main() {
+    const args = process.argv.slice(2);
+    if (args.length === 1 && args[0] === "--help") {
+        console.log("nayori-custody --permit /private/permit.json --state /private/state --socket /ipc/nayori.sock --key-file /private/key --hermes-uid UID [--enable-testnet-signing]\nLinux only; separate non-root OS identities required. Signing disabled by default.");
+        return;
+    }
+    const enabled = args.at(-1) === "--enable-testnet-signing";
+    if (enabled)
+        args.pop();
+    guard(args.length === 10 && args[0] === "--permit" && args[2] === "--state" &&
+        args[4] === "--socket" && args[6] === "--key-file" && args[8] === "--hermes-uid");
+    guard(process.platform === "linux" && process.getuid?.() !== 0 && /^\d+$/.test(args[9]));
+    guard(Number(args[9]) > 0 && Number(args[9]) !== process.getuid?.());
+    const permit = await parsePermit(JSON.parse(readPrivateFile(args[1])));
+    const ledger = new Ledger(args[3], hash(permit), permit.profile[permit.profile.role]);
+    try {
+        const engine = new CustodyEngine(permit, ledger, testnetBackend(args[7]), enabled);
+        const server = await listenCustody(args[5], engine);
+        // Never close the wallet lock while an asynchronous signing request may still be running.
+        let stopping = false;
+        for (const signal of ["SIGINT", "SIGTERM"])
+            process.once(signal, () => {
+                if (stopping)
+                    return;
+                stopping = true;
+                void Promise.all([engine.shutdown(), new Promise(resolve => server.close(() => resolve()))])
+                    .then(() => { ledger.close(); process.exit(0); });
+            });
+        console.error("Nayori custody ready; testnet only. Permit hash: " + hash(permit) + "; signing: " + enabled);
+    }
+    catch (error) {
+        ledger.close();
+        throw error;
+    }
+}
+main().catch(() => { console.error("Custody could not start. Check OS isolation, permissions and public permit; no raw diagnostics are exposed."); process.exitCode = 1; });
+//# sourceMappingURL=cli.js.map

package/dist/custody/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/custody/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,uPAAuP,CAAC,CAAC;QAAC,OAAO;IAC/Q,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,0BAA0B,CAAC;IAC3D,IAAI,OAAO;QAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IACxB,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;QACzE,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC;IACpF,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAC1F,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC;QACrD,0FAA0F;QAC1F,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;gBAC7E,IAAI,QAAQ;oBAAE,OAAO;gBAAC,QAAQ,GAAG,IAAI,CAAC;gBACtC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;qBAC/F,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,mDAAmD,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,aAAa,GAAG,OAAO,CAAC,CAAC;IAC9G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AAClD,CAAC;AACD,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,6GAA6G,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/custody/engine.d.ts

@@ -0,0 +1,54 @@
+import type { ContractCallPlan } from "../types.js";
+import { Ledger } from "./ledger.js";
+import { type Permit, type ExecutionRequest } from "./permit.js";
+export interface CustodyBackend {
+    prepare(permit: Permit, request: ExecutionRequest, jobId: string | null): Promise<ContractCallPlan>;
+    sign(plan: ContractCallPlan, wallet: string, expiresAt: string): Promise<{
+        txid: string;
+        bytes: Uint8Array;
+    }>;
+    broadcast(signed: {
+        txid: string;
+        bytes: Uint8Array;
+    }): Promise<void>;
+    confirmation(txid: string): Promise<{
+        success: boolean;
+        result: string;
+    }>;
+}
+export declare class CustodyEngine {
+    readonly permit: Permit;
+    private readonly ledger;
+    private readonly backend;
+    private readonly enabled;
+    private readonly now;
+    private busy;
+    private poisoned;
+    private closing;
+    private onIdle;
+    constructor(permit: Permit, ledger: Ledger, backend: CustodyBackend, enabled?: boolean, now?: () => number);
+    private jobId;
+    shutdown(): Promise<void>;
+    private idle;
+    status(): {
+        permitId: string;
+        permitHash: string;
+        profile: Readonly<import("../mcp/server.js").HermesProfile>;
+        enabled: boolean;
+        asset: "sbtc" | "stx";
+        amount: string;
+        expiresAt: string;
+        gasBudget: string;
+        gasPerAction: string;
+        gasReserved: string;
+        jobId: string | null;
+        actions: readonly ("set-budget" | "register" | "create" | "fund" | "assign" | "submit" | "finalize")[];
+        operations: (import("./ledger.js").Entry | undefined)[];
+        classification: string;
+        evidenceBytesVerified: boolean;
+    };
+    reconcile(): Promise<ReturnType<CustodyEngine["status"]>>;
+    private persist;
+    execute(input: unknown): Promise<ReturnType<CustodyEngine["status"]>>;
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/custody/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/custody/engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAA+C,KAAK,MAAM,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE9G,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACpG,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAC9G,SAAS,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3E;AAID,qBAAa,aAAa;IAKZ,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;IAC1D,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAkB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAClE,OAAO,CAAC,QAAQ,CAAC,GAAG;IANtB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAA2B;gBACpB,MAAM,EAAE,MAAM,EAAmB,MAAM,EAAE,MAAM,EACjD,OAAO,EAAE,cAAc,EAAmB,OAAO,UAAQ,EACzD,GAAG,GAAE,MAAM,MAAiB;IAI/C,OAAO,CAAC,KAAK;IACb,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,OAAO,CAAC,IAAI;IACZ,MAAM;;;;;;;;;;;;;;;;;IASA,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IAmB/D,OAAO,CAAC,OAAO;IAGT,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;CA4B5E"}

package/dist/custody/engine.js

@@ -0,0 +1,115 @@
+import { QA_CONTRACTS } from "../mcp/server.js";
+import { GAS_PER_ACTION, guard, hash, parseExecution } from "./permit.js";
+const FUNCTIONS = { register: "register-agent", create: "create-job", "set-budget": "set-budget",
+    fund: "fund-job", assign: "assign-provider", submit: "submit-work", finalize: "finalize-decision" };
+export class CustodyEngine {
+    permit;
+    ledger;
+    backend;
+    enabled;
+    now;
+    busy = false;
+    poisoned = false;
+    closing = false;
+    onIdle;
+    constructor(permit, ledger, backend, enabled = false, now = Date.now) {
+        this.permit = permit;
+        this.ledger = ledger;
+        this.backend = backend;
+        this.enabled = enabled;
+        this.now = now;
+        guard(ledger.permitHash === hash(permit));
+        guard(BigInt(ledger.entries.filter(e => e.state === "reserved").length) * GAS_PER_ACTION <= BigInt(permit.gasBudget));
+    }
+    jobId() { return this.permit.jobId ?? this.ledger.latest("create")?.jobId ?? null; }
+    shutdown() {
+        this.closing = true;
+        return this.busy ? new Promise(resolve => { this.onIdle = resolve; }) : Promise.resolve();
+    }
+    idle() { this.busy = false; this.onIdle?.(); }
+    status() {
+        return { permitId: this.permit.id, permitHash: hash(this.permit), profile: this.permit.profile,
+            enabled: this.enabled && !this.poisoned && !this.closing, asset: this.permit.asset, amount: this.permit.amount,
+            expiresAt: this.permit.expiresAt, gasBudget: this.permit.gasBudget, gasPerAction: GAS_PER_ACTION.toString(),
+            gasReserved: (BigInt(this.ledger.entries.filter(e => e.state === "reserved").length) * GAS_PER_ACTION).toString(),
+            jobId: this.jobId(), actions: this.permit.actions,
+            operations: this.permit.actions.map(a => this.ledger.latest(a)).filter(Boolean),
+            classification: "internal-team-operated-not-m2-adoption", evidenceBytesVerified: false };
+    }
+    async reconcile() {
+        guard(!this.busy && !this.poisoned && !this.closing);
+        this.busy = true;
+        try {
+            for (const action of this.permit.actions) {
+                const e = this.ledger.latest(action);
+                if (e?.state !== "signed")
+                    continue;
+                const c = await this.backend.confirmation(e.txid);
+                // Pending, missing, aborted and noncanonical transactions remain blocked. Never rebroadcast.
+                if (!c.success)
+                    continue;
+                let jobId = null;
+                if (action === "create") {
+                    const match = /^\(ok u([1-9][0-9]*)\)$/.exec(c.result);
+                    guard(match);
+                    jobId = match[1];
+                }
+                else if (action === "register")
+                    guard(/^\(ok u[1-9][0-9]*\)$/.test(c.result));
+                else
+                    guard(c.result === "(ok true)");
+                this.persist({ ...e, state: "confirmed", jobId });
+            }
+            return this.status();
+        }
+        finally {
+            this.idle();
+        }
+    }
+    persist(entry) {
+        try {
+            this.ledger.append(entry);
+        }
+        catch {
+            this.poisoned = true;
+            throw new Error("ledger_reconciliation_required");
+        }
+    }
+    async execute(input) {
+        guard(!this.busy && !this.poisoned && !this.closing);
+        this.busy = true;
+        try {
+            const request = await parseExecution(input, this.permit, this.jobId());
+            const intent = hash(request), prior = this.ledger.latest(request.action);
+            if (prior) {
+                guard(prior.intent === intent);
+                return this.status();
+            }
+            guard(this.enabled && this.now() < Date.parse(this.permit.expiresAt));
+            guard(!this.permit.actions.some(a => { const e = this.ledger.latest(a); return e && e.state !== "confirmed"; }));
+            const reserved = BigInt(this.ledger.entries.filter(e => e.state === "reserved").length) * GAS_PER_ACTION;
+            guard(reserved + GAS_PER_ACTION <= BigInt(this.permit.gasBudget));
+            const plan = await this.backend.prepare(this.permit, request, this.jobId());
+            const wallet = this.permit.profile[this.permit.profile.role];
+            guard(plan.network === "testnet" && plan.postConditionMode === "deny" && plan.type === "contract-call");
+            guard(plan.contract === (request.action === "register" ? QA_CONTRACTS.agentRegistry
+                : this.permit.asset === "stx" ? QA_CONTRACTS.stxCommerce : QA_CONTRACTS.sbtcCommerce));
+            guard(plan.functionName === FUNCTIONS[request.action] && (!plan.intent.sender || plan.intent.sender === wallet));
+            if (request.action === "fund")
+                guard(plan.intent.amount === BigInt(this.permit.amount) && plan.intent.asset === this.permit.asset);
+            guard(this.now() < Date.parse(this.permit.expiresAt));
+            this.persist({ action: request.action, intent, state: "reserved", txid: null, jobId: null });
+            const signed = await this.backend.sign(plan, wallet, this.permit.expiresAt);
+            guard(/^0x[a-f0-9]{64}$/.test(signed.txid));
+            this.persist({ action: request.action, intent, state: "signed", txid: signed.txid, jobId: null });
+            guard(this.now() < Date.parse(this.permit.expiresAt));
+            // Even an HTTP timeout after broadcast cannot trigger another signing attempt.
+            await this.backend.broadcast(signed);
+            return this.status();
+        }
+        finally {
+            this.idle();
+        }
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/custody/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/custody/engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAsC,MAAM,aAAa,CAAC;AAQ9G,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY;IAC9F,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,mBAAmB,EAAW,CAAC;AAE/G,MAAM,OAAO,aAAa;IAKH;IAAiC;IACnC;IAA0C;IAC1C;IANX,IAAI,GAAG,KAAK,CAAC;IACb,QAAQ,GAAG,KAAK,CAAC;IACjB,OAAO,GAAG,KAAK,CAAC;IAChB,MAAM,CAA2B;IACzC,YAAqB,MAAc,EAAmB,MAAc,EACjD,OAAuB,EAAmB,UAAU,KAAK,EACzD,MAAoB,IAAI,CAAC,GAAG;QAF1B,WAAM,GAAN,MAAM,CAAQ;QAAmB,WAAM,GAAN,MAAM,CAAQ;QACjD,YAAO,GAAP,OAAO,CAAgB;QAAmB,YAAO,GAAP,OAAO,CAAQ;QACzD,QAAG,GAAH,GAAG,CAAyB;QAC7C,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,cAAc,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACxH,CAAC;IACO,KAAK,KAAoB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC;IAC3G,QAAQ;QACN,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5F,CAAC;IACO,IAAI,KAAK,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM;QACJ,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5F,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC9G,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,cAAc,CAAC,QAAQ,EAAE;YAC3G,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,QAAQ,EAAE;YACjH,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YACjD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAC/E,cAAc,EAAE,wCAAwC,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;IAC7F,CAAC;IACD,KAAK,CAAC,SAAS;QACb,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACvE,IAAI,CAAC;YACH,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACzC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrC,IAAI,CAAC,EAAE,KAAK,KAAK,QAAQ;oBAAE,SAAS;gBACpC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAK,CAAC,CAAC;gBACnD,6FAA6F;gBAC7F,IAAI,CAAC,CAAC,CAAC,OAAO;oBAAE,SAAS;gBACzB,IAAI,KAAK,GAAkB,IAAI,CAAC;gBAChC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACxB,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;oBAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBAC1F,CAAC;qBAAM,IAAI,MAAM,KAAK,UAAU;oBAAE,KAAK,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;;oBAC3E,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;gBACrC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;IAC5B,CAAC;IACO,OAAO,CAAC,KAAsC;QACpD,IAAI,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAAC,CAAC;IACvH,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,KAAc;QAC1B,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACzE,IAAI,KAAK,EAAE,CAAC;gBAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACtE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC;YACzG,KAAK,CAAC,QAAQ,GAAG,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,iBAAiB,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;YACxG,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa;gBACjF,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;YACzF,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC;YACjH,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnI,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACtD,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5E,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACtD,+EAA+E;YAC/E,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;IAC5B,CAAC;CACF"}

package/dist/custody/ledger.d.ts

@@ -0,0 +1,24 @@
+import { type Action } from "./permit.js";
+export declare function privateDirectory(path: string): void;
+export declare function readPrivateFile(path: string, limit?: number): string;
+export interface Entry {
+    action: Action;
+    intent: string;
+    state: "reserved" | "signed" | "confirmed";
+    txid: string | null;
+    jobId: string | null;
+}
+export declare class Ledger {
+    readonly permitHash: string;
+    readonly entries: Entry[];
+    private readonly fd;
+    private readonly lock;
+    private closed;
+    constructor(directory: string, permitHash: string, wallet: string);
+    private validate;
+    latest(action: Action): Entry | undefined;
+    private appendRaw;
+    append(value: Entry): void;
+    close(): void;
+}
+//# sourceMappingURL=ledger.d.ts.map

package/dist/custody/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../src/custody/ledger.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoC,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAE5E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAInD;AACD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAQ,GAAG,MAAM,CAQnE;AACD,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC3E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AACD,qBAAa,MAAM;IAKc,QAAQ,CAAC,UAAU,EAAE,MAAM;IAJ1D,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,CAAM;IAC/B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,MAAM,CAAS;gBACX,SAAS,EAAE,MAAM,EAAW,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IA2B1E,OAAO,CAAC,QAAQ;IAiBhB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS;IAIzC,OAAO,CAAC,SAAS;IASjB,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI;IAC1B,KAAK,IAAI,IAAI;CACd"}

package/dist/custody/ledger.js

@@ -0,0 +1,122 @@
+import { constants, openSync, closeSync, fstatSync, readFileSync, writeSync, fsyncSync, lstatSync, realpathSync, mkdirSync, rmdirSync } from "node:fs";
+import { dirname, isAbsolute, join } from "node:path";
+import { ACTIONS, guard, object, positive } from "./permit.js";
+export function privateDirectory(path) {
+    guard(isAbsolute(path) && realpathSync(path) === path);
+    const s = lstatSync(path);
+    guard(s.isDirectory() && s.uid === process.getuid?.() && (s.mode & 0o777) === 0o700);
+}
+export function readPrivateFile(path, limit = 32768) {
+    guard(isAbsolute(path));
+    privateDirectory(dirname(path));
+    const fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const s = fstatSync(fd);
+        guard(s.isFile() && s.nlink === 1 && s.uid === process.getuid?.() && (s.mode & 0o777) === 0o600 && s.size <= limit);
+        return readFileSync(fd, "utf8");
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export class Ledger {
+    permitHash;
+    entries = [];
+    fd;
+    lock;
+    closed = false;
+    constructor(directory, permitHash, wallet) {
+        this.permitHash = permitHash;
+        privateDirectory(directory);
+        guard(/^[a-f0-9]{64}$/.test(permitHash) && /^ST[A-Z0-9]+$/.test(wallet));
+        // Lock is wallet-scoped, not permit-scoped. Crash leaves it for operator reconciliation.
+        this.lock = join(directory, wallet + ".lock");
+        mkdirSync(this.lock, { mode: 0o700 });
+        try {
+            const path = join(directory, wallet + ".jsonl");
+            let created = false;
+            try {
+                this.fd = openSync(path, constants.O_RDWR | constants.O_APPEND | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+                created = true;
+            }
+            catch (error) {
+                guard(error.code === "EEXIST");
+                this.fd = openSync(path, constants.O_RDWR | constants.O_APPEND | constants.O_NOFOLLOW);
+            }
+            try {
+                const s = fstatSync(this.fd);
+                guard(s.isFile() && s.nlink === 1 && s.uid === process.getuid?.() && (s.mode & 0o777) === 0o600 && s.size <= 65536);
+                const text = readFileSync(this.fd, "utf8");
+                if (!text) {
+                    guard(created);
+                    this.appendRaw({ permitHash });
+                }
+                else {
+                    guard(text.endsWith("\n"));
+                    const lines = text.trimEnd().split("\n");
+                    const header = object(JSON.parse(lines.shift()), ["permitHash"]);
+                    guard(header.permitHash === permitHash);
+                    for (const line of lines) {
+                        const e = this.validate(JSON.parse(line));
+                        this.entries.push(e);
+                    }
+                }
+            }
+            catch (error) {
+                closeSync(this.fd);
+                throw error;
+            }
+        }
+        catch (error) {
+            rmdirSync(this.lock);
+            throw error;
+        }
+    }
+    validate(value) {
+        const e = object(value, ["action", "intent", "state", "txid", "jobId"]);
+        guard(ACTIONS.includes(e.action) && typeof e.intent === "string" && /^[a-f0-9]{64}$/.test(e.intent));
+        guard(e.txid === null || typeof e.txid === "string" && /^0x[a-f0-9]{64}$/.test(e.txid));
+        guard(e.jobId === null || positive(e.jobId) > 0n);
+        const previous = this.latest(e.action);
+        if (!previous) {
+            guard(e.state === "reserved" && e.txid === null && e.jobId === null);
+            guard(!this.entries.some(v => this.latest(v.action)?.state !== "confirmed"));
+        }
+        else {
+            guard(e.intent === previous.intent);
+            guard(previous.state === "reserved" ? e.state === "signed" && e.txid !== null && e.jobId === null
+                : previous.state === "signed" && e.state === "confirmed" && e.txid === previous.txid &&
+                    (e.action === "create" ? e.jobId !== null : e.jobId === null));
+        }
+        return e;
+    }
+    latest(action) {
+        for (let i = this.entries.length - 1; i >= 0; i--)
+            if (this.entries[i].action === action)
+                return this.entries[i];
+        return undefined;
+    }
+    appendRaw(value) {
+        guard(!this.closed);
+        const bytes = Buffer.from(JSON.stringify(value) + "\n");
+        let offset = 0;
+        while (offset < bytes.length)
+            offset += writeSync(this.fd, bytes, offset);
+        fsyncSync(this.fd);
+        // Persist directory entry as well as data before any signing/broadcast side effect.
+        const dir = openSync(dirname(this.lock), constants.O_RDONLY);
+        try {
+            fsyncSync(dir);
+        }
+        finally {
+            closeSync(dir);
+        }
+    }
+    append(value) { const e = this.validate(value); this.appendRaw(e); this.entries.push(e); }
+    close() { if (!this.closed) {
+        closeSync(this.fd);
+        this.closed = true;
+        rmdirSync(this.lock);
+    } }
+}
+//# sourceMappingURL=ledger.js.map

package/dist/custody/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../src/custody/ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EACpF,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAe,MAAM,aAAa,CAAC;AAE5E,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC;AACvF,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAK,GAAG,KAAK;IACzD,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QACxB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;QACpH,OAAO,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAKD,MAAM,OAAO,MAAM;IAKuB;IAJ/B,OAAO,GAAY,EAAE,CAAC;IACd,EAAE,CAAS;IACX,IAAI,CAAS;IACtB,MAAM,GAAG,KAAK,CAAC;IACvB,YAAY,SAAiB,EAAW,UAAkB,EAAE,MAAc;QAAlC,eAAU,GAAV,UAAU,CAAQ;QACxD,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACtG,yFAAyF;QACzF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC;YAChD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBACrI,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,CAAE,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;gBAC1D,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC7B,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;gBACpH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;gBAAC,CAAC;qBACzD,CAAC;oBACJ,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACrE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAG,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;oBAAC,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;oBAC3G,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;wBAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAAC,CAAC;gBAChG,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACxD,CAAC;IACO,QAAQ,CAAC,KAAc;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAgB,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/G,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACxF,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAgB,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;YACrE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;gBAC/F,CAAC,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;oBAClF,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,CAAqB,CAAC;IAC/B,CAAC;IACD,MAAM,CAAC,MAAc;QACnB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClH,OAAO,SAAS,CAAC;IACnB,CAAC;IACO,SAAS,CAAC,KAAc;QAC9B,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAAC,IAAI,MAAM,GAAG,CAAC,CAAC;QACxE,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1E,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,oFAAoF;QACpF,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC;YAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,KAAY,IAAU,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvG,KAAK,KAAW,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC,CAAC,CAAC;CACtG"}

package/dist/custody/permit.d.ts

@@ -0,0 +1,42 @@
+import { type HermesProfile } from "../mcp/server.js";
+import { type EvaluationCriterion, type EvaluationEvidence } from "../evaluation-commitments.js";
+export declare const GAS_PER_ACTION = 5000n;
+export declare const ACTIONS: readonly ["register", "create", "set-budget", "fund", "assign", "submit", "finalize"];
+export type Action = typeof ACTIONS[number];
+export interface Permit {
+    readonly version: 1;
+    readonly id: string;
+    readonly profile: Readonly<HermesProfile>;
+    readonly asset: "stx" | "sbtc";
+    readonly amount: string;
+    readonly gasBudget: string;
+    readonly expiresAt: string;
+    readonly expiredAt: string;
+    readonly jobId: string | null;
+    readonly description: string;
+    readonly acceptanceCriteria: readonly EvaluationCriterion[];
+    readonly agentName: string;
+    readonly actions: readonly Action[];
+    readonly evidenceOrigins: readonly string[];
+    readonly serviceFeeConsent: "200bps-net-after-evaluation";
+}
+export interface ExecutionRequest {
+    readonly action: Action;
+    readonly evidence?: readonly EvaluationEvidence[];
+}
+export declare function guard(ok: unknown): asserts ok;
+export declare function object(value: unknown, keys: readonly string[]): Record<string, unknown>;
+export declare function positive(value: unknown): bigint;
+export declare function hash(value: unknown): string;
+export declare function commitmentInput(p: Permit): {
+    network: "testnet";
+    asset: "sbtc" | "stx";
+    contract: "ST16EWRC01S1SFWGBP63MW47VY8P3AYFA8VGEBGE5.agentic-commerce-v6" | "ST16EWRC01S1SFWGBP63MW47VY8P3AYFA8VGEBGE5.sbtc-commerce-v5";
+    client: string;
+    evaluator: string;
+    description: string;
+    acceptanceCriteria: readonly EvaluationCriterion[];
+};
+export declare function parsePermit(value: unknown): Promise<Readonly<Permit>>;
+export declare function parseExecution(value: unknown, p: Permit, jobId: string | null): Promise<ExecutionRequest>;
+//# sourceMappingURL=permit.d.ts.map

package/dist/custody/permit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permit.d.ts","sourceRoot":"","sources":["../../src/custody/permit.ts"],"names":[],"mappings":"AAEA,OAAO,EAA8B,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAqD,KAAK,mBAAmB,EAClF,KAAK,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,eAAO,MAAM,cAAc,QAAQ,CAAC;AACpC,eAAO,MAAM,OAAO,uFAAwF,CAAC;AAC7G,MAAM,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AAC5C,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;CAC3D;AACD,MAAM,WAAW,gBAAgB;IAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAAE;AAChH,wBAAgB,KAAK,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAsD;AACpG,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKvF;AACD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAG/C;AACD,wBAAgB,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAG3C;AACD,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM;;;;;;;;EAKxC;AACD,wBAAsB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAoC3E;AACD,wBAAsB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmB/G"}