@perkos/agent-sdk 0.7.1 → 0.8.0-rc.1

package/dist/custody/backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../src/custody/backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAC7G,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAGjG,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAErE,MAAM,KAAK,GAAG,sDAAsD,CAAC;AACrE,MAAM,SAAS,GAAG,EAAE,GAAG,YAAY,EAAE,SAAS,EAAE,KAAK,EAAW,CAAC;AACjE,KAAK,UAAU,SAAS,CAAC,KAAmB,EAAE,IAAkB;IAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AACD,KAAK,UAAU,GAAG,CAAC,IAAY;IAC7B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;AACrD,CAAC;AACD,KAAK,UAAU,GAAG;IAChB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC;IAAC,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IAC1E,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACpG,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,iBAA2B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,iBAA2B,CAAC,EAAE,CAAC;AAC9G,CAAC;AACD,0FAA0F;AAC1F,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK;YACvB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,QAAsC,CAAC;YAC3C,sGAAsG;YACtG,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS;gBAC7E,cAAc,EAAE,EAAE,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;oBACtE,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE;gBAClF,iBAAiB,EAAE,IAAI,CAAC,EAAE;oBACxB,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;oBAChI,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACjE,OAAO,yBAAyB,CAAC,EAAE,eAAe,EAAE,eAAgB,EAAE,YAAY,EAAE,YAAa;wBAC/F,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa;wBACxG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;gBACzE,CAAC;gBACD,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;wBACvE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;wBAAC,QAAQ,GAAG,IAAI,CAAC;wBAAC,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC5E,CAAC,EAAE,EAAE,CAAC,CAAC;YACT,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC/E,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7C,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,GAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ;gBACzF,eAAe,EAAE,sBAA+B,EAAE,CAAC;YACrD,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC1B,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC;gBACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACzD,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,WAAW,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACnG,CAAC;YACD,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/C,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;gBACxB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC7C,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS;oBACnF,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC5H,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;gBAC1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;oBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC;gBACpG,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;oBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC;gBAChG,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;oBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC;gBACtH,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;oBAC5B,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAChD,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,kBAAkB,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,KAAK,MAAM;wBACjG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;YACD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;gBAAE,KAAK,CAAC,MAAM,MAAM,CAAC,sBAAsB,EAAE,KAAK,KAAK,CAAC,CAAC;YAC1G,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,UAAU;oBAAE,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;oBAAC,MAAM;gBAC3I,KAAK,QAAQ;oBAAE,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;oBAAC,MAAM;gBACpK,KAAK,YAAY;oBAAE,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAG,EAAE,MAAM,EAAE,CAAC,CAAC;oBAAC,MAAM;gBACzF,KAAK,MAAM;oBAAE,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,CAAC;oBAAC,MAAM;gBACnH,KAAK,QAAQ;oBAAE,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAAC,MAAM;gBAChH,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,UAAU,GAAG,MAAM,2BAA2B,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAS,EAAE,CAAC,CAAC;oBACvI,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAG,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,CAAC;oBAAC,MAAM;gBACxI,CAAC;gBACD,KAAK,UAAU;oBAAE,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,EAAG,CAAC,CAAC;oBAAC,MAAM;YACtE,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,CAAC;YAAC,OAAO,QAAQ,CAAC;QACnC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS;YAChC,MAAM,GAAG,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,wBAAwB,MAAM,SAAS,CAAC,CAAC;YACjE,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;YACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;YACtG,KAAK,CAAC,KAAK,CAAC,sBAAsB,KAAK,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;YACnG,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,qBAAqB,KAAK,IAAI;gBACnF,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;YACxG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;YAClG,oGAAoG;YACpG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACjD,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,wBAAwB,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,MAAM,CAAC,CAAC;YACjG,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,EAAE,eAAe,EAAE,eAAgB,EAAE,YAAY,EAAE,YAAa;gBAChG,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,GAAG;gBACrF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,cAAc;gBAChE,iBAAiB,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;YACzE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;QACnF,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,MAAM;YACpB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,GAAG,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM;gBAC5E,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9F,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnB,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC5C,KAAK,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QACpF,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,IAAI;YACrB,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACrC,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,GAAG,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,EAAE,CAAC,SAA2C,CAAC;YAC9D,gGAAgG;YAChG,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,EAAE,CAAC,SAAS,KAAK,IAAI,IAAI,EAAE,CAAC,aAAa,KAAK,KAAK;oBACxF,EAAE,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,iBAAiB,CAAC;oBACxE,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,iBAA2B,CAAC,GAAG,EAAE;gBACxD,MAAM,EAAE,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAClE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/custody/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/custody/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/custody/cli.ts"],"names":[],"mappings":""}

package/dist/custody/cli.js

@@ -0,0 +1,43 @@
+#!/usr/bin/env node
+import { parsePermit, guard, hash } from "./permit.js";
+import { readPrivateFile, Ledger } from "./ledger.js";
+import { testnetBackend } from "./backend.js";
+import { CustodyEngine } from "./engine.js";
+import { listenCustody } from "./socket.js";
+async function main() {
+    const args = process.argv.slice(2);
+    if (args.length === 1 && args[0] === "--help") {
+        console.log("nayori-custody --permit /private/permit.json --state /private/state --socket /ipc/nayori.sock --key-file /private/key --hermes-uid UID [--enable-testnet-signing]\nLinux only; separate non-root OS identities required. Signing disabled by default.");
+        return;
+    }
+    const enabled = args.at(-1) === "--enable-testnet-signing";
+    if (enabled)
+        args.pop();
+    guard(args.length === 10 && args[0] === "--permit" && args[2] === "--state" &&
+        args[4] === "--socket" && args[6] === "--key-file" && args[8] === "--hermes-uid");
+    guard(process.platform === "linux" && process.getuid?.() !== 0 && /^\d+$/.test(args[9]));
+    guard(Number(args[9]) > 0 && Number(args[9]) !== process.getuid?.());
+    const permit = await parsePermit(JSON.parse(readPrivateFile(args[1])));
+    const ledger = new Ledger(args[3], hash(permit), permit.profile[permit.profile.role]);
+    try {
+        const engine = new CustodyEngine(permit, ledger, testnetBackend(args[7]), enabled);
+        const server = await listenCustody(args[5], engine);
+        // Never close the wallet lock while an asynchronous signing request may still be running.
+        let stopping = false;
+        for (const signal of ["SIGINT", "SIGTERM"])
+            process.once(signal, () => {
+                if (stopping)
+                    return;
+                stopping = true;
+                void Promise.all([engine.shutdown(), new Promise(resolve => server.close(() => resolve()))])
+                    .then(() => { ledger.close(); process.exit(0); });
+            });
+        console.error("Nayori custody ready; testnet only. Permit hash: " + hash(permit) + "; signing: " + enabled);
+    }
+    catch (error) {
+        ledger.close();
+        throw error;
+    }
+}
+main().catch(() => { console.error("Custody could not start. Check OS isolation, permissions and public permit; no raw diagnostics are exposed."); process.exitCode = 1; });
+//# sourceMappingURL=cli.js.map

package/dist/custody/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/custody/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,uPAAuP,CAAC,CAAC;QAAC,OAAO;IAC/Q,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,0BAA0B,CAAC;IAC3D,IAAI,OAAO;QAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IACxB,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;QACzE,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC;IACpF,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAC1F,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC;QACrD,0FAA0F;QAC1F,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;gBAC7E,IAAI,QAAQ;oBAAE,OAAO;gBAAC,QAAQ,GAAG,IAAI,CAAC;gBACtC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;qBAC/F,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,mDAAmD,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,aAAa,GAAG,OAAO,CAAC,CAAC;IAC9G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AAClD,CAAC;AACD,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,6GAA6G,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/custody/engine.d.ts

@@ -0,0 +1,54 @@
+import type { ContractCallPlan } from "../types.js";
+import { Ledger } from "./ledger.js";
+import { type Permit, type ExecutionRequest } from "./permit.js";
+export interface CustodyBackend {
+    prepare(permit: Permit, request: ExecutionRequest, jobId: string | null): Promise<ContractCallPlan>;
+    sign(plan: ContractCallPlan, wallet: string, expiresAt: string): Promise<{
+        txid: string;
+        bytes: Uint8Array;
+    }>;
+    broadcast(signed: {
+        txid: string;
+        bytes: Uint8Array;
+    }): Promise<void>;
+    confirmation(txid: string): Promise<{
+        success: boolean;
+        result: string;
+    }>;
+}
+export declare class CustodyEngine {
+    readonly permit: Permit;
+    private readonly ledger;
+    private readonly backend;
+    private readonly enabled;
+    private readonly now;
+    private busy;
+    private poisoned;
+    private closing;
+    private onIdle;
+    constructor(permit: Permit, ledger: Ledger, backend: CustodyBackend, enabled?: boolean, now?: () => number);
+    private jobId;
+    shutdown(): Promise<void>;
+    private idle;
+    status(): {
+        permitId: string;
+        permitHash: string;
+        profile: Readonly<import("../mcp/server.js").HermesProfile>;
+        enabled: boolean;
+        asset: "sbtc" | "stx";
+        amount: string;
+        expiresAt: string;
+        gasBudget: string;
+        gasPerAction: string;
+        gasReserved: string;
+        jobId: string | null;
+        actions: readonly ("set-budget" | "register" | "create" | "fund" | "assign" | "submit" | "finalize")[];
+        operations: (import("./ledger.js").Entry | undefined)[];
+        classification: string;
+        evidenceBytesVerified: boolean;
+    };
+    reconcile(): Promise<ReturnType<CustodyEngine["status"]>>;
+    private persist;
+    execute(input: unknown): Promise<ReturnType<CustodyEngine["status"]>>;
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/custody/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/custody/engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAA+C,KAAK,MAAM,EAAE,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE9G,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACpG,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAC9G,SAAS,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3E;AAID,qBAAa,aAAa;IAKZ,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;IAC1D,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAkB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAClE,OAAO,CAAC,QAAQ,CAAC,GAAG;IANtB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAA2B;gBACpB,MAAM,EAAE,MAAM,EAAmB,MAAM,EAAE,MAAM,EACjD,OAAO,EAAE,cAAc,EAAmB,OAAO,UAAQ,EACzD,GAAG,GAAE,MAAM,MAAiB;IAI/C,OAAO,CAAC,KAAK;IACb,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,OAAO,CAAC,IAAI;IACZ,MAAM;;;;;;;;;;;;;;;;;IASA,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IAmB/D,OAAO,CAAC,OAAO;IAGT,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;CA4B5E"}

package/dist/custody/engine.js

@@ -0,0 +1,115 @@
+import { QA_CONTRACTS } from "../mcp/server.js";
+import { GAS_PER_ACTION, guard, hash, parseExecution } from "./permit.js";
+const FUNCTIONS = { register: "register-agent", create: "create-job", "set-budget": "set-budget",
+    fund: "fund-job", assign: "assign-provider", submit: "submit-work", finalize: "finalize-decision" };
+export class CustodyEngine {
+    permit;
+    ledger;
+    backend;
+    enabled;
+    now;
+    busy = false;
+    poisoned = false;
+    closing = false;
+    onIdle;
+    constructor(permit, ledger, backend, enabled = false, now = Date.now) {
+        this.permit = permit;
+        this.ledger = ledger;
+        this.backend = backend;
+        this.enabled = enabled;
+        this.now = now;
+        guard(ledger.permitHash === hash(permit));
+        guard(BigInt(ledger.entries.filter(e => e.state === "reserved").length) * GAS_PER_ACTION <= BigInt(permit.gasBudget));
+    }
+    jobId() { return this.permit.jobId ?? this.ledger.latest("create")?.jobId ?? null; }
+    shutdown() {
+        this.closing = true;
+        return this.busy ? new Promise(resolve => { this.onIdle = resolve; }) : Promise.resolve();
+    }
+    idle() { this.busy = false; this.onIdle?.(); }
+    status() {
+        return { permitId: this.permit.id, permitHash: hash(this.permit), profile: this.permit.profile,
+            enabled: this.enabled && !this.poisoned && !this.closing, asset: this.permit.asset, amount: this.permit.amount,
+            expiresAt: this.permit.expiresAt, gasBudget: this.permit.gasBudget, gasPerAction: GAS_PER_ACTION.toString(),
+            gasReserved: (BigInt(this.ledger.entries.filter(e => e.state === "reserved").length) * GAS_PER_ACTION).toString(),
+            jobId: this.jobId(), actions: this.permit.actions,
+            operations: this.permit.actions.map(a => this.ledger.latest(a)).filter(Boolean),
+            classification: "internal-team-operated-not-m2-adoption", evidenceBytesVerified: false };
+    }
+    async reconcile() {
+        guard(!this.busy && !this.poisoned && !this.closing);
+        this.busy = true;
+        try {
+            for (const action of this.permit.actions) {
+                const e = this.ledger.latest(action);
+                if (e?.state !== "signed")
+                    continue;
+                const c = await this.backend.confirmation(e.txid);
+                // Pending, missing, aborted and noncanonical transactions remain blocked. Never rebroadcast.
+                if (!c.success)
+                    continue;
+                let jobId = null;
+                if (action === "create") {
+                    const match = /^\(ok u([1-9][0-9]*)\)$/.exec(c.result);
+                    guard(match);
+                    jobId = match[1];
+                }
+                else if (action === "register")
+                    guard(/^\(ok u[1-9][0-9]*\)$/.test(c.result));
+                else
+                    guard(c.result === "(ok true)");
+                this.persist({ ...e, state: "confirmed", jobId });
+            }
+            return this.status();
+        }
+        finally {
+            this.idle();
+        }
+    }
+    persist(entry) {
+        try {
+            this.ledger.append(entry);
+        }
+        catch {
+            this.poisoned = true;
+            throw new Error("ledger_reconciliation_required");
+        }
+    }
+    async execute(input) {
+        guard(!this.busy && !this.poisoned && !this.closing);
+        this.busy = true;
+        try {
+            const request = await parseExecution(input, this.permit, this.jobId());
+            const intent = hash(request), prior = this.ledger.latest(request.action);
+            if (prior) {
+                guard(prior.intent === intent);
+                return this.status();
+            }
+            guard(this.enabled && this.now() < Date.parse(this.permit.expiresAt));
+            guard(!this.permit.actions.some(a => { const e = this.ledger.latest(a); return e && e.state !== "confirmed"; }));
+            const reserved = BigInt(this.ledger.entries.filter(e => e.state === "reserved").length) * GAS_PER_ACTION;
+            guard(reserved + GAS_PER_ACTION <= BigInt(this.permit.gasBudget));
+            const plan = await this.backend.prepare(this.permit, request, this.jobId());
+            const wallet = this.permit.profile[this.permit.profile.role];
+            guard(plan.network === "testnet" && plan.postConditionMode === "deny" && plan.type === "contract-call");
+            guard(plan.contract === (request.action === "register" ? QA_CONTRACTS.agentRegistry
+                : this.permit.asset === "stx" ? QA_CONTRACTS.stxCommerce : QA_CONTRACTS.sbtcCommerce));
+            guard(plan.functionName === FUNCTIONS[request.action] && (!plan.intent.sender || plan.intent.sender === wallet));
+            if (request.action === "fund")
+                guard(plan.intent.amount === BigInt(this.permit.amount) && plan.intent.asset === this.permit.asset);
+            guard(this.now() < Date.parse(this.permit.expiresAt));
+            this.persist({ action: request.action, intent, state: "reserved", txid: null, jobId: null });
+            const signed = await this.backend.sign(plan, wallet, this.permit.expiresAt);
+            guard(/^0x[a-f0-9]{64}$/.test(signed.txid));
+            this.persist({ action: request.action, intent, state: "signed", txid: signed.txid, jobId: null });
+            guard(this.now() < Date.parse(this.permit.expiresAt));
+            // Even an HTTP timeout after broadcast cannot trigger another signing attempt.
+            await this.backend.broadcast(signed);
+            return this.status();
+        }
+        finally {
+            this.idle();
+        }
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/custody/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/custody/engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAsC,MAAM,aAAa,CAAC;AAQ9G,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY;IAC9F,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,mBAAmB,EAAW,CAAC;AAE/G,MAAM,OAAO,aAAa;IAKH;IAAiC;IACnC;IAA0C;IAC1C;IANX,IAAI,GAAG,KAAK,CAAC;IACb,QAAQ,GAAG,KAAK,CAAC;IACjB,OAAO,GAAG,KAAK,CAAC;IAChB,MAAM,CAA2B;IACzC,YAAqB,MAAc,EAAmB,MAAc,EACjD,OAAuB,EAAmB,UAAU,KAAK,EACzD,MAAoB,IAAI,CAAC,GAAG;QAF1B,WAAM,GAAN,MAAM,CAAQ;QAAmB,WAAM,GAAN,MAAM,CAAQ;QACjD,YAAO,GAAP,OAAO,CAAgB;QAAmB,YAAO,GAAP,OAAO,CAAQ;QACzD,QAAG,GAAH,GAAG,CAAyB;QAC7C,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,cAAc,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACxH,CAAC;IACO,KAAK,KAAoB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC;IAC3G,QAAQ;QACN,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5F,CAAC;IACO,IAAI,KAAK,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM;QACJ,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5F,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC9G,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,cAAc,CAAC,QAAQ,EAAE;YAC3G,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,QAAQ,EAAE;YACjH,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YACjD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAC/E,cAAc,EAAE,wCAAwC,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;IAC7F,CAAC;IACD,KAAK,CAAC,SAAS;QACb,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACvE,IAAI,CAAC;YACH,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACzC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrC,IAAI,CAAC,EAAE,KAAK,KAAK,QAAQ;oBAAE,SAAS;gBACpC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAK,CAAC,CAAC;gBACnD,6FAA6F;gBAC7F,IAAI,CAAC,CAAC,CAAC,OAAO;oBAAE,SAAS;gBACzB,IAAI,KAAK,GAAkB,IAAI,CAAC;gBAChC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACxB,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;oBAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBAC1F,CAAC;qBAAM,IAAI,MAAM,KAAK,UAAU;oBAAE,KAAK,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;;oBAC3E,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;gBACrC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;IAC5B,CAAC;IACO,OAAO,CAAC,KAAsC;QACpD,IAAI,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAAC,CAAC;IACvH,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,KAAc;QAC1B,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACzE,IAAI,KAAK,EAAE,CAAC;gBAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACtE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC;YACzG,KAAK,CAAC,QAAQ,GAAG,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,iBAAiB,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;YACxG,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa;gBACjF,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;YACzF,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC;YACjH,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnI,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACtD,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5E,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACtD,+EAA+E;YAC/E,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;IAC5B,CAAC;CACF"}

package/dist/custody/ledger.d.ts

@@ -0,0 +1,24 @@
+import { type Action } from "./permit.js";
+export declare function privateDirectory(path: string): void;
+export declare function readPrivateFile(path: string, limit?: number): string;
+export interface Entry {
+    action: Action;
+    intent: string;
+    state: "reserved" | "signed" | "confirmed";
+    txid: string | null;
+    jobId: string | null;
+}
+export declare class Ledger {
+    readonly permitHash: string;
+    readonly entries: Entry[];
+    private readonly fd;
+    private readonly lock;
+    private closed;
+    constructor(directory: string, permitHash: string, wallet: string);
+    private validate;
+    latest(action: Action): Entry | undefined;
+    private appendRaw;
+    append(value: Entry): void;
+    close(): void;
+}
+//# sourceMappingURL=ledger.d.ts.map

package/dist/custody/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../src/custody/ledger.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoC,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAE5E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAInD;AACD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAQ,GAAG,MAAM,CAQnE;AACD,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC3E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AACD,qBAAa,MAAM;IAKc,QAAQ,CAAC,UAAU,EAAE,MAAM;IAJ1D,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,CAAM;IAC/B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,MAAM,CAAS;gBACX,SAAS,EAAE,MAAM,EAAW,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IA2B1E,OAAO,CAAC,QAAQ;IAiBhB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS;IAIzC,OAAO,CAAC,SAAS;IASjB,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI;IAC1B,KAAK,IAAI,IAAI;CACd"}

package/dist/custody/ledger.js

@@ -0,0 +1,122 @@
+import { constants, openSync, closeSync, fstatSync, readFileSync, writeSync, fsyncSync, lstatSync, realpathSync, mkdirSync, rmdirSync } from "node:fs";
+import { dirname, isAbsolute, join } from "node:path";
+import { ACTIONS, guard, object, positive } from "./permit.js";
+export function privateDirectory(path) {
+    guard(isAbsolute(path) && realpathSync(path) === path);
+    const s = lstatSync(path);
+    guard(s.isDirectory() && s.uid === process.getuid?.() && (s.mode & 0o777) === 0o700);
+}
+export function readPrivateFile(path, limit = 32768) {
+    guard(isAbsolute(path));
+    privateDirectory(dirname(path));
+    const fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const s = fstatSync(fd);
+        guard(s.isFile() && s.nlink === 1 && s.uid === process.getuid?.() && (s.mode & 0o777) === 0o600 && s.size <= limit);
+        return readFileSync(fd, "utf8");
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export class Ledger {
+    permitHash;
+    entries = [];
+    fd;
+    lock;
+    closed = false;
+    constructor(directory, permitHash, wallet) {
+        this.permitHash = permitHash;
+        privateDirectory(directory);
+        guard(/^[a-f0-9]{64}$/.test(permitHash) && /^ST[A-Z0-9]+$/.test(wallet));
+        // Lock is wallet-scoped, not permit-scoped. Crash leaves it for operator reconciliation.
+        this.lock = join(directory, wallet + ".lock");
+        mkdirSync(this.lock, { mode: 0o700 });
+        try {
+            const path = join(directory, wallet + ".jsonl");
+            let created = false;
+            try {
+                this.fd = openSync(path, constants.O_RDWR | constants.O_APPEND | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+                created = true;
+            }
+            catch (error) {
+                guard(error.code === "EEXIST");
+                this.fd = openSync(path, constants.O_RDWR | constants.O_APPEND | constants.O_NOFOLLOW);
+            }
+            try {
+                const s = fstatSync(this.fd);
+                guard(s.isFile() && s.nlink === 1 && s.uid === process.getuid?.() && (s.mode & 0o777) === 0o600 && s.size <= 65536);
+                const text = readFileSync(this.fd, "utf8");
+                if (!text) {
+                    guard(created);
+                    this.appendRaw({ permitHash });
+                }
+                else {
+                    guard(text.endsWith("\n"));
+                    const lines = text.trimEnd().split("\n");
+                    const header = object(JSON.parse(lines.shift()), ["permitHash"]);
+                    guard(header.permitHash === permitHash);
+                    for (const line of lines) {
+                        const e = this.validate(JSON.parse(line));
+                        this.entries.push(e);
+                    }
+                }
+            }
+            catch (error) {
+                closeSync(this.fd);
+                throw error;
+            }
+        }
+        catch (error) {
+            rmdirSync(this.lock);
+            throw error;
+        }
+    }
+    validate(value) {
+        const e = object(value, ["action", "intent", "state", "txid", "jobId"]);
+        guard(ACTIONS.includes(e.action) && typeof e.intent === "string" && /^[a-f0-9]{64}$/.test(e.intent));
+        guard(e.txid === null || typeof e.txid === "string" && /^0x[a-f0-9]{64}$/.test(e.txid));
+        guard(e.jobId === null || positive(e.jobId) > 0n);
+        const previous = this.latest(e.action);
+        if (!previous) {
+            guard(e.state === "reserved" && e.txid === null && e.jobId === null);
+            guard(!this.entries.some(v => this.latest(v.action)?.state !== "confirmed"));
+        }
+        else {
+            guard(e.intent === previous.intent);
+            guard(previous.state === "reserved" ? e.state === "signed" && e.txid !== null && e.jobId === null
+                : previous.state === "signed" && e.state === "confirmed" && e.txid === previous.txid &&
+                    (e.action === "create" ? e.jobId !== null : e.jobId === null));
+        }
+        return e;
+    }
+    latest(action) {
+        for (let i = this.entries.length - 1; i >= 0; i--)
+            if (this.entries[i].action === action)
+                return this.entries[i];
+        return undefined;
+    }
+    appendRaw(value) {
+        guard(!this.closed);
+        const bytes = Buffer.from(JSON.stringify(value) + "\n");
+        let offset = 0;
+        while (offset < bytes.length)
+            offset += writeSync(this.fd, bytes, offset);
+        fsyncSync(this.fd);
+        // Persist directory entry as well as data before any signing/broadcast side effect.
+        const dir = openSync(dirname(this.lock), constants.O_RDONLY);
+        try {
+            fsyncSync(dir);
+        }
+        finally {
+            closeSync(dir);
+        }
+    }
+    append(value) { const e = this.validate(value); this.appendRaw(e); this.entries.push(e); }
+    close() { if (!this.closed) {
+        closeSync(this.fd);
+        this.closed = true;
+        rmdirSync(this.lock);
+    } }
+}
+//# sourceMappingURL=ledger.js.map

package/dist/custody/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../src/custody/ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EACpF,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAe,MAAM,aAAa,CAAC;AAE5E,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC;AACvF,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAK,GAAG,KAAK;IACzD,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QACxB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;QACpH,OAAO,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAKD,MAAM,OAAO,MAAM;IAKuB;IAJ/B,OAAO,GAAY,EAAE,CAAC;IACd,EAAE,CAAS;IACX,IAAI,CAAS;IACtB,MAAM,GAAG,KAAK,CAAC;IACvB,YAAY,SAAiB,EAAW,UAAkB,EAAE,MAAc;QAAlC,eAAU,GAAV,UAAU,CAAQ;QACxD,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACtG,yFAAyF;QACzF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC;YAChD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBACrI,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,CAAE,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;gBAC1D,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC7B,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;gBACpH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;gBAAC,CAAC;qBACzD,CAAC;oBACJ,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACrE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAG,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;oBAAC,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;oBAC3G,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;wBAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAAC,CAAC;gBAChG,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACxD,CAAC;IACO,QAAQ,CAAC,KAAc;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAgB,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/G,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACxF,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAgB,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;YACrE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;gBAC/F,CAAC,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;oBAClF,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,CAAqB,CAAC;IAC/B,CAAC;IACD,MAAM,CAAC,MAAc;QACnB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClH,OAAO,SAAS,CAAC;IACnB,CAAC;IACO,SAAS,CAAC,KAAc;QAC9B,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAAC,IAAI,MAAM,GAAG,CAAC,CAAC;QACxE,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1E,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,oFAAoF;QACpF,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC;YAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,KAAY,IAAU,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvG,KAAK,KAAW,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC,CAAC,CAAC;CACtG"}

package/dist/custody/permit.d.ts

@@ -0,0 +1,42 @@
+import { type HermesProfile } from "../mcp/server.js";
+import { type EvaluationCriterion, type EvaluationEvidence } from "../evaluation-commitments.js";
+export declare const GAS_PER_ACTION = 5000n;
+export declare const ACTIONS: readonly ["register", "create", "set-budget", "fund", "assign", "submit", "finalize"];
+export type Action = typeof ACTIONS[number];
+export interface Permit {
+    readonly version: 1;
+    readonly id: string;
+    readonly profile: Readonly<HermesProfile>;
+    readonly asset: "stx" | "sbtc";
+    readonly amount: string;
+    readonly gasBudget: string;
+    readonly expiresAt: string;
+    readonly expiredAt: string;
+    readonly jobId: string | null;
+    readonly description: string;
+    readonly acceptanceCriteria: readonly EvaluationCriterion[];
+    readonly agentName: string;
+    readonly actions: readonly Action[];
+    readonly evidenceOrigins: readonly string[];
+    readonly serviceFeeConsent: "200bps-net-after-evaluation";
+}
+export interface ExecutionRequest {
+    readonly action: Action;
+    readonly evidence?: readonly EvaluationEvidence[];
+}
+export declare function guard(ok: unknown): asserts ok;
+export declare function object(value: unknown, keys: readonly string[]): Record<string, unknown>;
+export declare function positive(value: unknown): bigint;
+export declare function hash(value: unknown): string;
+export declare function commitmentInput(p: Permit): {
+    network: "testnet";
+    asset: "sbtc" | "stx";
+    contract: "ST16EWRC01S1SFWGBP63MW47VY8P3AYFA8VGEBGE5.agentic-commerce-v6" | "ST16EWRC01S1SFWGBP63MW47VY8P3AYFA8VGEBGE5.sbtc-commerce-v5";
+    client: string;
+    evaluator: string;
+    description: string;
+    acceptanceCriteria: readonly EvaluationCriterion[];
+};
+export declare function parsePermit(value: unknown): Promise<Readonly<Permit>>;
+export declare function parseExecution(value: unknown, p: Permit, jobId: string | null): Promise<ExecutionRequest>;
+//# sourceMappingURL=permit.d.ts.map

package/dist/custody/permit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permit.d.ts","sourceRoot":"","sources":["../../src/custody/permit.ts"],"names":[],"mappings":"AAEA,OAAO,EAA8B,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAqD,KAAK,mBAAmB,EAClF,KAAK,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,eAAO,MAAM,cAAc,QAAQ,CAAC;AACpC,eAAO,MAAM,OAAO,uFAAwF,CAAC;AAC7G,MAAM,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AAC5C,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;CAC3D;AACD,MAAM,WAAW,gBAAgB;IAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAAE;AAChH,wBAAgB,KAAK,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC,EAAE,CAAsD;AACpG,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKvF;AACD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAG/C;AACD,wBAAgB,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAG3C;AACD,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM;;;;;;;;EAKxC;AACD,wBAAsB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAoC3E;AACD,wBAAsB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmB/G"}

package/dist/custody/permit.js

@@ -0,0 +1,91 @@
+/** Operator-owned QA authorization. Never constructed from an LLM tool argument. */
+import { createHash } from "node:crypto";
+import { parseProfile, QA_CONTRACTS } from "../mcp/server.js";
+import { prepareEvaluationJob, prepareEvaluationSubmission } from "../evaluation-commitments.js";
+export const GAS_PER_ACTION = 5000n;
+export const ACTIONS = ["register", "create", "set-budget", "fund", "assign", "submit", "finalize"];
+export function guard(ok) { if (!ok)
+    throw new Error("custody_guard_failed"); }
+export function object(value, keys) {
+    guard(value && typeof value === "object" && !Array.isArray(value));
+    const r = value;
+    guard(Object.keys(r).length === keys.length && keys.every(k => Object.hasOwn(r, k)));
+    return r;
+}
+export function positive(value) {
+    guard(typeof value === "string" && /^[1-9][0-9]{0,38}$/.test(value));
+    const n = BigInt(value);
+    guard(n < 2n ** 128n);
+    return n;
+}
+export function hash(value) {
+    // Objects entering this function are reconstructed in a fixed field order.
+    return createHash("sha256").update(JSON.stringify(value)).digest("hex");
+}
+export function commitmentInput(p) {
+    return { network: "testnet", asset: p.asset,
+        contract: p.asset === "stx" ? QA_CONTRACTS.stxCommerce : QA_CONTRACTS.sbtcCommerce,
+        client: p.profile.client, evaluator: p.profile.evaluator,
+        description: p.description, acceptanceCriteria: p.acceptanceCriteria };
+}
+export async function parsePermit(value) {
+    const r = object(value, ["version", "id", "profile", "asset", "amount", "gasBudget", "expiresAt",
+        "expiredAt", "jobId", "description", "acceptanceCriteria", "agentName", "actions", "evidenceOrigins", "serviceFeeConsent"]);
+    guard(r.version === 1 && typeof r.id === "string" && /^[a-z0-9-]{1,64}$/.test(r.id));
+    const profile = parseProfile(r.profile);
+    guard(r.asset === "stx" || r.asset === "sbtc");
+    guard(positive(r.amount) <= (r.asset === "stx" ? 100000n : 1000n));
+    guard(positive(r.gasBudget) <= GAS_PER_ACTION * 7n);
+    positive(r.expiredAt);
+    guard(r.jobId === null || positive(r.jobId) > 0n);
+    guard(typeof r.expiresAt === "string" && /^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d\.000Z$/.test(r.expiresAt)
+        && Number.isFinite(Date.parse(r.expiresAt)) && new Date(r.expiresAt).toISOString() === r.expiresAt);
+    guard(typeof r.description === "string" && typeof r.agentName === "string" && /^[\w -]{1,64}$/.test(r.agentName));
+    guard(r.serviceFeeConsent === "200bps-net-after-evaluation");
+    guard(Array.isArray(r.actions) && r.actions.length > 0 && new Set(r.actions).size === r.actions.length);
+    const allowed = profile.role === "client" ? ACTIONS.filter(a => a !== "submit") : ["register", "submit"];
+    guard(r.actions.every(a => allowed.includes(a)));
+    guard(profile.role !== "provider" || r.jobId !== null);
+    guard(r.jobId === null ? r.actions.includes("create") : !r.actions.includes("create"));
+    guard(Array.isArray(r.evidenceOrigins) && r.evidenceOrigins.length <= 5 && r.evidenceOrigins.every(o => {
+        if (typeof o !== "string")
+            return false;
+        const url = new URL(o);
+        return url.protocol === "https:" && url.origin === o && !url.username && !url.password;
+    }));
+    guard(Array.isArray(r.acceptanceCriteria));
+    const criteria = r.acceptanceCriteria.map(v => {
+        const c = object(v, ["id", "requirement", "verification"]);
+        guard([c.id, c.requirement, c.verification].every(v => typeof v === "string"));
+        return Object.freeze({ id: c.id, requirement: c.requirement, verification: c.verification });
+    });
+    const p = { version: 1, id: r.id, profile, asset: r.asset, amount: r.amount,
+        gasBudget: r.gasBudget, expiresAt: r.expiresAt, expiredAt: r.expiredAt,
+        jobId: r.jobId, description: r.description, acceptanceCriteria: Object.freeze(criteria),
+        agentName: r.agentName, actions: Object.freeze([...r.actions]),
+        evidenceOrigins: Object.freeze([...r.evidenceOrigins]), serviceFeeConsent: r.serviceFeeConsent };
+    await prepareEvaluationJob(commitmentInput(p));
+    return Object.freeze(p);
+}
+export async function parseExecution(value, p, jobId) {
+    guard(value && typeof value === "object");
+    const action = value.action;
+    const r = object(value, action === "submit" ? ["action", "evidence"] : ["action"]);
+    guard(p.actions.includes(r.action));
+    if (r.action !== "submit")
+        return { action: r.action };
+    guard(jobId && Array.isArray(r.evidence) && r.evidence.length > 0 && r.evidence.length <= 5);
+    let bytes = 0;
+    const evidence = r.evidence.map(item => {
+        const e = object(item, ["id", "uri", "sha256", "mediaType", "sizeBytes"]);
+        guard(typeof e.uri === "string" && p.evidenceOrigins.includes(new URL(e.uri).origin));
+        guard(e.mediaType === "text/plain" || e.mediaType === "application/json");
+        guard(Number.isSafeInteger(e.sizeBytes) && Number(e.sizeBytes) >= 0 && Number(e.sizeBytes) <= 8192);
+        bytes += Number(e.sizeBytes);
+        return { id: e.id, uri: e.uri, sha256: e.sha256, mediaType: e.mediaType, sizeBytes: e.sizeBytes };
+    });
+    guard(bytes <= 16000);
+    await prepareEvaluationSubmission({ ...commitmentInput(p), provider: p.profile.provider, jobId, evidence });
+    return { action: "submit", evidence };
+}
+//# sourceMappingURL=permit.js.map

package/dist/custody/permit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permit.js","sourceRoot":"","sources":["../../src/custody/permit.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAsB,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAC/B,MAAM,8BAA8B,CAAC;AAEhE,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AACpC,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;AAoB7G,MAAM,UAAU,KAAK,CAAC,EAAW,IAAgB,IAAI,CAAC,EAAE;IAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;AACpG,MAAM,UAAU,MAAM,CAAC,KAAc,EAAE,IAAuB;IAC5D,KAAK,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,CAAC,CAAC;AACX,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,KAAK,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC;IAAC,OAAO,CAAC,CAAC;AAC3D,CAAC;AACD,MAAM,UAAU,IAAI,CAAC,KAAc;IACjC,2EAA2E;IAC3E,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,CAAS;IACvC,OAAO,EAAE,OAAO,EAAE,SAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;QAClD,QAAQ,EAAE,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY;QAClF,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS;QACxD,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAC;AAC3E,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAc;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW;QAC9F,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC9H,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACxC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IAC/C,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,cAAc,GAAG,EAAE,CAAC,CAAC;IACpD,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtB,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,wCAAwC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;WAC9F,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;IACtG,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAClH,KAAK,CAAC,CAAC,CAAC,iBAAiB,KAAK,6BAA6B,CAAC,CAAC;IAC7D,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxG,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACzG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IACvD,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvF,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACrG,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;IACjH,CAAC,CAAC,CAAC,CAAC;IACJ,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;QAC3D,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAY,EAAE,WAAW,EAAE,CAAC,CAAC,WAAqB,EAAE,YAAY,EAAE,CAAC,CAAC,YAAsB,EAAE,CAAC,CAAC;IAC7H,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,GAAW,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAgB;QAC3F,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,SAAmB;QAC1F,KAAK,EAAE,CAAC,CAAC,KAAsB,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACxG,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAa,CAAC;QAC1E,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,eAAe,CAAa,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC;IAC/G,MAAM,oBAAoB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAc,EAAE,CAAS,EAAE,KAAoB;IAClF,KAAK,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAI,KAAiC,CAAC,MAAM,CAAC;IACzD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnF,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAgB,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAgB,EAAE,CAAC;IACjE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IAC7F,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACrC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;QAC1E,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtF,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,IAAI,CAAC,CAAC,SAAS,KAAK,kBAAkB,CAAC,CAAC;QAC1E,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC;QACpG,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAwB,CAAC;IAC1H,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;IACtB,MAAM,2BAA2B,CAAC,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5G,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC"}

package/dist/custody/socket.d.ts

@@ -0,0 +1,11 @@
+import { type Server } from "node:net";
+import type { CustodyEngine } from "./engine.js";
+import type { HermesProfile } from "../mcp/server.js";
+export interface CustodyPort {
+    status(): Promise<unknown>;
+    execute(request: unknown): Promise<unknown>;
+}
+/** No TCP listener. Parent must be signer-owned, group-traversable but not group-writable. */
+export declare function listenCustody(path: string, engine: CustodyEngine): Promise<Server>;
+export declare function custodyPort(path: string, permitHash: string, profile: Readonly<HermesProfile>): CustodyPort;
+//# sourceMappingURL=socket.d.ts.map

package/dist/custody/socket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket.d.ts","sourceRoot":"","sources":["../../src/custody/socket.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkC,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AAIvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,WAAW,WAAW;IAC1B,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7C;AAKD,8FAA8F;AAC9F,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAqCxF;AACD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,WAAW,CA4B3G"}