@scriptmasterlabs/mcp-x402 2.1.0 → 2.1.2

package/dist/server/payments/x402.js

@@ -1,7 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PaymentConfigSchema = void 0;
+exports.getPaymentReceiver = getPaymentReceiver;
 exports.executeX402Payment = executeX402Payment;
+exports.executeBrokeredPayment = executeBrokeredPayment;
 const zod_1 = require("zod");
 const audit_js_1 = require("../security/audit.js");
 const ap2_js_1 = require("./ap2.js");
@@ -10,14 +12,27 @@ const router_js_1 = require("./router.js");
 const receipt_js_1 = require("./receipt.js");
 const bureau_js_1 = require("../../lib/credit/bureau.js");
 const pricing_js_1 = require("../registry/pricing.js");
+const agent_payment_js_1 = require("./agent-payment.js");
 exports.PaymentConfigSchema = zod_1.z.object({
     price: zod_1.z.string().regex(/^\d+(\.\d+)?$/),
     currency: zod_1.z.enum(['USDC', 'RLUSD']),
     toolName: zod_1.z.string(),
     walletAddress: zod_1.z.string().optional(),
+    // Agent's on-chain payment proof. When agent-pays enforcement is on, the tool is
+    // only served once this verifies via 402Proof.
+    paymentProof: zod_1.z.object({ txHash: zod_1.z.string() }).optional(),
 });
 const AUTO_APPROVE_THRESHOLD = parseFloat(process.env['AUTO_APPROVE_THRESHOLD_USD'] ?? '1.0');
 const DAILY_SPEND_CAP = parseFloat(process.env['DAILY_SPEND_CAP_USD'] ?? '50.0');
+// SML's published Base USDC receiving address (public — see agents.json, llms.txt,
+// x402-paywall.html). Used as the default so the gateway COLLECTS even when
+// SML_PAYMENT_RECEIVER isn't set in the environment. Override via env to redirect.
+// The private key (WALLET_SEED) is never stored here.
+const SML_DEFAULT_RECEIVER = '0x4e14B249D9A4c9c9352D780eCEB508A8eB7a7700';
+/** Resolve the address that collects USDC for paid tool calls. */
+function getPaymentReceiver() {
+    return process.env['SML_PAYMENT_RECEIVER'] ?? SML_DEFAULT_RECEIVER;
+}
 const dailySpend = new Map();
 function getTodayKey() {
     return new Date().toISOString().slice(0, 10);
@@ -36,6 +51,35 @@ function addDailySpend(wallet, amount) {
 }
 async function executeX402Payment(config) {
     const audit = audit_js_1.AuditLogger.getInstance();
+    // Agent-pays enforcement (flag-gated, OFF by default). When on, the AGENT must
+    // pay and we verify via 402Proof — no gateway self-transfer. Fails CLOSED.
+    if ((0, agent_payment_js_1.isAgentPaymentEnforced)()) {
+        const gate = await (0, agent_payment_js_1.enforceAgentPayment)({
+            toolName: config.toolName,
+            price: config.price,
+            paymentProof: config.paymentProof,
+        });
+        if (gate.status === 'unconfigured') {
+            audit.error('agent_payment_unconfigured', { tool: config.toolName });
+            throw new Error(`Agent payment enforcement is on but no 402Proof endpoint is configured for ${config.toolName}. Set PROOF402_ENDPOINT_${config.toolName.toUpperCase()}.`);
+        }
+        if (gate.status === 'payment_required')
+            throw new agent_payment_js_1.PaymentRequiredError(gate);
+        if (gate.status === 'payment_invalid')
+            throw new agent_payment_js_1.PaymentUnverifiedError(gate);
+        // gate.status === 'paid' — agent payment verified on-chain. Record receipt, no self-transfer.
+        const w = await wallet_js_1.WalletManager.getInstance().getOrCreateWallet();
+        const receipt = await receipt_js_1.ReceiptStore.getInstance().create({
+            txHash: gate.txHash, chain: 'verified', amount: config.price,
+            currency: config.currency, tool: config.toolName, wallet: config.walletAddress ?? w.address,
+        });
+        audit.info('agent_payment_verified', { tool: config.toolName, txHash: gate.txHash, receiptId: receipt.id });
+        return {
+            receiptId: receipt.id, txHash: gate.txHash, chain: 'verified',
+            amountPaid: config.price, currency: config.currency, timestamp: Date.now(),
+            walletAddress: config.walletAddress ?? w.address,
+        };
+    }
     const wallet = await wallet_js_1.WalletManager.getInstance().getOrCreateWallet();
     const walletAddress = wallet.address;
     // Enforce daily spend cap (N9)
@@ -84,11 +128,11 @@ async function executeX402Payment(config) {
         throw new Error('AP2 mandate verification failed. Agent not authorized for this payment.');
     }
     // Route payment to cheapest/fastest chain (N13)
-    // If SML_PAYMENT_RECEIVER is not configured, log the intended payment and continue
-    const receiver = process.env['SML_PAYMENT_RECEIVER'] ?? '';
+    // Receiver defaults to SML's published address; only empty if explicitly set to ''.
+    const receiver = getPaymentReceiver();
     let txResult;
     if (!receiver) {
-        audit.warn('payment_receiver_unset', { tool: config.toolName, amount: config.price, note: 'SML_PAYMENT_RECEIVER not configured — logging only' });
+        audit.warn('payment_receiver_unset', { tool: config.toolName, amount: config.price, note: 'SML_PAYMENT_RECEIVER explicitly empty — logging only' });
         txResult = { txHash: `pending-${Date.now()}`, chain: 'none', latencyMs: 0 };
     }
     else {
@@ -135,4 +179,69 @@ async function executeX402Payment(config) {
         walletAddress,
     };
 }
+/**
+ * Brokered payment for APM-executed tools (apm_execute). The amount is the
+ * price-locked quote value + brokerage; its integrity is guaranteed by the
+ * SML-signed quote verified upstream — NOT by the price registry. Mirrors the
+ * settlement steps of executeX402Payment (cap, credit, AP2, route, receipt).
+ * Never call without a verified, unexpired quote.
+ */
+async function executeBrokeredPayment(params) {
+    const { amount, toolName } = params;
+    const currency = 'USDC';
+    const audit = audit_js_1.AuditLogger.getInstance();
+    const wallet = await wallet_js_1.WalletManager.getInstance().getOrCreateWallet();
+    const walletAddress = wallet.address;
+    // Daily spend cap (N9)
+    const amountNum = parseFloat(amount);
+    const currentSpend = getDailySpend(walletAddress);
+    if (currentSpend + amountNum > DAILY_SPEND_CAP) {
+        audit.warn('spend_cap_exceeded', { wallet: walletAddress, current: currentSpend, requested: amountNum, cap: DAILY_SPEND_CAP });
+        throw new Error(`Daily spend cap of $${DAILY_SPEND_CAP} exceeded. Current: $${currentSpend.toFixed(4)}`);
+    }
+    // Credit Bureau check (N8)
+    const score = await bureau_js_1.CreditBureau.getInstance().getScore(walletAddress);
+    const autoApprove = amountNum <= AUTO_APPROVE_THRESHOLD && score >= 300;
+    audit.info('brokered_payment_attempt', { tool: toolName, amount, wallet: walletAddress, bureauScore: score, autoApprove });
+    if (!autoApprove && score < 300) {
+        throw new Error(`Credit Bureau score ${score} below minimum 300. Payment requires manual approval.`);
+    }
+    // AP2 mandate verification (N6)
+    const ap2 = ap2_js_1.AP2Client.getInstance();
+    const mandateValid = await ap2.verifyMandate(walletAddress, { maxAmount: amount, currency, toolName });
+    if (!mandateValid) {
+        audit.warn('ap2_mandate_rejected', { wallet: walletAddress, tool: toolName });
+        throw new Error('AP2 mandate verification failed. Agent not authorized for this payment.');
+    }
+    // Route payment (N13)
+    const receiver = getPaymentReceiver();
+    let txResult;
+    if (!receiver) {
+        audit.warn('payment_receiver_unset', { tool: toolName, amount, note: 'SML_PAYMENT_RECEIVER explicitly empty — logging only' });
+        txResult = { txHash: `pending-${Date.now()}`, chain: 'none', latencyMs: 0 };
+    }
+    else {
+        try {
+            const router = router_js_1.ChainRouter.getInstance();
+            txResult = await router.route({ amount, currency, from: walletAddress, to: receiver, timeoutMs: 500 });
+        }
+        catch (err) {
+            audit.warn('payment_tx_failed', { tool: toolName, amount, error: String(err), note: 'Server wallet may be unfunded — tool served anyway' });
+            txResult = { txHash: `failed-${Date.now()}`, chain: 'none', latencyMs: 0 };
+        }
+    }
+    addDailySpend(walletAddress, amountNum);
+    // 402Proof receipt (N7)
+    const receipt = await receipt_js_1.ReceiptStore.getInstance().create({ txHash: txResult.txHash, chain: txResult.chain, amount, currency, tool: toolName, wallet: walletAddress });
+    audit.info('brokered_payment_success', { receiptId: receipt.id, txHash: txResult.txHash, chain: txResult.chain, tool: toolName, wallet: walletAddress });
+    return {
+        receiptId: receipt.id,
+        txHash: txResult.txHash,
+        chain: txResult.chain,
+        amountPaid: amount,
+        currency,
+        timestamp: Date.now(),
+        walletAddress,
+    };
+}
 //# sourceMappingURL=x402.js.map

package/dist/server/payments/x402.js.map

@@ -1 +1 @@
-{"version":3,"file":"x402.js","sourceRoot":"","sources":["../../../src/server/payments/x402.ts"],"names":[],"mappings":";;;AAuDA,gDAyHC;AAhLD,6BAAwB;AACxB,mDAAmD;AACnD,qCAAqC;AACrC,2CAA4C;AAC5C,2CAA0C;AAC1C,6CAA4C;AAC5C,0DAA0D;AAC1D,uDAAuD;AAE1C,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;IACxC,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAcH,MAAM,sBAAsB,GAAG,UAAU,CACvC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,IAAI,KAAK,CACnD,CAAC;AAEF,MAAM,eAAe,GAAG,UAAU,CAChC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,MAAM,CAC7C,CAAC;AAEF,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4C,CAAC;AAEvE,SAAS,WAAW;IAClB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,MAAc;IACnD,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACtC,MAAqB;IAErB,MAAM,KAAK,GAAG,sBAAW,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,yBAAa,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC;IACrE,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;IAErC,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,YAAY,GAAG,QAAQ,GAAG,eAAe,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC/B,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,QAAQ;YACnB,GAAG,EAAE,eAAe;SACrB,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CACb,uBAAuB,eAAe,wBAAwB,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,MAAM,WAAW,GAAG,MAAM,0BAAa,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,WAAW,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,4BAA4B,WAAW,SAAS,MAAM,CAAC,KAAK,uBAAuB,CACpF,CAAC;IACJ,CAAC;IAED,2BAA2B;IAC3B,MAAM,KAAK,GAAG,MAAM,wBAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,QAAQ,IAAI,sBAAsB,IAAI,KAAK,IAAI,GAAG,CAAC;IAEvE,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE;QAC5B,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,KAAK;QAClB,WAAW;KACZ,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,uDAAuD,CACpF,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,MAAM,GAAG,GAAG,kBAAS,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,aAAa,EAAE;QAC1D,SAAS,EAAE,MAAM,CAAC,KAAK;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,mFAAmF;IACnF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,QAA8D,CAAC;IAEnE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,oDAAoD,EAAE,CAAC,CAAC;QAClJ,QAAQ,GAAG,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,uBAAW,CAAC,WAAW,EAAE,CAAC;YACzC,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;gBAC5B,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,aAAa;gBACnB,EAAE,EAAE,QAAQ;gBACZ,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qDAAqD;YACrD,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,oDAAoD,EAAE,CAAC,CAAC;YACjK,QAAQ,GAAG,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,aAAa,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAEvC,iCAAiC;IACjC,MAAM,OAAO,GAAG,MAAM,yBAAY,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;QACtD,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IAEH,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE;QAC5B,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,MAAM,CAAC,KAAK;QACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,aAAa;KACd,CAAC;AACJ,CAAC"}
+{"version":3,"file":"x402.js","sourceRoot":"","sources":["../../../src/server/payments/x402.ts"],"names":[],"mappings":";;;AA+CA,gDAEC;AAqBD,gDAsJC;AASD,wDAiEC;AAtSD,6BAAwB;AACxB,mDAAmD;AACnD,qCAAqC;AACrC,2CAA4C;AAC5C,2CAA0C;AAC1C,6CAA4C;AAC5C,0DAA0D;AAC1D,uDAAuD;AACvD,yDAA+H;AAElH,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;IACxC,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iFAAiF;IACjF,+CAA+C;IAC/C,YAAY,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC;AAcH,MAAM,sBAAsB,GAAG,UAAU,CACvC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,IAAI,KAAK,CACnD,CAAC;AAEF,MAAM,eAAe,GAAG,UAAU,CAChC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,MAAM,CAC7C,CAAC;AAEF,mFAAmF;AACnF,4EAA4E;AAC5E,mFAAmF;AACnF,sDAAsD;AACtD,MAAM,oBAAoB,GAAG,4CAA4C,CAAC;AAE1E,kEAAkE;AAClE,SAAgB,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,oBAAoB,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4C,CAAC;AAEvE,SAAS,WAAW;IAClB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,MAAc;IACnD,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACtC,MAAqB;IAErB,MAAM,KAAK,GAAG,sBAAW,CAAC,WAAW,EAAE,CAAC;IAExC,+EAA+E;IAC/E,2EAA2E;IAC3E,IAAI,IAAA,yCAAsB,GAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAA,sCAAmB,EAAC;YACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACnC,KAAK,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,8EAA8E,MAAM,CAAC,QAAQ,2BAA2B,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC5K,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB;YAAE,MAAM,IAAI,uCAAoB,CAAC,IAAI,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB;YAAE,MAAM,IAAI,yCAAsB,CAAC,IAAI,CAAC,CAAC;QAC9E,8FAA8F;QAC9F,MAAM,CAAC,GAAG,MAAM,yBAAa,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,yBAAY,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;YACtD,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK;YAC5D,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,OAAO;SAC5F,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5G,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU;YAC7D,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YAC1E,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,OAAO;SACjD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,yBAAa,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC;IACrE,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;IAErC,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,YAAY,GAAG,QAAQ,GAAG,eAAe,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC/B,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,QAAQ;YACnB,GAAG,EAAE,eAAe;SACrB,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CACb,uBAAuB,eAAe,wBAAwB,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,MAAM,WAAW,GAAG,MAAM,0BAAa,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,WAAW,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,4BAA4B,WAAW,SAAS,MAAM,CAAC,KAAK,uBAAuB,CACpF,CAAC;IACJ,CAAC;IAED,2BAA2B;IAC3B,MAAM,KAAK,GAAG,MAAM,wBAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,QAAQ,IAAI,sBAAsB,IAAI,KAAK,IAAI,GAAG,CAAC;IAEvE,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE;QAC5B,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,KAAK;QAClB,WAAW;KACZ,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,uDAAuD,CACpF,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,MAAM,GAAG,GAAG,kBAAS,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,aAAa,EAAE;QAC1D,SAAS,EAAE,MAAM,CAAC,KAAK;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,oFAAoF;IACpF,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,IAAI,QAA8D,CAAC;IAEnE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,sDAAsD,EAAE,CAAC,CAAC;QACpJ,QAAQ,GAAG,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,uBAAW,CAAC,WAAW,EAAE,CAAC;YACzC,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;gBAC5B,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,aAAa;gBACnB,EAAE,EAAE,QAAQ;gBACZ,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qDAAqD;YACrD,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,oDAAoD,EAAE,CAAC,CAAC;YACjK,QAAQ,GAAG,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,aAAa,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAEvC,iCAAiC;IACjC,MAAM,OAAO,GAAG,MAAM,yBAAY,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;QACtD,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IAEH,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE;QAC5B,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,MAAM,CAAC,KAAK;QACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,aAAa;KACd,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,sBAAsB,CAAC,MAG5C;IACC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAe,CAAC;IACjC,MAAM,KAAK,GAAG,sBAAW,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,yBAAa,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC;IACrE,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;IAErC,uBAAuB;IACvB,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,YAAY,GAAG,SAAS,GAAG,eAAe,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;QAC/H,MAAM,IAAI,KAAK,CAAC,uBAAuB,eAAe,wBAAwB,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED,2BAA2B;IAC3B,MAAM,KAAK,GAAG,MAAM,wBAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,SAAS,IAAI,sBAAsB,IAAI,KAAK,IAAI,GAAG,CAAC;IACxE,KAAK,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3H,IAAI,CAAC,WAAW,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,uDAAuD,CAAC,CAAC;IACvG,CAAC;IAED,gCAAgC;IAChC,MAAM,GAAG,GAAG,kBAAS,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IAED,sBAAsB;IACtB,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,IAAI,QAA8D,CAAC;IACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,sDAAsD,EAAE,CAAC,CAAC;QAC/H,QAAQ,GAAG,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,uBAAW,CAAC,WAAW,EAAE,CAAC;YACzC,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACzG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,oDAAoD,EAAE,CAAC,CAAC;YAC5I,QAAQ,GAAG,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,aAAa,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAExC,wBAAwB;IACxB,MAAM,OAAO,GAAG,MAAM,yBAAY,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACrK,KAAK,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAEzJ,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,MAAM;QAClB,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,aAAa;KACd,CAAC;AACJ,CAAC"}

package/dist/server/registry/backends.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Canonical list of SML product backends + a shared health checker.
+ *
+ * Single source of truth for "which backend serves which product" and "is it live".
+ * Used by the `sml_status` tool and by APM (so APM never recommends a suspended product).
+ */
+export interface BackendDef {
+    /** Display name (as shown in sml_status). */
+    name: string;
+    /** Product key — must match the `product` field used in the APM capability index. */
+    product: string;
+    /** Health-check URL. */
+    url: string;
+}
+export declare const BACKENDS: readonly BackendDef[];
+export type BackendStatus = 'online' | 'degraded' | 'offline';
+export interface BackendHealth {
+    name: string;
+    product: string;
+    status: BackendStatus;
+    http?: number;
+    latency_ms: number;
+    error?: string;
+}
+/** Hit every backend's health endpoint in parallel. Never throws. */
+export declare function checkBackends(timeoutMs?: number): Promise<BackendHealth[]>;
+/** Set of product keys whose backend is currently `online`. */
+export declare function liveProducts(timeoutMs?: number): Promise<Set<string>>;
+//# sourceMappingURL=backends.d.ts.map

package/dist/server/registry/backends.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backends.d.ts","sourceRoot":"","sources":["../../../src/server/registry/backends.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,eAAO,MAAM,QAAQ,EAAE,SAAS,UAAU,EAShC,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qEAAqE;AACrE,wBAAsB,aAAa,CAAC,SAAS,SAAO,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAoC9E;AAED,+DAA+D;AAC/D,wBAAsB,YAAY,CAAC,SAAS,SAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAGzE"}

package/dist/server/registry/backends.js

@@ -0,0 +1,61 @@
+"use strict";
+/**
+ * Canonical list of SML product backends + a shared health checker.
+ *
+ * Single source of truth for "which backend serves which product" and "is it live".
+ * Used by the `sml_status` tool and by APM (so APM never recommends a suspended product).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BACKENDS = void 0;
+exports.checkBackends = checkBackends;
+exports.liveProducts = liveProducts;
+exports.BACKENDS = [
+    { name: 'SqueezeOS', product: 'SqueezeOS', url: 'https://squeezeos-api.onrender.com/api/status' },
+    { name: 'Ghost Layer', product: 'Ghost Layer', url: 'https://ghost-layer.onrender.com/api/status' },
+    { name: '402Proof', product: '402Proof', url: 'https://four02proof.onrender.com/health' },
+    { name: 'RLUSD Rails', product: 'RLUSD Rails', url: 'https://sml-rails.onrender.com/health' },
+    { name: 'Copy-Trader', product: 'Copy-Trader', url: 'https://sml-copytrader.onrender.com/health' },
+    { name: 'Launchpad', product: 'Launchpad', url: 'https://sml-launchpad.onrender.com/health' },
+    { name: 'Shadow Desk', product: 'Shadow Desk', url: 'https://shadow-desk.onrender.com/health' },
+    { name: 'Forge Gateway', product: 'Forge Gateway', url: 'https://forge-gateway-a822.onrender.com/health' },
+];
+/** Hit every backend's health endpoint in parallel. Never throws. */
+async function checkBackends(timeoutMs = 5000) {
+    const results = await Promise.allSettled(exports.BACKENDS.map(async (b) => {
+        const start = Date.now();
+        try {
+            const res = await fetch(b.url, { signal: AbortSignal.timeout(timeoutMs) });
+            return {
+                name: b.name,
+                product: b.product,
+                status: res.ok ? 'online' : 'degraded',
+                http: res.status,
+                latency_ms: Date.now() - start,
+            };
+        }
+        catch (err) {
+            return {
+                name: b.name,
+                product: b.product,
+                status: 'offline',
+                error: String(err),
+                latency_ms: Date.now() - start,
+            };
+        }
+    }));
+    return results.map((r, i) => r.status === 'fulfilled'
+        ? r.value
+        : {
+            name: exports.BACKENDS[i].name,
+            product: exports.BACKENDS[i].product,
+            status: 'offline',
+            error: 'health_check_failed',
+            latency_ms: 0,
+        });
+}
+/** Set of product keys whose backend is currently `online`. */
+async function liveProducts(timeoutMs = 5000) {
+    const health = await checkBackends(timeoutMs);
+    return new Set(health.filter((h) => h.status === 'online').map((h) => h.product));
+}
+//# sourceMappingURL=backends.js.map

package/dist/server/registry/backends.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backends.js","sourceRoot":"","sources":["../../../src/server/registry/backends.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAkCH,sCAoCC;AAGD,oCAGC;AAjEY,QAAA,QAAQ,GAA0B;IAC7C,EAAE,IAAI,EAAE,WAAW,EAAM,OAAO,EAAE,WAAW,EAAM,GAAG,EAAE,+CAA+C,EAAE;IACzG,EAAE,IAAI,EAAE,aAAa,EAAI,OAAO,EAAE,aAAa,EAAI,GAAG,EAAE,6CAA6C,EAAE;IACvG,EAAE,IAAI,EAAE,UAAU,EAAO,OAAO,EAAE,UAAU,EAAO,GAAG,EAAE,yCAAyC,EAAE;IACnG,EAAE,IAAI,EAAE,aAAa,EAAI,OAAO,EAAE,aAAa,EAAI,GAAG,EAAE,uCAAuC,EAAE;IACjG,EAAE,IAAI,EAAE,aAAa,EAAI,OAAO,EAAE,aAAa,EAAI,GAAG,EAAE,4CAA4C,EAAE;IACtG,EAAE,IAAI,EAAE,WAAW,EAAM,OAAO,EAAE,WAAW,EAAM,GAAG,EAAE,2CAA2C,EAAE;IACrG,EAAE,IAAI,EAAE,aAAa,EAAI,OAAO,EAAE,aAAa,EAAI,GAAG,EAAE,yCAAyC,EAAE;IACnG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,gDAAgD,EAAE;CAClG,CAAC;AAaX,qEAAqE;AAC9D,KAAK,UAAU,aAAa,CAAC,SAAS,GAAG,IAAI;IAClD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,gBAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAA0B,EAAE;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC3E,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;gBACtC,IAAI,EAAE,GAAG,CAAC,MAAM;gBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;gBAClB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC/B,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC1B,CAAC,CAAC,MAAM,KAAK,WAAW;QACtB,CAAC,CAAC,CAAC,CAAC,KAAK;QACT,CAAC,CAAC;YACE,IAAI,EAAE,gBAAQ,CAAC,CAAC,CAAE,CAAC,IAAI;YACvB,OAAO,EAAE,gBAAQ,CAAC,CAAC,CAAE,CAAC,OAAO;YAC7B,MAAM,EAAE,SAAkB;YAC1B,KAAK,EAAE,qBAAqB;YAC5B,UAAU,EAAE,CAAC;SACd,CACN,CAAC;AACJ,CAAC;AAED,+DAA+D;AACxD,KAAK,UAAU,YAAY,CAAC,SAAS,GAAG,IAAI;IACjD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAC9C,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACpF,CAAC"}

package/dist/server/registry/pricing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pricing.d.ts","sourceRoot":"","sources":["../../../src/server/registry/pricing.ts"],"names":[],"mappings":"AAyEA,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO;IAIP,MAAM,CAAC,WAAW,IAAI,aAAa;IAO7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAmCxD,YAAY,IAAI,IAAI;CAQrB"}
+{"version":3,"file":"pricing.d.ts","sourceRoot":"","sources":["../../../src/server/registry/pricing.ts"],"names":[],"mappings":"AAyEA,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO;IAIP,MAAM,CAAC,WAAW,IAAI,aAAa;IAO7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAoCxD,YAAY,IAAI,IAAI;CAQrB"}

package/dist/server/registry/pricing.js

@@ -2,10 +2,15 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PriceRegistry = void 0;
 const PRICE_CACHE_TTL = parseInt(process.env['PRICE_CACHE_TTL_MS'] ?? '60000', 10);
+// Keys MUST match the toolName each tool passes to getPrice()/executeX402Payment().
+// Paid-tool prices MUST equal what sml_discover advertises (advertised == charged).
+// A drift-guard test (tests/unit/pricing-drift.test.ts) enforces both.
 const BASE_PRICES = {
     // Discovery (free)
     sml_discover: '0.00',
     sml_status: '0.00',
+    // APM — Agent Preference Manifest (free preview, paid contract)
+    apm_negotiate: '0.02',
     // SqueezeOS signals
     leviathan_signal: '0.05',
     squeezeos_council: '0.10',
@@ -23,18 +28,15 @@ const BASE_PRICES = {
     crawl_paid_fetch: '0.005',
     // Agent marketplace
     nexus_agent_hire: '0.00',
-    nexus_agent_list: '0.00',
-    nexus_agent_status: '0.00',
     // Ghost Layer (cross-chain)
-    ghost_transfer: '0.02',
+    ghost_route: '0.01',
     ghost_status: '0.00',
-    ghost_routes: '0.00',
     // RLUSD Rails
-    rails_send: '0.01',
+    rails_transfer: '0.01',
     rails_status: '0.00',
     // Launchpad
-    launchpad_create_token: '0.10',
-    launchpad_buy_token: '0.02',
+    launchpad_create: '0.10',
+    launchpad_buy: '0.01',
     launchpad_list: '0.00',
     launchpad_status: '0.00',
     // Copy-Trader
@@ -44,27 +46,25 @@ const BASE_PRICES = {
     backtest_run: '0.05',
     backtest_validate: '0.05',
     backtest_status: '0.00',
-    // Brokers (Tradier)
-    brokers_quote: '0.00',
-    brokers_options_chain: '0.01',
-    brokers_place_order: '0.05',
-    brokers_account: '0.01',
+    // Brokers (Tradier + Robinhood order execution)
+    tradier_order: '0.01',
+    robinhood_order: '0.01',
     // Shadow Desk
-    shadow_query: '0.05',
-    shadow_ingest: '0.02',
+    shadow_query: '0.02',
+    shadow_ingest: '0.01',
     shadow_status: '0.00',
     // Forge (LLM gateway)
-    forge_complete: '0.02',
+    forge_llm: '0.02',
     forge_status: '0.00',
-    // Proof402
-    proof402_get_invoice: '0.00',
-    proof402_verify: '0.00',
-    proof402_credit_score: '0.00',
+    // Proof402 (free)
+    proof_invoice: '0.00',
+    proof_verify: '0.00',
+    proof_credit_score: '0.00',
     // Echo (pattern matching)
-    echo_analogs: '0.05',
+    echo_pattern_match: '0.05',
     // Agent card / identity
+    agentcard_mint: '0.01',
     agentcard_verify: '0.00',
-    agentcard_register: '0.01',
     agentcard_lookup: '0.00',
 };
 class PriceRegistry {
@@ -106,9 +106,10 @@ class PriceRegistry {
             this.cache.set(toolName, { price: fallback, fetchedAt: now - PRICE_CACHE_TTL / 2 });
             return fallback;
         }
-        // Unknown tool — default to free rather than reject
-        this.cache.set(toolName, { price: '0.00', fetchedAt: now });
-        return '0.00';
+        // Unknown tool — reject rather than silently treat as free.
+        // Returning '0.00' here would let any unknown/mistyped tool name be served
+        // for free (revenue + safety leak). Callers that charge must get null and stop.
+        return null;
     }
     seedDefaults() {
         const now = Date.now();

package/dist/server/registry/pricing.js.map

@@ -1 +1 @@
-{"version":3,"file":"pricing.js","sourceRoot":"","sources":["../../../src/server/registry/pricing.ts"],"names":[],"mappings":";;;AAAA,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;AAEnF,MAAM,WAAW,GAA2B;IAC1C,mBAAmB;IACnB,YAAY,EAAE,MAAM;IACpB,UAAU,EAAE,MAAM;IAClB,oBAAoB;IACpB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB,EAAE,MAAM;IACzB,cAAc,EAAE,MAAM;IACtB,iBAAiB,EAAE,MAAM;IACzB,aAAa,EAAE,MAAM;IACrB,iBAAiB,EAAE,MAAM;IACzB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB;IACjB,iBAAiB,EAAE,MAAM;IACzB,sBAAsB,EAAE,MAAM;IAC9B,MAAM;IACN,kBAAkB,EAAE,MAAM;IAC1B,QAAQ;IACR,gBAAgB,EAAE,OAAO;IACzB,oBAAoB;IACpB,gBAAgB,EAAE,MAAM;IACxB,gBAAgB,EAAE,MAAM;IACxB,kBAAkB,EAAE,MAAM;IAC1B,4BAA4B;IAC5B,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACpB,YAAY,EAAE,MAAM;IACpB,cAAc;IACd,UAAU,EAAE,MAAM;IAClB,YAAY,EAAE,MAAM;IACpB,YAAY;IACZ,sBAAsB,EAAE,MAAM;IAC9B,mBAAmB,EAAE,MAAM;IAC3B,cAAc,EAAE,MAAM;IACtB,gBAAgB,EAAE,MAAM;IACxB,cAAc;IACd,oBAAoB,EAAE,MAAM;IAC5B,iBAAiB,EAAE,MAAM;IACzB,WAAW;IACX,YAAY,EAAE,MAAM;IACpB,iBAAiB,EAAE,MAAM;IACzB,eAAe,EAAE,MAAM;IACvB,oBAAoB;IACpB,aAAa,EAAE,MAAM;IACrB,qBAAqB,EAAE,MAAM;IAC7B,mBAAmB,EAAE,MAAM;IAC3B,eAAe,EAAE,MAAM;IACvB,cAAc;IACd,YAAY,EAAE,MAAM;IACpB,aAAa,EAAE,MAAM;IACrB,aAAa,EAAE,MAAM;IACrB,sBAAsB;IACtB,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACpB,WAAW;IACX,oBAAoB,EAAE,MAAM;IAC5B,eAAe,EAAE,MAAM;IACvB,qBAAqB,EAAE,MAAM;IAC7B,0BAA0B;IAC1B,YAAY,EAAE,MAAM;IACpB,wBAAwB;IACxB,gBAAgB,EAAE,MAAM;IACxB,kBAAkB,EAAE,MAAM;IAC1B,gBAAgB,EAAE,MAAM;CACzB,CAAC;AAOF,MAAa,aAAa;IAChB,MAAM,CAAC,QAAQ,CAAgB;IACtB,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,OAAO,CAAS;IAEjC;QACE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,oCAAoC,CAAC;IACrF,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC5B,aAAa,CAAC,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,aAAa,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,eAAe,EAAE,CAAC;YACvD,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,oBAAoB,QAAQ,EAAE,EAAE;gBACrE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;gBACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChE,OAAO,IAAI,CAAC,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;QAED,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,eAAe,GAAG,CAAC,EAAE,CAAC,CAAC;YACpF,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,YAAY;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA3DD,sCA2DC"}
+{"version":3,"file":"pricing.js","sourceRoot":"","sources":["../../../src/server/registry/pricing.ts"],"names":[],"mappings":";;;AAAA,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;AAEnF,oFAAoF;AACpF,oFAAoF;AACpF,uEAAuE;AACvE,MAAM,WAAW,GAA2B;IAC1C,mBAAmB;IACnB,YAAY,EAAE,MAAM;IACpB,UAAU,EAAE,MAAM;IAClB,gEAAgE;IAChE,aAAa,EAAE,MAAM;IACrB,oBAAoB;IACpB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB,EAAE,MAAM;IACzB,cAAc,EAAE,MAAM;IACtB,iBAAiB,EAAE,MAAM;IACzB,aAAa,EAAE,MAAM;IACrB,iBAAiB,EAAE,MAAM;IACzB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB;IACjB,iBAAiB,EAAE,MAAM;IACzB,sBAAsB,EAAE,MAAM;IAC9B,MAAM;IACN,kBAAkB,EAAE,MAAM;IAC1B,QAAQ;IACR,gBAAgB,EAAE,OAAO;IACzB,oBAAoB;IACpB,gBAAgB,EAAE,MAAM;IACxB,4BAA4B;IAC5B,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,MAAM;IACpB,cAAc;IACd,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACpB,YAAY;IACZ,gBAAgB,EAAE,MAAM;IACxB,aAAa,EAAE,MAAM;IACrB,cAAc,EAAE,MAAM;IACtB,gBAAgB,EAAE,MAAM;IACxB,cAAc;IACd,oBAAoB,EAAE,MAAM;IAC5B,iBAAiB,EAAE,MAAM;IACzB,WAAW;IACX,YAAY,EAAE,MAAM;IACpB,iBAAiB,EAAE,MAAM;IACzB,eAAe,EAAE,MAAM;IACvB,gDAAgD;IAChD,aAAa,EAAE,MAAM;IACrB,eAAe,EAAE,MAAM;IACvB,cAAc;IACd,YAAY,EAAE,MAAM;IACpB,aAAa,EAAE,MAAM;IACrB,aAAa,EAAE,MAAM;IACrB,sBAAsB;IACtB,SAAS,EAAE,MAAM;IACjB,YAAY,EAAE,MAAM;IACpB,kBAAkB;IAClB,aAAa,EAAE,MAAM;IACrB,YAAY,EAAE,MAAM;IACpB,kBAAkB,EAAE,MAAM;IAC1B,0BAA0B;IAC1B,kBAAkB,EAAE,MAAM;IAC1B,wBAAwB;IACxB,cAAc,EAAE,MAAM;IACtB,gBAAgB,EAAE,MAAM;IACxB,gBAAgB,EAAE,MAAM;CACzB,CAAC;AAOF,MAAa,aAAa;IAChB,MAAM,CAAC,QAAQ,CAAgB;IACtB,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,OAAO,CAAS;IAEjC;QACE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,oCAAoC,CAAC;IACrF,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC5B,aAAa,CAAC,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,aAAa,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,eAAe,EAAE,CAAC;YACvD,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,oBAAoB,QAAQ,EAAE,EAAE;gBACrE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;gBACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChE,OAAO,IAAI,CAAC,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;QAED,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,eAAe,GAAG,CAAC,EAAE,CAAC,CAAC;YACpF,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,4DAA4D;QAC5D,2EAA2E;QAC3E,gFAAgF;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA5DD,sCA4DC"}

package/dist/server/tools/apm-execute.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerApmExecute(server: McpServer): void;
+//# sourceMappingURL=apm-execute.d.ts.map

package/dist/server/tools/apm-execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apm-execute.d.ts","sourceRoot":"","sources":["../../../src/server/tools/apm-execute.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAuBzE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA8E1D"}

package/dist/server/tools/apm-execute.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerApmExecute = registerApmExecute;
+const zod_1 = require("zod");
+const x402_js_1 = require("../payments/x402.js");
+const rate_limit_js_1 = require("../security/rate-limit.js");
+const sandbox_js_1 = require("../security/sandbox.js");
+const audit_js_1 = require("../security/audit.js");
+const quote_js_1 = require("../apm/quote.js");
+const execute_js_1 = require("../apm/execute.js");
+const ExecuteSchema = zod_1.z.object({
+    quote_canonical: zod_1.z.string().min(2),
+    quote_signature: zod_1.z.string().min(2),
+    tool: zod_1.z.string().min(1),
+    wallet_address: zod_1.z.string().min(1),
+    symbol: zod_1.z.string().optional(),
+});
+const ok = (p) => ({ content: [{ type: 'text', text: JSON.stringify(p, null, 2) }] });
+const fail = (error, extra = {}) => ({
+    content: [{ type: 'text', text: JSON.stringify({ error, ...extra }) }],
+    isError: true,
+});
+function registerApmExecute(server) {
+    const audit = audit_js_1.AuditLogger.getInstance();
+    server.tool('apm_execute', "Execute a tool recommended by apm_negotiate under its price-locked signed quote, collecting the agreed brokerage. Pass the quote's `canonical` + `signature` (from the Service Capability Contract), the tool name, and any args (e.g. `symbol`). Charges the locked price + brokerage, runs the tool, returns the result. Requires APM_QUOTE_SECRET on the gateway.", {
+        quote_canonical: zod_1.z.string().describe('The `quote.canonical` string from apm_negotiate (mode=contract).'),
+        quote_signature: zod_1.z.string().describe('The `quote.signature` from apm_negotiate — proves the SML price-lock.'),
+        tool: zod_1.z.string().describe('Tool to execute. Must match the quote and be brokerable (e.g. squeezeos_council).'),
+        wallet_address: zod_1.z.string().describe('Wallet that pays the brokered total.'),
+        symbol: zod_1.z.string().optional().describe('Ticker symbol, when the tool needs one (e.g. squeezeos_council).'),
+    }, async (rawArgs) => {
+        const args = sandbox_js_1.Sandbox.validate(ExecuteSchema, rawArgs);
+        if (!rate_limit_js_1.RateLimiter.getInstance().checkTool('apm_execute')) {
+            return fail('rate_limit_exceeded', { retry_after: 60 });
+        }
+        // 1. Verify the price-locked quote (needs APM_QUOTE_SECRET set on the gateway).
+        const check = (0, quote_js_1.verifyAndParseQuote)(args.quote_canonical, args.quote_signature);
+        if (!check.valid || !check.quote) {
+            return fail('quote_invalid', {
+                reason: check.reason,
+                hint: 'Signature failed. Ensure APM_QUOTE_SECRET is set and you passed the exact canonical+signature from apm_negotiate (mode=contract).',
+            });
+        }
+        if (check.expired) {
+            return fail('quote_expired', { expires_at: check.quote.expires_at, hint: 'Re-run apm_negotiate (mode=contract) for a fresh quote.' });
+        }
+        if (check.quote.tool !== args.tool) {
+            return fail('tool_quote_mismatch', { quote_tool: check.quote.tool, requested_tool: args.tool });
+        }
+        if (!(0, execute_js_1.isBrokerable)(args.tool)) {
+            return fail('tool_not_brokerable', { tool: args.tool, brokerable: (0, execute_js_1.brokerableTools)(), hint: 'apm_execute brokers the live SqueezeOS family today; more tools coming.' });
+        }
+        // 2. Collect locked price + brokerage (amount integrity = the SML-signed quote).
+        const total = (0, execute_js_1.brokeredTotal)(check.quote.price_usd, check.quote.brokerage_commission_pct);
+        let payment;
+        try {
+            payment = await (0, x402_js_1.executeBrokeredPayment)({ amount: total, toolName: `apm_execute:${args.tool}` });
+        }
+        catch (err) {
+            audit.warn('apm_execute_payment_fail', { error: String(err) });
+            return fail('payment_failed', { message: String(err) });
+        }
+        // 3. Run the brokered tool through SML's own paid path.
+        try {
+            const data = await execute_js_1.BROKERABLE_TOOLS[args.tool]({ symbol: args.symbol, wallet_address: args.wallet_address });
+            audit.info('apm_execute_success', { tool: args.tool, receiptId: payment.receiptId });
+            return ok({
+                tool: args.tool,
+                data,
+                brokerage: {
+                    locked_price_usd: check.quote.price_usd,
+                    commission_pct: check.quote.brokerage_commission_pct,
+                    total_charged_usd: total,
+                },
+                _meta: {
+                    receipt_id: payment.receiptId,
+                    tx_hash: payment.txHash,
+                    chain: payment.chain,
+                    amount_paid: `${payment.amountPaid} ${payment.currency}`,
+                    timestamp: payment.timestamp,
+                },
+            });
+        }
+        catch (err) {
+            audit.error('apm_execute_tool_fail', { tool: args.tool, error: String(err) });
+            return fail('tool_execution_failed', {
+                message: String(err),
+                receipt_id: payment.receiptId,
+                note: 'Payment was collected; the brokered tool call failed (e.g. backend offline). Receipt retained.',
+            });
+        }
+    });
+}
+//# sourceMappingURL=apm-execute.js.map

package/dist/server/tools/apm-execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apm-execute.js","sourceRoot":"","sources":["../../../src/server/tools/apm-execute.ts"],"names":[],"mappings":";;AAwBA,gDA8EC;AAtGD,6BAAwB;AAExB,iDAA6D;AAC7D,6DAAwD;AACxD,uDAAiD;AACjD,mDAAmD;AACnD,8CAAsD;AACtD,kDAAmG;AAEnG,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7B,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAGH,MAAM,EAAE,GAAG,CAAC,CAAU,EAAc,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC3G,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,QAAiC,EAAE,EAAc,EAAE,CAAC,CAAC;IAChF,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,CAAC;IACtE,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AAEH,SAAgB,kBAAkB,CAAC,MAAiB;IAClD,MAAM,KAAK,GAAG,sBAAW,CAAC,WAAW,EAAE,CAAC;IAExC,MAAM,CAAC,IAAI,CACT,aAAa,EACb,sWAAsW,EACtW;QACE,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kEAAkE,CAAC;QACxG,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uEAAuE,CAAC;QAC7G,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mFAAmF,CAAC;QAC9G,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QAC3E,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kEAAkE,CAAC;KAC3G,EACD,KAAK,EAAE,OAAO,EAAuB,EAAE;QACrC,MAAM,IAAI,GAAG,oBAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAEtD,IAAI,CAAC,2BAAW,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC,qBAAqB,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,gFAAgF;QAChF,MAAM,KAAK,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9E,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,eAAe,EAAE;gBAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,mIAAmI;aAC1I,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,yDAAyD,EAAE,CAAC,CAAC;QACxI,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,qBAAqB,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,CAAC,IAAA,yBAAY,EAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAA,4BAAe,GAAE,EAAE,IAAI,EAAE,yEAAyE,EAAE,CAAC,CAAC;QAC1K,CAAC;QAED,iFAAiF;QACjF,MAAM,KAAK,GAAG,IAAA,0BAAa,EAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAA,gCAAsB,EAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,wDAAwD;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,6BAAgB,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC9G,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACrF,OAAO,EAAE,CAAC;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI;gBACJ,SAAS,EAAE;oBACT,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS;oBACvC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,wBAAwB;oBACpD,iBAAiB,EAAE,KAAK;iBACzB;gBACD,KAAK,EAAE;oBACL,UAAU,EAAE,OAAO,CAAC,SAAS;oBAC7B,OAAO,EAAE,OAAO,CAAC,MAAM;oBACvB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,WAAW,EAAE,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,EAAE;oBACxD,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9E,OAAO,IAAI,CAAC,uBAAuB,EAAE;gBACnC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC;gBACpB,UAAU,EAAE,OAAO,CAAC,SAAS;gBAC7B,IAAI,EAAE,gGAAgG;aACvG,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/server/tools/apm.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerApm(server: McpServer): void;
+//# sourceMappingURL=apm.d.ts.map

package/dist/server/tools/apm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apm.d.ts","sourceRoot":"","sources":["../../../src/server/tools/apm.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAyBzE,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA8HnD"}