@scriptmasterlabs/mcp-x402 2.1.1 → 2.1.2

package/dist/lib/sml-api/xdeo.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.XdeoClient = void 0;
+class XdeoClient {
+    static instance;
+    baseUrl;
+    constructor() {
+        this.baseUrl = process.env['SML_API_BASE'] ?? 'https://api.scriptmasterlabs.com';
+    }
+    static getInstance() {
+        if (!XdeoClient.instance) {
+            XdeoClient.instance = new XdeoClient();
+        }
+        return XdeoClient.instance;
+    }
+    async getEstimate(params) {
+        const res = await fetch(`${this.baseUrl}/xdeo/v1/estimate`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                ticker: params.ticker,
+                fiscal_quarter: params.fiscalQuarter,
+                estimate_type: params.estimateType,
+            }),
+            signal: AbortSignal.timeout(10_000),
+        });
+        if (!res.ok) {
+            throw new Error(`xDEO API error: HTTP ${res.status}`);
+        }
+        return res.json();
+    }
+}
+exports.XdeoClient = XdeoClient;
+//# sourceMappingURL=xdeo.js.map

package/dist/lib/sml-api/xdeo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xdeo.js","sourceRoot":"","sources":["../../../src/lib/sml-api/xdeo.ts"],"names":[],"mappings":";;;AAMA,MAAa,UAAU;IACb,MAAM,CAAC,QAAQ,CAAa;IACnB,OAAO,CAAS;IAEjC;QACE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,kCAAkC,CAAC;IACnF,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACzB,UAAU,CAAC,QAAQ,GAAG,IAAI,UAAU,EAAE,CAAC;QACzC,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAA0B;QAC1C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,mBAAmB,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,cAAc,EAAE,MAAM,CAAC,aAAa;gBACpC,aAAa,EAAE,MAAM,CAAC,YAAY;aACnC,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;CACF;AAjCD,gCAiCC"}

package/dist/lib/sml-api/xmit.d.ts

@@ -0,0 +1,13 @@
+export interface XmitDecodeParams {
+    filingUrl: string;
+    parseTarget: 'executive_pay' | 'holdings' | 'ownership_changes' | 'all';
+    format: 'json' | 'markdown';
+}
+export declare class XmitClient {
+    private static instance;
+    private readonly baseUrl;
+    private constructor();
+    static getInstance(): XmitClient;
+    decode(params: XmitDecodeParams): Promise<unknown>;
+}
+//# sourceMappingURL=xmit.d.ts.map

package/dist/lib/sml-api/xmit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xmit.d.ts","sourceRoot":"","sources":["../../../src/lib/sml-api/xmit.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,eAAe,GAAG,UAAU,GAAG,mBAAmB,GAAG,KAAK,CAAC;IACxE,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;CAC7B;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO;IAIP,MAAM,CAAC,WAAW,IAAI,UAAU;IAO1B,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAkBzD"}

package/dist/lib/sml-api/xmit.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.XmitClient = void 0;
+class XmitClient {
+    static instance;
+    baseUrl;
+    constructor() {
+        this.baseUrl = process.env['SML_API_BASE'] ?? 'https://api.scriptmasterlabs.com';
+    }
+    static getInstance() {
+        if (!XmitClient.instance) {
+            XmitClient.instance = new XmitClient();
+        }
+        return XmitClient.instance;
+    }
+    async decode(params) {
+        const res = await fetch(`${this.baseUrl}/xmit/v1/decode`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                filing_url: params.filingUrl,
+                parse_target: params.parseTarget,
+                format: params.format,
+            }),
+            signal: AbortSignal.timeout(30_000),
+        });
+        if (!res.ok) {
+            throw new Error(`xMIT API error: HTTP ${res.status}`);
+        }
+        return res.json();
+    }
+}
+exports.XmitClient = XmitClient;
+//# sourceMappingURL=xmit.js.map

package/dist/lib/sml-api/xmit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xmit.js","sourceRoot":"","sources":["../../../src/lib/sml-api/xmit.ts"],"names":[],"mappings":";;;AAMA,MAAa,UAAU;IACb,MAAM,CAAC,QAAQ,CAAa;IACnB,OAAO,CAAS;IAEjC;QACE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,kCAAkC,CAAC;IACnF,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACzB,UAAU,CAAC,QAAQ,GAAG,IAAI,UAAU,EAAE,CAAC;QACzC,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAwB;QACnC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,iBAAiB,EAAE;YACxD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;CACF;AAjCD,gCAiCC"}

package/dist/server/apm/capabilities.d.ts

@@ -0,0 +1,31 @@
+/**
+ * APM capability index — the real, curated map of what each LIVE SML tool can do,
+ * how fresh its data is, which payment chains it settles on, and what it costs.
+ *
+ * Prices mirror src/server/registry/pricing.ts (BASE_PRICES). `product` MUST match a
+ * product key in src/server/registry/backends.ts so live-status can be resolved.
+ *
+ * This is the matchable surface APM negotiates against — not a simulation.
+ */
+export interface Capability {
+    /** MCP tool name an agent would ultimately call. */
+    tool: string;
+    /** Backend product key (must match backends.ts `product`). */
+    product: string;
+    /** True if calling the tool costs USDC. */
+    paid: boolean;
+    /** Base price in USDC (string, '0.00' for free tools). */
+    basePrice: string;
+    /** Payment chains this tool settles on. Data tools accept all three. */
+    paymentChains: string[];
+    /** Worst-case data staleness in seconds (0 = live/realtime). */
+    freshnessSec: number;
+    /** True if the tool cites authoritative sources (e.g. SEC filings). */
+    attribution: boolean;
+    /** Match keywords. */
+    tags: string[];
+    /** One-line description. */
+    summary: string;
+}
+export declare const CAPABILITIES: Capability[];
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/server/apm/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../../src/server/apm/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,UAAU;IACzB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,IAAI,EAAE,OAAO,CAAC;IACd,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,WAAW,EAAE,OAAO,CAAC;IACrB,sBAAsB;IACtB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB;AAID,eAAO,MAAM,YAAY,EAAE,UAAU,EAsJpC,CAAC"}

package/dist/server/apm/capabilities.js

@@ -0,0 +1,157 @@
+"use strict";
+/**
+ * APM capability index — the real, curated map of what each LIVE SML tool can do,
+ * how fresh its data is, which payment chains it settles on, and what it costs.
+ *
+ * Prices mirror src/server/registry/pricing.ts (BASE_PRICES). `product` MUST match a
+ * product key in src/server/registry/backends.ts so live-status can be resolved.
+ *
+ * This is the matchable surface APM negotiates against — not a simulation.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CAPABILITIES = void 0;
+const ALL_CHAINS = ['base', 'xrpl', 'solana'];
+exports.CAPABILITIES = [
+    // ── SqueezeOS (squeezeos-api.onrender.com) ────────────────────────────────
+    {
+        tool: 'squeezeos_council', product: 'SqueezeOS', paid: true, basePrice: '0.10',
+        paymentChains: ALL_CHAINS, freshnessSec: 60, attribution: false,
+        tags: ['squeeze', 'signal', 'equity', 'equities', 'stock', 'stocks', 'ticker', 'council', 'verdict', 'momentum', 'trading', 'ai', 'confidence'],
+        summary: 'Multi-engine AI council verdict for any symbol — highest-confidence squeeze signal.',
+    },
+    {
+        tool: 'squeezeos_scan', product: 'SqueezeOS', paid: true, basePrice: '0.05',
+        paymentChains: ALL_CHAINS, freshnessSec: 300, attribution: false,
+        tags: ['scan', 'screener', 'candidates', 'squeeze', 'list', 'stocks', 'ranked', 'discover'],
+        summary: 'Full $1–$50 squeeze candidate scanner — ranked by squeeze score.',
+    },
+    {
+        tool: 'squeezeos_options', product: 'SqueezeOS', paid: true, basePrice: '0.05',
+        paymentChains: ALL_CHAINS, freshnessSec: 60, attribution: false,
+        tags: ['options', 'flow', 'darkpool', 'sweep', 'greeks', 'derivatives', 'unusual'],
+        summary: 'Institutional options flow analysis — dark pool and sweep detection.',
+    },
+    {
+        tool: 'squeezeos_iwm', product: 'SqueezeOS', paid: true, basePrice: '0.03',
+        paymentChains: ALL_CHAINS, freshnessSec: 5, attribution: false,
+        tags: ['iwm', '0dte', 'options', 'greeks', 'realtime', 'index', 'russell', 'probability'],
+        summary: 'IWM 0DTE contract scorer — real-time Greeks and probability.',
+    },
+    {
+        tool: 'squeezeos_preview', product: 'SqueezeOS', paid: false, basePrice: '0.00',
+        paymentChains: ALL_CHAINS, freshnessSec: 900, attribution: false,
+        tags: ['preview', 'bias', 'signal', 'free', 'ticker', 'sample'],
+        summary: 'Free signal bias preview for any ticker (15-min cache).',
+    },
+    {
+        tool: 'squeezeos_oracle', product: 'SqueezeOS', paid: false, basePrice: '0.00',
+        paymentChains: ALL_CHAINS, freshnessSec: 5, attribution: false,
+        tags: ['oracle', 'directive', 'signal', 'aggregate', 'free', 'fractal'],
+        summary: 'Free oracle directive — aggregated signal across all engines.',
+    },
+    // ── Core SML Intelligence (served by squeezeos-api) ───────────────────────
+    {
+        tool: 'leviathan_signal', product: 'SqueezeOS', paid: true, basePrice: '0.05',
+        paymentChains: ALL_CHAINS, freshnessSec: 60, attribution: false,
+        tags: ['squeeze', 'signal', 'institutional', 'verdict', 'ticker', 'momentum', 'leviathan', 'proprietary'],
+        summary: 'Institutional squeeze signals — proprietary multi-engine verdict for any ticker.',
+    },
+    {
+        tool: 'xmit_edgar_decode', product: 'SqueezeOS', paid: true, basePrice: '0.02',
+        paymentChains: ALL_CHAINS, freshnessSec: 86400, attribution: true,
+        tags: ['sec', 'edgar', 'filing', 'filings', '13f', '13d', 'def14a', 'parse', 'proxy', 'institutional', 'holdings'],
+        summary: 'Parse SEC DEF 14A / 13F / 13D filings — raw text never leaves SML servers.',
+    },
+    {
+        tool: 'xdeo_earnings_estimate', product: 'SqueezeOS', paid: true, basePrice: '0.02',
+        paymentChains: ALL_CHAINS, freshnessSec: 3600, attribution: true,
+        tags: ['earnings', 'estimate', 'oracle', 'consensus', 'eps', 'finance', 'forecast'],
+        summary: 'Decentralized earnings oracle — consensus estimate across data sources.',
+    },
+    {
+        tool: 'ftd_threshold_scan', product: 'SqueezeOS', paid: false, basePrice: '0.05',
+        paymentChains: ALL_CHAINS, freshnessSec: 900, attribution: true,
+        tags: ['ftd', 'fail', 'deliver', 'regsho', 'threshold', 'sec', 'short', 'naked'],
+        summary: 'SEC Reg SHO FTD data — threshold alerts free, full scanner $0.05.',
+    },
+    {
+        tool: 'crawl_paid_fetch', product: 'SqueezeOS', paid: true, basePrice: '0.005',
+        paymentChains: ALL_CHAINS, freshnessSec: 0, attribution: false,
+        tags: ['crawl', 'scrape', 'fetch', 'web', 'url', 'page', 'data', 'http'],
+        summary: 'Pay-per-fetch web scraping for AI agents ($0.005/fetch).',
+    },
+    {
+        tool: 'nexus_agent_hire', product: 'SqueezeOS', paid: false, basePrice: '0.00',
+        paymentChains: ALL_CHAINS, freshnessSec: 0, attribution: false,
+        tags: ['agent', 'hire', 'marketplace', 'job', 'delegate', 'a2a', 'workforce'],
+        summary: 'Agent job marketplace — browse free, hire charges 5% commission.',
+    },
+    // ── Ghost Layer (cross-chain settlement) ──────────────────────────────────
+    {
+        tool: 'ghost_route', product: 'Ghost Layer', paid: true, basePrice: '0.01',
+        paymentChains: ['xrpl', 'base'], freshnessSec: 0, attribution: false,
+        tags: ['route', 'cross-chain', 'crosschain', 'bridge', 'settlement', 'xrpl', 'base', 'toll', 'transfer', 'private'],
+        summary: 'Route a transaction through the dual-chain XRPL+Base gateway with toll collection.',
+    },
+    // ── 402Proof (payment + trust) ────────────────────────────────────────────
+    {
+        tool: 'proof_invoice', product: '402Proof', paid: false, basePrice: '0.00',
+        paymentChains: ALL_CHAINS, freshnessSec: 0, attribution: false,
+        tags: ['invoice', 'x402', 'payment', 'bill', 'quote', 'pay'],
+        summary: 'Generate an x402 payment invoice for any SML endpoint.',
+    },
+    {
+        tool: 'proof_verify', product: '402Proof', paid: false, basePrice: '0.00',
+        paymentChains: ALL_CHAINS, freshnessSec: 0, attribution: false,
+        tags: ['verify', 'payment', 'tx', 'receipt', 'confirm', 'settlement'],
+        summary: 'Verify an XRPL or Base payment tx_hash — returns receipt and confirmation.',
+    },
+    {
+        tool: 'proof_credit_score', product: '402Proof', paid: false, basePrice: '0.00',
+        paymentChains: ALL_CHAINS, freshnessSec: 0, attribution: false,
+        tags: ['credit', 'score', 'reputation', 'bureau', 'trust', 'history', 'identity'],
+        summary: 'Get an agent credit score (300–850) and payment history by wallet.',
+    },
+    // ── RLUSD Rails (XRPL/Xahau settlement) ───────────────────────────────────
+    {
+        tool: 'rails_transfer', product: 'RLUSD Rails', paid: true, basePrice: '0.01',
+        paymentChains: ['xrpl'], freshnessSec: 0, attribution: false,
+        tags: ['rlusd', 'xrp', 'transfer', 'remittance', 'payment', 'settlement', 'xrpl', 'xahau', 'send'],
+        summary: 'Initiate an RLUSD or XRP transfer via SML Rails — returns tx_hash.',
+    },
+    // ── XRPL Copy-Trader ──────────────────────────────────────────────────────
+    {
+        tool: 'copytrader_subscribe', product: 'Copy-Trader', paid: true, basePrice: '0.05',
+        paymentChains: ['xrpl'], freshnessSec: 60, attribution: false,
+        tags: ['whale', 'copy', 'mirror', 'trade', 'xrpl', 'follow', 'position'],
+        summary: 'Subscribe to mirror a whale wallet — auto-copies future positions.',
+    },
+    // ── Memecoin Launchpad ────────────────────────────────────────────────────
+    {
+        tool: 'launchpad_create', product: 'Launchpad', paid: true, basePrice: '0.10',
+        paymentChains: ['xrpl'], freshnessSec: 0, attribution: false,
+        tags: ['memecoin', 'token', 'launch', 'create', 'bonding', 'curve', 'xrpl', 'mint'],
+        summary: 'Create a new memecoin with a bonding curve — supply, curve, metadata.',
+    },
+    {
+        tool: 'launchpad_buy', product: 'Launchpad', paid: true, basePrice: '0.01',
+        paymentChains: ['xrpl'], freshnessSec: 5, attribution: false,
+        tags: ['memecoin', 'token', 'buy', 'bonding', 'curve', 'xrpl', 'trade'],
+        summary: 'Buy tokens on a memecoin bonding curve — returns executed price and tx.',
+    },
+    // ── Shadow Desk (alpha intelligence) ──────────────────────────────────────
+    {
+        tool: 'shadow_query', product: 'Shadow Desk', paid: true, basePrice: '0.02',
+        paymentChains: ALL_CHAINS, freshnessSec: 300, attribution: false,
+        tags: ['alpha', 'signal', 'intelligence', 'feed', 'query', 'shadow', 'edge'],
+        summary: 'Query signal intelligence from the Shadow Desk alpha feed.',
+    },
+    // ── Forge Gateway (BYOK LLM proxy) ────────────────────────────────────────
+    {
+        tool: 'forge_llm', product: 'Forge Gateway', paid: true, basePrice: '0.02',
+        paymentChains: ALL_CHAINS, freshnessSec: 0, attribution: false,
+        tags: ['llm', 'ai', 'model', 'inference', 'completion', 'byok', 'proxy', 'gpt', 'claude'],
+        summary: 'BYOK LLM proxy — call any AI model, pay per request via x402.',
+    },
+];
+//# sourceMappingURL=capabilities.js.map

package/dist/server/apm/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../../src/server/apm/capabilities.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAuBH,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAEjC,QAAA,YAAY,GAAiB;IACxC,6EAA6E;IAC7E;QACE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QAC9E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK;QAC/D,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC;QAC/I,OAAO,EAAE,qFAAqF;KAC/F;IACD;QACE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QAC3E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK;QAChE,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC;QAC3F,OAAO,EAAE,kEAAkE;KAC5E;IACD;QACE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QAC9E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK;QAC/D,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC;QAClF,OAAO,EAAE,sEAAsE;KAChF;IACD;QACE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QAC1E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK;QAC9D,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC;QACzF,OAAO,EAAE,8DAA8D;KACxE;IACD;QACE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM;QAC/E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK;QAChE,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAC/D,OAAO,EAAE,yDAAyD;KACnE;IACD;QACE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM;QAC9E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK;QAC9D,IAAI,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC;QACvE,OAAO,EAAE,+DAA+D;KACzE;IAED,6EAA6E;IAC7E;QACE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QAC7E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK;QAC/D,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC;QACzG,OAAO,EAAE,kFAAkF;KAC5F;IACD;QACE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QAC9E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI;QACjE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,CAAC;QAClH,OAAO,EAAE,4EAA4E;KACtF;IACD;QACE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QACnF,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI;QAChE,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC;QACnF,OAAO,EAAE,yEAAyE;KACnF;IACD;QACE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM;QAChF,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI;QAC/D,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;QAChF,OAAO,EAAE,mEAAmE;KAC7E;IACD;QACE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO;QAC9E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK;QAC9D,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QACxE,OAAO,EAAE,0DAA0D;KACpE;IACD;QACE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM;QAC9E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK;QAC9D,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC;QAC7E,OAAO,EAAE,kEAAkE;KAC5E;IAED,6EAA6E;IAC7E;QACE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QAC1E,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK;QACpE,IAAI,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC;QACnH,OAAO,EAAE,oFAAoF;KAC9F;IAED,6EAA6E;IAC7E;QACE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM;QAC1E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK;QAC9D,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;QAC5D,OAAO,EAAE,wDAAwD;KAClE;IACD;QACE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM;QACzE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK;QAC9D,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC;QACrE,OAAO,EAAE,4EAA4E;KACtF;IACD;QACE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM;QAC/E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK;QAC9D,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC;QACjF,OAAO,EAAE,oEAAoE;KAC9E;IAED,6EAA6E;IAC7E;QACE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QAC7E,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK;QAC5D,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QAClG,OAAO,EAAE,oEAAoE;KAC9E;IAED,6EAA6E;IAC7E;QACE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QACnF,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK;QAC7D,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;QACxE,OAAO,EAAE,oEAAoE;KAC9E;IAED,6EAA6E;IAC7E;QACE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QAC7E,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK;QAC5D,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC;QACnF,OAAO,EAAE,uEAAuE;KACjF;IACD;QACE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QAC1E,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK;QAC5D,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;QACvE,OAAO,EAAE,yEAAyE;KACnF;IAED,6EAA6E;IAC7E;QACE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QAC3E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK;QAChE,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC;QAC5E,OAAO,EAAE,4DAA4D;KACtE;IAED,6EAA6E;IAC7E;QACE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM;QAC1E,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK;QAC9D,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC;QACzF,OAAO,EAAE,+DAA+D;KACzE;CACF,CAAC"}

package/dist/server/apm/execute.d.ts

@@ -0,0 +1,18 @@
+/**
+ * APM execution layer — what apm_execute can broker today and the brokerage math.
+ *
+ * v1 brokers the LIVE SqueezeOS family (verified online). Each executor maps a tool
+ * name to the real SML API client call; apm_execute collects the locked price +
+ * brokerage, then runs the tool through SML's own paid path.
+ */
+export interface BrokerArgs {
+    symbol?: string;
+    wallet_address: string;
+}
+/** Locked price * (1 + brokerage%), at USDC-native (6-decimal) precision. */
+export declare function brokeredTotal(priceUsd: string, brokeragePct: number): string;
+/** Tools apm_execute can broker right now (live SqueezeOS family). */
+export declare const BROKERABLE_TOOLS: Record<string, (args: BrokerArgs) => Promise<unknown>>;
+export declare function isBrokerable(tool: string): boolean;
+export declare function brokerableTools(): string[];
+//# sourceMappingURL=execute.d.ts.map

package/dist/server/apm/execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../../src/server/apm/execute.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAG5E;AAED,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAQnF,CAAC;AAEF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElD;AAED,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAE1C"}

package/dist/server/apm/execute.js

@@ -0,0 +1,37 @@
+"use strict";
+/**
+ * APM execution layer — what apm_execute can broker today and the brokerage math.
+ *
+ * v1 brokers the LIVE SqueezeOS family (verified online). Each executor maps a tool
+ * name to the real SML API client call; apm_execute collects the locked price +
+ * brokerage, then runs the tool through SML's own paid path.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BROKERABLE_TOOLS = void 0;
+exports.brokeredTotal = brokeredTotal;
+exports.isBrokerable = isBrokerable;
+exports.brokerableTools = brokerableTools;
+const squeezeos_js_1 = require("../../lib/sml-api/squeezeos.js");
+/** Locked price * (1 + brokerage%), at USDC-native (6-decimal) precision. */
+function brokeredTotal(priceUsd, brokeragePct) {
+    const total = parseFloat(priceUsd) * (1 + brokeragePct / 100);
+    return (Math.round(total * 1e6) / 1e6).toString();
+}
+/** Tools apm_execute can broker right now (live SqueezeOS family). */
+exports.BROKERABLE_TOOLS = {
+    squeezeos_council: (a) => {
+        if (!a.symbol)
+            throw new Error('squeezeos_council requires a `symbol`.');
+        return squeezeos_js_1.SqueezeOSAPI.council(a.symbol, a.wallet_address);
+    },
+    squeezeos_scan: (a) => squeezeos_js_1.SqueezeOSAPI.scan(a.wallet_address),
+    squeezeos_options: (a) => squeezeos_js_1.SqueezeOSAPI.options(a.wallet_address),
+    squeezeos_iwm: (a) => squeezeos_js_1.SqueezeOSAPI.iwm(a.wallet_address),
+};
+function isBrokerable(tool) {
+    return Object.prototype.hasOwnProperty.call(exports.BROKERABLE_TOOLS, tool);
+}
+function brokerableTools() {
+    return Object.keys(exports.BROKERABLE_TOOLS);
+}
+//# sourceMappingURL=execute.js.map

package/dist/server/apm/execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../../src/server/apm/execute.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAUH,sCAGC;AAaD,oCAEC;AAED,0CAEC;AA9BD,iEAA8D;AAO9D,6EAA6E;AAC7E,SAAgB,aAAa,CAAC,QAAgB,EAAE,YAAoB;IAClE,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,YAAY,GAAG,GAAG,CAAC,CAAC;IAC9D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;AACpD,CAAC;AAED,sEAAsE;AACzD,QAAA,gBAAgB,GAA2D;IACtF,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACzE,OAAO,2BAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC;IAC1D,CAAC;IACD,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,2BAAY,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;IAC1D,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,2BAAY,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;IAChE,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,2BAAY,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC;CACzD,CAAC;AAEF,SAAgB,YAAY,CAAC,IAAY;IACvC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,wBAAgB,EAAE,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,SAAgB,eAAe;IAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,wBAAgB,CAAC,CAAC;AACvC,CAAC"}

package/dist/server/apm/matcher.d.ts

@@ -0,0 +1,17 @@
+/**
+ * APM matcher — deterministic, pure functions that turn an agent's stated need
+ * into a ranked list of SML capabilities with per-constraint fit. No randomness,
+ * no network: live-status is injected by the caller.
+ */
+import type { Capability } from './capabilities.js';
+import type { Constraints, ConstraintFit, ScoredMatch } from './schema.js';
+export declare function tokenize(text: string): string[];
+/** Keyword overlap score between a need and a capability. Tag hits weigh double. */
+export declare function scoreCapability(cap: Capability, needTokens: string[]): number;
+export declare function evaluateFit(cap: Capability, c: Constraints): ConstraintFit;
+/**
+ * Rank capabilities against a need. Returns only positive-score matches,
+ * sorted by score desc, then price asc. `live` is the set of online product keys.
+ */
+export declare function matchManifest(need: string, constraints: Constraints, capabilities: Capability[], live: Set<string>): ScoredMatch[];
+//# sourceMappingURL=matcher.d.ts.map

package/dist/server/apm/matcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matcher.d.ts","sourceRoot":"","sources":["../../../src/server/apm/matcher.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE3E,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAE/C;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAc7E;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,GAAG,aAAa,CAgB1E;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,WAAW,EACxB,YAAY,EAAE,UAAU,EAAE,EAC1B,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAChB,WAAW,EAAE,CAyBf"}

package/dist/server/apm/matcher.js

@@ -0,0 +1,71 @@
+"use strict";
+/**
+ * APM matcher — deterministic, pure functions that turn an agent's stated need
+ * into a ranked list of SML capabilities with per-constraint fit. No randomness,
+ * no network: live-status is injected by the caller.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tokenize = tokenize;
+exports.scoreCapability = scoreCapability;
+exports.evaluateFit = evaluateFit;
+exports.matchManifest = matchManifest;
+function tokenize(text) {
+    return text.toLowerCase().match(/[a-z0-9]+/g) ?? [];
+}
+/** Keyword overlap score between a need and a capability. Tag hits weigh double. */
+function scoreCapability(cap, needTokens) {
+    const haystack = new Set([
+        ...cap.tags,
+        ...tokenize(cap.tool),
+        ...tokenize(cap.summary),
+        ...tokenize(cap.product),
+    ]);
+    const tagSet = new Set(cap.tags);
+    let score = 0;
+    for (const token of needTokens) {
+        if (haystack.has(token))
+            score += 1;
+        if (tagSet.has(token))
+            score += 1; // tags are the strongest signal
+    }
+    return score;
+}
+function evaluateFit(cap, c) {
+    const price = c.max_price_usd === undefined || Number(cap.basePrice) <= c.max_price_usd;
+    const chain = !cap.paid ||
+        c.chains_accepted === undefined ||
+        c.chains_accepted.length === 0 ||
+        cap.paymentChains.some((ch) => c.chains_accepted.includes(ch));
+    const freshness = c.max_freshness_sec === undefined || cap.freshnessSec <= c.max_freshness_sec;
+    const attribution = c.needs_attribution !== true || cap.attribution === true;
+    return { price, chain, freshness, attribution };
+}
+/**
+ * Rank capabilities against a need. Returns only positive-score matches,
+ * sorted by score desc, then price asc. `live` is the set of online product keys.
+ */
+function matchManifest(need, constraints, capabilities, live) {
+    const tokens = tokenize(need);
+    return capabilities
+        .map((cap) => {
+        const score = scoreCapability(cap, tokens);
+        const fits = evaluateFit(cap, constraints);
+        return {
+            tool: cap.tool,
+            product: cap.product,
+            summary: cap.summary,
+            paid: cap.paid,
+            price_usd: cap.basePrice,
+            payment_chains: cap.paymentChains,
+            freshness_sec: cap.freshnessSec,
+            attribution: cap.attribution,
+            live: live.has(cap.product),
+            score,
+            fits,
+            meets_all_constraints: fits.price && fits.chain && fits.freshness && fits.attribution,
+        };
+    })
+        .filter((m) => m.score > 0)
+        .sort((a, b) => b.score - a.score || Number(a.price_usd) - Number(b.price_usd));
+}
+//# sourceMappingURL=matcher.js.map

package/dist/server/apm/matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matcher.js","sourceRoot":"","sources":["../../../src/server/apm/matcher.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAKH,4BAEC;AAGD,0CAcC;AAED,kCAgBC;AAMD,sCA8BC;AAzED,SAAgB,QAAQ,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;AACtD,CAAC;AAED,oFAAoF;AACpF,SAAgB,eAAe,CAAC,GAAe,EAAE,UAAoB;IACnE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS;QAC/B,GAAG,GAAG,CAAC,IAAI;QACX,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QACrB,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;QACxB,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;KACzB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC,CAAC,gCAAgC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,WAAW,CAAC,GAAe,EAAE,CAAc;IACzD,MAAM,KAAK,GACT,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;IAE5E,MAAM,KAAK,GACT,CAAC,GAAG,CAAC,IAAI;QACT,CAAC,CAAC,eAAe,KAAK,SAAS;QAC/B,CAAC,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QAC9B,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,eAAgB,CAAC,QAAQ,CAAC,EAAgC,CAAC,CAAC,CAAC;IAEhG,MAAM,SAAS,GACb,CAAC,CAAC,iBAAiB,KAAK,SAAS,IAAI,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,iBAAiB,CAAC;IAE/E,MAAM,WAAW,GAAG,CAAC,CAAC,iBAAiB,KAAK,IAAI,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC;IAE7E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAC3B,IAAY,EACZ,WAAwB,EACxB,YAA0B,EAC1B,IAAiB;IAEjB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE9B,OAAO,YAAY;SAChB,GAAG,CAAC,CAAC,GAAG,EAAe,EAAE;QACxB,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3C,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,cAAc,EAAE,GAAG,CAAC,aAAa;YACjC,aAAa,EAAE,GAAG,CAAC,YAAY;YAC/B,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAC3B,KAAK;YACL,IAAI;YACJ,qBAAqB,EACnB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW;SACjE,CAAC;IACJ,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;SAC1B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACpF,CAAC"}

package/dist/server/apm/quote.d.ts

@@ -0,0 +1,53 @@
+/**
+ * APM price-locked quote — a real, verifiable HMAC-signed quote.
+ *
+ * The quote binds {tool, price, chains, brokerage, expiry} so an agent can rely on
+ * the price for `ttl_sec`. Signed with HMAC-SHA256 over a canonical payload using
+ * APM_QUOTE_SECRET. If the secret is unset, the quote is still issued but marked
+ * `signed: false` (honest signalling — never a fake signature).
+ */
+export interface QuoteTerms {
+    tool: string;
+    price_usd: string;
+    payment_chains: string[];
+    brokerage_commission_pct: number;
+    ttl_sec: number;
+    agent_id?: string;
+}
+export interface SignedQuote {
+    quote_id: string;
+    tool: string;
+    price_usd: string;
+    currency: 'USDC';
+    payment_chains: string[];
+    brokerage_commission_pct: number;
+    agent_id: string | null;
+    issued_at: string;
+    expires_at: string;
+    algo: 'HMAC-SHA256';
+    signature: string;
+    signed: boolean;
+    canonical: string;
+}
+export declare function createQuote(terms: QuoteTerms): SignedQuote;
+/** Verify a quote's signature against APM_QUOTE_SECRET. Returns false if unsigned/unset. */
+export declare function verifyQuote(canonical: string, signature: string): boolean;
+export interface ParsedQuote {
+    tool: string;
+    price_usd: string;
+    currency: string;
+    payment_chains: string[];
+    brokerage_commission_pct: number;
+    agent_id: string | null;
+    issued_at: string;
+    expires_at: string;
+}
+export interface QuoteCheck {
+    valid: boolean;
+    expired: boolean;
+    reason?: string;
+    quote?: ParsedQuote;
+}
+/** Verify a quote's signature AND parse it, reporting expiry. Used by apm_execute. */
+export declare function verifyAndParseQuote(canonical: string, signature: string): QuoteCheck;
+//# sourceMappingURL=quote.d.ts.map

package/dist/server/apm/quote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote.d.ts","sourceRoot":"","sources":["../../../src/server/apm/quote.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,wBAAwB,EAAE,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,wBAAwB,EAAE,MAAM,CAAC;IACjC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAOD,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CAuC1D;AAED,4FAA4F;AAC5F,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAQzE;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,wBAAwB,EAAE,MAAM,CAAC;IACjC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,CAYpF"}

package/dist/server/apm/quote.js

@@ -0,0 +1,82 @@
+"use strict";
+/**
+ * APM price-locked quote — a real, verifiable HMAC-signed quote.
+ *
+ * The quote binds {tool, price, chains, brokerage, expiry} so an agent can rely on
+ * the price for `ttl_sec`. Signed with HMAC-SHA256 over a canonical payload using
+ * APM_QUOTE_SECRET. If the secret is unset, the quote is still issued but marked
+ * `signed: false` (honest signalling — never a fake signature).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createQuote = createQuote;
+exports.verifyQuote = verifyQuote;
+exports.verifyAndParseQuote = verifyAndParseQuote;
+const node_crypto_1 = require("node:crypto");
+function canonicalize(payload) {
+    // Deterministic: sorted top-level keys (array form selects + orders keys).
+    return JSON.stringify(payload, Object.keys(payload).sort());
+}
+function createQuote(terms) {
+    const issuedMs = Date.now();
+    const expiresMs = issuedMs + terms.ttl_sec * 1000;
+    const payload = {
+        tool: terms.tool,
+        price_usd: terms.price_usd,
+        currency: 'USDC',
+        payment_chains: [...terms.payment_chains].sort(),
+        brokerage_commission_pct: terms.brokerage_commission_pct,
+        agent_id: terms.agent_id ?? null,
+        issued_at: new Date(issuedMs).toISOString(),
+        expires_at: new Date(expiresMs).toISOString(),
+    };
+    const canonical = canonicalize(payload);
+    const quoteId = (0, node_crypto_1.createHash)('sha256').update(canonical).digest('hex').slice(0, 24);
+    const secret = process.env['APM_QUOTE_SECRET'] ?? '';
+    const signed = secret.length > 0;
+    const signature = signed
+        ? (0, node_crypto_1.createHmac)('sha256', secret).update(canonical).digest('hex')
+        : '';
+    return {
+        quote_id: quoteId,
+        tool: payload.tool,
+        price_usd: payload.price_usd,
+        currency: payload.currency,
+        payment_chains: payload.payment_chains,
+        brokerage_commission_pct: payload.brokerage_commission_pct,
+        agent_id: payload.agent_id,
+        issued_at: payload.issued_at,
+        expires_at: payload.expires_at,
+        algo: 'HMAC-SHA256',
+        signature,
+        signed,
+        canonical,
+    };
+}
+/** Verify a quote's signature against APM_QUOTE_SECRET. Returns false if unsigned/unset. */
+function verifyQuote(canonical, signature) {
+    const secret = process.env['APM_QUOTE_SECRET'] ?? '';
+    if (!secret || !signature)
+        return false;
+    const expected = (0, node_crypto_1.createHmac)('sha256', secret).update(canonical).digest('hex');
+    const a = Buffer.from(expected, 'hex');
+    const b = Buffer.from(signature, 'hex');
+    if (a.length !== b.length)
+        return false;
+    return (0, node_crypto_1.timingSafeEqual)(a, b);
+}
+/** Verify a quote's signature AND parse it, reporting expiry. Used by apm_execute. */
+function verifyAndParseQuote(canonical, signature) {
+    if (!verifyQuote(canonical, signature)) {
+        return { valid: false, expired: false, reason: 'signature_invalid_or_unsigned' };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(canonical);
+    }
+    catch {
+        return { valid: false, expired: false, reason: 'canonical_unparseable' };
+    }
+    const expired = Date.now() > new Date(parsed.expires_at).getTime();
+    return { valid: true, expired, quote: parsed };
+}
+//# sourceMappingURL=quote.js.map

package/dist/server/apm/quote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote.js","sourceRoot":"","sources":["../../../src/server/apm/quote.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAkCH,kCAuCC;AAGD,kCAQC;AAqBD,kDAYC;AAnHD,6CAAsE;AA2BtE,SAAS,YAAY,CAAC,OAAgC;IACpD,2EAA2E;IAC3E,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAgB,WAAW,CAAC,KAAiB;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IAElD,MAAM,OAAO,GAAG;QACd,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,MAAe;QACzB,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE;QAChD,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;QACxD,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QAChC,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;QAC3C,UAAU,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;KAC9C,CAAC;IAEF,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAElF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM;QACtB,CAAC,CAAC,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC9D,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;QAC1D,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,IAAI,EAAE,aAAa;QACnB,SAAS;QACT,MAAM;QACN,SAAS;KACV,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,SAAgB,WAAW,CAAC,SAAiB,EAAE,SAAiB;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9E,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,IAAA,6BAAe,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAoBD,sFAAsF;AACtF,SAAgB,mBAAmB,CAAC,SAAiB,EAAE,SAAiB;IACtE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,MAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAgB,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;IACnE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACjD,CAAC"}