@scriptmasterlabs/mcp-x402 2.1.1 → 2.1.2

package/dist/server/payments/x402.js

@@ -0,0 +1,247 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaymentConfigSchema = void 0;
+exports.getPaymentReceiver = getPaymentReceiver;
+exports.executeX402Payment = executeX402Payment;
+exports.executeBrokeredPayment = executeBrokeredPayment;
+const zod_1 = require("zod");
+const audit_js_1 = require("../security/audit.js");
+const ap2_js_1 = require("./ap2.js");
+const wallet_js_1 = require("./wallet.js");
+const router_js_1 = require("./router.js");
+const receipt_js_1 = require("./receipt.js");
+const bureau_js_1 = require("../../lib/credit/bureau.js");
+const pricing_js_1 = require("../registry/pricing.js");
+const agent_payment_js_1 = require("./agent-payment.js");
+exports.PaymentConfigSchema = zod_1.z.object({
+    price: zod_1.z.string().regex(/^\d+(\.\d+)?$/),
+    currency: zod_1.z.enum(['USDC', 'RLUSD']),
+    toolName: zod_1.z.string(),
+    walletAddress: zod_1.z.string().optional(),
+    // Agent's on-chain payment proof. When agent-pays enforcement is on, the tool is
+    // only served once this verifies via 402Proof.
+    paymentProof: zod_1.z.object({ txHash: zod_1.z.string() }).optional(),
+});
+const AUTO_APPROVE_THRESHOLD = parseFloat(process.env['AUTO_APPROVE_THRESHOLD_USD'] ?? '1.0');
+const DAILY_SPEND_CAP = parseFloat(process.env['DAILY_SPEND_CAP_USD'] ?? '50.0');
+// SML's published Base USDC receiving address (public — see agents.json, llms.txt,
+// x402-paywall.html). Used as the default so the gateway COLLECTS even when
+// SML_PAYMENT_RECEIVER isn't set in the environment. Override via env to redirect.
+// The private key (WALLET_SEED) is never stored here.
+const SML_DEFAULT_RECEIVER = '0x4e14B249D9A4c9c9352D780eCEB508A8eB7a7700';
+/** Resolve the address that collects USDC for paid tool calls. */
+function getPaymentReceiver() {
+    return process.env['SML_PAYMENT_RECEIVER'] ?? SML_DEFAULT_RECEIVER;
+}
+const dailySpend = new Map();
+function getTodayKey() {
+    return new Date().toISOString().slice(0, 10);
+}
+function getDailySpend(wallet) {
+    const today = getTodayKey();
+    const entry = dailySpend.get(wallet);
+    if (!entry || entry.date !== today)
+        return 0;
+    return entry.amount;
+}
+function addDailySpend(wallet, amount) {
+    const today = getTodayKey();
+    const current = getDailySpend(wallet);
+    dailySpend.set(wallet, { amount: current + amount, date: today });
+}
+async function executeX402Payment(config) {
+    const audit = audit_js_1.AuditLogger.getInstance();
+    // Agent-pays enforcement (flag-gated, OFF by default). When on, the AGENT must
+    // pay and we verify via 402Proof — no gateway self-transfer. Fails CLOSED.
+    if ((0, agent_payment_js_1.isAgentPaymentEnforced)()) {
+        const gate = await (0, agent_payment_js_1.enforceAgentPayment)({
+            toolName: config.toolName,
+            price: config.price,
+            paymentProof: config.paymentProof,
+        });
+        if (gate.status === 'unconfigured') {
+            audit.error('agent_payment_unconfigured', { tool: config.toolName });
+            throw new Error(`Agent payment enforcement is on but no 402Proof endpoint is configured for ${config.toolName}. Set PROOF402_ENDPOINT_${config.toolName.toUpperCase()}.`);
+        }
+        if (gate.status === 'payment_required')
+            throw new agent_payment_js_1.PaymentRequiredError(gate);
+        if (gate.status === 'payment_invalid')
+            throw new agent_payment_js_1.PaymentUnverifiedError(gate);
+        // gate.status === 'paid' — agent payment verified on-chain. Record receipt, no self-transfer.
+        const w = await wallet_js_1.WalletManager.getInstance().getOrCreateWallet();
+        const receipt = await receipt_js_1.ReceiptStore.getInstance().create({
+            txHash: gate.txHash, chain: 'verified', amount: config.price,
+            currency: config.currency, tool: config.toolName, wallet: config.walletAddress ?? w.address,
+        });
+        audit.info('agent_payment_verified', { tool: config.toolName, txHash: gate.txHash, receiptId: receipt.id });
+        return {
+            receiptId: receipt.id, txHash: gate.txHash, chain: 'verified',
+            amountPaid: config.price, currency: config.currency, timestamp: Date.now(),
+            walletAddress: config.walletAddress ?? w.address,
+        };
+    }
+    const wallet = await wallet_js_1.WalletManager.getInstance().getOrCreateWallet();
+    const walletAddress = wallet.address;
+    // Enforce daily spend cap (N9)
+    const priceNum = parseFloat(config.price);
+    const currentSpend = getDailySpend(walletAddress);
+    if (currentSpend + priceNum > DAILY_SPEND_CAP) {
+        audit.warn('spend_cap_exceeded', {
+            wallet: walletAddress,
+            current: currentSpend,
+            requested: priceNum,
+            cap: DAILY_SPEND_CAP,
+        });
+        throw new Error(`Daily spend cap of $${DAILY_SPEND_CAP} exceeded. Current: $${currentSpend.toFixed(4)}`);
+    }
+    // Verify price cache freshness (N12)
+    const cachedPrice = await pricing_js_1.PriceRegistry.getInstance().getPrice(config.toolName);
+    if (!cachedPrice) {
+        throw new Error('Price data stale or unavailable. Rejecting payment.');
+    }
+    if (cachedPrice !== config.price) {
+        throw new Error(`Price mismatch: expected ${cachedPrice}, got ${config.price}. Cache may be stale.`);
+    }
+    // Credit Bureau check (N8)
+    const score = await bureau_js_1.CreditBureau.getInstance().getScore(walletAddress);
+    const autoApprove = priceNum <= AUTO_APPROVE_THRESHOLD && score >= 300;
+    audit.info('payment_attempt', {
+        tool: config.toolName,
+        price: config.price,
+        currency: config.currency,
+        wallet: walletAddress,
+        bureauScore: score,
+        autoApprove,
+    });
+    if (!autoApprove && score < 300) {
+        throw new Error(`Credit Bureau score ${score} below minimum 300. Payment requires manual approval.`);
+    }
+    // AP2 mandate verification (N6)
+    const ap2 = ap2_js_1.AP2Client.getInstance();
+    const mandateValid = await ap2.verifyMandate(walletAddress, {
+        maxAmount: config.price,
+        currency: config.currency,
+        toolName: config.toolName,
+    });
+    if (!mandateValid) {
+        audit.warn('ap2_mandate_rejected', { wallet: walletAddress, tool: config.toolName });
+        throw new Error('AP2 mandate verification failed. Agent not authorized for this payment.');
+    }
+    // Route payment to cheapest/fastest chain (N13)
+    // Receiver defaults to SML's published address; only empty if explicitly set to ''.
+    const receiver = getPaymentReceiver();
+    let txResult;
+    if (!receiver) {
+        audit.warn('payment_receiver_unset', { tool: config.toolName, amount: config.price, note: 'SML_PAYMENT_RECEIVER explicitly empty — logging only' });
+        txResult = { txHash: `pending-${Date.now()}`, chain: 'none', latencyMs: 0 };
+    }
+    else {
+        try {
+            const router = router_js_1.ChainRouter.getInstance();
+            txResult = await router.route({
+                amount: config.price,
+                currency: config.currency,
+                from: walletAddress,
+                to: receiver,
+                timeoutMs: 500,
+            });
+        }
+        catch (err) {
+            // Log payment failure but don't block tool execution
+            audit.warn('payment_tx_failed', { tool: config.toolName, amount: config.price, error: String(err), note: 'Server wallet may be unfunded — tool served anyway' });
+            txResult = { txHash: `failed-${Date.now()}`, chain: 'none', latencyMs: 0 };
+        }
+    }
+    addDailySpend(walletAddress, priceNum);
+    // Generate 402Proof receipt (N7)
+    const receipt = await receipt_js_1.ReceiptStore.getInstance().create({
+        txHash: txResult.txHash,
+        chain: txResult.chain,
+        amount: config.price,
+        currency: config.currency,
+        tool: config.toolName,
+        wallet: walletAddress,
+    });
+    audit.info('payment_success', {
+        receiptId: receipt.id,
+        txHash: txResult.txHash,
+        chain: txResult.chain,
+        tool: config.toolName,
+        wallet: walletAddress,
+    });
+    return {
+        receiptId: receipt.id,
+        txHash: txResult.txHash,
+        chain: txResult.chain,
+        amountPaid: config.price,
+        currency: config.currency,
+        timestamp: Date.now(),
+        walletAddress,
+    };
+}
+/**
+ * Brokered payment for APM-executed tools (apm_execute). The amount is the
+ * price-locked quote value + brokerage; its integrity is guaranteed by the
+ * SML-signed quote verified upstream — NOT by the price registry. Mirrors the
+ * settlement steps of executeX402Payment (cap, credit, AP2, route, receipt).
+ * Never call without a verified, unexpired quote.
+ */
+async function executeBrokeredPayment(params) {
+    const { amount, toolName } = params;
+    const currency = 'USDC';
+    const audit = audit_js_1.AuditLogger.getInstance();
+    const wallet = await wallet_js_1.WalletManager.getInstance().getOrCreateWallet();
+    const walletAddress = wallet.address;
+    // Daily spend cap (N9)
+    const amountNum = parseFloat(amount);
+    const currentSpend = getDailySpend(walletAddress);
+    if (currentSpend + amountNum > DAILY_SPEND_CAP) {
+        audit.warn('spend_cap_exceeded', { wallet: walletAddress, current: currentSpend, requested: amountNum, cap: DAILY_SPEND_CAP });
+        throw new Error(`Daily spend cap of $${DAILY_SPEND_CAP} exceeded. Current: $${currentSpend.toFixed(4)}`);
+    }
+    // Credit Bureau check (N8)
+    const score = await bureau_js_1.CreditBureau.getInstance().getScore(walletAddress);
+    const autoApprove = amountNum <= AUTO_APPROVE_THRESHOLD && score >= 300;
+    audit.info('brokered_payment_attempt', { tool: toolName, amount, wallet: walletAddress, bureauScore: score, autoApprove });
+    if (!autoApprove && score < 300) {
+        throw new Error(`Credit Bureau score ${score} below minimum 300. Payment requires manual approval.`);
+    }
+    // AP2 mandate verification (N6)
+    const ap2 = ap2_js_1.AP2Client.getInstance();
+    const mandateValid = await ap2.verifyMandate(walletAddress, { maxAmount: amount, currency, toolName });
+    if (!mandateValid) {
+        audit.warn('ap2_mandate_rejected', { wallet: walletAddress, tool: toolName });
+        throw new Error('AP2 mandate verification failed. Agent not authorized for this payment.');
+    }
+    // Route payment (N13)
+    const receiver = getPaymentReceiver();
+    let txResult;
+    if (!receiver) {
+        audit.warn('payment_receiver_unset', { tool: toolName, amount, note: 'SML_PAYMENT_RECEIVER explicitly empty — logging only' });
+        txResult = { txHash: `pending-${Date.now()}`, chain: 'none', latencyMs: 0 };
+    }
+    else {
+        try {
+            const router = router_js_1.ChainRouter.getInstance();
+            txResult = await router.route({ amount, currency, from: walletAddress, to: receiver, timeoutMs: 500 });
+        }
+        catch (err) {
+            audit.warn('payment_tx_failed', { tool: toolName, amount, error: String(err), note: 'Server wallet may be unfunded — tool served anyway' });
+            txResult = { txHash: `failed-${Date.now()}`, chain: 'none', latencyMs: 0 };
+        }
+    }
+    addDailySpend(walletAddress, amountNum);
+    // 402Proof receipt (N7)
+    const receipt = await receipt_js_1.ReceiptStore.getInstance().create({ txHash: txResult.txHash, chain: txResult.chain, amount, currency, tool: toolName, wallet: walletAddress });
+    audit.info('brokered_payment_success', { receiptId: receipt.id, txHash: txResult.txHash, chain: txResult.chain, tool: toolName, wallet: walletAddress });
+    return {
+        receiptId: receipt.id,
+        txHash: txResult.txHash,
+        chain: txResult.chain,
+        amountPaid: amount,
+        currency,
+        timestamp: Date.now(),
+        walletAddress,
+    };
+}
+//# sourceMappingURL=x402.js.map

package/dist/server/payments/x402.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402.js","sourceRoot":"","sources":["../../../src/server/payments/x402.ts"],"names":[],"mappings":";;;AA+CA,gDAEC;AAqBD,gDAsJC;AASD,wDAiEC;AAtSD,6BAAwB;AACxB,mDAAmD;AACnD,qCAAqC;AACrC,2CAA4C;AAC5C,2CAA0C;AAC1C,6CAA4C;AAC5C,0DAA0D;AAC1D,uDAAuD;AACvD,yDAA+H;AAElH,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;IACxC,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iFAAiF;IACjF,+CAA+C;IAC/C,YAAY,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC;AAcH,MAAM,sBAAsB,GAAG,UAAU,CACvC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,IAAI,KAAK,CACnD,CAAC;AAEF,MAAM,eAAe,GAAG,UAAU,CAChC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,MAAM,CAC7C,CAAC;AAEF,mFAAmF;AACnF,4EAA4E;AAC5E,mFAAmF;AACnF,sDAAsD;AACtD,MAAM,oBAAoB,GAAG,4CAA4C,CAAC;AAE1E,kEAAkE;AAClE,SAAgB,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,oBAAoB,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4C,CAAC;AAEvE,SAAS,WAAW;IAClB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,MAAc;IACnD,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACpE,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACtC,MAAqB;IAErB,MAAM,KAAK,GAAG,sBAAW,CAAC,WAAW,EAAE,CAAC;IAExC,+EAA+E;IAC/E,2EAA2E;IAC3E,IAAI,IAAA,yCAAsB,GAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAA,sCAAmB,EAAC;YACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACnC,KAAK,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,8EAA8E,MAAM,CAAC,QAAQ,2BAA2B,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC5K,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB;YAAE,MAAM,IAAI,uCAAoB,CAAC,IAAI,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB;YAAE,MAAM,IAAI,yCAAsB,CAAC,IAAI,CAAC,CAAC;QAC9E,8FAA8F;QAC9F,MAAM,CAAC,GAAG,MAAM,yBAAa,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,yBAAY,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;YACtD,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK;YAC5D,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,OAAO;SAC5F,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5G,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU;YAC7D,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YAC1E,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,OAAO;SACjD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,yBAAa,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC;IACrE,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;IAErC,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,YAAY,GAAG,QAAQ,GAAG,eAAe,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC/B,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,YAAY;YACrB,SAAS,EAAE,QAAQ;YACnB,GAAG,EAAE,eAAe;SACrB,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CACb,uBAAuB,eAAe,wBAAwB,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,MAAM,WAAW,GAAG,MAAM,0BAAa,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,WAAW,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,4BAA4B,WAAW,SAAS,MAAM,CAAC,KAAK,uBAAuB,CACpF,CAAC;IACJ,CAAC;IAED,2BAA2B;IAC3B,MAAM,KAAK,GAAG,MAAM,wBAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,QAAQ,IAAI,sBAAsB,IAAI,KAAK,IAAI,GAAG,CAAC;IAEvE,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE;QAC5B,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,KAAK;QAClB,WAAW;KACZ,CAAC,CAAC;IAEH,IAAI,CAAC,WAAW,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,uDAAuD,CACpF,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,MAAM,GAAG,GAAG,kBAAS,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,aAAa,EAAE;QAC1D,SAAS,EAAE,MAAM,CAAC,KAAK;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,oFAAoF;IACpF,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,IAAI,QAA8D,CAAC;IAEnE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,sDAAsD,EAAE,CAAC,CAAC;QACpJ,QAAQ,GAAG,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,uBAAW,CAAC,WAAW,EAAE,CAAC;YACzC,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;gBAC5B,MAAM,EAAE,MAAM,CAAC,KAAK;gBACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,IAAI,EAAE,aAAa;gBACnB,EAAE,EAAE,QAAQ;gBACZ,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qDAAqD;YACrD,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,oDAAoD,EAAE,CAAC,CAAC;YACjK,QAAQ,GAAG,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,aAAa,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAEvC,iCAAiC;IACjC,MAAM,OAAO,GAAG,MAAM,yBAAY,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;QACtD,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IAEH,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE;QAC5B,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,MAAM,CAAC,KAAK;QACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,aAAa;KACd,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,sBAAsB,CAAC,MAG5C;IACC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAe,CAAC;IACjC,MAAM,KAAK,GAAG,sBAAW,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,yBAAa,CAAC,WAAW,EAAE,CAAC,iBAAiB,EAAE,CAAC;IACrE,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;IAErC,uBAAuB;IACvB,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,YAAY,GAAG,SAAS,GAAG,eAAe,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;QAC/H,MAAM,IAAI,KAAK,CAAC,uBAAuB,eAAe,wBAAwB,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED,2BAA2B;IAC3B,MAAM,KAAK,GAAG,MAAM,wBAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,SAAS,IAAI,sBAAsB,IAAI,KAAK,IAAI,GAAG,CAAC;IACxE,KAAK,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3H,IAAI,CAAC,WAAW,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,uDAAuD,CAAC,CAAC;IACvG,CAAC;IAED,gCAAgC;IAChC,MAAM,GAAG,GAAG,kBAAS,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IAED,sBAAsB;IACtB,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,IAAI,QAA8D,CAAC;IACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,sDAAsD,EAAE,CAAC,CAAC;QAC/H,QAAQ,GAAG,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,uBAAW,CAAC,WAAW,EAAE,CAAC;YACzC,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACzG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,oDAAoD,EAAE,CAAC,CAAC;YAC5I,QAAQ,GAAG,EAAE,MAAM,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,aAAa,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAExC,wBAAwB;IACxB,MAAM,OAAO,GAAG,MAAM,yBAAY,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IACrK,KAAK,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAEzJ,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,MAAM;QAClB,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,aAAa;KACd,CAAC;AACJ,CAAC"}

package/dist/server/registry/backends.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Canonical list of SML product backends + a shared health checker.
+ *
+ * Single source of truth for "which backend serves which product" and "is it live".
+ * Used by the `sml_status` tool and by APM (so APM never recommends a suspended product).
+ */
+export interface BackendDef {
+    /** Display name (as shown in sml_status). */
+    name: string;
+    /** Product key — must match the `product` field used in the APM capability index. */
+    product: string;
+    /** Health-check URL. */
+    url: string;
+}
+export declare const BACKENDS: readonly BackendDef[];
+export type BackendStatus = 'online' | 'degraded' | 'offline';
+export interface BackendHealth {
+    name: string;
+    product: string;
+    status: BackendStatus;
+    http?: number;
+    latency_ms: number;
+    error?: string;
+}
+/** Hit every backend's health endpoint in parallel. Never throws. */
+export declare function checkBackends(timeoutMs?: number): Promise<BackendHealth[]>;
+/** Set of product keys whose backend is currently `online`. */
+export declare function liveProducts(timeoutMs?: number): Promise<Set<string>>;
+//# sourceMappingURL=backends.d.ts.map

package/dist/server/registry/backends.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backends.d.ts","sourceRoot":"","sources":["../../../src/server/registry/backends.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,eAAO,MAAM,QAAQ,EAAE,SAAS,UAAU,EAShC,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qEAAqE;AACrE,wBAAsB,aAAa,CAAC,SAAS,SAAO,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAoC9E;AAED,+DAA+D;AAC/D,wBAAsB,YAAY,CAAC,SAAS,SAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAGzE"}

package/dist/server/registry/backends.js

@@ -0,0 +1,61 @@
+"use strict";
+/**
+ * Canonical list of SML product backends + a shared health checker.
+ *
+ * Single source of truth for "which backend serves which product" and "is it live".
+ * Used by the `sml_status` tool and by APM (so APM never recommends a suspended product).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BACKENDS = void 0;
+exports.checkBackends = checkBackends;
+exports.liveProducts = liveProducts;
+exports.BACKENDS = [
+    { name: 'SqueezeOS', product: 'SqueezeOS', url: 'https://squeezeos-api.onrender.com/api/status' },
+    { name: 'Ghost Layer', product: 'Ghost Layer', url: 'https://ghost-layer.onrender.com/api/status' },
+    { name: '402Proof', product: '402Proof', url: 'https://four02proof.onrender.com/health' },
+    { name: 'RLUSD Rails', product: 'RLUSD Rails', url: 'https://sml-rails.onrender.com/health' },
+    { name: 'Copy-Trader', product: 'Copy-Trader', url: 'https://sml-copytrader.onrender.com/health' },
+    { name: 'Launchpad', product: 'Launchpad', url: 'https://sml-launchpad.onrender.com/health' },
+    { name: 'Shadow Desk', product: 'Shadow Desk', url: 'https://shadow-desk.onrender.com/health' },
+    { name: 'Forge Gateway', product: 'Forge Gateway', url: 'https://forge-gateway-a822.onrender.com/health' },
+];
+/** Hit every backend's health endpoint in parallel. Never throws. */
+async function checkBackends(timeoutMs = 5000) {
+    const results = await Promise.allSettled(exports.BACKENDS.map(async (b) => {
+        const start = Date.now();
+        try {
+            const res = await fetch(b.url, { signal: AbortSignal.timeout(timeoutMs) });
+            return {
+                name: b.name,
+                product: b.product,
+                status: res.ok ? 'online' : 'degraded',
+                http: res.status,
+                latency_ms: Date.now() - start,
+            };
+        }
+        catch (err) {
+            return {
+                name: b.name,
+                product: b.product,
+                status: 'offline',
+                error: String(err),
+                latency_ms: Date.now() - start,
+            };
+        }
+    }));
+    return results.map((r, i) => r.status === 'fulfilled'
+        ? r.value
+        : {
+            name: exports.BACKENDS[i].name,
+            product: exports.BACKENDS[i].product,
+            status: 'offline',
+            error: 'health_check_failed',
+            latency_ms: 0,
+        });
+}
+/** Set of product keys whose backend is currently `online`. */
+async function liveProducts(timeoutMs = 5000) {
+    const health = await checkBackends(timeoutMs);
+    return new Set(health.filter((h) => h.status === 'online').map((h) => h.product));
+}
+//# sourceMappingURL=backends.js.map

package/dist/server/registry/backends.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backends.js","sourceRoot":"","sources":["../../../src/server/registry/backends.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAkCH,sCAoCC;AAGD,oCAGC;AAjEY,QAAA,QAAQ,GAA0B;IAC7C,EAAE,IAAI,EAAE,WAAW,EAAM,OAAO,EAAE,WAAW,EAAM,GAAG,EAAE,+CAA+C,EAAE;IACzG,EAAE,IAAI,EAAE,aAAa,EAAI,OAAO,EAAE,aAAa,EAAI,GAAG,EAAE,6CAA6C,EAAE;IACvG,EAAE,IAAI,EAAE,UAAU,EAAO,OAAO,EAAE,UAAU,EAAO,GAAG,EAAE,yCAAyC,EAAE;IACnG,EAAE,IAAI,EAAE,aAAa,EAAI,OAAO,EAAE,aAAa,EAAI,GAAG,EAAE,uCAAuC,EAAE;IACjG,EAAE,IAAI,EAAE,aAAa,EAAI,OAAO,EAAE,aAAa,EAAI,GAAG,EAAE,4CAA4C,EAAE;IACtG,EAAE,IAAI,EAAE,WAAW,EAAM,OAAO,EAAE,WAAW,EAAM,GAAG,EAAE,2CAA2C,EAAE;IACrG,EAAE,IAAI,EAAE,aAAa,EAAI,OAAO,EAAE,aAAa,EAAI,GAAG,EAAE,yCAAyC,EAAE;IACnG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,gDAAgD,EAAE;CAClG,CAAC;AAaX,qEAAqE;AAC9D,KAAK,UAAU,aAAa,CAAC,SAAS,GAAG,IAAI;IAClD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,gBAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAA0B,EAAE;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC3E,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;gBACtC,IAAI,EAAE,GAAG,CAAC,MAAM;gBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;gBAClB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC/B,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC1B,CAAC,CAAC,MAAM,KAAK,WAAW;QACtB,CAAC,CAAC,CAAC,CAAC,KAAK;QACT,CAAC,CAAC;YACE,IAAI,EAAE,gBAAQ,CAAC,CAAC,CAAE,CAAC,IAAI;YACvB,OAAO,EAAE,gBAAQ,CAAC,CAAC,CAAE,CAAC,OAAO;YAC7B,MAAM,EAAE,SAAkB;YAC1B,KAAK,EAAE,qBAAqB;YAC5B,UAAU,EAAE,CAAC;SACd,CACN,CAAC;AACJ,CAAC;AAED,+DAA+D;AACxD,KAAK,UAAU,YAAY,CAAC,SAAS,GAAG,IAAI;IACjD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAC9C,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACpF,CAAC"}

package/dist/server/registry/catalog.d.ts

@@ -0,0 +1,12 @@
+export interface ToolMeta {
+    name: string;
+    description: string;
+    price: string;
+    currency: 'USDC' | 'RLUSD';
+    freeTier?: string;
+    ap2Required: boolean;
+    cacheTtl?: number;
+}
+export declare const CATALOG: ToolMeta[];
+export declare function getToolMeta(name: string): ToolMeta | undefined;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/server/registry/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../src/server/registry/catalog.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,OAAO,EAAE,QAAQ,EA8C7B,CAAC;AAEF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAE9D"}

package/dist/server/registry/catalog.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CATALOG = void 0;
+exports.getToolMeta = getToolMeta;
+exports.CATALOG = [
+    {
+        name: 'leviathan_signal',
+        description: 'Institutional-grade squeeze signals. Multi-engine verdict for any ticker.',
+        price: '0.05',
+        currency: 'USDC',
+        ap2Required: true,
+    },
+    {
+        name: 'xmit_edgar_decode',
+        description: 'Parse SEC DEF 14A / 13F / 13D filings. Raw text never leaves SML servers.',
+        price: '0.02',
+        currency: 'USDC',
+        ap2Required: true,
+    },
+    {
+        name: 'xdeo_earnings_estimate',
+        description: 'Decentralized earnings oracle. +2 bureau_score on success.',
+        price: '0.02',
+        currency: 'USDC',
+        ap2Required: true,
+    },
+    {
+        name: 'ftd_threshold_scan',
+        description: 'SEC Reg SHO FTD data. Alerts free; full data 0.05 USDC. 15-min cache.',
+        price: '0.05',
+        currency: 'USDC',
+        ap2Required: false,
+        freeTier: 'alerts_only',
+        cacheTtl: 900,
+    },
+    {
+        name: 'nexus_agent_hire',
+        description: 'Agent marketplace. Query free; hire charges 5% commission.',
+        price: '0.00',
+        currency: 'USDC',
+        ap2Required: false,
+        freeTier: 'query_only',
+    },
+    {
+        name: 'crawl_paid_fetch',
+        description: 'Pay-per-fetch scraping. Humans bypass free.',
+        price: '0.005',
+        currency: 'USDC',
+        ap2Required: false,
+    },
+];
+function getToolMeta(name) {
+    return exports.CATALOG.find((t) => t.name === name);
+}
+//# sourceMappingURL=catalog.js.map

package/dist/server/registry/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/server/registry/catalog.ts"],"names":[],"mappings":";;;AA0DA,kCAEC;AAlDY,QAAA,OAAO,GAAe;IACjC;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,2EAA2E;QACxF,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,IAAI;KAClB;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,2EAA2E;QACxF,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,IAAI;KAClB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,4DAA4D;QACzE,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,IAAI;KAClB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,uEAAuE;QACpF,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,aAAa;QACvB,QAAQ,EAAE,GAAG;KACd;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,4DAA4D;QACzE,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,YAAY;KACvB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,6CAA6C;QAC1D,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,KAAK;KACnB;CACF,CAAC;AAEF,SAAgB,WAAW,CAAC,IAAY;IACtC,OAAO,eAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC9C,CAAC"}

package/dist/server/registry/discovery.d.ts

@@ -0,0 +1,16 @@
+interface AgentsJson {
+    schema_version: string;
+    name: string;
+    tools: unknown[];
+}
+export declare class Discovery {
+    private static instance;
+    private agentsJson;
+    private llmsTxt;
+    private constructor();
+    static getInstance(): Discovery;
+    getAgentsJson(): AgentsJson;
+    getLlmsTxt(): string;
+}
+export {};
+//# sourceMappingURL=discovery.d.ts.map

package/dist/server/registry/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/server/registry/discovery.ts"],"names":[],"mappings":"AAGA,UAAU,UAAU;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,EAAE,CAAC;CAClB;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAY;IACnC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,OAAO,CAAuB;IAEtC,OAAO;IAEP,MAAM,CAAC,WAAW,IAAI,SAAS;IAO/B,aAAa,IAAI,UAAU;IAQ3B,UAAU,IAAI,MAAM;CAOrB"}

package/dist/server/registry/discovery.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Discovery = void 0;
+const fs_1 = require("fs");
+const path_1 = require("path");
+class Discovery {
+    static instance;
+    agentsJson = null;
+    llmsTxt = null;
+    constructor() { }
+    static getInstance() {
+        if (!Discovery.instance) {
+            Discovery.instance = new Discovery();
+        }
+        return Discovery.instance;
+    }
+    getAgentsJson() {
+        if (!this.agentsJson) {
+            const path = (0, path_1.join)(process.cwd(), 'agents.json');
+            this.agentsJson = JSON.parse((0, fs_1.readFileSync)(path, 'utf8'));
+        }
+        return this.agentsJson;
+    }
+    getLlmsTxt() {
+        if (!this.llmsTxt) {
+            const path = (0, path_1.join)(process.cwd(), 'llms.txt');
+            this.llmsTxt = (0, fs_1.readFileSync)(path, 'utf8');
+        }
+        return this.llmsTxt;
+    }
+}
+exports.Discovery = Discovery;
+//# sourceMappingURL=discovery.js.map

package/dist/server/registry/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/server/registry/discovery.ts"],"names":[],"mappings":";;;AAAA,2BAAkC;AAClC,+BAA4B;AAQ5B,MAAa,SAAS;IACZ,MAAM,CAAC,QAAQ,CAAY;IAC3B,UAAU,GAAsB,IAAI,CAAC;IACrC,OAAO,GAAkB,IAAI,CAAC;IAEtC,gBAAuB,CAAC;IAExB,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACxB,SAAS,CAAC,QAAQ,GAAG,IAAI,SAAS,EAAE,CAAC;QACvC,CAAC;QACD,OAAO,SAAS,CAAC,QAAQ,CAAC;IAC5B,CAAC;IAED,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO,GAAG,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AA7BD,8BA6BC"}

package/dist/server/registry/pricing.d.ts

@@ -0,0 +1,10 @@
+export declare class PriceRegistry {
+    private static instance;
+    private readonly cache;
+    private readonly baseUrl;
+    private constructor();
+    static getInstance(): PriceRegistry;
+    getPrice(toolName: string): Promise<string | null>;
+    seedDefaults(): void;
+}
+//# sourceMappingURL=pricing.d.ts.map

package/dist/server/registry/pricing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pricing.d.ts","sourceRoot":"","sources":["../../../src/server/registry/pricing.ts"],"names":[],"mappings":"AAyEA,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO;IAIP,MAAM,CAAC,WAAW,IAAI,aAAa;IAO7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAoCxD,YAAY,IAAI,IAAI;CAQrB"}

package/dist/server/registry/pricing.js

@@ -0,0 +1,124 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PriceRegistry = void 0;
+const PRICE_CACHE_TTL = parseInt(process.env['PRICE_CACHE_TTL_MS'] ?? '60000', 10);
+// Keys MUST match the toolName each tool passes to getPrice()/executeX402Payment().
+// Paid-tool prices MUST equal what sml_discover advertises (advertised == charged).
+// A drift-guard test (tests/unit/pricing-drift.test.ts) enforces both.
+const BASE_PRICES = {
+    // Discovery (free)
+    sml_discover: '0.00',
+    sml_status: '0.00',
+    // APM — Agent Preference Manifest (free preview, paid contract)
+    apm_negotiate: '0.02',
+    // SqueezeOS signals
+    leviathan_signal: '0.05',
+    squeezeos_council: '0.10',
+    squeezeos_scan: '0.05',
+    squeezeos_options: '0.05',
+    squeezeos_iwm: '0.03',
+    squeezeos_preview: '0.00',
+    squeezeos_status: '0.00',
+    // SEC / Earnings
+    xmit_edgar_decode: '0.02',
+    xdeo_earnings_estimate: '0.02',
+    // FTD
+    ftd_threshold_scan: '0.05',
+    // Crawl
+    crawl_paid_fetch: '0.005',
+    // Agent marketplace
+    nexus_agent_hire: '0.00',
+    // Ghost Layer (cross-chain)
+    ghost_route: '0.01',
+    ghost_status: '0.00',
+    // RLUSD Rails
+    rails_transfer: '0.01',
+    rails_status: '0.00',
+    // Launchpad
+    launchpad_create: '0.10',
+    launchpad_buy: '0.01',
+    launchpad_list: '0.00',
+    launchpad_status: '0.00',
+    // Copy-Trader
+    copytrader_subscribe: '0.05',
+    copytrader_status: '0.00',
+    // Backtest
+    backtest_run: '0.05',
+    backtest_validate: '0.05',
+    backtest_status: '0.00',
+    // Brokers (Tradier + Robinhood order execution)
+    tradier_order: '0.01',
+    robinhood_order: '0.01',
+    // Shadow Desk
+    shadow_query: '0.02',
+    shadow_ingest: '0.01',
+    shadow_status: '0.00',
+    // Forge (LLM gateway)
+    forge_llm: '0.02',
+    forge_status: '0.00',
+    // Proof402 (free)
+    proof_invoice: '0.00',
+    proof_verify: '0.00',
+    proof_credit_score: '0.00',
+    // Echo (pattern matching)
+    echo_pattern_match: '0.05',
+    // Agent card / identity
+    agentcard_mint: '0.01',
+    agentcard_verify: '0.00',
+    agentcard_lookup: '0.00',
+};
+class PriceRegistry {
+    static instance;
+    cache = new Map();
+    baseUrl;
+    constructor() {
+        this.baseUrl = process.env['SML_API_BASE'] ?? 'https://squeezeos-api.onrender.com';
+    }
+    static getInstance() {
+        if (!PriceRegistry.instance) {
+            PriceRegistry.instance = new PriceRegistry();
+        }
+        return PriceRegistry.instance;
+    }
+    async getPrice(toolName) {
+        const cached = this.cache.get(toolName);
+        const now = Date.now();
+        if (cached && now - cached.fetchedAt < PRICE_CACHE_TTL) {
+            return cached.price;
+        }
+        // Fetch live price from SML pricing API
+        try {
+            const res = await fetch(`${this.baseUrl}/pricing/v1/tool/${toolName}`, {
+                signal: AbortSignal.timeout(3000),
+            });
+            if (res.ok) {
+                const body = (await res.json());
+                this.cache.set(toolName, { price: body.price, fetchedAt: now });
+                return body.price;
+            }
+        }
+        catch {
+            // Fall through to hardcoded baseline
+        }
+        // Use hardcoded baseline if API unavailable
+        const fallback = BASE_PRICES[toolName];
+        if (fallback !== undefined) {
+            this.cache.set(toolName, { price: fallback, fetchedAt: now - PRICE_CACHE_TTL / 2 });
+            return fallback;
+        }
+        // Unknown tool — reject rather than silently treat as free.
+        // Returning '0.00' here would let any unknown/mistyped tool name be served
+        // for free (revenue + safety leak). Callers that charge must get null and stop.
+        return null;
+    }
+    seedDefaults() {
+        const now = Date.now();
+        for (const [tool, price] of Object.entries(BASE_PRICES)) {
+            if (!this.cache.has(tool)) {
+                this.cache.set(tool, { price, fetchedAt: now });
+            }
+        }
+    }
+}
+exports.PriceRegistry = PriceRegistry;
+//# sourceMappingURL=pricing.js.map

package/dist/server/registry/pricing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pricing.js","sourceRoot":"","sources":["../../../src/server/registry/pricing.ts"],"names":[],"mappings":";;;AAAA,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;AAEnF,oFAAoF;AACpF,oFAAoF;AACpF,uEAAuE;AACvE,MAAM,WAAW,GAA2B;IAC1C,mBAAmB;IACnB,YAAY,EAAE,MAAM;IACpB,UAAU,EAAE,MAAM;IAClB,gEAAgE;IAChE,aAAa,EAAE,MAAM;IACrB,oBAAoB;IACpB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB,EAAE,MAAM;IACzB,cAAc,EAAE,MAAM;IACtB,iBAAiB,EAAE,MAAM;IACzB,aAAa,EAAE,MAAM;IACrB,iBAAiB,EAAE,MAAM;IACzB,gBAAgB,EAAE,MAAM;IACxB,iBAAiB;IACjB,iBAAiB,EAAE,MAAM;IACzB,sBAAsB,EAAE,MAAM;IAC9B,MAAM;IACN,kBAAkB,EAAE,MAAM;IAC1B,QAAQ;IACR,gBAAgB,EAAE,OAAO;IACzB,oBAAoB;IACpB,gBAAgB,EAAE,MAAM;IACxB,4BAA4B;IAC5B,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,MAAM;IACpB,cAAc;IACd,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACpB,YAAY;IACZ,gBAAgB,EAAE,MAAM;IACxB,aAAa,EAAE,MAAM;IACrB,cAAc,EAAE,MAAM;IACtB,gBAAgB,EAAE,MAAM;IACxB,cAAc;IACd,oBAAoB,EAAE,MAAM;IAC5B,iBAAiB,EAAE,MAAM;IACzB,WAAW;IACX,YAAY,EAAE,MAAM;IACpB,iBAAiB,EAAE,MAAM;IACzB,eAAe,EAAE,MAAM;IACvB,gDAAgD;IAChD,aAAa,EAAE,MAAM;IACrB,eAAe,EAAE,MAAM;IACvB,cAAc;IACd,YAAY,EAAE,MAAM;IACpB,aAAa,EAAE,MAAM;IACrB,aAAa,EAAE,MAAM;IACrB,sBAAsB;IACtB,SAAS,EAAE,MAAM;IACjB,YAAY,EAAE,MAAM;IACpB,kBAAkB;IAClB,aAAa,EAAE,MAAM;IACrB,YAAY,EAAE,MAAM;IACpB,kBAAkB,EAAE,MAAM;IAC1B,0BAA0B;IAC1B,kBAAkB,EAAE,MAAM;IAC1B,wBAAwB;IACxB,cAAc,EAAE,MAAM;IACtB,gBAAgB,EAAE,MAAM;IACxB,gBAAgB,EAAE,MAAM;CACzB,CAAC;AAOF,MAAa,aAAa;IAChB,MAAM,CAAC,QAAQ,CAAgB;IACtB,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,OAAO,CAAS;IAEjC;QACE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,oCAAoC,CAAC;IACrF,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC5B,aAAa,CAAC,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,aAAa,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,eAAe,EAAE,CAAC;YACvD,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,oBAAoB,QAAQ,EAAE,EAAE;gBACrE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;gBACrD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChE,OAAO,IAAI,CAAC,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;QAED,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,GAAG,eAAe,GAAG,CAAC,EAAE,CAAC,CAAC;YACpF,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,4DAA4D;QAC5D,2EAA2E;QAC3E,gFAAgF;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA5DD,sCA4DC"}