@telaro/middleware 0.1.0

package/README.md

@@ -0,0 +1,153 @@
+# `@telaro/middleware`
+
+> Generic Telaro trust-gate wrapper. Wraps any TypeScript SDK to enforce
+> on-chain bond + score policy before tx-emitting methods.
+
+Use this when:
+- You're integrating Telaro into a DApp/SDK that has **no hook system**
+  (unlike idolly-acp, where you'd use [`@telaro/idolly-acp-hook`](../idolly-acp-hook)).
+- You want a **one-line wrap** without forking the SDK.
+- You're a **bot operator** wanting to refuse delegations to under-bonded
+  agents your code might receive from external sources.
+
+## Install
+
+```bash
+npm install @telaro/middleware @telaro/sdk
+```
+
+## Pattern
+
+```ts
+import { TelaroGate, TelaroPolicyError } from "@telaro/middleware";
+import { SomeClient } from "some-sdk";
+
+const sdk = new SomeClient({...});
+
+const gated = TelaroGate.wrap(sdk, {
+  // Which methods to gate
+  methods: ["placeOrder", "deposit"],
+  // Where to find the agent pubkey in the call args
+  resolveAgent: (args) => args[0]?.agentPubkey,
+  // Policy enforced before each call
+  policy: { minBond: 10_000_000n, minScore: 700 },
+  // Optional telemetry
+  onDecision: (e) => metrics.record(e),
+});
+
+try {
+  await gated.placeOrder({ agentPubkey: "Abc...", marketIndex: 0, ... });
+} catch (err) {
+  if (err instanceof TelaroPolicyError) {
+    // err.code is one of: NOT_BONDED, BOND_BELOW_MIN, SCORE_BELOW_MIN, FROZEN, LOOKUP_FAILED
+  }
+}
+```
+
+## Real examples
+
+### Drift perpetuals
+
+```ts
+import { DriftClient } from "@drift-labs/sdk";
+import { TelaroGate } from "@telaro/middleware";
+
+const drift = new DriftClient({...});
+
+const gated = TelaroGate.wrap(drift, {
+  methods: ["placePerpOrder", "placeSpotOrder", "deposit"],
+  resolveAgent: (args) => args[0]?.subAccountId?.toString(),
+  policy: { minBond: 50_000_000n, minScore: 800 }, // perp = high VAR
+});
+
+await gated.placePerpOrder({...});
+```
+
+### MarginFi lending
+
+```ts
+import { MarginfiClient, MarginfiAccountWrapper } from "@mrgnlabs/marginfi-client-v2";
+import { TelaroGate } from "@telaro/middleware";
+
+const account = await client.fetchOrCreateMarginfiAccount();
+
+const gated = TelaroGate.wrap(account, {
+  methods: ["deposit", "borrow", "repay", "withdraw"],
+  resolveAgent: () => MY_AGENT_PUBKEY,
+  policy: { minBond: 10_000_000n, minScore: 700 },
+});
+```
+
+### Custom REST API client
+
+```ts
+class MyDexClient {
+  async swap(args: { agent: string; from: string; to: string; amount: bigint }) {...}
+}
+
+const gated = TelaroGate.wrap(new MyDexClient(), {
+  methods: ["swap"],
+  resolveAgent: (args) => (args[0] as { agent: string }).agent,
+  policy: { minBond: 1_000_000n, minScore: 500 },
+});
+```
+
+## API
+
+### `TelaroGate.wrap(sdk, config)`
+
+Wraps `sdk` in place. Returns the same reference. Idempotent.
+
+| Field | Type | Default | Notes |
+|---|---|---|---|
+| `methods` | `string[]` | required | Method names to gate |
+| `resolveAgent` | `(args) => string \| undefined` | required | Returns agent pubkey from args; `undefined` skips the gate |
+| `policy.minBond` | `bigint` (atomic USDC, 6dp) | required | E.g., `10_000_000n` = 10 USDC |
+| `policy.minScore` | `number` (0..1000) | required | E.g., `700` |
+| `policy.allowOnLookupFailure` | `boolean` | `false` | If `true`, network errors don't block |
+| `apiBase` | `string` | `https://telaro.xyz` | Telaro REST API |
+| `apiKey` | `string` | none | For higher rate-limit tiers |
+| `cacheTtlMs` | `number` | `30_000` | Trust profile cache TTL. Set 0 to disable |
+| `onDecision` | `(event) => void` | none | Telemetry hook |
+
+### `TelaroPolicyError`
+
+Thrown by gated methods when policy fails. Has `.code`, `.agentPubkey`, `.method`.
+
+```ts
+catch (err) {
+  if (err instanceof TelaroPolicyError) {
+    switch (err.code) {
+      case "NOT_BONDED": /* agent never bonded */ break;
+      case "BOND_BELOW_MIN": /* bond too low */ break;
+      case "SCORE_BELOW_MIN": /* score too low */ break;
+      case "FROZEN": /* agent frozen (open dispute or bond fell below floor) */ break;
+      case "LOOKUP_FAILED": /* network or API error */ break;
+    }
+  }
+}
+```
+
+## Performance
+
+- **Cached**: 30s TTL by default. Repeated calls to the same agent
+  in the same window cost 1 RPC.
+- **Async**: gate adds ~50-200ms on the first call to a new agent
+  (REST fetch from Telaro API), <1ms on cached calls.
+- **No on-chain RPC**: this is a REST-based gate, not a CPI gate. For
+  atomic gating in the same tx, see the Anchor `view_bond` CPI in the
+  `telaro` Rust crate.
+
+## When to use what
+
+| Need | Use |
+|---|---|
+| Quick TS wrap, no hooks in target SDK | **`@telaro/middleware`** (this) |
+| Hook-based SDK (idolly-acp etc.) | `@telaro/idolly-acp-hook` |
+| Atomic on-chain CPI gate | `telaro` Rust crate (`view_bond`) |
+| Drop-in DApp UI modal | `@telaro/react-presign` |
+| Building from a framework (Sendai, LangChain, etc.) | `@telaro/{sendai,langchain,...}` |
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,96 @@
+/**
+ * @telaro/middleware — generic trust-gate wrapper for any TypeScript SDK.
+ *
+ * Pattern: pick which methods on a third-party SDK should be gated by
+ * Telaro bond + score policy. The wrapper proxies those methods so the
+ * call throws *before* the underlying tx is built, if the agent doesn't
+ * meet the policy.
+ *
+ * Use this when:
+ *   - You're integrating Telaro into a DApp/SDK that has no hook system
+ *     (unlike idolly-acp, which we use @telaro/idolly-acp-hook for).
+ *   - You want a one-line wrap without forking the SDK.
+ *
+ * Usage:
+ *
+ *   import { TelaroGate } from "@telaro/middleware";
+ *   import { DriftClient } from "@drift-labs/sdk";
+ *
+ *   const drift = new DriftClient({...});
+ *
+ *   const gated = TelaroGate.wrap(drift, {
+ *     methods: ["placePerpOrder", "deposit"],
+ *     resolveAgent: (args) => args[0]?.agentPubkey,
+ *     policy: { minBond: 10_000_000n, minScore: 700 },
+ *   });
+ *
+ *   await gated.placePerpOrder({ agentPubkey, marketIndex: 0, ... });
+ *   // → Throws TelaroPolicyError if agent below threshold,
+ *   //   else passes through to drift.placePerpOrder().
+ */
+import { TelaroApi } from "@telaro/sdk";
+export declare class TelaroPolicyError extends Error {
+    readonly code: TelaroPolicyCode;
+    readonly agentPubkey: string;
+    readonly method: string;
+    constructor(opts: {
+        code: TelaroPolicyCode;
+        agentPubkey: string;
+        method: string;
+        message: string;
+    });
+}
+export type TelaroPolicyCode = "NOT_BONDED" | "BOND_BELOW_MIN" | "SCORE_BELOW_MIN" | "FROZEN" | "LOOKUP_FAILED";
+export interface TelaroPolicy {
+    /** Minimum USDC bond required (atomic, 6dp). */
+    minBond: bigint;
+    /** Minimum score required (0..1000). */
+    minScore: number;
+    /** If true, allow the call when Telaro lookup fails (network, etc.).
+     *  Default: false (fail closed). */
+    allowOnLookupFailure?: boolean;
+}
+export interface GateConfig<T> {
+    /** Method names on the wrapped SDK to gate. */
+    methods: Array<keyof T>;
+    /** Policy enforced before each gated call. */
+    policy: TelaroPolicy;
+    /** Function that extracts the agent pubkey from the call args. */
+    resolveAgent: (args: unknown[]) => string | undefined;
+    /** Telaro REST API base. Default https://telaro.xyz. */
+    apiBase?: string;
+    /** API key for higher rate-limit tiers. */
+    apiKey?: string;
+    /** Optional pre-fetched API client (use this to share across many
+     *  wrappers for fewer connections). */
+    api?: TelaroApi;
+    /** Optional cache TTL for trust profile lookups, in ms. Default 30s.
+     *  Set 0 to disable caching. Set 60_000 for a typical bot. */
+    cacheTtlMs?: number;
+    /** Hook fired after every gate decision. Useful for telemetry. */
+    onDecision?: (event: GateDecisionEvent) => void;
+}
+export interface GateDecisionEvent {
+    agentPubkey: string;
+    method: string;
+    decision: "pass" | "abort";
+    code?: TelaroPolicyCode;
+    trust?: {
+        score: number;
+        bondAtomic: bigint;
+        frozen: boolean;
+        successRate: number;
+    };
+    durationMs: number;
+}
+/**
+ * Wraps an SDK instance such that calls to `config.methods` are gated
+ * by Telaro policy. Returns the same instance reference (mutated in
+ * place via Proxy-shadowing on the methods).
+ *
+ * Idempotent: re-wrapping is a no-op.
+ */
+export declare class TelaroGate {
+    static wrap<T extends object>(sdk: T, config: GateConfig<T>): T;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAE7D,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACZ,IAAI,EAAE;QAChB,IAAI,EAAE,gBAAgB,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;KACjB;CAOF;AAED,MAAM,MAAM,gBAAgB,GACxB,YAAY,GACZ,gBAAgB,GAChB,iBAAiB,GACjB,QAAQ,GACR,eAAe,CAAC;AAEpB,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB;wCACoC;IACpC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,UAAU,CAAC,CAAC;IAC3B,+CAA+C;IAC/C,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACxB,8CAA8C;IAC9C,MAAM,EAAE,YAAY,CAAC;IACrB,kEAAkE;IAClE,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,MAAM,GAAG,SAAS,CAAC;IACtD,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;2CACuC;IACvC,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB;kEAC8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;CACjD;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,OAAO,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,qBAAa,UAAU;IACrB,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;CA6DhE"}

package/dist/index.js

@@ -0,0 +1,159 @@
+/**
+ * @telaro/middleware — generic trust-gate wrapper for any TypeScript SDK.
+ *
+ * Pattern: pick which methods on a third-party SDK should be gated by
+ * Telaro bond + score policy. The wrapper proxies those methods so the
+ * call throws *before* the underlying tx is built, if the agent doesn't
+ * meet the policy.
+ *
+ * Use this when:
+ *   - You're integrating Telaro into a DApp/SDK that has no hook system
+ *     (unlike idolly-acp, which we use @telaro/idolly-acp-hook for).
+ *   - You want a one-line wrap without forking the SDK.
+ *
+ * Usage:
+ *
+ *   import { TelaroGate } from "@telaro/middleware";
+ *   import { DriftClient } from "@drift-labs/sdk";
+ *
+ *   const drift = new DriftClient({...});
+ *
+ *   const gated = TelaroGate.wrap(drift, {
+ *     methods: ["placePerpOrder", "deposit"],
+ *     resolveAgent: (args) => args[0]?.agentPubkey,
+ *     policy: { minBond: 10_000_000n, minScore: 700 },
+ *   });
+ *
+ *   await gated.placePerpOrder({ agentPubkey, marketIndex: 0, ... });
+ *   // → Throws TelaroPolicyError if agent below threshold,
+ *   //   else passes through to drift.placePerpOrder().
+ */
+import { TelaroApi } from "@telaro/sdk";
+export class TelaroPolicyError extends Error {
+    code;
+    agentPubkey;
+    method;
+    constructor(opts) {
+        super(opts.message);
+        this.name = "TelaroPolicyError";
+        this.code = opts.code;
+        this.agentPubkey = opts.agentPubkey;
+        this.method = opts.method;
+    }
+}
+/**
+ * Wraps an SDK instance such that calls to `config.methods` are gated
+ * by Telaro policy. Returns the same instance reference (mutated in
+ * place via Proxy-shadowing on the methods).
+ *
+ * Idempotent: re-wrapping is a no-op.
+ */
+export class TelaroGate {
+    static wrap(sdk, config) {
+        if (sdk[WRAPPED])
+            return sdk;
+        const api = config.api ?? new TelaroApi(config.apiBase ?? "https://telaro.xyz", { apiKey: config.apiKey });
+        const cache = new TrustCache(config.cacheTtlMs ?? 30_000);
+        for (const key of config.methods) {
+            const method = sdk[key];
+            if (typeof method !== "function")
+                continue;
+            const original = method;
+            sdk[key] = async (...args) => {
+                const t0 = Date.now();
+                const agentPubkey = config.resolveAgent(args);
+                if (!agentPubkey) {
+                    // Resolver couldn't find an agent in the args. Pass through;
+                    // assumption: not every call needs gating.
+                    return original.apply(sdk, args);
+                }
+                let trust;
+                try {
+                    trust = await cache.get(agentPubkey, () => api.agent(agentPubkey));
+                }
+                catch (err) {
+                    if (config.policy.allowOnLookupFailure) {
+                        config.onDecision?.({
+                            agentPubkey, method: String(key), decision: "pass",
+                            durationMs: Date.now() - t0,
+                        });
+                        return original.apply(sdk, args);
+                    }
+                    throw new TelaroPolicyError({
+                        code: "LOOKUP_FAILED", agentPubkey, method: String(key),
+                        message: `[telaro] failed to verify trust: ${err instanceof Error ? err.message : err}`,
+                    });
+                }
+                const decision = evaluate(trust, config.policy);
+                if (decision.code) {
+                    config.onDecision?.({
+                        agentPubkey, method: String(key), decision: "abort",
+                        code: decision.code, trust: decision.trust,
+                        durationMs: Date.now() - t0,
+                    });
+                    throw new TelaroPolicyError({
+                        code: decision.code, agentPubkey, method: String(key),
+                        message: decision.message,
+                    });
+                }
+                config.onDecision?.({
+                    agentPubkey, method: String(key), decision: "pass",
+                    trust: decision.trust, durationMs: Date.now() - t0,
+                });
+                return original.apply(sdk, args);
+            };
+        }
+        sdk[WRAPPED] = true;
+        return sdk;
+    }
+}
+const WRAPPED = Symbol.for("@telaro/middleware/wrapped");
+function evaluate(detail, policy) {
+    if (!detail) {
+        return { code: "NOT_BONDED", message: `[telaro] agent has no on-chain bond` };
+    }
+    const a = detail.agent;
+    const trust = {
+        score: a.score,
+        bondAtomic: BigInt(a.bond_atomic),
+        frozen: a.frozen,
+        successRate: a.success_rate,
+    };
+    if (a.frozen) {
+        return { code: "FROZEN", message: `[telaro] agent is frozen`, trust };
+    }
+    if (trust.bondAtomic < policy.minBond) {
+        return {
+            code: "BOND_BELOW_MIN",
+            message: `[telaro] bond ${trust.bondAtomic} below required ${policy.minBond}`,
+            trust,
+        };
+    }
+    if (a.score < policy.minScore) {
+        return {
+            code: "SCORE_BELOW_MIN",
+            message: `[telaro] score ${a.score} below required ${policy.minScore}`,
+            trust,
+        };
+    }
+    return { message: "pass", trust };
+}
+class TrustCache {
+    ttlMs;
+    store = new Map();
+    constructor(ttlMs) {
+        this.ttlMs = ttlMs;
+    }
+    async get(key, loader) {
+        if (this.ttlMs <= 0)
+            return loader();
+        const entry = this.store.get(key);
+        const now = Date.now();
+        if (entry && entry.expires > now)
+            return entry.value;
+        const value = await loader();
+        this.store.set(key, { value, expires: now + this.ttlMs });
+        return value;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAE7D,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAmB;IACvB,WAAW,CAAS;IACpB,MAAM,CAAS;IACxB,YAAY,IAKX;QACC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF;AAsDD;;;;;;GAMG;AACH,MAAM,OAAO,UAAU;IACrB,MAAM,CAAC,IAAI,CAAmB,GAAM,EAAE,MAAqB;QACzD,IAAK,GAA+B,CAAC,OAAO,CAAC;YAAE,OAAO,GAAG,CAAC;QAE1D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,IAAI,oBAAoB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3G,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,CAAC;QAE1D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,MAAM,GAAI,GAA+B,CAAC,GAAa,CAAC,CAAC;YAC/D,IAAI,OAAO,MAAM,KAAK,UAAU;gBAAE,SAAS;YAC3C,MAAM,QAAQ,GAAG,MAA+C,CAAC;YAEhE,GAA+B,CAAC,GAAa,CAAC,GAAG,KAAK,EAAE,GAAG,IAAe,EAAE,EAAE;gBAC7E,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACtB,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC9C,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,6DAA6D;oBAC7D,2CAA2C;oBAC3C,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACnC,CAAC;gBAED,IAAI,KAA4B,CAAC;gBACjC,IAAI,CAAC;oBACH,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;gBACrE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;wBACvC,MAAM,CAAC,UAAU,EAAE,CAAC;4BAClB,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,MAAM;4BAClD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;yBAC5B,CAAC,CAAC;wBACH,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBACnC,CAAC;oBACD,MAAM,IAAI,iBAAiB,CAAC;wBAC1B,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;wBACvD,OAAO,EAAE,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE;qBACxF,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBAChD,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAClB,MAAM,CAAC,UAAU,EAAE,CAAC;wBAClB,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO;wBACnD,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK;wBAC1C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;qBAC5B,CAAC,CAAC;oBACH,MAAM,IAAI,iBAAiB,CAAC;wBAC1B,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;wBACrD,OAAO,EAAE,QAAQ,CAAC,OAAO;qBAC1B,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,CAAC,UAAU,EAAE,CAAC;oBAClB,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,MAAM;oBAClD,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;iBACnD,CAAC,CAAC;gBAEH,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC,CAAC;QACJ,CAAC;QAEA,GAA+B,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;QACjD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAiBzD,SAAS,QAAQ,CAAC,MAA6B,EAAE,MAAoB;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAChF,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,WAAW,EAAE,CAAC,CAAC,YAAY;KAC5B,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,iBAAiB,KAAK,CAAC,UAAU,mBAAmB,MAAM,CAAC,OAAO,EAAE;YAC7E,KAAK;SACN,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,kBAAkB,CAAC,CAAC,KAAK,mBAAmB,MAAM,CAAC,QAAQ,EAAE;YACtE,KAAK;SACN,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU;IAEM;IADZ,KAAK,GAAG,IAAI,GAAG,EAA6D,CAAC;IACrF,YAAoB,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAErC,KAAK,CAAC,GAAG,CACP,GAAW,EACX,MAA4C;QAE5C,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO,MAAM,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,GAAG,GAAG;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@telaro/middleware",
+  "version": "0.1.0",
+  "description": "Generic Telaro trust-gate middleware. Wraps any TypeScript SDK to enforce on-chain bond + score policy before tx-emitting methods.",
+  "license": "MIT",
+  "main": "dist/index.js",
+  "module": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "clean": "rm -rf dist",
+    "test": "node --import tsx/esm --test tests/*.test.ts",
+    "prepublishOnly": "pnpm clean && pnpm build"
+  },
+  "dependencies": {
+    "@telaro/sdk": "workspace:*",
+    "@solana/web3.js": "^1.95.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.16.0",
+    "typescript": "^5.5.0"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Telaro-Protocol/Telaro-Protocol.git",
+    "directory": "packages/middleware"
+  },
+  "homepage": "https://telaro.xyz",
+  "bugs": {
+    "url": "https://github.com/Telaro-Protocol/Telaro-Protocol/issues"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "solana",
+    "telaro",
+    "middleware",
+    "trust-gate",
+    "ai-agents",
+    "reputation"
+  ]
+}