@temporalabs/treasury 0.1.0

package/dist/registry-schema.js

@@ -0,0 +1,124 @@
+import { z } from "zod";
+import { getAddress, isAddress } from "viem";
+// `strict: true` refuses a lowercase or otherwise mis-cased address — the registry is a hand-edited
+// artifact and a checksum is the one typo detector an address carries.
+const address = z
+    .string()
+    .refine((s) => isAddress(s, { strict: true }), { message: "not a checksummed EVM address" })
+    .transform((s) => getAddress(s));
+export const chassisSchema = z.enum(["morpho-v2", "fusion", "enzyme"]);
+/**
+ * Which chassis expose a standard ERC-4626 `deposit`/`redeem` to a depositor. Enzyme does not
+ * (`buyShares` via the comptroller), which is what every refusal path in this client is measured
+ * against: build, pre-flight, the MCP boundary and the default-vault rule all discriminate on it.
+ */
+export const erc4626Chassis = new Set(["morpho-v2", "fusion"]);
+/**
+ * Whose contract the depositor's USDC actually enters.
+ * - `morpho`: a public third-party Morpho vault, reached directly. No row uses it today (Tempora vaults only).
+ * - `tempora`: a Tempora fund vault (the product; each fund joins as it goes live).
+ */
+export const backendSchema = z.enum(["morpho", "tempora"]);
+/**
+ * Whether a third party can deposit is a MEASUREMENT, not a config flag. `maxDeposit()` lies on
+ * two of the three live chassis (Fusion returns uint256.max behind a whitelist; Morpho V2 returns 0
+ * on an open vault), so the only honest value is the result of a simulated `deposit` from a
+ * stranger, stamped with when and how it was taken.
+ */
+export const depositOpenSchema = z.object({
+    open: z.boolean(),
+    method: z.literal("simulated-deposit-from-stranger"),
+    measuredAtBlock: z.number().int().positive(),
+    measuredAtIso: z.string().datetime(),
+    /** Present iff `open` is false. The observed revert, named only where the instrument discriminated. */
+    reason: z.enum(["WHITELIST_GATED", "NOT_ALLOWLISTED", "NOT_ERC4626", "PAUSED", "REVERTED_OTHER"]).optional(),
+    detail: z.string().optional(),
+});
+export const vaultEntrySchema = z
+    .object({
+    /**
+     * The vault's own ERC-20 ticker, from `symbol()` — the identifier every tool takes and returns.
+     * It is the chain's name for this vault rather than one this repository assigns, so anyone
+     * holding the address can check it, and `scripts/registry-check.ts` reconciles it.
+     */
+    symbol: z.string().min(1).regex(/^[A-Za-z0-9][A-Za-z0-9._-]*$/),
+    /** The vault's own `name()`, reconciled the same way. */
+    name: z.string().min(1),
+    /**
+     * What a depositor must be told about THIS vault before any deposit is prepared. REQUIRED,
+     * and deliberately not defaulted: a vault cannot enter the registry without someone stating
+     * its risk posture in words, and a production vault's text will not read like a test
+     * vault's. `earn_vaults` returns it per row; the skill shows it to the depositor rather
+     * than summarising it.
+     */
+    warning: z.string().min(1),
+    chainId: z.literal(8453),
+    address,
+    chassis: chassisSchema,
+    backend: backendSchema,
+    /** Exactly one vault in the registry carries this; it is what the tools use when no `vault` is given. */
+    isDefault: z.boolean().default(false),
+    asset: z.object({ address, symbol: z.string().min(1), decimals: z.number().int().min(0).max(36) }),
+    /** Measured on-chain via `decimals()`. 18 on Morpho V2 and Enzyme, 8 on Fusion — never assume. */
+    shareDecimals: z.number().int().min(0).max(36),
+    depositOpen: depositOpenSchema,
+    /**
+     * The first block at which the vault contract has code (measured by bisecting `eth_getCode`). A
+     * position's Deposit/Withdraw history cannot predate it, so a scan from here is the WHOLE history —
+     * `earn_balance` starts here instead of guessing a lookback.
+     */
+    deployedAtBlock: z.number().int().positive().optional(),
+    notes: z.array(z.string()).default([]),
+})
+    .strict()
+    .superRefine((v, ctx) => {
+    if (!v.depositOpen.open && !v.depositOpen.reason) {
+        ctx.addIssue({ code: "custom", path: ["depositOpen", "reason"], message: "a closed vault must say why" });
+    }
+    if (v.depositOpen.open && v.depositOpen.reason) {
+        ctx.addIssue({ code: "custom", path: ["depositOpen", "reason"], message: "an open vault carries no reason" });
+    }
+    if (!erc4626Chassis.has(v.chassis) && v.depositOpen.open) {
+        ctx.addIssue({
+            code: "custom",
+            path: ["depositOpen"],
+            message: `${v.chassis} has no ERC-4626 deposit path; it cannot be marked open for this client`,
+        });
+    }
+});
+export const registrySchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    /**
+     * When the rows were last reconciled against the chain (`scripts/registry-check.ts`). The chain is
+     * the only source a row is checked against; there is no upstream repository the client knows of.
+     */
+    reconciledAtIso: z.string().datetime(),
+    vaults: z.array(vaultEntrySchema).min(1),
+})
+    .strict()
+    .superRefine((r, ctx) => {
+    const symbols = new Set();
+    const addrs = new Set();
+    const defaults = r.vaults.filter((v) => v.isDefault);
+    if (defaults.length !== 1) {
+        ctx.addIssue({ code: "custom", path: ["vaults"], message: `exactly one vault must be isDefault; found ${defaults.length}` });
+    }
+    const d = defaults[0];
+    // A default may be WHITELIST_GATED. The
+    // pre-flight re-measures access live on every call and refuses a non-member, so
+    // a gated default costs an agent a clear refusal, never funds. It must still be a chassis this client
+    // can build for, and it may not be closed for any other reason.
+    if (d && !(erc4626Chassis.has(d.chassis) && (d.depositOpen.open || d.depositOpen.reason === "WHITELIST_GATED"))) {
+        ctx.addIssue({ code: "custom", path: ["vaults"], message: `the default vault (${d.symbol}) must be ERC-4626 and either measured open or WHITELIST_GATED` });
+    }
+    r.vaults.forEach((v, i) => {
+        if (symbols.has(v.symbol))
+            ctx.addIssue({ code: "custom", path: ["vaults", i, "symbol"], message: `duplicate symbol ${v.symbol}` });
+        if (addrs.has(v.address))
+            ctx.addIssue({ code: "custom", path: ["vaults", i, "address"], message: `duplicate address ${v.address}` });
+        symbols.add(v.symbol);
+        addrs.add(v.address);
+    });
+});
+//# sourceMappingURL=registry-schema.js.map

package/dist/registry-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-schema.js","sourceRoot":"","sources":["../src/registry-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAE7C,oGAAoG;AACpG,uEAAuE;AACvE,MAAM,OAAO,GAAG,CAAC;KACd,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;KAC3F,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAEnC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGvE;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB,IAAI,GAAG,CAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG9F;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAG3D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IACpD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,uGAAuG;IACvG,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN;;;;OAIG;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC;IAC/D,yDAAyD;IACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB;;;;;;OAMG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxB,OAAO;IACP,OAAO,EAAE,aAAa;IACtB,OAAO,EAAE,aAAa;IACtB,yGAAyG;IACzG,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;IAClG,kGAAkG;IAClG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9C,WAAW,EAAE,iBAAiB;IAC9B;;;;OAIG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACtB,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QACjD,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QAC/C,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACzD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,yEAAyE;SAC/F,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B;;;OAGG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACzC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACtB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,8CAA8C,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/H,CAAC;IACD,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtB,wCAAwC;IACxC,gFAAgF;IAChF,sGAAsG;IACtG,gEAAgE;IAChE,IAAI,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC,EAAE,CAAC;QAChH,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC,MAAM,gEAAgE,EAAE,CAAC,CAAC;IAC9J,CAAC;IACD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxB,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpI,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/registry.d.ts

@@ -0,0 +1,26 @@
+import { type Registry, type VaultEntry } from "./registry-schema.js";
+/** Parses and validates the shipped registry. Throws on any schema violation — a registry that does not parse is not a registry. */
+export declare function loadRegistry(): Registry;
+/**
+ * TEST SEAM — `tests/fixtures/registry.ts` only, and NOT re-exported from `index.ts`, so no
+ * consumer of this package can reach it. The unit tiers need chassis the registry does not ship
+ * (18-decimal shares, a non-ERC-4626 chassis, a vault open to anyone); without this they would
+ * pin themselves to whichever vaults the fund happens to offer, and a registry edit — a product
+ * decision — would redden unrelated unit tests. `undefined` restores the shipped file.
+ */
+export declare function __setRegistryForTests(r: Registry | undefined): void;
+export declare function listVaults(): VaultEntry[];
+export declare function getVault(symbol: string): VaultEntry;
+/**
+ * The vault the tools use when the caller names none: `EARN.defaultVault` (config/earn.ts — the
+ * toggle), which the registry must also mark `isDefault` (the measurement; the schema guarantees exactly
+ * one and that it is open). A disagreement between the two is refused, never resolved silently.
+ */
+export declare function defaultVault(): VaultEntry;
+/** Resolves an optional ticker to a vault: the named one, or the default. */
+export declare function resolveVault(symbol?: string): VaultEntry;
+/**
+ * The vaults this client can put money into: ACTIVE, on an ERC-4626 chassis, and MEASURED open.
+ * This is the rule, not a list — the count moves as vaults are provisioned, gated, or retired.
+ */
+export declare function depositableVaults(): VaultEntry[];

package/dist/registry.js

@@ -0,0 +1,62 @@
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { registrySchema, erc4626Chassis } from "./registry-schema.js";
+import { EARN } from "./config/earn.js";
+const REGISTRY_URL = new URL("../registry/vaults.json", import.meta.url);
+let cached;
+/** Parses and validates the shipped registry. Throws on any schema violation — a registry that does not parse is not a registry. */
+export function loadRegistry() {
+    if (cached)
+        return cached;
+    const raw = JSON.parse(readFileSync(fileURLToPath(REGISTRY_URL), "utf8"));
+    cached = registrySchema.parse(raw);
+    return cached;
+}
+/**
+ * TEST SEAM — `tests/fixtures/registry.ts` only, and NOT re-exported from `index.ts`, so no
+ * consumer of this package can reach it. The unit tiers need chassis the registry does not ship
+ * (18-decimal shares, a non-ERC-4626 chassis, a vault open to anyone); without this they would
+ * pin themselves to whichever vaults the fund happens to offer, and a registry edit — a product
+ * decision — would redden unrelated unit tests. `undefined` restores the shipped file.
+ */
+export function __setRegistryForTests(r) {
+    cached = r;
+}
+export function listVaults() {
+    return loadRegistry().vaults;
+}
+export function getVault(symbol) {
+    const v = loadRegistry().vaults.find((x) => x.symbol === symbol);
+    if (!v) {
+        const known = loadRegistry()
+            .vaults.map((x) => x.symbol)
+            .join(", ");
+        throw new Error(`unknown vault "${symbol}"; known: ${known}`);
+    }
+    return v;
+}
+/**
+ * The vault the tools use when the caller names none: `EARN.defaultVault` (config/earn.ts — the
+ * toggle), which the registry must also mark `isDefault` (the measurement; the schema guarantees exactly
+ * one and that it is open). A disagreement between the two is refused, never resolved silently.
+ */
+export function defaultVault() {
+    const v = getVault(EARN.defaultVault);
+    if (!v.isDefault) {
+        const marked = loadRegistry().vaults.find((x) => x.isDefault)?.symbol ?? "(none)";
+        throw new Error(`config/earn.ts names "${EARN.defaultVault}" as the default but the registry marks "${marked}"; change both or neither`);
+    }
+    return v;
+}
+/** Resolves an optional ticker to a vault: the named one, or the default. */
+export function resolveVault(symbol) {
+    return symbol ? getVault(symbol) : defaultVault();
+}
+/**
+ * The vaults this client can put money into: ACTIVE, on an ERC-4626 chassis, and MEASURED open.
+ * This is the rule, not a list — the count moves as vaults are provisioned, gated, or retired.
+ */
+export function depositableVaults() {
+    return loadRegistry().vaults.filter((v) => erc4626Chassis.has(v.chassis) && v.depositOpen.open);
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAkC,MAAM,sBAAsB,CAAC;AACtG,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEzE,IAAI,MAA4B,CAAC;AAEjC,oIAAoI;AACpI,MAAM,UAAU,YAAY;IAC1B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAY,CAAC;IACrF,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,CAAuB;IAC3D,MAAM,GAAG,CAAC,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,YAAY,EAAE,CAAC,MAAM,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,KAAK,GAAG,YAAY,EAAE;aACzB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;aAC3B,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,aAAa,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,IAAI,QAAQ,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,YAAY,4CAA4C,MAAM,2BAA2B,CAAC,CAAC;IAC3I,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAAC,MAAe;IAC1C,OAAO,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,YAAY,EAAE,CAAC,MAAM,CAAC,MAAM,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAC3D,CAAC;AACJ,CAAC"}

package/dist/units.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Amount parsing that refuses to guess. A human-readable decimal string is converted with the
+ * caller-supplied decimals; a string with more fractional digits than the token has is an error,
+ * not a silent truncation. `redeem` takes SHARES (shareDecimals); `deposit` takes ASSETS
+ * (asset.decimals). Mixing them is a 10^12 error on an 18/6 vault, and an easy one to ship.
+ */
+export declare function parseAmount(human: string, decimals: number, label: string): bigint;
+export declare function formatAmount(raw: bigint, decimals: number): string;

package/dist/units.js

@@ -0,0 +1,24 @@
+import { formatUnits, parseUnits } from "viem";
+/**
+ * Amount parsing that refuses to guess. A human-readable decimal string is converted with the
+ * caller-supplied decimals; a string with more fractional digits than the token has is an error,
+ * not a silent truncation. `redeem` takes SHARES (shareDecimals); `deposit` takes ASSETS
+ * (asset.decimals). Mixing them is a 10^12 error on an 18/6 vault, and an easy one to ship.
+ */
+export function parseAmount(human, decimals, label) {
+    const s = human.trim();
+    if (!/^\d+(\.\d+)?$/.test(s))
+        throw new Error(`${label}: "${human}" is not a plain decimal amount`);
+    const frac = s.split(".")[1] ?? "";
+    if (frac.length > decimals) {
+        throw new Error(`${label}: "${human}" has ${frac.length} fractional digits but the token has ${decimals} decimals`);
+    }
+    const v = parseUnits(s, decimals);
+    if (v <= 0n)
+        throw new Error(`${label}: amount must be positive`);
+    return v;
+}
+export function formatAmount(raw, decimals) {
+    return formatUnits(raw, decimals);
+}
+//# sourceMappingURL=units.js.map

package/dist/units.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"units.js","sourceRoot":"","sources":["../src/units.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,QAAgB,EAAE,KAAa;IACxE,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,KAAK,iCAAiC,CAAC,CAAC;IACpG,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,wCAAwC,QAAQ,WAAW,CAAC,CAAC;IACtH,CAAC;IACD,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,QAAgB;IACxD,OAAO,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACpC,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1 @@
+export declare const PACKAGE_VERSION: string;

package/dist/version.js

@@ -0,0 +1,14 @@
+/**
+ * The package version, read from package.json — never a literal. The declared version follows the
+ * branch (v0.0.N ⇒ 0.0.N), and CI holds a version branch to that; anything that
+ * reports a version reads it from here so a branch bump cannot leave a stale "0.1.0" behind
+ * (a literal in server.ts once lagged package.json by two releases).
+ *
+ * Same resolution trick as registry.ts: this file sits at src/ top level and the bundle at dist/
+ * top level, so `../package.json` is the package manifest at the repository root from both.
+ */
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+const PACKAGE_JSON_URL = new URL("../package.json", import.meta.url);
+export const PACKAGE_VERSION = JSON.parse(readFileSync(fileURLToPath(PACKAGE_JSON_URL), "utf8")).version;
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,eAAe,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC,OAAO,CAAC"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@temporalabs/treasury",
+  "version": "0.1.0",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/TemporaLabs/treasury.git"
+  },
+  "files": [
+    "LICENSE",
+    "NOTICE",
+    "THIRD_PARTY_NOTICES.md",
+    "dist",
+    "registry"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "description": "Agent Treasury by Tempora Labs — a depositor client for ERC-4626 vaults: registry, pre-flight, and unsigned deposit/withdraw builders. Never signs, never holds a key.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "treasury-mcp": "./dist/mcp-server.mjs"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "prepack": "npm run build && git diff --exit-code -- dist/mcp-server.mjs",
+    "build": "tsc -b && tsup && tsx scripts/third-party-notices.ts --write",
+    "typecheck": "tsc -b && tsc -p tsconfig.scripts.json",
+    "test": "tsc -b && tsc -p tsconfig.scripts.json && vitest run",
+    "test:fork": "tsc -b && TREASURY_FORK=1 vitest run --testTimeout 300000 tests/fork.test.ts",
+    "mcp": "tsx src/mcp/server.ts",
+    "registry:check": "tsx scripts/registry-check.ts",
+    "notices:check": "tsx scripts/third-party-notices.ts"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.20.0",
+    "viem": "^2.37.0",
+    "zod": "^4.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.15.0",
+    "tsup": "^8.5.0",
+    "tsx": "^4.20.0",
+    "typescript": "^5.9.0",
+    "vitest": "^5.0.0"
+  }
+}

package/registry/vaults.json

@@ -0,0 +1,68 @@
+{
+  "schemaVersion": 1,
+  "reconciledAtIso": "2026-09-18T16:25:46Z",
+  "vaults": [
+    {
+      "symbol": "tlCashPlusUSDC2",
+      "name": "Tempora Labs Cash Plus USDC (Test 2)",
+      "warning": "TEST VAULT — unproven. It exists to exercise this product, not to hold savings. Deposit only an amount you are fully prepared to lose entirely, and do not move significant funds into it. Show this warning before preparing any deposit.",
+      "chainId": 8453,
+      "address": "0x040fCA12673778FEED5DA7b2ccFbbAb0cc0134Cf",
+      "chassis": "morpho-v2",
+      "backend": "tempora",
+      "isDefault": true,
+      "asset": {
+        "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
+        "symbol": "USDC",
+        "decimals": 6
+      },
+      "shareDecimals": 18,
+      "depositOpen": {
+        "open": true,
+        "method": "simulated-deposit-from-stranger",
+        "measuredAtBlock": 51372415,
+        "measuredAtIso": "2026-09-16T04:49:00Z",
+        "detail": "deposit(1 USDC, 0x…dEaD) from 0x…dEaD reverted 0xe65b7a77 TransferFromReverted at block 51372415 — it reached the token pull, so access is open; maxDeposit() reads 0 to every caller on this chassis by design and is not consulted."
+      },
+      "deployedAtBlock": 51371133,
+      "notes": [
+        "18-decimal shares against a 6-decimal asset — a share amount is never an asset amount here.",
+        "Morpho Vault V2. maxDeposit() and maxWithdraw() return 0 to every caller by protocol design; the pre-flight simulates the real call and earn_balance simulates the exit. Neither reads those views.",
+        "Withdrawals are served from idle USDC, then through the vault's liquidity adapter; a withdrawal larger than that reverts until positions are unwound. earn_balance reports exitableNow by simulating the withdrawal.",
+        "No fee is set: performanceFee() = 0 and managementFee() = 0 at block 51372415. The curator can introduce one, and the vault's fee timelocks are 0 (timelock(setPerformanceFee) = timelock(setManagementFee) = 0 at block 51404161), so a change needs no notice. Read both fees before depositing.",
+        "The DEFAULT vault, and open to any account: it is in depositable."
+      ]
+    },
+    {
+      "symbol": "tlCashPlusUSDC2A",
+      "name": "Tempora Labs Cash Plus USDC (Test 2A)",
+      "warning": "TEST VAULT — unproven. It exists to exercise this product, not to hold savings. Deposit only an amount you are fully prepared to lose entirely, and do not move significant funds into it. Show this warning before preparing any deposit.",
+      "chainId": 8453,
+      "address": "0x1516D2c082b9cc9af852B1Ebc828f168F27299ef",
+      "chassis": "fusion",
+      "backend": "tempora",
+      "isDefault": false,
+      "asset": {
+        "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
+        "symbol": "USDC",
+        "decimals": 6
+      },
+      "shareDecimals": 8,
+      "depositOpen": {
+        "open": false,
+        "method": "simulated-deposit-from-stranger",
+        "measuredAtBlock": 51361109,
+        "measuredAtIso": "2026-09-15T22:32:47Z",
+        "reason": "WHITELIST_GATED",
+        "detail": "deposit(1 USDC, 0x…dEaD) from 0x…dEaD reverted 0x068ca9d8 AccessManagedUnauthorized at block 51361109. The AccessManager at 0xD76eadf8451eB94df0eADd8BfB01C66EF3182ECC returns getTargetFunctionRole(vault, deposit) = 800; withdraw and redeem are PUBLIC_ROLE (2^64-1), so an account that holds shares can always leave."
+      },
+      "deployedAtBlock": 51359816,
+      "notes": [
+        "8-decimal shares against a 6-decimal asset — a share amount is never an asset amount here.",
+        "getInstantWithdrawalFuses() returns three fuses (measured at block 51361109), so a withdrawal is served from the vault's liquid balance and then, in fuse order, by unwinding its positions in the same transaction. A withdrawal larger than what those positions can release in-block still reverts; earn_balance reports exitableNow, which simulates the withdrawal rather than reading maxWithdraw.",
+        "Deposits need role 800 on the AccessManager. An account without it gets WHITELIST_GATED from earn_status and earn_quote, and this client refuses to build a deposit for it. Withdrawals are public.",
+        "Whitelist-gated (role 800 on its AccessManager): not in depositable. Listed so that an admitted account's position can be read and exited; a non-member gets WHITELIST_GATED from earn_status before anything is built."
+      ]
+    }
+  ]
+}