@temporalabs/treasury 0.1.1 → 0.1.3

package/dist/disclosures.d.ts

@@ -2,13 +2,29 @@
  * The disclosures a distribution surface presents before a depositor's first deposit.
  * An agent skill IS a distribution surface, so `earn_terms` returns these verbatim and the
  * skill instructs the agent to show them and get an explicit acknowledgement before building a
- * first deposit. They are written for the vaults this registry actually offers — Tempora test
- * vaults on ERC-4626 chassis on Base — and say what is true of those, not of a fund that has not
- * launched. Change them when the offering changes, and nowhere else.
+ * first deposit. They are written for the vaults this registry actually offers — Tempora Labs test
+ * vaults on ERC-4626 chassis on Base, Arbitrum One, Robinhood Chain, Ethereum and Monad, and a Kamino
+ * vault on Solana — and say what is true of those, not of a fund that has not launched. Change them when the offering changes,
+ * and nowhere else.
  */
 export declare const DISCLOSURES: {
-    readonly source: "Agent Treasury — pre-deposit disclosures, 2026-09-15";
+    readonly source: "Agent Treasury — pre-deposit disclosures, 2026-09-15 (wording revised 2026-10-04: Tempora Labs named in full; 2026-10-12: withdrawals subject to liquidity, and the Solana co-signer)";
     readonly presentBefore: "the depositor's first deposit, on every distribution surface";
-    readonly items: readonly ["EVERY VAULT THIS CLIENT OFFERS TODAY IS A TEST VAULT — unproven, and named as such on-chain. They exist to exercise the product, not to hold savings. Deposit only an amount you are fully prepared to lose entirely, and do not move significant funds into one.", "This is a smart-contract vault, not a bank deposit. No deposit insurance of any kind applies.", "The share token's value is a function of the vault's underlying holdings and is not guaranteed. It can go down.", "The vault holds positions in third-party protocols, each of which carries smart-contract, custody, and mechanism risk that Tempora does not control.", "Any yield figure is a measurement over a past window, not a promise. Historical performance is not indicative of future results.", "A withdrawal is served from the vault's liquid balance and then by unwinding its positions. In stressed conditions part of a position may not be withdrawable immediately; earn_balance reports what is exitable now, simulated at the current block.", "Deposits into a whitelist-gated vault are accepted only from accounts the fund has admitted. Withdrawals are public: an account that holds shares can always leave.", "The vault's current holdings, weights and fees are on-chain and publicly readable at the vault's address.", "The default vault is a Tempora-curated destination. Tempora can set fees on it as curator (a management fee and a performance fee, both readable on-chain; check them before depositing). This client offers it because it is Tempora's, not because it is the best-yielding vault available."];
-    readonly clientNotes: readonly ["This client prepares unsigned calls only. It cannot sign, send, or move funds; the operator's own signer does that, and the operator is responsible for what it signs.", "Geography: the operator is responsible for the depositor's eligibility in its own jurisdiction. This client has no geographic signal and makes no representation about eligibility."];
+    readonly items: readonly ["EVERY VAULT THIS CLIENT OFFERS TODAY IS A TEST VAULT — unproven, and named as such on-chain. They exist to exercise the product, not to hold savings. Deposit only an amount you are fully prepared to lose entirely, and do not move significant funds into one.", "This is a smart-contract vault, not a bank deposit. No deposit insurance of any kind applies.", "The share token's value is a function of the vault's underlying holdings and is not guaranteed. It can go down.", "The vault holds positions in third-party protocols, each of which carries smart-contract, custody, and mechanism risk that Tempora Labs does not control.", "Any yield figure is a measurement over a past window, not a promise. Historical performance is not indicative of future results.", "A withdrawal is served from the vault's liquid balance and then by unwinding its positions. In stressed conditions part of a position may not be withdrawable immediately; earn_balance reports what is exitable now, simulated at the current block.", "Deposits into a whitelist-gated vault are accepted only from accounts the fund has admitted. Withdrawals are not gated: an account that holds shares can leave, subject to the vault's liquidity. On Solana, Kamino's program can require a co-signer on every withdrawal, which would stop exits until it co-signs; none is required today.", "The vault's current holdings, weights and fees are on-chain and publicly readable at the vault's address.", "Each default vault, and the demo vault, is a destination curated by Tempora Labs. Tempora Labs can set fees on it as curator (a management fee and a performance fee, both readable on-chain; check them before depositing). This client offers it because it is a Tempora Labs vault, not because it is the best-yielding vault available."];
+    readonly clientNotes: readonly ["This client never signs, sends, or moves funds. Every transaction is signed by the operator's own wallet (through `connect`) or the operator's own signer, and the operator is responsible for what it signs.", "Geography: the operator is responsible for the depositor's eligibility in its own jurisdiction. This client has no geographic signal and makes no representation about eligibility."];
+    /**
+     * The same points in plain words, for the acknowledgement an operator reads before every signing
+     * page (`connect/ack.ts`). A person has to read this each time, so it is short; `items` and
+     * `clientNotes` above stay the full text, which `earn_terms` returns. Keep the two in step: a
+     * point added above needs its plain sentence here. The first item above (every vault is a test
+     * vault; deposit only what you can lose) has none: the acknowledgement prints the vault's own
+     * `warning` from the registry, which says it, and `registry.test.ts` holds every row to that.
+     */
+    readonly plain: {
+        readonly deposit: readonly ["This is not a bank deposit, and there is no deposit insurance.", "The value of your shares is not guaranteed. It can go down.", "Your money goes into third-party protocols that Tempora Labs does not control. They can fail.", "Any yield you see is past performance, not a promise.", "You can withdraw, but in stressed markets part of your money may not come out right away.", "Tempora Labs runs this vault and can charge fees on it. It is offered because it is a Tempora Labs vault, not because it pays the most. Its holdings and fees are public on-chain."];
+        /** Added before a deposit into a vault whose registry row is not open to every account. */
+        readonly gatedDeposit: "This vault only accepts deposits from accounts Tempora Labs has admitted. If yours is not one, the deposit will fail.";
+        readonly always: readonly ["This software never signs or moves your money. You approve every transaction in your own wallet, and you are responsible for what you approve.", "You are responsible for being allowed to use this where you live."];
+        readonly fullTerms: "Ask your agent for the full terms at any time.";
+    };
 };

package/dist/disclosures.js

@@ -2,27 +2,53 @@
  * The disclosures a distribution surface presents before a depositor's first deposit.
  * An agent skill IS a distribution surface, so `earn_terms` returns these verbatim and the
  * skill instructs the agent to show them and get an explicit acknowledgement before building a
- * first deposit. They are written for the vaults this registry actually offers — Tempora test
- * vaults on ERC-4626 chassis on Base — and say what is true of those, not of a fund that has not
- * launched. Change them when the offering changes, and nowhere else.
+ * first deposit. They are written for the vaults this registry actually offers — Tempora Labs test
+ * vaults on ERC-4626 chassis on Base, Arbitrum One, Robinhood Chain, Ethereum and Monad, and a Kamino
+ * vault on Solana — and say what is true of those, not of a fund that has not launched. Change them when the offering changes,
+ * and nowhere else.
  */
 export const DISCLOSURES = {
-    source: "Agent Treasury — pre-deposit disclosures, 2026-09-15",
+    source: "Agent Treasury — pre-deposit disclosures, 2026-09-15 (wording revised 2026-10-04: Tempora Labs named in full; 2026-10-12: withdrawals subject to liquidity, and the Solana co-signer)",
     presentBefore: "the depositor's first deposit, on every distribution surface",
     items: [
         "EVERY VAULT THIS CLIENT OFFERS TODAY IS A TEST VAULT — unproven, and named as such on-chain. They exist to exercise the product, not to hold savings. Deposit only an amount you are fully prepared to lose entirely, and do not move significant funds into one.",
         "This is a smart-contract vault, not a bank deposit. No deposit insurance of any kind applies.",
         "The share token's value is a function of the vault's underlying holdings and is not guaranteed. It can go down.",
-        "The vault holds positions in third-party protocols, each of which carries smart-contract, custody, and mechanism risk that Tempora does not control.",
+        "The vault holds positions in third-party protocols, each of which carries smart-contract, custody, and mechanism risk that Tempora Labs does not control.",
         "Any yield figure is a measurement over a past window, not a promise. Historical performance is not indicative of future results.",
         "A withdrawal is served from the vault's liquid balance and then by unwinding its positions. In stressed conditions part of a position may not be withdrawable immediately; earn_balance reports what is exitable now, simulated at the current block.",
-        "Deposits into a whitelist-gated vault are accepted only from accounts the fund has admitted. Withdrawals are public: an account that holds shares can always leave.",
+        "Deposits into a whitelist-gated vault are accepted only from accounts the fund has admitted. Withdrawals are not gated: an account that holds shares can leave, subject to the vault's liquidity. On Solana, Kamino's program can require a co-signer on every withdrawal, which would stop exits until it co-signs; none is required today.",
         "The vault's current holdings, weights and fees are on-chain and publicly readable at the vault's address.",
-        "The default vault is a Tempora-curated destination. Tempora can set fees on it as curator (a management fee and a performance fee, both readable on-chain; check them before depositing). This client offers it because it is Tempora's, not because it is the best-yielding vault available.",
+        "Each default vault, and the demo vault, is a destination curated by Tempora Labs. Tempora Labs can set fees on it as curator (a management fee and a performance fee, both readable on-chain; check them before depositing). This client offers it because it is a Tempora Labs vault, not because it is the best-yielding vault available.",
     ],
     clientNotes: [
-        "This client prepares unsigned calls only. It cannot sign, send, or move funds; the operator's own signer does that, and the operator is responsible for what it signs.",
+        "This client never signs, sends, or moves funds. Every transaction is signed by the operator's own wallet (through `connect`) or the operator's own signer, and the operator is responsible for what it signs.",
         "Geography: the operator is responsible for the depositor's eligibility in its own jurisdiction. This client has no geographic signal and makes no representation about eligibility.",
     ],
+    /**
+     * The same points in plain words, for the acknowledgement an operator reads before every signing
+     * page (`connect/ack.ts`). A person has to read this each time, so it is short; `items` and
+     * `clientNotes` above stay the full text, which `earn_terms` returns. Keep the two in step: a
+     * point added above needs its plain sentence here. The first item above (every vault is a test
+     * vault; deposit only what you can lose) has none: the acknowledgement prints the vault's own
+     * `warning` from the registry, which says it, and `registry.test.ts` holds every row to that.
+     */
+    plain: {
+        deposit: [
+            "This is not a bank deposit, and there is no deposit insurance.",
+            "The value of your shares is not guaranteed. It can go down.",
+            "Your money goes into third-party protocols that Tempora Labs does not control. They can fail.",
+            "Any yield you see is past performance, not a promise.",
+            "You can withdraw, but in stressed markets part of your money may not come out right away.",
+            "Tempora Labs runs this vault and can charge fees on it. It is offered because it is a Tempora Labs vault, not because it pays the most. Its holdings and fees are public on-chain.",
+        ],
+        /** Added before a deposit into a vault whose registry row is not open to every account. */
+        gatedDeposit: "This vault only accepts deposits from accounts Tempora Labs has admitted. If yours is not one, the deposit will fail.",
+        always: [
+            "This software never signs or moves your money. You approve every transaction in your own wallet, and you are responsible for what you approve.",
+            "You are responsible for being allowed to use this where you live.",
+        ],
+        fullTerms: "Ask your agent for the full terms at any time.",
+    },
 };
 //# sourceMappingURL=disclosures.js.map

package/dist/disclosures.js.map

@@ -1 +1 @@
-{"version":3,"file":"disclosures.js","sourceRoot":"","sources":["../src/disclosures.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,EAAE,sDAAsD;IAC9D,aAAa,EAAE,8DAA8D;IAC7E,KAAK,EAAE;QACL,mQAAmQ;QACnQ,+FAA+F;QAC/F,iHAAiH;QACjH,sJAAsJ;QACtJ,kIAAkI;QAClI,uPAAuP;QACvP,qKAAqK;QACrK,2GAA2G;QAC3G,+RAA+R;KAChS;IACD,WAAW,EAAE;QACX,wKAAwK;QACxK,qLAAqL;KACtL;CACO,CAAC"}
+{"version":3,"file":"disclosures.js","sourceRoot":"","sources":["../src/disclosures.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,EAAE,uLAAuL;IAC/L,aAAa,EAAE,8DAA8D;IAC7E,KAAK,EAAE;QACL,mQAAmQ;QACnQ,+FAA+F;QAC/F,iHAAiH;QACjH,2JAA2J;QAC3J,kIAAkI;QAClI,uPAAuP;QACvP,8UAA8U;QAC9U,2GAA2G;QAC3G,6UAA6U;KAC9U;IACD,WAAW,EAAE;QACX,+MAA+M;QAC/M,qLAAqL;KACtL;IACD;;;;;;;OAOG;IACH,KAAK,EAAE;QACL,OAAO,EAAE;YACP,gEAAgE;YAChE,6DAA6D;YAC7D,+FAA+F;YAC/F,uDAAuD;YACvD,2FAA2F;YAC3F,oLAAoL;SACrL;QACD,2FAA2F;QAC3F,YAAY,EAAE,uHAAuH;QACrI,MAAM,EAAE;YACN,gJAAgJ;YAChJ,mEAAmE;SACpE;QACD,SAAS,EAAE,gDAAgD;KAC5D;CACO,CAAC"}

package/dist/earn/commands.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Agent Treasury — the earn commands (earn skill), run headless by `src/cli.ts` as `treasury earn <command>`.
+ *
+ * Read commands, quotes, and UNSIGNED call builders only. There is no `sign` and no `send` command, and
+ * there will not be one here: the skill supplies intent, the consumer supplies the signer. Anything
+ * that holds a key lives outside this process and receives the calls these commands emit.
+ *
+ * Eight commands. Each is keyed by its tool name, `earn_`-prefixed so later skills can sit beside it
+ * in one namespace; on the command line `earn_quote` is `treasury earn quote`:
+ *
+ *   earn_vaults    earn_terms     earn_quote (direction)   earn_status (no args = health)
+ *   earn_balance   earn_claim     earn_prepare_deposit     earn_prepare_withdraw
+ *
+ * Three contracts worth stating here because they are easy to erode:
+ *
+ * 1. `earn_prepare_*` return an ENVELOPE, `{ requires_signature, status: "unsigned", calls }`,
+ *    not a bare array. This cannot stop a model reporting "deposited" — nothing at this boundary
+ *    can — but it makes an unsigned build structurally distinguishable from a completed one, so a
+ *    consumer or a test can assert on it. Wrapped HERE only: `buildDeposit`/`buildWithdraw` still
+ *    return arrays, so a direct library consumer (see docs/runbooks/sign_and_send.md) gets the
+ *    naked calls exactly as before.
+ * 2. The address argument is `account` everywhere. It was `depositor`, `owner` and `principal` in
+ *    three different tools. `receiver` stays distinct because it genuinely is: `account` owns the
+ *    shares, `receiver` is where the money lands.
+ * 3. A vault lives on ONE chain, and every tool that takes `vault` also takes `chain`. Naming a
+ *    chain alone selects that chain's default vault; naming both and having them disagree is
+ *    refused (`resolveVault`), never settled by picking one. Every response that names a vault says
+ *    which chain it is on, because a prepared call is only correct on that chain.
+ */
+import { z } from "zod";
+/**
+ * What a signer must do for these calls to land exactly once. Every rule but the first is a failure
+ * measured on a real Base round trip, not a precaution (2026-09-13, two runs through these tools).
+ * The first exists because the registry spans chains: a call's `to` is an address, and an address
+ * with no contract on the chain it is sent on accepts the transaction and does nothing.
+ * These commands cannot enforce any of them — they never sign — so they state them with every build.
+ */
+export declare const SIGNER_RULES: readonly ["Send each call on the chain its `chainId` names, and on no other: check the signer's network before signing. Sent on a different chain, a call can be mined there without doing anything — the approve or the deposit never happened, and gas was still spent.", "Before signing, check every call's destination against the addresses the operator gave: `to`, and the receiver/owner named in `description`. Do not sign a call whose destination you did not confirm.", "Set the nonce explicitly from eth_getTransactionCount(account, \"pending\") immediately before each send. A load-balanced RPC can hand a signing library a stale nonce, and the send is then rejected as \"nonce too low\" (measured 2026-09-14, mainnet.base.org).", "Set the gas limit to the call's gasAdvice (estimate × 1.5).", "Wait for each receipt before sending the next call, and poll for it on a provider that serves receipts: a public endpoint may refuse eth_getTransactionReceipt (measured 2026-09-14, publicnode). A failed receipt poll does not mean the transaction failed.", "If a send or receipt poll fails for any reason other than an on-chain revert, read the account's nonce on a DIFFERENT provider before re-sending. A nonce that moved means the transaction was accepted; re-sending it would repeat the deposit or withdrawal."];
+/** One command: what `--help` prints, the arguments it takes, and the handler that answers with JSON text. */
+export interface Command {
+    title: string;
+    description: string;
+    inputSchema: z.ZodObject<z.ZodRawShape>;
+    handler: (args: never) => Promise<string>;
+}
+export declare function buildCommands(): Record<string, Command>;