@totemsdk/edge-adapters 0.2.0 → 0.3.0

package/dist/cjs/payment-l1.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMinimaL1PaymentPort = createMinimaL1PaymentPort;
+/**
+ * Minima L1 payment adapter.
+ *
+ * Delegates transaction construction and signing to the injected `sign` function,
+ * then broadcasts the result via the ChainStateProvider. This keeps key material
+ * out of the adapter entirely.
+ *
+ * For a batteries-included L1 adapter backed by @totemsdk/server's sendTransaction,
+ * wrap sendTransaction in the sign callback:
+ *
+ *   createMinimaL1PaymentPort({
+ *     provider: new PureMinimaRpcProvider(rpcConfig),
+ *     sign: ({ toAddress, amount, tokenId }) =>
+ *       sendTransaction({ seed, addressIndex, toAddress, amount, tokenId, ... })
+ *         .then(r => r.minedHex),
+ *   })
+ */
+function createMinimaL1PaymentPort(config) {
+    return {
+        async pay(params) {
+            try {
+                const txpowHex = await config.sign({
+                    toAddress: params.recipient,
+                    amount: params.amount,
+                    tokenId: params.tokenId ?? '0x00',
+                    memo: params.memo,
+                });
+                const result = await config.provider.broadcastTxPoW(txpowHex);
+                if (!result.success) {
+                    return {
+                        ok: false,
+                        error: result.message ?? 'Broadcast failed',
+                        errorCode: 'BROADCAST_FAILED',
+                    };
+                }
+                return { ok: true, data: { txpowId: result.txpowid } };
+            }
+            catch (err) {
+                return { ok: false, error: err instanceof Error ? err.message : String(err) };
+            }
+        },
+    };
+}

package/dist/cjs/payment-l2.d.ts

@@ -0,0 +1,39 @@
+import type { ChannelGraph, ChannelOps, RouterChannel, LeaseProvider, RouteOptions } from '@totemsdk/omnia-router';
+import type { EdgePaymentPort } from '@totemsdk/edge';
+export interface OmniaL2PaymentPortConfig {
+    /** Routing graph (edges + swap index). Updated externally as channels open/close. */
+    graph: ChannelGraph;
+    /**
+     * Live channel state keyed by channelId.
+     * executeMultiHopPayment mutates this map in-place as HTLCs are added/settled.
+     * Callers are responsible for keeping it in sync with the on-chain state.
+     */
+    channels: Map<string, RouterChannel>;
+    /** HTLC operations (addHTLC, fulfillHTLC, timeoutHTLC) for each channel. */
+    ops: ChannelOps;
+    /** WOTS lease providers keyed by channelId — required for HTLC signing. */
+    leaseProviders: Map<string, LeaseProvider>;
+    /** Public key digest identifying the local party in each channel. */
+    localPublicKeyDigest: string;
+    /**
+     * Returns the current chain block height. Used to compute HTLC expiry.
+     * Typically: `async () => BigInt((await provider.getTip()).block)`.
+     */
+    getCurrentBlock(): Promise<bigint>;
+    /** HTLC timeout in blocks past the current tip. Defaults to 144 (≈24h on Minima). */
+    htlcTimeoutBlocks?: bigint;
+    /** Optional pathfinding overrides forwarded to findRoute. */
+    routeOptions?: RouteOptions;
+}
+/**
+ * Omnia L2 payment adapter.
+ *
+ * Routes payments over Omnia payment channels using multi-hop HTLC execution.
+ * The local node must already have open channels forming a path to the recipient.
+ *
+ * pay() finds a route, builds a PaymentRequest, and executes atomically:
+ *  1. Forward phase — locks HTLCs across each hop.
+ *  2. Reveal phase — reveals the preimage in reverse to settle all hops.
+ *  Rollback (best-effort timeoutHTLC) fires on any failure.
+ */
+export declare function createOmniaL2PaymentPort(config: OmniaL2PaymentPortConfig): EdgePaymentPort;

package/dist/cjs/payment-l2.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createOmniaL2PaymentPort = createOmniaL2PaymentPort;
+const omnia_router_1 = require("@totemsdk/omnia-router");
+const _SCALE = 100000000n;
+function _toScaled(s) {
+    const [i, f = ''] = s.split('.');
+    return BigInt(i || '0') * _SCALE + BigInt(f.padEnd(8, '0').slice(0, 8));
+}
+/**
+ * Omnia L2 payment adapter.
+ *
+ * Routes payments over Omnia payment channels using multi-hop HTLC execution.
+ * The local node must already have open channels forming a path to the recipient.
+ *
+ * pay() finds a route, builds a PaymentRequest, and executes atomically:
+ *  1. Forward phase — locks HTLCs across each hop.
+ *  2. Reveal phase — reveals the preimage in reverse to settle all hops.
+ *  Rollback (best-effort timeoutHTLC) fires on any failure.
+ */
+function createOmniaL2PaymentPort(config) {
+    const htlcTimeoutBlocks = config.htlcTimeoutBlocks ?? 144n;
+    return {
+        async pay(params) {
+            try {
+                const tokenId = params.tokenId ?? '0x00';
+                const amount = _toScaled(params.amount);
+                const route = (0, omnia_router_1.findRoute)(config.graph, config.localPublicKeyDigest, params.recipient, amount, tokenId, config.routeOptions);
+                if (!route) {
+                    return {
+                        ok: false,
+                        error: `No route found to ${params.recipient} for amount ${params.amount} (${tokenId})`,
+                        errorCode: 'NO_ROUTE',
+                    };
+                }
+                const currentBlock = await config.getCurrentBlock();
+                const expiryBlock = currentBlock + htlcTimeoutBlocks;
+                const request = (0, omnia_router_1.buildPaymentRequest)(amount, tokenId, expiryBlock);
+                const result = await (0, omnia_router_1.executeMultiHopPayment)(config.ops, config.channels, route, request, config.leaseProviders);
+                if (!result.success) {
+                    return {
+                        ok: false,
+                        error: result.error ?? 'Multi-hop payment failed',
+                        errorCode: 'PAYMENT_FAILED',
+                    };
+                }
+                return { ok: true, data: { txpowId: result.preimage } };
+            }
+            catch (err) {
+                return { ok: false, error: err instanceof Error ? err.message : String(err) };
+            }
+        },
+    };
+}

package/dist/cjs/policy.d.ts

@@ -0,0 +1,13 @@
+import type { AgentPolicy, PolicyMiddleware } from '@totemsdk/agent-policy';
+import type { EdgePolicyPort } from '@totemsdk/edge';
+type PolicyLike = AgentPolicy | PolicyMiddleware;
+/**
+ * Wraps an AgentPolicy or PolicyMiddleware as an EdgePolicyPort.
+ *
+ * When the EdgePolicyPort receives a full `proposal` object, it delegates
+ * directly to the policy without lossy reconstruction. When only flat
+ * `action`/`subject` params are provided, it builds a minimal AgentProposal
+ * (legacy path).
+ */
+export declare function createPolicyPortAdapter(policy: PolicyLike): EdgePolicyPort;
+export {};

package/dist/cjs/policy.js

@@ -0,0 +1,95 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPolicyPortAdapter = createPolicyPortAdapter;
+function isMiddleware(p) {
+    return 'evaluate' in p && typeof p.evaluate === 'function';
+}
+/**
+ * Wraps an AgentPolicy or PolicyMiddleware as an EdgePolicyPort.
+ *
+ * When the EdgePolicyPort receives a full `proposal` object, it delegates
+ * directly to the policy without lossy reconstruction. When only flat
+ * `action`/`subject` params are provided, it builds a minimal AgentProposal
+ * (legacy path).
+ */
+function createPolicyPortAdapter(policy) {
+    return {
+        async check(params) {
+            try {
+                // Prefer full proposal when available
+                if (params.proposal) {
+                    const proposal = {
+                        id: params.proposal.id,
+                        agentId: params.proposal.agentId,
+                        intent: {
+                            type: params.proposal.intent.type,
+                            amount: params.proposal.intent.amount,
+                            tokenId: params.proposal.intent.tokenId,
+                            recipient: params.proposal.intent.recipient,
+                            reason: params.proposal.intent.reason,
+                            risk: params.proposal.intent.risk,
+                        },
+                        explanation: params.proposal.explanation,
+                        confidence: params.proposal.confidence,
+                        createdAt: params.proposal.createdAt,
+                    };
+                    if (isMiddleware(policy)) {
+                        const result = await policy.evaluate(proposal);
+                        return {
+                            ok: true,
+                            data: {
+                                allowed: result.outcome === 'approved',
+                                reason: result.reason,
+                            },
+                        };
+                    }
+                    const allowed = await policy.canAutoApprove(proposal);
+                    return {
+                        ok: true,
+                        data: {
+                            allowed,
+                            reason: allowed ? undefined : 'Action requires user approval per configured policy',
+                        },
+                    };
+                }
+                // Legacy path: build minimal proposal from flat params
+                const intentType = params.action.startsWith('pay') ? 'payment' : 'receipt';
+                const proposal = {
+                    id: `edge-policy-${params.action}-${params.subject}-${Date.now()}`,
+                    agentId: 'edge-policy-adapter',
+                    intent: {
+                        type: intentType,
+                        recipient: params.subject,
+                        reason: params.action,
+                        risk: params.context?.['risk'] ?? 'low',
+                        metadata: params.context,
+                    },
+                    explanation: `Policy check for action "${params.action}" by subject "${params.subject}"`,
+                    confidence: 1,
+                    createdAt: Date.now(),
+                };
+                if (isMiddleware(policy)) {
+                    const result = await policy.evaluate(proposal);
+                    return {
+                        ok: true,
+                        data: {
+                            allowed: result.outcome === 'approved',
+                            reason: result.reason,
+                        },
+                    };
+                }
+                const allowed = await policy.canAutoApprove(proposal);
+                return {
+                    ok: true,
+                    data: {
+                        allowed,
+                        reason: allowed ? undefined : 'Action requires user approval per configured policy',
+                    },
+                };
+            }
+            catch (err) {
+                return { ok: false, error: err instanceof Error ? err.message : String(err) };
+            }
+        },
+    };
+}

package/dist/cjs/proof.d.ts

@@ -0,0 +1,48 @@
+import type { ProofProvider, ProofKind } from '@totemsdk/proof';
+import type { EdgeProofPort } from '@totemsdk/edge';
+export interface ProofPortConfig {
+    provider: ProofProvider;
+    /** Issuer address or identifier stamped onto created proofs. */
+    issuer: string;
+    /** Default proof kind when callers don't specify one via context. */
+    defaultKind?: ProofKind;
+    /**
+     * 32-byte WOTS seed. Required for signing; without it only unsigned
+     * proofs are returned, which MUST NOT be presented as completed proofs.
+     */
+    seed?: Uint8Array;
+    /**
+     * TreeKey index for direct signing (used when no leaseProvider is given).
+     * Ignored when leaseProvider is set.
+     */
+    keyIndex?: number;
+    /**
+     * WOTS lease provider for coordinated key-index reservation.
+     * When set, keyIndex is ignored and the index is reserved via the provider.
+     */
+    leaseProvider?: {
+        reserveKeyUse(params: {
+            treeId: string;
+            ttlMs?: number;
+            payloadHash?: string;
+        }): Promise<{
+            reservationId: string;
+            indices: {
+                addressIndex: number;
+                l1: number;
+                l2: number;
+            };
+        }>;
+        commitKeyUse(reservationId: string, txId: string): Promise<void>;
+        burnReservation(reservationId: string, reason: string): Promise<void>;
+    };
+    leaseTreeId?: string;
+}
+/**
+ * Wraps a ProofProvider (e.g. proof-integritas) as an EdgeProofPort.
+ *
+ * When config.seed is provided the returned proof is a SignedProof;
+ * without seed only an UnsignedProof is returned and MUST NOT be
+ * presented as a completed proof.
+ */
+export declare function createProofPortAdapter(config: ProofPortConfig): EdgeProofPort;

package/dist/cjs/proof.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createProofPortAdapter = createProofPortAdapter;
+const proof_1 = require("@totemsdk/proof");
+function rawPayloadEvidence(rawPayload) {
+    if (!rawPayload || rawPayload.length === 0)
+        return undefined;
+    const hash = (0, proof_1.toHex)((0, proof_1.sha3_256)(rawPayload));
+    return { id: 'payload:' + hash, kind: 'raw-payload', hash };
+}
+/**
+ * Wraps a ProofProvider (e.g. proof-integritas) as an EdgeProofPort.
+ *
+ * When config.seed is provided the returned proof is a SignedProof;
+ * without seed only an UnsignedProof is returned and MUST NOT be
+ * presented as a completed proof.
+ */
+function createProofPortAdapter(config) {
+    const { provider, issuer, defaultKind = 'attestation' } = config;
+    return {
+        async createProof(params) {
+            try {
+                const kind = params.context?.['kind'] ?? defaultKind;
+                const rawPayload = params.context?.['rawPayload'];
+                const evidence = rawPayloadEvidence(rawPayload);
+                const unsigned = (0, proof_1.createProof)({
+                    kind,
+                    subject: { id: params.subject, kind: 'edge-subject' },
+                    issuer,
+                    payload: {
+                        claims: params.claims,
+                        ...(rawPayload !== undefined ? { rawPayloadHash: (0, proof_1.toHex)((0, proof_1.sha3_256)(rawPayload)) } : {}),
+                        ...(params.context ?? {}),
+                    },
+                    ...(evidence !== undefined ? { evidence: [evidence] } : {}),
+                });
+                // Sign if seed is available
+                let proof;
+                let proofId;
+                if (config.seed) {
+                    if (config.leaseProvider) {
+                        proof = await (0, proof_1.signWithLease)(unsigned, config.seed, config.leaseProvider, {
+                            treeId: config.leaseTreeId,
+                        });
+                    }
+                    else {
+                        proof = (0, proof_1.signProof)(unsigned, config.seed, config.keyIndex ?? 0);
+                    }
+                    proofId = proof.proofId;
+                }
+                else {
+                    proof = unsigned;
+                    proofId = unsigned.proofId;
+                }
+                // Stamp the proof's canonical hash if the provider supports it.
+                if (provider.stampHash) {
+                    await provider.stampHash({ hash: proofId });
+                }
+                return { ok: true, data: { proofId, proof } };
+            }
+            catch (err) {
+                return { ok: false, error: err instanceof Error ? err.message : String(err) };
+            }
+        },
+        async verifyProof(params) {
+            try {
+                const proof = params.proof;
+                if (provider.verifyProof) {
+                    const result = await provider.verifyProof(proof);
+                    return { ok: true, data: { valid: result.valid, reason: result.reason } };
+                }
+                if (provider.checkProof) {
+                    const result = await provider.checkProof(proof);
+                    const valid = result.ok && !result.error;
+                    return { ok: true, data: { valid, reason: result.error } };
+                }
+                return {
+                    ok: false,
+                    error: 'Provider does not support proof verification',
+                    errorCode: 'NO_VERIFY_CAPABILITY',
+                };
+            }
+            catch (err) {
+                return { ok: false, error: err instanceof Error ? err.message : String(err) };
+            }
+        },
+    };
+}

package/dist/cjs/pubsub.d.ts

@@ -0,0 +1,11 @@
+/**
+ * EdgePubSubPort adapter — wraps @totemsdk/pubsub-transport's IPubSubTransport
+ * as a first-class EdgePubSubPort for EdgeRuntimePorts.pubsub.
+ *
+ * This is the lightweight counterpart to @totemsdk/edge-mqtt — it provides
+ * the raw pub/sub port without the rule engine, sensor bridge, proof
+ * publisher, command handler, or MachinePay credit enforcement.
+ */
+import type { EdgePubSubPort } from '@totemsdk/edge';
+import type { IPubSubTransport } from '@totemsdk/pubsub-transport';
+export declare function createPubSubPortAdapter(transport: IPubSubTransport): EdgePubSubPort;

package/dist/cjs/pubsub.js

@@ -0,0 +1,30 @@
+"use strict";
+/**
+ * EdgePubSubPort adapter — wraps @totemsdk/pubsub-transport's IPubSubTransport
+ * as a first-class EdgePubSubPort for EdgeRuntimePorts.pubsub.
+ *
+ * This is the lightweight counterpart to @totemsdk/edge-mqtt — it provides
+ * the raw pub/sub port without the rule engine, sensor bridge, proof
+ * publisher, command handler, or MachinePay credit enforcement.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPubSubPortAdapter = createPubSubPortAdapter;
+function createPubSubPortAdapter(transport) {
+    return {
+        async connect() {
+            await transport.connect();
+        },
+        async disconnect() {
+            await transport.disconnect();
+        },
+        async subscribe(topic) {
+            return transport.subscribe(topic);
+        },
+        async publish(topic, payload) {
+            await transport.publish(topic, payload);
+        },
+        onMessage(handler) {
+            return transport.onMessage(handler);
+        },
+    };
+}

package/dist/cjs/purchase-authority.d.ts

@@ -0,0 +1,42 @@
+/**
+ * purchase-authority.ts — AuthorityPort adapter over @totemsdk/agent-policy.
+ *
+ * Maps a machine-commerce TradeAgreement + PurchaseIntent to an AgentProposal
+ * and evaluates it through a ComposablePolicy (or any AgentPolicy).
+ *
+ * Architectural boundary preserved:
+ *   TradeProposal  = machine ↔ machine bargaining (peer-to-peer)
+ *   AgentProposal  = agent → trusted local authority (wallet/policy)
+ *
+ * The machine negotiation strategy never receives a private key. This adapter
+ * is the trusted boundary that decides whether the local authority approves
+ * the economic commitment.
+ */
+import type { AgentPolicy, PolicyMiddleware } from '@totemsdk/agent-policy';
+import type { EdgeOperationResult } from '@totemsdk/edge';
+import type { PurchaseIntent, TradeAgreement } from '@totemsdk/edge';
+type PolicyLike = AgentPolicy | PolicyMiddleware;
+export interface PurchaseAuthorityAdapterConfig {
+    /** The local policy (ComposablePolicy, AgentPolicy, or PolicyMiddleware). */
+    policy: PolicyLike;
+    /** Agent identifier used in the AgentProposal (e.g. 'edge-purchase-agent'). */
+    agentId?: string;
+    /** Optional risk level for the proposal. */
+    risk?: 'low' | 'medium' | 'high';
+}
+/**
+ * Create an AuthorityPort adapter over an agent-policy.
+ *
+ * approve() builds an AgentProposal from the agreement + intent and evaluates
+ * it through the policy. Returns `{ allowed, reason }`.
+ */
+export declare function createPurchaseAuthorityAdapter(config: PurchaseAuthorityAdapterConfig): {
+    approve(params: {
+        agreement: TradeAgreement;
+        intent: PurchaseIntent;
+    }): Promise<EdgeOperationResult<{
+        allowed: boolean;
+        reason?: string;
+    }>>;
+};
+export {};

package/dist/cjs/purchase-authority.js

@@ -0,0 +1,79 @@
+"use strict";
+/**
+ * purchase-authority.ts — AuthorityPort adapter over @totemsdk/agent-policy.
+ *
+ * Maps a machine-commerce TradeAgreement + PurchaseIntent to an AgentProposal
+ * and evaluates it through a ComposablePolicy (or any AgentPolicy).
+ *
+ * Architectural boundary preserved:
+ *   TradeProposal  = machine ↔ machine bargaining (peer-to-peer)
+ *   AgentProposal  = agent → trusted local authority (wallet/policy)
+ *
+ * The machine negotiation strategy never receives a private key. This adapter
+ * is the trusted boundary that decides whether the local authority approves
+ * the economic commitment.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPurchaseAuthorityAdapter = createPurchaseAuthorityAdapter;
+function isMiddleware(p) {
+    return 'evaluate' in p && typeof p.evaluate === 'function';
+}
+/**
+ * Create an AuthorityPort adapter over an agent-policy.
+ *
+ * approve() builds an AgentProposal from the agreement + intent and evaluates
+ * it through the policy. Returns `{ allowed, reason }`.
+ */
+function createPurchaseAuthorityAdapter(config) {
+    const { policy } = config;
+    const agentId = config.agentId ?? 'edge-purchase-agent';
+    const risk = config.risk ?? 'medium';
+    return {
+        async approve(params) {
+            try {
+                const { agreement, intent } = params;
+                const proposal = {
+                    id: `edge-purchase:${agreement.agreementId}`,
+                    agentId,
+                    intent: {
+                        type: 'payment',
+                        amount: agreement.terms.price,
+                        tokenId: agreement.terms.tokenId,
+                        recipient: agreement.seller,
+                        reason: `purchase ${intent.resource} from ${agreement.seller}`,
+                        risk,
+                        metadata: {
+                            agreementId: agreement.agreementId,
+                            negotiationId: agreement.negotiationId,
+                            resource: intent.resource,
+                        },
+                    },
+                    explanation: `Machine purchase of ${intent.resource} for ${agreement.terms.price} ${agreement.terms.tokenId ?? '0x00'} from ${agreement.seller}`,
+                    confidence: 1,
+                    createdAt: Date.now(),
+                };
+                if (isMiddleware(policy)) {
+                    const result = await policy.evaluate(proposal);
+                    return {
+                        ok: true,
+                        data: {
+                            allowed: result.outcome === 'approved',
+                            reason: result.reason,
+                        },
+                    };
+                }
+                const allowed = await policy.canAutoApprove(proposal);
+                return {
+                    ok: true,
+                    data: {
+                        allowed,
+                        reason: allowed ? undefined : 'Purchase requires user approval per configured policy',
+                    },
+                };
+            }
+            catch (err) {
+                return { ok: false, error: err instanceof Error ? err.message : String(err) };
+            }
+        },
+    };
+}

package/dist/cjs/purchase-lookup.d.ts

@@ -0,0 +1,44 @@
+/**
+ * purchase-lookup.ts — PurchaseLookupPort adapter over @totemsdk/lookup-client.
+ *
+ * Maps a machine-commerce `resource` (e.g. "compute", "storage") to a
+ * capability query on the Lookup Node, returning signed manifests for the
+ * buyer's discovery flow.
+ *
+ * Discovery is publication, not authority: the buyer MUST still verify each
+ * returned manifest's signature, identity binding, expiry, and capabilities
+ * before negotiation/payment. This adapter only fetches candidates.
+ */
+import type { LookupClient } from '@totemsdk/lookup-client';
+import type { EdgeOperationResult } from '@totemsdk/edge';
+export interface PurchaseLookupAdapterConfig {
+    client: LookupClient;
+    /** Optional provider address filter (authorAddress for apps). */
+    provider?: string;
+    /** Optional max price filter (agents). */
+    maxPricePerCall?: number;
+    /** Optional max latency filter (agents). */
+    maxLatencyMs?: number;
+    /** Optional result limit. */
+    limit?: number;
+}
+/**
+ * Create a PurchaseLookupPort adapter over a LookupClient.
+ *
+ * `resource` is treated as a capability name for agent manifests (the
+ * machine-commerce case). If the resource matches a known app category, it
+ * falls back to app queries. Returns `{ id, manifest: Uint8Array, nodeId }`
+ * candidates for the buyer's manifest-verification pipeline.
+ */
+export declare function createPurchaseLookupAdapter(config: PurchaseLookupAdapterConfig): {
+    query(params: {
+        resource: string;
+        provider?: string;
+    }): Promise<EdgeOperationResult<{
+        results: Array<{
+            id: string;
+            manifest: Uint8Array;
+            nodeId: string;
+        }>;
+    }>>;
+};

package/dist/cjs/purchase-lookup.js

@@ -0,0 +1,60 @@
+"use strict";
+/**
+ * purchase-lookup.ts — PurchaseLookupPort adapter over @totemsdk/lookup-client.
+ *
+ * Maps a machine-commerce `resource` (e.g. "compute", "storage") to a
+ * capability query on the Lookup Node, returning signed manifests for the
+ * buyer's discovery flow.
+ *
+ * Discovery is publication, not authority: the buyer MUST still verify each
+ * returned manifest's signature, identity binding, expiry, and capabilities
+ * before negotiation/payment. This adapter only fetches candidates.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPurchaseLookupAdapter = createPurchaseLookupAdapter;
+/**
+ * Create a PurchaseLookupPort adapter over a LookupClient.
+ *
+ * `resource` is treated as a capability name for agent manifests (the
+ * machine-commerce case). If the resource matches a known app category, it
+ * falls back to app queries. Returns `{ id, manifest: Uint8Array, nodeId }`
+ * candidates for the buyer's manifest-verification pipeline.
+ */
+function createPurchaseLookupAdapter(config) {
+    const { client } = config;
+    return {
+        async query(params) {
+            try {
+                const provider = params.provider ?? config.provider;
+                const limit = config.limit ?? 20;
+                // Agent capability query (machine-commerce primary path).
+                const agents = await client.queryAgents({
+                    capabilityName: params.resource,
+                    maxPricePerCall: config.maxPricePerCall,
+                    maxLatencyMs: config.maxLatencyMs,
+                    limit,
+                });
+                const results = agents.map((a) => ({
+                    id: a.capabilityId,
+                    manifest: a.manifest,
+                    nodeId: a.nodeId,
+                }));
+                // If no agent results and a provider is specified, also try app query
+                // filtered by author address (provider = operator).
+                if (results.length === 0 && provider) {
+                    const apps = await client.queryApps({
+                        authorAddress: provider,
+                        limit,
+                    });
+                    for (const a of apps) {
+                        results.push({ id: a.appId, manifest: a.manifest, nodeId: a.nodeId });
+                    }
+                }
+                return { ok: true, data: { results } };
+            }
+            catch (err) {
+                return { ok: false, error: err instanceof Error ? err.message : String(err) };
+            }
+        },
+    };
+}