@vapi-network/core 0.8.0 → 0.9.0

package/dist/router-client.js

@@ -37290,6 +37290,14 @@ var configSchema = external_exports.object({
     })
   ).optional(),
   allowPrivateNetwork: external_exports.boolean().default(false).optional(),
+  tasksEscrowDurationOverrides: external_exports.record(
+    external_exports.string().regex(/^\d+$/),
+    external_exports.object({
+      workDurationSeconds: external_exports.number().int().positive().max(Number.MAX_SAFE_INTEGER).optional(),
+      reviewWindowSeconds: external_exports.number().int().positive().max(Number.MAX_SAFE_INTEGER).optional()
+    }).strict()
+  ).optional(),
+  tasksEscrowFactoryOverrides: external_exports.record(external_exports.string().regex(/^\d+$/), external_exports.string()).optional(),
   networks: external_exports.record(
     external_exports.string().refine((network) => isSupportedPaymentNetwork(network), {
       message: "Expected a supported eip155:<chainId> or Solana network identifier."
@@ -37308,6 +37316,17 @@ var configSchema = external_exports.object({
   spendCaps: spendCapsSchema,
   device: external_exports.string().regex(/^[a-z0-9][a-z0-9-]{0,31}$/).optional()
 }).superRefine((config2, context) => {
+  for (const [chainId, factory] of Object.entries(config2.tasksEscrowFactoryOverrides ?? {})) {
+    try {
+      getAddress(factory);
+    } catch {
+      context.addIssue({
+        code: "custom",
+        path: ["tasksEscrowFactoryOverrides", chainId],
+        message: "Expected a valid EVM escrow factory address."
+      });
+    }
+  }
   for (const [network, configured] of Object.entries(config2.networks)) {
     if (isSolanaNetwork(network)) {
       if (configured.usdc !== NETWORKS[SOLANA_MAINNET_CAIP2].usdc) {
@@ -37454,6 +37473,7 @@ function getDefaultConfig(source = process.env, options = {}) {
   const registry2 = registryEndpoints(source.VAPI_REGISTRY_URL?.trim() || DEFAULT_REGISTRY_URL);
   const requested = new Set(options.networks ?? ["base"]);
   const networks = {};
+  const tasksEscrowFactoryOverrides = tasksFactoryOverridesFromEnv(source);
   if (requested.has("base") || requested.has(BASE_MAINNET_CAIP2)) {
     networks[BASE_MAINNET_CAIP2] = {
       rpcUrl: source.BASE_RPC_URL?.trim() || NETWORKS[BASE_MAINNET_CAIP2].publicRpcUrl,
@@ -37491,6 +37511,8 @@ function getDefaultConfig(source = process.env, options = {}) {
     marketplaceDiscoveryUrl: source.VAPI_MARKETPLACE_DISCOVERY_URL?.trim() || registry2.marketplaceDiscoveryUrl,
     registryFallbacks: DEFAULT_REGISTRY_FALLBACKS.map((fallback) => ({ ...fallback })),
     allowPrivateNetwork: false,
+    tasksEscrowFactoryOverrides,
+    tasksEscrowDurationOverrides: tasksDurationOverridesFromEnv(source),
     networks,
     spendCaps: { ...DEFAULT_SPEND_CAPS }
   };
@@ -37508,8 +37530,10 @@ async function loadConfig(path = getVapiPaths().config, source = process.env, op
   }
   const parsed = configSchema.parse(JSON.parse(raw));
   parsed.registryFallbacks ??= DEFAULT_REGISTRY_FALLBACKS.map((fallback) => ({ ...fallback }));
+  parsed.tasksEscrowFactoryOverrides ??= {};
   const migrated = rewriteLegacyRegistryUrls(parsed);
   const config2 = migrated.config;
+  config2.tasksEscrowFactoryOverrides ??= {};
   if (migrated.changes.length > 0 && options.notice) {
     options.notice(
       `${formatLegacyRegistryRewrites(migrated.changes)}
@@ -37523,6 +37547,14 @@ Run vapi init to write the new URLs to ${path}.`
   const discoveryUrl = source.VAPI_DISCOVERY_URL?.trim();
   const marketplaceDiscoveryUrl = source.VAPI_MARKETPLACE_DISCOVERY_URL?.trim();
   const registryUrl = source.VAPI_REGISTRY_URL?.trim();
+  Object.assign(config2.tasksEscrowFactoryOverrides, tasksFactoryOverridesFromEnv(source));
+  config2.tasksEscrowDurationOverrides ??= {};
+  for (const [chainId, overrides] of Object.entries(tasksDurationOverridesFromEnv(source))) {
+    config2.tasksEscrowDurationOverrides[chainId] = {
+      ...config2.tasksEscrowDurationOverrides[chainId],
+      ...overrides
+    };
+  }
   if (config2.networks[BASE_MAINNET_CAIP2] && baseRpcUrl) {
     config2.networks[BASE_MAINNET_CAIP2].rpcUrl = baseRpcUrl;
   }
@@ -37563,6 +37595,31 @@ Run vapi init to write the new URLs to ${path}.`
   }
   return config2;
 }
+function tasksDurationOverridesFromEnv(source) {
+  const result = {};
+  for (const [name, raw] of Object.entries(source)) {
+    const match = /^VAPI_TASKS_(WORK_DURATION|REVIEW_WINDOW)_SECONDS_(\d+)$/.exec(name);
+    const value = raw?.trim();
+    if (!match || !value) continue;
+    const seconds = Number(value);
+    if (!/^\d+$/.test(value) || !Number.isSafeInteger(seconds) || seconds <= 0)
+      throw new Error(`Invalid trusted Tasks duration ${name}.`);
+    const entry = result[match[2]] ??= {};
+    if (match[1] === "WORK_DURATION") entry.workDurationSeconds = seconds;
+    else entry.reviewWindowSeconds = seconds;
+  }
+  return result;
+}
+function tasksFactoryOverridesFromEnv(source) {
+  const overrides = {};
+  for (const [name, raw] of Object.entries(source)) {
+    const match = /^VAPI_TASKS_ESCROW_FACTORY_(\d+)$/.exec(name);
+    const value = raw?.trim();
+    if (!match || !value) continue;
+    overrides[match[1]] = getAddress(value);
+  }
+  return overrides;
+}
 function registryEndpoints(baseUrl) {
   const base = new URL(baseUrl);
   base.search = "";
@@ -37629,7 +37686,12 @@ var AgentLinkError = class extends Error {
   code;
 };
 var DEFAULT_AGENT_SCOPES = ["mcp:call", "router.use"];
-var ALLOWED_AGENT_SCOPES = /* @__PURE__ */ new Set([...DEFAULT_AGENT_SCOPES, "call.publish"]);
+var ALLOWED_AGENT_SCOPES = /* @__PURE__ */ new Set([
+  ...DEFAULT_AGENT_SCOPES,
+  "call.publish",
+  "tasks:read",
+  "tasks:write"
+]);
 var publicFetch = createPublicFetch({ allowPrivateNetwork: false });
 var agentSecretAccounts = (wallet) => ({
   tokens: `vapi.agent.${wallet}.tokens`,
@@ -38048,7 +38110,9 @@ var ledgerSchema = external_exports.object({
 });
 var spendReservationSchema = external_exports.object({
   id: external_exports.string().min(1),
-  amountAtomic: external_exports.string().regex(/^\d+$/)
+  amountAtomic: external_exports.string().regex(/^\d+$/),
+  kind: external_exports.enum(["payment", "escrow-funding", "dispute-fee"]).optional(),
+  taskKey: external_exports.string().optional()
 });
 var ledgerRowSchema = ledgerSchema.extend({
   wallet: walletNameSchema.optional(),
@@ -38069,7 +38133,18 @@ var SpendCapError = class extends Error {
 function utcDateKey(now = /* @__PURE__ */ new Date()) {
   return now.toISOString().slice(0, 10);
 }
-async function readStoredSpendLedgerRows(path, now) {
+function sumTaskReservations(rows, wallet, taskKey, excludeReservationId) {
+  let total = 0n;
+  for (const row of rows) {
+    if (row.wallet !== wallet) continue;
+    for (const reservation of row.reservations ?? []) {
+      if (reservation.taskKey === taskKey && reservation.id !== excludeReservationId)
+        total += BigInt(reservation.amountAtomic);
+    }
+  }
+  return total;
+}
+async function readStoredSpendLedgerRows(path, now, allDays = false) {
   let raw;
   try {
     raw = await readFile5(path, "utf8");
@@ -38080,7 +38155,7 @@ async function readStoredSpendLedgerRows(path, now) {
   const parsed = ledgerFileSchema.parse(JSON.parse(raw));
   const rows = "rows" in parsed ? parsed.rows : [parsed];
   const today = utcDateKey(now);
-  return rows.filter((row) => row.date === today).map((row) => ({
+  return rows.filter((row) => allDays || row.date === today).map((row) => ({
     date: row.date,
     spentAtomic: row.spentAtomic,
     wallet: row.wallet ?? DEFAULT_WALLET_NAME,
@@ -38091,49 +38166,164 @@ async function reserveSpend(amountAtomic, caps, options) {
   if (amountAtomic < 0n) {
     throw new Error("Spend amount cannot be negative.");
   }
-  const perCallAtomic = parseAtomicCap(caps.perCallAtomic, "per-call");
-  const perDayAtomic = parseAtomicCap(caps.perDayAtomic, "per-day");
-  if (amountAtomic > perCallAtomic) {
-    throw new SpendCapError(
-      "per_call_cap_exceeded",
-      `Payment quote ${amountAtomic} atomic USDC exceeds the per-call cap ${perCallAtomic}. Refusing to sign.`
-    );
+  const kind = options?.kind ?? "payment";
+  let perDayAtomic;
+  if (kind === "escrow-funding" || kind === "dispute-fee") {
+    const maxPerTaskAtomic = options?.maxPerTaskAtomic;
+    if (maxPerTaskAtomic === void 0 || maxPerTaskAtomic < 0n) {
+      throw new Error("Escrow funding requires a non-negative per-task cap.");
+    }
+    if (amountAtomic > maxPerTaskAtomic) {
+      throw new SpendCapError(
+        "per_task_cap_exceeded",
+        `Escrow funding ${amountAtomic} atomic USDC exceeds the per-task cap ${maxPerTaskAtomic}. Refusing to sign.`
+      );
+    }
+    perDayAtomic = parseAtomicCap(caps.perDayAtomic, "per-day");
+  } else {
+    const perCallAtomic = parseAtomicCap(caps.perCallAtomic, "per-call");
+    perDayAtomic = parseAtomicCap(caps.perDayAtomic, "per-day");
+    if (amountAtomic > perCallAtomic) {
+      throw new SpendCapError(
+        "per_call_cap_exceeded",
+        `Payment quote ${amountAtomic} atomic USDC exceeds the per-call cap ${perCallAtomic}. Refusing to sign.`
+      );
+    }
   }
   const ledgerPath = options?.ledgerPath ?? getAgentCashPaths().ledger;
   const now = options?.now ?? /* @__PURE__ */ new Date();
   const wallet = options?.wallet ?? DEFAULT_WALLET_NAME;
   return await withLedgerLock(ledgerPath, async () => {
-    const rows = await readStoredSpendLedgerRows(ledgerPath, now);
-    const current = rows.find((row) => row.wallet === wallet);
+    const rows = await readStoredSpendLedgerRows(ledgerPath, now, true);
+    const today = utcDateKey(now);
+    const current = rows.find((row) => row.wallet === wallet && row.date === today);
+    if ((kind === "escrow-funding" || kind === "dispute-fee") && options?.taskKey !== void 0) {
+      const taskTotal = sumTaskReservations(
+        rows,
+        wallet,
+        options.taskKey,
+        options.reuseExistingEscrowReservation || options.resumeEscrowReservation ? options.reservationId : void 0
+      ) + amountAtomic;
+      if (taskTotal > options.maxPerTaskAtomic)
+        throw new SpendCapError(
+          "per_task_cap_exceeded",
+          `New spend ${amountAtomic} atomic USDC would raise the running total for task ${options.taskKey} and wallet ${wallet} to ${taskTotal}, above the per-task cap ${options.maxPerTaskAtomic}. Refusing to sign.`
+        );
+    }
     if (options?.reservationId !== void 0) {
-      if (current?.reservations?.some((reservation) => reservation.id === options.reservationId)) {
+      const existing = current?.reservations?.find(
+        (reservation) => reservation.id === options.reservationId
+      );
+      if (existing && options.reuseExistingEscrowReservation) {
+        if (kind !== "escrow-funding" && kind !== "dispute-fee" || existing.kind !== kind || existing.amountAtomic !== amountAtomic.toString() || existing.taskKey !== void 0 && existing.taskKey !== options.taskKey)
+          throw new Error(
+            `Spend reservation ${options.reservationId} does not match this funding.`
+          );
+        if (existing.taskKey === void 0 && options.taskKey !== void 0) {
+          existing.taskKey = options.taskKey;
+          await writeLedgerAtomically(ledgerPath, rows);
+        }
+        return {
+          date: current.date,
+          spentAtomic: current.spentAtomic,
+          reservationReused: true
+        };
+      }
+      if (existing) {
         throw new Error(`Spend reservation ${options.reservationId} already exists.`);
       }
+      if (options.resumeEscrowReservation) {
+        const resumed = options.resumeEscrowReservation;
+        const historical = rows.find((row) => row.wallet === wallet && row.date === resumed.date);
+        const stored = historical?.reservations?.find(
+          (reservation) => reservation.id === resumed.id
+        );
+        if (kind !== "escrow-funding" && kind !== "dispute-fee" || resumed.id !== options.reservationId || resumed.wallet !== wallet || resumed.amountAtomic !== amountAtomic.toString() || resumed.date >= utcDateKey(now) || resumed.exposed !== true || resumed.invalidated === true || stored !== void 0 && (stored.kind !== kind || stored.amountAtomic !== amountAtomic.toString() || stored.taskKey !== void 0 && stored.taskKey !== options.taskKey))
+          throw new Error(
+            `Spend reservation ${options.reservationId} does not match this funding.`
+          );
+        if (stored?.taskKey === void 0 && options.taskKey !== void 0) {
+          if (stored) stored.taskKey = options.taskKey;
+          else {
+            const reservation = {
+              id: resumed.id,
+              amountAtomic: resumed.amountAtomic,
+              kind,
+              taskKey: options.taskKey
+            };
+            if (historical)
+              historical.reservations = [...historical.reservations ?? [], reservation];
+            else
+              rows.push({
+                date: resumed.date,
+                spentAtomic: resumed.amountAtomic,
+                wallet,
+                reservations: [reservation]
+              });
+          }
+          await writeLedgerAtomically(ledgerPath, rows);
+        }
+        return {
+          date: resumed.date,
+          spentAtomic: current?.spentAtomic ?? "0",
+          reservationReused: true
+        };
+      }
     }
     const spentAtomic = current?.spentAtomic ?? "0";
     const nextSpent = BigInt(spentAtomic) + amountAtomic;
     if (nextSpent > perDayAtomic) {
       throw new SpendCapError(
         "per_day_cap_exceeded",
-        `Payment quote ${amountAtomic} atomic USDC would raise today's spend to ${nextSpent} for wallet ${wallet}, above the per-day cap ${perDayAtomic}. Refusing to sign.`
+        `${kind === "escrow-funding" ? "Escrow funding" : "Payment quote"} ${amountAtomic} atomic USDC would raise today's spend to ${nextSpent} for wallet ${wallet}, above the per-day cap ${perDayAtomic}. Refusing to sign.`
       );
     }
+    const reservationId = options?.reservationId ?? (options?.taskKey === void 0 ? void 0 : randomBytes4(16).toString("hex"));
     const nextRow = {
       date: utcDateKey(now),
       spentAtomic: nextSpent.toString(),
       wallet,
-      ...(current?.reservations?.length ?? 0) === 0 && options?.reservationId === void 0 ? {} : {
+      ...(current?.reservations?.length ?? 0) === 0 && reservationId === void 0 ? {} : {
         reservations: [
           ...current?.reservations ?? [],
-          ...options?.reservationId === void 0 ? [] : [{ id: options.reservationId, amountAtomic: amountAtomic.toString() }]
+          ...reservationId === void 0 ? [] : [
+            {
+              id: reservationId,
+              amountAtomic: amountAtomic.toString(),
+              ...kind !== "payment" ? { kind } : {},
+              ...options?.taskKey === void 0 ? {} : { taskKey: options.taskKey }
+            }
+          ]
         ]
       }
     };
-    const nextRows = [...rows.filter((row) => row.wallet !== wallet), nextRow].sort(
-      (a, b) => a.wallet.localeCompare(b.wallet)
+    const otherRows = rows.filter((row) => row.wallet !== wallet || row.date !== today).map((row) => {
+      if (row.wallet !== wallet || !options?.reuseExistingEscrowReservation || options.reservationId === void 0)
+        return row;
+      const previous = row.reservations?.find(
+        (reservation) => reservation.id === options.reservationId
+      );
+      if (!previous) return row;
+      if (kind !== "escrow-funding" && kind !== "dispute-fee" || previous.kind !== kind || previous.amountAtomic !== amountAtomic.toString() || previous.taskKey !== void 0 && previous.taskKey !== options.taskKey)
+        throw new Error(
+          `Spend reservation ${options.reservationId} does not match this funding.`
+        );
+      return {
+        ...row,
+        reservations: row.reservations.filter(
+          (reservation) => reservation.id !== options.reservationId
+        )
+      };
+    });
+    const nextRows = [...otherRows, nextRow].sort(
+      (a, b) => a.wallet.localeCompare(b.wallet) || a.date.localeCompare(b.date)
     );
     await writeLedgerAtomically(ledgerPath, nextRows);
-    return { date: nextRow.date, spentAtomic: nextRow.spentAtomic };
+    return {
+      date: nextRow.date,
+      spentAtomic: nextRow.spentAtomic,
+      ...options?.reservationId === void 0 && reservationId !== void 0 ? { reservationId } : {}
+    };
   });
 }
 async function releaseSpend(amountAtomic, options) {
@@ -38145,35 +38335,40 @@ async function releaseSpend(amountAtomic, options) {
   const wallet = options.wallet ?? DEFAULT_WALLET_NAME;
   return await withLedgerLock(ledgerPath, async () => {
     const today = utcDateKey(now);
-    const rows = await readStoredSpendLedgerRows(ledgerPath, now);
-    const current = rows.find((row) => row.wallet === wallet);
-    if (options.reservedOn !== today) {
+    const rows = await readStoredSpendLedgerRows(ledgerPath, now, true);
+    const current = rows.find((row) => row.wallet === wallet && row.date === today);
+    if (options.reservedOn !== today && options.reservationId === void 0) {
       return { date: today, spentAtomic: current?.spentAtomic ?? "0" };
     }
-    const reservation = options.reservationId === void 0 ? void 0 : current?.reservations?.find((candidate) => candidate.id === options.reservationId);
+    const reserved = rows.find((row) => row.wallet === wallet && row.date === options.reservedOn);
+    const reservation = options.reservationId === void 0 ? void 0 : reserved?.reservations?.find((candidate) => candidate.id === options.reservationId);
     if (options.reservationId !== void 0 && reservation === void 0) {
       return { date: today, spentAtomic: current?.spentAtomic ?? "0" };
     }
     if (reservation !== void 0 && reservation.amountAtomic !== amountAtomic.toString()) {
       throw new Error(`Spend reservation ${options.reservationId} has a different amount.`);
     }
-    const spentAtomic = BigInt(current?.spentAtomic ?? "0");
+    const spentAtomic = BigInt(reserved?.spentAtomic ?? "0");
     const releasedAmount = reservation === void 0 ? amountAtomic : BigInt(reservation.amountAtomic);
     const nextSpent = spentAtomic > releasedAmount ? spentAtomic - releasedAmount : 0n;
-    const remainingReservations = current?.reservations?.filter(
+    const remainingReservations = reserved?.reservations?.filter(
       (candidate) => candidate.id !== options.reservationId
     );
     const nextRow = {
-      date: today,
+      date: options.reservedOn,
       spentAtomic: nextSpent.toString(),
       wallet,
       ...remainingReservations === void 0 || remainingReservations.length === 0 ? {} : { reservations: remainingReservations }
     };
-    const nextRows = [...rows.filter((row) => row.wallet !== wallet), nextRow].sort(
-      (a, b) => a.wallet.localeCompare(b.wallet)
-    );
+    const nextRows = [
+      ...rows.filter((row) => row.wallet !== wallet || row.date !== options.reservedOn),
+      nextRow
+    ].sort((a, b) => a.wallet.localeCompare(b.wallet) || a.date.localeCompare(b.date));
     await writeLedgerAtomically(ledgerPath, nextRows);
-    return { date: nextRow.date, spentAtomic: nextRow.spentAtomic };
+    return {
+      date: today,
+      spentAtomic: options.reservedOn === today ? nextRow.spentAtomic : current?.spentAtomic ?? "0"
+    };
   });
 }
 function parseAtomicCap(value, label) {
@@ -44435,7 +44630,9 @@ async function transferBetweenAccounts(args) {
       );
       reservedOn = reservation.date;
     } catch (error61) {
-      if (error61 instanceof SpendCapError) throw transferError(error61.code);
+      if (error61 instanceof SpendCapError && isTransferErrorCode(error61.code)) {
+        throw transferError(error61.code);
+      }
       throw transferError("network_error");
     }
   }
@@ -46300,7 +46497,7 @@ var RunBudgetError = class extends Error {
 };
 
 // src/support-report.ts
-var VAPI_CLIENT_VERSION = "0.8.0";
+var VAPI_CLIENT_VERSION = "0.9.0";
 
 // src/x402-pay.ts
 var X402PaymentError = class extends Error {