agentbnb 2.2.0

package/dist/index.js

@@ -0,0 +1,894 @@
+// src/types/index.ts
+import { z } from "zod";
+var IOSchemaSchema = z.object({
+  name: z.string(),
+  type: z.enum(["text", "json", "file", "audio", "image", "video", "stream"]),
+  description: z.string().optional(),
+  required: z.boolean().default(true),
+  schema: z.record(z.unknown()).optional()
+  // JSON Schema
+});
+var PoweredBySchema = z.object({
+  provider: z.string().min(1),
+  model: z.string().optional(),
+  tier: z.string().optional()
+});
+var CapabilityCardSchema = z.object({
+  spec_version: z.literal("1.0").default("1.0"),
+  id: z.string().uuid(),
+  owner: z.string().min(1),
+  name: z.string().min(1).max(100),
+  description: z.string().max(500),
+  level: z.union([z.literal(1), z.literal(2), z.literal(3)]),
+  inputs: z.array(IOSchemaSchema),
+  outputs: z.array(IOSchemaSchema),
+  pricing: z.object({
+    credits_per_call: z.number().nonnegative(),
+    credits_per_minute: z.number().nonnegative().optional(),
+    /** Number of free monthly calls. Shown as a "N free/mo" badge in the Hub. */
+    free_tier: z.number().nonnegative().optional()
+  }),
+  availability: z.object({
+    online: z.boolean(),
+    schedule: z.string().optional()
+    // cron expression
+  }),
+  powered_by: z.array(PoweredBySchema).optional(),
+  /**
+   * Private per-card metadata. Stripped from all API and CLI responses —
+   * never transmitted beyond the local store.
+   */
+  _internal: z.record(z.unknown()).optional(),
+  metadata: z.object({
+    apis_used: z.array(z.string()).optional(),
+    avg_latency_ms: z.number().nonnegative().optional(),
+    success_rate: z.number().min(0).max(1).optional(),
+    tags: z.array(z.string()).optional()
+  }).optional(),
+  created_at: z.string().datetime().optional(),
+  updated_at: z.string().datetime().optional()
+});
+var SkillSchema = z.object({
+  /** Stable skill identifier, e.g. 'tts-elevenlabs'. Used for gateway routing and idle tracking. */
+  id: z.string().min(1),
+  name: z.string().min(1).max(100),
+  description: z.string().max(500),
+  level: z.union([z.literal(1), z.literal(2), z.literal(3)]),
+  /** Optional grouping category, e.g. 'tts' | 'video_gen' | 'code_review'. */
+  category: z.string().optional(),
+  inputs: z.array(IOSchemaSchema),
+  outputs: z.array(IOSchemaSchema),
+  pricing: z.object({
+    credits_per_call: z.number().nonnegative(),
+    credits_per_minute: z.number().nonnegative().optional(),
+    free_tier: z.number().nonnegative().optional()
+  }),
+  /** Per-skill online flag — overrides card-level availability for this skill. */
+  availability: z.object({ online: z.boolean() }).optional(),
+  powered_by: z.array(PoweredBySchema).optional(),
+  metadata: z.object({
+    apis_used: z.array(z.string()).optional(),
+    avg_latency_ms: z.number().nonnegative().optional(),
+    success_rate: z.number().min(0).max(1).optional(),
+    tags: z.array(z.string()).optional(),
+    capacity: z.object({
+      calls_per_hour: z.number().positive().default(60)
+    }).optional()
+  }).optional(),
+  /**
+   * Private per-skill metadata. Stripped from all API and CLI responses —
+   * never transmitted beyond the local store.
+   */
+  _internal: z.record(z.unknown()).optional()
+});
+var CapabilityCardV2Schema = z.object({
+  spec_version: z.literal("2.0"),
+  id: z.string().uuid(),
+  owner: z.string().min(1),
+  /** Agent display name — was 'name' in v1.0. */
+  agent_name: z.string().min(1).max(100),
+  /** At least one skill is required. */
+  skills: z.array(SkillSchema).min(1),
+  availability: z.object({
+    online: z.boolean(),
+    schedule: z.string().optional()
+  }),
+  /** Optional deployment environment metadata. */
+  environment: z.object({
+    runtime: z.string(),
+    region: z.string().optional()
+  }).optional(),
+  /**
+   * Private per-card metadata. Stripped from all API and CLI responses —
+   * never transmitted beyond the local store.
+   */
+  _internal: z.record(z.unknown()).optional(),
+  created_at: z.string().datetime().optional(),
+  updated_at: z.string().datetime().optional()
+});
+var AnyCardSchema = z.discriminatedUnion("spec_version", [
+  CapabilityCardSchema,
+  CapabilityCardV2Schema
+]);
+var AgentBnBError = class extends Error {
+  constructor(message, code) {
+    super(message);
+    this.code = code;
+    this.name = "AgentBnBError";
+  }
+};
+
+// src/registry/store.ts
+import Database from "better-sqlite3";
+
+// src/registry/request-log.ts
+function createRequestLogTable(db) {
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS request_log (
+      id TEXT PRIMARY KEY,
+      card_id TEXT NOT NULL,
+      card_name TEXT NOT NULL,
+      requester TEXT NOT NULL,
+      status TEXT NOT NULL CHECK(status IN ('success', 'failure', 'timeout')),
+      latency_ms INTEGER NOT NULL,
+      credits_charged INTEGER NOT NULL,
+      created_at TEXT NOT NULL
+    );
+
+    CREATE INDEX IF NOT EXISTS request_log_created_at_idx
+      ON request_log (created_at DESC);
+  `);
+  try {
+    db.exec("ALTER TABLE request_log ADD COLUMN skill_id TEXT");
+  } catch {
+  }
+  try {
+    db.exec("ALTER TABLE request_log ADD COLUMN action_type TEXT");
+  } catch {
+  }
+  try {
+    db.exec("ALTER TABLE request_log ADD COLUMN tier_invoked INTEGER");
+  } catch {
+  }
+}
+function insertRequestLog(db, entry) {
+  const stmt = db.prepare(`
+    INSERT INTO request_log (id, card_id, card_name, requester, status, latency_ms, credits_charged, created_at, skill_id, action_type, tier_invoked)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+  `);
+  stmt.run(
+    entry.id,
+    entry.card_id,
+    entry.card_name,
+    entry.requester,
+    entry.status,
+    entry.latency_ms,
+    entry.credits_charged,
+    entry.created_at,
+    entry.skill_id ?? null,
+    entry.action_type ?? null,
+    entry.tier_invoked ?? null
+  );
+}
+
+// src/registry/store.ts
+var V2_FTS_TRIGGERS = `
+  DROP TRIGGER IF EXISTS cards_ai;
+  DROP TRIGGER IF EXISTS cards_au;
+  DROP TRIGGER IF EXISTS cards_ad;
+
+  CREATE TRIGGER cards_ai AFTER INSERT ON capability_cards BEGIN
+    INSERT INTO cards_fts(rowid, id, owner, name, description, tags)
+    VALUES (
+      new.rowid,
+      new.id,
+      new.owner,
+      COALESCE(
+        (SELECT group_concat(json_extract(value, '$.name'), ' ')
+         FROM json_each(json_extract(new.data, '$.skills'))),
+        json_extract(new.data, '$.name'),
+        ''
+      ),
+      COALESCE(
+        (SELECT group_concat(json_extract(value, '$.description'), ' ')
+         FROM json_each(json_extract(new.data, '$.skills'))),
+        json_extract(new.data, '$.description'),
+        ''
+      ),
+      COALESCE(
+        (SELECT group_concat(json_extract(value, '$.metadata.tags'), ' ')
+         FROM json_each(json_extract(new.data, '$.skills'))),
+        (SELECT group_concat(value, ' ')
+         FROM json_each(json_extract(new.data, '$.metadata.tags'))),
+        ''
+      )
+    );
+  END;
+
+  CREATE TRIGGER cards_au AFTER UPDATE ON capability_cards BEGIN
+    INSERT INTO cards_fts(cards_fts, rowid, id, owner, name, description, tags)
+    VALUES (
+      'delete',
+      old.rowid,
+      old.id,
+      old.owner,
+      COALESCE(
+        (SELECT group_concat(json_extract(value, '$.name'), ' ')
+         FROM json_each(json_extract(old.data, '$.skills'))),
+        json_extract(old.data, '$.name'),
+        ''
+      ),
+      COALESCE(
+        (SELECT group_concat(json_extract(value, '$.description'), ' ')
+         FROM json_each(json_extract(old.data, '$.skills'))),
+        json_extract(old.data, '$.description'),
+        ''
+      ),
+      COALESCE(
+        (SELECT group_concat(json_extract(value, '$.metadata.tags'), ' ')
+         FROM json_each(json_extract(old.data, '$.skills'))),
+        (SELECT group_concat(value, ' ')
+         FROM json_each(json_extract(old.data, '$.metadata.tags'))),
+        ''
+      )
+    );
+    INSERT INTO cards_fts(rowid, id, owner, name, description, tags)
+    VALUES (
+      new.rowid,
+      new.id,
+      new.owner,
+      COALESCE(
+        (SELECT group_concat(json_extract(value, '$.name'), ' ')
+         FROM json_each(json_extract(new.data, '$.skills'))),
+        json_extract(new.data, '$.name'),
+        ''
+      ),
+      COALESCE(
+        (SELECT group_concat(json_extract(value, '$.description'), ' ')
+         FROM json_each(json_extract(new.data, '$.skills'))),
+        json_extract(new.data, '$.description'),
+        ''
+      ),
+      COALESCE(
+        (SELECT group_concat(json_extract(value, '$.metadata.tags'), ' ')
+         FROM json_each(json_extract(new.data, '$.skills'))),
+        (SELECT group_concat(value, ' ')
+         FROM json_each(json_extract(new.data, '$.metadata.tags'))),
+        ''
+      )
+    );
+  END;
+
+  CREATE TRIGGER cards_ad AFTER DELETE ON capability_cards BEGIN
+    INSERT INTO cards_fts(cards_fts, rowid, id, owner, name, description, tags)
+    VALUES (
+      'delete',
+      old.rowid,
+      old.id,
+      old.owner,
+      COALESCE(
+        (SELECT group_concat(json_extract(value, '$.name'), ' ')
+         FROM json_each(json_extract(old.data, '$.skills'))),
+        json_extract(old.data, '$.name'),
+        ''
+      ),
+      COALESCE(
+        (SELECT group_concat(json_extract(value, '$.description'), ' ')
+         FROM json_each(json_extract(old.data, '$.skills'))),
+        json_extract(old.data, '$.description'),
+        ''
+      ),
+      COALESCE(
+        (SELECT group_concat(json_extract(value, '$.metadata.tags'), ' ')
+         FROM json_each(json_extract(old.data, '$.skills'))),
+        (SELECT group_concat(value, ' ')
+         FROM json_each(json_extract(old.data, '$.metadata.tags'))),
+        ''
+      )
+    );
+  END;
+`;
+function openDatabase(path = ":memory:") {
+  const db = new Database(path);
+  db.pragma("journal_mode = WAL");
+  db.pragma("foreign_keys = ON");
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS capability_cards (
+      id TEXT PRIMARY KEY,
+      owner TEXT NOT NULL,
+      data TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    );
+
+    CREATE TABLE IF NOT EXISTS pending_requests (
+      id TEXT PRIMARY KEY,
+      skill_query TEXT NOT NULL,
+      max_cost_credits REAL NOT NULL,
+      selected_peer TEXT,
+      selected_card_id TEXT,
+      selected_skill_id TEXT,
+      credits REAL NOT NULL,
+      status TEXT NOT NULL DEFAULT 'pending',
+      params TEXT,
+      created_at TEXT NOT NULL,
+      resolved_at TEXT
+    );
+
+    CREATE VIRTUAL TABLE IF NOT EXISTS cards_fts USING fts5(
+      id UNINDEXED,
+      owner,
+      name,
+      description,
+      tags,
+      content=""
+    );
+  `);
+  createRequestLogTable(db);
+  runMigrations(db);
+  return db;
+}
+function runMigrations(db) {
+  const version = db.pragma("user_version")[0]?.user_version ?? 0;
+  if (version < 2) {
+    migrateV1toV2(db);
+  }
+}
+function migrateV1toV2(db) {
+  const migrate = db.transaction(() => {
+    const rows = db.prepare("SELECT rowid, id, data FROM capability_cards").all();
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    for (const row of rows) {
+      const parsed = JSON.parse(row.data);
+      if (parsed["spec_version"] === "2.0") continue;
+      const v1 = parsed;
+      const v2 = {
+        spec_version: "2.0",
+        id: v1.id,
+        owner: v1.owner,
+        agent_name: v1.name,
+        skills: [
+          {
+            id: `skill-${v1.id}`,
+            name: v1.name,
+            description: v1.description,
+            level: v1.level,
+            inputs: v1.inputs,
+            outputs: v1.outputs,
+            pricing: v1.pricing,
+            availability: { online: v1.availability.online },
+            powered_by: v1.powered_by,
+            metadata: v1.metadata,
+            _internal: v1._internal
+          }
+        ],
+        availability: v1.availability,
+        created_at: v1.created_at,
+        updated_at: now
+      };
+      db.prepare("UPDATE capability_cards SET data = ?, updated_at = ? WHERE id = ?").run(
+        JSON.stringify(v2),
+        now,
+        v2.id
+      );
+    }
+    db.exec(V2_FTS_TRIGGERS);
+    db.exec(`INSERT INTO cards_fts(cards_fts) VALUES('delete-all')`);
+    const allRows = db.prepare("SELECT rowid, id, owner, data FROM capability_cards").all();
+    const ftsInsert = db.prepare(
+      "INSERT INTO cards_fts(rowid, id, owner, name, description, tags) VALUES (?, ?, ?, ?, ?, ?)"
+    );
+    for (const row of allRows) {
+      const data = JSON.parse(row.data);
+      const skills = data["skills"] ?? [];
+      let name;
+      let description;
+      let tags;
+      if (skills.length > 0) {
+        name = skills.map((s) => String(s["name"] ?? "")).join(" ");
+        description = skills.map((s) => String(s["description"] ?? "")).join(" ");
+        tags = skills.flatMap((s) => {
+          const meta = s["metadata"];
+          return meta?.["tags"] ?? [];
+        }).join(" ");
+      } else {
+        name = String(data["name"] ?? "");
+        description = String(data["description"] ?? "");
+        const meta = data["metadata"];
+        const rawTags = meta?.["tags"] ?? [];
+        tags = rawTags.join(" ");
+      }
+      ftsInsert.run(row.rowid, row.id, row.owner, name, description, tags);
+    }
+    db.pragma("user_version = 2");
+  });
+  migrate();
+}
+function insertCard(db, card) {
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const withTimestamps = { ...card, created_at: card.created_at ?? now, updated_at: now };
+  const parsed = CapabilityCardSchema.safeParse(withTimestamps);
+  if (!parsed.success) {
+    throw new AgentBnBError(
+      `Card validation failed: ${parsed.error.message}`,
+      "VALIDATION_ERROR"
+    );
+  }
+  const stmt = db.prepare(`
+    INSERT INTO capability_cards (id, owner, data, created_at, updated_at)
+    VALUES (?, ?, ?, ?, ?)
+  `);
+  stmt.run(
+    parsed.data.id,
+    parsed.data.owner,
+    JSON.stringify(parsed.data),
+    parsed.data.created_at ?? now,
+    parsed.data.updated_at ?? now
+  );
+}
+function getCard(db, id) {
+  const stmt = db.prepare("SELECT data FROM capability_cards WHERE id = ?");
+  const row = stmt.get(id);
+  if (!row) return null;
+  return JSON.parse(row.data);
+}
+function updateReputation(db, cardId, success, latencyMs) {
+  const existing = getCard(db, cardId);
+  if (!existing) return;
+  const ALPHA = 0.1;
+  const observed = success ? 1 : 0;
+  const prevSuccessRate = existing.metadata?.success_rate;
+  const prevLatency = existing.metadata?.avg_latency_ms;
+  const newSuccessRate = prevSuccessRate === void 0 ? observed : ALPHA * observed + (1 - ALPHA) * prevSuccessRate;
+  const newLatency = prevLatency === void 0 ? latencyMs : ALPHA * latencyMs + (1 - ALPHA) * prevLatency;
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const updatedMetadata = {
+    ...existing.metadata,
+    success_rate: Math.round(newSuccessRate * 1e3) / 1e3,
+    avg_latency_ms: Math.round(newLatency)
+  };
+  const updatedCard = { ...existing, metadata: updatedMetadata, updated_at: now };
+  const stmt = db.prepare(`
+    UPDATE capability_cards
+    SET data = ?, updated_at = ?
+    WHERE id = ?
+  `);
+  stmt.run(JSON.stringify(updatedCard), now, cardId);
+}
+
+// src/registry/matcher.ts
+function searchCards(db, query, filters = {}) {
+  const words = query.trim().split(/\s+/).map((w) => w.replace(/"/g, "")).filter((w) => w.length > 0);
+  if (words.length === 0) return [];
+  const ftsQuery = words.map((w) => `"${w}"`).join(" OR ");
+  const conditions = [];
+  const params = [ftsQuery];
+  if (filters.level !== void 0) {
+    conditions.push(`json_extract(cc.data, '$.level') = ?`);
+    params.push(filters.level);
+  }
+  if (filters.online !== void 0) {
+    conditions.push(`json_extract(cc.data, '$.availability.online') = ?`);
+    params.push(filters.online ? 1 : 0);
+  }
+  const whereClause = conditions.length > 0 ? `AND ${conditions.join(" AND ")}` : "";
+  const sql = `
+    SELECT cc.data
+    FROM capability_cards cc
+    JOIN cards_fts ON cc.rowid = cards_fts.rowid
+    WHERE cards_fts MATCH ?
+      ${whereClause}
+    ORDER BY bm25(cards_fts)
+    LIMIT 50
+  `;
+  const stmt = db.prepare(sql);
+  const rows = stmt.all(...params);
+  const results = rows.map((row) => JSON.parse(row.data));
+  if (filters.apis_used && filters.apis_used.length > 0) {
+    const requiredApis = filters.apis_used;
+    return results.filter((card) => {
+      const cardApis = card.metadata?.apis_used ?? [];
+      return requiredApis.every((api) => cardApis.includes(api));
+    });
+  }
+  return results;
+}
+
+// src/credit/ledger.ts
+import Database2 from "better-sqlite3";
+import { randomUUID } from "crypto";
+var CREDIT_SCHEMA = `
+  CREATE TABLE IF NOT EXISTS credit_balances (
+    owner TEXT PRIMARY KEY,
+    balance INTEGER NOT NULL DEFAULT 0,
+    updated_at TEXT NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS credit_transactions (
+    id TEXT PRIMARY KEY,
+    owner TEXT NOT NULL,
+    amount INTEGER NOT NULL,
+    reason TEXT NOT NULL,
+    reference_id TEXT,
+    created_at TEXT NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS credit_escrow (
+    id TEXT PRIMARY KEY,
+    owner TEXT NOT NULL,
+    amount INTEGER NOT NULL,
+    card_id TEXT NOT NULL,
+    status TEXT NOT NULL DEFAULT 'held',
+    created_at TEXT NOT NULL,
+    settled_at TEXT
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_transactions_owner ON credit_transactions(owner, created_at);
+  CREATE INDEX IF NOT EXISTS idx_escrow_owner ON credit_escrow(owner);
+`;
+function openCreditDb(path = ":memory:") {
+  const db = new Database2(path);
+  db.pragma("journal_mode = WAL");
+  db.pragma("foreign_keys = ON");
+  db.exec(CREDIT_SCHEMA);
+  return db;
+}
+function getBalance(db, owner) {
+  const row = db.prepare("SELECT balance FROM credit_balances WHERE owner = ?").get(owner);
+  return row?.balance ?? 0;
+}
+
+// src/gateway/server.ts
+import Fastify from "fastify";
+import { randomUUID as randomUUID3 } from "crypto";
+
+// src/credit/escrow.ts
+import { randomUUID as randomUUID2 } from "crypto";
+function holdEscrow(db, owner, amount, cardId) {
+  const escrowId = randomUUID2();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const hold = db.transaction(() => {
+    const row = db.prepare("SELECT balance FROM credit_balances WHERE owner = ?").get(owner);
+    if (!row || row.balance < amount) {
+      throw new AgentBnBError("Insufficient credits", "INSUFFICIENT_CREDITS");
+    }
+    db.prepare(
+      "UPDATE credit_balances SET balance = balance - ?, updated_at = ? WHERE owner = ? AND balance >= ?"
+    ).run(amount, now, owner, amount);
+    db.prepare(
+      "INSERT INTO credit_escrow (id, owner, amount, card_id, status, created_at) VALUES (?, ?, ?, ?, ?, ?)"
+    ).run(escrowId, owner, amount, cardId, "held", now);
+    db.prepare(
+      "INSERT INTO credit_transactions (id, owner, amount, reason, reference_id, created_at) VALUES (?, ?, ?, ?, ?, ?)"
+    ).run(randomUUID2(), owner, -amount, "escrow_hold", escrowId, now);
+  });
+  hold();
+  return escrowId;
+}
+function settleEscrow(db, escrowId, recipientOwner) {
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const settle = db.transaction(() => {
+    const escrow = db.prepare("SELECT id, owner, amount, status FROM credit_escrow WHERE id = ?").get(escrowId);
+    if (!escrow) {
+      throw new AgentBnBError(`Escrow not found: ${escrowId}`, "ESCROW_NOT_FOUND");
+    }
+    if (escrow.status !== "held") {
+      throw new AgentBnBError(
+        `Escrow ${escrowId} is already ${escrow.status}`,
+        "ESCROW_ALREADY_SETTLED"
+      );
+    }
+    db.prepare(
+      "INSERT OR IGNORE INTO credit_balances (owner, balance, updated_at) VALUES (?, 0, ?)"
+    ).run(recipientOwner, now);
+    db.prepare(
+      "UPDATE credit_balances SET balance = balance + ?, updated_at = ? WHERE owner = ?"
+    ).run(escrow.amount, now, recipientOwner);
+    db.prepare(
+      "UPDATE credit_escrow SET status = ?, settled_at = ? WHERE id = ?"
+    ).run("settled", now, escrowId);
+    db.prepare(
+      "INSERT INTO credit_transactions (id, owner, amount, reason, reference_id, created_at) VALUES (?, ?, ?, ?, ?, ?)"
+    ).run(randomUUID2(), recipientOwner, escrow.amount, "settlement", escrowId, now);
+  });
+  settle();
+}
+function releaseEscrow(db, escrowId) {
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const release = db.transaction(() => {
+    const escrow = db.prepare("SELECT id, owner, amount, status FROM credit_escrow WHERE id = ?").get(escrowId);
+    if (!escrow) {
+      throw new AgentBnBError(`Escrow not found: ${escrowId}`, "ESCROW_NOT_FOUND");
+    }
+    if (escrow.status !== "held") {
+      throw new AgentBnBError(
+        `Escrow ${escrowId} is already ${escrow.status}`,
+        "ESCROW_ALREADY_SETTLED"
+      );
+    }
+    db.prepare(
+      "UPDATE credit_balances SET balance = balance + ?, updated_at = ? WHERE owner = ?"
+    ).run(escrow.amount, now, escrow.owner);
+    db.prepare(
+      "UPDATE credit_escrow SET status = ?, settled_at = ? WHERE id = ?"
+    ).run("released", now, escrowId);
+    db.prepare(
+      "INSERT INTO credit_transactions (id, owner, amount, reason, reference_id, created_at) VALUES (?, ?, ?, ?, ?, ?)"
+    ).run(randomUUID2(), escrow.owner, escrow.amount, "refund", escrowId, now);
+  });
+  release();
+}
+
+// src/gateway/server.ts
+var VERSION = "0.0.1";
+function createGatewayServer(opts) {
+  const {
+    registryDb,
+    creditDb,
+    tokens,
+    handlerUrl,
+    timeoutMs = 3e4,
+    silent = false,
+    skillExecutor
+  } = opts;
+  const fastify = Fastify({ logger: !silent });
+  const tokenSet = new Set(tokens);
+  fastify.addHook("onRequest", async (request, reply) => {
+    if (request.method === "GET" && request.url === "/health") return;
+    const auth = request.headers.authorization;
+    if (!auth || !auth.startsWith("Bearer ")) {
+      await reply.status(401).send({
+        jsonrpc: "2.0",
+        id: null,
+        error: { code: -32e3, message: "Unauthorized: missing token" }
+      });
+      return;
+    }
+    const token = auth.slice("Bearer ".length).trim();
+    if (!tokenSet.has(token)) {
+      await reply.status(401).send({
+        jsonrpc: "2.0",
+        id: null,
+        error: { code: -32e3, message: "Unauthorized: invalid token" }
+      });
+    }
+  });
+  fastify.get("/health", async () => {
+    return { status: "ok", version: VERSION, uptime: process.uptime() };
+  });
+  fastify.post("/rpc", async (request, reply) => {
+    const body = request.body;
+    if (body.jsonrpc !== "2.0" || !body.method) {
+      return reply.status(400).send({
+        jsonrpc: "2.0",
+        id: body.id ?? null,
+        error: { code: -32600, message: "Invalid Request" }
+      });
+    }
+    const id = body.id ?? null;
+    if (body.method !== "capability.execute") {
+      return reply.send({
+        jsonrpc: "2.0",
+        id,
+        error: { code: -32601, message: "Method not found" }
+      });
+    }
+    const params = body.params ?? {};
+    const cardId = params.card_id;
+    const skillId = params.skill_id;
+    if (!cardId) {
+      return reply.send({
+        jsonrpc: "2.0",
+        id,
+        error: { code: -32602, message: "Invalid params: card_id required" }
+      });
+    }
+    const card = getCard(registryDb, cardId);
+    if (!card) {
+      return reply.send({
+        jsonrpc: "2.0",
+        id,
+        error: { code: -32602, message: `Card not found: ${cardId}` }
+      });
+    }
+    const requester = params.requester ?? "unknown";
+    let creditsNeeded;
+    let cardName;
+    let resolvedSkillId;
+    const rawCard = card;
+    if (Array.isArray(rawCard["skills"])) {
+      const v2card = card;
+      const skill = skillId ? v2card.skills.find((s) => s.id === skillId) : v2card.skills[0];
+      if (!skill) {
+        return reply.send({
+          jsonrpc: "2.0",
+          id,
+          error: { code: -32602, message: `Skill not found: ${skillId}` }
+        });
+      }
+      creditsNeeded = skill.pricing.credits_per_call;
+      cardName = skill.name;
+      resolvedSkillId = skill.id;
+    } else {
+      creditsNeeded = card.pricing.credits_per_call;
+      cardName = card.name;
+    }
+    let escrowId;
+    try {
+      const balance = getBalance(creditDb, requester);
+      if (balance < creditsNeeded) {
+        return reply.send({
+          jsonrpc: "2.0",
+          id,
+          error: { code: -32603, message: "Insufficient credits" }
+        });
+      }
+      escrowId = holdEscrow(creditDb, requester, creditsNeeded, cardId);
+    } catch (err) {
+      const msg = err instanceof AgentBnBError ? err.message : "Failed to hold escrow";
+      return reply.send({
+        jsonrpc: "2.0",
+        id,
+        error: { code: -32603, message: msg }
+      });
+    }
+    const startMs = Date.now();
+    if (skillExecutor) {
+      const targetSkillId = resolvedSkillId ?? skillId ?? cardId;
+      let execResult;
+      try {
+        execResult = await skillExecutor.execute(targetSkillId, params);
+      } catch (err) {
+        releaseEscrow(creditDb, escrowId);
+        updateReputation(registryDb, cardId, false, Date.now() - startMs);
+        try {
+          insertRequestLog(registryDb, {
+            id: randomUUID3(),
+            card_id: cardId,
+            card_name: cardName,
+            skill_id: resolvedSkillId,
+            requester,
+            status: "failure",
+            latency_ms: Date.now() - startMs,
+            credits_charged: 0,
+            created_at: (/* @__PURE__ */ new Date()).toISOString()
+          });
+        } catch {
+        }
+        const message = err instanceof Error ? err.message : "Execution error";
+        return reply.send({
+          jsonrpc: "2.0",
+          id,
+          error: { code: -32603, message }
+        });
+      }
+      if (!execResult.success) {
+        releaseEscrow(creditDb, escrowId);
+        updateReputation(registryDb, cardId, false, execResult.latency_ms);
+        try {
+          insertRequestLog(registryDb, {
+            id: randomUUID3(),
+            card_id: cardId,
+            card_name: cardName,
+            skill_id: resolvedSkillId,
+            requester,
+            status: "failure",
+            latency_ms: execResult.latency_ms,
+            credits_charged: 0,
+            created_at: (/* @__PURE__ */ new Date()).toISOString()
+          });
+        } catch {
+        }
+        return reply.send({
+          jsonrpc: "2.0",
+          id,
+          error: { code: -32603, message: execResult.error ?? "Execution failed" }
+        });
+      }
+      settleEscrow(creditDb, escrowId, card.owner);
+      updateReputation(registryDb, cardId, true, execResult.latency_ms);
+      try {
+        insertRequestLog(registryDb, {
+          id: randomUUID3(),
+          card_id: cardId,
+          card_name: cardName,
+          skill_id: resolvedSkillId,
+          requester,
+          status: "success",
+          latency_ms: execResult.latency_ms,
+          credits_charged: creditsNeeded,
+          created_at: (/* @__PURE__ */ new Date()).toISOString()
+        });
+      } catch {
+      }
+      return reply.send({ jsonrpc: "2.0", id, result: execResult.result });
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+      const response = await fetch(handlerUrl, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ card_id: cardId, skill_id: resolvedSkillId, params }),
+        signal: controller.signal
+      });
+      clearTimeout(timer);
+      if (!response.ok) {
+        releaseEscrow(creditDb, escrowId);
+        updateReputation(registryDb, cardId, false, Date.now() - startMs);
+        try {
+          insertRequestLog(registryDb, {
+            id: randomUUID3(),
+            card_id: cardId,
+            card_name: cardName,
+            skill_id: resolvedSkillId,
+            requester,
+            status: "failure",
+            latency_ms: Date.now() - startMs,
+            credits_charged: 0,
+            created_at: (/* @__PURE__ */ new Date()).toISOString()
+          });
+        } catch {
+        }
+        return reply.send({
+          jsonrpc: "2.0",
+          id,
+          error: { code: -32603, message: `Handler returned ${response.status}` }
+        });
+      }
+      const result = await response.json();
+      settleEscrow(creditDb, escrowId, card.owner);
+      updateReputation(registryDb, cardId, true, Date.now() - startMs);
+      try {
+        insertRequestLog(registryDb, {
+          id: randomUUID3(),
+          card_id: cardId,
+          card_name: cardName,
+          skill_id: resolvedSkillId,
+          requester,
+          status: "success",
+          latency_ms: Date.now() - startMs,
+          credits_charged: creditsNeeded,
+          created_at: (/* @__PURE__ */ new Date()).toISOString()
+        });
+      } catch {
+      }
+      return reply.send({ jsonrpc: "2.0", id, result });
+    } catch (err) {
+      clearTimeout(timer);
+      releaseEscrow(creditDb, escrowId);
+      updateReputation(registryDb, cardId, false, Date.now() - startMs);
+      const isTimeout = err instanceof Error && err.name === "AbortError";
+      try {
+        insertRequestLog(registryDb, {
+          id: randomUUID3(),
+          card_id: cardId,
+          card_name: cardName,
+          skill_id: resolvedSkillId,
+          requester,
+          status: isTimeout ? "timeout" : "failure",
+          latency_ms: Date.now() - startMs,
+          credits_charged: 0,
+          created_at: (/* @__PURE__ */ new Date()).toISOString()
+        });
+      } catch {
+      }
+      return reply.send({
+        jsonrpc: "2.0",
+        id,
+        error: { code: -32603, message: isTimeout ? "Execution timeout" : "Handler error" }
+      });
+    }
+  });
+  return fastify;
+}
+export {
+  CapabilityCardSchema,
+  createGatewayServer,
+  getBalance,
+  getCard,
+  insertCard,
+  openCreditDb,
+  openDatabase,
+  searchCards
+};