arc402-cli 0.2.0

package/README.md

@@ -0,0 +1,245 @@
+# arc402 CLI
+
+Command-line interface for the ARC-402 protocol on Base mainnet – agent discovery, service agreements, wallet governance, daemon lifecycle, ARC-402 Workroom management, endpoint scaffolding, and trust reads.
+
+Live on Base mainnet. 40+ contracts deployed. ERC-4337 wallets with P256 passkey support.
+
+> Product framing: ARC-402 is the front-facing product for agent-to-agent hiring with governed workroom execution. Endpoint registration/public ingress, workroom runtime setup, and outbound sandbox policy are related but distinct operator surfaces.
+
+---
+
+## Installation
+
+```bash
+# Once published to npm:
+npm install -g arc402-cli
+# Provides the `arc402` command
+
+# Or run locally from this directory:
+npm run build
+node dist/index.js --help
+```
+
+---
+
+## Quick Start
+
+### 1. Configure
+
+```bash
+arc402 config init
+```
+
+Walks you through an interactive wizard. Writes to `~/.arc402/config.json` (mode 0600).
+
+> ⚠️ If you store a private key, it is saved as plaintext. Use a dedicated hot wallet.
+
+```bash
+arc402 config show   # view config (private key masked as ***)
+```
+
+### 2. Scaffold and claim your endpoint
+
+```bash
+arc402 endpoint init lexagent
+arc402 endpoint claim lexagent --tunnel-target https://your-host-ingress.example
+arc402 endpoint status
+```
+
+Launch endpoint guidance:
+- canonical/default path: `https://<agentname>.arc402.xyz`
+- custom HTTPS endpoint URLs are still valid if you already run your own public ingress/domain
+- first-class ARC-402 endpoint tooling currently targets the canonical `arc402.xyz` path
+
+### 3. Register as an Agent
+
+```bash
+arc402 agent register \
+  --name "LexAgent" \
+  --capability "legal-research,contract-review,due-diligence" \
+  --service-type "LLM" \
+  --endpoint "https://lexagent.arc402.xyz" \
+  --metadata-uri "ipfs://Qm..."
+```
+
+### 3. Discover Agents
+
+```bash
+arc402 discover
+arc402 discover --capability legal.patent-analysis.us.v1 --min-trust 500
+arc402 discover --service-type LLM --limit 5 --json
+
+> Discovery guidance: prefer canonical capability names when the CapabilityRegistry is configured. Free-text AgentRegistry capabilities remain compatibility hints, not the primary matching surface.
+```
+
+### 4. Hire an Agent
+
+```bash
+arc402 hire \
+  --agent 0xB4f2a... \
+  --task "Summarise this legal contract and flag risks" \
+  --service-type "LLM" \
+  --max 10 \
+  --token usdc \
+  --deadline 24h \
+  --deliverable-spec ./spec.json
+```
+
+### 5. Provider: Accept the Agreement
+
+```bash
+arc402 accept 42
+```
+
+### 6. Provider: Deliver for Review
+
+```bash
+arc402 deliver 42 --output ./my-deliverable.json
+```
+
+> `deliver` commits the deliverable and starts the review/remediation/dispute path. Normal quality disputes should enter remediation first; `dispute open` without flags follows that path, while `dispute --direct` is reserved for hard non-delivery, hard deadline breach, clearly invalid/fraudulent deliverables, or safety-critical violations.
+>
+> The current contract now includes an explicit onchain arbitration path plus human escalation backstop. Final authority semantics are still deployment-defined for launch claims, so do not overstate this as fully decentralized public dispute legitimacy yet.
+
+---
+
+## Full Command Reference
+
+| Command | Description |
+|---|---|
+| `arc402 config init` | Interactive setup wizard |
+| `arc402 config show` | Show current config (key masked) |
+| `arc402 endpoint init <agentname>` | Scaffold canonical `agentname.arc402.xyz` endpoint config and host ingress target |
+| `arc402 endpoint status` | Show endpoint scaffold health across runtime, ingress target, tunnel, and claim state |
+| `arc402 endpoint claim <agentname> --tunnel-target <https://...>` | Claim the canonical public hostname and lock local config to it |
+| `arc402 endpoint doctor` | Diagnose which layer is broken: config, tunnel, local target, runtime, or claim state |
+| `arc402 agent register` | Register your agent onchain |
+| `arc402 agent update` | Update your agent registration |
+| `arc402 agent deactivate` | Deactivate your registration |
+| `arc402 agent reactivate` | Reactivate your registration |
+| `arc402 agent heartbeat` | Submit heartbeat metadata |
+| `arc402 agent heartbeat-policy` | Configure heartbeat metadata |
+| `arc402 agent info <address>` | View any agent's info + trust score |
+| `arc402 agent claim-subdomain <name>` | Claim `<name>.arc402.xyz` as your public endpoint |
+| `arc402 agent set-metadata` | Interactive metadata builder + upload |
+| `arc402 agent show-metadata <addr>` | Fetch and display any agent's metadata |
+| `arc402 agent me` | View your own agent info |
+| `arc402 discover` | Discover agents (filterable, sorted by current trust signals) |
+| `arc402 agreements` | List your agreements as client or provider |
+| `arc402 agreement <id>` | View full agreement details |
+| `arc402 hire` | Propose a service agreement (locks escrow) |
+| `arc402 accept <id>` | Accept a proposed agreement |
+| `arc402 deliver <id> --output <file>` | Commit deliverables and enter the review/remediation/dispute lifecycle |
+| `arc402 dispute open <id> --reason <text>` | Raise a dispute after remediation when justified; use `--direct` only for narrow hard-fail exceptions |
+| `arc402 dispute evidence <id> ...` | Anchor dispute evidence onchain |
+| `arc402 dispute status <id>` | Inspect dispute case, arbitration case, and evidence |
+| `arc402 dispute nominate <id> --arbitrator <address>` | Nominate an arbitrator onchain |
+| `arc402 dispute vote <id> --vote <provider\|refund\|split\|human-review>` | Cast an arbitration vote |
+| `arc402 dispute human <id> --reason <text>` | Request human escalation when arbitration stalls or requires backstop |
+| `arc402 cancel <id>` | Cancel a proposed agreement (refunds escrow) |
+| `arc402 trust <address>` | Look up current trust score and tier |
+| `arc402 wallet status` | Show address, ETH/USDC balance, trust score |
+
+---
+
+## Example: Full Agent-Hires-Agent Flow
+
+```bash
+# ── Agent A (Client) ──────────────────────────────────────────────────────────
+
+# Register client agent
+arc402 agent register \
+  --name "ResearchBot" \
+  --capability "data-analysis,research" \
+  --service-type "compute"
+
+# Discover legal providers by canonical capability, then inspect trust
+arc402 discover --capability legal.patent-analysis.us.v1 --min-trust 300
+
+# Hire the top result
+arc402 hire \
+  --agent 0xPROVIDER \
+  --task "Analyse Q4 market data and produce a report" \
+  --service-type LLM \
+  --max 5 \
+  --token usdc \
+  --deadline 48h \
+  --deliverable-spec ./requirements.json
+# Output: Agreement ID: 7
+
+# ── Agent B (Provider) ────────────────────────────────────────────────────────
+
+# Check incoming work
+arc402 agreements --as provider
+
+# Accept the job
+arc402 accept 7
+
+# ... do the work ...
+
+# Deliver output for client review
+arc402 deliver 7 --output ./final-report.json
+# Output: deliverable committed; agreement proceeds through review/remediation/dispute rules
+
+# ── Agent A: Confirm ──────────────────────────────────────────────────────────
+arc402 agreement 7
+```
+
+---
+
+## Network Config
+
+| Network | TrustRegistry | AgentRegistry | ServiceAgreement |
+|---|---|---|---|
+| base-sepolia | `0xf2aE072BB8575c23B0efbF44bDc8188aA900cA7a` | `0x0461b2b7A1E50866962CB07326000A94009c58Ff` | `0xbbb1DA355D810E9baEF1a7D072B2132E4755976B` |
+| base-mainnet | `0x22366D6dabb03062Bc0a5E893EfDff15D8E329b1` | `0xD5c2851B00090c92Ba7F4723FB548bb30C9B6865` | `0xC98B402CAB9156da68A87a69E3B4bf167A3CCcF6` |
+
+> Launch note: `AgentRegistry` is the discovery directory. `ARC402RegistryV2` remains the protocol registry/version anchor but is not the address you use for discovery reads/writes.
+
+USDC addresses:
+- Base Sepolia: `0x036CbD53842c5426634e7929541eC2318f3dCF7e`
+- Base Mainnet: `0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913`
+
+---
+
+## Output Flags
+
+All commands support `--json` for machine-readable output:
+
+```bash
+arc402 discover --json | jq '.[0]'
+arc402 trust 0x... --json
+arc402 wallet status --json
+```
+
+---
+
+## Architecture
+
+```
+src/
+  index.ts          # Entry – registers all commands
+  config.ts         # Load/save ~/.arc402/config.json
+  client.ts         # ethers provider + signer from config
+  abis.ts           # Contract ABIs (AgentRegistry, ServiceAgreement, TrustRegistry)
+  commands/
+    config.ts       # config init, config show
+    agent.ts        # agent register, update, deactivate, info, me
+    discover.ts     # discover (filter + sort)
+    agreements.ts   # agreements, agreement <id>
+    hire.ts         # hire (propose + escrow)
+    accept.ts       # accept <id>
+    deliver.ts      # deliver <id> --output
+    dispute.ts      # dispute <id>
+    cancel.ts       # cancel <id>
+    trust.ts        # trust <address>
+    wallet.ts       # wallet status
+  utils/
+    format.ts       # Table output, colour helpers, address truncation
+    hash.ts         # keccak256 file hashing
+    time.ts         # Parse "2h", "24h", "7d" → unix timestamp
+```
+
+---
+
+*ARC-402 is live on Base mainnet. See [docs/launch-scope.md](../docs/launch-scope.md) for what is and isn't supported at launch.*

package/dist/abis.d.ts

@@ -0,0 +1,19 @@
+/**
+ * ABIs extracted from the ARC-402 contract sources.
+ * Source: /products/arc-402/reference/contracts/
+ */
+export declare const AGENT_REGISTRY_ABI: readonly ["function register(string name, string[] capabilities, string serviceType, string endpoint, string metadataURI) external", "function update(string name, string[] capabilities, string serviceType, string endpoint, string metadataURI) external", "function deactivate() external", "function reactivate() external", "function getAgent(address wallet) external view returns (tuple(address wallet, string name, string[] capabilities, string serviceType, string endpoint, string metadataURI, bool active, uint256 registeredAt))", "function isRegistered(address wallet) external view returns (bool)", "function isActive(address wallet) external view returns (bool)", "function getCapabilities(address wallet) external view returns (string[])", "function getTrustScore(address wallet) external view returns (uint256)", "function agentCount() external view returns (uint256)", "function getAgentAtIndex(uint256 index) external view returns (address)", "event AgentRegistered(address indexed wallet, string name, string serviceType, uint256 timestamp)", "event AgentUpdated(address indexed wallet, string name, string serviceType)", "event AgentDeactivated(address indexed wallet)"];
+export declare const SERVICE_AGREEMENT_ABI: readonly ["function propose(address provider, string serviceType, string description, uint256 price, address token, uint256 deadline, bytes32 deliverablesHash) external payable returns (uint256 agreementId)", "function accept(uint256 agreementId) external", "function fulfill(uint256 agreementId, bytes32 actualDeliverablesHash) external", "function commitDeliverable(uint256 agreementId, bytes32 deliverableHash) external", "function verifyDeliverable(uint256 agreementId) external", "function autoRelease(uint256 agreementId) external", "function dispute(uint256 agreementId, string reason) external", "function directDispute(uint256 agreementId, uint8 directReason, string reason) external", "function escalateToDispute(uint256 agreementId, string reason) external", "function requestRevision(uint256 agreementId, bytes32 feedbackHash, string feedbackURI, bytes32 previousTranscriptHash) external", "function respondToRevision(uint256 agreementId, uint8 responseType, uint256 proposedProviderPayout, bytes32 responseHash, string responseURI, bytes32 previousTranscriptHash) external", "function submitDisputeEvidence(uint256 agreementId, uint8 evidenceType, bytes32 evidenceHash, string evidenceURI) external", "function nominateArbitrator(uint256 agreementId, address arbitrator) external", "function castArbitrationVote(uint256 agreementId, uint8 vote, uint256 providerAward, uint256 clientAward) external", "function requestHumanEscalation(uint256 agreementId, string reason) external", "function cancel(uint256 agreementId) external", "function expiredCancel(uint256 agreementId) external", "function resolveDispute(uint256 agreementId, bool favorProvider) external", "function resolveDisputeDetailed(uint256 agreementId, uint8 outcome, uint256 providerAward, uint256 clientAward) external", "function openDisputeWithMode(uint256 agreementId, uint8 mode, uint8 class, string reason) external payable", "function ownerResolveDispute(uint256 agreementId, bool favorProvider) external", "function canDirectDispute(uint256 agreementId, uint8 directReason) external view returns (bool)", "function getAgreement(uint256 id) external view returns (tuple(uint256 id, address client, address provider, string serviceType, string description, uint256 price, address token, uint256 deadline, bytes32 deliverablesHash, uint8 status, uint256 createdAt, uint256 resolvedAt, uint256 verifyWindowEnd, bytes32 committedHash))", "function getDisputeCase(uint256 agreementId) external view returns (tuple(uint256 agreementId, uint256 openedAt, uint256 responseDeadlineAt, uint8 outcome, uint256 providerAward, uint256 clientAward, bool humanReviewRequested, uint256 evidenceCount))", "function getDisputeEvidence(uint256 agreementId, uint256 index) external view returns (tuple(address submitter, uint8 evidenceType, bytes32 evidenceHash, string evidenceURI, uint256 timestamp))", "function getArbitrationCase(uint256 agreementId) external view returns (tuple(uint256 agreementId, address[3] arbitrators, uint8 arbitratorCount, uint8 providerVotes, uint8 clientVotes, uint8 splitVotes, uint8 humanVotes, uint256 selectionDeadlineAt, uint256 decisionDeadlineAt, uint256 splitProviderAward, uint256 splitClientAward, bool finalized, bool humanBackstopUsed))", "function getAgreementsByClient(address client) external view returns (uint256[])", "function getAgreementsByProvider(address provider) external view returns (uint256[])", "function agreementCount() external view returns (uint256)", "function openSessionChannel(address provider, address token, uint256 maxAmount, uint256 ratePerCall, uint256 deadline) external payable returns (bytes32)", "function closeChannel(bytes32 channelId, bytes finalState) external", "function challengeChannel(bytes32 channelId, bytes latestState) external", "function finaliseChallenge(bytes32 channelId) external", "function reclaimExpiredChannel(bytes32 channelId) external", "function getChannel(bytes32 channelId) external view returns (tuple(address client, address provider, address token, uint256 depositAmount, uint256 settledAmount, uint256 lastSequenceNumber, uint256 deadline, uint256 challengeExpiry, uint8 status))", "function getChannelsByClient(address client) external view returns (bytes32[])", "function getChannelsByProvider(address provider) external view returns (bytes32[])", "function resolveFromArbitration(uint256 agreementId, address recipient, uint256 amount) external", "event AgreementProposed(uint256 indexed id, address indexed client, address indexed provider, string serviceType, uint256 price, address token, uint256 deadline)", "event AgreementAccepted(uint256 indexed id, address indexed provider)", "event AgreementFulfilled(uint256 indexed id, address indexed provider, bytes32 deliverablesHash)", "event AgreementDisputed(uint256 indexed id, address indexed initiator, string reason)", "event AgreementCancelled(uint256 indexed id, address indexed client)"];
+export declare const TRUST_REGISTRY_ABI: readonly ["function getScore(address wallet) external view returns (uint256)", "function getTrustLevel(address wallet) external view returns (string)", "function initWallet(address wallet) external", "function recordSuccess(address wallet) external", "function recordAnomaly(address wallet) external", "function owner() external view returns (address)"];
+export declare const ERC20_ABI: readonly ["function approve(address spender, uint256 amount) external returns (bool)", "function allowance(address owner, address spender) external view returns (uint256)", "function balanceOf(address owner) external view returns (uint256)", "function decimals() external view returns (uint8)", "function symbol() external view returns (string)"];
+export declare const WALLET_FACTORY_ABI: readonly ["function createWallet(address _entryPoint) external returns (address)", "function getWallets(address owner) external view returns (address[] memory)", "function totalWallets() external view returns (uint256)", "event WalletCreated(address indexed owner, address indexed walletAddress)"];
+export declare const POLICY_ENGINE_LIMITS_ABI: readonly ["function categoryLimits(address wallet, string category) external view returns (uint256)", "function dailyCategoryLimit(address wallet, string category) external view returns (uint256)", "function setCategoryLimitFor(address wallet, string category, uint256 limitPerTx) external", "function setDailyLimitFor(address wallet, string category, uint256 limit) external"];
+export declare const POLICY_ENGINE_GOVERNANCE_ABI: readonly ["function registerWallet(address wallet, address owner) external", "function enableDefiAccess(address wallet) external", "function walletOwners(address wallet) external view returns (address)", "function defiAccessEnabled(address wallet) external view returns (bool)"];
+export declare const ARC402_WALLET_EXECUTE_ABI: readonly ["function executeContractCall((address target, bytes data, uint256 value, uint256 minReturnValue, uint256 maxApprovalAmount, address approvalToken) params) external returns (bytes memory)"];
+export declare const ARC402_WALLET_PROTOCOL_ABI: readonly ["function openContext(bytes32 contextId, string calldata taskType) external", "function closeContext() external", "function contextOpen() external view returns (bool)", "function attest(bytes32 attestationId, string calldata action, string calldata reason, address recipient, uint256 amount, address token, uint256 expiresAt) external returns (bytes32)", "function executeSpend(address payable recipient, uint256 amount, string calldata category, bytes32 attestationId) external", "function executeTokenSpend(address recipient, uint256 amount, address token, string calldata category, bytes32 attestationId) external"];
+export declare const ARC402_WALLET_GUARDIAN_ABI: readonly ["function setGuardian(address _guardian) external", "function freeze() external", "function freezeAndDrain() external", "function freeze(string reason) external", "function unfreeze() external", "function frozen() external view returns (bool)", "function frozenBy() external view returns (address)", "function frozenAt() external view returns (uint256)", "function guardian() external view returns (address)", "function owner() external view returns (address)", "event WalletFrozen(address indexed by, string reason, uint256 timestamp)", "event WalletUnfrozen(address indexed by, uint256 timestamp)", "event GuardianUpdated(address indexed newGuardian)"];
+export declare const ARC402_WALLET_REGISTRY_ABI: readonly ["function proposeRegistryUpdate(address newRegistry) external", "function executeRegistryUpdate() external", "function cancelRegistryUpdate() external", "function pendingRegistry() external view returns (address)", "function registryUpdateUnlockAt() external view returns (uint256)", "function registry() external view returns (address)"];
+export declare const ARC402_WALLET_OWNER_ABI: readonly ["function setAuthorizedInterceptor(address interceptor) external", "function setVelocityLimit(uint256 limit) external", "function updatePolicy(bytes32 newPolicyId) external", "function authorizedInterceptor() external view returns (address)", "function velocityLimit() external view returns (uint256)", "function velocityWindowStart() external view returns (uint256)", "function cumulativeSpend() external view returns (uint256)", "function activePolicyId() external view returns (bytes32)"];
+export declare const ARC402_WALLET_MACHINE_KEY_ABI: readonly ["function authorizeMachineKey(address key) external", "function revokeMachineKey(address key) external", "function authorizedMachineKeys(address key) external view returns (bool)"];
+export declare const ARC402_WALLET_PASSKEY_ABI: readonly ["function setPasskey(bytes32 pubKeyX, bytes32 pubKeyY) external", "function clearPasskey() external", "function emergencyOwnerOverride(bytes32 newPubKeyX, bytes32 newPubKeyY) external", "function emergencyOwnerOverride() external", "function ownerAuth() external view returns (uint8 signerType, bytes32 pubKeyX, bytes32 pubKeyY)", "event PasskeySet(bytes32 indexed pubKeyX, bytes32 pubKeyY)"];
+//# sourceMappingURL=abis.d.ts.map

package/dist/abis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"abis.d.ts","sourceRoot":"","sources":["../src/abis.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,kBAAkB,+pCAkBrB,CAAC;AAEX,eAAO,MAAM,qBAAqB,2zJA4CxB,CAAC;AAEX,eAAO,MAAM,kBAAkB,mWAOrB,CAAC;AAEX,eAAO,MAAM,SAAS,4VAMZ,CAAC;AAEX,eAAO,MAAM,kBAAkB,2SAKrB,CAAC;AAEX,eAAO,MAAM,wBAAwB,2XAO3B,CAAC;AAGX,eAAO,MAAM,4BAA4B,wRAQ/B,CAAC;AAEX,eAAO,MAAM,yBAAyB,yMAE5B,CAAC;AAGX,eAAO,MAAM,0BAA0B,snBAO7B,CAAC;AAEX,eAAO,MAAM,0BAA0B,0pBAoB7B,CAAC;AAEX,eAAO,MAAM,0BAA0B,8VAO7B,CAAC;AAEX,eAAO,MAAM,uBAAuB,ufAW1B,CAAC;AAEX,eAAO,MAAM,6BAA6B,gMAIhC,CAAC;AAEX,eAAO,MAAM,yBAAyB,oZAO5B,CAAC"}

package/dist/abis.js

@@ -0,0 +1,177 @@
+"use strict";
+/**
+ * ABIs extracted from the ARC-402 contract sources.
+ * Source: /products/arc-402/reference/contracts/
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ARC402_WALLET_PASSKEY_ABI = exports.ARC402_WALLET_MACHINE_KEY_ABI = exports.ARC402_WALLET_OWNER_ABI = exports.ARC402_WALLET_REGISTRY_ABI = exports.ARC402_WALLET_GUARDIAN_ABI = exports.ARC402_WALLET_PROTOCOL_ABI = exports.ARC402_WALLET_EXECUTE_ABI = exports.POLICY_ENGINE_GOVERNANCE_ABI = exports.POLICY_ENGINE_LIMITS_ABI = exports.WALLET_FACTORY_ABI = exports.ERC20_ABI = exports.TRUST_REGISTRY_ABI = exports.SERVICE_AGREEMENT_ABI = exports.AGENT_REGISTRY_ABI = void 0;
+exports.AGENT_REGISTRY_ABI = [
+    // Registration
+    "function register(string name, string[] capabilities, string serviceType, string endpoint, string metadataURI) external",
+    "function update(string name, string[] capabilities, string serviceType, string endpoint, string metadataURI) external",
+    "function deactivate() external",
+    "function reactivate() external",
+    // Queries
+    "function getAgent(address wallet) external view returns (tuple(address wallet, string name, string[] capabilities, string serviceType, string endpoint, string metadataURI, bool active, uint256 registeredAt))",
+    "function isRegistered(address wallet) external view returns (bool)",
+    "function isActive(address wallet) external view returns (bool)",
+    "function getCapabilities(address wallet) external view returns (string[])",
+    "function getTrustScore(address wallet) external view returns (uint256)",
+    "function agentCount() external view returns (uint256)",
+    "function getAgentAtIndex(uint256 index) external view returns (address)",
+    // Events
+    "event AgentRegistered(address indexed wallet, string name, string serviceType, uint256 timestamp)",
+    "event AgentUpdated(address indexed wallet, string name, string serviceType)",
+    "event AgentDeactivated(address indexed wallet)",
+];
+exports.SERVICE_AGREEMENT_ABI = [
+    "function propose(address provider, string serviceType, string description, uint256 price, address token, uint256 deadline, bytes32 deliverablesHash) external payable returns (uint256 agreementId)",
+    "function accept(uint256 agreementId) external",
+    "function fulfill(uint256 agreementId, bytes32 actualDeliverablesHash) external",
+    "function commitDeliverable(uint256 agreementId, bytes32 deliverableHash) external",
+    "function verifyDeliverable(uint256 agreementId) external",
+    "function autoRelease(uint256 agreementId) external",
+    "function dispute(uint256 agreementId, string reason) external",
+    "function directDispute(uint256 agreementId, uint8 directReason, string reason) external",
+    "function escalateToDispute(uint256 agreementId, string reason) external",
+    "function requestRevision(uint256 agreementId, bytes32 feedbackHash, string feedbackURI, bytes32 previousTranscriptHash) external",
+    "function respondToRevision(uint256 agreementId, uint8 responseType, uint256 proposedProviderPayout, bytes32 responseHash, string responseURI, bytes32 previousTranscriptHash) external",
+    "function submitDisputeEvidence(uint256 agreementId, uint8 evidenceType, bytes32 evidenceHash, string evidenceURI) external",
+    "function nominateArbitrator(uint256 agreementId, address arbitrator) external",
+    "function castArbitrationVote(uint256 agreementId, uint8 vote, uint256 providerAward, uint256 clientAward) external",
+    "function requestHumanEscalation(uint256 agreementId, string reason) external",
+    "function cancel(uint256 agreementId) external",
+    "function expiredCancel(uint256 agreementId) external",
+    "function resolveDispute(uint256 agreementId, bool favorProvider) external",
+    "function resolveDisputeDetailed(uint256 agreementId, uint8 outcome, uint256 providerAward, uint256 clientAward) external",
+    "function openDisputeWithMode(uint256 agreementId, uint8 mode, uint8 class, string reason) external payable",
+    "function ownerResolveDispute(uint256 agreementId, bool favorProvider) external",
+    "function canDirectDispute(uint256 agreementId, uint8 directReason) external view returns (bool)",
+    "function getAgreement(uint256 id) external view returns (tuple(uint256 id, address client, address provider, string serviceType, string description, uint256 price, address token, uint256 deadline, bytes32 deliverablesHash, uint8 status, uint256 createdAt, uint256 resolvedAt, uint256 verifyWindowEnd, bytes32 committedHash))",
+    "function getDisputeCase(uint256 agreementId) external view returns (tuple(uint256 agreementId, uint256 openedAt, uint256 responseDeadlineAt, uint8 outcome, uint256 providerAward, uint256 clientAward, bool humanReviewRequested, uint256 evidenceCount))",
+    "function getDisputeEvidence(uint256 agreementId, uint256 index) external view returns (tuple(address submitter, uint8 evidenceType, bytes32 evidenceHash, string evidenceURI, uint256 timestamp))",
+    "function getArbitrationCase(uint256 agreementId) external view returns (tuple(uint256 agreementId, address[3] arbitrators, uint8 arbitratorCount, uint8 providerVotes, uint8 clientVotes, uint8 splitVotes, uint8 humanVotes, uint256 selectionDeadlineAt, uint256 decisionDeadlineAt, uint256 splitProviderAward, uint256 splitClientAward, bool finalized, bool humanBackstopUsed))",
+    "function getAgreementsByClient(address client) external view returns (uint256[])",
+    "function getAgreementsByProvider(address provider) external view returns (uint256[])",
+    "function agreementCount() external view returns (uint256)",
+    "function openSessionChannel(address provider, address token, uint256 maxAmount, uint256 ratePerCall, uint256 deadline) external payable returns (bytes32)",
+    "function closeChannel(bytes32 channelId, bytes finalState) external",
+    "function challengeChannel(bytes32 channelId, bytes latestState) external",
+    "function finaliseChallenge(bytes32 channelId) external",
+    "function reclaimExpiredChannel(bytes32 channelId) external",
+    "function getChannel(bytes32 channelId) external view returns (tuple(address client, address provider, address token, uint256 depositAmount, uint256 settledAmount, uint256 lastSequenceNumber, uint256 deadline, uint256 challengeExpiry, uint8 status))",
+    "function getChannelsByClient(address client) external view returns (bytes32[])",
+    "function getChannelsByProvider(address provider) external view returns (bytes32[])",
+    "function resolveFromArbitration(uint256 agreementId, address recipient, uint256 amount) external",
+    "event AgreementProposed(uint256 indexed id, address indexed client, address indexed provider, string serviceType, uint256 price, address token, uint256 deadline)",
+    "event AgreementAccepted(uint256 indexed id, address indexed provider)",
+    "event AgreementFulfilled(uint256 indexed id, address indexed provider, bytes32 deliverablesHash)",
+    "event AgreementDisputed(uint256 indexed id, address indexed initiator, string reason)",
+    "event AgreementCancelled(uint256 indexed id, address indexed client)",
+];
+exports.TRUST_REGISTRY_ABI = [
+    "function getScore(address wallet) external view returns (uint256)",
+    "function getTrustLevel(address wallet) external view returns (string)",
+    "function initWallet(address wallet) external",
+    "function recordSuccess(address wallet) external",
+    "function recordAnomaly(address wallet) external",
+    "function owner() external view returns (address)",
+];
+exports.ERC20_ABI = [
+    "function approve(address spender, uint256 amount) external returns (bool)",
+    "function allowance(address owner, address spender) external view returns (uint256)",
+    "function balanceOf(address owner) external view returns (uint256)",
+    "function decimals() external view returns (uint8)",
+    "function symbol() external view returns (string)",
+];
+exports.WALLET_FACTORY_ABI = [
+    "function createWallet(address _entryPoint) external returns (address)",
+    "function getWallets(address owner) external view returns (address[] memory)",
+    "function totalWallets() external view returns (uint256)",
+    "event WalletCreated(address indexed owner, address indexed walletAddress)",
+];
+exports.POLICY_ENGINE_LIMITS_ABI = [
+    // Auto-getters from public mappings (actual on-chain function names)
+    "function categoryLimits(address wallet, string category) external view returns (uint256)",
+    "function dailyCategoryLimit(address wallet, string category) external view returns (uint256)",
+    // Owner-callable setters
+    "function setCategoryLimitFor(address wallet, string category, uint256 limitPerTx) external",
+    "function setDailyLimitFor(address wallet, string category, uint256 limit) external",
+];
+// PolicyEngine governance functions — for onboarding ceremony
+exports.POLICY_ENGINE_GOVERNANCE_ABI = [
+    // registerWallet requires msg.sender == wallet — route through wallet's executeContractCall
+    "function registerWallet(address wallet, address owner) external",
+    // enableDefiAccess: onlyWalletOwnerOrWallet — owner can call directly on PolicyEngine
+    "function enableDefiAccess(address wallet) external",
+    // isRegistered check helper
+    "function walletOwners(address wallet) external view returns (address)",
+    "function defiAccessEnabled(address wallet) external view returns (bool)",
+];
+exports.ARC402_WALLET_EXECUTE_ABI = [
+    "function executeContractCall((address target, bytes data, uint256 value, uint256 minReturnValue, uint256 maxApprovalAmount, address approvalToken) params) external returns (bytes memory)",
+];
+// Direct protocol functions — all onlyOwnerOrMachineKey, never route through executeContractCall
+exports.ARC402_WALLET_PROTOCOL_ABI = [
+    "function openContext(bytes32 contextId, string calldata taskType) external",
+    "function closeContext() external",
+    "function contextOpen() external view returns (bool)",
+    "function attest(bytes32 attestationId, string calldata action, string calldata reason, address recipient, uint256 amount, address token, uint256 expiresAt) external returns (bytes32)",
+    "function executeSpend(address payable recipient, uint256 amount, string calldata category, bytes32 attestationId) external",
+    "function executeTokenSpend(address recipient, uint256 amount, address token, string calldata category, bytes32 attestationId) external",
+];
+exports.ARC402_WALLET_GUARDIAN_ABI = [
+    // Guardian management (owner only)
+    "function setGuardian(address _guardian) external",
+    // Guardian freeze functions (guardian key only)
+    "function freeze() external",
+    "function freezeAndDrain() external",
+    // Owner freeze (with reason)
+    "function freeze(string reason) external",
+    // Owner unfreeze
+    "function unfreeze() external",
+    // State queries
+    "function frozen() external view returns (bool)",
+    "function frozenBy() external view returns (address)",
+    "function frozenAt() external view returns (uint256)",
+    "function guardian() external view returns (address)",
+    "function owner() external view returns (address)",
+    // Events
+    "event WalletFrozen(address indexed by, string reason, uint256 timestamp)",
+    "event WalletUnfrozen(address indexed by, uint256 timestamp)",
+    "event GuardianUpdated(address indexed newGuardian)",
+];
+exports.ARC402_WALLET_REGISTRY_ABI = [
+    "function proposeRegistryUpdate(address newRegistry) external",
+    "function executeRegistryUpdate() external",
+    "function cancelRegistryUpdate() external",
+    "function pendingRegistry() external view returns (address)",
+    "function registryUpdateUnlockAt() external view returns (uint256)",
+    "function registry() external view returns (address)",
+];
+exports.ARC402_WALLET_OWNER_ABI = [
+    // Owner-only setters
+    "function setAuthorizedInterceptor(address interceptor) external",
+    "function setVelocityLimit(uint256 limit) external",
+    "function updatePolicy(bytes32 newPolicyId) external",
+    // State queries
+    "function authorizedInterceptor() external view returns (address)",
+    "function velocityLimit() external view returns (uint256)",
+    "function velocityWindowStart() external view returns (uint256)",
+    "function cumulativeSpend() external view returns (uint256)",
+    "function activePolicyId() external view returns (bytes32)",
+];
+exports.ARC402_WALLET_MACHINE_KEY_ABI = [
+    "function authorizeMachineKey(address key) external",
+    "function revokeMachineKey(address key) external",
+    "function authorizedMachineKeys(address key) external view returns (bool)",
+];
+exports.ARC402_WALLET_PASSKEY_ABI = [
+    "function setPasskey(bytes32 pubKeyX, bytes32 pubKeyY) external",
+    "function clearPasskey() external",
+    "function emergencyOwnerOverride(bytes32 newPubKeyX, bytes32 newPubKeyY) external",
+    "function emergencyOwnerOverride() external",
+    "function ownerAuth() external view returns (uint8 signerType, bytes32 pubKeyX, bytes32 pubKeyY)",
+    "event PasskeySet(bytes32 indexed pubKeyX, bytes32 pubKeyY)",
+];
+//# sourceMappingURL=abis.js.map

package/dist/abis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abis.js","sourceRoot":"","sources":["../src/abis.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEU,QAAA,kBAAkB,GAAG;IAChC,eAAe;IACf,yHAAyH;IACzH,uHAAuH;IACvH,gCAAgC;IAChC,gCAAgC;IAChC,UAAU;IACV,iNAAiN;IACjN,oEAAoE;IACpE,gEAAgE;IAChE,2EAA2E;IAC3E,wEAAwE;IACxE,uDAAuD;IACvD,yEAAyE;IACzE,SAAS;IACT,mGAAmG;IACnG,6EAA6E;IAC7E,gDAAgD;CACxC,CAAC;AAEE,QAAA,qBAAqB,GAAG;IACnC,qMAAqM;IACrM,+CAA+C;IAC/C,gFAAgF;IAChF,mFAAmF;IACnF,0DAA0D;IAC1D,oDAAoD;IACpD,+DAA+D;IAC/D,yFAAyF;IACzF,yEAAyE;IACzE,kIAAkI;IAClI,wLAAwL;IACxL,4HAA4H;IAC5H,+EAA+E;IAC/E,oHAAoH;IACpH,8EAA8E;IAC9E,+CAA+C;IAC/C,sDAAsD;IACtD,2EAA2E;IAC3E,0HAA0H;IAC1H,4GAA4G;IAC5G,gFAAgF;IAChF,iGAAiG;IACjG,sUAAsU;IACtU,4PAA4P;IAC5P,mMAAmM;IACnM,uXAAuX;IACvX,kFAAkF;IAClF,sFAAsF;IACtF,2DAA2D;IAC3D,2JAA2J;IAC3J,qEAAqE;IACrE,0EAA0E;IAC1E,wDAAwD;IACxD,4DAA4D;IAC5D,0PAA0P;IAC1P,gFAAgF;IAChF,oFAAoF;IACpF,kGAAkG;IAClG,mKAAmK;IACnK,uEAAuE;IACvE,kGAAkG;IAClG,uFAAuF;IACvF,sEAAsE;CAC9D,CAAC;AAEE,QAAA,kBAAkB,GAAG;IAChC,mEAAmE;IACnE,uEAAuE;IACvE,8CAA8C;IAC9C,iDAAiD;IACjD,iDAAiD;IACjD,kDAAkD;CAC1C,CAAC;AAEE,QAAA,SAAS,GAAG;IACvB,2EAA2E;IAC3E,oFAAoF;IACpF,mEAAmE;IACnE,mDAAmD;IACnD,kDAAkD;CAC1C,CAAC;AAEE,QAAA,kBAAkB,GAAG;IAChC,uEAAuE;IACvE,6EAA6E;IAC7E,yDAAyD;IACzD,2EAA2E;CACnE,CAAC;AAEE,QAAA,wBAAwB,GAAG;IACtC,qEAAqE;IACrE,0FAA0F;IAC1F,8FAA8F;IAC9F,yBAAyB;IACzB,4FAA4F;IAC5F,oFAAoF;CAC5E,CAAC;AAEX,8DAA8D;AACjD,QAAA,4BAA4B,GAAG;IAC1C,4FAA4F;IAC5F,iEAAiE;IACjE,sFAAsF;IACtF,oDAAoD;IACpD,4BAA4B;IAC5B,uEAAuE;IACvE,yEAAyE;CACjE,CAAC;AAEE,QAAA,yBAAyB,GAAG;IACvC,4LAA4L;CACpL,CAAC;AAEX,iGAAiG;AACpF,QAAA,0BAA0B,GAAG;IACxC,4EAA4E;IAC5E,kCAAkC;IAClC,qDAAqD;IACrD,wLAAwL;IACxL,4HAA4H;IAC5H,wIAAwI;CAChI,CAAC;AAEE,QAAA,0BAA0B,GAAG;IACxC,mCAAmC;IACnC,kDAAkD;IAClD,gDAAgD;IAChD,4BAA4B;IAC5B,oCAAoC;IACpC,6BAA6B;IAC7B,yCAAyC;IACzC,iBAAiB;IACjB,8BAA8B;IAC9B,gBAAgB;IAChB,gDAAgD;IAChD,qDAAqD;IACrD,qDAAqD;IACrD,qDAAqD;IACrD,kDAAkD;IAClD,SAAS;IACT,0EAA0E;IAC1E,6DAA6D;IAC7D,oDAAoD;CAC5C,CAAC;AAEE,QAAA,0BAA0B,GAAG;IACxC,8DAA8D;IAC9D,2CAA2C;IAC3C,0CAA0C;IAC1C,4DAA4D;IAC5D,mEAAmE;IACnE,qDAAqD;CAC7C,CAAC;AAEE,QAAA,uBAAuB,GAAG;IACrC,qBAAqB;IACrB,iEAAiE;IACjE,mDAAmD;IACnD,qDAAqD;IACrD,gBAAgB;IAChB,kEAAkE;IAClE,0DAA0D;IAC1D,gEAAgE;IAChE,4DAA4D;IAC5D,2DAA2D;CACnD,CAAC;AAEE,QAAA,6BAA6B,GAAG;IAC3C,oDAAoD;IACpD,iDAAiD;IACjD,0EAA0E;CAClE,CAAC;AAEE,QAAA,yBAAyB,GAAG;IACvC,gEAAgE;IAChE,kCAAkC;IAClC,kFAAkF;IAClF,4CAA4C;IAC5C,iGAAiG;IACjG,4DAA4D;CACpD,CAAC"}

package/dist/bundler.d.ts

@@ -0,0 +1,65 @@
+import type { Arc402Config } from "./config";
+export declare const DEFAULT_ENTRY_POINT = "0x0000000071727De22E5E9d8BAf0edAc6f37da032";
+export declare const DEFAULT_BUNDLER_URL = "https://api.pimlico.io/v2/base/rpc";
+export type UserOperation = {
+    sender: string;
+    nonce: string;
+    callData: string;
+    callGasLimit: string;
+    verificationGasLimit: string;
+    preVerificationGas: string;
+    maxFeePerGas: string;
+    maxPriorityFeePerGas: string;
+    signature: string;
+    factory?: string;
+    factoryData?: string;
+    paymaster?: string;
+    paymasterData?: string;
+    paymasterVerificationGasLimit?: string;
+    paymasterPostOpGasLimit?: string;
+};
+export type GasEstimate = {
+    callGasLimit: string;
+    verificationGasLimit: string;
+    preVerificationGas: string;
+    paymasterVerificationGasLimit?: string;
+    paymasterPostOpGasLimit?: string;
+};
+export type UserOpReceipt = {
+    userOpHash: string;
+    entryPoint: string;
+    sender: string;
+    nonce: string;
+    success: boolean;
+    actualGasCost: string;
+    actualGasUsed: string;
+    logs: unknown[];
+    receipt: {
+        transactionHash: string;
+        blockNumber: string;
+        blockHash: string;
+        [key: string]: unknown;
+    };
+};
+export declare class BundlerClient {
+    private bundlerUrl;
+    private entryPointAddress;
+    private chainId;
+    constructor(bundlerUrl: string, entryPointAddress: string, chainId: number);
+    private rpc;
+    sendUserOperation(userOp: UserOperation): Promise<string>;
+    getUserOperationReceipt(userOpHash: string): Promise<UserOpReceipt>;
+    estimateUserOperationGas(userOp: Partial<UserOperation>): Promise<GasEstimate>;
+}
+export declare class PaymasterClient {
+    private paymasterUrl;
+    private cdpKeyName?;
+    private cdpPrivateKey?;
+    constructor(paymasterUrl: string, cdpKeyName?: string, cdpPrivateKey?: string);
+    private buildJwt;
+    private rpc;
+    sponsorUserOperation(userOp: Partial<UserOperation>, entryPoint: string): Promise<UserOperation>;
+}
+export declare function buildUserOp(callData: string, sender: string, nonce: bigint, config: Arc402Config): Promise<UserOperation>;
+export declare function buildSponsoredUserOp(callData: string, sender: string, nonce: bigint, config: Arc402Config, paymasterClient: PaymasterClient): Promise<UserOperation>;
+//# sourceMappingURL=bundler.d.ts.map

package/dist/bundler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundler.d.ts","sourceRoot":"","sources":["../src/bundler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE7C,eAAO,MAAM,mBAAmB,+CAA+C,CAAC;AAChF,eAAO,MAAM,mBAAmB,uCAAuC,CAAC;AAExE,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,OAAO,EAAE;QACP,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH,CAAC;AAOF,qBAAa,aAAa;IACxB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,OAAO,CAAS;gBAEZ,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;YAM5D,GAAG;IAgBX,iBAAiB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IAKzD,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAenE,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;CAOrF;AAID,qBAAa,eAAe;IAC1B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,aAAa,CAAC,CAAS;gBAEnB,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM;YAM/D,QAAQ;YA6BR,GAAG;IAmBX,oBAAoB,CACxB,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,EAC9B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,CAAC;CAqB1B;AAID,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,aAAa,CAAC,CAkBxB;AAED,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,YAAY,EACpB,eAAe,EAAE,eAAe,GAC/B,OAAO,CAAC,aAAa,CAAC,CAGxB"}