kontext-sdk 0.9.0 → 0.10.0

package/README.md

@@ -231,6 +231,35 @@ const ctx = Kontext.init({
 // Call ctx.flush() to write, ctx.restore() to reload
 ```
 
+## Auto-Instrumentation (viem)
+
+Run `npx kontext init` to generate a config file, then wrap your viem client — every stablecoin transfer is automatically logged.
+
+```bash
+npx kontext init
+# Wizard asks: project name, agent ID, wallets to monitor, tokens, chains, mode
+# Creates kontext.config.json
+```
+
+```typescript
+import { Kontext, withKontextCompliance } from 'kontext-sdk';
+import { createWalletClient, http } from 'viem';
+import { base } from 'viem/chains';
+
+const kontext = Kontext.init();  // reads kontext.config.json
+const client = withKontextCompliance(
+  createWalletClient({ chain: base, transport: http() }),
+  kontext,
+);
+
+// Every USDC/USDT/DAI/EURC transfer now auto-logged with compliance proof
+await client.sendTransaction({ to: USDC_ADDRESS, data: transferCalldata });
+```
+
+**Two interception layers:**
+- **Code wrap:** `withKontextCompliance()` intercepts `sendTransaction`/`writeContract` calls. Can block pre-send if non-compliant.
+- **Chain listener:** SDK watches monitored wallet addresses on-chain for ERC-20 Transfer events — catches ALL outgoing stablecoin transfers regardless of origin.
+
 ## Pluggable Sanctions Screening
 
 Multi-provider screening with consensus strategies. Bring your own API keys, or use the built-in OFAC SDN list at zero cost.

package/dist/index.d.mts

@@ -434,6 +434,24 @@ interface KontextConfig {
      * $10K CTR, $50K large transaction).
      */
     policy?: PolicyConfig;
+    /**
+     * Default agent ID for verify/log calls when not specified per-call.
+     * Set automatically when loading from kontext.config.json.
+     */
+    agentId?: string;
+    /**
+     * Wallet monitoring configuration. When provided, SDK watches these
+     * addresses on-chain for stablecoin transfers and auto-calls verify().
+     * Requires viem as a peer dependency.
+     */
+    walletMonitoring?: WalletMonitoringConfig;
+    /**
+     * Viem interceptor mode for withKontextCompliance() (default: 'post-send').
+     * - 'post-send': verify() runs after tx succeeds, never blocks
+     * - 'pre-send': verify() runs before tx, throws if non-compliant
+     * - 'both': pre-send screening + post-send full verify
+     */
+    interceptorMode?: 'post-send' | 'pre-send' | 'both';
 }
 /** Screening configuration for pluggable multi-provider sanctions screening */
 interface ScreeningConfig {
@@ -473,6 +491,15 @@ interface PolicyConfig {
     /** When true, refuse verify() if no screening provider is configured (default: false) */
     requireScreening?: boolean;
 }
+/** Wallet monitoring configuration for on-chain event listening */
+interface WalletMonitoringConfig {
+    /** Wallet addresses to watch for outgoing stablecoin transfers */
+    wallets: string[];
+    /** RPC endpoints per chain (required for on-chain listening) */
+    rpcEndpoints: Partial<Record<Chain, string>>;
+    /** Polling interval in ms for HTTP transports (default: 12000) */
+    pollingIntervalMs?: number;
+}
 /**
  * Interface for metadata validation. Compatible with Zod schemas and any
  * validator that implements a `parse` method.
@@ -1713,6 +1740,45 @@ declare class FeatureFlagManager {
     private triggerBackgroundRefresh;
 }
 
+/** Minimal Kontext interface needed by the monitor */
+interface KontextForMonitor {
+    verify(input: VerifyInput): Promise<VerifyResult>;
+}
+/**
+ * Watches monitored wallets on-chain for stablecoin Transfer events.
+ * Uses viem's watchEvent with HTTP polling (works with any RPC endpoint).
+ */
+declare class WalletMonitor {
+    private readonly kontext;
+    private readonly config;
+    private readonly agentId;
+    private readonly tokens;
+    private readonly unwatchers;
+    private running;
+    /** Shared dedup set — tracks recently verified txHashes (populated by both layers) */
+    readonly verifiedTxHashes: Set<string>;
+    private cleanupTimer;
+    private readonly txTimestamps;
+    constructor(kontext: KontextForMonitor, config: WalletMonitoringConfig, options?: {
+        agentId?: string;
+        tokens?: Token[];
+    });
+    /**
+     * Mark a txHash as already verified (called by the viem interceptor layer).
+     * The monitor will skip this tx if it later sees it on-chain.
+     */
+    markVerified(txHash: string): void;
+    /**
+     * Start watching all configured chains for stablecoin transfers.
+     * Dynamically imports viem — requires viem as a peer dependency.
+     */
+    start(): Promise<void>;
+    /** Stop all watchers and cleanup */
+    stop(): void;
+    isRunning(): boolean;
+    private handleTransferLog;
+}
+
 /** Entity type for an agent identity */
 type EntityType = 'individual' | 'organization' | 'bot' | 'unknown';
 /** KYC verification status */
@@ -2337,6 +2403,7 @@ declare class Kontext {
     private readonly trustScorer;
     private readonly anomalyDetector;
     private readonly screeningAggregator;
+    private walletMonitor;
     private provenanceManager;
     private identityRegistry;
     private walletClusterer;
@@ -2373,7 +2440,7 @@ declare class Kontext {
      * });
      * ```
      */
-    static init(config: KontextConfig): Kontext;
+    static init(config?: KontextConfig): Kontext;
     /**
      * Get the current operating mode.
      */
@@ -2863,7 +2930,12 @@ declare class Kontext {
      */
     getFeatureFlagManager(): FeatureFlagManager | null;
     /**
-     * Gracefully shut down the SDK, flushing any pending data.
+     * Get the wallet monitor instance (or null if not configured).
+     * Used by the viem interceptor for dedup registration.
+     */
+    getWalletMonitor(): WalletMonitor | null;
+    /**
+     * Gracefully shut down the SDK, flushing any pending data and stopping watchers.
      */
     destroy(): Promise<void>;
 }
@@ -3854,4 +3926,112 @@ declare class ScreeningAggregator {
     private buildResult;
 }
 
-export { type ActionLog, type AgentCard, type AgentData, type AgentIdentity, AgentIdentityRegistry, type AgentLink, type AgentSession, type AggregatedScreeningResult, type AnchorResult, type AnchorVerification, type AnomalyCallback, type AnomalyDetectionConfig, AnomalyDetector, type AnomalyEvent, type AnomalyRuleType, type AnomalySeverity, type AnomalyThresholds, type AttestationDecision, type AttestationPayload, type AttestationRequest, type AttestationResponse, type AttestationSignature, type BehavioralEmbedding, BehavioralFingerprinter, CURRENCY_REQUIRED_LISTS, type Chain, ChainalysisFreeAPIProvider, ChainalysisOracleProvider, type CheckpointStatus, type ClusteringEvidence, type ClusteringHeuristic, type ComplianceCertificate, type ComplianceCheckResult, type ComplianceReport, type ConfirmTaskInput, type ConsensusStrategy, ConsoleExporter, type CounterpartyAttestation, type CounterpartyConfig, type CreateCheckpointInput, type CreateSessionInput, type CreateTaskInput, CrossSessionLinker, type CrossSessionLinkerConfig, type DateRange, DigestChain, type DigestLink, type DigestVerification, type ERC8021Attribution, type ERC8021Config, type EntityStatus, type EntityType, type Environment, type EventExporter, type ExportFormat, type ExportOptions, type ExportResult, type ExporterResult, type FeatureFlag, type FeatureFlagConfig, FeatureFlagManager, FileStorage, type FinancialFeatures, type FlagPlanTargeting, type FlagScope, type FlagTargeting, type GatedFeature, type GenerateComplianceCertificateInput, type HumanAttestation, JsonFileExporter, type Jurisdiction, KONTEXT_BUILDER_CODE, type KYAConfidenceLevel, type KYAConfidenceScore, KYAConfidenceScorer, type KYAConfidenceScorerConfig, type KYAEnvelope, type KYAScoreComponent, type KYCProviderReference, type KYCStatus, Kontext, type KontextConfig, KontextError, KontextErrorCode, type KontextMode, type LimitEvent, type LinkSignal, type LinkStatus, type LogActionInput, type LogLevel, type LogReasoningInput, type LogTransactionInput, type MatchType, MemoryStorage, type MetadataValidator, type NetworkFeatures, NoopExporter, OFACAddressProvider, OFACEntityProvider, type OnChainAnchorConfig, OnChainExporter, OpenSanctionsLocalProvider, OpenSanctionsProvider, type OperationalFeatures, PLAN_LIMITS, PaymentCompliance, type PlanConfig, PlanManager, type PlanTier, type PlanUsage, type PolicyConfig, type PrecisionTimestamp, type ProvenanceAction, type ProvenanceAttestor, type ProvenanceBundle, type ProvenanceBundleVerification, type ProvenanceCheckpoint, ProvenanceManager, type QueryType, type ReasoningEntry, type RegisterIdentityInput, type ReportOptions, type ReportType, type RiskFactor, type SanctionsCheckResult, type SanctionsList, ScreeningAggregator, type ScreeningAggregatorConfig, type ScreeningConfig, type ScreeningContext, type ScreeningMatch, type ScreeningProvider, type ScreeningResult, type SessionConstraints, type SessionStatus, type StorageAdapter, TOKEN_REQUIRED_LISTS, type Task, type TaskEvidence, type TaskStatus, type TemporalFeatures, type Token, type TransactionEvaluation, type TransactionRecord, type TrustFactor, type TrustScore, TrustScorer, UKOFSIProvider, type UpdateIdentityInput, UsdcCompliance, type UsdcComplianceCheck, type VerificationKey, type VerifyInput, type VerifyResult, type WalletCluster, WalletClusterer, type WalletClusteringConfig, type WalletMapping, anchorDigest, encodeERC8021Suffix, exchangeAttestation, fetchAgentCard, fetchTransactionAttribution, getAnchor, getRequiredLists, isBlockchainAddress, isCryptoTransaction, isFeatureAvailable, parseERC8021Suffix, providerSupportsQuery, requirePlan, verifyAnchor, verifyExportedChain };
+/** Minimal WalletClient shape — avoids hard type dependency on viem */
+interface WalletClientLike {
+    sendTransaction: (args: any) => Promise<`0x${string}`>;
+    writeContract?: (args: any) => Promise<`0x${string}`>;
+    chain?: {
+        id: number;
+        name?: string;
+    };
+    account?: {
+        address: `0x${string}`;
+    };
+    extend: <T>(fn: (client: any) => T) => any;
+}
+/** Minimal Kontext interface needed by the interceptor */
+interface KontextForInterceptor {
+    verify(input: VerifyInput): Promise<VerifyResult>;
+    getConfig(): {
+        agentId?: string;
+        interceptorMode?: string;
+        policy?: {
+            allowedTokens?: Token[];
+        };
+    };
+    getWalletMonitor?(): WalletMonitor | null;
+}
+/** Options for the viem auto-instrumentation decorator */
+interface ViemInstrumentationOptions {
+    /** Agent ID to attribute transactions to */
+    agentId?: string;
+    /** Session ID for grouping transactions */
+    sessionId?: string;
+    /** Tokens to instrument (default: all known) */
+    tokens?: Token[];
+    /** Chains to instrument (default: all known) */
+    chains?: Chain[];
+    /** Compliance mode (default: reads from config, falls back to 'post-send') */
+    mode?: 'post-send' | 'pre-send' | 'both';
+    /** Called after verify() succeeds */
+    onVerify?: (result: VerifyResult, txHash: string) => void | Promise<void>;
+    /** Called when verify() fails */
+    onError?: (error: Error, txHash: string) => void | Promise<void>;
+    /** Additional metadata for every verify() call */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Thrown in pre-send mode when compliance screening fails.
+ */
+declare class ViemComplianceError extends Error {
+    readonly result: VerifyResult;
+    readonly from: string;
+    readonly to: string;
+    readonly amount: string;
+    constructor(message: string, result: VerifyResult, details: {
+        from: string;
+        to: string;
+        amount: string;
+    });
+}
+/**
+ * Wraps a viem WalletClient with Kontext auto-instrumentation.
+ * Every stablecoin transfer is automatically compliance-checked via verify().
+ *
+ * Reads defaults from kontext.getConfig() — options override config values.
+ */
+declare function withKontextCompliance<TClient extends WalletClientLike>(client: TClient, kontext: KontextForInterceptor, options?: Partial<ViemInstrumentationOptions>): TClient;
+
+interface StablecoinContractInfo {
+    token: Token;
+    chain: Chain;
+    decimals: number;
+}
+/**
+ * Known stablecoin contract addresses indexed by lowercased address.
+ * Used for O(1) detection of whether a transaction targets a stablecoin.
+ */
+declare const STABLECOIN_CONTRACTS: Record<string, StablecoinContractInfo>;
+/**
+ * Maps viem chain IDs to Kontext Chain strings.
+ */
+declare const CHAIN_ID_MAP: Record<number, Chain>;
+
+/** Shape of the kontext.config.json file */
+interface KontextConfigFile {
+    $schema?: string;
+    projectId: string;
+    agentId?: string;
+    environment?: Environment;
+    wallets?: string[];
+    tokens?: Token[];
+    chains?: Chain[];
+    rpcEndpoints?: Partial<Record<Chain, string>>;
+    mode?: 'post-send' | 'pre-send' | 'both';
+    corridors?: {
+        from?: string;
+        to?: string;
+    };
+    thresholds?: {
+        alertAmount?: string;
+        ctrAmount?: string;
+    };
+    apiKey?: string;
+}
+/**
+ * Discover and load kontext.config.json by walking up from startDir.
+ * Returns the parsed config file contents, or null if not found.
+ */
+declare function loadConfigFile(startDir?: string): KontextConfigFile | null;
+
+export { type ActionLog, type AgentCard, type AgentData, type AgentIdentity, AgentIdentityRegistry, type AgentLink, type AgentSession, type AggregatedScreeningResult, type AnchorResult, type AnchorVerification, type AnomalyCallback, type AnomalyDetectionConfig, AnomalyDetector, type AnomalyEvent, type AnomalyRuleType, type AnomalySeverity, type AnomalyThresholds, type AttestationDecision, type AttestationPayload, type AttestationRequest, type AttestationResponse, type AttestationSignature, type BehavioralEmbedding, BehavioralFingerprinter, CHAIN_ID_MAP, CURRENCY_REQUIRED_LISTS, type Chain, ChainalysisFreeAPIProvider, ChainalysisOracleProvider, type CheckpointStatus, type ClusteringEvidence, type ClusteringHeuristic, type ComplianceCertificate, type ComplianceCheckResult, type ComplianceReport, type ConfirmTaskInput, type ConsensusStrategy, ConsoleExporter, type CounterpartyAttestation, type CounterpartyConfig, type CreateCheckpointInput, type CreateSessionInput, type CreateTaskInput, CrossSessionLinker, type CrossSessionLinkerConfig, type DateRange, DigestChain, type DigestLink, type DigestVerification, type ERC8021Attribution, type ERC8021Config, type EntityStatus, type EntityType, type Environment, type EventExporter, type ExportFormat, type ExportOptions, type ExportResult, type ExporterResult, type FeatureFlag, type FeatureFlagConfig, FeatureFlagManager, FileStorage, type FinancialFeatures, type FlagPlanTargeting, type FlagScope, type FlagTargeting, type GatedFeature, type GenerateComplianceCertificateInput, type HumanAttestation, JsonFileExporter, type Jurisdiction, KONTEXT_BUILDER_CODE, type KYAConfidenceLevel, type KYAConfidenceScore, KYAConfidenceScorer, type KYAConfidenceScorerConfig, type KYAEnvelope, type KYAScoreComponent, type KYCProviderReference, type KYCStatus, Kontext, type KontextConfig, KontextError, KontextErrorCode, type KontextMode, type LimitEvent, type LinkSignal, type LinkStatus, type LogActionInput, type LogLevel, type LogReasoningInput, type LogTransactionInput, type MatchType, MemoryStorage, type MetadataValidator, type NetworkFeatures, NoopExporter, OFACAddressProvider, OFACEntityProvider, type OnChainAnchorConfig, OnChainExporter, OpenSanctionsLocalProvider, OpenSanctionsProvider, type OperationalFeatures, PLAN_LIMITS, PaymentCompliance, type PlanConfig, PlanManager, type PlanTier, type PlanUsage, type PolicyConfig, type PrecisionTimestamp, type ProvenanceAction, type ProvenanceAttestor, type ProvenanceBundle, type ProvenanceBundleVerification, type ProvenanceCheckpoint, ProvenanceManager, type QueryType, type ReasoningEntry, type RegisterIdentityInput, type ReportOptions, type ReportType, type RiskFactor, STABLECOIN_CONTRACTS, type SanctionsCheckResult, type SanctionsList, ScreeningAggregator, type ScreeningAggregatorConfig, type ScreeningConfig, type ScreeningContext, type ScreeningMatch, type ScreeningProvider, type ScreeningResult, type SessionConstraints, type SessionStatus, type StorageAdapter, TOKEN_REQUIRED_LISTS, type Task, type TaskEvidence, type TaskStatus, type TemporalFeatures, type Token, type TransactionEvaluation, type TransactionRecord, type TrustFactor, type TrustScore, TrustScorer, UKOFSIProvider, type UpdateIdentityInput, UsdcCompliance, type UsdcComplianceCheck, type VerificationKey, type VerifyInput, type VerifyResult, ViemComplianceError, type ViemInstrumentationOptions, type WalletClientLike, type WalletCluster, WalletClusterer, type WalletClusteringConfig, type WalletMapping, WalletMonitor, type WalletMonitoringConfig, anchorDigest, encodeERC8021Suffix, exchangeAttestation, fetchAgentCard, fetchTransactionAttribution, getAnchor, getRequiredLists, isBlockchainAddress, isCryptoTransaction, isFeatureAvailable, loadConfigFile, parseERC8021Suffix, providerSupportsQuery, requirePlan, verifyAnchor, verifyExportedChain, withKontextCompliance };

package/dist/index.d.ts

@@ -434,6 +434,24 @@ interface KontextConfig {
      * $10K CTR, $50K large transaction).
      */
     policy?: PolicyConfig;
+    /**
+     * Default agent ID for verify/log calls when not specified per-call.
+     * Set automatically when loading from kontext.config.json.
+     */
+    agentId?: string;
+    /**
+     * Wallet monitoring configuration. When provided, SDK watches these
+     * addresses on-chain for stablecoin transfers and auto-calls verify().
+     * Requires viem as a peer dependency.
+     */
+    walletMonitoring?: WalletMonitoringConfig;
+    /**
+     * Viem interceptor mode for withKontextCompliance() (default: 'post-send').
+     * - 'post-send': verify() runs after tx succeeds, never blocks
+     * - 'pre-send': verify() runs before tx, throws if non-compliant
+     * - 'both': pre-send screening + post-send full verify
+     */
+    interceptorMode?: 'post-send' | 'pre-send' | 'both';
 }
 /** Screening configuration for pluggable multi-provider sanctions screening */
 interface ScreeningConfig {
@@ -473,6 +491,15 @@ interface PolicyConfig {
     /** When true, refuse verify() if no screening provider is configured (default: false) */
     requireScreening?: boolean;
 }
+/** Wallet monitoring configuration for on-chain event listening */
+interface WalletMonitoringConfig {
+    /** Wallet addresses to watch for outgoing stablecoin transfers */
+    wallets: string[];
+    /** RPC endpoints per chain (required for on-chain listening) */
+    rpcEndpoints: Partial<Record<Chain, string>>;
+    /** Polling interval in ms for HTTP transports (default: 12000) */
+    pollingIntervalMs?: number;
+}
 /**
  * Interface for metadata validation. Compatible with Zod schemas and any
  * validator that implements a `parse` method.
@@ -1713,6 +1740,45 @@ declare class FeatureFlagManager {
     private triggerBackgroundRefresh;
 }
 
+/** Minimal Kontext interface needed by the monitor */
+interface KontextForMonitor {
+    verify(input: VerifyInput): Promise<VerifyResult>;
+}
+/**
+ * Watches monitored wallets on-chain for stablecoin Transfer events.
+ * Uses viem's watchEvent with HTTP polling (works with any RPC endpoint).
+ */
+declare class WalletMonitor {
+    private readonly kontext;
+    private readonly config;
+    private readonly agentId;
+    private readonly tokens;
+    private readonly unwatchers;
+    private running;
+    /** Shared dedup set — tracks recently verified txHashes (populated by both layers) */
+    readonly verifiedTxHashes: Set<string>;
+    private cleanupTimer;
+    private readonly txTimestamps;
+    constructor(kontext: KontextForMonitor, config: WalletMonitoringConfig, options?: {
+        agentId?: string;
+        tokens?: Token[];
+    });
+    /**
+     * Mark a txHash as already verified (called by the viem interceptor layer).
+     * The monitor will skip this tx if it later sees it on-chain.
+     */
+    markVerified(txHash: string): void;
+    /**
+     * Start watching all configured chains for stablecoin transfers.
+     * Dynamically imports viem — requires viem as a peer dependency.
+     */
+    start(): Promise<void>;
+    /** Stop all watchers and cleanup */
+    stop(): void;
+    isRunning(): boolean;
+    private handleTransferLog;
+}
+
 /** Entity type for an agent identity */
 type EntityType = 'individual' | 'organization' | 'bot' | 'unknown';
 /** KYC verification status */
@@ -2337,6 +2403,7 @@ declare class Kontext {
     private readonly trustScorer;
     private readonly anomalyDetector;
     private readonly screeningAggregator;
+    private walletMonitor;
     private provenanceManager;
     private identityRegistry;
     private walletClusterer;
@@ -2373,7 +2440,7 @@ declare class Kontext {
      * });
      * ```
      */
-    static init(config: KontextConfig): Kontext;
+    static init(config?: KontextConfig): Kontext;
     /**
      * Get the current operating mode.
      */
@@ -2863,7 +2930,12 @@ declare class Kontext {
      */
     getFeatureFlagManager(): FeatureFlagManager | null;
     /**
-     * Gracefully shut down the SDK, flushing any pending data.
+     * Get the wallet monitor instance (or null if not configured).
+     * Used by the viem interceptor for dedup registration.
+     */
+    getWalletMonitor(): WalletMonitor | null;
+    /**
+     * Gracefully shut down the SDK, flushing any pending data and stopping watchers.
      */
     destroy(): Promise<void>;
 }
@@ -3854,4 +3926,112 @@ declare class ScreeningAggregator {
     private buildResult;
 }
 
-export { type ActionLog, type AgentCard, type AgentData, type AgentIdentity, AgentIdentityRegistry, type AgentLink, type AgentSession, type AggregatedScreeningResult, type AnchorResult, type AnchorVerification, type AnomalyCallback, type AnomalyDetectionConfig, AnomalyDetector, type AnomalyEvent, type AnomalyRuleType, type AnomalySeverity, type AnomalyThresholds, type AttestationDecision, type AttestationPayload, type AttestationRequest, type AttestationResponse, type AttestationSignature, type BehavioralEmbedding, BehavioralFingerprinter, CURRENCY_REQUIRED_LISTS, type Chain, ChainalysisFreeAPIProvider, ChainalysisOracleProvider, type CheckpointStatus, type ClusteringEvidence, type ClusteringHeuristic, type ComplianceCertificate, type ComplianceCheckResult, type ComplianceReport, type ConfirmTaskInput, type ConsensusStrategy, ConsoleExporter, type CounterpartyAttestation, type CounterpartyConfig, type CreateCheckpointInput, type CreateSessionInput, type CreateTaskInput, CrossSessionLinker, type CrossSessionLinkerConfig, type DateRange, DigestChain, type DigestLink, type DigestVerification, type ERC8021Attribution, type ERC8021Config, type EntityStatus, type EntityType, type Environment, type EventExporter, type ExportFormat, type ExportOptions, type ExportResult, type ExporterResult, type FeatureFlag, type FeatureFlagConfig, FeatureFlagManager, FileStorage, type FinancialFeatures, type FlagPlanTargeting, type FlagScope, type FlagTargeting, type GatedFeature, type GenerateComplianceCertificateInput, type HumanAttestation, JsonFileExporter, type Jurisdiction, KONTEXT_BUILDER_CODE, type KYAConfidenceLevel, type KYAConfidenceScore, KYAConfidenceScorer, type KYAConfidenceScorerConfig, type KYAEnvelope, type KYAScoreComponent, type KYCProviderReference, type KYCStatus, Kontext, type KontextConfig, KontextError, KontextErrorCode, type KontextMode, type LimitEvent, type LinkSignal, type LinkStatus, type LogActionInput, type LogLevel, type LogReasoningInput, type LogTransactionInput, type MatchType, MemoryStorage, type MetadataValidator, type NetworkFeatures, NoopExporter, OFACAddressProvider, OFACEntityProvider, type OnChainAnchorConfig, OnChainExporter, OpenSanctionsLocalProvider, OpenSanctionsProvider, type OperationalFeatures, PLAN_LIMITS, PaymentCompliance, type PlanConfig, PlanManager, type PlanTier, type PlanUsage, type PolicyConfig, type PrecisionTimestamp, type ProvenanceAction, type ProvenanceAttestor, type ProvenanceBundle, type ProvenanceBundleVerification, type ProvenanceCheckpoint, ProvenanceManager, type QueryType, type ReasoningEntry, type RegisterIdentityInput, type ReportOptions, type ReportType, type RiskFactor, type SanctionsCheckResult, type SanctionsList, ScreeningAggregator, type ScreeningAggregatorConfig, type ScreeningConfig, type ScreeningContext, type ScreeningMatch, type ScreeningProvider, type ScreeningResult, type SessionConstraints, type SessionStatus, type StorageAdapter, TOKEN_REQUIRED_LISTS, type Task, type TaskEvidence, type TaskStatus, type TemporalFeatures, type Token, type TransactionEvaluation, type TransactionRecord, type TrustFactor, type TrustScore, TrustScorer, UKOFSIProvider, type UpdateIdentityInput, UsdcCompliance, type UsdcComplianceCheck, type VerificationKey, type VerifyInput, type VerifyResult, type WalletCluster, WalletClusterer, type WalletClusteringConfig, type WalletMapping, anchorDigest, encodeERC8021Suffix, exchangeAttestation, fetchAgentCard, fetchTransactionAttribution, getAnchor, getRequiredLists, isBlockchainAddress, isCryptoTransaction, isFeatureAvailable, parseERC8021Suffix, providerSupportsQuery, requirePlan, verifyAnchor, verifyExportedChain };
+/** Minimal WalletClient shape — avoids hard type dependency on viem */
+interface WalletClientLike {
+    sendTransaction: (args: any) => Promise<`0x${string}`>;
+    writeContract?: (args: any) => Promise<`0x${string}`>;
+    chain?: {
+        id: number;
+        name?: string;
+    };
+    account?: {
+        address: `0x${string}`;
+    };
+    extend: <T>(fn: (client: any) => T) => any;
+}
+/** Minimal Kontext interface needed by the interceptor */
+interface KontextForInterceptor {
+    verify(input: VerifyInput): Promise<VerifyResult>;
+    getConfig(): {
+        agentId?: string;
+        interceptorMode?: string;
+        policy?: {
+            allowedTokens?: Token[];
+        };
+    };
+    getWalletMonitor?(): WalletMonitor | null;
+}
+/** Options for the viem auto-instrumentation decorator */
+interface ViemInstrumentationOptions {
+    /** Agent ID to attribute transactions to */
+    agentId?: string;
+    /** Session ID for grouping transactions */
+    sessionId?: string;
+    /** Tokens to instrument (default: all known) */
+    tokens?: Token[];
+    /** Chains to instrument (default: all known) */
+    chains?: Chain[];
+    /** Compliance mode (default: reads from config, falls back to 'post-send') */
+    mode?: 'post-send' | 'pre-send' | 'both';
+    /** Called after verify() succeeds */
+    onVerify?: (result: VerifyResult, txHash: string) => void | Promise<void>;
+    /** Called when verify() fails */
+    onError?: (error: Error, txHash: string) => void | Promise<void>;
+    /** Additional metadata for every verify() call */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Thrown in pre-send mode when compliance screening fails.
+ */
+declare class ViemComplianceError extends Error {
+    readonly result: VerifyResult;
+    readonly from: string;
+    readonly to: string;
+    readonly amount: string;
+    constructor(message: string, result: VerifyResult, details: {
+        from: string;
+        to: string;
+        amount: string;
+    });
+}
+/**
+ * Wraps a viem WalletClient with Kontext auto-instrumentation.
+ * Every stablecoin transfer is automatically compliance-checked via verify().
+ *
+ * Reads defaults from kontext.getConfig() — options override config values.
+ */
+declare function withKontextCompliance<TClient extends WalletClientLike>(client: TClient, kontext: KontextForInterceptor, options?: Partial<ViemInstrumentationOptions>): TClient;
+
+interface StablecoinContractInfo {
+    token: Token;
+    chain: Chain;
+    decimals: number;
+}
+/**
+ * Known stablecoin contract addresses indexed by lowercased address.
+ * Used for O(1) detection of whether a transaction targets a stablecoin.
+ */
+declare const STABLECOIN_CONTRACTS: Record<string, StablecoinContractInfo>;
+/**
+ * Maps viem chain IDs to Kontext Chain strings.
+ */
+declare const CHAIN_ID_MAP: Record<number, Chain>;
+
+/** Shape of the kontext.config.json file */
+interface KontextConfigFile {
+    $schema?: string;
+    projectId: string;
+    agentId?: string;
+    environment?: Environment;
+    wallets?: string[];
+    tokens?: Token[];
+    chains?: Chain[];
+    rpcEndpoints?: Partial<Record<Chain, string>>;
+    mode?: 'post-send' | 'pre-send' | 'both';
+    corridors?: {
+        from?: string;
+        to?: string;
+    };
+    thresholds?: {
+        alertAmount?: string;
+        ctrAmount?: string;
+    };
+    apiKey?: string;
+}
+/**
+ * Discover and load kontext.config.json by walking up from startDir.
+ * Returns the parsed config file contents, or null if not found.
+ */
+declare function loadConfigFile(startDir?: string): KontextConfigFile | null;
+
+export { type ActionLog, type AgentCard, type AgentData, type AgentIdentity, AgentIdentityRegistry, type AgentLink, type AgentSession, type AggregatedScreeningResult, type AnchorResult, type AnchorVerification, type AnomalyCallback, type AnomalyDetectionConfig, AnomalyDetector, type AnomalyEvent, type AnomalyRuleType, type AnomalySeverity, type AnomalyThresholds, type AttestationDecision, type AttestationPayload, type AttestationRequest, type AttestationResponse, type AttestationSignature, type BehavioralEmbedding, BehavioralFingerprinter, CHAIN_ID_MAP, CURRENCY_REQUIRED_LISTS, type Chain, ChainalysisFreeAPIProvider, ChainalysisOracleProvider, type CheckpointStatus, type ClusteringEvidence, type ClusteringHeuristic, type ComplianceCertificate, type ComplianceCheckResult, type ComplianceReport, type ConfirmTaskInput, type ConsensusStrategy, ConsoleExporter, type CounterpartyAttestation, type CounterpartyConfig, type CreateCheckpointInput, type CreateSessionInput, type CreateTaskInput, CrossSessionLinker, type CrossSessionLinkerConfig, type DateRange, DigestChain, type DigestLink, type DigestVerification, type ERC8021Attribution, type ERC8021Config, type EntityStatus, type EntityType, type Environment, type EventExporter, type ExportFormat, type ExportOptions, type ExportResult, type ExporterResult, type FeatureFlag, type FeatureFlagConfig, FeatureFlagManager, FileStorage, type FinancialFeatures, type FlagPlanTargeting, type FlagScope, type FlagTargeting, type GatedFeature, type GenerateComplianceCertificateInput, type HumanAttestation, JsonFileExporter, type Jurisdiction, KONTEXT_BUILDER_CODE, type KYAConfidenceLevel, type KYAConfidenceScore, KYAConfidenceScorer, type KYAConfidenceScorerConfig, type KYAEnvelope, type KYAScoreComponent, type KYCProviderReference, type KYCStatus, Kontext, type KontextConfig, KontextError, KontextErrorCode, type KontextMode, type LimitEvent, type LinkSignal, type LinkStatus, type LogActionInput, type LogLevel, type LogReasoningInput, type LogTransactionInput, type MatchType, MemoryStorage, type MetadataValidator, type NetworkFeatures, NoopExporter, OFACAddressProvider, OFACEntityProvider, type OnChainAnchorConfig, OnChainExporter, OpenSanctionsLocalProvider, OpenSanctionsProvider, type OperationalFeatures, PLAN_LIMITS, PaymentCompliance, type PlanConfig, PlanManager, type PlanTier, type PlanUsage, type PolicyConfig, type PrecisionTimestamp, type ProvenanceAction, type ProvenanceAttestor, type ProvenanceBundle, type ProvenanceBundleVerification, type ProvenanceCheckpoint, ProvenanceManager, type QueryType, type ReasoningEntry, type RegisterIdentityInput, type ReportOptions, type ReportType, type RiskFactor, STABLECOIN_CONTRACTS, type SanctionsCheckResult, type SanctionsList, ScreeningAggregator, type ScreeningAggregatorConfig, type ScreeningConfig, type ScreeningContext, type ScreeningMatch, type ScreeningProvider, type ScreeningResult, type SessionConstraints, type SessionStatus, type StorageAdapter, TOKEN_REQUIRED_LISTS, type Task, type TaskEvidence, type TaskStatus, type TemporalFeatures, type Token, type TransactionEvaluation, type TransactionRecord, type TrustFactor, type TrustScore, TrustScorer, UKOFSIProvider, type UpdateIdentityInput, UsdcCompliance, type UsdcComplianceCheck, type VerificationKey, type VerifyInput, type VerifyResult, ViemComplianceError, type ViemInstrumentationOptions, type WalletClientLike, type WalletCluster, WalletClusterer, type WalletClusteringConfig, type WalletMapping, WalletMonitor, type WalletMonitoringConfig, anchorDigest, encodeERC8021Suffix, exchangeAttestation, fetchAgentCard, fetchTransactionAttribution, getAnchor, getRequiredLists, isBlockchainAddress, isCryptoTransaction, isFeatureAvailable, loadConfigFile, parseERC8021Suffix, providerSupportsQuery, requirePlan, verifyAnchor, verifyExportedChain, withKontextCompliance };