otto-execute 0.1.1 → 0.1.2

package/README.md

@@ -2,7 +2,7 @@
 
 The user's side of Otto's execution seam. [Otto Intel MCP](https://www.npmjs.com/package/otto-intel-mcp) builds a swap as an unsigned, digest-committed **envelope** for an address you supply; `otto-execute` checks that envelope against **your own intent**, then signs and submits it with **your** key (or under a delegation you minted). CLI and library, one install.
 
-- npm: `npm install otto-execute` — 18 packages (`@x402/core`, `@x402/evm`, `viem`, `zod`).
+- npm: `npm install otto-execute` — 19 packages including itself (`@x402/core`, `@x402/evm`, `viem`, `zod`), 0 `npm audit` findings.
 - Docs: https://docs.useotto.xyz/acp-swarm/execution-seam
 - Requires Node 22 or newer.
 
@@ -25,7 +25,7 @@ The user's side of Otto's execution seam. [Otto Intel MCP](https://www.npmjs.com
 }
 ```
 
-Any MCP client works (connection snippets: the [otto-intel-mcp README](https://www.npmjs.com/package/otto-intel-mcp)); the tool result is one text part containing JSON — save that JSON object (it starts with `schema_version`, `artifact_id`, …) as `envelope.json`. It is valid for 10 minutes. v1 builds Base (chain 8453) swaps.
+Any MCP client works (connection snippets: the [otto-intel-mcp README](https://www.npmjs.com/package/otto-intel-mcp)); the tool result is one text part containing JSON — save that JSON object (it starts with `schema_version`, `artifact_id`, …) as `envelope.json`. It is valid for **5 minutes** from construction (`valid_until`; the hosted server's window — the tool description states it), and `submit` re-checks freshness before each of its three signatures, so don't pace on the window: verify, then submit, or fetch a fresh envelope. v1 builds Base (chain 8453) swaps.
 
 **2. Write your intent** — what *you* meant, in atomic token units (USDC has 6 decimals: `1000000` = 1 USDC; WETH has 18: `200000000000000` = 0.0002 WETH). `minAmountOut` is your own floor from a price source you trust:
 
@@ -58,11 +58,14 @@ OTTO_EXECUTE_PRIVATE_KEY=0x… npx otto-execute submit --envelope envelope.json
       { "recipient": "0x0E84dDEdAaE6A779c462C22a59F301EC31B6b808", "amount": "1000" }
     ],
     "valid_until": "2026-09-02T09:00:49.613Z",
+    "seconds_remaining": 287,
     "artifact_id": "01M1GN9T3DH6470V0Y8968QXRX"
   }
 }
 ```
 
+`seconds_remaining` is the budget you have left to `submit` (the whole plan must clear before `valid_until`).
+
 A plan that does not hold is refused by name, exit code 2 — for example an envelope past its window:
 
 ```json
@@ -131,4 +134,4 @@ Working in the monorepo: `npm ci && npm run verify` (typecheck → build incl. v
 - Execution seam docs (the envelope field by field, the checks, delegation): https://docs.useotto.xyz/acp-swarm/execution-seam
 - Otto Intel MCP (the constructors + intelligence tools): https://www.npmjs.com/package/otto-intel-mcp · https://docs.useotto.xyz/acp-swarm/otto-intel-mcp
 - Otto AI: https://useotto.xyz · X: [@useOttoAI](https://x.com/useOttoAI)
-- Changelog: 0.1.1 — README rewritten for first-time users and agents (quick start, captured real output, file shapes); 0.1.0 — first release.
+- Changelog: 0.1.2 — `verify` prints `seconds_remaining` (the submit budget) and `secondsRemaining()` is exported; envelope window documented as 5 minutes; 0.1.1 — README rewritten for first-time users and agents (quick start, captured real output, file shapes); 0.1.0 — first release.

package/dist/cli.js

@@ -18,6 +18,7 @@ import { readFileSync } from 'node:fs';
 import { createInterface } from 'node:readline';
 import { getAddress } from 'viem';
 import { privateKeyToAccount } from 'viem/accounts';
+import { secondsRemaining } from './window.js';
 import { DEFAULT_OTTO_MCP_URL, DelegateRefusal, UNSUPPORTED_PATH_NOTE, assertFencePresent, initEndUserSdk, isDelegateRefusal, mintDelegation, readDelegationAsUser, readPublicFenceStatus, redactSecrets, resolveDelegateEndpoints, revokeDelegationAsUser, signInWithEmailOtp, } from './delegate.js';
 import { EoaSigner } from './eoa-signer.js';
 import { isAdapterRefusal } from './refusal.js';
@@ -381,6 +382,8 @@ async function main() {
         min_amount_out: verified.minAmountOut,
         fee_distributions: verified.fees.distributions,
         valid_until: verified.artifact.valid_until,
+        // The budget left to submit the WHOLE plan (freshness is re-checked before every signature).
+        seconds_remaining: secondsRemaining(verified.artifact.valid_until),
         artifact_id: verified.artifact.artifact_id,
     };
     if (command === 'verify') {

package/dist/index.d.ts

@@ -14,3 +14,4 @@ export { waitForSealedReceipt, type SealedClient, type SealedWaitOptions } from
 export { EOA_CAPABILITIES, EoaSigner, PlanHaltedError, type DryRunSignedStep, type SentStep, type SignedX402Payment, } from './eoa-signer.js';
 export { BASE_USDC, OTTO_X402_PAY_TO, X402_REFUSAL_CODES, X402_TABLE, X402_TABLE_VERSION, X402Refusal, canonicalResourceUrl, requirementMatchesRow, validateX402Challenge, type PaymentRequirementLike, type ValidatedX402Challenge, type X402ExpectedRow, type X402RefusalCode, type X402Table, } from './x402-table.js';
 export { FOREIGN_ADDRESS, FOREIGN_TOKEN, MUTATION_CASES, applyMutation, recommit, recommitCommitmentOnly, recommitPayloadOnly, type CatchingLayer, type MutationCase, type MutationContext, } from './mutations.js';
+export { secondsRemaining } from './window.js';

package/dist/index.js

@@ -16,4 +16,5 @@ export { EOA_CAPABILITIES, EoaSigner, PlanHaltedError, } from './eoa-signer.js';
 // optional `@coinbase/cdp-sdk` peer (loaded lazily); this root never references the SDK at all.
 export { BASE_USDC, OTTO_X402_PAY_TO, X402_REFUSAL_CODES, X402_TABLE, X402_TABLE_VERSION, X402Refusal, canonicalResourceUrl, requirementMatchesRow, validateX402Challenge, } from './x402-table.js';
 export { FOREIGN_ADDRESS, FOREIGN_TOKEN, MUTATION_CASES, applyMutation, recommit, recommitCommitmentOnly, recommitPayloadOnly, } from './mutations.js';
+export { secondsRemaining } from './window.js';
 //# sourceMappingURL=index.js.map

package/dist/window.d.ts

@@ -0,0 +1,10 @@
+/**
+ * window.ts — the freshness budget a caller has left on an envelope. The constructor stamps
+ * `valid_until` (5 minutes from construction on the hosted server by default; the tool description
+ * states the exact window) and the verifier and both signers refuse a stale envelope before every
+ * signature — so the WHOLE plan (allowance reset → approval → swap, each waited to a sealed block)
+ * must clear before `valid_until`. `verify` prints this so a user sees the budget instead of
+ * discovering it as STALE_ARTIFACT mid-plan.
+ */
+/** Whole seconds until `validUntil` (an ISO-8601 instant), never negative; `NaN` in → 0. */
+export declare function secondsRemaining(validUntil: string, nowMs?: number): number;

package/dist/window.js

@@ -0,0 +1,16 @@
+/**
+ * window.ts — the freshness budget a caller has left on an envelope. The constructor stamps
+ * `valid_until` (5 minutes from construction on the hosted server by default; the tool description
+ * states the exact window) and the verifier and both signers refuse a stale envelope before every
+ * signature — so the WHOLE plan (allowance reset → approval → swap, each waited to a sealed block)
+ * must clear before `valid_until`. `verify` prints this so a user sees the budget instead of
+ * discovering it as STALE_ARTIFACT mid-plan.
+ */
+/** Whole seconds until `validUntil` (an ISO-8601 instant), never negative; `NaN` in → 0. */
+export function secondsRemaining(validUntil, nowMs = Date.now()) {
+    const until = Date.parse(validUntil);
+    if (!Number.isFinite(until))
+        return 0;
+    return Math.max(0, Math.floor((until - nowMs) / 1000));
+}
+//# sourceMappingURL=window.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "otto-execute",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "The user's side of Otto Model B: verify a prepare-only execution artifact from the Otto Intel MCP against your own intent and the ruled attribution, then sign and submit it with your own key (or under a delegation you minted). Otto never holds your keys or funds.",
   "license": "MIT",
   "homepage": "https://docs.useotto.xyz",