otto-intel-mcp 0.1.0

package/dist/adapter/verify.js

@@ -0,0 +1,432 @@
+/**
+ * verify.ts — the adapter core: what the user's signer checks BEFORE it signs anything.
+ *
+ * Model B (docs/0808_model_b_scope_and_verdict.md, spec docs/0816_step1_execution_mcp_spec_draft.md):
+ * Otto constructs; the user's own custody signs and submits; Otto's fee is attribution baked into
+ * the constructed payload. The constructor is prepare-only and asserts what it built. This module is
+ * the OTHER half of spec §8 — "the consuming adapter re-checks digest + expected signer before
+ * signing" — extended to a full adapter-side policy, because an artifact's own digests prove
+ * integrity relative to the artifact's own claims and nothing more: an inconsistent artifact with
+ * correctly recomputed digests is still inconsistent. The checks run in three layers:
+ *
+ *   1. INTEGRITY — the constructor's own assertions, unchanged (schema, payload digest, whole-envelope
+ *      commitment + freshness, account binding).
+ *   2. INTENT    — the artifact is the trade the USER asked for: the approved token and amount ARE the
+ *      intent's, the deposit legs pull exactly that amount, the output token IS the intent's, and the
+ *      on-chain minimum output is at least the caller's own floor (> 0). The caller owns the floor;
+ *      it never comes from the artifact. This is the fence for the swap legs themselves: LI.FI's
+ *      GenericSwapV3 reverts unless `_receiver` gets at least `_minAmount` of the output token, so an
+ *      internal DEX leg is bounded on-chain by the receiver + minimum-output binds rather than by an
+ *      allowlist of every DEX contract (which this adapter deliberately does not attempt to hold).
+ *   3. POLICY    — capability contract, chain, plan shape, approvals only to the reviewed spender
+ *      that IS the call target, `_receiver` == this account, and the fee leg decoded with the
+ *      adapter's own decoder and matched against the RULED attribution constants (10 bps to Otto's
+ *      recipient, only the reviewed FeeForwarder deployments, nothing to strangers, aggregate under
+ *      the cap).
+ *
+ * P0 LIVENESS binds here exactly as it binds the constructor (spec §7.0): a valid artifact for the
+ * stated intent MUST pass. The test suite's first test is that property; the mutation matrix proves
+ * every refusal reddens. Every check that passes is recorded by id so the sitting's evidence shows
+ * what was verified, not just that "verification passed".
+ */
+import { decodeFunctionData, getAddress, parseAbi } from 'viem';
+import { DEFAULT_LIFI_AGGREGATE_FEE_CAP_RATE, DEFAULT_LIFI_FEE_BPS, DEFAULT_LIFI_FEE_CONFIG_VERSION, DEFAULT_LIFI_PLATFORM_FEE_RECIPIENT, DEFAULT_OTTO_LIFI_FEE_RECIPIENT, EXECUTION_ARTIFACT_SCHEMA, ExecutionRefusal, LIFI_DIAMOND_ADDRESS, LIFI_INTEGRATOR, assertArtifactAccountBinding, assertArtifactFresh, assertArtifactPayloadDigest, reviewedLiFiFeeForwarders, swapIntentDigestInput, executionDigest, } from '../execution-index.js';
+import { COLLECT_TOKEN_FEES_SELECTOR, decodeCollectTokenFees, decodeGenericSwap, } from './lifi-decode.js';
+import { isAdapterRefusalCode, refuse } from './refusal.js';
+const ERC20_APPROVE_ABI = parseAbi([
+    'function approve(address spender, uint256 amount) returns (bool)',
+]);
+function bpsOfRate(rate) {
+    // '0.0025' → 25 bps. Exact decimal arithmetic on the ruled constant; no floats.
+    const match = /^0\.(\d{1,4})$/.exec(rate);
+    if (!match)
+        throw new Error(`aggregate fee cap rate ${rate} is not a 4-decimal fraction`);
+    return BigInt(match[1].padEnd(4, '0'));
+}
+/** The reviewed v1 policy for a same-chain LI.FI swap on `chainId`. */
+export function defaultAdapterPolicy(chainId) {
+    const forwarders = reviewedLiFiFeeForwarders(chainId);
+    if (!forwarders || forwarders.length === 0)
+        throw new Error(`chain ${chainId} has no reviewed LI.FI FeeForwarder`);
+    return Object.freeze({
+        allowedCallTargets: Object.freeze([LIFI_DIAMOND_ADDRESS]),
+        allowedApproveSpenders: Object.freeze([LIFI_DIAMOND_ADDRESS]),
+        attribution: Object.freeze({
+            configVersion: DEFAULT_LIFI_FEE_CONFIG_VERSION,
+            feeBps: BigInt(DEFAULT_LIFI_FEE_BPS),
+            integrator: LIFI_INTEGRATOR,
+            ottoRecipient: DEFAULT_OTTO_LIFI_FEE_RECIPIENT,
+            otherAllowedRecipients: Object.freeze([DEFAULT_LIFI_PLATFORM_FEE_RECIPIENT]),
+            forwarders,
+            aggregateCapBps: bpsOfRate(DEFAULT_LIFI_AGGREGATE_FEE_CAP_RATE),
+        }),
+    });
+}
+/** Run one of the constructor's own assertions; surface its refusal code unchanged. */
+function integrity(fn) {
+    try {
+        return fn();
+    }
+    catch (error) {
+        if (error instanceof ExecutionRefusal && isAdapterRefusalCode(error.code)) {
+            refuse(error.code, error.message);
+        }
+        throw error;
+    }
+}
+function includesAddress(list, candidate) {
+    const target = getAddress(candidate);
+    return list.some((entry) => getAddress(entry) === target);
+}
+export function verifySwapEnvelope(raw, expected) {
+    const checks = [];
+    const pass = (id) => {
+        checks.push(Object.freeze({ id, result: 'passed' }));
+    };
+    const account = getAddress(expected.profile.address);
+    const policy = expected.policy;
+    const intent = Object.freeze({
+        fromToken: getAddress(expected.intent.fromToken),
+        toToken: getAddress(expected.intent.toToken),
+        fromAmount: expected.intent.fromAmount,
+        minAmountOut: expected.intent.minAmountOut,
+    });
+    if (intent.fromAmount <= 0n)
+        refuse('INTENT_MISMATCH', 'intent input amount must be positive');
+    if (intent.minAmountOut <= 0n) {
+        refuse('MIN_OUTPUT_TOO_LOW', 'the caller must supply a positive minimum output; a zero floor lets a swap deliver nothing');
+    }
+    if (intent.fromToken === intent.toToken)
+        refuse('INTENT_MISMATCH', 'intent input and output tokens are the same');
+    // 1. Schema — the constructor's own output contract, parsed strictly.
+    const parsed = EXECUTION_ARTIFACT_SCHEMA.safeParse(raw);
+    if (!parsed.success) {
+        refuse('SCHEMA_INVALID', `artifact does not satisfy the execution envelope schema: ${parsed.error.issues[0]?.message ?? 'unknown issue'}`);
+    }
+    if (parsed.data.rail !== 'lifi' || parsed.data.operation !== 'swap') {
+        refuse('UNSUPPORTED_OPERATION', `this adapter signs lifi/swap artifacts only, got ${parsed.data.rail}/${parsed.data.operation}`);
+    }
+    // A fresh tree: the verified plan is deep-frozen below, and that must never reach the caller's object.
+    const artifact = structuredClone(parsed.data);
+    pass('schema');
+    if (expected.prepareInput !== undefined) {
+        let normalized;
+        try {
+            normalized = swapIntentDigestInput(expected.prepareInput);
+        }
+        catch (error) {
+            refuse('INTENT_MISMATCH', `prepareInput is not a valid otto_prepare_swap request: ${error instanceof Error ? error.message.slice(0, 120) : String(error)}`);
+        }
+        const expectedDigest = executionDigest(normalized);
+        if (artifact.intent_digest !== expectedDigest) {
+            refuse('INTENT_MISMATCH', 'artifact intent_digest does not match the request the caller sent');
+        }
+        pass('intent_digest');
+    }
+    // 2–3. Payload digest, whole-envelope commitment, freshness — constructor assertions, unchanged.
+    integrity(() => assertArtifactPayloadDigest(artifact));
+    pass('payload_digest');
+    integrity(() => assertArtifactFresh(artifact, expected.nowMs ?? Date.now()));
+    pass('commitment');
+    pass('freshness');
+    // 4. Account binding: the artifact was built for THIS account, in every protocol role.
+    integrity(() => assertArtifactAccountBinding(artifact, expected.profile));
+    const roles = artifact.account_binding.protocol_roles.lifi;
+    if (getAddress(roles.sender) !== account || getAddress(roles.receiver) !== account) {
+        refuse('ACCOUNT_BINDING_MISMATCH', 'lifi sender/receiver role is not the signing account');
+    }
+    pass('account_binding');
+    // 5. Capability contract (spec §9): a missing capability refuses the WHOLE plan.
+    const missing = artifact.required_capabilities.filter((capability) => !expected.capabilities.includes(capability));
+    if (missing.length > 0) {
+        refuse('CAPABILITY_MISSING', `artifact requires ${missing.join(', ')}; this signer provides ${expected.capabilities.join(', ')}`);
+    }
+    pass('capabilities');
+    // 6. Chain: payload, submission and profile agree.
+    if (artifact.payload.chain_id !== expected.profile.chainId ||
+        artifact.submission.chain_id !== expected.profile.chainId) {
+        refuse('CHAIN_MISMATCH', 'artifact chain does not match the signing account chain');
+    }
+    pass('chain');
+    // 7. Plan shape: exactly approve_reset → approve → call; every step's native value parses to zero
+    //    (the signer's own contract: it signs `value` verbatim, and an ERC20 swap moves no ETH).
+    const rawSteps = artifact.payload.steps;
+    if (rawSteps.length !== 3 ||
+        rawSteps[0]?.kind !== 'approve_reset' ||
+        rawSteps[1]?.kind !== 'approve' ||
+        rawSteps[2]?.kind !== 'call') {
+        refuse('PLAN_SHAPE_INVALID', 'swap plan must be exactly approve_reset, approve, call');
+    }
+    const steps = rawSteps.map((step) => {
+        if (!/^\d+$/.test(step.value) || BigInt(step.value) !== 0n) {
+            refuse('PLAN_SHAPE_INVALID', `step ${step.kind} must carry zero native value, got ${step.value}`);
+        }
+        return Object.freeze({ kind: step.kind, to: getAddress(step.to), value: 0n, data: step.data });
+    });
+    const [reset, approve, call] = steps;
+    pass('plan_shape');
+    // 8. Approvals: the INTENT's token, reset-to-zero then EXACTLY the intent amount, one reviewed
+    //    spender that IS the call target (which must itself be a reviewed target).
+    const token = reset.to;
+    if (token !== intent.fromToken)
+        refuse('INTENT_MISMATCH', `plan approves ${token}, intent input token is ${intent.fromToken}`);
+    if (approve.to !== token)
+        refuse('APPROVAL_INVALID', 'approve_reset and approve target different tokens');
+    const decodeApprove = (data) => {
+        try {
+            const decoded = decodeFunctionData({ abi: ERC20_APPROVE_ABI, data });
+            return { spender: getAddress(decoded.args[0]), amount: decoded.args[1] };
+        }
+        catch {
+            return refuse('APPROVAL_INVALID', 'approval step is not ERC20 approve(spender, amount)');
+        }
+    };
+    const decodedReset = decodeApprove(reset.data);
+    const decodedApprove = decodeApprove(approve.data);
+    if (decodedReset.amount !== 0n)
+        refuse('APPROVAL_INVALID', 'approve_reset must approve zero');
+    if (decodedApprove.amount !== intent.fromAmount) {
+        refuse('INTENT_MISMATCH', `plan approves ${decodedApprove.amount}, intent amount is ${intent.fromAmount}`);
+    }
+    if (decodedReset.spender !== decodedApprove.spender) {
+        refuse('APPROVAL_INVALID', 'approve_reset and approve name different spenders');
+    }
+    const spender = decodedApprove.spender;
+    if (spender !== call.to)
+        refuse('APPROVAL_INVALID', 'approval spender is not the call target');
+    if (!includesAddress(policy.allowedApproveSpenders, spender) || !includesAddress(policy.allowedCallTargets, call.to)) {
+        refuse('TARGET_NOT_ALLOWED', `${spender} is not a reviewed spender/target`);
+    }
+    const gross = decodedApprove.amount;
+    pass('approvals');
+    // 9. Swap calldata, decoded with the adapter's own decoder: the deposit legs pull EXACTLY the
+    //    intent amount of the intent token, the last leg delivers the intent's output token, and the
+    //    output lands in THIS account.
+    const swap = decodeGenericSwap(call.data);
+    if (swap.integrator !== policy.attribution.integrator) {
+        refuse('ATTRIBUTION_MISSING', `swap integrator is '${swap.integrator}', expected '${policy.attribution.integrator}'`);
+    }
+    if (swap.receiver !== account) {
+        refuse('RECEIVER_MISMATCH', `swap output would land at ${swap.receiver}, not the signing account`);
+    }
+    let deposited = 0n;
+    for (const leg of swap.legs) {
+        if (!leg.requiresDeposit)
+            continue;
+        if (leg.sendingAssetId !== token) {
+            refuse('SWAP_CALLDATA_INVALID', `deposit leg pulls ${leg.sendingAssetId}, not the intent token ${token}`);
+        }
+        deposited += leg.fromAmount;
+    }
+    if (deposited !== gross) {
+        refuse('SWAP_CALLDATA_INVALID', `deposit legs pull ${deposited} in total; the plan approves and the intent names ${gross}`);
+    }
+    const lastLeg = swap.legs[swap.legs.length - 1];
+    if (lastLeg.receivingAssetId !== intent.toToken) {
+        refuse('INTENT_MISMATCH', `swap delivers ${lastLeg.receivingAssetId}, intent output token is ${intent.toToken}`);
+    }
+    pass('swap_decode');
+    // 10. Minimum output: the on-chain floor the router enforces must be at least the caller's own.
+    if (swap.minAmount < intent.minAmountOut) {
+        refuse('MIN_OUTPUT_TOO_LOW', `swap minimum output ${swap.minAmount} is below the caller's floor ${intent.minAmountOut}`);
+    }
+    pass('min_output');
+    // 11. Attribution: the RULED mechanism + version, and the fee leg pays exactly the ruled amount to Otto.
+    if (artifact.fee_attribution.mechanism !== 'lifi_integrator_fee' ||
+        artifact.fee_attribution.config_version !== policy.attribution.configVersion) {
+        refuse('ATTRIBUTION_MISMATCH', `fee attribution is ${artifact.fee_attribution.mechanism}@${artifact.fee_attribution.config_version}, expected lifi_integrator_fee@${policy.attribution.configVersion}`);
+    }
+    const reviewedForwarders = policy.attribution.forwarders.map((entry) => getAddress(entry));
+    const isReviewed = (address) => reviewedForwarders.includes(getAddress(address));
+    const collectorLegs = swap.legs.filter((leg) => isReviewed(leg.callTo) || leg.callData.slice(0, 10).toLowerCase() === COLLECT_TOKEN_FEES_SELECTOR);
+    if (collectorLegs.length !== 1) {
+        refuse('ATTRIBUTION_MISSING', `expected exactly one fee-forwarding leg, found ${collectorLegs.length}`);
+    }
+    const feeLeg = collectorLegs[0];
+    // The drift alarm, user-side: an unreviewed collector is refused BY ADDRESS.
+    if (!isReviewed(feeLeg.callTo) || !isReviewed(feeLeg.approveTo) || feeLeg.callTo !== feeLeg.approveTo) {
+        refuse('ATTRIBUTION_MISSING', `fee leg calls ${feeLeg.callTo} (approveTo ${feeLeg.approveTo}), not a reviewed FeeForwarder deployment (reviewed: ${reviewedForwarders.join(', ')})`);
+    }
+    if (feeLeg.sendingAssetId !== token || feeLeg.receivingAssetId !== token) {
+        refuse('ATTRIBUTION_MISMATCH', 'fee leg is denominated in a different token');
+    }
+    const fees = decodeCollectTokenFees(feeLeg.callData);
+    if (fees.token !== token)
+        refuse('ATTRIBUTION_MISMATCH', 'fee calldata names a different token');
+    const expectedOttoFee = (gross * policy.attribution.feeBps) / 10000n;
+    const ottoRecipient = getAddress(policy.attribution.ottoRecipient);
+    const ottoDistributions = fees.distributions.filter((d) => d.recipient === ottoRecipient);
+    if (ottoDistributions.length !== 1) {
+        refuse('ATTRIBUTION_MISSING', `fee leg pays Otto's recipient ${ottoDistributions.length} times, expected exactly once`);
+    }
+    const ottoFee = ottoDistributions[0].amount;
+    if (ottoFee !== expectedOttoFee) {
+        refuse('ATTRIBUTION_MISMATCH', `Otto fee ${ottoFee} != ${expectedOttoFee} (${policy.attribution.feeBps} bps of ${gross})`);
+    }
+    let total = 0n;
+    for (const distribution of fees.distributions) {
+        total += distribution.amount;
+        if (distribution.recipient !== ottoRecipient &&
+            !includesAddress(policy.attribution.otherAllowedRecipients, distribution.recipient)) {
+            refuse('ATTRIBUTION_MISMATCH', `fee leg pays unrecognised recipient ${distribution.recipient}`);
+        }
+    }
+    if (total * 10000n > gross * policy.attribution.aggregateCapBps) {
+        refuse('FEE_CAP_EXCEEDED', `aggregate fees ${total} exceed ${policy.attribution.aggregateCapBps} bps of ${gross}`);
+    }
+    pass('fee_attribution');
+    // The verified plan is DEEP-FROZEN, the artifact's nested objects included: a post-verification
+    // edit anywhere in it throws (ESM is strict mode) instead of reaching a signer, signers refuse any
+    // plan that is not frozen exactly this way (`assertVerifiedPlanIntact`), and what a signer binds to
+    // is the verifier's own identity record of the plan, never a field re-read from the plan object.
+    return deepFreezeVerified({
+        artifact,
+        steps: Object.freeze(steps.map((step) => Object.freeze({ ...step }))),
+        intent,
+        token,
+        outputToken: lastLeg.receivingAssetId,
+        spender,
+        gross,
+        receiver: swap.receiver,
+        minAmountOut: swap.minAmount,
+        ottoFee,
+        fees: Object.freeze({ token: fees.token, distributions: Object.freeze(fees.distributions.map((d) => Object.freeze({ ...d }))) }),
+        checks: Object.freeze(checks.map((check) => Object.freeze({ ...check }))),
+    }, account, expected.profile.chainId);
+}
+/**
+ * PROVENANCE REGISTRY + IDENTITY RECORD: the only objects a signer will accept are the exact objects
+ * this module returned (identity, held in a WeakSet that copying, freezing or re-shaping cannot
+ * reproduce), and what a signer binds to is the verifier's OWN record of who the plan was verified
+ * for — captured at verification, held in a module-private WeakMap, never re-read from the plan. A
+ * foreign plan that passes every shape check is refused because it was never verified here; a plan
+ * whose nested artifact fields differ from its record (were the deep freeze ever bypassed) is refused
+ * because it no longer is what was verified.
+ */
+const VERIFIED_PLANS = new WeakSet();
+const PLAN_IDENTITY = new WeakMap();
+/** Recursively freeze a JSON-shaped value (plain objects and arrays); primitives and bigints pass through. */
+function deepFreeze(value) {
+    if (typeof value !== 'object' || value === null)
+        return value;
+    for (const key of Reflect.ownKeys(value)) {
+        deepFreeze(value[key]);
+    }
+    return Object.freeze(value);
+}
+/** True iff every object reachable from `value` is frozen. */
+export function isDeepFrozen(value) {
+    if (typeof value !== 'object' || value === null)
+        return true;
+    if (!Object.isFrozen(value))
+        return false;
+    return Reflect.ownKeys(value).every((key) => isDeepFrozen(value[key]));
+}
+function deepFreezeVerified(plan, account, chainId) {
+    const frozen = deepFreeze(plan);
+    const identity = Object.freeze({
+        address: account,
+        chainId,
+        capabilities: Object.freeze([...frozen.artifact.required_capabilities]),
+        validUntilMs: Date.parse(frozen.artifact.valid_until),
+        artifactId: frozen.artifact.artifact_id,
+        artifactDigest: frozen.artifact.submission.artifact_digest,
+        stepTargets: Object.freeze([frozen.steps[0].to, frozen.steps[1].to, frozen.steps[2].to]),
+    });
+    VERIFIED_PLANS.add(frozen);
+    PLAN_IDENTITY.set(frozen, identity);
+    return frozen;
+}
+/** True iff `plan` is an object `verifySwapEnvelope` itself returned (identity, not shape). */
+export function isVerifierOutput(plan) {
+    return typeof plan === 'object' && plan !== null && VERIFIED_PLANS.has(plan) && PLAN_IDENTITY.has(plan);
+}
+/** The verifier's own record of an intact verified plan (throws for anything else). */
+export function verifiedPlanIdentity(plan) {
+    assertVerifiedPlanIntact(plan);
+    return PLAN_IDENTITY.get(plan);
+}
+/**
+ * The FULL signer-side gate, called at signer entry and again immediately before every signature or
+ * submission: provenance + frozen shape (`assertVerifiedPlanIntact`), then — against the verifier's
+ * RECORD of the plan, not the plan's fields — the bound account IS this signer, the chain matches,
+ * every required capability is provided, and the plan is still fresh at `nowMs` (the record's
+ * deadline AND the artifact's own commitment-bound deadline). A plan verified for another account,
+ * another chain, or that has since expired is refused here even though it was genuinely verified.
+ */
+export function assertPlanSignableBy(plan, signer, nowMs = Date.now()) {
+    const identity = verifiedPlanIdentity(plan);
+    const signerAddress = getAddress(signer.address);
+    if (identity.address !== signerAddress) {
+        throw new Error(`refusing to sign: the plan is bound to ${identity.address}, this signer is ${signerAddress}`);
+    }
+    if (identity.chainId !== signer.chainId) {
+        throw new Error(`refusing to sign: the plan is for chain ${identity.chainId}, this signer is on ${signer.chainId}`);
+    }
+    const missing = identity.capabilities.filter((c) => !signer.capabilities.includes(c));
+    if (missing.length > 0)
+        throw new Error(`refusing to sign: the plan requires ${missing.join(', ')}`);
+    if (!(identity.validUntilMs > nowMs)) {
+        refuse('STALE_ARTIFACT', `execution artifact expired at ${plan.artifact.valid_until}`);
+    }
+    integrity(() => assertArtifactFresh(plan.artifact, nowMs));
+}
+/**
+ * Signer-side gate: a plan may be signed only if it IS the object `verifySwapEnvelope` returned
+ * (provenance, checked by identity), it is still the deep-frozen shape it was returned as — the
+ * artifact's nested objects included — and it still matches the verifier's own record of it. A thawed
+ * copy, a JSON round trip, a mutated clone, a fully frozen look-alike that imitates the shape, or a
+ * re-pointed artifact with a recomputed commitment are all refused, so the only way to sign
+ * different bytes is to verify different bytes.
+ */
+export function assertVerifiedPlanIntact(plan) {
+    if (!isVerifierOutput(plan)) {
+        throw new Error('refusing to sign: the plan is not an object verifySwapEnvelope returned (provenance check failed)');
+    }
+    const frozen = Object.isFrozen(plan) &&
+        isDeepFrozen(plan.artifact) &&
+        Object.isFrozen(plan.steps) &&
+        plan.steps.length === 3 &&
+        plan.steps.every((step) => Object.isFrozen(step) && step.value === 0n && /^0x[0-9a-fA-F]*$/.test(step.data)) &&
+        Object.isFrozen(plan.intent) &&
+        Object.isFrozen(plan.fees) &&
+        Object.isFrozen(plan.fees.distributions) &&
+        Object.isFrozen(plan.checks) &&
+        plan.checks.length >= VERIFY_CHECK_IDS.length &&
+        plan.checks.every((check) => check.result === 'passed') &&
+        VERIFY_CHECK_IDS.every((id) => plan.checks.some((check) => check.id === id)) &&
+        plan.steps[2].to === plan.spender &&
+        plan.gross === plan.intent.fromAmount;
+    if (!frozen) {
+        throw new Error('refusing to sign: the plan is not the intact frozen result of verifySwapEnvelope');
+    }
+    const identity = PLAN_IDENTITY.get(plan);
+    const matchesRecord = getAddress(plan.artifact.account_binding.address) === identity.address &&
+        plan.artifact.account_binding.chainId === identity.chainId &&
+        plan.artifact.payload.chain_id === identity.chainId &&
+        plan.artifact.artifact_id === identity.artifactId &&
+        plan.artifact.submission.artifact_digest === identity.artifactDigest &&
+        Date.parse(plan.artifact.valid_until) === identity.validUntilMs &&
+        plan.artifact.required_capabilities.length === identity.capabilities.length &&
+        identity.capabilities.every((c) => plan.artifact.required_capabilities.includes(c)) &&
+        plan.steps.every((step, i) => step.to === identity.stepTargets[i]);
+    if (!matchesRecord) {
+        throw new Error("refusing to sign: the plan no longer matches the verifier's own record of it");
+    }
+}
+/** The check ids `verifySwapEnvelope` records on a passing artifact, in order. Tests pin this list. */
+export const VERIFY_CHECK_IDS = Object.freeze([
+    'schema',
+    'payload_digest',
+    'commitment',
+    'freshness',
+    'account_binding',
+    'capabilities',
+    'chain',
+    'plan_shape',
+    'approvals',
+    'swap_decode',
+    'min_output',
+    'fee_attribution',
+]);
+//# sourceMappingURL=verify.js.map

package/dist/adapter/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/adapter/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,QAAQ,EAA0B,MAAM,MAAM,CAAC;AACxF,OAAO,EACL,mCAAmC,EACnC,oBAAoB,EACpB,+BAA+B,EAC/B,mCAAmC,EACnC,+BAA+B,EAC/B,yBAAyB,EACzB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,4BAA4B,EAC5B,mBAAmB,EACnB,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,EACrB,eAAe,GAGhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,2BAA2B,EAC3B,sBAAsB,EACtB,iBAAiB,GAElB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAqF5D,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACjC,kEAAkE;CACnE,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,IAAY;IAC7B,gFAAgF;IAChF,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,8BAA8B,CAAC,CAAC;IAC1F,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,UAAU,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,OAAO,qCAAqC,CAAC,CAAC;IACnH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACzD,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAC7D,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,aAAa,EAAE,+BAA+B;YAC9C,MAAM,EAAE,MAAM,CAAC,oBAAoB,CAAC;YACpC,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,+BAA+B;YAC9C,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC;YAC5E,UAAU;YACV,eAAe,EAAE,SAAS,CAAC,mCAAmC,CAAC;SAChE,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,SAAS,SAAS,CAAI,EAAW;IAC/B,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,IAAI,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAwB,EAAE,SAAkB;IACnE,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,QAA4B;IAC3E,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,EAAU,EAAQ,EAAE;QAChC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,MAAM,MAAM,GAAe,MAAM,CAAC,MAAM,CAAC;QACvC,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;QAChD,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;QAC5C,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU;QACtC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY;KAC3C,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,UAAU,IAAI,EAAE;QAAE,MAAM,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IAC/F,IAAI,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,oBAAoB,EAAE,4FAA4F,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,iBAAiB,EAAE,6CAA6C,CAAC,CAAC;IAElH,sEAAsE;IACtE,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,gBAAgB,EAAE,4DAA4D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;IAC7I,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QACpE,MAAM,CAAC,uBAAuB,EAAE,oDAAoD,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACnI,CAAC;IACD,uGAAuG;IACvG,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAsB,CAAC;IACnE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACf,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACxC,IAAI,UAAmC,CAAC;QACxC,IAAI,CAAC;YACH,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,iBAAiB,EAAE,0DAA0D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9J,CAAC;QACD,MAAM,cAAc,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,aAAa,KAAK,cAAc,EAAE,CAAC;YAC9C,MAAM,CAAC,iBAAiB,EAAE,mEAAmE,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,CAAC;IACxB,CAAC;IAED,iGAAiG;IACjG,SAAS,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvB,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,YAAY,CAAC,CAAC;IACnB,IAAI,CAAC,WAAW,CAAC,CAAC;IAElB,uFAAuF;IACvF,SAAS,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC;IAC3D,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC;QACnF,MAAM,CAAC,0BAA0B,EAAE,sDAAsD,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAExB,iFAAiF;IACjF,MAAM,OAAO,GAAG,QAAQ,CAAC,qBAAqB,CAAC,MAAM,CACnD,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,UAA+B,CAAC,CACjF,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,oBAAoB,EAAE,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpI,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,CAAC;IAErB,mDAAmD;IACnD,IACE,QAAQ,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO,CAAC,OAAO;QACtD,QAAQ,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO,CAAC,OAAO,EACzD,CAAC;QACD,MAAM,CAAC,gBAAgB,EAAE,yDAAyD,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,CAAC;IAEd,kGAAkG;IAClG,6FAA6F;IAC7F,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;IACxC,IACE,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,eAAe;QACrC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS;QAC/B,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,EAC5B,CAAC;QACD,MAAM,CAAC,oBAAoB,EAAE,wDAAwD,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAClC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAC3D,MAAM,CAAC,oBAAoB,EAAE,QAAQ,IAAI,CAAC,IAAI,sCAAsC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAW,EAAE,CAAC,CAAC;IACxG,CAAC,CAAmE,CAAC;IACrE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IACrC,IAAI,CAAC,YAAY,CAAC,CAAC;IAEnB,+FAA+F;IAC/F,+EAA+E;IAC/E,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC;IACvB,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,KAAK,2BAA2B,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/H,IAAI,OAAO,CAAC,EAAE,KAAK,KAAK;QAAE,MAAM,CAAC,kBAAkB,EAAE,mDAAmD,CAAC,CAAC;IAC1G,MAAM,aAAa,GAAG,CAAC,IAAS,EAAwC,EAAE;QACxE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAC;IAC9F,IAAI,cAAc,CAAC,MAAM,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,cAAc,CAAC,MAAM,sBAAsB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;QACpD,MAAM,CAAC,kBAAkB,EAAE,mDAAmD,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC;IACvC,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,kBAAkB,EAAE,yCAAyC,CAAC,CAAC;IAC/F,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,sBAAsB,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACrH,MAAM,CAAC,oBAAoB,EAAE,GAAG,OAAO,mCAAmC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC;IACpC,IAAI,CAAC,WAAW,CAAC,CAAC;IAElB,8FAA8F;IAC9F,iGAAiG;IACjG,mCAAmC;IACnC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACtD,MAAM,CAAC,qBAAqB,EAAE,uBAAuB,IAAI,CAAC,UAAU,gBAAgB,MAAM,CAAC,WAAW,CAAC,UAAU,GAAG,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,CAAC,mBAAmB,EAAE,6BAA6B,IAAI,CAAC,QAAQ,2BAA2B,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,eAAe;YAAE,SAAS;QACnC,IAAI,GAAG,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;YACjC,MAAM,CAAC,uBAAuB,EAAE,qBAAqB,GAAG,CAAC,cAAc,0BAA0B,KAAK,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC;IAC9B,CAAC;IACD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,uBAAuB,EAAE,qBAAqB,SAAS,qDAAqD,KAAK,EAAE,CAAC,CAAC;IAC9H,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IACjD,IAAI,OAAO,CAAC,gBAAgB,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;QAChD,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,OAAO,CAAC,gBAAgB,4BAA4B,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,CAAC;IAEpB,gGAAgG;IAChG,IAAI,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,CAAC,oBAAoB,EAAE,uBAAuB,IAAI,CAAC,SAAS,gCAAgC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,CAAC;IAEnB,yGAAyG;IACzG,IACE,QAAQ,CAAC,eAAe,CAAC,SAAS,KAAK,qBAAqB;QAC5D,QAAQ,CAAC,eAAe,CAAC,cAAc,KAAK,MAAM,CAAC,WAAW,CAAC,aAAa,EAC5E,CAAC;QACD,MAAM,CAAC,sBAAsB,EAAE,sBAAsB,QAAQ,CAAC,eAAe,CAAC,SAAS,IAAI,QAAQ,CAAC,eAAe,CAAC,cAAc,kCAAkC,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1M,CAAC;IACD,MAAM,kBAAkB,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,CAAC,OAAgB,EAAW,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACnG,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CACpC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,2BAA2B,CAC3G,CAAC;IACF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,qBAAqB,EAAE,kDAAkD,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAE,CAAC;IACjC,6EAA6E;IAC7E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QACtG,MAAM,CACJ,qBAAqB,EACrB,iBAAiB,MAAM,CAAC,MAAM,eAAe,MAAM,CAAC,SAAS,wDAAwD,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACtJ,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,KAAK,IAAI,MAAM,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;QACzE,MAAM,CAAC,sBAAsB,EAAE,6CAA6C,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;QAAE,MAAM,CAAC,sBAAsB,EAAE,sCAAsC,CAAC,CAAC;IACjG,MAAM,eAAe,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,MAAO,CAAC;IACtE,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC;IAC1F,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,qBAAqB,EAAE,iCAAiC,iBAAiB,CAAC,MAAM,+BAA+B,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;IAC7C,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QAChC,MAAM,CAAC,sBAAsB,EAAE,YAAY,OAAO,OAAO,eAAe,KAAK,MAAM,CAAC,WAAW,CAAC,MAAM,WAAW,KAAK,GAAG,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9C,KAAK,IAAI,YAAY,CAAC,MAAM,CAAC;QAC7B,IACE,YAAY,CAAC,SAAS,KAAK,aAAa;YACxC,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,sBAAsB,EAAE,YAAY,CAAC,SAAS,CAAC,EACnF,CAAC;YACD,MAAM,CAAC,sBAAsB,EAAE,uCAAuC,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IACD,IAAI,KAAK,GAAG,MAAO,GAAG,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;QACjE,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,KAAK,WAAW,MAAM,CAAC,WAAW,CAAC,eAAe,WAAW,KAAK,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAExB,gGAAgG;IAChG,mGAAmG;IACnG,oGAAoG;IACpG,iGAAiG;IACjG,OAAO,kBAAkB,CACvB;QACA,QAAQ;QACR,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAmE;QACvI,MAAM;QACN,KAAK;QACL,WAAW,EAAE,OAAO,CAAC,gBAAgB;QACrC,OAAO;QACP,KAAK;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,SAAS;QAC5B,OAAO;QACP,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChI,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;KACxE,EACD,OAAO,EACP,QAAQ,CAAC,OAAO,CAAC,OAAO,CACzB,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,cAAc,GAAG,IAAI,OAAO,EAAU,CAAC;AAC7C,MAAM,aAAa,GAAG,IAAI,OAAO,EAAwB,CAAC;AAa1D,8GAA8G;AAC9G,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,UAAU,CAAE,KAAsC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAE,KAAsC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAkB,EAAE,OAAgB,EAAE,OAAe;IAC/E,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAiB,MAAM,CAAC,MAAM,CAAC;QAC3C,OAAO,EAAE,OAAO;QAChB,OAAO;QACP,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAiC;QACvG,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrD,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;QACvC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe;QAC1D,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAyC;KACjI,CAAC,CAAC;IACH,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC1G,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAAC,IAAkB;IACrD,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;AAClC,CAAC;AASD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAkB,EAAE,MAAsB,EAAE,QAAgB,IAAI,CAAC,GAAG,EAAE;IACzG,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,0CAA0C,QAAQ,CAAC,OAAO,oBAAoB,aAAa,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,CAAC,OAAO,uBAAuB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACtH,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,GAAG,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,gBAAgB,EAAE,iCAAiC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAkB;IACzD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAC;IACvH,CAAC;IACD,MAAM,MAAM,GACV,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC3B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5G,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,gBAAgB,CAAC,MAAM;QAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;QACvD,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO;QAClC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;IAC1C,MAAM,aAAa,GACjB,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,OAAO;QACtE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAC1D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO;QACnD,IAAI,CAAC,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,UAAU;QACjD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,KAAK,QAAQ,CAAC,cAAc;QACpE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,YAAY;QAC/D,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,MAAM,KAAK,QAAQ,CAAC,YAAY,CAAC,MAAM;QAC3E,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,IAAI,CAAC,QAAQ,CAAC,qBAA2C,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1G,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,QAAQ;IACR,gBAAgB;IAChB,YAAY;IACZ,WAAW;IACX,iBAAiB;IACjB,cAAc;IACd,OAAO;IACP,YAAY;IACZ,WAAW;IACX,aAAa;IACb,YAAY;IACZ,iBAAiB;CACT,CAAC,CAAC"}

package/dist/adapter-cdp-index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * adapter-cdp-index.ts — the CDP-delegated signer on its OWN entry (`otto-intel-mcp/adapter-cdp`).
+ * `@coinbase/cdp-sdk` is an optional dependency loaded lazily inside `openCdpRig`; importing this
+ * entry never resolves the SDK, and a rig built from raw operations (`createCdpRig`) never needs it.
+ */
+export { CDP_CAPABILITIES, CHAIN_ID, CdpDelegatedSigner, DelegatedPlanHaltedError, NETWORK, RevocationRequestedError, createCdpRig, haltCauseOf, openCdpRig, revocationRequested, revokeDelegationByUserId, type CdpDeveloperCredentials, type DelegatedHaltCause, type CdpEndUser, type CdpRawOperations, type CdpRig, } from './adapter/cdp-signer.js';

package/dist/adapter-cdp-index.js

@@ -0,0 +1,7 @@
+/**
+ * adapter-cdp-index.ts — the CDP-delegated signer on its OWN entry (`otto-intel-mcp/adapter-cdp`).
+ * `@coinbase/cdp-sdk` is an optional dependency loaded lazily inside `openCdpRig`; importing this
+ * entry never resolves the SDK, and a rig built from raw operations (`createCdpRig`) never needs it.
+ */
+export { CDP_CAPABILITIES, CHAIN_ID, CdpDelegatedSigner, DelegatedPlanHaltedError, NETWORK, RevocationRequestedError, createCdpRig, haltCauseOf, openCdpRig, revocationRequested, revokeDelegationByUserId, } from './adapter/cdp-signer.js';
+//# sourceMappingURL=adapter-cdp-index.js.map

package/dist/adapter-index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * adapter-index.ts — the ADAPTER entry (`otto-intel-mcp/adapter`): the user-side verifier and the two
+ * chain helpers every signer of a prepare-only artifact needs — integrity → intent → policy →
+ * attribution checks, the LI.FI calldata decoder, the refusal taxonomy, the sealed-receipt rule and
+ * the ERC-20 allowance read-back. Moved here from `services/otto-execute` (2026-08-29) because the
+ * hosted MCP's delegated-send path runs the same verifier server-side and Railway builds this service
+ * in isolation; `otto-execute` re-exports these names unchanged. Nothing here constructs, signs or
+ * needs `@coinbase/cdp-sdk` — the delegated signer lives on `otto-intel-mcp/adapter-cdp`.
+ */
+export { ADAPTER_REFUSAL_CODES, AdapterRefusal, isAdapterRefusal, isAdapterRefusalCode, refuse, type AdapterRefusalCode, } from './adapter/refusal.js';
+export { COLLECT_TOKEN_FEES_SELECTOR, GENERIC_SWAP_SELECTORS, decodeCollectTokenFees, decodeGenericSwap, encodeCollectTokenFees, encodeGenericSwap, type DecodedCollectTokenFees, type DecodedGenericSwap, type FeeDistribution, type SwapLeg, } from './adapter/lifi-decode.js';
+export { VERIFY_CHECK_IDS, assertPlanSignableBy, assertVerifiedPlanIntact, defaultAdapterPolicy, isDeepFrozen, isVerifierOutput, verifiedPlanIdentity, verifySwapEnvelope, type AdapterPolicy, type AttributionPolicy, type PlanIdentity, type SignerIdentity, type SigningCapability, type SwapIntent, type VerifiedCheck, type VerifiedStep, type VerifiedSwap, type VerifyExpectations, } from './adapter/verify.js';
+export { waitForSealedReceipt, type SealedClient, type SealedWaitOptions, } from './adapter/chain.js';
+export { ERC20_ALLOWANCE_ABI, ERC20_APPROVE_ABI, readAllowance } from './adapter/erc20.js';
+export type { SentStep } from './adapter/sent-step.js';

package/dist/adapter-index.js

@@ -0,0 +1,15 @@
+/**
+ * adapter-index.ts — the ADAPTER entry (`otto-intel-mcp/adapter`): the user-side verifier and the two
+ * chain helpers every signer of a prepare-only artifact needs — integrity → intent → policy →
+ * attribution checks, the LI.FI calldata decoder, the refusal taxonomy, the sealed-receipt rule and
+ * the ERC-20 allowance read-back. Moved here from `services/otto-execute` (2026-08-29) because the
+ * hosted MCP's delegated-send path runs the same verifier server-side and Railway builds this service
+ * in isolation; `otto-execute` re-exports these names unchanged. Nothing here constructs, signs or
+ * needs `@coinbase/cdp-sdk` — the delegated signer lives on `otto-intel-mcp/adapter-cdp`.
+ */
+export { ADAPTER_REFUSAL_CODES, AdapterRefusal, isAdapterRefusal, isAdapterRefusalCode, refuse, } from './adapter/refusal.js';
+export { COLLECT_TOKEN_FEES_SELECTOR, GENERIC_SWAP_SELECTORS, decodeCollectTokenFees, decodeGenericSwap, encodeCollectTokenFees, encodeGenericSwap, } from './adapter/lifi-decode.js';
+export { VERIFY_CHECK_IDS, assertPlanSignableBy, assertVerifiedPlanIntact, defaultAdapterPolicy, isDeepFrozen, isVerifierOutput, verifiedPlanIdentity, verifySwapEnvelope, } from './adapter/verify.js';
+export { waitForSealedReceipt, } from './adapter/chain.js';
+export { ERC20_ALLOWANCE_ABI, ERC20_APPROVE_ABI, readAllowance } from './adapter/erc20.js';
+//# sourceMappingURL=adapter-index.js.map

package/dist/artifact-id.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Hard ceiling on constructor-owned artifact freshness, measured from the construction
+ * timestamp embedded in the artifact id. The configured TTL must stay at or below it, and
+ * adapter-side freshness is clamped to it, so a rewritten `valid_until` cannot widen the
+ * window past this bound.
+ */
+export declare const MAX_ARTIFACT_TTL_MS = 600000;
+export declare function createArtifactId(nowMs?: number, entropy?: Uint8Array): string;
+/** Construction timestamp embedded in the artifact id, or undefined when the id is malformed. */
+export declare function artifactIdTimestampMs(artifactId: string): number | undefined;
+/**
+ * Freshness bound owned by the constructor: `valid_until` must sit strictly after the
+ * construction timestamp and within the ceiling. Any adapter can re-derive it from the
+ * artifact alone, so an edited expiry is detectable without external state.
+ */
+export declare function isArtifactFreshnessWellFormed(artifactId: string, validUntil: string): boolean;

package/dist/artifact-id.js

@@ -0,0 +1,60 @@
+import { randomBytes } from 'node:crypto';
+const CROCKFORD_BASE32 = '0123456789ABCDEFGHJKMNPQRSTVWXYZ';
+const ARTIFACT_ID_PATTERN = /^[0-9A-HJKMNP-TV-Z]{26}$/;
+const MAX_ULID_TIMESTAMP_MS = 281_474_976_710_655;
+/**
+ * Hard ceiling on constructor-owned artifact freshness, measured from the construction
+ * timestamp embedded in the artifact id. The configured TTL must stay at or below it, and
+ * adapter-side freshness is clamped to it, so a rewritten `valid_until` cannot widen the
+ * window past this bound.
+ */
+export const MAX_ARTIFACT_TTL_MS = 600_000;
+function encodeBase32(value, length) {
+    let remaining = value;
+    let encoded = '';
+    for (let index = 0; index < length; index += 1) {
+        encoded = CROCKFORD_BASE32[Number(remaining & 31n)] + encoded;
+        remaining >>= 5n;
+    }
+    if (remaining !== 0n)
+        throw new Error('value does not fit in requested base32 length');
+    return encoded;
+}
+export function createArtifactId(nowMs = Date.now(), entropy = randomBytes(10)) {
+    if (!Number.isSafeInteger(nowMs) || nowMs < 0 || nowMs > MAX_ULID_TIMESTAMP_MS) {
+        throw new Error('ULID timestamp is outside the 48-bit range');
+    }
+    if (entropy.length !== 10)
+        throw new Error('ULID entropy must contain exactly 10 bytes');
+    let randomness = 0n;
+    for (const byte of entropy)
+        randomness = (randomness << 8n) | BigInt(byte);
+    return `${encodeBase32(BigInt(nowMs), 10)}${encodeBase32(randomness, 16)}`;
+}
+/** Construction timestamp embedded in the artifact id, or undefined when the id is malformed. */
+export function artifactIdTimestampMs(artifactId) {
+    if (!ARTIFACT_ID_PATTERN.test(artifactId))
+        return undefined;
+    let timestamp = 0n;
+    for (const character of artifactId.slice(0, 10)) {
+        const digit = CROCKFORD_BASE32.indexOf(character);
+        if (digit < 0)
+            return undefined;
+        timestamp = (timestamp << 5n) | BigInt(digit);
+    }
+    const value = Number(timestamp);
+    return Number.isSafeInteger(value) ? value : undefined;
+}
+/**
+ * Freshness bound owned by the constructor: `valid_until` must sit strictly after the
+ * construction timestamp and within the ceiling. Any adapter can re-derive it from the
+ * artifact alone, so an edited expiry is detectable without external state.
+ */
+export function isArtifactFreshnessWellFormed(artifactId, validUntil) {
+    const constructedMs = artifactIdTimestampMs(artifactId);
+    const validUntilMs = Date.parse(validUntil);
+    if (constructedMs === undefined || !Number.isFinite(validUntilMs))
+        return false;
+    return validUntilMs > constructedMs && validUntilMs - constructedMs <= MAX_ARTIFACT_TTL_MS;
+}
+//# sourceMappingURL=artifact-id.js.map

package/dist/boot-redaction.d.ts

@@ -0,0 +1,16 @@
+/**
+ * boot-redaction.ts — what the hosted boot may print about a configuration failure.
+ *
+ * viem embeds the RPC URL in its error messages (`URL: https://…/v2/<key>`) and strips only basic-auth
+ * credentials from it — not a key carried in the path or the query. A boot-time RPC failure printed
+ * verbatim would therefore write `BASE_RPC_URL` (an API key) to the Railway log. Every configuration or
+ * boot error goes through `redactBootMessage` before stderr: URLs become `<url>`, and any configured
+ * secret VALUE that survives is replaced by its NAME. The chain-id check itself throws a fixed message
+ * (`execution-delegation.ts`); this is the second layer, for every other path that could carry a value.
+ */
+/** The hosted service's secret-bearing variables. Values are never printed; names are. */
+export declare const REDACTED_ENV_NAMES: readonly ["CDP_API_KEY_ID", "CDP_API_KEY_SECRET", "CDP_WALLET_SECRET", "OTTO_DELEGATION_SERVER_SECRET", "BASE_RPC_URL", "INTERNAL_API_KEY", "DATA_ENDPOINTS_INTERNAL_URL", "LIFI_API_KEY", "LIFI_BASE_URL", "POLYMARKET_CLOB_URL", "HYPERLIQUID_API_URL", "X402_PRIVATE_KEY", "X402_BASE_URL", "X402_RPC_URL"];
+/** Redact URLs and every configured secret value from a message that is about to be printed. */
+export declare function redactBootMessage(message: string, env?: NodeJS.ProcessEnv, names?: readonly string[]): string;
+/** The one line the boot prints for a failure; never the raw error. */
+export declare function bootFailureLine(prefix: string, error: unknown, env?: NodeJS.ProcessEnv): string;