@agenticprimitives/payments 0.0.0-alpha.3 → 0.0.0-alpha.4

package/dist/index.d.ts

@@ -109,4 +109,5 @@ export interface PaymentRailExecutor {
 }
 export declare function registerRail(executor: PaymentRailExecutor): void;
 export declare function getRail(rail: PaymentRail): PaymentRailExecutor | undefined;
+export * as x402 from './rails/x402/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAE7D,eAAO,MAAM,YAAY,gCAAgC,CAAC;AAC1D,eAAO,MAAM,cAAc,EAAG,iBAA0B,CAAC;AACzD,eAAO,MAAM,QAAQ,0BAA0B,CAAC;AAEhD,MAAM,MAAM,KAAK,GAAG,KAAK,MAAM,EAAE,CAAC;AAElC,MAAM,MAAM,WAAW,GACnB,MAAM,GACN,QAAQ,GACR,kBAAkB,GAClB,QAAQ,GACR,SAAS,GACT,oBAAoB,GACpB,oBAAoB,GACpB,2BAA2B,CAAC;AAEhC,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvF;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE;QAAE,uBAAuB,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,KAAK,CAAC;IAC5B,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,KAAK,CAAA;KAAE,CAAC;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,KAAK,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,YAAY,EAAE,YAAY,CAAC;IAC3B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,CAAC,EAAE,KAAK,CAAC;IACtB,IAAI,EAAE,kBAAkB,CAAC;IACzB,mCAAmC,CAAC,EAAE,OAAO,CAAC;IAC9C,UAAU,EAAE,KAAK,CAAC;IAClB,SAAS,EAAE,GAAG,CAAC;CAChB;AAED,sEAAsE;AACtE,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAOlE;AAED,kEAAkE;AAClE,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAI3E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,KAAK,CAMR;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACzG,iBAAiB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,KAAK,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,KAAK,CAAC;QAAC,cAAc,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;CACpG;AAGD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAEhE;AACD,wBAAgB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,mBAAmB,GAAG,SAAS,CAE1E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAE7D,eAAO,MAAM,YAAY,gCAAgC,CAAC;AAC1D,eAAO,MAAM,cAAc,EAAG,iBAA0B,CAAC;AACzD,eAAO,MAAM,QAAQ,0BAA0B,CAAC;AAEhD,MAAM,MAAM,KAAK,GAAG,KAAK,MAAM,EAAE,CAAC;AAElC,MAAM,MAAM,WAAW,GACnB,MAAM,GACN,QAAQ,GACR,kBAAkB,GAClB,QAAQ,GACR,SAAS,GACT,oBAAoB,GACpB,oBAAoB,GACpB,2BAA2B,CAAC;AAEhC,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvF;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE;QAAE,uBAAuB,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,KAAK,CAAC;IAC5B,MAAM,CAAC,EAAE,KAAK,CAAC;IACf,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,KAAK,CAAA;KAAE,CAAC;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,KAAK,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,YAAY,EAAE,YAAY,CAAC;IAC3B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,CAAC,EAAE,KAAK,CAAC;IACtB,IAAI,EAAE,kBAAkB,CAAC;IACzB,mCAAmC,CAAC,EAAE,OAAO,CAAC;IAC9C,UAAU,EAAE,KAAK,CAAC;IAClB,SAAS,EAAE,GAAG,CAAC;CAChB;AAED,sEAAsE;AACtE,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAOlE;AAED,kEAAkE;AAClE,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAI3E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,KAAK,CAMR;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACzG,iBAAiB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,KAAK,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,KAAK,CAAC;QAAC,cAAc,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;CACpG;AAGD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAEhE;AACD,wBAAgB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,mBAAmB,GAAG,SAAS,CAE1E;AAGD,OAAO,KAAK,IAAI,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -37,4 +37,6 @@ export function registerRail(executor) {
 export function getRail(rail) {
     return _rails.get(rail);
 }
+// Spec 272 — the x402 rail (staged executor + v2 wire + nonce store + resource binding).
+export * as x402 from './rails/x402/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,MAAM,CAAC,MAAM,YAAY,GAAG,6BAA6B,CAAC;AAC1D,MAAM,CAAC,MAAM,cAAc,GAAG,iBAA0B,CAAC;AACzD,MAAM,CAAC,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAqEhD,sEAAsE;AACtE,MAAM,UAAU,yBAAyB,CAAC,EAAkB;IAC1D,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,mBAAmB,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,QAAQ,CAAC;IACjG,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,mIAAmI,CACpI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,6BAA6B,CAAC,OAAuB;IACnE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAKhC;IACC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,GAAY,CAAC;AACtB,CAAC;AASD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;AAC3D,MAAM,UAAU,YAAY,CAAC,QAA6B;IACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,IAAiB;IACvC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,MAAM,CAAC,MAAM,YAAY,GAAG,6BAA6B,CAAC;AAC1D,MAAM,CAAC,MAAM,cAAc,GAAG,iBAA0B,CAAC;AACzD,MAAM,CAAC,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAqEhD,sEAAsE;AACtE,MAAM,UAAU,yBAAyB,CAAC,EAAkB;IAC1D,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,mBAAmB,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,QAAQ,CAAC;IACjG,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,mIAAmI,CACpI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,6BAA6B,CAAC,OAAuB;IACnE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAKhC;IACC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,OAAO,GAAY,CAAC;AACtB,CAAC;AASD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;AAC3D,MAAM,UAAU,YAAY,CAAC,QAA6B;IACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,IAAiB;IACvC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,yFAAyF;AACzF,OAAO,KAAK,IAAI,MAAM,uBAAuB,CAAC"}

package/dist/rails/x402/executor.d.ts

@@ -0,0 +1,93 @@
+import { type Address, type Hex } from 'viem';
+import type { Delegation } from '@agenticprimitives/delegation';
+import { type PaymentMandate } from '../../index.js';
+import type { Hex32 } from './resource.js';
+import type { PaymentQuote } from './quote.js';
+import type { NonceReservationStore } from './nonce-store.js';
+/** x402-specific bits the mandate carries (PaymentMandate.railConfig). Binds the mandate to its quote. */
+export interface X402RailConfig {
+    quoteId: Hex32;
+    resourceHash: Hex32;
+}
+/** PAY-RAIL-4 — the rail-scoped replay nullifier. */
+export declare function computeNullifier(args: {
+    rail: string;
+    chainId: number;
+    payer: Address;
+    payee: Address;
+    asset: Address;
+    mandateId: Hex32;
+    nonce: bigint;
+    resourceHash: Hex32;
+}): Hex32;
+/**
+ * PAY-RAIL-1 — synchronous mandate verification against its persisted quote. Returns the first failure
+ * reason (or null). The async checks (revocation, nonce-unused) run in the rail's settle() flow.
+ */
+export declare function verifyMandate(mandate: PaymentMandate, quote: PaymentQuote, opts: {
+    now: number;
+}): {
+    valid: true;
+} | {
+    valid: false;
+    reason: string;
+};
+/**
+ * PAY-RAIL-2 — build the redemption plan: DelegationManager.redeemDelegation(paymentDelegation,
+ * USDC.transfer(treasury, amount)) with the PaymentEnforcer caveat's `args` filled with the mandate's
+ * (mandateId, nonce, resourceHash) at REDEMPTION time. The caller submits `{to, value, data}` from the
+ * service relayer as a sponsored UserOp.
+ */
+export declare function buildRedemptionCalldata(args: {
+    mandate: PaymentMandate;
+    delegation: Delegation;
+    delegationManager: Address;
+    paymentEnforcer: Address;
+    asset: Address;
+    resourceHash: Hex32;
+}): {
+    to: Address;
+    value: bigint;
+    data: Hex;
+};
+export interface X402RailDeps {
+    chainId: number;
+    delegationManager: Address;
+    paymentEnforcer: Address;
+    asset: Address;
+    nonceStore: NonceReservationStore;
+    /** Off-chain revocation read (the app wires `delegation.isRevoked`). Checked BEFORE settling; the DM
+     *  also enforces revocation on-chain (PAY-DEL-3). */
+    isRevoked: (delegationHash: Hex32) => Promise<boolean>;
+    /** Submit the redemption (a sponsored UserOp from the service relayer, X402-D4). Injected by the app /
+     *  agent-account layer; returns the settlement tx hash. */
+    submitRedemption: (plan: {
+        to: Address;
+        value: bigint;
+        data: Hex;
+    }) => Promise<{
+        settlementHash: Hex32;
+    }>;
+    now?: () => number;
+}
+export type SettleResult = {
+    ok: true;
+    settlementHash: Hex32;
+    mandateId: Hex32;
+    idempotent: boolean;
+} | {
+    ok: false;
+    reason: string;
+};
+/** The staged x402 rail. `settle` runs verify → revoke → reserve(nullifier) → prepare → submit →
+ *  receipt; a safe retry of an already-settled request returns the original receipt (idempotent). */
+export declare function createX402Rail(deps: X402RailDeps): {
+    rail: "x402";
+    verifyMandate: typeof verifyMandate;
+    settle: (input: {
+        mandate: PaymentMandate;
+        delegation: Delegation;
+        quote: PaymentQuote;
+    }) => Promise<SettleResult>;
+};
+//# sourceMappingURL=executor.d.ts.map

package/dist/rails/x402/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/rails/x402/executor.ts"],"names":[],"mappings":"AAMA,OAAO,EAA6D,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AACzG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAA4D,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC/G,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,KAAK,EAAE,qBAAqB,EAAkB,MAAM,kBAAkB,CAAC;AAE9E,0GAA0G;AAC1G,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,YAAY,EAAE,KAAK,CAAC;CACrB;AAmDD,qDAAqD;AACrD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,KAAK,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,KAAK,CAAC;CACrB,GAAG,KAAK,CAgBR;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAwBpD;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,KAAK,CAAC;CACrB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,GAAG,CAAA;CAAE,CAwC5C;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,qBAAqB,CAAC;IAClC;yDACqD;IACrD,SAAS,EAAE,CAAC,cAAc,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD;+DAC2D;IAC3D,gBAAgB,EAAE,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,GAAG,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,cAAc,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;IAC1G,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,cAAc,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAC1E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;qGACqG;AACrG,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY;;;oBAGlB;QAAE,OAAO,EAAE,cAAc,CAAC;QAAC,UAAU,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,YAAY,CAAA;KAAE,KAAG,OAAO,CAAC,YAAY,CAAC;EA+C9H"}

package/dist/rails/x402/executor.js

@@ -0,0 +1,200 @@
+// Spec 272 PAY-RAIL-1..6 — the staged x402 rail executor (verify → revoke-check → reserve → prepare →
+// submit → receipt). Delegation-native settlement (X402-D2): the redemption is
+// DelegationManager.redeemDelegation(paymentDelegation, USDC.transfer(treasury, amount)) gated by the
+// on-chain PaymentEnforcer. This package owns the LOGIC; on-chain submission (a sponsored UserOp,
+// X402-D4) + the revocation read are INJECTED (payments is type-only on delegation, forbids agent-account).
+import { encodeAbiParameters, encodeFunctionData, keccak256, toHex } from 'viem';
+import { assertContextBindingValid, assertClosedMandateInvariants } from '../../index.js';
+import { fromCaip2 } from './quote.js';
+const TRANSFER_ABI = [
+    {
+        type: 'function',
+        name: 'transfer',
+        stateMutability: 'nonpayable',
+        inputs: [
+            { name: 'to', type: 'address' },
+            { name: 'amount', type: 'uint256' },
+        ],
+        outputs: [{ type: 'bool' }],
+    },
+];
+const DELEGATION_TUPLE = {
+    name: 'delegations',
+    type: 'tuple[]',
+    components: [
+        { name: 'delegator', type: 'address' },
+        { name: 'delegate', type: 'address' },
+        { name: 'authority', type: 'bytes32' },
+        {
+            name: 'caveats',
+            type: 'tuple[]',
+            components: [
+                { name: 'enforcer', type: 'address' },
+                { name: 'terms', type: 'bytes' },
+                { name: 'args', type: 'bytes' },
+            ],
+        },
+        { name: 'salt', type: 'uint256' },
+        { name: 'signature', type: 'bytes' },
+    ],
+};
+const REDEEM_ABI = [
+    {
+        type: 'function',
+        name: 'redeemDelegation',
+        stateMutability: 'nonpayable',
+        inputs: [
+            DELEGATION_TUPLE,
+            { name: 'target', type: 'address' },
+            { name: 'value', type: 'uint256' },
+            { name: 'data', type: 'bytes' },
+        ],
+        outputs: [],
+    },
+];
+/** PAY-RAIL-4 — the rail-scoped replay nullifier. */
+export function computeNullifier(args) {
+    return keccak256(encodeAbiParameters([
+        { type: 'string' },
+        { type: 'uint256' },
+        { type: 'address' },
+        { type: 'address' },
+        { type: 'address' },
+        { type: 'bytes32' },
+        { type: 'uint256' },
+        { type: 'bytes32' },
+    ], [args.rail, BigInt(args.chainId), args.payer, args.payee, args.asset, args.mandateId, args.nonce, args.resourceHash]));
+}
+/**
+ * PAY-RAIL-1 — synchronous mandate verification against its persisted quote. Returns the first failure
+ * reason (or null). The async checks (revocation, nonce-unused) run in the rail's settle() flow.
+ */
+export function verifyMandate(mandate, quote, opts) {
+    try {
+        assertContextBindingValid(mandate.contextBinding);
+        assertClosedMandateInvariants(mandate);
+    }
+    catch (e) {
+        return { valid: false, reason: e instanceof Error ? e.message : 'invariant' };
+    }
+    if (mandate.mode !== 'closed')
+        return { valid: false, reason: 'final charge requires a closed mandate' };
+    if (mandate.maxRedemptions !== 1)
+        return { valid: false, reason: 'closed mandate must be one-shot' };
+    if (mandate.rail !== 'x402')
+        return { valid: false, reason: `wrong rail ${mandate.rail}` };
+    const rc = mandate.railConfig;
+    if (!rc?.quoteId || rc.quoteId !== quote.quoteId)
+        return { valid: false, reason: 'quote mismatch (quoteId)' };
+    if (rc.resourceHash !== quote.resourceHash)
+        return { valid: false, reason: 'quote mismatch (resourceHash)' };
+    if (mandate.payee.toLowerCase() !== quote.payTo.toLowerCase())
+        return { valid: false, reason: 'payee != treasury' };
+    if (mandate.amountPolicy.kind !== 'exact')
+        return { valid: false, reason: 'flat per-call requires exact amountPolicy' };
+    if (mandate.amountPolicy.amount !== quote.amount)
+        return { valid: false, reason: 'amount mismatch' };
+    if (mandate.amountPolicy.asset.id.toLowerCase() !== quote.asset.toLowerCase())
+        return { valid: false, reason: 'asset mismatch' };
+    if (mandate.amountPolicy.chain !== fromCaip2(quote.network))
+        return { valid: false, reason: 'chain mismatch' };
+    if (mandate.nonce !== quote.nonce)
+        return { valid: false, reason: 'nonce mismatch' };
+    if (mandate.expiresAt <= opts.now)
+        return { valid: false, reason: 'mandate expired' };
+    if (mandate.validFrom > opts.now)
+        return { valid: false, reason: 'mandate not yet valid' };
+    return { valid: true };
+}
+/**
+ * PAY-RAIL-2 — build the redemption plan: DelegationManager.redeemDelegation(paymentDelegation,
+ * USDC.transfer(treasury, amount)) with the PaymentEnforcer caveat's `args` filled with the mandate's
+ * (mandateId, nonce, resourceHash) at REDEMPTION time. The caller submits `{to, value, data}` from the
+ * service relayer as a sponsored UserOp.
+ */
+export function buildRedemptionCalldata(args) {
+    const amount = args.mandate.amountPolicy.amount;
+    const transferData = encodeFunctionData({
+        abi: TRANSFER_ABI,
+        functionName: 'transfer',
+        args: [args.mandate.payee, amount],
+    });
+    // Fill the PaymentEnforcer caveat's redeem-time args = abi.encode(mandateId, nonce, resourceHash).
+    const enforcerArgs = encodeAbiParameters([{ type: 'bytes32' }, { type: 'bytes32' }, { type: 'bytes32' }], [args.mandate.mandateId, toHex(args.mandate.nonce, { size: 32 }), args.resourceHash]);
+    const pe = args.paymentEnforcer.toLowerCase();
+    const caveats = args.delegation.caveats.map((c) => c.enforcer.toLowerCase() === pe
+        ? { enforcer: c.enforcer, terms: c.terms, args: enforcerArgs }
+        : { enforcer: c.enforcer, terms: c.terms, args: c.args ?? '0x' });
+    const data = encodeFunctionData({
+        abi: REDEEM_ABI,
+        functionName: 'redeemDelegation',
+        args: [
+            [
+                {
+                    delegator: args.delegation.delegator,
+                    delegate: args.delegation.delegate,
+                    authority: args.delegation.authority,
+                    caveats,
+                    salt: args.delegation.salt,
+                    signature: args.delegation.signature,
+                },
+            ],
+            args.asset,
+            0n,
+            transferData,
+        ],
+    });
+    return { to: args.delegationManager, value: 0n, data };
+}
+/** The staged x402 rail. `settle` runs verify → revoke → reserve(nullifier) → prepare → submit →
+ *  receipt; a safe retry of an already-settled request returns the original receipt (idempotent). */
+export function createX402Rail(deps) {
+    const now = deps.now ?? (() => Math.floor(Date.now() / 1000));
+    async function settle(input) {
+        const { mandate, delegation, quote } = input;
+        const v = verifyMandate(mandate, quote, { now: now() });
+        if (!v.valid)
+            return { ok: false, reason: v.reason };
+        const delegationHash = mandate.delegationRef;
+        if (delegationHash && (await deps.isRevoked(delegationHash)))
+            return { ok: false, reason: 'payment delegation revoked' };
+        const nullifier = computeNullifier({
+            rail: 'x402',
+            chainId: deps.chainId,
+            payer: mandate.payer,
+            payee: mandate.payee,
+            asset: deps.asset,
+            mandateId: mandate.mandateId,
+            nonce: mandate.nonce,
+            resourceHash: quote.resourceHash,
+        });
+        const reserved = await deps.nonceStore.reserve(nullifier);
+        if (!reserved.ok) {
+            if (reserved.state === 'settled' && reserved.receipt) {
+                return { ok: true, settlementHash: reserved.receipt.settlementHash, mandateId: reserved.receipt.mandateId, idempotent: true };
+            }
+            return { ok: false, reason: `duplicate settlement (${reserved.state})` };
+        }
+        const plan = buildRedemptionCalldata({
+            mandate,
+            delegation,
+            delegationManager: deps.delegationManager,
+            paymentEnforcer: deps.paymentEnforcer,
+            asset: deps.asset,
+            resourceHash: quote.resourceHash,
+        });
+        await deps.nonceStore.markSettling(nullifier);
+        try {
+            const { settlementHash } = await deps.submitRedemption(plan);
+            const receipt = { settlementHash, mandateId: mandate.mandateId };
+            await deps.nonceStore.markSettled(nullifier, receipt);
+            return { ok: true, settlementHash, mandateId: mandate.mandateId, idempotent: false };
+        }
+        catch (e) {
+            await deps.nonceStore.markFailed(nullifier, true);
+            return { ok: false, reason: e instanceof Error ? e.message : 'settlement failed' };
+        }
+    }
+    return { rail: 'x402', verifyMandate, settle };
+}
+//# sourceMappingURL=executor.js.map

package/dist/rails/x402/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../src/rails/x402/executor.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,+EAA+E;AAC/E,sGAAsG;AACtG,kGAAkG;AAClG,4GAA4G;AAE5G,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,EAA0B,MAAM,MAAM,CAAC;AAEzG,OAAO,EAAE,yBAAyB,EAAE,6BAA6B,EAAuB,MAAM,gBAAgB,CAAC;AAG/G,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AASvC,MAAM,YAAY,GAAG;IACnB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,UAAU;QAChB,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;YAC/B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACpC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KAC5B;CACO,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,SAAS;IACf,UAAU,EAAE;QACV,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;gBACrC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;gBAChC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;aAChC;SACF;QACD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;QACjC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;KACrC;CACO,CAAC;AAEX,MAAM,UAAU,GAAG;IACjB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,kBAAkB;QACxB,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE;YACN,gBAAgB;YAChB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;YACnC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;YAClC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;SAChC;QACD,OAAO,EAAE,EAAE;KACZ;CACO,CAAC;AAEX,qDAAqD;AACrD,MAAM,UAAU,gBAAgB,CAAC,IAShC;IACC,OAAO,SAAS,CACd,mBAAmB,CACjB;QACE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;KACpB,EACD,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,CACrH,CACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAuB,EACvB,KAAmB,EACnB,IAAqB;IAErB,IAAI,CAAC;QACH,yBAAyB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAClD,6BAA6B,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IACzG,IAAI,OAAO,CAAC,cAAc,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACrG,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IAE3F,MAAM,EAAE,GAAG,OAAO,CAAC,UAAwC,CAAC;IAC5D,IAAI,CAAC,EAAE,EAAE,OAAO,IAAI,EAAE,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC9G,IAAI,EAAE,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAE7G,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpH,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IACxH,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACrG,IAAI,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjI,IAAI,OAAO,CAAC,YAAY,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC/G,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACrF,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACtF,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC3F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAOvC;IACC,MAAM,MAAM,GAAI,IAAI,CAAC,OAAO,CAAC,YAAmC,CAAC,MAAM,CAAC;IACxE,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,GAAG,EAAE,YAAY;QACjB,YAAY,EAAE,UAAU;QACxB,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;KACnC,CAAC,CAAC;IAEH,mGAAmG;IACnG,MAAM,YAAY,GAAG,mBAAmB,CACtC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAC/D,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CACrF,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChD,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE;QAC7B,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE;QAC9D,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CACnE,CAAC;IAEF,MAAM,IAAI,GAAG,kBAAkB,CAAC;QAC9B,GAAG,EAAE,UAAU;QACf,YAAY,EAAE,kBAAkB;QAChC,IAAI,EAAE;YACJ;gBACE;oBACE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;oBACpC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ;oBAClC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;oBACpC,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;oBAC1B,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;iBACrC;aACF;YACD,IAAI,CAAC,KAAK;YACV,EAAE;YACF,YAAY;SACb;KACF,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACzD,CAAC;AAqBD;qGACqG;AACrG,MAAM,UAAU,cAAc,CAAC,IAAkB;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAE9D,KAAK,UAAU,MAAM,CAAC,KAA+E;QACnG,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QAC7C,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAErD,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;QAC7C,IAAI,cAAc,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QAEzH,MAAM,SAAS,GAAG,gBAAgB,CAAC;YACjC,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAChI,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,IAAI,GAAG,uBAAuB,CAAC;YACnC,OAAO;YACP,UAAU;YACV,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAmB,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;YACjF,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACvF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAe,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AAC1D,CAAC"}

package/dist/rails/x402/index.d.ts

@@ -0,0 +1,11 @@
+export type { PaymentResource, Hex32 } from './resource.js';
+export { ZERO_HASH, canonicalizePaymentResource, hashRequestBody, redactPaymentMetadata } from './resource.js';
+export type { PaymentQuote } from './quote.js';
+export { computeQuoteId, buildPaymentQuote, quoteMismatch, toCaip2, fromCaip2 } from './quote.js';
+export type { PaymentRequirements, PaymentRequiredBody, SettlementResponse, PaymentSignaturePayload } from './wire.js';
+export { X402_VERSION, HEADER_PAYMENT_REQUIRED, HEADER_PAYMENT_SIGNATURE, HEADER_PAYMENT_RESPONSE, ASSET_TRANSFER_METHOD, buildPaymentRequired, parsePaymentRequired, buildPaymentSignature, parsePaymentSignature, buildPaymentResponse, parsePaymentResponse, serializeMandate, deserializeMandate, } from './wire.js';
+export type { NonceReservationStore, NonceState, SettledReceipt, ReserveResult } from './nonce-store.js';
+export { createMemoryNonceStore } from './nonce-store.js';
+export type { X402RailConfig, X402RailDeps, SettleResult } from './executor.js';
+export { computeNullifier, verifyMandate, buildRedemptionCalldata, createX402Rail } from './executor.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/rails/x402/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/rails/x402/index.ts"],"names":[],"mappings":"AAGA,YAAY,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE/G,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAElG,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACvH,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAEnB,YAAY,EAAE,qBAAqB,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACzG,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC"}

package/dist/rails/x402/index.js

@@ -0,0 +1,8 @@
+// @agenticprimitives/payments — x402 rail (spec 272). HTTP-native pay-per-use over the spec-243
+// PaymentMandate. Consumed as `import { x402 } from '@agenticprimitives/payments'`.
+export { ZERO_HASH, canonicalizePaymentResource, hashRequestBody, redactPaymentMetadata } from './resource.js';
+export { computeQuoteId, buildPaymentQuote, quoteMismatch, toCaip2, fromCaip2 } from './quote.js';
+export { X402_VERSION, HEADER_PAYMENT_REQUIRED, HEADER_PAYMENT_SIGNATURE, HEADER_PAYMENT_RESPONSE, ASSET_TRANSFER_METHOD, buildPaymentRequired, parsePaymentRequired, buildPaymentSignature, parsePaymentSignature, buildPaymentResponse, parsePaymentResponse, serializeMandate, deserializeMandate, } from './wire.js';
+export { createMemoryNonceStore } from './nonce-store.js';
+export { computeNullifier, verifyMandate, buildRedemptionCalldata, createX402Rail } from './executor.js';
+//# sourceMappingURL=index.js.map

package/dist/rails/x402/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/rails/x402/index.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,oFAAoF;AAGpF,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAG/G,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGlG,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC"}

package/dist/rails/x402/nonce-store.d.ts

@@ -0,0 +1,30 @@
+import type { Hex32 } from './resource.js';
+export type NonceState = 'unseen' | 'reserved' | 'settling' | 'settled' | 'failed_retryable' | 'failed_terminal';
+export interface SettledReceipt {
+    settlementHash: Hex32;
+    mandateId: Hex32;
+}
+export type ReserveResult = {
+    ok: true;
+} | {
+    ok: false;
+    state: Exclude<NonceState, 'unseen'>;
+    receipt?: SettledReceipt;
+};
+export interface NonceReservationStore {
+    /** Atomically claim the nullifier. `unseen`/`failed_retryable` → reserved (ok). `settled` → not-ok
+     *  WITH the original receipt (safe-retry returns it). `reserved`/`settling`/`failed_terminal` →
+     *  not-ok (concurrent duplicate / permanently failed). */
+    reserve(nullifier: Hex32): Promise<ReserveResult>;
+    markSettling(nullifier: Hex32): Promise<void>;
+    markSettled(nullifier: Hex32, receipt: SettledReceipt): Promise<void>;
+    markFailed(nullifier: Hex32, retryable: boolean): Promise<void>;
+    get(nullifier: Hex32): Promise<{
+        state: NonceState;
+        receipt?: SettledReceipt;
+    } | undefined>;
+}
+/** In-memory store (single-worker / tests). A durable adapter (KV / D1) implements the same interface;
+ *  the reserve() must be ATOMIC there (compare-and-set) to actually block concurrent duplicates. */
+export declare function createMemoryNonceStore(): NonceReservationStore;
+//# sourceMappingURL=nonce-store.d.ts.map

package/dist/rails/x402/nonce-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce-store.d.ts","sourceRoot":"","sources":["../../../src/rails/x402/nonce-store.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAE3C,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,kBAAkB,GAAG,iBAAiB,CAAC;AAEjH,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,KAAK,CAAC;IACtB,SAAS,EAAE,KAAK,CAAC;CAClB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,cAAc,CAAA;CAAE,CAAC;AAElF,MAAM,WAAW,qBAAqB;IACpC;;8DAE0D;IAC1D,OAAO,CAAC,SAAS,EAAE,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAClD,YAAY,CAAC,SAAS,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,GAAG,CAAC,SAAS,EAAE,KAAK,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,OAAO,CAAC,EAAE,cAAc,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;CAC7F;AAOD;oGACoG;AACpG,wBAAgB,sBAAsB,IAAI,qBAAqB,CA0B9D"}

package/dist/rails/x402/nonce-store.js

@@ -0,0 +1,35 @@
+// Spec 272 PAY-RAIL-4/5 — the off-chain nullifier reservation store. A redeemed mandate/nonce cannot
+// settle twice (the on-chain nonce is the durable guard; this blocks concurrent duplicates + caches the
+// original receipt for safe retries). State machine: unseen → reserved → settling → settled |
+// failed_retryable | failed_terminal.
+/** In-memory store (single-worker / tests). A durable adapter (KV / D1) implements the same interface;
+ *  the reserve() must be ATOMIC there (compare-and-set) to actually block concurrent duplicates. */
+export function createMemoryNonceStore() {
+    const rows = new Map();
+    return {
+        async reserve(nullifier) {
+            const row = rows.get(nullifier);
+            if (!row || row.state === 'unseen' || row.state === 'failed_retryable') {
+                rows.set(nullifier, { state: 'reserved' });
+                return { ok: true };
+            }
+            if (row.state === 'settled')
+                return { ok: false, state: 'settled', receipt: row.receipt };
+            return { ok: false, state: row.state };
+        },
+        async markSettling(nullifier) {
+            const row = rows.get(nullifier) ?? { state: 'unseen' };
+            rows.set(nullifier, { ...row, state: 'settling' });
+        },
+        async markSettled(nullifier, receipt) {
+            rows.set(nullifier, { state: 'settled', receipt });
+        },
+        async markFailed(nullifier, retryable) {
+            rows.set(nullifier, { state: retryable ? 'failed_retryable' : 'failed_terminal' });
+        },
+        async get(nullifier) {
+            return rows.get(nullifier);
+        },
+    };
+}
+//# sourceMappingURL=nonce-store.js.map

package/dist/rails/x402/nonce-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce-store.js","sourceRoot":"","sources":["../../../src/rails/x402/nonce-store.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,wGAAwG;AACxG,8FAA8F;AAC9F,sCAAsC;AA+BtC;oGACoG;AACpG,MAAM,UAAU,sBAAsB;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAe,CAAC;IACpC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,SAAS;YACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;gBACvE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC3C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,SAAS;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACvD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO;YAClC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS;YACnC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,SAAS;YACjB,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/rails/x402/quote.d.ts

@@ -0,0 +1,41 @@
+import { type Address } from 'viem';
+import type { Hex32, PaymentResource } from './resource.js';
+/** A priced, bound, expiring offer for one access. `quoteId` is derived from the binding so two quotes
+ *  for the same request+price are identical and a tampered field changes the id (tamper-evident). */
+export interface PaymentQuote {
+    quoteId: Hex32;
+    scheme: 'exact';
+    network: string;
+    asset: Address;
+    payTo: Address;
+    amount: bigint;
+    resource: PaymentResource;
+    resourceHash: Hex32;
+    nonce: bigint;
+    expiresAt: number;
+    maxTimeoutSeconds: number;
+}
+/** Deterministic quote id over the binding + price + payee + nonce + expiry. Same inputs → same id;
+ *  any change (amount, payee, resource field, nonce, expiry) → different id (X402-D9 quote immutability). */
+export declare function computeQuoteId(args: {
+    resourceHash: Hex32;
+    asset: Address;
+    payTo: Address;
+    amount: bigint;
+    network: string;
+    nonce: bigint;
+    expiresAt: number;
+}): Hex32;
+/** Build a fully-formed, self-consistent PaymentQuote from a resource + price. */
+export declare function buildPaymentQuote(args: {
+    resource: PaymentResource;
+    network: string;
+    maxTimeoutSeconds?: number;
+}): PaymentQuote;
+/** X402-D9 quote immutability: a re-presented quote MUST match the persisted one on every field that
+ *  prices or binds the charge. Returns the first mismatch (for telemetry) or null when identical. */
+export declare function quoteMismatch(persisted: PaymentQuote, presented: PaymentQuote): string | null;
+/** CAIP-2 helpers (X402-D6 — wire uses `eip155:<id>`, never a bare chain number). */
+export declare function toCaip2(chainId: number): string;
+export declare function fromCaip2(network: string): number;
+//# sourceMappingURL=quote.d.ts.map

package/dist/rails/x402/quote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote.d.ts","sourceRoot":"","sources":["../../../src/rails/x402/quote.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkC,KAAK,OAAO,EAAE,MAAM,MAAM,CAAC;AACpE,OAAO,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAG5D;qGACqG;AACrG,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,EAAE,KAAK,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;6GAC6G;AAC7G,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,YAAY,EAAE,KAAK,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,KAAK,CAuBR;AAED,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,YAAY,CAyBf;AAED;qGACqG;AACrG,wBAAgB,aAAa,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,GAAG,MAAM,GAAG,IAAI,CAU7F;AAED,qFAAqF;AACrF,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/C;AACD,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAIjD"}

package/dist/rails/x402/quote.js

@@ -0,0 +1,84 @@
+// Spec 272 X402-D9.2 — the immutable PaymentQuote. The 402 carries it; the service persists
+// (taskId → quoteId → resourceHash → amount → payee) and a retry MUST match it. No silent re-pricing.
+import { encodeAbiParameters, keccak256 } from 'viem';
+import { canonicalizePaymentResource } from './resource.js';
+/** Deterministic quote id over the binding + price + payee + nonce + expiry. Same inputs → same id;
+ *  any change (amount, payee, resource field, nonce, expiry) → different id (X402-D9 quote immutability). */
+export function computeQuoteId(args) {
+    return keccak256(encodeAbiParameters([
+        { type: 'bytes32' },
+        { type: 'address' },
+        { type: 'address' },
+        { type: 'uint256' },
+        { type: 'string' },
+        { type: 'uint256' },
+        { type: 'uint256' },
+    ], [
+        args.resourceHash,
+        args.asset,
+        args.payTo,
+        args.amount,
+        args.network,
+        args.nonce,
+        BigInt(args.expiresAt),
+    ]));
+}
+/** Build a fully-formed, self-consistent PaymentQuote from a resource + price. */
+export function buildPaymentQuote(args) {
+    const { resource } = args;
+    const resourceHash = canonicalizePaymentResource(resource);
+    const quoteId = computeQuoteId({
+        resourceHash,
+        asset: resource.asset,
+        payTo: resource.treasury,
+        amount: resource.amount,
+        network: args.network,
+        nonce: resource.nonce,
+        expiresAt: resource.expiresAt,
+    });
+    return {
+        quoteId,
+        scheme: 'exact',
+        network: args.network,
+        asset: resource.asset,
+        payTo: resource.treasury,
+        amount: resource.amount,
+        resource,
+        resourceHash,
+        nonce: resource.nonce,
+        expiresAt: resource.expiresAt,
+        maxTimeoutSeconds: args.maxTimeoutSeconds ?? 300,
+    };
+}
+/** X402-D9 quote immutability: a re-presented quote MUST match the persisted one on every field that
+ *  prices or binds the charge. Returns the first mismatch (for telemetry) or null when identical. */
+export function quoteMismatch(persisted, presented) {
+    if (persisted.quoteId !== presented.quoteId)
+        return 'quoteId';
+    if (persisted.resourceHash !== presented.resourceHash)
+        return 'resourceHash';
+    if (persisted.amount !== presented.amount)
+        return 'amount';
+    if (persisted.payTo.toLowerCase() !== presented.payTo.toLowerCase())
+        return 'payTo';
+    if (persisted.asset.toLowerCase() !== presented.asset.toLowerCase())
+        return 'asset';
+    if (persisted.network !== presented.network)
+        return 'network';
+    if (persisted.nonce !== presented.nonce)
+        return 'nonce';
+    if (persisted.expiresAt !== presented.expiresAt)
+        return 'expiresAt';
+    return null;
+}
+/** CAIP-2 helpers (X402-D6 — wire uses `eip155:<id>`, never a bare chain number). */
+export function toCaip2(chainId) {
+    return `eip155:${chainId}`;
+}
+export function fromCaip2(network) {
+    const m = /^eip155:(\d+)$/.exec(network);
+    if (!m)
+        throw new Error(`[x402] unsupported network "${network}" (expected eip155:<chainId>)`);
+    return Number(m[1]);
+}
+//# sourceMappingURL=quote.js.map

package/dist/rails/x402/quote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote.js","sourceRoot":"","sources":["../../../src/rails/x402/quote.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,sGAAsG;AAEtG,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAgB,MAAM,MAAM,CAAC;AAEpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAkB5D;6GAC6G;AAC7G,MAAM,UAAU,cAAc,CAAC,IAQ9B;IACC,OAAO,SAAS,CACd,mBAAmB,CACjB;QACE,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;KACpB,EACD;QACE,IAAI,CAAC,YAAY;QACjB,IAAI,CAAC,KAAK;QACV,IAAI,CAAC,KAAK;QACV,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,OAAO;QACZ,IAAI,CAAC,KAAK;QACV,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;KACvB,CACF,CACF,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,IAIjC;IACC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAC1B,MAAM,YAAY,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,cAAc,CAAC;QAC7B,YAAY;QACZ,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,KAAK,EAAE,QAAQ,CAAC,QAAQ;QACxB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,OAAO;QACL,OAAO;QACP,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,KAAK,EAAE,QAAQ,CAAC,QAAQ;QACxB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ;QACR,YAAY;QACZ,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,GAAG;KACjD,CAAC;AACJ,CAAC;AAED;qGACqG;AACrG,MAAM,UAAU,aAAa,CAAC,SAAuB,EAAE,SAAuB;IAC5E,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC9D,IAAI,SAAS,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY;QAAE,OAAO,cAAc,CAAC;IAC7E,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC3D,IAAI,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,OAAO,CAAC;IACpF,IAAI,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,OAAO,CAAC;IACpF,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC9D,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC;IACxD,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;QAAE,OAAO,WAAW,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,OAAO,UAAU,OAAO,EAAE,CAAC;AAC7B,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,+BAA+B,CAAC,CAAC;IAC/F,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC"}

package/dist/rails/x402/resource.d.ts

@@ -0,0 +1,42 @@
+import { type Address } from 'viem';
+export type Hex32 = `0x${string}`;
+export declare const ZERO_HASH: Hex32;
+/** The full set of fields a payment is bound to. Hashing ALL of them (not just amount) closes
+ *  substitution/replay: a mandate signed for one (method,url,body,skill,treasury,asset,amount,chain,
+ *  expiry,nonce) cannot be replayed against a different request. */
+export interface PaymentResource {
+    protocol: 'http' | 'a2a';
+    method: string;
+    url: string;
+    bodyHash: Hex32;
+    serviceAgent: Address;
+    treasury: Address;
+    skillId: string;
+    taskId: Hex32;
+    asset: Address;
+    amount: bigint;
+    chainId: number;
+    expiresAt: number;
+    nonce: bigint;
+}
+/** keccak256 over an ABI-encoded canonical tuple of every binding field. Deterministic across HTTP +
+ *  A2A. NOTE: `quoteId` is NOT an input here (it's derived FROM this hash — see quote.ts) to avoid a
+ *  circular dependency. */
+export declare function canonicalizePaymentResource(r: PaymentResource): Hex32;
+/** keccak256 of a request body (or ZERO_HASH for empty). The ONLY way bodies enter a binding. */
+export declare function hashRequestBody(body: Uint8Array | string | undefined): Hex32;
+/**
+ * PAY-WIRE-6 — strip everything that must never leave the trust boundary in payment metadata (402
+ * bodies, receipts, on-chain events, accepts[] extras): licensed text, user queries, PII, full
+ * sensitive URLs. Returns a safe projection: the path WITHOUT query string + a hash of the full URL.
+ * A platform-level guarantee, not per-app discipline.
+ */
+export declare function redactPaymentMetadata(input: {
+    url?: string;
+    description?: string;
+}): {
+    safeRoute: string;
+    urlHash: Hex32;
+    description?: string;
+};
+//# sourceMappingURL=resource.d.ts.map

package/dist/rails/x402/resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.d.ts","sourceRoot":"","sources":["../../../src/rails/x402/resource.ts"],"names":[],"mappings":"AAIA,OAAO,EAAkC,KAAK,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpE,MAAM,MAAM,KAAK,GAAG,KAAK,MAAM,EAAE,CAAC;AAClC,eAAO,MAAM,SAAS,EAAE,KAA4E,CAAC;AAErG;;oEAEoE;AACpE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,GAAG,KAAK,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,KAAK,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,KAAK,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;2BAE2B;AAC3B,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,eAAe,GAAG,KAAK,CAmCrE;AAED,iGAAiG;AACjG,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,CAI5E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAgB9D"}

package/dist/rails/x402/resource.js

@@ -0,0 +1,71 @@
+// Spec 272 PAY-WIRE-5/6 — the resource binding (the security-critical object: bind the payment to the
+// EXACT request, not just the amount) + metadata redaction. ONE shared canonicalizer for HTTP + A2A so
+// workers never hand-roll URL/body hashing.
+import { encodeAbiParameters, keccak256 } from 'viem';
+export const ZERO_HASH = '0x0000000000000000000000000000000000000000000000000000000000000000';
+/** keccak256 over an ABI-encoded canonical tuple of every binding field. Deterministic across HTTP +
+ *  A2A. NOTE: `quoteId` is NOT an input here (it's derived FROM this hash — see quote.ts) to avoid a
+ *  circular dependency. */
+export function canonicalizePaymentResource(r) {
+    return keccak256(encodeAbiParameters([
+        { type: 'string' }, // protocol
+        { type: 'string' }, // method
+        { type: 'string' }, // url
+        { type: 'bytes32' }, // bodyHash
+        { type: 'address' }, // serviceAgent
+        { type: 'address' }, // treasury
+        { type: 'string' }, // skillId
+        { type: 'bytes32' }, // taskId
+        { type: 'address' }, // asset
+        { type: 'uint256' }, // amount
+        { type: 'uint256' }, // chainId
+        { type: 'uint256' }, // expiresAt
+        { type: 'uint256' }, // nonce
+    ], [
+        r.protocol,
+        r.method,
+        r.url,
+        r.bodyHash,
+        r.serviceAgent,
+        r.treasury,
+        r.skillId,
+        r.taskId,
+        r.asset,
+        r.amount,
+        BigInt(r.chainId),
+        BigInt(r.expiresAt),
+        r.nonce,
+    ]));
+}
+/** keccak256 of a request body (or ZERO_HASH for empty). The ONLY way bodies enter a binding. */
+export function hashRequestBody(body) {
+    if (body === undefined || body.length === 0)
+        return ZERO_HASH;
+    const bytes = typeof body === 'string' ? new TextEncoder().encode(body) : body;
+    return keccak256(bytes);
+}
+/**
+ * PAY-WIRE-6 — strip everything that must never leave the trust boundary in payment metadata (402
+ * bodies, receipts, on-chain events, accepts[] extras): licensed text, user queries, PII, full
+ * sensitive URLs. Returns a safe projection: the path WITHOUT query string + a hash of the full URL.
+ * A platform-level guarantee, not per-app discipline.
+ */
+export function redactPaymentMetadata(input) {
+    let safeRoute = '';
+    let urlHash = ZERO_HASH;
+    if (input.url) {
+        urlHash = keccak256(new TextEncoder().encode(input.url));
+        try {
+            const u = new URL(input.url);
+            safeRoute = `${u.origin}${u.pathname}`; // drop query + fragment (may carry the user's query/content)
+        }
+        catch {
+            safeRoute = '';
+        }
+    }
+    // A description is allowed ONLY if it's a generic label; callers must not pass licensed text. We pass
+    // it through verbatim but truncate to discourage smuggling licensed content into "description".
+    const description = input.description ? input.description.slice(0, 80) : undefined;
+    return { safeRoute, urlHash, description };
+}
+//# sourceMappingURL=resource.js.map

package/dist/rails/x402/resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.js","sourceRoot":"","sources":["../../../src/rails/x402/resource.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,uGAAuG;AACvG,4CAA4C;AAE5C,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAgB,MAAM,MAAM,CAAC;AAGpE,MAAM,CAAC,MAAM,SAAS,GAAU,oEAAoE,CAAC;AAqBrG;;2BAE2B;AAC3B,MAAM,UAAU,2BAA2B,CAAC,CAAkB;IAC5D,OAAO,SAAS,CACd,mBAAmB,CACjB;QACE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW;QAC/B,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,SAAS;QAC7B,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM;QAC1B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW;QAChC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,eAAe;QACpC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW;QAChC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,UAAU;QAC9B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS;QAC9B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ;QAC7B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS;QAC9B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,UAAU;QAC/B,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY;QACjC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ;KAC9B,EACD;QACE,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,MAAM;QACR,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QACjB,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACnB,CAAC,CAAC,KAAK;KACR,CACF,CACF,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,eAAe,CAAC,IAAqC;IACnE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAGrC;IACC,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,OAAO,GAAG,SAAS,CAAC;IACxB,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,GAAG,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7B,SAAS,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,6DAA6D;QACvG,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IACD,sGAAsG;IACtG,gGAAgG;IAChG,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAC7C,CAAC"}

package/dist/rails/x402/wire.d.ts

@@ -0,0 +1,81 @@
+import type { Address } from 'viem';
+import type { PaymentMandate } from '../../index.js';
+import type { Hex32 } from './resource.js';
+import type { PaymentQuote } from './quote.js';
+export declare const X402_VERSION: 2;
+export declare const HEADER_PAYMENT_REQUIRED = "PAYMENT-REQUIRED";
+export declare const HEADER_PAYMENT_SIGNATURE = "PAYMENT-SIGNATURE";
+export declare const HEADER_PAYMENT_RESPONSE = "PAYMENT-RESPONSE";
+export declare const ASSET_TRANSFER_METHOD: "erc7710-delegation";
+/** One x402 `accepts[]` entry — our delegation-native variant of `scheme: 'exact'`. */
+export interface PaymentRequirements {
+    scheme: 'exact';
+    network: string;
+    amount: string;
+    asset: Address;
+    payTo: Address;
+    maxTimeoutSeconds: number;
+    resource: {
+        route: string;
+        description?: string;
+        mimeType?: string;
+    };
+    extra: {
+        assetTransferMethod: typeof ASSET_TRANSFER_METHOD;
+        quoteId: Hex32;
+        mandateTemplate: {
+            resourceHash: Hex32;
+            nonce: string;
+            expiresAt: number;
+        };
+    };
+}
+export interface PaymentRequiredBody {
+    x402Version: typeof X402_VERSION;
+    error?: string;
+    accepts: PaymentRequirements[];
+}
+export interface SettlementResponse {
+    success: boolean;
+    settlementHash?: Hex32;
+    mandateId?: Hex32;
+    network: string;
+    payer?: Address;
+    error?: string;
+}
+export declare function serializeMandate(m: PaymentMandate): Record<string, unknown>;
+export declare function deserializeMandate(raw: unknown): PaymentMandate;
+export declare function buildPaymentRequired(quote: PaymentQuote, opts?: {
+    error?: string;
+    description?: string;
+    mimeType?: string;
+}): {
+    status: 402;
+    headers: Record<string, string>;
+    body: PaymentRequiredBody;
+};
+/** Client-side: decode a PAYMENT-REQUIRED header back to the body (for tests + the reader's agent). */
+export declare function parsePaymentRequired(headerValue: string): PaymentRequiredBody;
+export interface PaymentSignaturePayload {
+    x402Version: typeof X402_VERSION;
+    accepted: PaymentRequirements;
+    payload: {
+        mandate: PaymentMandate;
+    };
+}
+/** Build the PAYMENT-SIGNATURE header (client side). */
+export declare function buildPaymentSignature(accepted: PaymentRequirements, mandate: PaymentMandate): Record<string, string>;
+/**
+ * Server side: decode + validate the PAYMENT-SIGNATURE header. Fail-closed (returns null) on a missing
+ * header, an unknown x402Version, a non-'exact' scheme, or an unsupported assetTransferMethod. NO v1
+ * `X-PAYMENT` fallback (ADR-0013).
+ */
+export declare function parsePaymentSignature(headers: {
+    get?(name: string): string | null;
+} | Record<string, string | undefined>): {
+    accepted: PaymentRequirements;
+    mandate: PaymentMandate;
+} | null;
+export declare function buildPaymentResponse(r: SettlementResponse): Record<string, string>;
+export declare function parsePaymentResponse(headerValue: string): SettlementResponse;
+//# sourceMappingURL=wire.d.ts.map

package/dist/rails/x402/wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../../src/rails/x402/wire.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,eAAO,MAAM,YAAY,EAAG,CAAU,CAAC;AACvC,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAC1D,eAAO,MAAM,wBAAwB,sBAAsB,CAAC;AAC5D,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAC1D,eAAO,MAAM,qBAAqB,EAAG,oBAA6B,CAAC;AAEnE,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,KAAK,EAAE;QACL,mBAAmB,EAAE,OAAO,qBAAqB,CAAC;QAClD,OAAO,EAAE,KAAK,CAAC;QACf,eAAe,EAAE;YAAE,YAAY,EAAE,KAAK,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;KAC5E,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,OAAO,YAAY,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAaD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE3E;AACD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAoB/D;AAGD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,YAAY,EACnB,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,MAAM,EAAE,GAAG,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAkB7E;AAED,uGAAuG;AACvG,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,CAI7E;AAGD,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,OAAO,YAAY,CAAC;IACjC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,OAAO,EAAE;QAAE,OAAO,EAAE,cAAc,CAAA;KAAE,CAAC;CACtC;AAED,wDAAwD;AACxD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGpH;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE;IAAE,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAClF;IAAE,QAAQ,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GAAG,IAAI,CAcnE;AAGD,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAElF;AACD,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,CAE5E"}

package/dist/rails/x402/wire.js

@@ -0,0 +1,125 @@
+// Spec 272 PAY-WIRE-1/2/3 — x402 v2 HTTP wire. Headers: PAYMENT-REQUIRED (402) / PAYMENT-SIGNATURE
+// (client→server) / PAYMENT-RESPONSE (server→client), all base64 JSON, CAIP-2 networks, `accepts[]`
+// shape. The v1 `X-PAYMENT` names are dead — we never parse them (ADR-0013: one wire, fail-closed).
+export const X402_VERSION = 2;
+export const HEADER_PAYMENT_REQUIRED = 'PAYMENT-REQUIRED';
+export const HEADER_PAYMENT_SIGNATURE = 'PAYMENT-SIGNATURE';
+export const HEADER_PAYMENT_RESPONSE = 'PAYMENT-RESPONSE';
+export const ASSET_TRANSFER_METHOD = 'erc7710-delegation'; // Wave 1; 'eip3009' is the Wave-5 sibling
+// ── base64 JSON codec (bigint-safe) ──
+function b64encode(obj) {
+    const json = JSON.stringify(obj, (_k, v) => (typeof v === 'bigint' ? v.toString() : v));
+    return typeof btoa === 'function' ? btoa(json) : Buffer.from(json, 'utf8').toString('base64');
+}
+function b64decode(b64) {
+    const json = typeof atob === 'function' ? atob(b64) : Buffer.from(b64, 'base64').toString('utf8');
+    return JSON.parse(json);
+}
+// ── PaymentMandate wire (de)serialize — the bigint fields become decimal strings on the wire ──
+export function serializeMandate(m) {
+    return JSON.parse(JSON.stringify(m, (_k, v) => (typeof v === 'bigint' ? v.toString() : v)));
+}
+export function deserializeMandate(raw) {
+    const o = raw;
+    const ap = o.amountPolicy;
+    const cb = o.contextBinding;
+    const mc = o.mandateConstraints;
+    const big = (v) => BigInt(v);
+    return {
+        ...o,
+        nonce: big(o.nonce),
+        amountPolicy: {
+            ...ap,
+            ...(ap.amount !== undefined ? { amount: big(ap.amount) } : {}),
+            ...(ap.minAmount !== undefined ? { minAmount: big(ap.minAmount) } : {}),
+            ...(ap.maxAmount !== undefined ? { maxAmount: big(ap.maxAmount) } : {}),
+        },
+        contextBinding: { ...cb, nonce: big(cb.nonce) },
+        ...(mc && mc.maxAggregateAmount !== undefined
+            ? { mandateConstraints: { ...mc, maxAggregateAmount: big(mc.maxAggregateAmount) } }
+            : {}),
+    };
+}
+// ── PAY-WIRE-1: build the 402 ──
+export function buildPaymentRequired(quote, opts) {
+    const requirements = {
+        scheme: 'exact',
+        network: quote.network,
+        amount: quote.amount.toString(),
+        asset: quote.asset,
+        payTo: quote.payTo,
+        maxTimeoutSeconds: quote.maxTimeoutSeconds,
+        // safe route only (no query string) — PAY-WIRE-6
+        resource: { route: safeRoute(quote.resource.url), description: opts?.description, mimeType: opts?.mimeType },
+        extra: {
+            assetTransferMethod: ASSET_TRANSFER_METHOD,
+            quoteId: quote.quoteId,
+            mandateTemplate: { resourceHash: quote.resourceHash, nonce: quote.nonce.toString(), expiresAt: quote.expiresAt },
+        },
+    };
+    const body = { x402Version: X402_VERSION, error: opts?.error, accepts: [requirements] };
+    return { status: 402, headers: { [HEADER_PAYMENT_REQUIRED]: b64encode(body) }, body };
+}
+/** Client-side: decode a PAYMENT-REQUIRED header back to the body (for tests + the reader's agent). */
+export function parsePaymentRequired(headerValue) {
+    const body = b64decode(headerValue);
+    if (body.x402Version !== X402_VERSION)
+        throw new Error(`[x402] unsupported x402Version ${body.x402Version}`);
+    return body;
+}
+/** Build the PAYMENT-SIGNATURE header (client side). */
+export function buildPaymentSignature(accepted, mandate) {
+    const body = { x402Version: X402_VERSION, accepted, payload: { mandate: serializeMandate(mandate) } };
+    return { [HEADER_PAYMENT_SIGNATURE]: b64encode(body) };
+}
+/**
+ * Server side: decode + validate the PAYMENT-SIGNATURE header. Fail-closed (returns null) on a missing
+ * header, an unknown x402Version, a non-'exact' scheme, or an unsupported assetTransferMethod. NO v1
+ * `X-PAYMENT` fallback (ADR-0013).
+ */
+export function parsePaymentSignature(headers) {
+    const raw = headerValue(headers, HEADER_PAYMENT_SIGNATURE);
+    if (!raw)
+        return null;
+    let body;
+    try {
+        body = b64decode(raw);
+    }
+    catch {
+        return null;
+    }
+    if (body.x402Version !== X402_VERSION)
+        return null;
+    if (body.accepted?.scheme !== 'exact')
+        return null;
+    if (body.accepted?.extra?.assetTransferMethod !== ASSET_TRANSFER_METHOD)
+        return null;
+    if (!body.payload?.mandate)
+        return null;
+    return { accepted: body.accepted, mandate: deserializeMandate(body.payload.mandate) };
+}
+// ── PAY-WIRE-3: build the settlement response (a projection of the durable receipt) ──
+export function buildPaymentResponse(r) {
+    return { [HEADER_PAYMENT_RESPONSE]: b64encode(r) };
+}
+export function parsePaymentResponse(headerValue) {
+    return b64decode(headerValue);
+}
+// ── helpers ──
+function headerValue(headers, name) {
+    if (typeof headers.get === 'function') {
+        return headers.get(name) ?? undefined;
+    }
+    const rec = headers;
+    return rec[name] ?? rec[name.toLowerCase()];
+}
+function safeRoute(url) {
+    try {
+        const u = new URL(url);
+        return `${u.origin}${u.pathname}`;
+    }
+    catch {
+        return '';
+    }
+}
+//# sourceMappingURL=wire.js.map

package/dist/rails/x402/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../../src/rails/x402/wire.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,oGAAoG;AACpG,oGAAoG;AAOpG,MAAM,CAAC,MAAM,YAAY,GAAG,CAAU,CAAC;AACvC,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAC1D,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAC1D,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAA6B,CAAC,CAAC,0CAA0C;AAiC9G,wCAAwC;AACxC,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,OAAO,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAChG,CAAC;AACD,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,gBAAgB,CAAC,CAAiB;IAChD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,EAAE,GAAG,CAAC,CAAC,YAAuC,CAAC;IACrD,MAAM,EAAE,GAAG,CAAC,CAAC,cAAyC,CAAC;IACvD,MAAM,EAAE,GAAG,CAAC,CAAC,kBAAyD,CAAC;IACvE,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,MAAM,CAAC,CAA6B,CAAC,CAAC;IAC1E,OAAO;QACL,GAAI,CAAY;QAChB,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACnB,YAAY,EAAE;YACZ,GAAG,EAAE;YACL,GAAG,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE;QACD,cAAc,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE;QAC/C,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,kBAAkB,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,GAAG,EAAE,EAAE,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE;YACnF,CAAC,CAAC,EAAE,CAAC;KACU,CAAC;AACtB,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,oBAAoB,CAClC,KAAmB,EACnB,IAAkE;IAElE,MAAM,YAAY,GAAwB;QACxC,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;QAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,iDAAiD;QACjD,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC5G,KAAK,EAAE;YACL,mBAAmB,EAAE,qBAAqB;YAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,eAAe,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;SACjH;KACF,CAAC;IACF,MAAM,IAAI,GAAwB,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;IAC7G,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;AACxF,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAwB,CAAC;IAC3D,IAAI,IAAI,CAAC,WAAW,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7G,OAAO,IAAI,CAAC;AACd,CAAC;AASD,wDAAwD;AACxD,MAAM,UAAU,qBAAqB,CAAC,QAA6B,EAAE,OAAuB;IAC1F,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IACtG,OAAO,EAAE,CAAC,wBAAwB,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAmF;IAEnF,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,GAAG,CAA4B,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,mBAAmB,KAAK,qBAAqB;QAAE,OAAO,IAAI,CAAC;IACrF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,oBAAoB,CAAC,CAAqB;IACxD,OAAO,EAAE,CAAC,uBAAuB,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,SAAS,CAAC,WAAW,CAAuB,CAAC;AACtD,CAAC;AAED,gBAAgB;AAChB,SAAS,WAAW,CAClB,OAAmF,EACnF,IAAY;IAEZ,IAAI,OAAQ,OAA6B,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAC7D,OAAQ,OAA6C,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;IAC/E,CAAC;IACD,MAAM,GAAG,GAAG,OAA6C,CAAC;IAC1D,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9C,CAAC;AACD,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticprimitives/payments",
-  "version": "0.0.0-alpha.3",
+  "version": "0.0.0-alpha.4",
   "description": "PaymentMandate + ContextBinding + MandateConstraints + open/closed mode discrimination. Three W1 rails (x402, wallet, sponsored-userop). PaymentReceipt asserted into AttestationRegistry per ADR-0023.",
   "license": "MIT",
   "repository": {
@@ -44,10 +44,10 @@
   ],
   "dependencies": {
     "@noble/hashes": "^2.2.0",
-    "@agenticprimitives/attestations": "0.0.0-alpha.3",
-    "@agenticprimitives/delegation": "1.0.0-alpha.7",
-    "@agenticprimitives/verifiable-credentials": "0.0.0-alpha.3",
-    "@agenticprimitives/types": "1.0.0-alpha.7"
+    "@agenticprimitives/attestations": "0.0.0-alpha.4",
+    "@agenticprimitives/types": "1.0.0-alpha.8",
+    "@agenticprimitives/delegation": "1.0.0-alpha.8",
+    "@agenticprimitives/verifiable-credentials": "0.0.0-alpha.4"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",