@agenticprimitives/payments 0.0.0-alpha.41 → 0.0.0-alpha.43

package/dist/split.d.ts

@@ -5,9 +5,13 @@
  * pattern). `bps` MUST sum to 10000; the rounding remainder is assigned to the first recipient
  * so the legs total EXACTLY `amount` (no dust left in the treasury). Each leg is its own
  * transfer plan (and its own receipt). Connected-account onboarding / KYB stays app layer.
+ *
+ * Spec 445 / ontology ONT-4: the paying treasury (`payer`) and every recipient must be treasuries; a person or
+ * organization recipient is refused (`isTreasury`, REQUIRED).
  */
 import type { Address } from '@agenticprimitives/types';
 import { type TransferPlan } from './transfer.js';
+import { type TreasuryPort } from './treasury.js';
 export interface SplitRecipient {
     to: Address;
     bps: number;
@@ -22,6 +26,7 @@ export declare const BPS_DENOMINATOR = 10000;
 export declare function buildSplitPayout(input: {
     asset: Address;
     amount: bigint;
-    recipients: SplitRecipient[];
-}): SplitLeg[];
+    recipients: SplitRecipient[]; /** the paying treasury that executes every leg */
+    payer: Address;
+}, deps: TreasuryPort): Promise<SplitLeg[]>;
 //# sourceMappingURL=split.d.ts.map

package/dist/split.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"split.d.ts","sourceRoot":"","sources":["../src/split.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAEtE,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,cAAc,EAAE,CAAA;CAAE,GAAG,QAAQ,EAAE,CAkBpH"}
+{"version":3,"file":"split.d.ts","sourceRoot":"","sources":["../src/split.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAyB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAEzE,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC,wBAAsB,gBAAgB,CACpC,KAAK,EAAE;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,kDAAkD;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,EAC1I,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAmBrB"}

package/dist/split.js

@@ -5,10 +5,14 @@
  * pattern). `bps` MUST sum to 10000; the rounding remainder is assigned to the first recipient
  * so the legs total EXACTLY `amount` (no dust left in the treasury). Each leg is its own
  * transfer plan (and its own receipt). Connected-account onboarding / KYB stays app layer.
+ *
+ * Spec 445 / ontology ONT-4: the paying treasury (`payer`) and every recipient must be treasuries; a person or
+ * organization recipient is refused (`isTreasury`, REQUIRED).
  */
-import { buildErc20Transfer } from './transfer.js';
+import { encodeErc20Transfer } from './transfer.js';
+import { assertTreasuryParties } from './treasury.js';
 export const BPS_DENOMINATOR = 10_000;
-export function buildSplitPayout(input) {
+export async function buildSplitPayout(input, deps) {
     const { asset, amount, recipients } = input;
     if (recipients.length === 0)
         throw new Error('[split] at least one recipient required');
@@ -20,6 +24,7 @@ export function buildSplitPayout(input) {
     for (const r of recipients)
         if (r.bps <= 0)
             throw new Error('[split] each recipient bps must be > 0');
+    await assertTreasuryParties(deps, { payers: [input.payer], payees: recipients.map((r) => r.to) });
     const amounts = recipients.map((r) => (amount * BigInt(r.bps)) / BigInt(BPS_DENOMINATOR));
     const remainder = amount - amounts.reduce((s, a) => s + a, 0n);
     amounts[0] += remainder; // assign rounding dust to the first recipient → legs total exactly `amount`
@@ -27,7 +32,7 @@ export function buildSplitPayout(input) {
         to: r.to,
         bps: r.bps,
         amount: amounts[i],
-        plan: buildErc20Transfer(asset, r.to, amounts[i]),
+        plan: encodeErc20Transfer(asset, r.to, amounts[i]),
     }));
 }
 //# sourceMappingURL=split.js.map

package/dist/split.js.map

@@ -1 +1 @@
-{"version":3,"file":"split.js","sourceRoot":"","sources":["../src/split.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,kBAAkB,EAAqB,MAAM,eAAe,CAAC;AActE,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAEtC,MAAM,UAAU,gBAAgB,CAAC,KAAuE;IACtG,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC5C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACxF,IAAI,MAAM,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,eAAe,SAAS,QAAQ,EAAE,CAAC,CAAC;IACjH,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAEtG,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,CAAC,CAAE,IAAI,SAAS,CAAC,CAAC,4EAA4E;IAEtG,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/B,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE;QACnB,IAAI,EAAE,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC;KACnD,CAAC,CAAC,CAAC;AACN,CAAC"}
+{"version":3,"file":"split.js","sourceRoot":"","sources":["../src/split.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,mBAAmB,EAAqB,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAqB,MAAM,eAAe,CAAC;AAczE,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAEtC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAA0I,EAC1I,IAAkB;IAElB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC5C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACxF,IAAI,MAAM,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,eAAe,SAAS,QAAQ,EAAE,CAAC,CAAC;IACjH,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACtG,MAAM,qBAAqB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAElG,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,CAAC,CAAE,IAAI,SAAS,CAAC,CAAC,4EAA4E;IAEtG,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/B,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE;QACnB,IAAI,EAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC;KACpD,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/transfer.d.ts

@@ -4,9 +4,15 @@
  * A `TransferPlan` is the inner call an SA executes (`AgentAccount.execute(to, value, data)`
  * or a UserOp / wallet tx) — the same `{to, value, data}` shape the x402 rail's
  * `buildRedemptionCalldata` returns. Wallet / invoice / refund / split all reduce to one or
- * more ERC-20 transfers from the payer or treasury SA.
+ * more ERC-20 transfers from the paying TREASURY SA into the receiving TREASURY SA.
+ *
+ * Spec 445 / ontology ONT-4: assets live only in treasuries (`appr:ValueHolder ≡ ap:Treasury`). The exported
+ * planners take the payer and payee and the REQUIRED `isTreasury` port, and refuse a person or organization
+ * address on either side. The bare encoders below (`encodeErc20Transfer`, `encodeNativeTransfer`) are
+ * package-internal: every caller has already checked both parties.
  */
 import { type Address, type Hex } from 'viem';
+import { type TreasuryPort } from './treasury.js';
 export interface TransferPlan {
     to: Address;
     value: bigint;
@@ -27,10 +33,23 @@ export declare const ERC20_TRANSFER_ABI: readonly [{
         readonly type: "bool";
     }];
 }];
-/** A single ERC-20 transfer: the executing SA calls `asset.transfer(to, amount)`. */
-export declare function buildErc20Transfer(asset: Address, to: Address, amount: bigint): TransferPlan;
-/** A native-value transfer (the executing SA sends `amount` wei to `to`). */
-export declare function buildNativeTransfer(to: Address, amount: bigint): TransferPlan;
+/** Package-internal: encode `asset.transfer(to, amount)`. Parties MUST already be checked. Not exported from the root. */
+export declare function encodeErc20Transfer(asset: Address, to: Address, amount: bigint): TransferPlan;
+/** Package-internal: encode a native-value send. Parties MUST already be checked. Not exported from the root. */
+export declare function encodeNativeTransfer(to: Address, amount: bigint): TransferPlan;
+export interface TreasuryTransferInput {
+    /** the paying treasury — the SA that executes the plan */
+    payer: Address;
+    /** the receiving treasury */
+    payee: Address;
+    amount: bigint;
+}
+/** A single ERC-20 transfer treasury → treasury: the paying treasury calls `asset.transfer(payee, amount)`. */
+export declare function buildErc20Transfer(input: TreasuryTransferInput & {
+    asset: Address;
+}, deps: TreasuryPort): Promise<TransferPlan>;
+/** A native-value transfer treasury → treasury (the paying treasury sends `amount` wei to the payee). */
+export declare function buildNativeTransfer(input: TreasuryTransferInput, deps: TreasuryPort): Promise<TransferPlan>;
 export declare const ERC20_APPROVE_ABI: readonly [{
     readonly type: "function";
     readonly name: "approve";

package/dist/transfer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transfer.d.ts","sourceRoot":"","sources":["../src/transfer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAsB,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAElE,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,GAAG,CAAC;CACX;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;EAWrB,CAAC;AAEX,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAM5F;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAE7E;AAED,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;EAWpB,CAAC;AAEX,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAMhG"}
+{"version":3,"file":"transfer.d.ts","sourceRoot":"","sources":["../src/transfer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAsB,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAClE,OAAO,EAAyB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAEzE,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,GAAG,CAAC;CACX;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;EAWrB,CAAC;AAEX,0HAA0H;AAC1H,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAM7F;AAED,iHAAiH;AACjH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAE9E;AAED,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,KAAK,EAAE,OAAO,CAAC;IACf,6BAA6B;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,+GAA+G;AAC/G,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,qBAAqB,GAAG;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAGrI;AAED,yGAAyG;AACzG,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAGjH;AAED,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;EAWpB,CAAC;AAEX,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAMhG"}

package/dist/transfer.js

@@ -4,9 +4,15 @@
  * A `TransferPlan` is the inner call an SA executes (`AgentAccount.execute(to, value, data)`
  * or a UserOp / wallet tx) — the same `{to, value, data}` shape the x402 rail's
  * `buildRedemptionCalldata` returns. Wallet / invoice / refund / split all reduce to one or
- * more ERC-20 transfers from the payer or treasury SA.
+ * more ERC-20 transfers from the paying TREASURY SA into the receiving TREASURY SA.
+ *
+ * Spec 445 / ontology ONT-4: assets live only in treasuries (`appr:ValueHolder ≡ ap:Treasury`). The exported
+ * planners take the payer and payee and the REQUIRED `isTreasury` port, and refuse a person or organization
+ * address on either side. The bare encoders below (`encodeErc20Transfer`, `encodeNativeTransfer`) are
+ * package-internal: every caller has already checked both parties.
  */
 import { encodeFunctionData } from 'viem';
+import { assertTreasuryParties } from './treasury.js';
 export const ERC20_TRANSFER_ABI = [
     {
         type: 'function',
@@ -19,18 +25,28 @@ export const ERC20_TRANSFER_ABI = [
         outputs: [{ type: 'bool' }],
     },
 ];
-/** A single ERC-20 transfer: the executing SA calls `asset.transfer(to, amount)`. */
-export function buildErc20Transfer(asset, to, amount) {
+/** Package-internal: encode `asset.transfer(to, amount)`. Parties MUST already be checked. Not exported from the root. */
+export function encodeErc20Transfer(asset, to, amount) {
     return {
         to: asset,
         value: 0n,
         data: encodeFunctionData({ abi: ERC20_TRANSFER_ABI, functionName: 'transfer', args: [to, amount] }),
     };
 }
-/** A native-value transfer (the executing SA sends `amount` wei to `to`). */
-export function buildNativeTransfer(to, amount) {
+/** Package-internal: encode a native-value send. Parties MUST already be checked. Not exported from the root. */
+export function encodeNativeTransfer(to, amount) {
     return { to, value: amount, data: '0x' };
 }
+/** A single ERC-20 transfer treasury → treasury: the paying treasury calls `asset.transfer(payee, amount)`. */
+export async function buildErc20Transfer(input, deps) {
+    await assertTreasuryParties(deps, { payers: [input.payer], payees: [input.payee] });
+    return encodeErc20Transfer(input.asset, input.payee, input.amount);
+}
+/** A native-value transfer treasury → treasury (the paying treasury sends `amount` wei to the payee). */
+export async function buildNativeTransfer(input, deps) {
+    await assertTreasuryParties(deps, { payers: [input.payer], payees: [input.payee] });
+    return encodeNativeTransfer(input.payee, input.amount);
+}
 export const ERC20_APPROVE_ABI = [
     {
         type: 'function',

package/dist/transfer.js.map

@@ -1 +1 @@
-{"version":3,"file":"transfer.js","sourceRoot":"","sources":["../src/transfer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,kBAAkB,EAA0B,MAAM,MAAM,CAAC;AAQlE,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,UAAU;QAChB,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;YAC/B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACpC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KAC5B;CACO,CAAC;AAEX,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,EAAW,EAAE,MAAc;IAC5E,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;KACpG,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,EAAW,EAAE,MAAc;IAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,SAAS;QACf,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;YACpC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACpC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KAC5B;CACO,CAAC;AAEX,8FAA8F;AAC9F,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,OAAgB,EAAE,MAAc;IAChF,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;KACvG,CAAC;AACJ,CAAC"}
+{"version":3,"file":"transfer.js","sourceRoot":"","sources":["../src/transfer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,kBAAkB,EAA0B,MAAM,MAAM,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAqB,MAAM,eAAe,CAAC;AAQzE,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,UAAU;QAChB,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;YAC/B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACpC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KAC5B;CACO,CAAC;AAEX,0HAA0H;AAC1H,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,EAAW,EAAE,MAAc;IAC7E,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;KACpG,CAAC;AACJ,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,oBAAoB,CAAC,EAAW,EAAE,MAAc;IAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAUD,+GAA+G;AAC/G,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAiD,EAAE,IAAkB;IAC5G,MAAM,qBAAqB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpF,OAAO,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AACrE,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAA4B,EAAE,IAAkB;IACxF,MAAM,qBAAqB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpF,OAAO,oBAAoB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,SAAS;QACf,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;YACpC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACpC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KAC5B;CACO,CAAC;AAEX,8FAA8F;AAC9F,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,OAAgB,EAAE,MAAc;IAChF,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;KACvG,CAAC;AACJ,CAAC"}

package/dist/treasury.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Value moves treasury → treasury (spec 420 / spec 445, ontology ONT-4).
+ *
+ * Assets live ONLY in treasuries: `appr:ValueHolder ≡ ap:Treasury`, and `appay:payer` / `appay:payee` /
+ * `ap:primaryPayer` / `ap:primaryPayee` range over `ap:Treasury`. A balance on a person or organization agent
+ * is ignored and is never paid from or into. Every payments entry point that accepts a payer or payee for a
+ * value move asks this port about each party and refuses a non-treasury with a distinct reason.
+ *
+ * The package does NOT read the chain: `isTreasury` is INJECTED. The app answers it from the agent's on-chain
+ * type record (`atl:agentType` = `treasury` on the SA subject, AgentProfileResolver) — never from a name suffix,
+ * a profile string or a guess. The port is REQUIRED; a missing port refuses (fail closed, ADR-0013), and a port
+ * that throws refuses the move rather than proceeding.
+ */
+import type { Address } from '@agenticprimitives/types';
+/** Is this address a treasury agent? Answered by the app from the on-chain type record. */
+export type IsTreasury = (address: Address) => Promise<boolean>;
+/** The deps every value-move entry point takes. `isTreasury` is REQUIRED. */
+export interface TreasuryPort {
+    isTreasury: IsTreasury;
+}
+export type TreasuryRefusalCode = 'PAYER_NOT_TREASURY' | 'PAYEE_NOT_TREASURY' | 'TREASURY_PORT_MISSING';
+export declare const TREASURY_REFUSAL_REASON: Record<TreasuryRefusalCode, string>;
+export type TreasuryCheck = {
+    ok: true;
+} | {
+    ok: false;
+    code: TreasuryRefusalCode;
+    reason: string;
+    address?: Address;
+};
+/** Thrown by the synchronous-shaped builders when a party is not a treasury. `code` is the distinct reason. */
+export declare class NotATreasuryError extends Error {
+    readonly code: TreasuryRefusalCode;
+    readonly address?: Address;
+    constructor(code: TreasuryRefusalCode, address?: Address);
+}
+/**
+ * Ask the port about every named party. Payers are checked first, then payees; the first refusal wins.
+ * A port that is absent or throws is a refusal, never a pass.
+ */
+export declare function checkTreasuryParties(deps: Partial<TreasuryPort> | undefined, parties: {
+    payers?: readonly Address[];
+    payees?: readonly Address[];
+}): Promise<TreasuryCheck>;
+/** `checkTreasuryParties`, throwing `NotATreasuryError` on refusal. */
+export declare function assertTreasuryParties(deps: Partial<TreasuryPort> | undefined, parties: {
+    payers?: readonly Address[];
+    payees?: readonly Address[];
+}): Promise<void>;
+//# sourceMappingURL=treasury.d.ts.map

package/dist/treasury.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"treasury.d.ts","sourceRoot":"","sources":["../src/treasury.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAExD,2FAA2F;AAC3F,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEhE,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG,oBAAoB,GAAG,uBAAuB,CAAC;AAExG,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAIvE,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAEvH,+GAA+G;AAC/G,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBACf,IAAI,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,OAAO;CAMzD;AASD;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,SAAS,EACvC,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;CAAE,GACpE,OAAO,CAAC,aAAa,CAAC,CAkBxB;AAED,uEAAuE;AACvE,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,SAAS,EACvC,OAAO,EAAE;IAAE,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;CAAE,GACpE,OAAO,CAAC,IAAI,CAAC,CAGf"}

package/dist/treasury.js

@@ -0,0 +1,68 @@
+/**
+ * Value moves treasury → treasury (spec 420 / spec 445, ontology ONT-4).
+ *
+ * Assets live ONLY in treasuries: `appr:ValueHolder ≡ ap:Treasury`, and `appay:payer` / `appay:payee` /
+ * `ap:primaryPayer` / `ap:primaryPayee` range over `ap:Treasury`. A balance on a person or organization agent
+ * is ignored and is never paid from or into. Every payments entry point that accepts a payer or payee for a
+ * value move asks this port about each party and refuses a non-treasury with a distinct reason.
+ *
+ * The package does NOT read the chain: `isTreasury` is INJECTED. The app answers it from the agent's on-chain
+ * type record (`atl:agentType` = `treasury` on the SA subject, AgentProfileResolver) — never from a name suffix,
+ * a profile string or a guess. The port is REQUIRED; a missing port refuses (fail closed, ADR-0013), and a port
+ * that throws refuses the move rather than proceeding.
+ */
+export const TREASURY_REFUSAL_REASON = {
+    PAYER_NOT_TREASURY: 'payer is not a treasury — value moves only from a treasury (ap:Treasury)',
+    PAYEE_NOT_TREASURY: 'payee is not a treasury — value moves only into a treasury (ap:Treasury)',
+    TREASURY_PORT_MISSING: 'no isTreasury port — a value move cannot be checked, so it is refused',
+};
+/** Thrown by the synchronous-shaped builders when a party is not a treasury. `code` is the distinct reason. */
+export class NotATreasuryError extends Error {
+    code;
+    address;
+    constructor(code, address) {
+        super(`[payments/treasury] ${TREASURY_REFUSAL_REASON[code]}${address ? ` (${address})` : ''}`);
+        this.name = 'NotATreasuryError';
+        this.code = code;
+        this.address = address;
+    }
+}
+const refuse = (code, address) => ({
+    ok: false,
+    code,
+    reason: TREASURY_REFUSAL_REASON[code],
+    ...(address ? { address } : {}),
+});
+/**
+ * Ask the port about every named party. Payers are checked first, then payees; the first refusal wins.
+ * A port that is absent or throws is a refusal, never a pass.
+ */
+export async function checkTreasuryParties(deps, parties) {
+    const isTreasury = deps?.isTreasury;
+    if (typeof isTreasury !== 'function')
+        return refuse('TREASURY_PORT_MISSING');
+    for (const [list, code] of [
+        [parties.payers ?? [], 'PAYER_NOT_TREASURY'],
+        [parties.payees ?? [], 'PAYEE_NOT_TREASURY'],
+    ]) {
+        for (const address of list) {
+            let yes = false;
+            try {
+                yes = (await isTreasury(address)) === true;
+            }
+            catch {
+                yes = false;
+            }
+            if (!yes)
+                return refuse(code, address);
+        }
+    }
+    return { ok: true };
+}
+/** `checkTreasuryParties`, throwing `NotATreasuryError` on refusal. */
+export async function assertTreasuryParties(deps, parties) {
+    const c = await checkTreasuryParties(deps, parties);
+    if (!c.ok)
+        throw new NotATreasuryError(c.code, c.address);
+}
+//# sourceMappingURL=treasury.js.map

package/dist/treasury.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"treasury.js","sourceRoot":"","sources":["../src/treasury.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAcH,MAAM,CAAC,MAAM,uBAAuB,GAAwC;IAC1E,kBAAkB,EAAE,0EAA0E;IAC9F,kBAAkB,EAAE,0EAA0E;IAC9F,qBAAqB,EAAE,uEAAuE;CAC/F,CAAC;AAIF,+GAA+G;AAC/G,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAsB;IAC1B,OAAO,CAAW;IAC3B,YAAY,IAAyB,EAAE,OAAiB;QACtD,KAAK,CAAC,uBAAuB,uBAAuB,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,MAAM,MAAM,GAAG,CAAC,IAAyB,EAAE,OAAiB,EAAiB,EAAE,CAAC,CAAC;IAC/E,EAAE,EAAE,KAAK;IACT,IAAI;IACJ,MAAM,EAAE,uBAAuB,CAAC,IAAI,CAAC;IACrC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAChC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAuC,EACvC,OAAqE;IAErE,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,CAAC;IACpC,IAAI,OAAO,UAAU,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAC7E,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI;QACzB,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,oBAAoB,CAAC;QAC5C,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,oBAAoB,CAAC;KACpC,EAAE,CAAC;QACX,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YAC3B,IAAI,GAAG,GAAG,KAAK,CAAC;YAChB,IAAI,CAAC;gBACH,GAAG,GAAG,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,GAAG,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC,GAAG;gBAAE,OAAO,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAuC,EACvC,OAAqE;IAErE,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;AAC5D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticprimitives/payments",
-  "version": "0.0.0-alpha.41",
+  "version": "0.0.0-alpha.43",
   "description": "PaymentMandate + ContextBinding + MandateConstraints + open/closed mode discrimination. Three W1 rails (x402, wallet, sponsored-userop). PaymentReceipt asserted into AttestationRegistry per ADR-0023.",
   "homepage": "https://agenticprimitives.dev",
   "bugs": {
@@ -54,10 +54,10 @@
   "dependencies": {
     "@noble/hashes": "^2.2.0",
     "@noble/curves": "^2.2.0",
-    "@agenticprimitives/attestations": "0.0.0-alpha.41",
-    "@agenticprimitives/delegation": "1.0.0-alpha.45",
-    "@agenticprimitives/types": "1.0.0-alpha.45",
-    "@agenticprimitives/verifiable-credentials": "0.0.0-alpha.42"
+    "@agenticprimitives/attestations": "0.0.0-alpha.43",
+    "@agenticprimitives/delegation": "1.0.0-alpha.47",
+    "@agenticprimitives/types": "1.0.0-alpha.47",
+    "@agenticprimitives/verifiable-credentials": "0.0.0-alpha.44"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",