@agentpos/rail-arc 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,76 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# @agentpos/rail-arc
+
+AgentPOS payment rail for **Arc**, Circle's L1: x402 checkout in USDC, settled by the **Circle
+Facilitator Service** straight to the merchant's own Arc wallet. AgentPOS never holds funds or
+keys and takes no commission; the merchant stays the merchant of record.
+
+It plugs into the open-source AgentPOS core
+([`@agentpos/core`](https://www.npmjs.com/package/@agentpos/core),
+[NovaCorpAI/agentpos](https://github.com/NovaCorpAI/agentpos)), which turns an existing store
+(WooCommerce today) into one AI agents can buy from.
+
+> **Testnet only for now.** Arc mainnet (`eip155:5042`) is defined here but stays locked in the
+> core until the Arc production gate passes. Use Arc testnet (`eip155:5042002`).
+
+## Install
+
+```bash
+npm install @agentpos/core @agentpos/rail-arc
+```
+
+Importing the package registers both Arc networks with the core (pricing, address validation,
+wallet linking). Node >= 22.5.
+
+## Store side: offer Arc in the 402
+
+```ts
+import { createAgentPOSApp } from "@agentpos/site";
+import { ARC_TESTNET, arcStoreNetwork } from "@agentpos/rail-arc";
+
+const app = createAgentPOSApp({
+  // ...site, core, connector, storage
+  x402Networks: [
+    arcStoreNetwork(ARC_TESTNET, "0xMerchantArcWallet", {
+      url: process.env.AGENTPOS_ARC_FACILITATOR_URL!, // https://api.circle.com/v1/facilitator/x402
+      apiKey: process.env.AGENTPOS_ARC_FACILITATOR_API_KEY_TESTNET!, // console.circle.com
+    }),
+  ],
+});
+```
+
+The store keeps its own network and adds Arc next to it. The order is created only after the
+facilitator settles, idempotent by transaction hash. `arcStoreNetwork` also brings a read-only
+payment watcher that alerts on any USDC that reached the merchant's wallet without an order.
+
+## Buyer side: pay on Arc under the human's mandate
+
+```ts
+import { BuyerService } from "@agentpos/mcp-buyer";
+import { ARC_TESTNET, arcBuyerNetwork } from "@agentpos/rail-arc";
+
+// mandate: { "maxPerTx": "15", "maxTotal": "20", "allowedNetworks": ["eip155:5042002"] }
+const buyer = new BuyerService({ profile, networks: [arcBuyerNetwork(ARC_TESTNET, account)] });
+```
+
+The agent pays on Arc only when the mandate lists it, each payment is capped at the cart total
+converted exactly to Arc's 6-decimal USDC (a price Arc cannot represent is refused, never
+rounded), and the period limit adds up spending across every network.
+
+## What else is exported
+
+- `ARC_MAINNET`, `ARC_TESTNET`, `registerArcNetworks()`: the networks and their USDC.
+- `registerArcWalletProof()`: lets a merchant link an Arc wallet by signing a challenge
+  (EIP-191, ERC-1271 for smart accounts). No key ever reaches AgentPOS.
+- `arcResourceExtension`, `arcAccept`: lower-level x402 wiring for a custom server.
+- `createArcPaymentWatcher`: the reconciliation reader on its own.
+
+## Evidence
+
+Real purchases on Arc testnet through the Circle Facilitator Service, with the order created in
+WooCommerce only after settlement, are listed with their transaction hashes in the
+[repository README](https://github.com/NovaCorpAI/agentpos-arc#readme). A purchase also runs
+once a day in CI.
+
+## License
+
+Apache-2.0. Built by NovaCorpAI SpA, Santiago, Chile.

package/dist/buyer.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Arc for the AgentPOS buyer (`@agentpos/mcp-buyer`): the buyer's own Arc wallet as one more
+ * network its `BuyerService` can pay on. The mandate still decides: the network is used only
+ * when the human lists it in `allowedNetworks`, and every payment is capped at the cart total,
+ * converted exactly to Arc's 6 decimals, before anything is signed.
+ */
+import { ExactEvmScheme } from "@x402/evm/exact/client";
+import type { BuyerNetworkExtension, UsdcMinor } from "@agentpos/core";
+/** The buyer's own signer on Arc: a viem account, or a Circle agent wallet behind one. */
+export type ArcBuyerSigner = ConstructorParameters<typeof ExactEvmScheme>[0];
+/**
+ * Pass to `new BuyerService({ networks: [arcBuyerNetwork(ARC_TESTNET, account)] })`, or to the
+ * MCP server through `buildBuyerServer({ depsOverrides: { networks } })`. The key stays with
+ * the signer; this package never sees it.
+ */
+export declare function arcBuyerNetwork(network: string, signer: ArcBuyerSigner): (maxPerPayment: UsdcMinor) => BuyerNetworkExtension;
+//# sourceMappingURL=buyer.d.ts.map

package/dist/buyer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buyer.d.ts","sourceRoot":"","sources":["../src/buyer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGvE,0FAA0F;AAC1F,MAAM,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AAE7E;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,cAAc,GACrB,CAAC,aAAa,EAAE,SAAS,KAAK,qBAAqB,CAGrD"}

package/dist/buyer.js

@@ -0,0 +1,18 @@
+/**
+ * Arc for the AgentPOS buyer (`@agentpos/mcp-buyer`): the buyer's own Arc wallet as one more
+ * network its `BuyerService` can pay on. The mandate still decides: the network is used only
+ * when the human lists it in `allowedNetworks`, and every payment is capped at the cart total,
+ * converted exactly to Arc's 6 decimals, before anything is signed.
+ */
+import { ExactEvmScheme } from "@x402/evm/exact/client";
+import { arcBuyerExtension } from "./x402.js";
+/**
+ * Pass to `new BuyerService({ networks: [arcBuyerNetwork(ARC_TESTNET, account)] })`, or to the
+ * MCP server through `buildBuyerServer({ depsOverrides: { networks } })`. The key stays with
+ * the signer; this package never sees it.
+ */
+export function arcBuyerNetwork(network, signer) {
+    const client = new ExactEvmScheme(signer);
+    return (maxPerPayment) => arcBuyerExtension(network, client, maxPerPayment);
+}
+//# sourceMappingURL=buyer.js.map

package/dist/buyer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buyer.js","sourceRoot":"","sources":["../src/buyer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAK9C;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,MAAsB;IAEtB,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AAC9E,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./networks.js";
+export * from "./wallet-proof.js";
+export * from "./x402.js";
+export * from "./reconcile.js";
+export * from "./buyer.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAWA,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,15 @@
+/**
+ * @agentpos/rail-arc: AgentPOS checkout in USDC on Arc.
+ *
+ * Importing this package registers both Arc networks with @agentpos/core, so the core can
+ * price, validate addresses and link wallets on Arc. Call `registerArcWalletProof()` once at
+ * startup to verify merchant wallet links on Arc.
+ */
+import { registerArcNetworks } from "./networks.js";
+registerArcNetworks();
+export * from "./networks.js";
+export * from "./wallet-proof.js";
+export * from "./x402.js";
+export * from "./reconcile.js";
+export * from "./buyer.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,mBAAmB,EAAE,CAAC;AAEtB,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}

package/dist/networks.d.ts

@@ -0,0 +1,27 @@
+import type { ChainProfile } from "@agentpos/core";
+export declare const ARC_MAINNET: "eip155:5042";
+export declare const ARC_TESTNET: "eip155:5042002";
+export type ArcNetwork = typeof ARC_MAINNET | typeof ARC_TESTNET;
+/** USDC on Arc, same address on mainnet and testnet. ERC-20 interface, 6 decimals. */
+export declare const ARC_USDC: "0x3600000000000000000000000000000000000000";
+export declare const ARC_USDC_DECIMALS = 6;
+/**
+ * EIP-712 domain of USDC on Arc, which the exact scheme needs in every 402 so the buyer can sign
+ * the EIP-3009 authorization. Confirmed by the Circle facilitator's /supported on 2026-10-23.
+ */
+export declare const ARC_USDC_EIP712: {
+    readonly name: "USDC";
+    readonly version: "2";
+};
+export declare const ARC_RPC_URLS: Record<ArcNetwork, string>;
+/**
+ * Strict EVM receiving address: well formed, not the zero address, and when it is written in
+ * mixed case its EIP-55 checksum must be right (a wrong checksum is a typo, and a typo in a
+ * payTo sends a merchant's money nowhere).
+ */
+export declare function isValidArcAddress(address: string): boolean;
+export declare const ARC_CHAIN_PROFILES: readonly ChainProfile[];
+/** Registers both Arc networks with the core. Safe to call more than once. */
+export declare function registerArcNetworks(): void;
+export declare function isArcNetwork(value: string): value is ArcNetwork;
+//# sourceMappingURL=networks.d.ts.map

package/dist/networks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"networks.d.ts","sourceRoot":"","sources":["../src/networks.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAGnD,eAAO,MAAM,WAAW,EAAG,aAAsB,CAAC;AAClD,eAAO,MAAM,WAAW,EAAG,gBAAyB,CAAC;AACrD,MAAM,MAAM,UAAU,GAAG,OAAO,WAAW,GAAG,OAAO,WAAW,CAAC;AAEjE,sFAAsF;AACtF,eAAO,MAAM,QAAQ,EAAG,4CAAqD,CAAC;AAC9E,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC;;;GAGG;AACH,eAAO,MAAM,eAAe;;;CAA0C,CAAC;AAEvE,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAGnD,CAAC;AAOF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAM1D;AAYD,eAAO,MAAM,kBAAkB,EAAE,SAAS,YAAY,EAGrD,CAAC;AAEF,8EAA8E;AAC9E,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAE/D"}

package/dist/networks.js

@@ -0,0 +1,65 @@
+/**
+ * Arc, Circle's L1, as AgentPOS sees it: two networks, USDC with 6 decimals in its ERC-20
+ * interface, EVM addresses with EIP-55 checksums.
+ *
+ * Sources (checked 2026-10-23): docs.arc.io/arc/references/connect-to-arc and
+ * contract-addresses; @x402/evm 2.28.0 default asset table (USDC "USDC" version "2", EIP-3009).
+ * Arc pays gas in USDC; the native balance has 18 decimals, but payments always use the
+ * ERC-20 interface at the address below, which has 6. AgentPOS never touches the native unit.
+ */
+import { getAddress, isAddress } from "viem";
+import { registerChainProfile } from "@agentpos/core";
+export const ARC_MAINNET = "eip155:5042";
+export const ARC_TESTNET = "eip155:5042002";
+/** USDC on Arc, same address on mainnet and testnet. ERC-20 interface, 6 decimals. */
+export const ARC_USDC = "0x3600000000000000000000000000000000000000";
+export const ARC_USDC_DECIMALS = 6;
+/**
+ * EIP-712 domain of USDC on Arc, which the exact scheme needs in every 402 so the buyer can sign
+ * the EIP-3009 authorization. Confirmed by the Circle facilitator's /supported on 2026-10-23.
+ */
+export const ARC_USDC_EIP712 = { name: "USDC", version: "2" };
+export const ARC_RPC_URLS = {
+    [ARC_MAINNET]: "https://rpc.mainnet.arc.io",
+    [ARC_TESTNET]: "https://rpc.testnet.arc.io",
+};
+const EXPLORERS = {
+    [ARC_MAINNET]: "https://explorer.arc.io",
+    [ARC_TESTNET]: "https://explorer.testnet.arc.io",
+};
+/**
+ * Strict EVM receiving address: well formed, not the zero address, and when it is written in
+ * mixed case its EIP-55 checksum must be right (a wrong checksum is a typo, and a typo in a
+ * payTo sends a merchant's money nowhere).
+ */
+export function isValidArcAddress(address) {
+    if (!isAddress(address, { strict: false }))
+        return false;
+    if (/^0x0{40}$/i.test(address))
+        return false;
+    const hex = address.slice(2);
+    const mixedCase = hex !== hex.toLowerCase() && hex !== hex.toUpperCase();
+    return mixedCase ? getAddress(address) === address : true;
+}
+const profile = (caip2, testnet) => ({
+    caip2,
+    family: "eip155",
+    label: testnet ? "Arc testnet" : "Arc",
+    testnet,
+    usdcDecimals: ARC_USDC_DECIMALS,
+    isValidAddress: isValidArcAddress,
+    explorerTxUrl: (tx) => `${EXPLORERS[caip2]}/tx/${encodeURIComponent(tx)}`,
+});
+export const ARC_CHAIN_PROFILES = [
+    profile(ARC_MAINNET, false),
+    profile(ARC_TESTNET, true),
+];
+/** Registers both Arc networks with the core. Safe to call more than once. */
+export function registerArcNetworks() {
+    for (const p of ARC_CHAIN_PROFILES)
+        registerChainProfile(p);
+}
+export function isArcNetwork(value) {
+    return value === ARC_MAINNET || value === ARC_TESTNET;
+}
+//# sourceMappingURL=networks.js.map

package/dist/networks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"networks.js","sourceRoot":"","sources":["../src/networks.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAE7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,MAAM,CAAC,MAAM,WAAW,GAAG,aAAsB,CAAC;AAClD,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAyB,CAAC;AAGrD,sFAAsF;AACtF,MAAM,CAAC,MAAM,QAAQ,GAAG,4CAAqD,CAAC;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAW,CAAC;AAEvE,MAAM,CAAC,MAAM,YAAY,GAA+B;IACtD,CAAC,WAAW,CAAC,EAAE,4BAA4B;IAC3C,CAAC,WAAW,CAAC,EAAE,4BAA4B;CAC5C,CAAC;AAEF,MAAM,SAAS,GAA+B;IAC5C,CAAC,WAAW,CAAC,EAAE,yBAAyB;IACxC,CAAC,WAAW,CAAC,EAAE,iCAAiC;CACjD,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,GAAG,KAAK,GAAG,CAAC,WAAW,EAAE,IAAI,GAAG,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;IACzE,OAAO,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,KAAiB,EAAE,OAAgB,EAAgB,EAAE,CAAC,CAAC;IACtE,KAAK;IACL,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK;IACtC,OAAO;IACP,YAAY,EAAE,iBAAiB;IAC/B,cAAc,EAAE,iBAAiB;IACjC,aAAa,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,EAAE,CAAC,EAAE;CAC1E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAA4B;IACzD,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC;IAC3B,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC;CAC3B,CAAC;AAEF,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB;IACjC,KAAK,MAAM,CAAC,IAAI,kBAAkB;QAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,WAAW,CAAC;AACxD,CAAC"}

package/dist/reconcile.d.ts

@@ -0,0 +1,76 @@
+import type { MinorAmount, UsdcMinor } from "@agentpos/core";
+export interface ArcTransfer {
+    txHash: string;
+    logIndex: number;
+    blockNumber: bigint;
+    from: string;
+    to: string;
+    /** USDC in Arc's unit (6 decimals). */
+    amount: MinorAmount;
+}
+export interface FetchTransfersInput {
+    network: string;
+    merchant: string;
+    fromBlock: bigint;
+    toBlock?: bigint;
+    rpcUrl?: string;
+}
+/** Every USDC transfer into the merchant's wallet in the block range, in 9,000-block windows. */
+export declare function fetchArcUsdcTransfers(input: FetchTransfersInput): Promise<ArcTransfer[]>;
+/** An order as the store recorded it: amount in the catalog's unit (7 decimals). */
+export interface RecordedArcPayment {
+    orderId: string;
+    txHash: string;
+    network: string;
+    amountMinor: bigint;
+}
+export interface ArcReconciliation {
+    matched: Array<{
+        orderId: string;
+        txHash: string;
+    }>;
+    /** Money in the wallet with no order: create or refund, never ignore. */
+    paymentsWithoutOrder: ArcTransfer[];
+    /** Orders marked paid that the chain does not confirm as recorded. */
+    ordersWithoutPayment: Array<{
+        orderId: string;
+        txHash: string;
+        reason: string;
+    }>;
+}
+/**
+ * Pure comparison, so it is testable without a network. Amounts are compared in the catalog's
+ * unit after an exact conversion from Arc's 6 decimals.
+ */
+export declare function reconcileArcPayments(transfers: ReadonlyArray<ArcTransfer>, orders: ReadonlyArray<RecordedArcPayment>): ArcReconciliation;
+/** A payment the merchant's wallet received, as the AgentPOS sidecar reconciles it. */
+export interface ArcReceivedPayment {
+    txHash: string;
+    /** In the catalog's unit (7 decimals), converted exactly from Arc's 6. */
+    amountMinor: UsdcMinor;
+    from: string;
+}
+export interface ArcPaymentWatcherOptions {
+    network: string;
+    /** The merchant's own Arc wallet (public address only). */
+    merchant: string;
+    rpcUrl?: string;
+    /**
+     * How far back the first pass reads, in blocks (default 20,000: about 5 hours on Arc testnet,
+     * which made ~97,000 blocks a day in Oct 2026, read in 3 RPC calls). The sidecar keeps the
+     * payments it has seen in memory, so after a restart this window is what gets checked again.
+     */
+    lookbackBlocks?: bigint;
+    /** Tests only: chain head and transfer reader. */
+    head?: () => Promise<bigint>;
+    fetchTransfers?: typeof fetchArcUsdcTransfers;
+}
+/**
+ * The `PaymentWatcher` the AgentPOS sidecar takes in `x402Networks[].watcher` (D3): each call
+ * returns the USDC received by the merchant since the previous call, one entry per transaction.
+ * Read-only, no key. Pass it next to `arcResourceExtension` when the store offers Arc.
+ */
+export declare function createArcPaymentWatcher(options: ArcPaymentWatcherOptions): {
+    recentPayments(): Promise<ArcReceivedPayment[]>;
+};
+//# sourceMappingURL=reconcile.d.ts.map

package/dist/reconcile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile.d.ts","sourceRoot":"","sources":["../src/reconcile.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAW7D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,uCAAuC;IACvC,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,iGAAiG;AACjG,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CA4C9F;AAED,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,yEAAyE;IACzE,oBAAoB,EAAE,WAAW,EAAE,CAAC;IACpC,sEAAsE;IACtE,oBAAoB,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,aAAa,CAAC,WAAW,CAAC,EACrC,MAAM,EAAE,aAAa,CAAC,kBAAkB,CAAC,GACxC,iBAAiB,CAuCnB;AAED,uFAAuF;AACvF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,WAAW,EAAE,SAAS,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,cAAc,CAAC,EAAE,OAAO,qBAAqB,CAAC;CAC/C;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG;IAC1E,cAAc,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;CACjD,CA0CA"}

package/dist/reconcile.js

@@ -0,0 +1,160 @@
+/**
+ * Reconciliation on Arc: what the chain says the merchant received, against what the store
+ * recorded. It catches the two failures that matter for money (guardrail 6):
+ *  - a payment that reached the merchant's wallet but has no order (settled, then the store
+ *    crashed before recording it), and
+ *  - an order marked paid whose transaction the chain does not show, or shows with a different
+ *    amount or recipient.
+ *
+ * Read-only: it never moves funds and needs no key. On Arc, a USDC payment emits two Transfer
+ * logs: the ERC-20 one from the USDC contract (6 decimals), and a mirror of the native balance
+ * from a system address (18 decimals). Only the ERC-20 log counts.
+ */
+import { createPublicClient, http, parseAbiItem } from "viem";
+import { AgentPOSError, rescaleMinor, USDC_DECIMALS, usdcFromMinor } from "@agentpos/core";
+import { ARC_RPC_URLS, ARC_USDC, ARC_USDC_DECIMALS, isArcNetwork } from "./networks.js";
+const TRANSFER = parseAbiItem("event Transfer(address indexed from, address indexed to, uint256 value)");
+/** The public Arc RPC answers eth_getLogs for at most 10,000 blocks per call. */
+const MAX_WINDOW = 9000n;
+/** Every USDC transfer into the merchant's wallet in the block range, in 9,000-block windows. */
+export async function fetchArcUsdcTransfers(input) {
+    if (!isArcNetwork(input.network)) {
+        throw new AgentPOSError("CHAIN_UNKNOWN", `'${input.network}' is not an Arc network`, {
+            hint: "Use eip155:5042 or eip155:5042002.",
+        });
+    }
+    const client = createPublicClient({
+        transport: http(input.rpcUrl ?? ARC_RPC_URLS[input.network]),
+    });
+    try {
+        // Never ask past the chain's head: the RPC refuses ranges it has not produced yet.
+        const head = await client.getBlockNumber();
+        const to = input.toBlock !== undefined && input.toBlock < head ? input.toBlock : head;
+        const out = [];
+        for (let start = input.fromBlock; start <= to; start += MAX_WINDOW + 1n) {
+            const end = start + MAX_WINDOW > to ? to : start + MAX_WINDOW;
+            const logs = await client.getLogs({
+                address: ARC_USDC,
+                event: TRANSFER,
+                args: { to: input.merchant },
+                fromBlock: start,
+                toBlock: end,
+            });
+            for (const log of logs) {
+                if (!log.transactionHash || log.args.value === undefined)
+                    continue;
+                out.push({
+                    txHash: log.transactionHash,
+                    logIndex: log.logIndex ?? 0,
+                    blockNumber: log.blockNumber ?? 0n,
+                    from: log.args.from ?? "",
+                    to: log.args.to ?? "",
+                    amount: { minor: log.args.value, currency: "USDC", decimals: ARC_USDC_DECIMALS },
+                });
+            }
+        }
+        return out;
+    }
+    catch (cause) {
+        throw new AgentPOSError("RAIL_UNAVAILABLE", "Could not read Arc transfers from the RPC", {
+            hint: "The RPC did not answer this range; retry later or use another Arc RPC (rpcUrl).",
+            retryable: true,
+            details: { network: input.network, fromBlock: input.fromBlock.toString() },
+            cause,
+        });
+    }
+}
+/**
+ * Pure comparison, so it is testable without a network. Amounts are compared in the catalog's
+ * unit after an exact conversion from Arc's 6 decimals.
+ */
+export function reconcileArcPayments(transfers, orders) {
+    const byTx = new Map();
+    for (const t of transfers) {
+        const key = t.txHash.toLowerCase();
+        byTx.set(key, [...(byTx.get(key) ?? []), t]);
+    }
+    const seen = new Set();
+    const result = {
+        matched: [],
+        paymentsWithoutOrder: [],
+        ordersWithoutPayment: [],
+    };
+    for (const order of orders) {
+        if (!isArcNetwork(order.network))
+            continue;
+        const key = order.txHash.toLowerCase();
+        const found = byTx.get(key);
+        if (!found || found.length === 0) {
+            result.ordersWithoutPayment.push({
+                orderId: order.orderId,
+                txHash: order.txHash,
+                reason: "transaction not found as a USDC transfer to the merchant",
+            });
+            continue;
+        }
+        const received = found.reduce((sum, t) => sum + t.amount.minor, 0n);
+        const receivedCatalog = rescaleMinor(received, ARC_USDC_DECIMALS, USDC_DECIMALS);
+        seen.add(key);
+        if (receivedCatalog !== order.amountMinor) {
+            result.ordersWithoutPayment.push({
+                orderId: order.orderId,
+                txHash: order.txHash,
+                reason: `amount differs: chain ${receivedCatalog}, order ${order.amountMinor} (catalog unit)`,
+            });
+            continue;
+        }
+        result.matched.push({ orderId: order.orderId, txHash: order.txHash });
+    }
+    for (const [key, list] of byTx)
+        if (!seen.has(key))
+            result.paymentsWithoutOrder.push(...list);
+    return result;
+}
+/**
+ * The `PaymentWatcher` the AgentPOS sidecar takes in `x402Networks[].watcher` (D3): each call
+ * returns the USDC received by the merchant since the previous call, one entry per transaction.
+ * Read-only, no key. Pass it next to `arcResourceExtension` when the store offers Arc.
+ */
+export function createArcPaymentWatcher(options) {
+    if (!isArcNetwork(options.network)) {
+        throw new AgentPOSError("CHAIN_UNKNOWN", `'${options.network}' is not an Arc network`, {
+            hint: "Use eip155:5042 or eip155:5042002.",
+        });
+    }
+    const rpcUrl = options.rpcUrl ?? ARC_RPC_URLS[options.network];
+    const head = options.head ?? (() => createPublicClient({ transport: http(rpcUrl) }).getBlockNumber());
+    const fetchTransfers = options.fetchTransfers ?? fetchArcUsdcTransfers;
+    const lookback = options.lookbackBlocks ?? 20000n;
+    let next;
+    return {
+        async recentPayments() {
+            const to = await head();
+            const from = next ?? (to > lookback ? to - lookback : 0n);
+            if (from > to)
+                return [];
+            const transfers = await fetchTransfers({
+                network: options.network,
+                merchant: options.merchant,
+                fromBlock: from,
+                toBlock: to,
+                rpcUrl,
+            });
+            // Advance only after a successful read, so a failed window is read again next time.
+            next = to + 1n;
+            const byTx = new Map();
+            for (const t of transfers) {
+                const key = t.txHash.toLowerCase();
+                const amount = usdcFromMinor(rescaleMinor(t.amount.minor, ARC_USDC_DECIMALS, USDC_DECIMALS));
+                const prev = byTx.get(key);
+                byTx.set(key, {
+                    txHash: key,
+                    amountMinor: prev ? usdcFromMinor(prev.amountMinor + amount) : amount,
+                    from: t.from,
+                });
+            }
+            return [...byTx.values()];
+        },
+    };
+}
+//# sourceMappingURL=reconcile.js.map

package/dist/reconcile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile.js","sourceRoot":"","sources":["../src/reconcile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAG9D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAExF,MAAM,QAAQ,GAAG,YAAY,CAC3B,yEAAyE,CAC1E,CAAC;AAEF,iFAAiF;AACjF,MAAM,UAAU,GAAG,KAAM,CAAC;AAoB1B,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAA0B;IACpE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,IAAI,KAAK,CAAC,OAAO,yBAAyB,EAAE;YACnF,IAAI,EAAE,oCAAoC;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAChC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;KAC7D,CAAC,CAAC;IACH,IAAI,CAAC;QACH,mFAAmF;QACnF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACtF,MAAM,GAAG,GAAkB,EAAE,CAAC;QAC9B,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,EAAE,KAAK,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;YACxE,MAAM,GAAG,GAAG,KAAK,GAAG,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC;YAC9D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;gBAChC,OAAO,EAAE,QAAQ;gBACjB,KAAK,EAAE,QAAQ;gBACf,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,QAAe,EAAE;gBACnC,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,GAAG;aACb,CAAC,CAAC;YACH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;oBAAE,SAAS;gBACnE,GAAG,CAAC,IAAI,CAAC;oBACP,MAAM,EAAE,GAAG,CAAC,eAAe;oBAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,CAAC;oBAC3B,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;oBAClC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE;oBACzB,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE;oBACrB,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE;iBACjF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,2CAA2C,EAAE;YACvF,IAAI,EAAE,iFAAiF;YACvF,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE;YAC1E,KAAK;SACN,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAkBD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAAqC,EACrC,MAAyC;IAEzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAsB;QAChC,OAAO,EAAE,EAAE;QACX,oBAAoB,EAAE,EAAE;QACxB,oBAAoB,EAAE,EAAE;KACzB,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,SAAS;QAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC;gBAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,0DAA0D;aACnE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpE,MAAM,eAAe,GAAG,YAAY,CAAC,QAAQ,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,eAAe,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC;gBAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,yBAAyB,eAAe,WAAW,KAAK,CAAC,WAAW,iBAAiB;aAC9F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC;AAChB,CAAC;AA0BD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAiC;IAGvE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,IAAI,OAAO,CAAC,OAAO,yBAAyB,EAAE;YACrF,IAAI,EAAE,oCAAoC;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,IAAI,GACR,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3F,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,qBAAqB,CAAC;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,MAAO,CAAC;IACnD,IAAI,IAAwB,CAAC;IAC7B,OAAO;QACL,KAAK,CAAC,cAAc;YAClB,MAAM,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1D,IAAI,IAAI,GAAG,EAAE;gBAAE,OAAO,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC;gBACrC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,EAAE;gBACX,MAAM;aACP,CAAC,CAAC;YACH,oFAAoF;YACpF,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,IAAI,GAAG,EAA8B,CAAC;YACnD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,aAAa,CAC1B,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAC/D,CAAC;gBACF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;oBACZ,MAAM,EAAE,GAAG;oBACX,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;oBACrE,IAAI,EAAE,CAAC,CAAC,IAAI;iBACb,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/wallet-proof.d.ts

@@ -0,0 +1,12 @@
+import type { WalletProofVerifier } from "@agentpos/core";
+export interface ArcWalletProofOptions {
+    /**
+     * RPC per network for smart-account wallets. Pass `true` to use Arc's public RPCs; omit to
+     * verify ordinary wallets offline only.
+     */
+    rpc?: true | Partial<Record<string, string>>;
+}
+export declare function createArcWalletProofVerifier(options?: ArcWalletProofOptions): WalletProofVerifier;
+/** Registers the EVM verifier with the core for every eip155 network. */
+export declare function registerArcWalletProof(options?: ArcWalletProofOptions): void;
+//# sourceMappingURL=wallet-proof.d.ts.map

package/dist/wallet-proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-proof.d.ts","sourceRoot":"","sources":["../src/wallet-proof.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAM1D,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,GAAG,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC9C;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,qBAA0B,GAClC,mBAAmB,CAwBrB;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CAAC,OAAO,GAAE,qBAA0B,GAAG,IAAI,CAEhF"}

package/dist/wallet-proof.js

@@ -0,0 +1,44 @@
+/**
+ * Proof that a merchant controls an Arc wallet: EIP-191 `personal_sign` over the challenge text
+ * issued by `createWalletChallenge` in @agentpos/core. The merchant signs in their own wallet
+ * (MetaMask, Rabby...); no key ever reaches AgentPOS (guardrail 1).
+ *
+ * Without an RPC the check is offline and covers ordinary wallets (EOAs). With an RPC it also
+ * covers smart-contract wallets, which prove control through ERC-1271 / ERC-6492, by asking
+ * the chain.
+ */
+import { createPublicClient, http, verifyMessage } from "viem";
+import { registerWalletProofVerifier } from "@agentpos/core";
+import { ARC_RPC_URLS, isArcNetwork } from "./networks.js";
+const HEX_SIG = /^0x[0-9a-fA-F]+$/;
+export function createArcWalletProofVerifier(options = {}) {
+    return async ({ caip2, address, message, signature }) => {
+        if (!HEX_SIG.test(signature) || !/^0x[0-9a-fA-F]{40}$/.test(address))
+            return false;
+        const rpcUrl = options.rpc === true
+            ? isArcNetwork(caip2)
+                ? ARC_RPC_URLS[caip2]
+                : undefined
+            : options.rpc?.[caip2];
+        try {
+            if (rpcUrl) {
+                const client = createPublicClient({ transport: http(rpcUrl) });
+                return await client.verifyMessage({
+                    address: address,
+                    message,
+                    signature: signature,
+                });
+            }
+            return await verifyMessage({ address: address, message, signature: signature });
+        }
+        catch {
+            // Malformed signature bytes: a wrong proof, not an outage.
+            return false;
+        }
+    };
+}
+/** Registers the EVM verifier with the core for every eip155 network. */
+export function registerArcWalletProof(options = {}) {
+    registerWalletProofVerifier("eip155", createArcWalletProofVerifier(options));
+}
+//# sourceMappingURL=wallet-proof.js.map

package/dist/wallet-proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-proof.js","sourceRoot":"","sources":["../src/wallet-proof.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAG/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE3D,MAAM,OAAO,GAAG,kBAAkB,CAAC;AAUnC,MAAM,UAAU,4BAA4B,CAC1C,UAAiC,EAAE;IAEnC,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE;QACtD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACnF,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,KAAK,IAAI;YAClB,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;gBACnB,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;gBACrB,CAAC,CAAC,SAAS;YACb,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC;YACH,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC/D,OAAO,MAAM,MAAM,CAAC,aAAa,CAAC;oBAChC,OAAO,EAAE,OAAc;oBACvB,OAAO;oBACP,SAAS,EAAE,SAAgB;iBAC5B,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,aAAa,CAAC,EAAE,OAAO,EAAE,OAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAgB,EAAE,CAAC,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;YAC3D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CAAC,UAAiC,EAAE;IACxE,2BAA2B,CAAC,QAAQ,EAAE,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/E,CAAC"}

package/dist/x402.d.ts

@@ -0,0 +1,44 @@
+import type { BuyerNetworkExtension, ExtraAccept, FacilitatorConfig, SchemeNetworkClient, UsdcMinor, X402NetworkExtension } from "@agentpos/core";
+import { createArcPaymentWatcher } from "./reconcile.js";
+import type { ArcPaymentWatcherOptions } from "./reconcile.js";
+/** Reverse-DNS id of this rail, like `org.x402.stellar` for the core's Stellar rail. */
+export declare const X402_ARC_RAIL_ID: "org.x402.arc";
+export interface CircleFacilitatorOptions {
+    /** Facilitator base URL from Circle's docs. No default: Circle publishes it per account. */
+    url: string;
+    /** API key from console.circle.com for THIS network (testnet and mainnet keys differ). */
+    apiKey: string;
+}
+/** A facilitator config that authenticates every call with the Circle API key. */
+export declare function circleFacilitator(options: CircleFacilitatorOptions): FacilitatorConfig;
+/**
+ * The seller side: what a store passes to `createResourceServer` so its 402 also offers Arc.
+ * Registers the Arc networks with the core as a side effect.
+ */
+export declare function arcResourceExtension(network: string, facilitator: CircleFacilitatorOptions): X402NetworkExtension;
+/**
+ * The same route, payable on Arc: the catalog price converted EXACTLY to Arc's 6-decimal USDC
+ * (a price with a 7th decimal is refused, never rounded) and the merchant's own Arc address.
+ */
+export declare function arcAccept(network: string, payTo: string, price: UsdcMinor): ExtraAccept;
+/**
+ * What a store passes to the AgentPOS sidecar (`x402Networks`) to take payments on Arc: the
+ * resource extension, the merchant's own Arc address, the USDC asset with its EIP-712 domain,
+ * and a payment watcher so the sidecar reconciles the merchant's wallet against its orders (D3).
+ * Pass `reconcile: false` to leave the watcher out, or watcher options to tune it.
+ */
+export declare function arcStoreNetwork(network: string, merchantAddress: string, facilitator: CircleFacilitatorOptions, reconcile?: Omit<ArcPaymentWatcherOptions, "network" | "merchant"> | false): {
+    extension: X402NetworkExtension;
+    payTo: string;
+    asset: string;
+    extra: Record<string, unknown>;
+    watcher?: ReturnType<typeof createArcPaymentWatcher>;
+};
+/**
+ * The buyer side: lets an agent pay on Arc within a per-payment ceiling. `client` is the
+ * official `ExactEvmScheme` client from `@x402/evm/exact/client`, built by the caller around
+ * the buyer's own signer (a viem account or a Circle agent wallet); this package never sees
+ * the key.
+ */
+export declare function arcBuyerExtension(network: string, client: SchemeNetworkClient, maxPerPayment: UsdcMinor): BuyerNetworkExtension;
+//# sourceMappingURL=x402.d.ts.map

package/dist/x402.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402.d.ts","sourceRoot":"","sources":["../src/x402.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,qBAAqB,EACrB,WAAW,EACX,iBAAiB,EAEjB,mBAAmB,EACnB,SAAS,EACT,oBAAoB,EACrB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE/D,wFAAwF;AACxF,eAAO,MAAM,gBAAgB,EAAG,cAAuB,CAAC;AAExD,MAAM,WAAW,wBAAwB;IACvC,4FAA4F;IAC5F,GAAG,EAAE,MAAM,CAAC;IACZ,0FAA0F;IAC1F,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAiBtF;AAYD;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,wBAAwB,GACpC,oBAAoB,CAOtB;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,WAAW,CAUvF;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,wBAAwB,EACrC,SAAS,GAAE,IAAI,CAAC,wBAAwB,EAAE,SAAS,GAAG,UAAU,CAAC,GAAG,KAAU,GAC7E;IACD,SAAS,EAAE,oBAAoB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;CACtD,CAkBA;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,mBAAmB,EAC3B,aAAa,EAAE,SAAS,GACvB,qBAAqB,CAKvB"}

package/dist/x402.js

@@ -0,0 +1,108 @@
+/**
+ * x402 on Arc. This is the rail's protocol contact (guardrail 3, as amended 2026-10-23): it
+ * uses the official `@x402/evm` "exact" scheme (EIP-3009 transferWithAuthorization on USDC)
+ * and hands it to the core, which adds Arc to the store's 402 next to Stellar.
+ *
+ * Settlement goes through the Circle Facilitator Service, which pays the gas and moves the USDC
+ * from the buyer's wallet straight to the merchant's. AgentPOS never holds the funds and charges
+ * no commission (guardrails 1 and 7).
+ */
+import { ExactEvmScheme as ExactEvmServerScheme } from "@x402/evm/exact/server";
+import { AgentPOSError, assertAddressFor, usdcOnChain } from "@agentpos/core";
+import { ARC_USDC, ARC_USDC_EIP712, isArcNetwork, registerArcNetworks } from "./networks.js";
+import { createArcPaymentWatcher } from "./reconcile.js";
+/** Reverse-DNS id of this rail, like `org.x402.stellar` for the core's Stellar rail. */
+export const X402_ARC_RAIL_ID = "org.x402.arc";
+/** A facilitator config that authenticates every call with the Circle API key. */
+export function circleFacilitator(options) {
+    if (!/^https:\/\//.test(options.url)) {
+        throw new AgentPOSError("CONFIG_INVALID", "The Circle facilitator URL must be https", {
+            hint: "Copy the facilitator base URL from developers.circle.com/facilitator-service.",
+            details: { url: options.url },
+        });
+    }
+    if (!options.apiKey) {
+        throw new AgentPOSError("CONFIG_INVALID", "The Circle facilitator needs an API key", {
+            hint: "Create one at console.circle.com; use the testnet key for Arc testnet.",
+        });
+    }
+    const headers = { Authorization: `Bearer ${options.apiKey}` };
+    return {
+        url: options.url.replace(/\/+$/, ""),
+        createAuthHeaders: async () => ({ verify: headers, settle: headers, supported: headers }),
+    };
+}
+function requireArc(network) {
+    if (!isArcNetwork(network)) {
+        throw new AgentPOSError("CHAIN_UNKNOWN", `'${network}' is not an Arc network`, {
+            hint: "Use eip155:5042 (Arc mainnet) or eip155:5042002 (Arc testnet).",
+            details: { network },
+        });
+    }
+    return network;
+}
+/**
+ * The seller side: what a store passes to `createResourceServer` so its 402 also offers Arc.
+ * Registers the Arc networks with the core as a side effect.
+ */
+export function arcResourceExtension(network, facilitator) {
+    registerArcNetworks();
+    return {
+        network: requireArc(network),
+        server: new ExactEvmServerScheme(),
+        facilitator: circleFacilitator(facilitator),
+    };
+}
+/**
+ * The same route, payable on Arc: the catalog price converted EXACTLY to Arc's 6-decimal USDC
+ * (a price with a 7th decimal is refused, never rounded) and the merchant's own Arc address.
+ */
+export function arcAccept(network, payTo, price) {
+    registerArcNetworks();
+    const arc = requireArc(network);
+    return {
+        network: arc,
+        payTo: assertAddressFor(arc, payTo),
+        asset: ARC_USDC,
+        amount: usdcOnChain(price, arc),
+        extra: { ...ARC_USDC_EIP712 },
+    };
+}
+/**
+ * What a store passes to the AgentPOS sidecar (`x402Networks`) to take payments on Arc: the
+ * resource extension, the merchant's own Arc address, the USDC asset with its EIP-712 domain,
+ * and a payment watcher so the sidecar reconciles the merchant's wallet against its orders (D3).
+ * Pass `reconcile: false` to leave the watcher out, or watcher options to tune it.
+ */
+export function arcStoreNetwork(network, merchantAddress, facilitator, reconcile = {}) {
+    const extension = arcResourceExtension(network, facilitator);
+    const payTo = assertAddressFor(extension.network, merchantAddress);
+    return {
+        extension,
+        payTo,
+        asset: ARC_USDC,
+        extra: { ...ARC_USDC_EIP712 },
+        ...(reconcile === false
+            ? {}
+            : {
+                watcher: createArcPaymentWatcher({
+                    ...reconcile,
+                    network: extension.network,
+                    merchant: payTo,
+                }),
+            }),
+    };
+}
+/**
+ * The buyer side: lets an agent pay on Arc within a per-payment ceiling. `client` is the
+ * official `ExactEvmScheme` client from `@x402/evm/exact/client`, built by the caller around
+ * the buyer's own signer (a viem account or a Circle agent wallet); this package never sees
+ * the key.
+ */
+export function arcBuyerExtension(network, client, maxPerPayment) {
+    registerArcNetworks();
+    const arc = requireArc(network);
+    const ceiling = usdcOnChain(maxPerPayment, arc);
+    return { network: arc, client, asset: ARC_USDC, maxPerPayment: ceiling };
+}
+//# sourceMappingURL=x402.js.map

package/dist/x402.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402.js","sourceRoot":"","sources":["../src/x402.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,cAAc,IAAI,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAUhF,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAE7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,wFAAwF;AACxF,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAuB,CAAC;AASxD,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,OAAiC;IACjE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,0CAA0C,EAAE;YACpF,IAAI,EAAE,+EAA+E;YACrF,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,yCAAyC,EAAE;YACnF,IAAI,EAAE,wEAAwE;SAC/E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAC9D,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,IAAI,OAAO,yBAAyB,EAAE;YAC7E,IAAI,EAAE,gEAAgE;YACtE,OAAO,EAAE,EAAE,OAAO,EAAE;SACrB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,WAAqC;IAErC,mBAAmB,EAAE,CAAC;IACtB,OAAO;QACL,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC;QAC5B,MAAM,EAAE,IAAI,oBAAoB,EAAE;QAClC,WAAW,EAAE,iBAAiB,CAAC,WAAW,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,KAAa,EAAE,KAAgB;IACxE,mBAAmB,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO;QACL,OAAO,EAAE,GAAG;QACZ,KAAK,EAAE,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC;QACnC,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC;QAC/B,KAAK,EAAE,EAAE,GAAG,eAAe,EAAE;KAC9B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,eAAuB,EACvB,WAAqC,EACrC,YAA4E,EAAE;IAQ9E,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACnE,OAAO;QACL,SAAS;QACT,KAAK;QACL,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,EAAE,GAAG,eAAe,EAAE;QAC7B,GAAG,CAAC,SAAS,KAAK,KAAK;YACrB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,OAAO,EAAE,uBAAuB,CAAC;oBAC/B,GAAG,SAAS;oBACZ,OAAO,EAAE,SAAS,CAAC,OAAO;oBAC1B,QAAQ,EAAE,KAAK;iBAChB,CAAC;aACH,CAAC;KACP,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,MAA2B,EAC3B,aAAwB;IAExB,mBAAmB,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,OAAO,GAAgB,WAAW,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;AAC3E,CAAC"}

package/package.json

@@ -1,6 +1,73 @@
 {
   "name": "@agentpos/rail-arc",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "AgentPOS payment rail for Arc: x402 checkout in USDC on Circle's Arc network, settled by the Circle Facilitator Service straight to the merchant's wallet.",
+  "license": "Apache-2.0",
+  "homepage": "https://agentposhq.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/NovaCorpAI/agentpos-arc.git",
+    "directory": "packages/rail-arc"
+  },
+  "bugs": {
+    "url": "https://github.com/NovaCorpAI/agentpos-arc/issues"
+  },
+  "keywords": [
+    "agentpos",
+    "x402",
+    "arc",
+    "circle",
+    "usdc",
+    "agentic-commerce",
+    "payments"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=22.5"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.typecheck.json",
+    "test": "vitest run",
+    "lint": "eslint src",
+    "e2e:arc-testnet": "tsx scripts/e2e-arc-testnet.ts",
+    "e2e:arc-woo": "tsx scripts/e2e-arc-woo.ts",
+    "e2e:arc-buyer": "tsx scripts/e2e-arc-buyer.ts",
+    "ci:wallet": "tsx scripts/ci-wallet.ts",
+    "buy:arc": "tsx scripts/buy-on-arc.ts"
+  },
+  "dependencies": {
+    "@agentpos/core": "^0.1.5",
+    "@x402/core": "2.28.0",
+    "@x402/evm": "2.28.0",
+    "viem": "2.57.10"
+  },
+  "devDependencies": {
+    "@types/node": "^24.19.2",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.11",
+    "@stellar/stellar-sdk": "^16.3.1",
+    "@agentpos/site": "^0.1.5",
+    "@x402/fetch": "2.28.0",
+    "tsx": "^4.20.6",
+    "@agentpos/connectors": "^0.1.5",
+    "@agentpos/mcp-buyer": "^0.1.5",
+    "@agentpos/scanner": "^0.1.5"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  }
+}