@arp-protocol/cli 0.0.3 → 0.0.4

package/dist/chunks/{commands-157bms70.js → commands-t5a0w785.js}

@@ -64,7 +64,8 @@ function withMcpServer(config, name, entry) {
 var CLAUDE_HOOKS = {
   shape: "nested",
   events: [
-    { name: "PostToolUse", matcher: "*" },
+    { name: "PostToolUse", matcher: "^(?!Skill$)" },
+    { name: "PostToolUse", matcher: "Skill", sync: true, timeout: 5 },
     { name: "PostToolUseFailure", matcher: "*", sync: true },
     { name: "PreToolUse", matcher: "Bash", sync: true, timeout: 15, if: "Bash(*skills*)" },
     { name: "Stop", sync: true, timeout: 10 }
@@ -356,8 +357,17 @@ function claudeMcpSteps(env, commands, project, remove, allowCli) {
     jsonStep(files.mcp, (config) => withMcpServer(config, SERVER_NAME, remove ? null : mcpEntry(commands.mcp, false)), remove ? "mcpServers.arp removed" : `mcpServers.arp → ${commands.mcp.command} ${commands.mcp.args.join(" ")}`, (config) => serversOf(config)[SERVER_NAME])
   ];
 }
+function waitedLabel(event) {
+  if (event.sync !== true)
+    return "";
+  if (event.if !== undefined)
+    return " (waited on, Bash skills installs only)";
+  if (event.matcher !== undefined && event.matcher !== "*")
+    return ` (waited on, ${event.matcher} calls only)`;
+  return " (waited on)";
+}
 function claudeHookStep(env, commands, project, remove) {
-  return jsonStep(claudeFiles(env, project).settings, (settings) => withHooks(settings, CLAUDE_HOOKS, remove ? null : commands.hook, commands.hookFile), remove ? `hooks: arp removed from ${eventNames(CLAUDE_HOOKS).join(", ")}` : `hooks: arp on ${CLAUDE_HOOKS.events.map((event) => `${event.name}${event.sync !== true ? "" : event.if === undefined ? " (waited on)" : " (waited on, Bash skills installs only)"}`).join(", ")}`, (settings) => hooksOf(settings, CLAUDE_HOOKS, commands.hookFile));
+  return jsonStep(claudeFiles(env, project).settings, (settings) => withHooks(settings, CLAUDE_HOOKS, remove ? null : commands.hook, commands.hookFile), remove ? `hooks: arp removed from ${eventNames(CLAUDE_HOOKS).join(", ")}` : `hooks: arp on ${CLAUDE_HOOKS.events.map((event) => `${event.name}${waitedLabel(event)}`).join(", ")}`, (settings) => hooksOf(settings, CLAUDE_HOOKS, commands.hookFile));
 }
 var CLAUDE_HOOKS_SEEN_FROM = [2, 1, 316];
 function claudeVersionCheck(env) {

package/dist/chunks/{line-691gbaha.js → line-kvm1ew55.js}

@@ -7,7 +7,8 @@ import {
   loopConfig,
   sponsorApproval,
   writeLine
-} from "./cli-10wacn76.js";
+} from "./cli-8m56jsfx.js";
+import"./cli-7c393v47.js";
 import"./cli-00qp1sj2.js";
 import"./cli-n4qagybd.js";
 import {
@@ -22,11 +23,13 @@ import {
   needShapeProblem,
   normaliseCategoryLabel,
   readDomainTree,
+  redactEndpointUrl,
   resolveDomain,
   transfersIn,
   x402NetworksFrom,
   x402Reading
-} from "./cli-wev0jgf7.js";
+} from "./cli-wer26exb.js";
+import"./cli-zehr6kdx.js";
 import"./cli-0gsbnq5w.js";
 import"./cli-fbwpcfvp.js";
 import"./cli-mhzh9z8k.js";
@@ -58,8 +61,22 @@ function lineFromArgs(args, env = process.env) {
   }
   if (args.paymentTx !== undefined && !/^0x[0-9a-fA-F]{64}$/.test(args.paymentTx))
     return new Error("--payment-tx is a 32-byte transaction hash");
-  if (args.paymentTx !== undefined && !isExactEndpointUrl(args.toolUrl)) {
-    return new Error("with --payment-tx, --tool is the exact URL you paid, scheme included, as you called it");
+  const terms = termsFromArgs(args);
+  if (terms instanceof Error)
+    return terms;
+  if (args.reason === "no-delivery" && args.paymentTx === undefined) {
+    return new Error("--reason no-delivery means paid, nothing received: it takes --payment-tx and --network");
+  }
+  let toolUrl = args.toolUrl;
+  if (args.paymentTx !== undefined) {
+    if (!isExactEndpointUrl(args.toolUrl)) {
+      return new Error("with --payment-tx, --tool is the exact URL you paid, scheme included, as you called it");
+    }
+    try {
+      toolUrl = redactEndpointUrl(args.toolUrl);
+    } catch (error) {
+      return error instanceof Error ? error : new Error(String(error));
+    }
   }
   if (args.parent !== undefined && args.domain === undefined)
     return new Error("--parent and --why add a --domain");
@@ -85,15 +102,42 @@ function lineFromArgs(args, env = process.env) {
       return new Error("--needs and --with name a skill's word; a paid endpoint has no SKILL.md");
   }
   return {
-    toolUrl: args.toolUrl,
+    toolUrl,
     outcome: args.outcome,
     ...args.domain === undefined ? {} : { domain: args.domain },
     ...args.reason === undefined ? {} : { reason: args.reason },
     ...args.parent === undefined || args.why === undefined ? {} : { newDomain: { parent: args.parent, why: args.why.trim() } },
     ...args.paymentTx === undefined || args.network === undefined ? {} : { payment: { network: args.network, txHash: args.paymentTx.toLowerCase() } },
+    ...terms === null ? {} : { terms },
     ...need === undefined ? {} : { need }
   };
 }
+var TERMS_FLAGS = ["--pay-to", "--asset", "--price", "--terms-at"];
+function termsFromArgs(args) {
+  const given = [args.payTo, args.asset, args.price, args.termsAt];
+  if (args.paymentTx === undefined) {
+    return given.every((value) => value === undefined) ? null : new Error(`${TERMS_FLAGS.join(", ")} follow --payment-tx`);
+  }
+  if (given.some((value) => value === undefined)) {
+    return new Error(`with --payment-tx, name the terms the 402 gave and you paid against: ${TERMS_FLAGS.join(" ")}`);
+  }
+  const { payTo, asset, price, termsAt } = args;
+  if (!/^0x[0-9a-fA-F]{40}$/.test(payTo))
+    return new Error("--pay-to is the 402's payTo address");
+  if (!/^0x[0-9a-fA-F]{40}$/.test(asset))
+    return new Error("--asset is the 402's asset address");
+  if (!/^[1-9][0-9]{0,77}$/.test(price))
+    return new Error("--price is the 402's amount, a positive integer in the asset's smallest unit");
+  const receivedAt = /^[0-9]+$/.test(termsAt) ? Number(termsAt) : Math.floor(Date.parse(termsAt) / 1000);
+  if (!Number.isSafeInteger(receivedAt) || receivedAt <= 0)
+    return new Error("--terms-at is when the 402 was received: unix seconds or ISO 8601");
+  if (receivedAt > Math.floor(Date.now() / 1000) + 300)
+    return new Error("--terms-at is in the future");
+  return { payTo, asset, price, receivedAt };
+}
+function matchesTerms(payment, terms) {
+  return payment.transfers.some((transfer) => transfer.payTo.toLowerCase() === terms.payTo.toLowerCase() && transfer.asset.toLowerCase() === terms.asset.toLowerCase() && BigInt(transfer.amount) >= BigInt(terms.price));
+}
 async function readLinePayment(input, reading) {
   if (input.payment === undefined)
     return null;
@@ -125,6 +169,11 @@ async function writeLineChecked(steps, input) {
     if (steps.payments === undefined)
       throw new Error("this build reads no payment network");
     payment = await readLinePayment(input, steps.payments);
+    if (input.terms === undefined)
+      throw new Error("a line with a payment names the terms it paid against");
+    if (payment !== null && !matchesTerms(payment, input.terms)) {
+      throw new Error(`no transfer in ${input.payment.txHash} pays ${input.terms.payTo} at least ${input.terms.price} of ${input.terms.asset}: check --pay-to, --asset and --price`);
+    }
   }
   if (input.domain !== undefined) {
     const domain = normaliseCategoryLabel(input.domain);

package/dist/chunks/{node-init-rcepfyeh.js → node-init-amedveja.js}

@@ -9,7 +9,8 @@ import {
   normaliseEndpoint,
   parseAgentRegistry,
   validateHandshakeRequest
-} from "./cli-wev0jgf7.js";
+} from "./cli-wer26exb.js";
+import"./cli-zehr6kdx.js";
 import"./cli-0gsbnq5w.js";
 import"./cli-fbwpcfvp.js";
 import {

package/dist/chunks/{node-m0mx4y5k.js → node-x35ncwhq.js}

@@ -18,7 +18,8 @@ import {
   normaliseEndpoint,
   parseEther,
   signHireReceipt
-} from "./cli-wev0jgf7.js";
+} from "./cli-wer26exb.js";
+import"./cli-zehr6kdx.js";
 import"./cli-0gsbnq5w.js";
 import {
   ERC8004_REGISTRY