@daski/pay 0.1.0

package/dist/cli/prompt.js

@@ -0,0 +1,101 @@
+/**
+ * Interactive prompts.
+ *
+ * Two rules the CLI never bends: a non-TTY session cannot answer a human
+ * question, and refusing is always the safe default. Every prompt here fails
+ * closed.
+ */
+import { createInterface } from "node:readline/promises";
+import { CliError } from "./errors.js";
+const ETX = String.fromCharCode(3); // Ctrl-C
+const BACKSPACE = String.fromCharCode(127);
+const BS = String.fromCharCode(8);
+export function isInteractive() {
+    return Boolean(process.stdin.isTTY && process.stdout.isTTY);
+}
+/** Asks a yes/no question. Anything but an explicit yes is a no. */
+export async function confirm(question) {
+    if (!isInteractive())
+        return false;
+    const rl = createInterface({ input: process.stdin, output: process.stderr });
+    try {
+        const answer = await rl.question(`${question} [y/N] `);
+        return /^y(es)?$/i.test(answer.trim());
+    }
+    finally {
+        rl.close();
+    }
+}
+/** Requires the operator to retype an exact phrase. Used for key creation. */
+export async function confirmPhrase(question, phrase) {
+    if (!isInteractive())
+        return false;
+    const rl = createInterface({ input: process.stdin, output: process.stderr });
+    try {
+        const answer = await rl.question(`${question}\nType "${phrase}" to continue: `);
+        return answer.trim() === phrase;
+    }
+    finally {
+        rl.close();
+    }
+}
+/**
+ * Reads a passphrase without echoing it. The typed characters are never
+ * written back to the terminal and never leave this function except as the
+ * return value.
+ */
+export async function readPassphrase(prompt) {
+    if (!isInteractive()) {
+        throw new CliError({
+            code: "DASKI_PASSPHRASE_REQUIRES_TTY",
+            message: "A passphrase is required, but this session has no terminal.",
+            remediation: "Run the command from an interactive terminal, or configure an OS " +
+                "keychain so no passphrase is needed.",
+        });
+    }
+    process.stderr.write(prompt);
+    const stdin = process.stdin;
+    const wasRaw = stdin.isRaw ?? false;
+    stdin.setRawMode(true);
+    stdin.resume();
+    try {
+        return await new Promise((resolve, reject) => {
+            let value = "";
+            const cleanup = () => {
+                stdin.removeListener("data", onData);
+                stdin.setRawMode(wasRaw);
+                stdin.pause();
+            };
+            const onData = (chunk) => {
+                for (const char of chunk.toString("utf8")) {
+                    if (char === "\r" || char === "\n") {
+                        cleanup();
+                        process.stderr.write("\n");
+                        resolve(value);
+                        return;
+                    }
+                    if (char === ETX) {
+                        cleanup();
+                        process.stderr.write("\n");
+                        reject(new CliError({
+                            code: "DASKI_PASSPHRASE_CANCELLED",
+                            message: "Passphrase entry cancelled.",
+                            remediation: "Re-run the command when ready.",
+                        }));
+                        return;
+                    }
+                    if (char === BACKSPACE || char === BS) {
+                        value = value.slice(0, -1);
+                        continue;
+                    }
+                    value += char;
+                }
+            };
+            stdin.on("data", onData);
+        });
+    }
+    finally {
+        stdin.setRawMode(wasRaw);
+    }
+}
+//# sourceMappingURL=prompt.js.map

package/dist/cli/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../src/cli/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAQ,SAAS;AACpD,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;AAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AAElC,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,QAAgB;IAC5C,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,SAAS,CAAC,CAAC;QACvD,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,MAAc;IAClE,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,QAAQ,WAAW,MAAM,iBAAiB,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IACjD,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,6DAA6D;YACtE,WAAW,EACT,mEAAmE;gBACnE,sCAAsC;SACzC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvB,KAAK,CAAC,MAAM,EAAE,CAAC;IACf,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnD,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACrC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACzB,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,CAAC,CAAC;YACF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;gBACrC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;wBACnC,OAAO,EAAE,CAAC;wBACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAC3B,OAAO,CAAC,KAAK,CAAC,CAAC;wBACf,OAAO;oBACT,CAAC;oBACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;wBACjB,OAAO,EAAE,CAAC;wBACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAC3B,MAAM,CAAC,IAAI,QAAQ,CAAC;4BAClB,IAAI,EAAE,4BAA4B;4BAClC,OAAO,EAAE,6BAA6B;4BACtC,WAAW,EAAE,gCAAgC;yBAC9C,CAAC,CAAC,CAAC;wBACJ,OAAO;oBACT,CAAC;oBACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;wBACtC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;wBAC3B,SAAS;oBACX,CAAC;oBACD,KAAK,IAAI,IAAI,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC;YACF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC"}

package/dist/cli/redact.d.ts

@@ -0,0 +1,26 @@
+/**
+ * A last line of defence on the way out.
+ *
+ * Keys are never *supposed* to reach output — no code path passes one to a
+ * printer — but "supposed to" is not a guarantee, and a leaked key is
+ * unrecoverable. Everything the CLI prints goes through here first.
+ *
+ * What this deliberately does **not** do is redact by hex shape. A 32-byte
+ * private key and a 32-byte hash are the same shape, and this CLI's whole job
+ * involves printing hashes: authorization nonces, request hashes, order keys.
+ * Blanking them all would corrupt the tool's own output — an operator could no
+ * longer check the nonce their wallet signed — while an attacker who can
+ * already get a key into a printed field can trivially reshape it.
+ *
+ * So the signals used here are the ones that actually discriminate: the field
+ * name a value arrived under, and the unmistakable shape of a seed phrase.
+ */
+export interface RedactOptions {
+    /** Also blank signatures. Optional for run logs; keys are never optional. */
+    signatures?: boolean;
+    /** Internal: the field name the current value was found under. */
+    fieldName?: string | undefined;
+}
+export declare function redactValue(value: unknown, options?: RedactOptions): unknown;
+export declare function redactText(text: string): string;
+//# sourceMappingURL=redact.d.ts.map

package/dist/cli/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/cli/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAqBH,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAgBhF;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C"}

package/dist/cli/redact.js

@@ -0,0 +1,55 @@
+/**
+ * A last line of defence on the way out.
+ *
+ * Keys are never *supposed* to reach output — no code path passes one to a
+ * printer — but "supposed to" is not a guarantee, and a leaked key is
+ * unrecoverable. Everything the CLI prints goes through here first.
+ *
+ * What this deliberately does **not** do is redact by hex shape. A 32-byte
+ * private key and a 32-byte hash are the same shape, and this CLI's whole job
+ * involves printing hashes: authorization nonces, request hashes, order keys.
+ * Blanking them all would corrupt the tool's own output — an operator could no
+ * longer check the nonce their wallet signed — while an attacker who can
+ * already get a key into a printed field can trivially reshape it.
+ *
+ * So the signals used here are the ones that actually discriminate: the field
+ * name a value arrived under, and the unmistakable shape of a seed phrase.
+ */
+/** BIP-39 style phrases: twelve or more lowercase words in a row. */
+const MNEMONIC_PATTERN = /\b(?:[a-z]{3,8}\s+){11,23}[a-z]{3,8}\b/g;
+/**
+ * Field names whose contents are secret whatever they look like.
+ *
+ * Kept narrow on purpose. `authorization` and `token` are *not* here: in this
+ * domain an "authorization" is the EIP-3009 transfer authorization that
+ * `daski sign-payment` exists to print, and a "token" is an ERC-20 contract
+ * address. Redacting a field because its name sounds sensitive elsewhere
+ * would blank the tool's own output while protecting nothing.
+ */
+const KEYLIKE_FIELDS = new Set([
+    "privatekey", "private_key", "privkey", "secret", "secretkey", "secret_key",
+    "mnemonic", "seed", "seedphrase", "seed_phrase", "passphrase", "password",
+    "keystore", "keymaterial", "key_material", "daski_payer_private_key",
+    "apikey", "api_key",
+]);
+export function redactValue(value, options = {}) {
+    const { fieldName } = options;
+    if (fieldName && KEYLIKE_FIELDS.has(fieldName.toLowerCase()))
+        return "[redacted]";
+    if (options.signatures && fieldName?.toLowerCase() === "signature")
+        return "[redacted]";
+    if (typeof value === "string")
+        return value.replace(MNEMONIC_PATTERN, "[redacted]");
+    if (Array.isArray(value)) {
+        return value.map((item) => redactValue(item, { ...options, fieldName: undefined }));
+    }
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value)
+            .map(([key, item]) => [key, redactValue(item, { ...options, fieldName: key })]));
+    }
+    return value;
+}
+export function redactText(text) {
+    return String(redactValue(text));
+}
+//# sourceMappingURL=redact.js.map

package/dist/cli/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/cli/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,qEAAqE;AACrE,MAAM,gBAAgB,GAAG,yCAAyC,CAAC;AAEnE;;;;;;;;GAQG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY;IAC3E,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU;IACzE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,yBAAyB;IACpE,QAAQ,EAAE,SAAS;CACpB,CAAC,CAAC;AASH,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,UAAyB,EAAE;IACrE,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC9B,IAAI,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,YAAY,CAAC;IAClF,IAAI,OAAO,CAAC,UAAU,IAAI,SAAS,EAAE,WAAW,EAAE,KAAK,WAAW;QAAE,OAAO,YAAY,CAAC;IAExF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACpF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC"}

package/dist/commands/buy.d.ts

@@ -0,0 +1,15 @@
+import { PolicyRefusal } from "@daski/x402-scheme";
+import { type ContextOptions } from "../context.js";
+export interface BuyOptions extends ContextOptions {
+    providerAgentId: string;
+    outcomeId: string;
+    requestFile: string;
+    payer?: string | undefined;
+    json: boolean;
+    legacyArg?: boolean;
+    /** Skips only the interactive prompt, never the policy validator. */
+    yes?: boolean;
+}
+export declare function runBuy(options: BuyOptions): Promise<Record<string, unknown>>;
+export { PolicyRefusal };
+//# sourceMappingURL=buy.d.ts.map

package/dist/commands/buy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buy.d.ts","sourceRoot":"","sources":["../../src/commands/buy.ts"],"names":[],"mappings":"AAQA,OAAO,EAAc,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAK/D,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAYnE,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qEAAqE;IACrE,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAQD,wBAAsB,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAgJlF;AAsID,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/commands/buy.js

@@ -0,0 +1,276 @@
+/**
+ * `daski buy` — the full purchase.
+ *
+ * The seven steps of §2, in order, with the approval gate between the quote
+ * and the signature and the reconciliation gate between an ambiguous outcome
+ * and any re-sign.
+ */
+import { readFileSync } from "node:fs";
+import { formatUsdc, PolicyRefusal } from "@daski/x402-scheme";
+import { CliError } from "../cli/errors.js";
+import { confirm, isInteractive } from "../cli/prompt.js";
+import { note } from "../cli/output.js";
+import { atomicUsdc } from "../config.js";
+import { createContext } from "../context.js";
+import { GatewayClient } from "../gateway/client.js";
+import { authorizePayment, newIntentId, reconcileAmbiguousPurchase, recordIntent, requestChallenge, submitPayment, } from "../gateway/purchase.js";
+import { updateOrder } from "../store/orders.js";
+/** Gateway states that mean "authorized, outcome unknown" rather than "failed". */
+const AMBIGUOUS_CODES = new Set([
+    "PAYMENT_PENDING_RECONCILIATION",
+    "PAYMENT_OUTCOME_PENDING",
+]);
+export async function runBuy(options) {
+    const request = readRequestFile(options.requestFile);
+    const context = await createContext(options);
+    try {
+        if (options.payer && options.payer.toLowerCase() !== context.payerAddress.toLowerCase()) {
+            throw new CliError({
+                code: "DASKI_PAYER_NOT_THIS_SIGNER",
+                message: `--payer ${options.payer} is not the address this profile signs with ` +
+                    `(${context.payerAddress}).`,
+                remediation: "The bridge can only authorize payments from the key it holds. Switch " +
+                    "profiles, or drop --payer.",
+            });
+        }
+        // -- 1. challenge ------------------------------------------------------
+        const challenge = await requestChallenge({
+            client: context.client,
+            providerAgentId: options.providerAgentId,
+            outcomeId: options.outcomeId,
+            request,
+            payerAddress: context.payerAddress,
+        });
+        const amountAtomic = BigInt(challenge.requirement.amount);
+        // -- 2. approval -------------------------------------------------------
+        const outcome = await context.catalog.getOutcome(options.providerAgentId, options.outcomeId);
+        const summary = approvalSummary(challenge.challenge.extensions, outcome, amountAtomic);
+        const threshold = atomicUsdc(context.profile.requireApprovalAboveUsdc);
+        if (amountAtomic > threshold && !options.yes) {
+            if (options.json || !isInteractive()) {
+                throw new CliError({
+                    code: "DASKI_HUMAN_APPROVAL_REQUIRED",
+                    message: `${formatUsdc(amountAtomic)} is above this profile's ` +
+                        `requireApprovalAboveUsdc of ${context.profile.requireApprovalAboveUsdc} USDC, ` +
+                        "and this session cannot ask a human.",
+                    remediation: "Have a human run this command in an interactive terminal and confirm " +
+                        "the prompt, or — if a human has already approved this exact purchase " +
+                        "— re-run with --yes. Raising the threshold is a manual config edit.",
+                    details: { approvalSummary: summary, priceUsdc: formatUsdc(amountAtomic) },
+                    exitCode: 2,
+                });
+            }
+            note(renderApproval(summary, amountAtomic));
+            if (!await confirm("Authorize this payment?")) {
+                throw new CliError({
+                    code: "DASKI_PURCHASE_DECLINED",
+                    message: "The purchase was not approved.",
+                    remediation: "Nothing was signed and no money moved. Re-run when ready.",
+                    exitCode: 2,
+                });
+            }
+        }
+        // -- 3 & 4. validate, recompute, sign ----------------------------------
+        const intentId = newIntentId();
+        // Recorded before the signature so an interruption is recoverable.
+        recordIntent({
+            intentId,
+            profile: context.profileName,
+            providerAgentId: options.providerAgentId,
+            outcomeId: options.outcomeId,
+            payer: context.payerAddress,
+            amount: amountAtomic.toString(),
+            state: "INTENT_RECORDED",
+            request,
+        });
+        const authorized = await authorizePayment({
+            policy: context.policy,
+            signer: context.signer,
+            challenge,
+            providerAgentId: options.providerAgentId,
+            outcomeId: options.outcomeId,
+            approvedQuoteAtomic: amountAtomic,
+            intentId,
+        });
+        updateOrder(intentId, {
+            state: "AUTHORIZED",
+            authorizationNonce: authorized.nonce,
+        });
+        // -- 5. paid retry -----------------------------------------------------
+        let result;
+        try {
+            result = await submitPayment({
+                client: context.client,
+                providerAgentId: options.providerAgentId,
+                outcomeId: options.outcomeId,
+                request,
+                submission: authorized.submission,
+                ...(options.legacyArg === undefined ? {} : { legacyArg: options.legacyArg }),
+            });
+        }
+        catch (error) {
+            // The signature left the process and the answer did not come back. This
+            // is the ambiguous case: reconcile, never re-sign.
+            return await reconcile(context, {
+                intentId, options, request, authorized,
+                cause: `transport failure after submit: ${error.message}`,
+            });
+        }
+        const body = GatewayClient.json(result);
+        const code = typeof body?.code === "string" ? body.code : undefined;
+        if (result.isError && code && AMBIGUOUS_CODES.has(code)) {
+            return await reconcile(context, {
+                intentId, options, request, authorized,
+                cause: `gateway reported ${code}`,
+            });
+        }
+        if (result.isError || !body || typeof body.orderHandle !== "string") {
+            updateOrder(intentId, { state: "PENDING_RECONCILIATION" });
+            const { purchaseFailure } = await import("../gateway/purchase.js");
+            throw purchaseFailure(result);
+        }
+        // -- 6 & 7. persist and report ----------------------------------------
+        const record = updateOrder(intentId, {
+            handle: body.orderHandle,
+            state: normalizeState(body.status),
+        });
+        return {
+            purchased: true,
+            orderHandle: body.orderHandle,
+            intentId,
+            profile: context.profileName,
+            provider: options.providerAgentId,
+            outcome: options.outcomeId,
+            price: formatUsdc(amountAtomic),
+            state: record?.state ?? String(body.status ?? "unknown"),
+            payer: context.payerAddress,
+            authorizationNonce: authorized.nonce,
+            challengeSource: challenge.viaChallengeTool
+                ? "daski_get_payment_challenge"
+                : "daski_buy_outcome (unpaid challenge fallback)",
+            receipt: body.receipt ?? null,
+            gatewayCalls: context.client.callCount,
+        };
+    }
+    finally {
+        await context.close();
+    }
+}
+async function reconcile(context, args) {
+    updateOrder(args.intentId, { state: "PENDING_RECONCILIATION" });
+    note(`payment outcome unclear (${args.cause}); reconciling before any re-sign...`);
+    const record = updateOrder(args.intentId, {});
+    const outcome = await reconcileAmbiguousPurchase({
+        client: context.client,
+        signer: context.signer,
+        record,
+        payer: context.payerAddress,
+        chainId: context.profile.chainId,
+        gatewayUrl: context.profile.gatewayUrl,
+        submission: args.authorized.submission,
+        request: args.request,
+        ...(args.options.legacyArg === undefined ? {} : { legacyArg: args.options.legacyArg }),
+    });
+    if (outcome.status === "settled") {
+        const settled = updateOrder(args.intentId, {
+            handle: outcome.orderHandle,
+            state: normalizeState(outcome.body?.status),
+        });
+        return {
+            purchased: true,
+            recovered: true,
+            orderHandle: outcome.orderHandle,
+            intentId: args.intentId,
+            state: settled?.state ?? "unknown",
+            price: formatUsdc(BigInt(record.amount)),
+            reconciliation: outcome.evidence,
+            cause: args.cause,
+            gatewayCalls: context.client.callCount,
+        };
+    }
+    // Provably absent: the caller may safely start over with a fresh challenge.
+    throw new CliError({
+        code: "DASKI_PAYMENT_UNRESOLVED_NO_ORDER",
+        message: `The purchase was interrupted (${args.cause}) and no order exists for it: ` +
+            `${outcome.evidence}.`,
+        remediation: "Nothing settled, so a fresh purchase is safe: re-run the same `daski buy` " +
+            `command. The unsettled intent is recorded as ${args.intentId}.`,
+        details: { intentId: args.intentId, reconciliation: outcome.evidence },
+        exitCode: 3,
+    });
+}
+function normalizeState(status) {
+    const value = String(status ?? "").toLowerCase();
+    if (["completed", "fulfilled"].includes(value))
+        return "FULFILLED";
+    if (["input-required", "input_required"].includes(value))
+        return "INPUT_REQUIRED";
+    if (["failed", "canceled", "provider_failed"].includes(value))
+        return "PROVIDER_FAILED";
+    return "SUBMITTED";
+}
+/**
+ * The human-facing summary. Prefers the gateway's `approvalSummary` when it
+ * ships one; otherwise it is assembled from the order terms and the catalog,
+ * so the operator sees who is being paid and under whose terms either way.
+ */
+function approvalSummary(extensions, outcome, amountAtomic) {
+    const supplied = extensions?.approvalSummary;
+    if (supplied && typeof supplied === "object")
+        return supplied;
+    const terms = extensions?.["daski-order-terms"];
+    return {
+        what: [outcome.serviceName, outcome.skillName].filter(Boolean).join(" / ") || "Daski outcome",
+        price: formatUsdc(amountAtomic),
+        paysTo: outcome.payTo,
+        provider: terms?.providerLegalName ?? outcome.providerAudience ?? "unknown",
+        commissionBps: terms?.commissionBps ?? outcome.commissionBps ?? null,
+        providerTerms: terms?.providerTermsUrl ?? null,
+        marketplaceTerms: terms?.marketplaceTermsUrl ?? null,
+    };
+}
+function renderApproval(summary, amountAtomic) {
+    const lines = ["", "  ─ Purchase approval ─────────────────────────────"];
+    for (const [key, value] of Object.entries(summary)) {
+        if (value === null || value === undefined)
+            continue;
+        lines.push(`  ${key.padEnd(18)} ${String(value)}`);
+    }
+    lines.push(`  ${"you will pay".padEnd(18)} ${formatUsdc(amountAtomic)}`);
+    lines.push("  ─────────────────────────────────────────────────", "");
+    return lines.join("\n");
+}
+function readRequestFile(path) {
+    let raw;
+    try {
+        raw = readFileSync(path, "utf8");
+    }
+    catch (error) {
+        throw new CliError({
+            code: "DASKI_REQUEST_FILE_UNREADABLE",
+            message: `Could not read the request file ${path}: ${error.message}`,
+            remediation: "Pass --request with a path to a JSON file containing the outcome's request body.",
+        });
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (error) {
+        throw new CliError({
+            code: "DASKI_REQUEST_FILE_NOT_JSON",
+            message: `${path} is not valid JSON: ${error.message}`,
+            remediation: "Fix the file so it contains a single JSON object.",
+        });
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new CliError({
+            code: "DASKI_REQUEST_FILE_NOT_OBJECT",
+            message: `${path} must contain a JSON object.`,
+            remediation: "Wrap the request in an object, e.g. {\"address\": \"...\"}",
+        });
+    }
+    return parsed;
+}
+export { PolicyRefusal };
+//# sourceMappingURL=buy.js.map

package/dist/commands/buy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buy.js","sourceRoot":"","sources":["../../src/commands/buy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAuB,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,0BAA0B,EAC1B,YAAY,EACZ,gBAAgB,EAChB,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAajD,mFAAmF;AACnF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,gCAAgC;IAChC,yBAAyB;CAC1B,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAmB;IAC9C,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;YACxF,MAAM,IAAI,QAAQ,CAAC;gBACjB,IAAI,EAAE,6BAA6B;gBACnC,OAAO,EACL,WAAW,OAAO,CAAC,KAAK,8CAA8C;oBACtE,IAAI,OAAO,CAAC,YAAY,IAAI;gBAC9B,WAAW,EACT,uEAAuE;oBACvE,4BAA4B;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,yEAAyE;QACzE,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC;YACvC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO;YACP,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAE1D,yEAAyE;QACzE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QACvF,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACvE,IAAI,YAAY,GAAG,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;gBACrC,MAAM,IAAI,QAAQ,CAAC;oBACjB,IAAI,EAAE,+BAA+B;oBACrC,OAAO,EACL,GAAG,UAAU,CAAC,YAAY,CAAC,2BAA2B;wBACtD,+BAA+B,OAAO,CAAC,OAAO,CAAC,wBAAwB,SAAS;wBAChF,sCAAsC;oBACxC,WAAW,EACT,uEAAuE;wBACvE,uEAAuE;wBACvE,qEAAqE;oBACvE,OAAO,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE;oBAC1E,QAAQ,EAAE,CAAC;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,OAAO,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,QAAQ,CAAC;oBACjB,IAAI,EAAE,yBAAyB;oBAC/B,OAAO,EAAE,gCAAgC;oBACzC,WAAW,EAAE,2DAA2D;oBACxE,QAAQ,EAAE,CAAC;iBACZ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,mEAAmE;QACnE,YAAY,CAAC;YACX,QAAQ;YACR,OAAO,EAAE,OAAO,CAAC,WAAW;YAC5B,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,YAAY;YAC3B,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;YAC/B,KAAK,EAAE,iBAAiB;YACxB,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC;YACxC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS;YACT,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,mBAAmB,EAAE,YAAY;YACjC,QAAQ;SACT,CAAC,CAAC;QACH,WAAW,CAAC,QAAQ,EAAE;YACpB,KAAK,EAAE,YAAY;YACnB,kBAAkB,EAAE,UAAU,CAAC,KAAK;SACrC,CAAC,CAAC;QAEH,yEAAyE;QACzE,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,aAAa,CAAC;gBAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,OAAO;gBACP,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;aAC7E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,mDAAmD;YACnD,OAAO,MAAM,SAAS,CAAC,OAAO,EAAE;gBAC9B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU;gBACtC,KAAK,EAAE,mCAAoC,KAAe,CAAC,OAAO,EAAE;aACrE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,OAAO,MAAM,SAAS,CAAC,OAAO,EAAE;gBAC9B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU;gBACtC,KAAK,EAAE,oBAAoB,IAAI,EAAE;aAClC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpE,WAAW,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC3D,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACnE,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,wEAAwE;QACxE,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE;YACnC,MAAM,EAAE,IAAI,CAAC,WAAW;YACxB,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;SACnC,CAAC,CAAC;QACH,OAAO;YACL,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ;YACR,OAAO,EAAE,OAAO,CAAC,WAAW;YAC5B,QAAQ,EAAE,OAAO,CAAC,eAAe;YACjC,OAAO,EAAE,OAAO,CAAC,SAAS;YAC1B,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC;YAC/B,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;YACxD,KAAK,EAAE,OAAO,CAAC,YAAY;YAC3B,kBAAkB,EAAE,UAAU,CAAC,KAAK;YACpC,eAAe,EAAE,SAAS,CAAC,gBAAgB;gBACzC,CAAC,CAAC,6BAA6B;gBAC/B,CAAC,CAAC,+CAA+C;YACnD,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;YAC7B,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;SACvC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,OAAkD,EAClD,IAMC;IAED,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC,4BAA4B,IAAI,CAAC,KAAK,sCAAsC,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC;QAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM;QACN,KAAK,EAAE,OAAO,CAAC,YAAY;QAC3B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;QAChC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU;QACtC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU;QACtC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;KACvF,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE;YACzC,MAAM,EAAE,OAAO,CAAC,WAAW;YAC3B,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SAC5C,CAAC,CAAC;QACH,OAAO;YACL,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,SAAS;YAClC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACxC,cAAc,EAAE,OAAO,CAAC,QAAQ;YAChC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;SACvC,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,MAAM,IAAI,QAAQ,CAAC;QACjB,IAAI,EAAE,mCAAmC;QACzC,OAAO,EACL,iCAAiC,IAAI,CAAC,KAAK,gCAAgC;YAC3E,GAAG,OAAO,CAAC,QAAQ,GAAG;QACxB,WAAW,EACT,4EAA4E;YAC5E,gDAAgD,IAAI,CAAC,QAAQ,GAAG;QAClE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE;QACtE,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,MAAe;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IACnE,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAClF,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACxF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CACtB,UAA+C,EAC/C,OAC4F,EAC5F,YAAoB;IAEpB,MAAM,QAAQ,GAAG,UAAU,EAAE,eAAe,CAAC;IAC7C,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAmC,CAAC;IACzF,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC,mBAAmB,CAAwC,CAAC;IACvF,OAAO;QACL,IAAI,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,eAAe;QAC7F,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC;QAC/B,MAAM,EAAE,OAAO,CAAC,KAAK;QACrB,QAAQ,EAAE,KAAK,EAAE,iBAAiB,IAAI,OAAO,CAAC,gBAAgB,IAAI,SAAS;QAC3E,aAAa,EAAE,KAAK,EAAE,aAAa,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI;QACpE,aAAa,EAAE,KAAK,EAAE,gBAAgB,IAAI,IAAI;QAC9C,gBAAgB,EAAE,KAAK,EAAE,mBAAmB,IAAI,IAAI;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAAgC,EAAE,YAAoB;IAC5E,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,qDAAqD,CAAC,CAAC;IAC1E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QACpD,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,qDAAqD,EAAE,EAAE,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,mCAAmC,IAAI,KAAM,KAAe,CAAC,OAAO,EAAE;YAC/E,WAAW,EAAE,kFAAkF;SAChG,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,6BAA6B;YACnC,OAAO,EAAE,GAAG,IAAI,uBAAwB,KAAe,CAAC,OAAO,EAAE;YACjE,WAAW,EAAE,mDAAmD;SACjE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,GAAG,IAAI,8BAA8B;YAC9C,WAAW,EAAE,4DAA4D;SAC1E,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/commands/doctor.d.ts

@@ -0,0 +1,29 @@
+export interface DoctorIssue {
+    severity: "blocking" | "warning";
+    code: string;
+    message: string;
+    remediation: string;
+}
+export interface DoctorOptions {
+    profile?: string | undefined;
+    maxPerOrderUsdc?: string | undefined;
+    sessionCapUsdc?: string | undefined;
+    signerOverride?: string | undefined;
+    cdpAccount?: string | undefined;
+    circleWallet?: string | undefined;
+}
+export interface DoctorReport {
+    cliVersion: string;
+    profile: string;
+    stateDirectory: string;
+    configFile: string;
+    signer: Record<string, unknown>;
+    chain: Record<string, unknown>;
+    balances: Record<string, unknown> | null;
+    caps: Record<string, unknown>;
+    gateway: Record<string, unknown>;
+    issues: DoctorIssue[];
+    ok: boolean;
+}
+export declare function runDoctor(options: DoctorOptions): Promise<DoctorReport>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,EAAE,EAAE,OAAO,CAAC;CACb;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAuK7E"}