@daski/pay 0.1.0

package/dist/gateway/purchase.d.ts

@@ -0,0 +1,119 @@
+import { type OrderBinding, type PolicyConfig, type SignerAdapter } from "@daski/x402-scheme";
+import { type Address } from "viem";
+import { CliError } from "../cli/errors.js";
+import { updateOrder, type OrderRecord } from "../store/orders.js";
+import { GatewayClient, type McpToolResult, type PaymentChallenge, type PaymentRequirement, type PaymentSubmission } from "./client.js";
+/** The spec-01 tool; absent on today's sandbox, where we fall back. */
+export declare const CHALLENGE_TOOL = "daski_get_payment_challenge";
+export declare const BUY_TOOL = "daski_buy_outcome";
+export interface ChallengeResult {
+    challenge: PaymentChallenge;
+    requirement: PaymentRequirement;
+    binding: OrderBinding | undefined;
+    /** True when the spec-01 challenge tool served this. */
+    viaChallengeTool: boolean;
+}
+/** A fresh reconciliation key. Also the idempotency key the gateway echoes. */
+export declare function newIntentId(): string;
+/**
+ * Step 1: obtain a payment challenge. Prefers `daski_get_payment_challenge`
+ * and falls back to an unpaid `daski_buy_outcome`, which is the same challenge
+ * by a longer road.
+ */
+export declare function requestChallenge(options: {
+    client: GatewayClient;
+    providerAgentId: string;
+    outcomeId: string;
+    request: Record<string, unknown>;
+    payerAddress: Address;
+}): Promise<ChallengeResult>;
+export interface AuthorizeOptions {
+    policy: PolicyConfig;
+    signer: SignerAdapter;
+    challenge: ChallengeResult;
+    providerAgentId: string;
+    outcomeId: string;
+    /** What the human approved, in atomic units. */
+    approvedQuoteAtomic: bigint;
+    intentId: string;
+    nowSeconds?: number;
+}
+export interface AuthorizedPayment {
+    submission: PaymentSubmission;
+    amountAtomic: bigint;
+    nonce: string;
+}
+/**
+ * Steps 3 and 4: validate, recompute, sign. The authorization is built here
+ * rather than accepted, and the §4 validator sees it before the wallet does.
+ */
+export declare function authorizePayment(options: AuthorizeOptions): Promise<AuthorizedPayment>;
+export interface SubmitOptions {
+    client: GatewayClient;
+    providerAgentId: string;
+    outcomeId: string;
+    request: Record<string, unknown>;
+    submission: PaymentSubmission;
+    /** Pass the payload as a tool argument instead of `_meta`. */
+    legacyArg?: boolean;
+    timeoutMs?: number;
+}
+/**
+ * Step 5: the paid retry. The payload rides in `_meta["x402/payment"]` unless
+ * `--legacy-arg` asks for the argument form.
+ */
+export declare function submitPayment(options: SubmitOptions): Promise<McpToolResult>;
+export interface ReconcileOptions {
+    client: GatewayClient;
+    signer: SignerAdapter;
+    record: OrderRecord;
+    payer: Address;
+    chainId: number;
+    gatewayUrl: string;
+    submission: PaymentSubmission;
+    request: Record<string, unknown>;
+    legacyArg?: boolean;
+}
+export interface ReconcileOutcome {
+    /** `settled` when an order exists; `absent` when provably none does. */
+    status: "settled" | "absent";
+    orderHandle?: string | undefined;
+    body?: Record<string, unknown> | undefined;
+    /** How the conclusion was reached, for the audit log. */
+    evidence: string;
+}
+/**
+ * The ambiguous-outcome path. Never signs anything: it replays what was
+ * already signed, then corroborates against the payer's own history.
+ */
+export declare function reconcileAmbiguousPurchase(options: ReconcileOptions): Promise<ReconcileOutcome>;
+interface PayerOrderRow {
+    orderHandle: string;
+    providerAgentId: string;
+    outcomeId: string;
+    grossAmount: string;
+    state: string;
+    createdAt: string;
+    /** Present once the gateway echoes the buyer's idempotency key. */
+    paymentIdentifier?: string;
+}
+/**
+ * The payer's order history. When the gateway echoes `paymentIdentifier` on a
+ * row, we filter by it exactly as §2 specifies; until then the rows carry no
+ * such field and the caller matches on the intent's other invariants.
+ */
+export declare function listPayerOrders(options: {
+    client: GatewayClient;
+    signer: SignerAdapter;
+    payer: Address;
+    chainId: number;
+    gatewayUrl: string;
+    intentId?: string | undefined;
+}): Promise<PayerOrderRow[]>;
+/** Records the intent before signing, so an interruption is recoverable. */
+export declare function recordIntent(record: Omit<OrderRecord, "createdAt" | "updatedAt">): OrderRecord;
+export { updateOrder };
+export declare function purchaseFailure(result: McpToolResult): CliError;
+/** Human-readable price, for approval prompts and receipts. */
+export declare function priceLine(amountAtomic: bigint): string;
+//# sourceMappingURL=purchase.d.ts.map

package/dist/gateway/purchase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"purchase.d.ts","sourceRoot":"","sources":["../../src/gateway/purchase.ts"],"names":[],"mappings":"AAqBA,OAAO,EAOL,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAc,KAAK,OAAO,EAAE,MAAM,MAAM,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAEL,WAAW,EAEX,KAAK,WAAW,EACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACvB,MAAM,aAAa,CAAC;AAGrB,uEAAuE;AACvE,eAAO,MAAM,cAAc,gCAAgC,CAAC;AAC5D,eAAO,MAAM,QAAQ,sBAAsB,CAAC;AAE5C,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,kBAAkB,CAAC;IAChC,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;IAClC,wDAAwD;IACxD,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE;IAC9C,MAAM,EAAE,aAAa,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAAC,eAAe,CAAC,CAyB3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,eAAe,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA6E5F;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,8DAA8D;IAC9D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAalF;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC3C,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,gBAAgB,CAAC,CA2C3B;AAED,UAAU,aAAa;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAmB3B;AAED,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,WAAW,CAAC,GAAG,WAAW,CAK9F;AAED,OAAO,EAAE,WAAW,EAAE,CAAC;AAEvB,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,QAAQ,CAa/D;AAED,+DAA+D;AAC/D,wBAAgB,SAAS,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/gateway/purchase.js

@@ -0,0 +1,250 @@
+/**
+ * The purchase flow, and the ambiguous-outcome path.
+ *
+ * The dangerous moment in a buyer bridge is not the signature — it is the
+ * silence after it. A timeout, a dropped socket, or a
+ * `PAYMENT_PENDING_RECONCILIATION` leaves us unable to say whether money
+ * moved. The rule (§2) is: reconcile before any re-sign. A second signature
+ * over a fresh challenge is a second order, and a second charge.
+ *
+ * Two facts make reconciliation provable rather than heuristic:
+ *
+ *   1. The recipe nonce is deterministic, so an identical resubmission is
+ *      byte-identical, and the gateway's published retry policy treats an
+ *      identical signed authorization as `transport-retry-same-purchase`.
+ *      Replaying what we already signed cannot create a second order.
+ *   2. The payer's own order history corroborates it independently.
+ *
+ * So we replay first, corroborate second, and only request a fresh challenge
+ * when both agree the order does not exist.
+ */
+import { randomBytes } from "node:crypto";
+import { bindingFromExtensions, formatUsdc, paymentEchoExtensions, transferWithAuthorizationTypedData, validatePurchaseAuthorization, withPaymentIdentifier, } from "@daski/x402-scheme";
+import { getAddress } from "viem";
+import { CliError } from "../cli/errors.js";
+import { findByIntent, updateOrder, upsertOrder, } from "../store/orders.js";
+import { GatewayClient, } from "./client.js";
+import { callWalletQuery } from "./lifecycle.js";
+/** The spec-01 tool; absent on today's sandbox, where we fall back. */
+export const CHALLENGE_TOOL = "daski_get_payment_challenge";
+export const BUY_TOOL = "daski_buy_outcome";
+/** A fresh reconciliation key. Also the idempotency key the gateway echoes. */
+export function newIntentId() {
+    return `daski-${randomBytes(16).toString("hex")}`;
+}
+/**
+ * Step 1: obtain a payment challenge. Prefers `daski_get_payment_challenge`
+ * and falls back to an unpaid `daski_buy_outcome`, which is the same challenge
+ * by a longer road.
+ */
+export async function requestChallenge(options) {
+    const { client, providerAgentId, outcomeId, request, payerAddress } = options;
+    const viaChallengeTool = await client.hasTool(CHALLENGE_TOOL);
+    const result = viaChallengeTool
+        ? await client.callTool(CHALLENGE_TOOL, {
+            providerAgentId, outcomeId, request, payerAddress,
+        })
+        : await client.callTool(BUY_TOOL, { providerAgentId, outcomeId, request });
+    const challenge = GatewayClient.challenge(result);
+    if (!challenge)
+        throw purchaseFailure(result);
+    const requirement = challenge.accepts[0];
+    if (!requirement) {
+        throw new CliError({
+            code: "DASKI_CHALLENGE_NO_REQUIREMENTS",
+            message: "The gateway returned a challenge with no payment requirements.",
+            remediation: "Retry; if it persists, report it to the gateway operator.",
+        });
+    }
+    return {
+        challenge,
+        requirement,
+        binding: bindingFromExtensions(challenge.extensions),
+        viaChallengeTool,
+    };
+}
+/**
+ * Steps 3 and 4: validate, recompute, sign. The authorization is built here
+ * rather than accepted, and the §4 validator sees it before the wallet does.
+ */
+export async function authorizePayment(options) {
+    const { policy, challenge, signer } = options;
+    const requirement = challenge.requirement;
+    const now = options.nowSeconds ?? Math.floor(Date.now() / 1_000);
+    const binding = challenge.binding;
+    const payer = getAddress(policy.payerAddress);
+    const splitter = getAddress(requirement.payTo);
+    const amount = BigInt(requirement.amount);
+    if (!binding) {
+        throw new CliError({
+            code: "DASKI_CHALLENGE_NOT_RECIPE_BOUND",
+            message: "This challenge carries no daski-order-binding, so its authorization " +
+                "nonce cannot be recomputed.",
+            remediation: "Only recipe-bound Daski challenges are signable here. Use " +
+                "`daski sign-payment` documentation to see the accepted shapes.",
+        });
+    }
+    const validAfter = BigInt(Math.max(0, now - 30));
+    const validBefore = BigInt(Math.min(now + requirement.maxTimeoutSeconds, binding.expiresAt));
+    const { deriveBindingNonce } = await import("@daski/x402-scheme");
+    const nonce = deriveBindingNonce(binding, {
+        chainId: policy.chainId,
+        canonicalToken: getAddress(policy.canonicalToken),
+        payer,
+        splitter,
+        grossAmount: amount,
+    });
+    const domain = {
+        name: requirement.extra.name,
+        version: requirement.extra.version,
+        chainId: policy.chainId,
+        verifyingContract: getAddress(requirement.asset),
+    };
+    const proposal = transferWithAuthorizationTypedData(domain, {
+        from: payer,
+        to: splitter,
+        value: amount.toString(),
+        validAfter: validAfter.toString(),
+        validBefore: validBefore.toString(),
+        nonce,
+    });
+    const validated = await validatePurchaseAuthorization(policy, proposal, {
+        providerAgentId: options.providerAgentId,
+        outcomeId: options.outcomeId,
+        challengeAmountAtomic: amount,
+        challengeAsset: getAddress(requirement.asset),
+        challengePayTo: splitter,
+        challengeNetwork: requirement.network,
+        approvedQuoteAtomic: options.approvedQuoteAtomic,
+        paymentIdentifier: options.intentId,
+        binding,
+        nowSeconds: now,
+    });
+    const signature = await signer.signTypedData(transferWithAuthorizationTypedData(domain, validated.authorization));
+    return {
+        submission: {
+            x402Version: challenge.challenge.x402Version,
+            resource: challenge.challenge.resource,
+            accepted: requirement,
+            payload: { authorization: validated.authorization, signature },
+            extensions: withPaymentIdentifier(paymentEchoExtensions(challenge.challenge.extensions), options.intentId),
+        },
+        amountAtomic: validated.amountAtomic,
+        nonce: validated.recomputedNonce,
+    };
+}
+/**
+ * Step 5: the paid retry. The payload rides in `_meta["x402/payment"]` unless
+ * `--legacy-arg` asks for the argument form.
+ */
+export async function submitPayment(options) {
+    const args = {
+        providerAgentId: options.providerAgentId,
+        outcomeId: options.outcomeId,
+        request: options.request,
+    };
+    if (options.legacyArg) {
+        args.paymentPayload = options.submission;
+        return options.client.callTool(BUY_TOOL, args);
+    }
+    return options.client.callTool(BUY_TOOL, args, {
+        "x402/payment": options.submission,
+    });
+}
+/**
+ * The ambiguous-outcome path. Never signs anything: it replays what was
+ * already signed, then corroborates against the payer's own history.
+ */
+export async function reconcileAmbiguousPurchase(options) {
+    const { client, record } = options;
+    // 1. Replay the identical authorization. Idempotent by the gateway's own
+    //    published retry policy, so this cannot create a second order.
+    const replay = await submitPayment({
+        client,
+        providerAgentId: record.providerAgentId,
+        outcomeId: record.outcomeId,
+        request: options.request,
+        submission: options.submission,
+        ...(options.legacyArg === undefined ? {} : { legacyArg: options.legacyArg }),
+    });
+    const replayBody = GatewayClient.json(replay);
+    if (!replay.isError && typeof replayBody?.orderHandle === "string") {
+        return {
+            status: "settled",
+            orderHandle: replayBody.orderHandle,
+            body: replayBody,
+            evidence: "identical signed authorization replayed to the same order",
+        };
+    }
+    // 2. Corroborate independently against the payer's own order history.
+    const listed = await listPayerOrders(options);
+    const match = listed.find((order) => order.providerAgentId === record.providerAgentId &&
+        order.outcomeId === record.outcomeId &&
+        order.grossAmount === record.amount &&
+        Date.parse(order.createdAt) >= Date.parse(record.createdAt) - 60_000);
+    if (match) {
+        return {
+            status: "settled",
+            orderHandle: match.orderHandle,
+            evidence: "matched an order in the payer's own history",
+        };
+    }
+    return {
+        status: "absent",
+        evidence: "the identical replay produced no order and the payer's history contains none",
+    };
+}
+/**
+ * The payer's order history. When the gateway echoes `paymentIdentifier` on a
+ * row, we filter by it exactly as §2 specifies; until then the rows carry no
+ * such field and the caller matches on the intent's other invariants.
+ */
+export async function listPayerOrders(options) {
+    const body = await callWalletQuery({
+        client: options.client,
+        signer: options.signer,
+        toolName: "daski_list_my_orders",
+        action: "list-orders",
+        payer: options.payer,
+        request: { limit: 25, cursor: null },
+        chainId: options.chainId,
+        gatewayUrl: options.gatewayUrl,
+    });
+    const rows = Array.isArray(body.orders) ? body.orders : [];
+    if (!options.intentId)
+        return rows;
+    const filtered = rows.filter((row) => row.paymentIdentifier === options.intentId);
+    // Only narrow when the gateway actually echoes the key; an empty result from
+    // a field that does not exist is not evidence of absence.
+    return filtered.length > 0 || rows.some((row) => row.paymentIdentifier !== undefined)
+        ? filtered
+        : rows;
+}
+/** Records the intent before signing, so an interruption is recoverable. */
+export function recordIntent(record) {
+    const existing = findByIntent(record.intentId);
+    if (existing)
+        return existing;
+    const now = new Date().toISOString();
+    return upsertOrder({ ...record, createdAt: now, updatedAt: now });
+}
+export { updateOrder };
+export function purchaseFailure(result) {
+    const body = GatewayClient.json(result);
+    const code = typeof body?.code === "string" ? body.code : "DASKI_PURCHASE_FAILED";
+    return new CliError({
+        code,
+        message: typeof body?.message === "string"
+            ? body.message
+            : "The gateway rejected the purchase.",
+        remediation: typeof body?.next_action === "string"
+            ? body.next_action
+            : "Re-run with --json to see the gateway's full response.",
+        details: { gateway: body ?? null },
+    });
+}
+/** Human-readable price, for approval prompts and receipts. */
+export function priceLine(amountAtomic) {
+    return formatUsdc(amountAtomic);
+}
+//# sourceMappingURL=purchase.js.map

package/dist/gateway/purchase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purchase.js","sourceRoot":"","sources":["../../src/gateway/purchase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,qBAAqB,EACrB,UAAU,EACV,qBAAqB,EACrB,kCAAkC,EAClC,6BAA6B,EAC7B,qBAAqB,GAItB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAgB,MAAM,MAAM,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EACL,YAAY,EACZ,WAAW,EACX,WAAW,GAEZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,aAAa,GAKd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,uEAAuE;AACvE,MAAM,CAAC,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAC5D,MAAM,CAAC,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AAU5C,+EAA+E;AAC/E,MAAM,UAAU,WAAW;IACzB,OAAO,SAAS,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAMtC;IACC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAC9E,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,gBAAgB;QAC7B,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE;YACpC,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY;SAClD,CAAC;QACJ,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IAE7E,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS;QAAE,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,iCAAiC;YACvC,OAAO,EAAE,gEAAgE;YACzE,WAAW,EAAE,2DAA2D;SACzE,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,SAAS;QACT,WAAW;QACX,OAAO,EAAE,qBAAqB,CAAC,SAAS,CAAC,UAAU,CAAC;QACpD,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAoBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAyB;IAC9D,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC9C,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,kCAAkC;YACxC,OAAO,EACL,sEAAsE;gBACtE,6BAA6B;YAC/B,WAAW,EACT,4DAA4D;gBAC5D,gEAAgE;SACnE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,WAAW,CAAC,iBAAiB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7F,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,EAAE;QACxC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC;QACjD,KAAK;QACL,QAAQ;QACR,WAAW,EAAE,MAAM;KACpB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,WAAW,CAAC,KAAM,CAAC,IAAK;QAC9B,OAAO,EAAE,WAAW,CAAC,KAAM,CAAC,OAAQ;QACpC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,iBAAiB,EAAE,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC;KACjD,CAAC;IACF,MAAM,QAAQ,GAAG,kCAAkC,CAAC,MAAM,EAAE;QAC1D,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE;QACxB,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;QACjC,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;QACnC,KAAK;KACN,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,MAAM,EAAE,QAAQ,EAAE;QACtE,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,qBAAqB,EAAE,MAAM;QAC7B,cAAc,EAAE,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC;QAC7C,cAAc,EAAE,QAAQ;QACxB,gBAAgB,EAAE,WAAW,CAAC,OAAO;QACrC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,iBAAiB,EAAE,OAAO,CAAC,QAAQ;QACnC,OAAO;QACP,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,aAAa,CAC1C,kCAAkC,CAAC,MAAM,EAAE,SAAS,CAAC,aAAa,CAAC,CACpE,CAAC;IAEF,OAAO;QACL,UAAU,EAAE;YACV,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,WAAW;YAC5C,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,QAAQ;YACtC,QAAQ,EAAE,WAAW;YACrB,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;YAC9D,UAAU,EAAE,qBAAqB,CAC/B,qBAAqB,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,EACrD,OAAO,CAAC,QAAQ,CACjB;SACF;QACD,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,KAAK,EAAE,SAAS,CAAC,eAAe;KACjC,CAAC;AACJ,CAAC;AAaD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAsB;IACxD,MAAM,IAAI,GAA4B;QACpC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;IACF,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC;QACzC,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE;QAC7C,cAAc,EAAE,OAAO,CAAC,UAAU;KACnC,CAAC,CAAC;AACL,CAAC;AAuBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAyB;IAEzB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAEnC,yEAAyE;IACzE,mEAAmE;IACnE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;QACjC,MAAM;QACN,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;KAC7E,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,UAAU,EAAE,WAAW,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,2DAA2D;SACtE,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAClC,KAAK,CAAC,eAAe,KAAK,MAAM,CAAC,eAAe;QAChD,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QACpC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,MAAM;QACnC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC;IACxE,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,6CAA6C;SACxD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,QAAQ,EACN,8EAA8E;KACjF,CAAC;AACJ,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAOrC;IACC,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC;QACjC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,sBAAsB;QAChC,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QACpC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClF,6EAA6E;IAC7E,0DAA0D;IAC1D,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC;QACnF,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,YAAY,CAAC,MAAoD;IAC/E,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,WAAW,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,CAAC;AAEvB,MAAM,UAAU,eAAe,CAAC,MAAqB;IACnD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAClF,OAAO,IAAI,QAAQ,CAAC;QAClB,IAAI;QACJ,OAAO,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ;YACxC,CAAC,CAAC,IAAI,CAAC,OAAO;YACd,CAAC,CAAC,oCAAoC;QACxC,WAAW,EAAE,OAAO,IAAI,EAAE,WAAW,KAAK,QAAQ;YAChD,CAAC,CAAC,IAAI,CAAC,WAAW;YAClB,CAAC,CAAC,wDAAwD;QAC5D,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI,EAAE;KACnC,CAAC,CAAC;AACL,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,SAAS,CAAC,YAAoB;IAC5C,OAAO,UAAU,CAAC,YAAY,CAAC,CAAC;AAClC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `@daski/pay` as a library.
+ *
+ * The CLI is the product; this surface exists so a host application can reuse
+ * the same validated flows without shelling out. Everything exported here
+ * still signs only through the §4 validator.
+ */
+export { runBuy, type BuyOptions } from "./commands/buy.js";
+export { runDoctor, type DoctorIssue, type DoctorOptions, type DoctorReport } from "./commands/doctor.js";
+export { orderArtifact, orderCancel, orderConfirm, orderInput, orderStatus, type OrderArtifactOptions, type OrderInputOptions, type OrderOptions, } from "./commands/order.js";
+export { runSignPayment, type SignPaymentOptions } from "./commands/signPayment.js";
+export { createWallet, walletAddress, walletBalance, type WalletOptions } from "./commands/wallet.js";
+export { CliError, type CliErrorOptions } from "./cli/errors.js";
+export { redactText, redactValue } from "./cli/redact.js";
+export { applyCapOverrides, atomicUsdc, ensureConfig, loadConfig, permissionWarnings, type DaskiConfig, type LoadedConfig, type ProfileConfig, type SignerKind, } from "./config.js";
+export { createContext, type CommandContext, type ContextOptions } from "./context.js";
+export { Catalog, CATALOG_TTL_SECONDS, type OutcomeSummary } from "./gateway/catalog.js";
+export { GatewayClient, readiness, type GatewayCallLog, type PaymentChallenge, type PaymentRequirement, type PaymentSubmission, } from "./gateway/client.js";
+export { callAuthorizedLifecycleTool, callWalletQuery } from "./gateway/lifecycle.js";
+export { authorizePayment, listPayerOrders, newIntentId, reconcileAmbiguousPurchase, recordIntent, requestChallenge, submitPayment, type AuthorizedPayment, type ChallengeResult, type ReconcileOutcome, } from "./gateway/purchase.js";
+export { createSigner, type SignerSelection } from "./signers/index.js";
+export { runSignerSelfTest, selfTestVector, type SignerSelfTestResult } from "./signers/selfTest.js";
+export { activeReadCapability, authorizedTotalAtomic, findByIntent, findOrder, listOrders, updateOrder, upsertOrder, type OrderRecord, type OrderState, } from "./store/orders.js";
+export { hasKey, locateKey, type KeyLocation, type KeySource } from "./store/keystore.js";
+export { CLI_VERSION } from "./version.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC1G,OAAO,EACL,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EACjE,KAAK,oBAAoB,EAAE,KAAK,iBAAiB,EAAE,KAAK,YAAY,GACrE,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAEtG,OAAO,EAAE,QAAQ,EAAE,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EACL,iBAAiB,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAC3E,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,GACzE,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAEvF,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,EACL,aAAa,EAAE,SAAS,EACxB,KAAK,cAAc,EAAE,KAAK,gBAAgB,EAAE,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,GAC5F,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EACL,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,0BAA0B,EAC1E,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAC7C,KAAK,iBAAiB,EAAE,KAAK,eAAe,EAAE,KAAK,gBAAgB,GACpE,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,KAAK,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACrG,OAAO,EACL,oBAAoB,EAAE,qBAAqB,EAAE,YAAY,EAAE,SAAS,EACpE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,GACxE,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,26 @@
+/**
+ * `@daski/pay` as a library.
+ *
+ * The CLI is the product; this surface exists so a host application can reuse
+ * the same validated flows without shelling out. Everything exported here
+ * still signs only through the §4 validator.
+ */
+export { runBuy } from "./commands/buy.js";
+export { runDoctor } from "./commands/doctor.js";
+export { orderArtifact, orderCancel, orderConfirm, orderInput, orderStatus, } from "./commands/order.js";
+export { runSignPayment } from "./commands/signPayment.js";
+export { createWallet, walletAddress, walletBalance } from "./commands/wallet.js";
+export { CliError } from "./cli/errors.js";
+export { redactText, redactValue } from "./cli/redact.js";
+export { applyCapOverrides, atomicUsdc, ensureConfig, loadConfig, permissionWarnings, } from "./config.js";
+export { createContext } from "./context.js";
+export { Catalog, CATALOG_TTL_SECONDS } from "./gateway/catalog.js";
+export { GatewayClient, readiness, } from "./gateway/client.js";
+export { callAuthorizedLifecycleTool, callWalletQuery } from "./gateway/lifecycle.js";
+export { authorizePayment, listPayerOrders, newIntentId, reconcileAmbiguousPurchase, recordIntent, requestChallenge, submitPayment, } from "./gateway/purchase.js";
+export { createSigner } from "./signers/index.js";
+export { runSignerSelfTest, selfTestVector } from "./signers/selfTest.js";
+export { activeReadCapability, authorizedTotalAtomic, findByIntent, findOrder, listOrders, updateOrder, upsertOrder, } from "./store/orders.js";
+export { hasKey, locateKey } from "./store/keystore.js";
+export { CLI_VERSION } from "./version.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,EAAmB,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAA2D,MAAM,sBAAsB,CAAC;AAC1G,OAAO,EACL,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,GAElE,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAA2B,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AAEtG,OAAO,EAAE,QAAQ,EAAwB,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EACL,iBAAiB,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,kBAAkB,GAE5E,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,aAAa,EAA4C,MAAM,cAAc,CAAC;AAEvF,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAuB,MAAM,sBAAsB,CAAC;AACzF,OAAO,EACL,aAAa,EAAE,SAAS,GAEzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,2BAA2B,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EACL,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,0BAA0B,EAC1E,YAAY,EAAE,gBAAgB,EAAE,aAAa,GAE9C,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,YAAY,EAAwB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAA6B,MAAM,uBAAuB,CAAC;AACrG,OAAO,EACL,oBAAoB,EAAE,qBAAqB,EAAE,YAAY,EAAE,SAAS,EACpE,UAAU,EAAE,WAAW,EAAE,WAAW,GACrC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAoC,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/paths.d.ts

@@ -0,0 +1,6 @@
+/** `~/.daski`, or `$DASKI_HOME` when set (used by the conformance suite). */
+export declare function daskiHome(): string;
+export declare const configPath: () => string;
+export declare const ordersPath: () => string;
+export declare const keystorePath: () => string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAIA,6EAA6E;AAC7E,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,eAAO,MAAM,UAAU,QAAO,MAA0C,CAAC;AACzE,eAAO,MAAM,UAAU,QAAO,MAA0C,CAAC;AACzE,eAAO,MAAM,YAAY,QAAO,MAA4C,CAAC"}

package/dist/paths.js

@@ -0,0 +1,11 @@
+/** Where the bridge keeps its state. One directory, three files, no surprises. */
+import { homedir } from "node:os";
+import { join } from "node:path";
+/** `~/.daski`, or `$DASKI_HOME` when set (used by the conformance suite). */
+export function daskiHome() {
+    return process.env.DASKI_HOME ?? join(homedir(), ".daski");
+}
+export const configPath = () => join(daskiHome(), "config.json");
+export const ordersPath = () => join(daskiHome(), "orders.json");
+export const keystorePath = () => join(daskiHome(), "keystore.json");
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,6EAA6E;AAC7E,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;AACzE,MAAM,CAAC,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;AACzE,MAAM,CAAC,MAAM,YAAY,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAC"}

package/dist/signers/cdp.d.ts

@@ -0,0 +1,7 @@
+import type { SignerAdapter } from "@daski/x402-scheme";
+export interface CdpSignerOptions {
+    /** CDP account name or address; defaults to `$DASKI_CDP_ACCOUNT`. */
+    account?: string | undefined;
+}
+export declare function createCdpSigner(options?: CdpSignerOptions): Promise<SignerAdapter>;
+//# sourceMappingURL=cdp.d.ts.map

package/dist/signers/cdp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdp.d.ts","sourceRoot":"","sources":["../../src/signers/cdp.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAoB,MAAM,oBAAoB,CAAC;AAU1E,MAAM,WAAW,gBAAgB;IAC/B,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,wBAAsB,eAAe,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC,CAsB5F"}

package/dist/signers/cdp.js

@@ -0,0 +1,42 @@
+import { CliError } from "../cli/errors.js";
+const DOC = "https://github.com/daski-io/buyer/blob/main/docs/signers.md#cdp";
+export async function createCdpSigner(options = {}) {
+    const accountName = options.account ?? process.env.DASKI_CDP_ACCOUNT;
+    if (!accountName) {
+        throw new CliError({
+            code: "DASKI_CDP_ACCOUNT_UNSET",
+            message: "The CDP signer needs an account name or address.",
+            remediation: `Set DASKI_CDP_ACCOUNT, or pass --cdp-account. See ${DOC}`,
+        });
+    }
+    const sdk = await importCdp();
+    const client = new sdk.CdpClient();
+    const account = await client.evm.getOrCreateAccount({ name: accountName });
+    return {
+        getAddress: async () => account.address,
+        signTypedData: (payload) => account.signTypedData(payload),
+        describe: () => ({
+            provider: "cdp",
+            // CDP can mint both; the conformance run is what pins this down per account.
+            accountType: "unknown",
+            conformance: "candidate-pending-conformance",
+        }),
+    };
+}
+/**
+ * `@coinbase/cdp-sdk` is not a dependency of this package: installing it is
+ * the operator's choice, and the local signer must not carry its weight.
+ */
+async function importCdp() {
+    try {
+        return (await import("@coinbase/cdp-sdk"));
+    }
+    catch {
+        throw new CliError({
+            code: "DASKI_CDP_SDK_MISSING",
+            message: "The CDP signer requires @coinbase/cdp-sdk, which is not installed.",
+            remediation: `Run: npm install @coinbase/cdp-sdk — then see ${DOC}`,
+        });
+    }
+}
+//# sourceMappingURL=cdp.js.map

package/dist/signers/cdp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdp.js","sourceRoot":"","sources":["../../src/signers/cdp.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,MAAM,GAAG,GAAG,iEAAiE,CAAC;AAY9E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAA4B,EAAE;IAClE,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACrE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,kDAAkD;YAC3D,WAAW,EAAE,qDAAqD,GAAG,EAAE;SACxE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAmB,CAAC;IAC7F,OAAO;QACL,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO;QACvC,aAAa,EAAE,CAAC,OAAyB,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;QAC5E,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YACf,QAAQ,EAAE,KAAK;YACf,6EAA6E;YAC7E,WAAW,EAAE,SAAS;YACtB,WAAW,EAAE,+BAA+B;SAC7C,CAAC;KACH,CAAC;AACJ,CAAC;AAQD;;;GAGG;AACH,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,MAAM,CAAC,mBAA6B,CAAC,CAAc,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,oEAAoE;YAC7E,WAAW,EAAE,iDAAiD,GAAG,EAAE;SACpE,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/signers/circle.d.ts

@@ -0,0 +1,53 @@
+import type { SignerAdapter, TypedDataRequest } from "@daski/x402-scheme";
+/** The slice of a Circle wallet record the adapter reads. */
+export interface CircleWallet {
+    address: string;
+    /** `"EOA"` or `"SCA"`. */
+    accountType: string;
+    blockchain?: string;
+}
+/** The slice of the Circle client the adapter uses. */
+export interface CircleClient {
+    getWallet(input: {
+        id: string;
+    }): Promise<{
+        data?: {
+            wallet: CircleWallet;
+        } | undefined;
+    }>;
+    signTypedData(input: {
+        walletId: string;
+        data: string;
+        memo?: string;
+    }): Promise<{
+        data?: {
+            signature: string;
+        } | undefined;
+    }>;
+}
+/** The slice of `@circle-fin/developer-controlled-wallets` the adapter imports. */
+export interface CircleModule {
+    initiateDeveloperControlledWalletsClient(config: {
+        apiKey: string;
+        entitySecret: string;
+    }): CircleClient;
+}
+export interface CircleSignerOptions {
+    /** Circle wallet id; defaults to `$DASKI_CIRCLE_WALLET`. */
+    wallet?: string | undefined;
+    /**
+     * The SDK module, or a loader for it. Defaults to a dynamic import of the
+     * real package; injectable so unit tests can run without installing it.
+     */
+    sdk?: CircleModule | (() => Promise<CircleModule>) | undefined;
+}
+export declare function createCircleSigner(options?: CircleSignerOptions): Promise<SignerAdapter>;
+/**
+ * Exactly the request the validator produced — domain, types, primaryType,
+ * message — as the JSON string Circle's `signTypedData` takes. `uint256`
+ * values arrive as bigints, which JSON cannot carry, so they go out as decimal
+ * strings: the same wire form the authorization itself uses. `EIP712Domain` is
+ * not added to `types`; it is derived from `domain`, as the validator does.
+ */
+export declare function serializeTypedData(payload: TypedDataRequest): string;
+//# sourceMappingURL=circle.d.ts.map

package/dist/signers/circle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"circle.d.ts","sourceRoot":"","sources":["../../src/signers/circle.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAM1E,6DAA6D;AAC7D,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE;YAAE,MAAM,EAAE,YAAY,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;IAC3F,aAAa,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC/E,IAAI,CAAC,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAC;KAC1C,CAAC,CAAC;CACJ;AAED,mFAAmF;AACnF,MAAM,WAAW,YAAY;IAC3B,wCAAwC,CAAC,MAAM,EAAE;QAC/C,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,EAAE,MAAM,CAAC;KACtB,GAAG,YAAY,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B;;;OAGG;IACH,GAAG,CAAC,EAAE,YAAY,GAAG,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,SAAS,CAAC;CAChE;AAED,wBAAsB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,aAAa,CAAC,CA+ElG;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAMpE"}