@daski/pay 0.2.0 → 0.3.0

package/README.md

@@ -1,101 +1,56 @@
-# `@daski/pay`
+# @daski/pay
 
-The Daski buyer bridge. A CLI that buys outcomes, tracks orders across
-processes, and refuses to sign anything it has not independently checked.
+The Daski buyer CLI obtains a quote, validates and signs an approved payment, and tracks the order across processes. Wallet keys stay in their protected store.
+
+## Setup and purchase
 
 ```bash
-npx @daski/pay@0.2.0 doctor --json
+npm install -g @daski/pay@0.3.0
+daski doctor --json
 ```
 
-> Server proposes; buyer bridge validates against its own expectations and
-> recomputes; wallet signs; the gateway never sees the key.
-
-## Commands
-
-| Command | What it does |
-|---|---|
-| `daski doctor` | Readiness report; exits 0 only when nothing blocks, including one read-only MCP round trip that proves this CLI can read the gateway's results. Every issue carries a remediation |
-| `daski wallet create` | Generate a local EOA — interactive human confirmation required |
-| `daski wallet address` / `balance` | The active payer address; native + USDC balances |
-| `daski buy --provider <id> --outcome <id> --request <file.json>` | Challenge → approve → validate → sign → submit → record |
-| `daski order status <handle>` | Read an order's state |
-| `daski order artifact <handle>` | Write the result **to a file**, never to stdout |
-| `daski order confirm/input/cancel <handle>` | Mutating lifecycle actions |
-| `daski sign-payment --challenge <file.json>` | Validate, recompute, sign; print the exact `paymentPayload` |
-
-All support `--json`. Global flags: `--profile`, `--signer <local|cdp|circle>`,
-`--cdp-account`, `--circle-wallet`, `--max-per-order`, `--session-cap`.
-
-## Spend caps are yours, not the agent's
-
-`maxPerOrderUsdc`, `sessionCapUsdc` and `requireApprovalAboveUsdc` live only
-in `~/.daski/config.json`. **No flag and no environment variable can raise
-them.** `--max-per-order` and `--session-cap` may lower a cap for a single
-invocation; a value above the configured one is refused.
-
-Above `requireApprovalAboveUsdc`, `daski buy` shows the approval summary and
-waits for a human. In `--json` or non-TTY mode it does not quietly proceed —
-it exits `2` and explains how a human can approve.
+Doctor reports the configured signer, its self-test, native state paths, network, balances, spending settings, and gateway compatibility. Reuse a healthy signer. Create a wallet only if one is missing: `daski wallet create` prompts interactively; authorized agent setup uses `daski wallet create --yes-human-approved`.
 
-The running session total is read from `~/.daski/orders.json`, so the cap
-holds across processes rather than resetting whenever an agent restarts.
+Complete the request using gateway discovery and `daski_get_outcome_requirements`, then run:
 
-## Orders survive the process that placed them
-
-Every order is recorded in `~/.daski/orders.json` — handle, intent id,
-provider/outcome, amount, state, read capability and expiry. `daski order
-status` works from a cold start with nothing but the handle.
-
-The intent is recorded **before** the signature goes out, which is what makes
-an interrupted purchase recoverable.
-
-## Interrupted purchases are reconciled, never re-signed
-
-On a timeout, a `PAYMENT_PENDING_RECONCILIATION`, or a transport drop after
-submit, the CLI replays the *identical* signed authorization — idempotent by
-the gateway's own published retry policy — and corroborates against the
-payer's own order history. Only when both agree no order exists does it report
-the purchase as safely retryable.
-
-A second signature over a fresh challenge is a second order, and a second
-charge. See [reconciliation](../../docs/policy.md#reconciliation).
+```bash
+daski buy --provider <id> --outcome <id> --request <file.json> --json
+```
 
-## Artifacts are written, not printed
+The command returns the actual quote and an approval identifier. After the user approves, repeat with `--approve <approval.id>`. Interactive use prompts directly. New profiles approve each paid quote and have no extra default budget. Existing settings remain in place on upgrade.
 
-`daski order artifact` writes the provider's bytes to a file and prints only
-the envelope metadata. Provider results are validated but untrusted, and both
-a terminal and an agent's context window are interpreters: dumping untrusted
-content into one is how "here is your result" becomes "here are your
-instructions".
+## Commands
 
-## Signers
+| Command | Behavior |
+|---|---|
+| `doctor --json` | Diagnose signer, paths, settings, funds, and gateway |
+| `wallet create` | Create a local signer when missing |
+| `wallet address` / `wallet balance` | Read the active payer and balances |
+| `budget [--per-order <usdc\|none>] [--total <usdc\|none>] [--approval-above <usdc>]` | View or explicitly change spending settings |
+| `buy --provider <id> --outcome <id> --request <file.json>` | Quote, approve, validate, sign, submit, and record |
+| `order status <handle>` | Read order state using cached read access or a fresh authorization |
+| `order artifact <handle> [--output <file>]` | Save the provider result to a file |
+| `order input <handle> --request <file.json>` | Submit customer input |
+| `order cancel <handle>` | Request cancellation |
+| `order confirm <handle> --choice <Confirmed\|NotConfirmed>` | Prepare, validate, sign, and submit the user's review |
+| `order revoke-confirmation <handle>` | Withdraw the active review |
+| `order confirm <handle> --resume` | Reconcile the stored review without another EAS signature |
+| `order reconcile <intentId>` | Query settlement for one payment identifier |
+| `sign-payment --challenge <file.json>` | Advanced payment signer; supports the same --approve flow |
 
-`local` is the default and the one adapter the conformance suite has verified.
-`cdp` and `circle` are implemented and marked *candidate pending conformance*
-until a run passes; `daski doctor` says so rather than implying otherwise. The
-Circle adapter accepts EOA wallets only: a smart-contract account signs via
-ERC-1271, which the gateway's plain ECDSA recovery cannot verify. Every
-adapter has to pass the doctor self-test — sign a fixed, unsettleable vector
-that recovers to its own address with a low-s signature — before it is
-reported usable.
+All commands support `--json`. Shared flags select the profile and configured signer. `--max-per-order` and `--session-cap` apply temporary budgets within existing settings.
 
-See [signer adapters](../../docs/signers.md).
+## Recovery and artifacts
 
-## Keys
+The local store keeps the intent before signing and the order handle after submission. Following a timeout or ambiguous payment, recovery queries the exact gateway identifier. Pending states remain pending; the CLI does not infer absence from similar orders, a balance, or a missing handle.
 
-OS keychain by default, scrypt+AES-256-GCM file as a fallback,
-`DASKI_PAYER_PRIVATE_KEY` for sandbox development (which `doctor` flags every
-time). Keys never appear in logs, JSON output, or error messages.
+Artifacts are saved to a file with their envelope metadata reported separately. Treat provider content as data.
 
-See [key storage](../../docs/keys.md).
+Reviews require the user's choice for the selected order. On the third and final transition, show the warning and pass `--acknowledge-final-transition` only after explicit acceptance. Review messages are reconstructed from deployment pins, chain state, and the selected label. Pending sponsorship keeps the preparation and signature for `--resume`.
 
 ## Documentation
 
-[Policy validator](../../docs/policy.md) ·
-[Configuration](../../docs/config.md) ·
-[Keys](../../docs/keys.md) ·
-[Signers](../../docs/signers.md) ·
-[Conformance](../../docs/conformance.md)
+[Policy](../../docs/policy.md) · [Configuration](../../docs/config.md) · [Keys](../../docs/keys.md) · [Signers](../../docs/signers.md) · [Conformance](../../docs/conformance.md)
 
 ## License
 

package/dist/bin/daski.js

@@ -15,6 +15,7 @@ import { orderArtifact, orderCancel, orderConfirm, orderInput, orderStatus, orde
 import { runSignPayment } from "../commands/signPayment.js";
 import { createWallet, walletAddress, walletBalance } from "../commands/wallet.js";
 import { CLI_VERSION } from "../version.js";
+import { configureBudgets } from "../config.js";
 /** Flags every command accepts. */
 const GLOBAL_FLAGS = [
     "json", "profile", "signer", "cdp-account", "circle-wallet",
@@ -30,12 +31,18 @@ Commands
   wallet create                       Generate a local EOA (requires human confirmation)
   wallet address                      Print the active payer address
   wallet balance                      Print native + USDC balances
+  budget [--per-order <usdc|none>] [--total <usdc|none>] [--approval-above <usdc>]
+                                      View or change optional spending settings
   buy --provider <id> --outcome <id> --request <file.json> [--payer <addr>]
                                       Challenge, approve, validate, sign, submit, record
+                                      After quote approval: repeat with --approve <approval.id>
   order status <handle>               Read an order's state
   order artifact <handle> [--output <file>]
                                       Write the result bytes to a file (never to stdout)
-  order confirm <handle>              Confirm delivery
+  order confirm <handle> --choice <Confirmed|NotConfirmed>
+                                      Record the user's delivery review
+  order revoke-confirmation <handle>  Withdraw the active review
+  order confirm <handle> --resume     Reconcile a pending review submission
   order input <handle> --request <file.json>
                                       Submit requested customer input
   order cancel <handle>               Request cancellation
@@ -49,11 +56,11 @@ Global flags
   --signer <local|cdp|circle>         Override the profile's signer
   --cdp-account <name>                CDP account for --signer cdp (or DASKI_CDP_ACCOUNT)
   --circle-wallet <id>                Circle wallet id for --signer circle (or DASKI_CIRCLE_WALLET)
-  --max-per-order <usdc>              Lower the per-order cap for this run only
-  --session-cap <usdc>                Lower the session cap for this run only
+  --max-per-order <usdc>              Apply a temporary per-order budget
+  --session-cap <usdc>                Apply a temporary total budget
 
-Caps live in ~/.daski/config.json and are human-owned: a flag may lower one,
-never raise it. See https://github.com/daski-io/buyer#readme
+New profiles use quote approval, with optional budgets. Doctor reports the
+active configuration path. See https://github.com/daski-io/buyer#readme
 `;
 async function main(argv) {
     const { command, flags } = parseArgs(argv);
@@ -76,6 +83,12 @@ async function main(argv) {
         sessionCapUsdc: stringFlag(flags, "session-cap"),
     };
     switch (command[0]) {
+        case "budget": {
+            assertKnownFlags(flags, ["json", "profile", "per-order", "total", "approval-above"]);
+            emit(configureBudgets({ profile: shared.profile, perOrder: stringFlag(flags, "per-order"),
+                total: stringFlag(flags, "total"), approvalAbove: stringFlag(flags, "approval-above") }), output);
+            return 0;
+        }
         case "doctor": {
             assertKnownFlags(flags, GLOBAL_FLAGS);
             const report = await runDoctor(shared);
@@ -106,7 +119,7 @@ async function main(argv) {
             }
         }
         case "buy": {
-            assertKnownFlags(flags, [...GLOBAL_FLAGS, "provider", "outcome", "request", "payer", "legacy-arg", "yes"]);
+            assertKnownFlags(flags, [...GLOBAL_FLAGS, "provider", "outcome", "request", "payer", "legacy-arg", "approve"]);
             const result = await runBuy({
                 ...shared,
                 providerAgentId: requireFlag(flags, "provider"),
@@ -114,7 +127,7 @@ async function main(argv) {
                 requestFile: requireFlag(flags, "request"),
                 payer: stringFlag(flags, "payer"),
                 legacyArg: boolFlag(flags, "legacy-arg"),
-                yes: boolFlag(flags, "yes"),
+                approved: stringFlag(flags, "approve"),
                 json,
             });
             emit(result, output);
@@ -140,8 +153,11 @@ async function main(argv) {
                     emit(await orderArtifact({ ...base, output: stringFlag(flags, "output") }), output);
                     return 0;
                 case "confirm":
-                    assertKnownFlags(flags, GLOBAL_FLAGS);
-                    emit(await orderConfirm(base), output);
+                case "revoke-confirmation":
+                    assertKnownFlags(flags, [...GLOBAL_FLAGS, "choice", "resume", "acknowledge-final-transition"]);
+                    emit(await orderConfirm({ ...base, confirmation: stringFlag(flags, "choice"),
+                        revoke: command[1] === "revoke-confirmation", resume: boolFlag(flags, "resume"),
+                        acknowledgeFinalTransition: boolFlag(flags, "acknowledge-final-transition") }), output);
                     return 0;
                 case "cancel":
                     assertKnownFlags(flags, GLOBAL_FLAGS);
@@ -156,16 +172,17 @@ async function main(argv) {
                     emit(await orderReconcile(base), output);
                     return 0;
                 default:
-                    throw unknownSubcommand("order", command[1], ["status", "artifact", "confirm", "input", "cancel", "reconcile"]);
+                    throw unknownSubcommand("order", command[1], ["status", "artifact", "confirm", "revoke-confirmation", "input", "cancel", "reconcile"]);
             }
         }
         case "sign-payment": {
-            assertKnownFlags(flags, [...GLOBAL_FLAGS, "challenge", "provider", "outcome"]);
+            assertKnownFlags(flags, [...GLOBAL_FLAGS, "challenge", "provider", "outcome", "approve"]);
             emit(await runSignPayment({
                 ...shared,
                 challengeFile: requireFlag(flags, "challenge"),
                 providerAgentId: stringFlag(flags, "provider"),
                 outcomeId: stringFlag(flags, "outcome"),
+                approved: stringFlag(flags, "approve"),
                 json,
             }), output);
             return 0;

package/dist/bin/daski.js.map

@@ -1 +1 @@
-{"version":3,"file":"daski.js","sourceRoot":"","sources":["../../src/bin/daski.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AACH,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAChG,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EACjE,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,mCAAmC;AACnC,MAAM,YAAY,GAAG;IACnB,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe;IAC3D,eAAe,EAAE,aAAa;CACtB,CAAC;AAEX,MAAM,KAAK,GAAG,SAAS,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCjC,CAAC;AAEF,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC;IAExB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC;QACrC,cAAc,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC3C,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5C,YAAY,EAAE,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC;QAChD,eAAe,EAAE,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC;QACnD,cAAc,EAAE,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC;KACjD,CAAC;IAEF,QAAQ,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACnB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,oBAAoB,CAAC,CAAC,CAAC;YACjE,MAAM,aAAa,GAAG;gBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;aACxD,CAAC;YACF,QAAQ,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,KAAK,QAAQ;oBAAE,IAAI,CAAC,MAAM,YAAY,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;oBAAC,OAAO,CAAC,CAAC;gBACzE,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,aAAa,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;oBAAC,OAAO,CAAC,CAAC;gBAC3E,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,aAAa,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;oBAAC,OAAO,CAAC,CAAC;gBAC3E;oBACE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3G,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;gBAC1B,GAAG,MAAM;gBACT,eAAe,EAAE,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC;gBAC/C,SAAS,EAAE,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC;gBACxC,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC;gBAC1C,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC;gBACjC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;gBACxC,GAAG,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;gBAC3B,IAAI;aACL,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACrB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,QAAQ,CAAC;oBACjB,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,iBAAiB,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,2BAA2B;oBAC7E,WAAW,EAAE,2DAA2D;iBACzE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACzC,QAAQ,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,KAAK,QAAQ;oBACX,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;oBACtC,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;oBACtC,OAAO,CAAC,CAAC;gBACX,KAAK,UAAU;oBACb,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;oBACrD,IAAI,CAAC,MAAM,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;oBACpF,OAAO,CAAC,CAAC;gBACX,KAAK,SAAS;oBACZ,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;oBACtC,IAAI,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;oBACvC,OAAO,CAAC,CAAC;gBACX,KAAK,QAAQ;oBACX,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;oBACtC,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;oBACtC,OAAO,CAAC,CAAC;gBACX,KAAK,OAAO;oBACV,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;oBACtD,IAAI,CAAC,MAAM,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;oBACxF,OAAO,CAAC,CAAC;gBACX,KAAK,WAAW;oBACd,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;oBACtC,IAAI,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;oBACzC,OAAO,CAAC,CAAC;gBACX;oBACE,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACzC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/E,IAAI,CAAC,MAAM,cAAc,CAAC;gBACxB,GAAG,MAAM;gBACT,aAAa,EAAE,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC;gBAC9C,eAAe,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;gBAC9C,SAAS,EAAE,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC;gBACvC,IAAI;aACL,CAAC,EAAE,MAAM,CAAC,CAAC;YACZ,OAAO,CAAC,CAAC;QACX,CAAC;QAED;YACE,MAAM,IAAI,QAAQ,CAAC;gBACjB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,oBAAoB,OAAO,CAAC,CAAC,CAAC,IAAI;gBAC3C,WAAW,EAAE,iDAAiD;aAC/D,CAAC,CAAC;IACP,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,KAAyB,EAAE,KAAe;IAClF,OAAO,IAAI,QAAQ,CAAC;QAClB,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,mBAAmB,KAAK,kBAAkB,KAAK,IAAI,QAAQ,EAAE;QACtE,WAAW,EAAE,eAAe,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACvF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACxB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;KAC5C,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"daski.js","sourceRoot":"","sources":["../../src/bin/daski.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AACH,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAChG,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EACL,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EACjE,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,mCAAmC;AACnC,MAAM,YAAY,GAAG;IACnB,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe;IAC3D,eAAe,EAAE,aAAa;CACtB,CAAC;AAEX,MAAM,KAAK,GAAG,SAAS,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCjC,CAAC;AAEF,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC;IAExB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC;QACrC,cAAc,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC3C,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5C,YAAY,EAAE,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC;QAChD,eAAe,EAAE,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC;QACnD,cAAc,EAAE,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC;KACjD,CAAC;IAEF,QAAQ,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACnB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,gBAAgB,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACrF,IAAI,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC;gBACvF,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YACpG,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,oBAAoB,CAAC,CAAC,CAAC;YACjE,MAAM,aAAa,GAAG;gBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;aACxD,CAAC;YACF,QAAQ,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,KAAK,QAAQ;oBAAE,IAAI,CAAC,MAAM,YAAY,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;oBAAC,OAAO,CAAC,CAAC;gBACzE,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,aAAa,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;oBAAC,OAAO,CAAC,CAAC;gBAC3E,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,aAAa,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;oBAAC,OAAO,CAAC,CAAC;gBAC3E;oBACE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/G,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;gBAC1B,GAAG,MAAM;gBACT,eAAe,EAAE,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC;gBAC/C,SAAS,EAAE,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC;gBACxC,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC;gBAC1C,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC;gBACjC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;gBACxC,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC;gBACtC,IAAI;aACL,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACrB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,QAAQ,CAAC;oBACjB,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,iBAAiB,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,2BAA2B;oBAC7E,WAAW,EAAE,2DAA2D;iBACzE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACzC,QAAQ,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,KAAK,QAAQ;oBACX,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;oBACtC,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;oBACtC,OAAO,CAAC,CAAC;gBACX,KAAK,UAAU;oBACb,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;oBACrD,IAAI,CAAC,MAAM,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;oBACpF,OAAO,CAAC,CAAC;gBACX,KAAK,SAAS,CAAC;gBACf,KAAK,qBAAqB;oBACxB,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,8BAA8B,CAAC,CAAC,CAAC;oBAC/F,IAAI,CAAC,MAAM,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC;wBAC1E,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,qBAAqB,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;wBAC/E,0BAA0B,EAAE,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;oBAC1F,OAAO,CAAC,CAAC;gBACX,KAAK,QAAQ;oBACX,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;oBACtC,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;oBACtC,OAAO,CAAC,CAAC;gBACX,KAAK,OAAO;oBACV,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;oBACtD,IAAI,CAAC,MAAM,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;oBACxF,OAAO,CAAC,CAAC;gBACX,KAAK,WAAW;oBACd,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;oBACtC,IAAI,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;oBACzC,OAAO,CAAC,CAAC;gBACX;oBACE,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACzC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,qBAAqB,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QAED,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,gBAAgB,CAAC,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;YAC1F,IAAI,CAAC,MAAM,cAAc,CAAC;gBACxB,GAAG,MAAM;gBACT,aAAa,EAAE,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC;gBAC9C,eAAe,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;gBAC9C,SAAS,EAAE,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC;gBACvC,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC;gBACtC,IAAI;aACL,CAAC,EAAE,MAAM,CAAC,CAAC;YACZ,OAAO,CAAC,CAAC;QACX,CAAC;QAED;YACE,MAAM,IAAI,QAAQ,CAAC;gBACjB,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,oBAAoB,OAAO,CAAC,CAAC,CAAC,IAAI;gBAC3C,WAAW,EAAE,iDAAiD;aAC/D,CAAC,CAAC;IACP,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,KAAyB,EAAE,KAAe;IAClF,OAAO,IAAI,QAAQ,CAAC;QAClB,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,mBAAmB,KAAK,kBAAkB,KAAK,IAAI,QAAQ,EAAE;QACtE,WAAW,EAAE,eAAe,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACvF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACxB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;KAC5C,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/commands/approval.d.ts

@@ -0,0 +1,52 @@
+import { type OrderBinding } from "@daski/x402-scheme";
+import type { PaymentRequirement } from "../gateway/client.js";
+/** Approval survives quote expiry only while all purchase terms stay the same. */
+export declare function purchaseApproval(args: {
+    gatewayUrl: string;
+    payer: string;
+    providerAgentId: string;
+    outcomeId: string;
+    requirement: PaymentRequirement;
+    binding: OrderBinding;
+    purchaseNumber?: number;
+}): {
+    gateway: string;
+    payer: `0x${string}`;
+    providerAgentId: string;
+    outcomeId: string;
+    network: string;
+    token: `0x${string}`;
+    payTo: `0x${string}`;
+    amount: string;
+    requestHash: `0x${string}`;
+    listing: `0x${string}`;
+    providerTerms: `0x${string}`;
+    id: `0x${string}`;
+    termsHash: `0x${string}`;
+    purchaseNumber: number;
+};
+/** A consumed approval cannot authorize another purchase with identical terms. */
+export declare function nextPurchaseApproval(args: Parameters<typeof purchaseApproval>[0], profile: string): {
+    gateway: string;
+    payer: `0x${string}`;
+    providerAgentId: string;
+    outcomeId: string;
+    network: string;
+    token: `0x${string}`;
+    payTo: `0x${string}`;
+    amount: string;
+    requestHash: `0x${string}`;
+    listing: `0x${string}`;
+    providerTerms: `0x${string}`;
+    id: `0x${string}`;
+    termsHash: `0x${string}`;
+    purchaseNumber: number;
+};
+export declare function approvePurchase(args: {
+    approval: ReturnType<typeof purchaseApproval>;
+    approved?: string | undefined;
+    threshold: string;
+    json: boolean;
+    summary?: unknown;
+}): Promise<void>;
+//# sourceMappingURL=approval.d.ts.map

package/dist/commands/approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../../src/commands/approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAMlF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG/D,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAC9E,WAAW,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,YAAY,CAAC;IACvD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;;;;;;;;;;;;;;;EAcA;AAED,kFAAkF;AAClF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM;;;;;;;;;;;;;;;EASjG;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,QAAQ,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7E,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CACrD,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBhB"}

package/dist/commands/approval.js

@@ -0,0 +1,59 @@
+import { canonicalHash, formatUsdc } from "@daski/x402-scheme";
+import { getAddress } from "viem";
+import { atomicUsdc } from "../config.js";
+import { CliError } from "../cli/errors.js";
+import { confirm, isInteractive } from "../cli/prompt.js";
+import { note } from "../cli/output.js";
+import { isUnspent, listOrders } from "../store/orders.js";
+/** Approval survives quote expiry only while all purchase terms stay the same. */
+export function purchaseApproval(args) {
+    const binding = args.binding;
+    const terms = {
+        gateway: args.gatewayUrl.replace(/\/$/, ""), payer: getAddress(args.payer),
+        providerAgentId: args.providerAgentId, outcomeId: args.outcomeId,
+        network: args.requirement.network, token: getAddress(args.requirement.asset),
+        payTo: getAddress(args.requirement.payTo), amount: BigInt(args.requirement.amount).toString(),
+        requestHash: binding.canonicalRequestHash,
+        listing: binding.version === 2 ? binding.runtimeCommitmentHash : binding.listingManifestHash,
+        providerTerms: binding.version === 2 ? binding.providerIntentHash : binding.providerOfferHash,
+    };
+    const termsHash = canonicalHash(terms);
+    const purchaseNumber = args.purchaseNumber ?? 1;
+    return { id: canonicalHash({ termsHash, purchaseNumber }), termsHash, purchaseNumber, ...terms };
+}
+/** A consumed approval cannot authorize another purchase with identical terms. */
+export function nextPurchaseApproval(args, profile) {
+    const first = purchaseApproval(args);
+    const prior = listOrders(profile).filter((order) => order.approvalTermsHash === first.termsHash && !isUnspent(order));
+    const pending = prior.find((order) => ["AUTHORIZED", "SUBMITTED", "PENDING_RECONCILIATION"].includes(order.state));
+    if (pending)
+        throw new CliError({ code: "DASKI_PAYMENT_PENDING_RECONCILIATION",
+            message: "This purchase already has an authorized or pending order.",
+            remediation: `Continue with daski order reconcile ${pending.intentId}.`,
+            details: { intentId: pending.intentId, orderHandle: pending.handle ?? null } });
+    return purchaseApproval({ ...args, purchaseNumber: prior.length + 1 });
+}
+export async function approvePurchase(args) {
+    if (args.approved !== undefined) {
+        if (args.approved === args.approval.id)
+            return;
+        throw new CliError({ code: "DASKI_QUOTE_CHANGED",
+            message: "The quote or purchase differs from the approved one.",
+            remediation: "Show the new quote to the user, then pass its approval.id with --approve.",
+            details: { approval: args.approval, approvalSummary: args.summary }, exitCode: 2 });
+    }
+    if (BigInt(args.approval.amount) <= atomicUsdc(args.threshold))
+        return;
+    if (args.json || !isInteractive()) {
+        throw new CliError({ code: "DASKI_HUMAN_APPROVAL_REQUIRED",
+            message: `Approve this purchase for ${formatUsdc(BigInt(args.approval.amount))}.`,
+            remediation: "Show the quote to the user. After approval, repeat the command with --approve <approval.id>.",
+            details: { approval: args.approval, approvalSummary: args.summary }, exitCode: 2 });
+    }
+    note(JSON.stringify(args.summary ?? args.approval, null, 2));
+    if (!await confirm(`Pay ${formatUsdc(BigInt(args.approval.amount))} on ${args.approval.network}?`)) {
+        throw new CliError({ code: "DASKI_PURCHASE_DECLINED", message: "The purchase was declined.",
+            remediation: "Run the command again when ready.", exitCode: 2 });
+    }
+}
+//# sourceMappingURL=approval.js.map

package/dist/commands/approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../src/commands/approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAqB,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE3D,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,IAIhC;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,KAAK,GAAG;QACZ,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1E,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS;QAChE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAC5E,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;QAC7F,WAAW,EAAE,OAAO,CAAC,oBAAoB;QACzC,OAAO,EAAE,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB;QAC5F,aAAa,EAAE,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB;KAC9F,CAAC;IACF,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,aAAa,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,EAAE,CAAC;AACnG,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,IAA4C,EAAE,OAAe;IAChG,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,KAAK,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACtH,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACnH,IAAI,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,sCAAsC;YAC5E,OAAO,EAAE,2DAA2D;YACpE,WAAW,EAAE,uCAAuC,OAAO,CAAC,QAAQ,GAAG;YACvE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAClF,OAAO,gBAAgB,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAGrC;IACC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO;QAC/C,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,qBAAqB;YAC9C,OAAO,EAAE,sDAAsD;YAC/D,WAAW,EAAE,2EAA2E;YACxF,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO;IACvE,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,+BAA+B;YACxD,OAAO,EAAE,6BAA6B,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG;YACjF,WAAW,EAAE,8FAA8F;YAC3G,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,4BAA4B;YACzF,WAAW,EAAE,mCAAmC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}

package/dist/commands/buy.d.ts

@@ -1,5 +1,5 @@
 import { PolicyRefusal } from "@daski/x402-scheme";
-import { type ContextOptions } from "../context.js";
+import { type ContextOptions, type CommandContext } from "../context.js";
 export interface BuyOptions extends ContextOptions {
     providerAgentId: string;
     outcomeId: string;
@@ -7,9 +7,9 @@ export interface BuyOptions extends ContextOptions {
     payer?: string | undefined;
     json: boolean;
     legacyArg?: boolean;
-    /** Skips only the interactive prompt, never the policy validator. */
-    yes?: boolean;
+    /** The identifier of the quote the user approved. */
+    approved?: string | undefined;
 }
-export declare function runBuy(options: BuyOptions): Promise<Record<string, unknown>>;
+export declare function runBuy(options: BuyOptions, contextFactory?: (options: ContextOptions) => Promise<CommandContext>): Promise<Record<string, unknown>>;
 export { PolicyRefusal };
 //# sourceMappingURL=buy.d.ts.map

package/dist/commands/buy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buy.d.ts","sourceRoot":"","sources":["../../src/commands/buy.ts"],"names":[],"mappings":"AAQA,OAAO,EAAc,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAK/D,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAanE,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qEAAqE;IACrE,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAoLlF;AAyID,OAAO,EAAE,aAAa,EAAE,CAAC"}
+{"version":3,"file":"buy.d.ts","sourceRoot":"","sources":["../../src/commands/buy.ts"],"names":[],"mappings":"AAQA,OAAO,EAA6B,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAG9E,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAcxF,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,GAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,cAAc,CAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAwKxK;AA+HD,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/commands/buy.js

@@ -6,18 +6,17 @@
  * and any re-sign.
  */
 import { readFileSync } from "node:fs";
-import { formatUsdc, PolicyRefusal } from "@daski/x402-scheme";
+import { canonicalHash, formatUsdc, PolicyRefusal } from "@daski/x402-scheme";
 import { CliError } from "../cli/errors.js";
-import { confirm, isInteractive } from "../cli/prompt.js";
 import { note } from "../cli/output.js";
-import { atomicUsdc } from "../config.js";
 import { createContext } from "../context.js";
+import { approvePurchase, nextPurchaseApproval } from "./approval.js";
 import { GatewayClient } from "../gateway/client.js";
-import { authorizePayment, challengeIntentId, isAmbiguousPurchaseAnswer, reconcileAmbiguousPurchase, recordIntent, requestChallenge, submitPayment, } from "../gateway/purchase.js";
+import { authorizePayment, challengeIntentId, isAmbiguousPurchaseAnswer, reconcileByIdentifier, recordIntent, requestChallenge, submitPayment, } from "../gateway/purchase.js";
 import { updateOrder } from "../store/orders.js";
-export async function runBuy(options) {
+export async function runBuy(options, contextFactory = createContext) {
     const request = readRequestFile(options.requestFile);
-    const context = await createContext(options);
+    const context = await contextFactory(options);
     try {
         if (options.payer && options.payer.toLowerCase() !== context.payerAddress.toLowerCase()) {
             throw new CliError({
@@ -38,51 +37,40 @@ export async function runBuy(options) {
         });
         const amountAtomic = BigInt(challenge.requirement.amount);
         const preflight = challenge.preflight;
+        const requestHash = canonicalHash({ method: "POST", resource: challenge.challenge.resource?.url,
+            providerAgentId: options.providerAgentId, outcomeId: options.outcomeId, body: request });
+        if (!challenge.binding || challenge.binding.canonicalRequestHash !== requestHash) {
+            throw new CliError({ code: "DASKI_REQUEST_BINDING_MISMATCH",
+                message: "The challenge does not match the requested purchase.",
+                remediation: "Obtain a challenge for the same provider, outcome, and request." });
+        }
+        const approval = nextPurchaseApproval({ gatewayUrl: context.profile.gatewayUrl,
+            payer: context.payerAddress, providerAgentId: options.providerAgentId, outcomeId: options.outcomeId,
+            requirement: challenge.requirement, binding: challenge.binding }, context.profileName);
+        const outcome = await context.catalog.getOutcome(options.providerAgentId, options.outcomeId);
+        const summary = approvalSummary(challenge.challenge.extensions, outcome, amountAtomic, preflight);
         if (preflight?.sufficient === false) {
             // The gateway already read the payer's balance: a signature now would be
             // a doomed one. Say what is needed and stop; where the USDC comes from
             // is the operator's business.
             const network = String(preflight.network ?? context.profile.network);
             const balance = typeof preflight.usdcBalance === "string"
-                ? `${formatUsdc(BigInt(preflight.usdcBalance))} USDC`
+                ? formatUsdc(BigInt(preflight.usdcBalance))
                 : "an unknown USDC balance";
             throw new CliError({
                 code: "DASKI_INSUFFICIENT_USDC",
                 message: `${context.payerAddress} holds ${balance} on ${network}; this purchase ` +
                     `needs ${formatUsdc(amountAtomic)}.`,
                 remediation: `Fund ${context.payerAddress} with USDC on ${network}, then re-run. Nothing was signed.`,
-                details: { preflight, priceUsdc: formatUsdc(amountAtomic) },
+                details: { preflight, priceUsdc: formatUsdc(amountAtomic), approval, approvalSummary: summary,
+                    shortfallUsdc: typeof preflight.usdcBalance === "string"
+                        ? formatUsdc(amountAtomic > BigInt(preflight.usdcBalance) ? amountAtomic - BigInt(preflight.usdcBalance) : 0n) : null },
                 exitCode: 2,
             });
         }
         // -- 2. approval -------------------------------------------------------
-        const outcome = await context.catalog.getOutcome(options.providerAgentId, options.outcomeId);
-        const summary = approvalSummary(challenge.challenge.extensions, outcome, amountAtomic, preflight);
-        const threshold = atomicUsdc(context.profile.requireApprovalAboveUsdc);
-        if (amountAtomic > threshold && !options.yes) {
-            if (options.json || !isInteractive()) {
-                throw new CliError({
-                    code: "DASKI_HUMAN_APPROVAL_REQUIRED",
-                    message: `${formatUsdc(amountAtomic)} is above this profile's ` +
-                        `requireApprovalAboveUsdc of ${context.profile.requireApprovalAboveUsdc} USDC, ` +
-                        "and this session cannot ask a human.",
-                    remediation: "Have a human run this command in an interactive terminal and confirm " +
-                        "the prompt, or — if a human has already approved this exact purchase " +
-                        "— re-run with --yes. Raising the threshold is a manual config edit.",
-                    details: { approvalSummary: summary, priceUsdc: formatUsdc(amountAtomic) },
-                    exitCode: 2,
-                });
-            }
-            note(renderApproval(summary, amountAtomic));
-            if (!await confirm("Authorize this payment?")) {
-                throw new CliError({
-                    code: "DASKI_PURCHASE_DECLINED",
-                    message: "The purchase was not approved.",
-                    remediation: "Nothing was signed and no money moved. Re-run when ready.",
-                    exitCode: 2,
-                });
-            }
-        }
+        await approvePurchase({ approval, approved: options.approved,
+            threshold: context.profile.requireApprovalAboveUsdc, json: options.json, summary });
         // -- 3 & 4. validate, recompute, sign ----------------------------------
         // The gateway bound its own payment identifier to the challenge; the
         // submission must carry that one, so it is the ledger key as well.
@@ -95,6 +83,7 @@ export async function runBuy(options) {
             outcomeId: options.outcomeId,
             payer: context.payerAddress,
             amount: amountAtomic.toString(),
+            approvalTermsHash: approval.termsHash,
             state: "INTENT_RECORDED",
             request,
         });
@@ -127,7 +116,7 @@ export async function runBuy(options) {
             // The signature left the process and the answer did not come back. This
             // is the ambiguous case: reconcile, never re-sign.
             return await reconcile(context, {
-                intentId, options, request, authorized,
+                intentId,
                 cause: `transport failure after submit: ${error.message}`,
             });
         }
@@ -135,7 +124,7 @@ export async function runBuy(options) {
         const code = typeof body?.code === "string" ? body.code : undefined;
         if (result.isError && isAmbiguousPurchaseAnswer(code, body)) {
             return await reconcile(context, {
-                intentId, options, request, authorized,
+                intentId,
                 cause: `gateway reported ${code ?? "an error"} with the payment outcome unknown`,
             });
         }
@@ -144,7 +133,7 @@ export async function runBuy(options) {
             // payload. The signature is out and the outcome is unknown: that is the
             // ambiguous case, so reconcile — never report failure, never re-sign.
             return await reconcile(context, {
-                intentId, options, request, authorized,
+                intentId,
                 cause: "the paid result carried no payload this CLI could read",
             });
         }
@@ -189,21 +178,18 @@ async function reconcile(context, args) {
     updateOrder(args.intentId, { state: "PENDING_RECONCILIATION" });
     note(`payment outcome unclear (${args.cause}); reconciling before any re-sign...`);
     const record = updateOrder(args.intentId, {});
-    const outcome = await reconcileAmbiguousPurchase({
+    const outcome = await reconcileByIdentifier({
         client: context.client,
         signer: context.signer,
-        record,
+        intentId: args.intentId,
         payer: context.payerAddress,
         chainId: context.profile.chainId,
         gatewayUrl: context.profile.gatewayUrl,
-        submission: args.authorized.submission,
-        request: args.request,
-        ...(args.options.legacyArg === undefined ? {} : { legacyArg: args.options.legacyArg }),
     });
     if (outcome.status === "settled") {
         const settled = updateOrder(args.intentId, {
             handle: outcome.orderHandle,
-            state: normalizeState(outcome.body?.status),
+            state: normalizeState(outcome.gatewayState),
         });
         return {
             purchased: true,
@@ -217,7 +203,13 @@ async function reconcile(context, args) {
             gatewayCalls: context.client.callCount,
         };
     }
-    // Provably absent: the caller may safely start over with a fresh challenge.
+    if (outcome.status !== "absent") {
+        throw new CliError({ code: "DASKI_PAYMENT_PENDING_RECONCILIATION",
+            message: "The gateway is still resolving this payment.",
+            remediation: `Check again with daski order reconcile ${args.intentId}.`,
+            details: { intentId: args.intentId, status: outcome.status, reconciliation: outcome.evidence }, exitCode: 3 });
+    }
+    updateOrder(args.intentId, { state: "NOT_SETTLED" });
     throw new CliError({
         code: "DASKI_PAYMENT_UNRESOLVED_NO_ORDER",
         message: `The purchase was interrupted (${args.cause}) and no order exists for it: ` +
@@ -248,7 +240,7 @@ function approvalSummary(extensions, outcome, amountAtomic, preflight) {
     const supplied = preflight?.approvalSummary ?? extensions?.approvalSummary;
     if (supplied && typeof supplied === "object")
         return supplied;
-    const terms = extensions?.["daski-order-terms"];
+    const terms = extensions?.["daski-order-terms"] ?? outcome.terms;
     return {
         ...(typeof supplied === "string" ? { gateway: supplied } : {}),
         what: [outcome.serviceName, outcome.skillName].filter(Boolean).join(" / ") || "Daski outcome",
@@ -260,17 +252,6 @@ function approvalSummary(extensions, outcome, amountAtomic, preflight) {
         marketplaceTerms: terms?.marketplaceTermsUrl ?? null,
     };
 }
-function renderApproval(summary, amountAtomic) {
-    const lines = ["", "  ─ Purchase approval ─────────────────────────────"];
-    for (const [key, value] of Object.entries(summary)) {
-        if (value === null || value === undefined)
-            continue;
-        lines.push(`  ${key.padEnd(18)} ${String(value)}`);
-    }
-    lines.push(`  ${"you will pay".padEnd(18)} ${formatUsdc(amountAtomic)}`);
-    lines.push("  ─────────────────────────────────────────────────", "");
-    return lines.join("\n");
-}
 function readRequestFile(path) {
     let raw;
     try {