@hpp-io/x402-mcp-bridge 0.0.1 → 0.0.2

package/dist/cli/keychain.js

@@ -0,0 +1,147 @@
+/**
+ * hpp-x402-keychain — store the delegate private key in the OS keychain.
+ *
+ * Replaces `DELEGATE_PRIVATE_KEY=0x...` in the host config (Claude Desktop
+ * / OpenClaw / .env.local) with `keychain://hpp-x402/<account>`. The
+ * bridge resolves the URI at startup via @napi-rs/keyring (macOS Keychain,
+ * Windows Credential Vault, Linux libsecret).
+ *
+ * Usage:
+ *   hpp-x402-keychain set [account]            prompts for hex (no echo)
+ *   hpp-x402-keychain set [account] --stdin    reads hex from stdin (for piping)
+ *   hpp-x402-keychain generate [account]       creates a fresh delegate key
+ *   hpp-x402-keychain delete [account]
+ *   hpp-x402-keychain show [account]           prints address (never the key)
+ *   hpp-x402-keychain uri [account]            prints keychain://hpp-x402/<account>
+ *
+ * `account` defaults to `delegate-default`.
+ *
+ * Note: `setup` (hpp-x402-safe-setup) prints a copy-pasteable env block.
+ * After running `keychain set`, replace that env line in your host config
+ * with the printed `keychain://...` URI.
+ */
+import { generatePrivateKey, privateKeyToAccount } from "viem/accounts";
+import * as readline from "node:readline";
+import { buildKeychainURI, deleteKeychain, isHexKey, resolveKeychain, setKeychain, KEYCHAIN_SERVICE, } from "../keychain.js";
+const DEFAULT_ACCOUNT = "delegate-default";
+function usage() {
+    process.stderr.write([
+        "hpp-x402-keychain — manage delegate keys in the OS keychain",
+        "",
+        "Usage:",
+        "  hpp-x402-keychain set [account]            prompt for hex (no echo)",
+        "  hpp-x402-keychain set [account] --stdin    read hex from stdin",
+        "  hpp-x402-keychain generate [account]       create + store fresh key",
+        "  hpp-x402-keychain show [account]           print address only",
+        "  hpp-x402-keychain uri [account]            print keychain:// URI",
+        "  hpp-x402-keychain delete [account]",
+        "",
+        `Default account: ${DEFAULT_ACCOUNT}`,
+        `Service (fixed): ${KEYCHAIN_SERVICE}`,
+        "",
+    ].join("\n"));
+    process.exit(1);
+}
+function parseCmd(argv) {
+    const args = argv.slice(2);
+    const cmd = (args[0] ?? "help");
+    const positional = [];
+    const flags = new Set();
+    for (const a of args.slice(1)) {
+        if (a.startsWith("--"))
+            flags.add(a.slice(2));
+        else
+            positional.push(a);
+    }
+    if (!["set", "generate", "delete", "show", "uri", "help"].includes(cmd)) {
+        usage();
+    }
+    const account = positional[0] ?? DEFAULT_ACCOUNT;
+    return { cmd, account, flags };
+}
+async function readHexFromTTY() {
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    const muted = rl;
+    const origWrite = muted._writeToOutput;
+    muted._writeToOutput = (s) => {
+        if (s.startsWith("Delegate private key"))
+            origWrite.call(muted, s);
+    };
+    const answer = await new Promise((resolve) => rl.question("Delegate private key (0x + 64 hex, hidden): ", (a) => {
+        process.stdout.write("\n");
+        rl.close();
+        resolve(a.trim());
+    }));
+    if (!isHexKey(answer))
+        throw new Error("expected 0x + 64 hex chars");
+    return answer;
+}
+async function readHexFromStdin() {
+    const chunks = [];
+    for await (const c of process.stdin)
+        chunks.push(c);
+    const raw = Buffer.concat(chunks).toString("utf8").trim();
+    if (!isHexKey(raw))
+        throw new Error("stdin did not contain a 0x + 64 hex key");
+    return raw;
+}
+async function main() {
+    const { cmd, account, flags } = parseCmd(process.argv);
+    if (cmd === "help")
+        usage();
+    if (cmd === "set") {
+        const hex = flags.has("stdin") ? await readHexFromStdin() : await readHexFromTTY();
+        setKeychain(account, hex);
+        const addr = privateKeyToAccount(hex).address;
+        process.stdout.write([
+            "✓ stored",
+            `  uri      : ${buildKeychainURI(account)}`,
+            `  address  : ${addr}`,
+            "",
+            "Replace DELEGATE_PRIVATE_KEY in your host config with the URI above.",
+            "",
+        ].join("\n"));
+        return;
+    }
+    if (cmd === "generate") {
+        const hex = generatePrivateKey();
+        setKeychain(account, hex);
+        const addr = privateKeyToAccount(hex).address;
+        process.stdout.write([
+            "✓ generated + stored fresh delegate key",
+            `  uri      : ${buildKeychainURI(account)}`,
+            `  address  : ${addr}`,
+            "",
+            "Fund this address with ~0.001 native HPP for gas, then add it as a",
+            "delegate on your Safe (allowanceModule.addDelegate + setAllowance).",
+            "Or re-run hpp-x402-safe-setup with --delegate-pk pre-set:",
+            "  - the bridge does NOT print the private key; rotate via the keychain CLI.",
+            "",
+        ].join("\n"));
+        return;
+    }
+    if (cmd === "show") {
+        const hex = resolveKeychain(buildKeychainURI(account));
+        const addr = privateKeyToAccount(hex).address;
+        process.stdout.write([
+            `  uri      : ${buildKeychainURI(account)}`,
+            `  address  : ${addr}`,
+            "",
+        ].join("\n"));
+        return;
+    }
+    if (cmd === "uri") {
+        process.stdout.write(buildKeychainURI(account) + "\n");
+        return;
+    }
+    if (cmd === "delete") {
+        const ok = deleteKeychain(account);
+        process.stdout.write(ok ? `✓ deleted ${buildKeychainURI(account)}\n` : `(no entry: ${buildKeychainURI(account)})\n`);
+        return;
+    }
+}
+main().catch((err) => {
+    process.stderr.write(`hpp-x402-keychain: ${err.message}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=keychain.js.map

package/dist/cli/keychain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../../src/cli/keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAE1C,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,WAAW,EACX,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAI3C,SAAS,KAAK;IACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB;QACE,6DAA6D;QAC7D,EAAE;QACF,QAAQ;QACR,uEAAuE;QACvE,kEAAkE;QAClE,uEAAuE;QACvE,iEAAiE;QACjE,oEAAoE;QACpE,sCAAsC;QACtC,EAAE;QACF,oBAAoB,eAAe,EAAE;QACrC,oBAAoB,gBAAgB,EAAE;QACtC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAc;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAQ,CAAC;IACvC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;;YACzC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,KAAK,EAAE,CAAC;IACV,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC;IACjD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,MAAM,KAAK,GAAI,EAAyD,CAAC;IACzE,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,CAAC;IACvC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAS,EAAE,EAAE;QACnC,IAAI,CAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC;IACF,MAAM,MAAM,GAAW,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACnD,EAAE,CAAC,QAAQ,CAAC,8CAA8C,EAAE,CAAC,CAAC,EAAE,EAAE;QAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpB,CAAC,CAAC,CACH,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC/E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD,IAAI,GAAG,KAAK,MAAM;QAAE,KAAK,EAAE,CAAC;IAE5B,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC,CAAC,MAAM,cAAc,EAAE,CAAC;QACnF,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB;YACE,UAAU;YACV,gBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE;YAC3C,gBAAgB,IAAI,EAAE;YACtB,EAAE;YACF,sEAAsE;YACtE,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;QACjC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB;YACE,yCAAyC;YACzC,gBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE;YAC3C,gBAAgB,IAAI,EAAE;YACtB,EAAE;YACF,oEAAoE;YACpE,qEAAqE;YACrE,2DAA2D;YAC3D,6EAA6E;YAC7E,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,eAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB;YACE,gBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE;YAC3C,gBAAgB,IAAI,EAAE;YACtB,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,EAAE,CAAC,CAAC,CAAC,aAAa,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAC/F,CAAC;QACF,OAAO;IACT,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAuB,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;IACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/cli/policy.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cli/policy.js

@@ -0,0 +1,219 @@
+/**
+ * hpp-x402-policy — manage the host policy file (`~/.hpp-x402/policy.json`)
+ * that the `x402_http_call` tool reads for per-host auth-header injection and
+ * spend guardrails. Editing the JSON by hand works too; this is a convenience
+ * wrapper (mirrors hpp-x402-keychain).
+ *
+ * Usage:
+ *   hpp-x402-policy path                         print the policy file path
+ *   hpp-x402-policy show                         print the full policy JSON
+ *   hpp-x402-policy list                         summarize configured hosts
+ *   hpp-x402-policy set <host> [flags]           add/update a host entry
+ *       --header NAME=SOURCE     (repeatable)    e.g. X-Api-Key=file:~/.hpphub/config.json#api_key
+ *       --max-per-call <usdc>                    e.g. 5  (stored atomic, 6 dec)
+ *       --cooldown-ms <n>                        min ms between paid calls
+ *       --https <true|false>                     require https (default true)
+ *   hpp-x402-policy unset <host>                 remove a host entry
+ *   hpp-x402-policy unset <host> --header NAME   remove a single header
+ *   hpp-x402-policy defaults [flags]             set _defaults
+ *       --allow-unlisted <true|false>            allow non-listed hosts (default false)
+ *       --max-per-call <usdc> / --https <bool>   default limits
+ *
+ * value-source for headers: file:<path>#<field> | env:<VAR> |
+ *   keychain://<svc>/<acct> | literal:<value>
+ */
+import { loadPolicy, savePolicy, policyFilePath, } from "../policy.js";
+const USDC_DECIMALS = 6; // USDC.e
+const SOURCE_PREFIXES = ["file:", "env:", "keychain://", "literal:"];
+function usage() {
+    process.stderr.write([
+        "hpp-x402-policy — manage ~/.hpp-x402/policy.json (host auth + spend guardrails)",
+        "",
+        "Usage:",
+        "  hpp-x402-policy path",
+        "  hpp-x402-policy show",
+        "  hpp-x402-policy list",
+        "  hpp-x402-policy set <host> [--header NAME=SOURCE]... [--max-per-call <usdc>]",
+        "                            [--cooldown-ms <n>] [--https <true|false>]",
+        "  hpp-x402-policy unset <host> [--header NAME]",
+        "  hpp-x402-policy defaults [--allow-unlisted <true|false>] [--max-per-call <usdc>] [--https <true|false>]",
+        "",
+        "value-source: file:<path>#<field> | env:<VAR> | keychain://<svc>/<acct> | literal:<value>",
+        "example: hpp-x402-policy set hub-stage.hpp.io \\",
+        "           --header X-Api-Key=file:~/.hpphub/config.json#api_key --max-per-call 5 --cooldown-ms 300000",
+        "",
+    ].join("\n"));
+    process.exit(1);
+}
+function parseArgs(argv) {
+    const args = argv.slice(2);
+    const cmd = args[0] ?? "help";
+    const out = { cmd, headers: [] };
+    const rest = args.slice(1);
+    const positional = [];
+    for (let i = 0; i < rest.length; i++) {
+        const a = rest[i];
+        if (!a.startsWith("--")) {
+            positional.push(a);
+            continue;
+        }
+        const key = a.slice(2);
+        const val = rest[i + 1];
+        const takeVal = () => {
+            if (val === undefined || val.startsWith("--"))
+                throw new Error(`--${key} needs a value`);
+            i++;
+            return val;
+        };
+        switch (key) {
+            case "header": {
+                const v = takeVal();
+                if (out.cmd === "unset") {
+                    out.removeHeader = v; // unset --header NAME
+                }
+                else {
+                    const eq = v.indexOf("=");
+                    if (eq === -1)
+                        throw new Error(`--header expects NAME=SOURCE, got "${v}"`);
+                    out.headers.push({ name: v.slice(0, eq), source: v.slice(eq + 1) });
+                }
+                break;
+            }
+            case "max-per-call":
+                out.maxPerCall = takeVal();
+                break;
+            case "cooldown-ms":
+                out.cooldownMs = takeVal();
+                break;
+            case "https":
+                out.https = takeVal();
+                break;
+            case "allow-unlisted":
+                out.allowUnlisted = takeVal();
+                break;
+            default: throw new Error(`unknown flag --${key}`);
+        }
+    }
+    out.host = positional[0];
+    return out;
+}
+function usdcToAtomic(usdc) {
+    const n = Number(usdc);
+    if (!Number.isFinite(n) || n < 0)
+        throw new Error(`invalid amount: ${usdc}`);
+    return String(Math.round(n * 10 ** USDC_DECIMALS));
+}
+function atomicToUsdc(a) {
+    return a == null ? "-" : String(Number(a) / 10 ** USDC_DECIMALS);
+}
+function parseBool(s) {
+    if (s === "true")
+        return true;
+    if (s === "false")
+        return false;
+    throw new Error(`expected true|false, got "${s}"`);
+}
+function buildLimits(base, a) {
+    const limits = { ...(base ?? {}) };
+    if (a.maxPerCall !== undefined)
+        limits.maxPerCallAtomic = usdcToAtomic(a.maxPerCall);
+    if (a.cooldownMs !== undefined)
+        limits.cooldownMs = Number(a.cooldownMs);
+    if (a.https !== undefined)
+        limits.requireHttps = parseBool(a.https);
+    return limits;
+}
+function main() {
+    const a = parseArgs(process.argv);
+    if (a.cmd === "help")
+        usage();
+    if (a.cmd === "path") {
+        process.stdout.write(policyFilePath() + "\n");
+        return;
+    }
+    const policy = loadPolicy();
+    if (a.cmd === "show") {
+        process.stdout.write(JSON.stringify(policy, null, 2) + "\n");
+        return;
+    }
+    if (a.cmd === "list") {
+        const hosts = Object.keys(policy).filter((k) => k !== "_defaults");
+        if (hosts.length === 0) {
+            process.stdout.write("(no hosts configured)\n");
+            return;
+        }
+        const d = policy._defaults;
+        if (d)
+            process.stdout.write(`_defaults: allowUnlisted=${d.allowUnlisted ?? false} maxPerCall=${atomicToUsdc(d.limits?.maxPerCallAtomic)} https=${d.limits?.requireHttps ?? true}\n`);
+        for (const h of hosts) {
+            const hp = policy[h];
+            const hdrs = Object.keys(hp.headers ?? {}).join(", ") || "(none)";
+            const l = hp.limits ?? {};
+            process.stdout.write(`${h}\n  headers: ${hdrs}\n  maxPerCall: ${atomicToUsdc(l.maxPerCallAtomic)}  cooldownMs: ${l.cooldownMs ?? "-"}  https: ${l.requireHttps ?? true}\n`);
+        }
+        return;
+    }
+    if (a.cmd === "set") {
+        if (!a.host)
+            throw new Error("set requires <host>");
+        if (a.headers.some((h) => !SOURCE_PREFIXES.some((p) => h.source.startsWith(p)))) {
+            throw new Error(`header source must start with one of: ${SOURCE_PREFIXES.join(", ")}`);
+        }
+        const existing = policy[a.host] ?? {};
+        const headers = { ...(existing.headers ?? {}) };
+        for (const h of a.headers)
+            headers[h.name] = h.source;
+        const next = { ...existing };
+        if (Object.keys(headers).length)
+            next.headers = headers;
+        const limits = buildLimits(existing.limits, a);
+        if (Object.keys(limits).length)
+            next.limits = limits;
+        policy[a.host] = next;
+        savePolicy(policy);
+        process.stdout.write(`✓ set ${a.host}\n  headers: ${Object.keys(next.headers ?? {}).join(", ") || "(none)"}\n  maxPerCall: ${atomicToUsdc(next.limits?.maxPerCallAtomic)}  cooldownMs: ${next.limits?.cooldownMs ?? "-"}  https: ${next.limits?.requireHttps ?? true}\n`);
+        return;
+    }
+    if (a.cmd === "unset") {
+        if (!a.host)
+            throw new Error("unset requires <host>");
+        const hp = policy[a.host];
+        if (!hp) {
+            process.stdout.write(`(no entry: ${a.host})\n`);
+            return;
+        }
+        if (a.removeHeader) {
+            if (hp.headers)
+                delete hp.headers[a.removeHeader];
+            savePolicy(policy);
+            process.stdout.write(`✓ removed header ${a.removeHeader} from ${a.host}\n`);
+        }
+        else {
+            delete policy[a.host];
+            savePolicy(policy);
+            process.stdout.write(`✓ removed host ${a.host}\n`);
+        }
+        return;
+    }
+    if (a.cmd === "defaults") {
+        const d = { ...(policy._defaults ?? {}) };
+        if (a.allowUnlisted !== undefined)
+            d.allowUnlisted = parseBool(a.allowUnlisted);
+        const limits = buildLimits(d.limits, a);
+        if (Object.keys(limits).length)
+            d.limits = limits;
+        policy._defaults = d;
+        savePolicy(policy);
+        process.stdout.write(`✓ defaults: allowUnlisted=${d.allowUnlisted ?? false} maxPerCall=${atomicToUsdc(d.limits?.maxPerCallAtomic)} https=${d.limits?.requireHttps ?? true}\n`);
+        return;
+    }
+    usage();
+}
+try {
+    main();
+}
+catch (err) {
+    process.stderr.write(`hpp-x402-policy: ${err.message}\n`);
+    process.exit(1);
+}
+//# sourceMappingURL=policy.js.map

package/dist/cli/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/cli/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EACL,UAAU,EACV,UAAU,EACV,cAAc,GAKf,MAAM,cAAc,CAAC;AAEtB,MAAM,aAAa,GAAG,CAAC,CAAC,CAAC,SAAS;AAClC,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;AAErE,SAAS,KAAK;IACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB;QACE,iFAAiF;QACjF,EAAE;QACF,QAAQ;QACR,wBAAwB;QACxB,wBAAwB;QACxB,wBAAwB;QACxB,gFAAgF;QAChF,wEAAwE;QACxE,gDAAgD;QAChD,2GAA2G;QAC3G,EAAE;QACF,2FAA2F;QAC3F,kDAAkD;QAClD,wGAAwG;QACxG,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAaD,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAC9B,MAAM,GAAG,GAAe,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,KAAK,GAAG,gBAAgB,CAAC,CAAC;YACzF,CAAC,EAAE,CAAC;YACJ,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QACF,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;gBACpB,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;oBACxB,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,sBAAsB;gBAC9C,CAAC;qBAAM,CAAC;oBACN,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC1B,IAAI,EAAE,KAAK,CAAC,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,GAAG,CAAC,CAAC;oBAC3E,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtE,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,cAAc;gBAAE,GAAG,CAAC,UAAU,GAAG,OAAO,EAAE,CAAC;gBAAC,MAAM;YACvD,KAAK,aAAa;gBAAE,GAAG,CAAC,UAAU,GAAG,OAAO,EAAE,CAAC;gBAAC,MAAM;YACtD,KAAK,OAAO;gBAAE,GAAG,CAAC,KAAK,GAAG,OAAO,EAAE,CAAC;gBAAC,MAAM;YAC3C,KAAK,gBAAgB;gBAAE,GAAG,CAAC,aAAa,GAAG,OAAO,EAAE,CAAC;gBAAC,MAAM;YAC5D,OAAO,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,IAAI,aAAa,CAAC,CAAC,CAAC;AACrD,CAAC;AACD,SAAS,YAAY,CAAC,CAAU;IAC9B,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,aAAa,CAAC,CAAC;AACnE,CAAC;AACD,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,WAAW,CAAC,IAA4B,EAAE,CAAa;IAC9D,MAAM,MAAM,GAAe,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/C,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,gBAAgB,GAAG,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACrF,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,IAAI;IACX,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAElC,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM;QAAE,KAAK,EAAE,CAAC;IAE9B,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAe,UAAU,EAAE,CAAC;IAExC,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC3B,IAAI,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,aAAa,IAAI,KAAK,eAAe,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,YAAY,IAAI,IAAI,IAAI,CAAC,CAAC;QACrL,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAe,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;YAClE,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,CAAC,gBAAgB,IAAI,mBAAmB,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC,UAAU,IAAI,GAAG,YAAY,CAAC,CAAC,YAAY,IAAI,IAAI,IAAI,CACtJ,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,KAAK,CAAC,yCAAyC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,QAAQ,GAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAA4B,IAAI,EAAE,CAAC;QAClE,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACtD,MAAM,IAAI,GAAe,EAAE,GAAG,QAAQ,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACxD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrD,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACtB,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,gBAAgB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,mBAAmB,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,iBAAiB,IAAI,CAAC,MAAM,EAAE,UAAU,IAAI,GAAG,YAAY,IAAI,CAAC,MAAM,EAAE,YAAY,IAAI,IAAI,IAAI,CAAC,CAAC;QAC1Q,OAAO;IACT,CAAC;IAED,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAA2B,CAAC;QACpD,IAAI,CAAC,EAAE,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACrE,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;YACnB,IAAI,EAAE,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAClD,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,YAAY,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtB,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACrD,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QACzB,MAAM,CAAC,GAAmB,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS;YAAE,CAAC,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM;YAAE,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;QAClD,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;QACrB,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,aAAa,IAAI,KAAK,eAAe,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,YAAY,IAAI,IAAI,IAAI,CAAC,CAAC;QAC/K,OAAO;IACT,CAAC;IAED,KAAK,EAAE,CAAC;AACV,CAAC;AAED,IAAI,CAAC;IACH,IAAI,EAAE,CAAC;AACT,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAqB,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}