@leashmarket/core 0.1.0

package/dist/fees/leash-fee.js

@@ -0,0 +1,246 @@
+/**
+ * Leash protocol fee primitives.
+ *
+ * Every Leash-flavoured x402 settlement levies a small protocol fee on
+ * top of the seller's quoted price. The buyer signs **one** transaction
+ * with **two** `TransferChecked` instructions — one to the seller's
+ * `payTo` ATA, one to the Leash treasury's ATA on the same mint — so
+ * both legs settle atomically (either both transfers land or neither
+ * does). The fee leg is funded out of the same source token account as
+ * the seller leg.
+ *
+ * This module is the shared building block:
+ *   - {@link LEASH_FEE_BPS_DEFAULT} — 100 bps (1%) by default; overridable
+ *     by env at the seller (which advertises the fee in `extra['leash.fee']`)
+ *     and at the facilitator (which enforces it on `verify` / `settle`).
+ *   - {@link computeFeeAtoms} — `ceilBps(amount, bps)`. Always rounds the
+ *     fee **up** so dust never leaks out of the treasury when the buyer
+ *     pays a non-divisible price.
+ *   - {@link LeashFeeExtra} — wire shape stamped onto `paymentRequirements.extra`
+ *     so buyer + facilitator agree on bps, amount, mint authority, and ATA.
+ *   - {@link resolveLeashFeeAuthority} — env-driven lookup of the treasury
+ *     authority pubkey per network (mainnet / devnet).
+ *   - {@link getLeashFeeAtaFor} — derive the treasury's ATA for a given
+ *     `(asset, tokenProgram)` pair so seller + facilitator both end up
+ *     with the same destination address.
+ *
+ * Fee math is gross-up:
+ *   - Seller quotes `net` (e.g. 1 USDC = 1_000_000 atoms).
+ *   - Buyer pays `gross = net + fee` where `fee = ceil(net * bps / 10_000)`.
+ *   - At 100 bps: 1 USDC → buyer signs 1.01 USDC; 1.00 USDC lands in seller
+ *     ATA, 0.01 USDC lands in treasury ATA.
+ *
+ * Env vars (read at process boot — never inline a stale value):
+ *   - `LEASH_FEE_BPS`              — global default (integer 0..1000). Default 100.
+ *   - `LEASH_FEE_ENFORCE`          — `off | warn | enforce`. Default `warn`.
+ *   - `LEASH_FEE_ENFORCE_MAINNET`  — per-network override; falls back to LEASH_FEE_ENFORCE.
+ *   - `LEASH_FEE_ENFORCE_DEVNET`   — per-network override; falls back to LEASH_FEE_ENFORCE.
+ *   - `LEASH_FEE_AUTHORITY_MAINNET`— wallet pubkey that owns the mainnet fee ATAs.
+ *   - `LEASH_FEE_AUTHORITY_DEVNET` — wallet pubkey that owns the devnet  fee ATAs.
+ *
+ * Defaults bake in `3DdcJkvjW7KLtMeko3Zr57jEJWhqRHuPsEBFm1XJYh7W` on both
+ * clusters so a fresh deploy collects fees out of the box. Override via
+ * env to rotate the treasury without code changes.
+ */
+import { address as toAddress } from '@solana/kit';
+import { findAssociatedTokenPda, TOKEN_2022_PROGRAM_ADDRESS } from '@solana-program/token-2022';
+import { TOKEN_PROGRAM_ADDRESS } from '@solana-program/token';
+/**
+ * Default protocol fee rate in basis points (1 bps = 0.01%). 100 bps = 1%.
+ * Used by both the seller-kit (when stamping `extra['leash.fee']`) and
+ * the facilitator (when verifying inbound payment payloads). Override
+ * per-network via the `LEASH_FEE_BPS` env var on both surfaces.
+ */
+export const LEASH_FEE_BPS_DEFAULT = 100;
+/**
+ * Default treasury authority on Solana mainnet. Owns the SPL token
+ * accounts (one ATA per stable mint) where Leash collects protocol fees.
+ * Set `LEASH_FEE_AUTHORITY_MAINNET` to override (e.g. when migrating to
+ * a multisig).
+ */
+export const LEASH_FEE_AUTHORITY_MAINNET_DEFAULT = '3DdcJkvjW7KLtMeko3Zr57jEJWhqRHuPsEBFm1XJYh7W';
+/**
+ * Default treasury authority on Solana devnet. Same key as mainnet by
+ * design — devnet uses a separate ATA per mint anyway, so reusing the
+ * authority just simplifies operational tooling. Override via
+ * `LEASH_FEE_AUTHORITY_DEVNET`.
+ */
+export const LEASH_FEE_AUTHORITY_DEVNET_DEFAULT = '3DdcJkvjW7KLtMeko3Zr57jEJWhqRHuPsEBFm1XJYh7W';
+/**
+ * Compute the fee in atomic units for a given seller amount + bps,
+ * rounding **up** (`ceil`) so dust never leaks out of the treasury.
+ *
+ * Examples (bps=100):
+ *   - amount=1_000_000   → fee=10_000     (0.01 USDC for 1.00 USDC)
+ *   - amount=1           → fee=1          (1 atom for 1 atom — ceil)
+ *   - amount=999         → fee=10         (10 atoms for 999 atoms — ceil)
+ *
+ * @param amount seller leg amount in atomic units
+ * @param bps    integer 0..10_000
+ * @returns      atomic fee amount, never negative
+ */
+export function computeFeeAtoms(amount, bps) {
+    if (!Number.isInteger(bps) || bps < 0 || bps > 10_000) {
+        throw new Error(`computeFeeAtoms: bps must be integer in [0, 10000], got ${bps}`);
+    }
+    if (amount < 0n) {
+        throw new Error(`computeFeeAtoms: amount must be non-negative, got ${amount}`);
+    }
+    if (bps === 0 || amount === 0n)
+        return 0n;
+    const numerator = amount * BigInt(bps);
+    // Ceil division for positive integers: (n + d - 1) / d
+    return (numerator + 9999n) / 10000n;
+}
+/**
+ * Convenience: given a `net` (seller's quoted) amount, return the
+ * `(net, fee, gross)` triple where `gross = net + fee` and
+ * `fee = ceilBps(net, bps)`.
+ *
+ * Use at seller-kit's `buildAccepts` time and on the buyer playground
+ * UI to render "you will pay X" disclosures.
+ */
+export function applyFeeGrossUp(netAmount, bps = LEASH_FEE_BPS_DEFAULT) {
+    const fee = computeFeeAtoms(netAmount, bps);
+    return { net: netAmount, fee, gross: netAmount + fee };
+}
+/**
+ * Read the configured fee bps from env. Falls back to
+ * {@link LEASH_FEE_BPS_DEFAULT} when unset / unparseable. Validates
+ * the range so a bad env never surfaces as a 50_000 bps fee.
+ */
+export function resolveLeashFeeBps() {
+    if (typeof process === 'undefined' || !process.env)
+        return LEASH_FEE_BPS_DEFAULT;
+    const raw = process.env.LEASH_FEE_BPS;
+    if (!raw)
+        return LEASH_FEE_BPS_DEFAULT;
+    const parsed = Number.parseInt(raw, 10);
+    if (!Number.isInteger(parsed) || parsed < 0 || parsed > 1_000) {
+        // Cap at 10% (1000 bps) for sanity — anything higher is almost
+        // certainly a misconfiguration.
+        return LEASH_FEE_BPS_DEFAULT;
+    }
+    return parsed;
+}
+/**
+ * Read the configured fee authority for the given network from env.
+ * Falls back to the bundled defaults
+ * ({@link LEASH_FEE_AUTHORITY_MAINNET_DEFAULT} /
+ * {@link LEASH_FEE_AUTHORITY_DEVNET_DEFAULT}) when unset.
+ */
+export function resolveLeashFeeAuthority(network) {
+    const envKey = network === 'mainnet' ? 'LEASH_FEE_AUTHORITY_MAINNET' : 'LEASH_FEE_AUTHORITY_DEVNET';
+    if (typeof process !== 'undefined' && process.env) {
+        const raw = process.env[envKey];
+        if (raw && raw.trim().length > 0)
+            return raw.trim();
+    }
+    return network === 'mainnet'
+        ? LEASH_FEE_AUTHORITY_MAINNET_DEFAULT
+        : LEASH_FEE_AUTHORITY_DEVNET_DEFAULT;
+}
+/**
+ * Read the enforcement mode for the given network from env. Per-network
+ * vars override the global one. Default is `warn` everywhere so the
+ * rollout doesn't break older clients overnight.
+ */
+export function resolveLeashFeeEnforcement(network) {
+    if (typeof process === 'undefined' || !process.env)
+        return 'warn';
+    const perNetwork = network === 'mainnet'
+        ? process.env.LEASH_FEE_ENFORCE_MAINNET
+        : process.env.LEASH_FEE_ENFORCE_DEVNET;
+    const global = process.env.LEASH_FEE_ENFORCE;
+    const raw = (perNetwork ?? global ?? 'warn').trim().toLowerCase();
+    if (raw === 'off' || raw === 'warn' || raw === 'enforce')
+        return raw;
+    return 'warn';
+}
+/**
+ * Derive the Leash fee ATA on the given `(network, asset, tokenProgram)`.
+ * Both the seller (when stamping `extra['leash.fee'].feeDestination`)
+ * and the facilitator (when verifying the second `TransferChecked`)
+ * call this so they always agree on the destination.
+ */
+export async function getLeashFeeAtaFor(args) {
+    const authority = (args.authority ?? resolveLeashFeeAuthority(args.network));
+    const tokenProgram = args.tokenProgram === 'spl-token-2022' ? TOKEN_2022_PROGRAM_ADDRESS : TOKEN_PROGRAM_ADDRESS;
+    const [ata] = await findAssociatedTokenPda({
+        mint: toAddress(args.asset),
+        owner: toAddress(authority),
+        tokenProgram,
+    });
+    return { ata, authority: toAddress(authority) };
+}
+/**
+ * Build the static `extra['leash.fee']` payload for a given seller leg.
+ *
+ * Sync by construction: the wire shape only carries `bps` and
+ * `feeAuthority`, so seller-kit / payment-links can stamp this at
+ * `buildAccepts` time without making `createSeller` async. The buyer +
+ * facilitator derive the dynamic fields (`feeAtomic`, `grossAtomic`,
+ * `feeDestination`) on demand via {@link computeLeashFeeForRequirements}.
+ */
+export function buildLeashFeeExtra(args) {
+    const bps = args.bps ?? resolveLeashFeeBps();
+    const feeAuthority = args.authority ?? resolveLeashFeeAuthority(args.network);
+    return { v: '1', bps, feeAuthority };
+}
+/**
+ * Type guard + parser for an inbound `extra['leash.fee']` block. Returns
+ * `null` if the value is absent or malformed (any field missing /
+ * wrong type / out-of-range bps). Facilitators use this to decide whether
+ * to apply fee verification.
+ */
+export function parseLeashFeeExtra(extra) {
+    if (!extra || typeof extra !== 'object')
+        return null;
+    const raw = extra['leash.fee'];
+    if (!raw || typeof raw !== 'object')
+        return null;
+    const obj = raw;
+    if (obj.v !== '1')
+        return null;
+    const { bps, feeAuthority } = obj;
+    if (typeof bps !== 'number' ||
+        !Number.isInteger(bps) ||
+        bps < 0 ||
+        bps > 10_000 ||
+        typeof feeAuthority !== 'string' ||
+        feeAuthority.length === 0) {
+        return null;
+    }
+    return { v: '1', bps, feeAuthority };
+}
+/**
+ * Resolve the per-request fee triple `(bps, feeAtomic, feeDestination)`
+ * for a given `paymentRequirements` entry. Returns `null` if the
+ * requirement carries no `extra['leash.fee']` (vanilla x402 mode).
+ *
+ * Both the buyer (when constructing the `TransferChecked` fee leg) and
+ * the facilitator (when verifying the inbound transaction) call this
+ * function so they always derive the same destination ATA + atomic
+ * amount from the same inputs.
+ */
+export async function computeLeashFeeForRequirements(args) {
+    if (!args.extra)
+        return null;
+    const bps = args.extra.bps;
+    const net = BigInt(args.amount);
+    const fee = computeFeeAtoms(net, bps);
+    const acct = await getLeashFeeAtaFor({
+        network: args.network,
+        asset: args.asset,
+        tokenProgram: args.tokenProgram,
+        authority: args.extra.feeAuthority,
+    });
+    return {
+        bps,
+        feeAtomic: fee,
+        grossAtomic: net + fee,
+        feeAuthority: acct.authority,
+        feeDestination: acct.ata,
+    };
+}
+//# sourceMappingURL=leash-fee.js.map

package/dist/fees/leash-fee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leash-fee.js","sourceRoot":"","sources":["../../src/fees/leash-fee.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,OAAO,IAAI,SAAS,EAAgB,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAI9D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,8CAA8C,CAAC;AAElG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,8CAA8C,CAAC;AAuDjG;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,GAAW;IACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,2DAA2D,GAAG,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,qDAAqD,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,GAAG,KAAK,CAAC,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,uDAAuD;IACvD,OAAO,CAAC,SAAS,GAAG,KAAM,CAAC,GAAG,MAAO,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAiB,EACjB,MAAc,qBAAqB;IAEnC,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,GAAG,GAAG,EAAE,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,OAAO,qBAAqB,CAAC;IACjF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,qBAAqB,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,KAAK,EAAE,CAAC;QAC9D,+DAA+D;QAC/D,gCAAgC;QAChC,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAqB;IAC5D,MAAM,MAAM,GACV,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,4BAA4B,CAAC;IACvF,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC,mCAAmC;QACrC,CAAC,CAAC,kCAAkC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAqB;IAC9D,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC;IAClE,MAAM,UAAU,GACd,OAAO,KAAK,SAAS;QACnB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB;QACvC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7C,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClE,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACrE,OAAO,MAAM,CAAC;AAChB,CAAC;AAYD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAWvC;IACC,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAW,CAAC;IACvF,MAAM,YAAY,GAChB,IAAI,CAAC,YAAY,KAAK,gBAAgB,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,qBAAqB,CAAC;IAC9F,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,sBAAsB,CAAC;QACzC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3B,KAAK,EAAE,SAAS,CAAC,SAAS,CAAC;QAC3B,YAAY;KACb,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAMlC;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,IAAI,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9E,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAiD;IAEjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC;IAClC,IACE,OAAO,GAAG,KAAK,QAAQ;QACvB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;QACtB,GAAG,GAAG,CAAC;QACP,GAAG,GAAG,MAAM;QACZ,OAAO,YAAY,KAAK,QAAQ;QAChC,YAAY,CAAC,MAAM,KAAK,CAAC,EACzB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;AACvC,CAAC;AAeD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,IAUpD;IACC,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;QACnC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;KACnC,CAAC,CAAC;IACH,OAAO;QACL,GAAG;QACH,SAAS,EAAE,GAAG;QACd,WAAW,EAAE,GAAG,GAAG,GAAG;QACtB,YAAY,EAAE,IAAI,CAAC,SAAS;QAC5B,cAAc,EAAE,IAAI,CAAC,GAAG;KACzB,CAAC;AACJ,CAAC"}

package/dist/format/index.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Token-aware amount formatting / parsing helpers shared by every Leash UI
+ * surface (web playground, CLI demos) and downstream consumers.
+ *
+ * The fundamental invariant: **on the wire, amounts are integer strings in
+ * the token's atomic unit** (e.g. 1 USDC = `"1000000"` because USDC has 6
+ * decimals). Decimal display ("1.50 USDC") is a UI concern only and must
+ * be derived from the mint's `decimals`. Hand-rolling `*1_000_000` math
+ * silently breaks for Token-2022 stables with different decimal counts;
+ * always pass the right `decimals` here.
+ */
+import type { ReceiptV1 } from '@leashmarket/schemas';
+import { type TokenNetwork } from '../tokens/index.js';
+/**
+ * Convert an atomic integer string (or bigint) to its decimal string form.
+ *
+ * @example
+ * atomicToDecimal('1000000', 6) // '1'
+ * atomicToDecimal('1234500', 6) // '1.2345'
+ * atomicToDecimal('2', 6)       // '0.000002'
+ */
+export declare function atomicToDecimal(amount: bigint | string, decimals: number): string;
+/**
+ * Convert a decimal string ("1.50") to its atomic integer (1500000n at 6
+ * decimals). Returns `null` for malformed input — callers should treat
+ * `null` as "leave the amount field blank, don't proceed".
+ *
+ * Rejects more decimal places than the token supports rather than silently
+ * truncating, because losing dust to rounding when sending stablecoins is
+ * a user-trust bug.
+ */
+export declare function decimalToAtomic(input: string, decimals: number): bigint | null;
+/**
+ * Format a `ReceiptV1.price` for UI display. Atomic integer amounts are
+ * resolved through the {@link KNOWN_TOKENS} registry when an `asset` mint is
+ * present; otherwise we fall back to USDC's 6 decimals (the playground
+ * default). Already-decimal strings (legacy receipts) pass through.
+ */
+export declare function formatReceiptPrice(price: ReceiptV1['price'] | undefined | null, network?: TokenNetwork): string | null;
+/** {@link formatReceiptPrice} + the currency ticker. */
+export declare function formatReceiptPriceWithCurrency(price: ReceiptV1['price'] | undefined | null, network?: TokenNetwork): string | null;
+/**
+ * USD-style display ("$1.23", "$0.001000") for stablecoin prices. Falls back
+ * to {@link formatReceiptPriceWithCurrency} for non-stable currencies. Pad
+ * the fractional part to **at least 2 decimals** so `$1` doesn't read as
+ * truncated; preserve the long tail for sub-cent amounts so users see
+ * exactly what they paid.
+ */
+export declare function formatReceiptPriceUsd(price: ReceiptV1['price'] | undefined | null, network?: TokenNetwork): string | null;
+/**
+ * Format a raw atomic balance against a known mint. Convenience wrapper
+ * around {@link atomicToDecimal} that sources `decimals` from the registry.
+ */
+export declare function formatTokenBalance(amount: bigint | string, mint: string, network: TokenNetwork): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/format/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/format/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKpE;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAajF;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU9E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,GAAG,IAAI,EAC5C,OAAO,GAAE,YAAuB,GAC/B,MAAM,GAAG,IAAI,CAMf;AAED,wDAAwD;AACxD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,GAAG,IAAI,EAC5C,OAAO,GAAE,YAAuB,GAC/B,MAAM,GAAG,IAAI,CAKf;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,GAAG,IAAI,EAC5C,OAAO,GAAE,YAAuB,GAC/B,MAAM,GAAG,IAAI,CASf;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,YAAY,GACpB,MAAM,CAIR"}

package/dist/format/index.js

@@ -0,0 +1,130 @@
+/**
+ * Token-aware amount formatting / parsing helpers shared by every Leash UI
+ * surface (web playground, CLI demos) and downstream consumers.
+ *
+ * The fundamental invariant: **on the wire, amounts are integer strings in
+ * the token's atomic unit** (e.g. 1 USDC = `"1000000"` because USDC has 6
+ * decimals). Decimal display ("1.50 USDC") is a UI concern only and must
+ * be derived from the mint's `decimals`. Hand-rolling `*1_000_000` math
+ * silently breaks for Token-2022 stables with different decimal counts;
+ * always pass the right `decimals` here.
+ */
+import { lookupToken } from '../tokens/index.js';
+/** USD-pegged stablecoin tickers shown with `$` prefix in {@link formatAmountUsd}. */
+const STABLES = new Set(['USDC', 'USDT', 'USDG', 'PYUSD']);
+/**
+ * Convert an atomic integer string (or bigint) to its decimal string form.
+ *
+ * @example
+ * atomicToDecimal('1000000', 6) // '1'
+ * atomicToDecimal('1234500', 6) // '1.2345'
+ * atomicToDecimal('2', 6)       // '0.000002'
+ */
+export function atomicToDecimal(amount, decimals) {
+    const raw = typeof amount === 'bigint' ? amount.toString() : amount.trim();
+    if (!/^\d+$/.test(raw)) {
+        throw new Error(`atomicToDecimal: expected integer string, got "${raw}"`);
+    }
+    if (decimals < 0 || !Number.isInteger(decimals)) {
+        throw new Error(`atomicToDecimal: decimals must be a non-negative integer (got ${decimals})`);
+    }
+    if (decimals === 0)
+        return raw;
+    const padded = raw.padStart(decimals + 1, '0');
+    const whole = padded.slice(0, -decimals);
+    const frac = padded.slice(-decimals).replace(/0+$/, '');
+    return frac ? `${whole}.${frac}` : whole;
+}
+/**
+ * Convert a decimal string ("1.50") to its atomic integer (1500000n at 6
+ * decimals). Returns `null` for malformed input — callers should treat
+ * `null` as "leave the amount field blank, don't proceed".
+ *
+ * Rejects more decimal places than the token supports rather than silently
+ * truncating, because losing dust to rounding when sending stablecoins is
+ * a user-trust bug.
+ */
+export function decimalToAtomic(input, decimals) {
+    const s = input.trim();
+    if (!s)
+        return null;
+    const m = s.match(/^(\d+)(?:\.(\d+))?$/);
+    if (!m)
+        return null;
+    const whole = m[1] ?? '0';
+    const fracRaw = m[2] ?? '';
+    if (fracRaw.length > decimals)
+        return null;
+    const frac = fracRaw.padEnd(decimals, '0');
+    return BigInt(whole) * BigInt(10) ** BigInt(decimals) + BigInt(frac || '0');
+}
+/**
+ * Format a `ReceiptV1.price` for UI display. Atomic integer amounts are
+ * resolved through the {@link KNOWN_TOKENS} registry when an `asset` mint is
+ * present; otherwise we fall back to USDC's 6 decimals (the playground
+ * default). Already-decimal strings (legacy receipts) pass through.
+ */
+export function formatReceiptPrice(price, network = 'devnet') {
+    if (!price)
+        return null;
+    const { amount, currency, asset } = price;
+    if (!/^\d+$/.test(amount))
+        return amount;
+    const decimals = resolveDecimals({ asset, currency, network });
+    return atomicToDecimal(amount, decimals);
+}
+/** {@link formatReceiptPrice} + the currency ticker. */
+export function formatReceiptPriceWithCurrency(price, network = 'devnet') {
+    if (!price)
+        return null;
+    const core = formatReceiptPrice(price, network);
+    if (core === null)
+        return null;
+    return `${core} ${price.currency}`;
+}
+/**
+ * USD-style display ("$1.23", "$0.001000") for stablecoin prices. Falls back
+ * to {@link formatReceiptPriceWithCurrency} for non-stable currencies. Pad
+ * the fractional part to **at least 2 decimals** so `$1` doesn't read as
+ * truncated; preserve the long tail for sub-cent amounts so users see
+ * exactly what they paid.
+ */
+export function formatReceiptPriceUsd(price, network = 'devnet') {
+    if (!price)
+        return null;
+    if (!STABLES.has(price.currency))
+        return formatReceiptPriceWithCurrency(price, network);
+    const core = formatReceiptPrice(price, network);
+    if (core === null)
+        return null;
+    if (/^\d+$/.test(core))
+        return `$${core}.00`;
+    const [whole, frac = ''] = core.split('.');
+    if (frac.length < 2)
+        return `$${whole}.${frac.padEnd(2, '0')}`;
+    return `$${core}`;
+}
+/**
+ * Format a raw atomic balance against a known mint. Convenience wrapper
+ * around {@link atomicToDecimal} that sources `decimals` from the registry.
+ */
+export function formatTokenBalance(amount, mint, network) {
+    const token = lookupToken(mint, network);
+    const decimals = token?.decimals ?? 0;
+    return atomicToDecimal(amount, decimals);
+}
+function resolveDecimals(args) {
+    if (args.asset) {
+        const known = lookupToken(args.asset, args.network);
+        if (known)
+            return known.decimals;
+    }
+    // Stablecoins are 6 decimals on Solana (USDC/USDT/USDG/PYUSD).
+    if (STABLES.has(args.currency))
+        return 6;
+    // Unknown non-stablecoins: leave atomic untouched. Better to show "5 BONK"
+    // than silently divide by 1e6 and surface "0.000005 BONK" — which would be
+    // a misleading payment amount in receipts.
+    return 0;
+}
+//# sourceMappingURL=index.js.map

package/dist/format/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/format/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,WAAW,EAAqB,MAAM,oBAAoB,CAAC;AAEpE,sFAAsF;AACtF,MAAM,OAAO,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEhF;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAuB,EAAE,QAAgB;IACvE,MAAM,GAAG,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,kDAAkD,GAAG,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,iEAAiE,QAAQ,GAAG,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,QAAgB;IAC7D,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA4C,EAC5C,UAAwB,QAAQ;IAEhC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,OAAO,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,8BAA8B,CAC5C,KAA4C,EAC5C,UAAwB,QAAQ;IAEhC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAA4C,EAC5C,UAAwB,QAAQ;IAEhC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,8BAA8B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,IAAI,KAAK,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC/D,OAAO,IAAI,IAAI,EAAE,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAuB,EACvB,IAAY,EACZ,OAAqB;IAErB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,IAAI,CAAC,CAAC;IACtC,OAAO,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,eAAe,CAAC,IAIxB;IACC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;IACnC,CAAC;IACD,+DAA+D;IAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC;IACzC,2EAA2E;IAC3E,2EAA2E;IAC3E,2CAA2C;IAC3C,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,25 @@
+export * from './agent/agent.js';
+export * from './agent/treasury-pda.js';
+export * from './policy/evaluate.js';
+export * from './policy/state.js';
+export * from './receipt/hash.js';
+export * from './receipt/build.js';
+export * from './receipt/verify.js';
+export * from './x402/client.js';
+export * from './x402/discovery.js';
+export * from './x402/delegate-scheme.js';
+export * from './x402/envelope.js';
+export * from './x402/facilitator.js';
+export * from './x402/headers.js';
+export * from './x402/parse.js';
+export * from './x402/webhook.js';
+export * from './treasury/balance.js';
+export * from './treasury/inspect-token-account.js';
+export * from './treasury/list-balances.js';
+export * from './treasury/pause.js';
+export * from './tokens/index.js';
+export * from './fees/leash-fee.js';
+export * from './explorer/index.js';
+export * from './format/index.js';
+export * from './wallet/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qCAAqC,CAAC;AACpD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC"}

package/dist/index.js

@@ -0,0 +1,25 @@
+export * from './agent/agent.js';
+export * from './agent/treasury-pda.js';
+export * from './policy/evaluate.js';
+export * from './policy/state.js';
+export * from './receipt/hash.js';
+export * from './receipt/build.js';
+export * from './receipt/verify.js';
+export * from './x402/client.js';
+export * from './x402/discovery.js';
+export * from './x402/delegate-scheme.js';
+export * from './x402/envelope.js';
+export * from './x402/facilitator.js';
+export * from './x402/headers.js';
+export * from './x402/parse.js';
+export * from './x402/webhook.js';
+export * from './treasury/balance.js';
+export * from './treasury/inspect-token-account.js';
+export * from './treasury/list-balances.js';
+export * from './treasury/pause.js';
+export * from './tokens/index.js';
+export * from './fees/leash-fee.js';
+export * from './explorer/index.js';
+export * from './format/index.js';
+export * from './wallet/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qCAAqC,CAAC;AACpD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC"}

package/dist/policy/evaluate.d.ts

@@ -0,0 +1,17 @@
+import type { RulesV1 } from '@leashmarket/schemas';
+import type { PolicyState } from './state.js';
+export type PolicyRequest = {
+    method: string;
+    url: string;
+    estimatedPrice?: string;
+    requestHash: string;
+};
+export type PolicyDecision = {
+    decision: 'allow';
+} | {
+    decision: 'deny';
+    reason: string;
+};
+/** Pure policy gate — no IO. */
+export declare function evaluate(req: PolicyRequest, rules: RulesV1, state: PolicyState): PolicyDecision;
+//# sourceMappingURL=evaluate.d.ts.map

package/dist/policy/evaluate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate.d.ts","sourceRoot":"","sources":["../../src/policy/evaluate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAc1F,gCAAgC;AAChC,wBAAgB,QAAQ,CAAC,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,GAAG,cAAc,CAiC/F"}

package/dist/policy/evaluate.js

@@ -0,0 +1,46 @@
+function cmpDecimal(a, b) {
+    return Number.parseFloat(a) - Number.parseFloat(b);
+}
+function hostFromUrl(url) {
+    try {
+        return new URL(url).hostname;
+    }
+    catch {
+        return '';
+    }
+}
+/** Pure policy gate — no IO. */
+export function evaluate(req, rules, state) {
+    if (state.recentRequestHashes.includes(req.requestHash)) {
+        return { decision: 'deny', reason: 'replay' };
+    }
+    const host = hostFromUrl(req.url);
+    if (rules.hosts.deny?.some((h) => host === h || host.endsWith(`.${h}`))) {
+        return { decision: 'deny', reason: 'denyHost' };
+    }
+    if (rules.hosts.allow && rules.hosts.allow.length > 0) {
+        const ok = rules.hosts.allow.some((h) => host === h || host.endsWith(`.${h}`));
+        if (!ok) {
+            return { decision: 'deny', reason: 'allowHost' };
+        }
+    }
+    if (req.estimatedPrice && rules.priceCeiling) {
+        if (cmpDecimal(req.estimatedPrice, rules.priceCeiling) > 0) {
+            return { decision: 'deny', reason: 'priceCeiling' };
+        }
+    }
+    const nextSpend = req.estimatedPrice !== undefined
+        ? String(Number.parseFloat(state.spentToday) + Number.parseFloat(req.estimatedPrice))
+        : state.spentToday;
+    if (cmpDecimal(state.spentToday, rules.budget.daily) > 0) {
+        return { decision: 'deny', reason: 'dailyBudgetExceeded' };
+    }
+    if (cmpDecimal(nextSpend, rules.budget.daily) > 0) {
+        return { decision: 'deny', reason: 'dailyBudgetExceeded' };
+    }
+    if (req.estimatedPrice && cmpDecimal(req.estimatedPrice, rules.budget.perCall) > 0) {
+        return { decision: 'deny', reason: 'perCallMax' };
+    }
+    return { decision: 'allow' };
+}
+//# sourceMappingURL=evaluate.js.map

package/dist/policy/evaluate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate.js","sourceRoot":"","sources":["../../src/policy/evaluate.ts"],"names":[],"mappings":"AAYA,SAAS,UAAU,CAAC,CAAS,EAAE,CAAS;IACtC,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,gCAAgC;AAChC,MAAM,UAAU,QAAQ,CAAC,GAAkB,EAAE,KAAc,EAAE,KAAkB;IAC7E,IAAI,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAI,UAAU,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GACb,GAAG,CAAC,cAAc,KAAK,SAAS;QAC9B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACrF,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IACvB,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,IAAI,UAAU,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACnF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC"}

package/dist/policy/state.d.ts

@@ -0,0 +1,8 @@
+import type { RulesV1 } from '@leashmarket/schemas';
+export type PolicyState = {
+    rules: RulesV1;
+    /** Total spent today in minor units or decimal string — v0.1 uses string decimal for simplicity. */
+    spentToday: string;
+    recentRequestHashes: string[];
+};
+//# sourceMappingURL=state.d.ts.map

package/dist/policy/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/policy/state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,oGAAoG;IACpG,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B,CAAC"}

package/dist/policy/state.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=state.js.map

package/dist/policy/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/policy/state.ts"],"names":[],"mappings":""}

package/dist/receipt/build.d.ts

@@ -0,0 +1,5 @@
+import type { ReceiptV1 } from '@leashmarket/schemas';
+export type ReceiptDraft = Omit<ReceiptV1, 'receipt_hash'>;
+export declare function computeReceiptHash(draft: ReceiptDraft): string;
+export declare function finalizeReceipt(draft: ReceiptDraft): ReceiptV1;
+//# sourceMappingURL=build.d.ts.map

package/dist/receipt/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/receipt/build.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGtD,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;AAE3D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAE9D;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,CAG9D"}

package/dist/receipt/build.js

@@ -0,0 +1,9 @@
+import { canonicalJson, sha256Hex } from './hash.js';
+export function computeReceiptHash(draft) {
+    return sha256Hex(canonicalJson(draft));
+}
+export function finalizeReceipt(draft) {
+    const receipt_hash = computeReceiptHash(draft);
+    return { ...draft, receipt_hash };
+}
+//# sourceMappingURL=build.js.map

package/dist/receipt/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/receipt/build.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAIrD,MAAM,UAAU,kBAAkB,CAAC,KAAmB;IACpD,OAAO,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAmB;IACjD,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC"}