@m2m-monster/core 0.1.0 → 1.1.0

package/README.md

@@ -1,7 +1,7 @@
 # @m2m-monster/core
 
-Core of [m2m.monster](https://sandbox.m2m.monster/llms.txt), used by `@m2m-monster/sdk` and `@m2m-monster/mcp`: fee formulas, signed quotes and receipts, mint whitelists, and building and strict verification of the `m2m-split` transaction for x402 on Solana.
+Core of [m2m.monster](https://m2m.monster/llms.txt), used by `@m2m-monster/sdk` and `@m2m-monster/mcp`: fee formulas, signed quotes and receipts, mint whitelists, and building and strict verification of the `m2m-split` transaction for x402 on Solana.
 
-> **0.x beta, Devnet only.** Most agents want `@m2m-monster/sdk`.
+> Most agents want `@m2m-monster/sdk`.
 
 License: Apache-2.0

package/dist/errors.d.ts

@@ -16,6 +16,7 @@ export declare const ERRORS: {
     readonly CHALLENGE_INVALID: "The registration challenge is missing, expired, already used, or not signed by this public key.";
     readonly IDEMPOTENCY_KEY_REUSED: "The idempotency key was already used for a different request.";
     readonly INTERNAL_ERROR: "Internal error. Retry later.";
+    readonly PAYMENT_STATUS_UNKNOWN: "The status of a signed payment could not be determined. Do not pay again; retry later.";
 };
 export type ErrorCode = keyof typeof ERRORS;
 export declare class M2mError extends Error {

package/dist/errors.js

@@ -17,6 +17,7 @@ export const ERRORS = {
     CHALLENGE_INVALID: "The registration challenge is missing, expired, already used, or not signed by this public key.",
     IDEMPOTENCY_KEY_REUSED: "The idempotency key was already used for a different request.",
     INTERNAL_ERROR: "Internal error. Retry later.",
+    PAYMENT_STATUS_UNKNOWN: "The status of a signed payment could not be determined. Do not pay again; retry later.",
 };
 export class M2mError extends Error {
     code;

package/dist/networks.d.ts

@@ -9,7 +9,10 @@ export interface NetworkConfig {
     name: string;
     /** USDC mint: the only token the fee is paid in (rule 5). */
     usdc: string;
-    /** Treasury wallet (cold multisig on mainnet, rule 9). Unset until the user provides it. */
+    /**
+     * Treasury wallet: single-key, multisig planned as the project grows (rule 9). Only its public
+     * address is known here; no server holds its key. The API refuses to start without a valid one.
+     */
     treasury?: string;
     mints: readonly AllowedMint[];
 }

package/dist/networks.js

@@ -5,6 +5,9 @@ export const DEVNET = "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1";
 export const NETWORKS = {
     [MAINNET]: {
         name: "solana-mainnet",
+        // Provided by the user on 2026-10-15 (D58); its USDC account (classic SPL Token ATA) is
+        // EWQ5w4DPmkinV4iHn9H7pcwx5Q8fYQCnY46CzGD1ErTk.
+        treasury: "D68nkVrQD3pcs6qNcadXqWvoKqsNCKpLemy3zYVmGHym",
         usdc: "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
         mints: [
             { symbol: "USDC", mint: "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v" },

package/dist/split.js

@@ -74,6 +74,8 @@ async function checkTransfer(index, ix, payer, expected) {
     const fail = (what) => invalid(`instruction ${index}: ${what}`);
     if (ix.programAddress !== TOKEN_PROGRAM_ADDRESS ||
         ix.data[0] !== 12 ||
+        // u8 discriminator + u64 amount + u8 decimals: no trailing bytes.
+        ix.data.length !== 10 ||
         ix.accounts.length !== 4) {
         throw fail("expected a TransferChecked of the SPL Token program");
     }
@@ -119,12 +121,14 @@ export async function verifySplitTransaction(wire, expected, options) {
     if (instructions.length !== 5)
         throw invalid("expected exactly 5 instructions");
     const [limitIx, priceIx, paymentIx, feeIx, memoIx] = instructions;
-    for (const [index, ix, discriminator] of [
-        [0, limitIx, 2],
-        [1, priceIx, 3],
+    // Exact data lengths: no trailing bytes (u8 discriminator + u32 units / u64 micro-lamports).
+    for (const [index, ix, discriminator, size] of [
+        [0, limitIx, 2, 5],
+        [1, priceIx, 3, 9],
     ]) {
         if (ix.programAddress !== COMPUTE_BUDGET_PROGRAM_ADDRESS ||
             ix.data?.[0] !== discriminator ||
+            ix.data.length !== size ||
             ix.accounts?.length) {
             throw invalid(`instruction ${index}: expected ${index === 0 ? "SetComputeUnitLimit" : "SetComputeUnitPrice"}`);
         }

package/dist/test-rpc.d.ts

@@ -27,6 +27,13 @@ export interface MockRpcState {
     }>;
     /** Confirm every broadcast transaction immediately. */
     autoConfirm: boolean;
+    /** Block height returned by getBlockHeight (blockhashes from getLatestBlockhash last to 1000). */
+    blockHeight: bigint;
+    /** Finalized slot from getEpochInfo, and the context slot of getSignatureStatuses answers. */
+    finalizedSlot: bigint;
+    statusSlot: bigint;
+    /** RPC methods that fail, to test an unavailable RPC. */
+    failing: Set<string>;
 }
 /** Base58 fee-payer signature of a base64 wire transaction. */
 export declare const signatureOf: (wire: string) => import("@solana/kit").Signature;

package/dist/test-rpc.js

@@ -13,6 +13,10 @@ export function mockRpc() {
         simulated: [],
         transactions: new Map(),
         autoConfirm: false,
+        blockHeight: 10n,
+        finalizedSlot: 1n,
+        statusSlot: 1n,
+        failing: new Set(),
     };
     const ok = (value) => ({ send: async () => value });
     const rpc = {
@@ -58,8 +62,19 @@ export function mockRpc() {
                 return ok("5j7s6NiJS3JAkvgkoc18WVAsiSaci2pxB2A6ueCJP4tprA2TFg9wSyTLeYouxPBJEMzJinENTkpA52YStRW5Dia7");
             }
         },
-        getSignatureStatuses: (signatures) => ok({ context: { slot: 1n }, value: signatures.map((s) => state.statuses.get(s) ?? null) }),
-        getBlockHeight: () => ok(10n),
+        getSignatureStatuses: (signatures) => ok({
+            context: { slot: state.statusSlot },
+            value: signatures.map((s) => state.statuses.get(s) ?? null),
+        }),
+        getEpochInfo: () => ok({
+            absoluteSlot: state.finalizedSlot,
+            blockHeight: state.blockHeight,
+            epoch: 0n,
+            slotIndex: 0n,
+            slotsInEpoch: 432000n,
+            transactionCount: null,
+        }),
+        getBlockHeight: () => ok(state.blockHeight),
         getTransaction: (signature) => {
             const tx = state.transactions.get(signature);
             return ok(tx
@@ -72,7 +87,17 @@ export function mockRpc() {
                 : null);
         },
     };
-    return { rpc: rpc, state };
+    const failable = Object.fromEntries(Object.entries(rpc).map(([name, method]) => [
+        name,
+        (...args) => state.failing.has(name)
+            ? {
+                send: async () => {
+                    throw new Error(`${name}: RPC unavailable`);
+                },
+            }
+            : method(...args),
+    ]));
+    return { rpc: failable, state };
 }
 export function putTokenAccount(state, address, owner, mint, amount) {
     const data = getTokenEncoder().encode({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m2m-monster/core",
-  "version": "0.1.0",
+  "version": "1.1.0",
   "description": "Core of m2m.monster: fees, quotes, and m2m-split transaction building and verification for x402 on Solana.",
   "license": "Apache-2.0",
   "keywords": [
@@ -10,7 +10,7 @@
     "agents",
     "m2m-split"
   ],
-  "homepage": "https://sandbox.m2m.monster/llms.txt",
+  "homepage": "https://m2m.monster/llms.txt",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/m2mmonster/m2m-monster.git",