@naulon/wayfarer 0.1.1

package/dist/rss.js

@@ -0,0 +1,110 @@
+const ENTITIES = {
+    amp: "&",
+    lt: "<",
+    gt: ">",
+    quot: '"',
+    apos: "'",
+    "#39": "'",
+};
+/** Decode the handful of XML entities a feed actually emits (+ numeric refs). */
+function decodeEntities(s) {
+    return s.replace(/&(#x?[0-9a-fA-F]+|[a-zA-Z]+);/g, (whole, code) => {
+        if (code[0] === "#") {
+            const cp = code[1] === "x" || code[1] === "X"
+                ? Number.parseInt(code.slice(2), 16)
+                : Number.parseInt(code.slice(1), 10);
+            return Number.isFinite(cp) ? String.fromCodePoint(cp) : whole;
+        }
+        return ENTITIES[code] ?? whole;
+    });
+}
+/** Strip a `<![CDATA[ ... ]]>` wrapper if present, then trim. */
+function unwrap(raw) {
+    const cdata = raw.match(/^\s*<!\[CDATA\[([\s\S]*?)\]\]>\s*$/);
+    return (cdata ? cdata[1] : raw).trim();
+}
+/** Inner text of the first `<tag …>…</tag>` in `block`, decoded. "" if absent. */
+function tag(block, name) {
+    const re = new RegExp(`<${name}(?:\\s[^>]*)?>([\\s\\S]*?)</${name}>`, "i");
+    const m = block.match(re);
+    if (!m)
+        return "";
+    const inner = unwrap(m[1]);
+    // CDATA content is literal; only decode entities outside a CDATA section.
+    return /^\s*<!\[CDATA\[/.test(m[1]) ? inner : decodeEntities(inner);
+}
+/** `href` of a self-closing `<link … href="…"/>` (Atom-style), decoded. "" if absent. */
+function linkHref(block) {
+    const m = block.match(/<link\b[^>]*\bhref=["']([^"']+)["'][^>]*\/?>/i);
+    return m ? decodeEntities(m[1]) : "";
+}
+/** Parse an RSS 2.0 (or Atom-ish) document into its items. Lenient by design. */
+export function parseRss(xml) {
+    const items = [];
+    for (const m of xml.matchAll(/<(?:item|entry)\b[\s\S]*?<\/(?:item|entry)>/gi)) {
+        const block = m[0];
+        const link = tag(block, "link") || linkHref(block);
+        const item = {
+            title: tag(block, "title"),
+            link,
+            description: tag(block, "description") || tag(block, "summary"),
+            guid: tag(block, "guid") || undefined,
+        };
+        const body = tag(block, "content:encoded");
+        if (body)
+            item.contentEncoded = body;
+        items.push(item);
+    }
+    return items;
+}
+/** Slug = the last non-empty path segment of the item's link (or guid). */
+export function slugFromLink(link) {
+    if (!link)
+        return "";
+    let path = link;
+    try {
+        path = new URL(link).pathname;
+    }
+    catch {
+        // Relative or malformed — fall back to the raw string, sans query/hash.
+        path = link.split(/[?#]/)[0];
+    }
+    const segs = path.split("/").filter(Boolean);
+    const last = segs[segs.length - 1] ?? "";
+    try {
+        return decodeURIComponent(last);
+    }
+    catch {
+        return last;
+    }
+}
+/**
+ * The teaser boundary — what the agent may read for FREE, pre-payment.
+ *
+ * This is a product decision, not a parsing detail: a feed that ships the full
+ * body in `<content:encoded>` would let the agent bypass the toll at discovery.
+ * So we read the teaser field only and never the body, regardless of what the
+ * feed includes. Keeping it a named function makes that line explicit and easy
+ * to retune per publisher.
+ */
+export function extractTeaser(item) {
+    return item.description.trim();
+}
+/** Map a parsed item to a free-teaser Candidate (slug + title + teaser). */
+export function rssItemToCandidate(item) {
+    return {
+        slug: slugFromLink(item.link || item.guid || ""),
+        title: item.title,
+        summary: extractTeaser(item),
+        // Carry the real feed link so pay/quote hit the publisher's actual URL shape
+        // (e.g. /articles/<slug>) instead of reconstructing /essays/<slug>.
+        url: item.link || undefined,
+    };
+}
+/** Full feed → candidates, dropping anything with no usable slug. */
+export function rssToCandidates(xml) {
+    return parseRss(xml)
+        .map(rssItemToCandidate)
+        .filter((c) => c.slug.length > 0);
+}
+//# sourceMappingURL=rss.js.map

package/dist/rss.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rss.js","sourceRoot":"","sources":["../src/rss.ts"],"names":[],"mappings":"AAqBA,MAAM,QAAQ,GAA2B;IACvC,GAAG,EAAE,GAAG;IACR,EAAE,EAAE,GAAG;IACP,EAAE,EAAE,GAAG;IACP,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,KAAK,EAAE,GAAG;CACX,CAAC;AAEF,iFAAiF;AACjF,SAAS,cAAc,CAAC,CAAS;IAC/B,OAAO,CAAC,CAAC,OAAO,CAAC,gCAAgC,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QACzE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACpB,MAAM,EAAE,GACN,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;gBAChC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACpC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAChE,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AACjE,SAAS,MAAM,CAAC,GAAW;IACzB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC9D,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,kFAAkF;AAClF,SAAS,GAAG,CAAC,KAAa,EAAE,IAAY;IACtC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,+BAA+B,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3E,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC5B,0EAA0E;IAC1E,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,yFAAyF;AACzF,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACvE,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,+CAA+C,CAAC,EAAE,CAAC;QAC9E,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,IAAI,GAAY;YACpB,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC;YAC1B,IAAI;YACJ,WAAW,EAAE,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC;YAC/D,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,SAAS;SACtC,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QAC3C,IAAI,IAAI;YAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,OAAO;QACL,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAChD,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC;QAC5B,6EAA6E;QAC7E,oEAAoE;QACpE,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,QAAQ,CAAC,GAAG,CAAC;SACjB,GAAG,CAAC,kBAAkB,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/dist/sign.d.ts

@@ -0,0 +1,13 @@
+/** Test seam: forget the cached identity (pairs with shared's resetConfig). */
+export declare function resetAgentIdentity(): void;
+/** The three Web Bot Auth headers for a request to `url`, or null when the
+ *  signing identity isn't configured. Signed per call — the ~1-minute validity
+ *  window means a signature is never reusable across a slow run. */
+export declare function botAuthHeadersFor(url: string): Record<string, string> | null;
+/**
+ * fetch with the wayfarer's Web Bot Auth identity attached (when configured).
+ * Caller headers win on collision — not that anything else sets these — and an
+ * unconfigured agent falls through to the exact fetch it always made.
+ */
+export declare function agentFetch(url: string, init?: RequestInit): Promise<Response>;
+//# sourceMappingURL=sign.d.ts.map

package/dist/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../src/sign.ts"],"names":[],"mappings":"AAgCA,+EAA+E;AAC/E,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED;;oEAEoE;AACpE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAK5E;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAKnF"}

package/dist/sign.js

@@ -0,0 +1,52 @@
+/**
+ * Web Bot Auth request signing (WBA slice 3) — the wayfarer as a signing agent.
+ *
+ * When the operator configures a signing identity (BOT_AUTH_SIGNING_KEY) and a
+ * directory host to advertise (BOT_AUTH_SIGNATURE_AGENT), every outbound
+ * wayfarer request carries the three RFC 9421 headers, so ANY Web-Bot-Auth
+ * verifier — our own gate, or a Cloudflare-fronted publisher — can prove who
+ * is calling instead of trusting the UA string. Unconfigured, `agentFetch` is
+ * a plain fetch: byte-identical headers, the same regression bar the gate's
+ * verifier holds for unsigned traffic.
+ */
+import { botAuthKeyFromSeed, getConfig, signBotAuth } from "@naulon/shared";
+/** Lazily resolved once per process; `undefined` = not yet looked at,
+ *  `null` = signing not configured. */
+let identity;
+function resolveIdentity() {
+    if (identity !== undefined)
+        return identity;
+    const cfg = getConfig();
+    identity =
+        cfg.BOT_AUTH_SIGNING_KEY && cfg.BOT_AUTH_SIGNATURE_AGENT
+            ? { key: botAuthKeyFromSeed(cfg.BOT_AUTH_SIGNING_KEY), agent: cfg.BOT_AUTH_SIGNATURE_AGENT }
+            : null;
+    return identity;
+}
+/** Test seam: forget the cached identity (pairs with shared's resetConfig). */
+export function resetAgentIdentity() {
+    identity = undefined;
+}
+/** The three Web Bot Auth headers for a request to `url`, or null when the
+ *  signing identity isn't configured. Signed per call — the ~1-minute validity
+ *  window means a signature is never reusable across a slow run. */
+export function botAuthHeadersFor(url) {
+    const id = resolveIdentity();
+    if (!id)
+        return null;
+    const authority = new URL(url).host;
+    return { ...signBotAuth({ key: id.key, authority, tag: "web-bot-auth", agent: id.agent }) };
+}
+/**
+ * fetch with the wayfarer's Web Bot Auth identity attached (when configured).
+ * Caller headers win on collision — not that anything else sets these — and an
+ * unconfigured agent falls through to the exact fetch it always made.
+ */
+export async function agentFetch(url, init) {
+    const signed = botAuthHeadersFor(url);
+    if (!signed)
+        return fetch(url, init);
+    const headers = { ...signed, ...(init?.headers ?? {}) };
+    return fetch(url, { ...init, headers });
+}
+//# sourceMappingURL=sign.js.map

package/dist/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../src/sign.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,WAAW,EAAmB,MAAM,gBAAgB,CAAC;AAO7F;uCACuC;AACvC,IAAI,QAA0C,CAAC;AAE/C,SAAS,eAAe;IACtB,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,QAAQ;QACN,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,wBAAwB;YACtD,CAAC,CAAC,EAAE,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,wBAAwB,EAAE;YAC5F,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB;IAChC,QAAQ,GAAG,SAAS,CAAC;AACvB,CAAC;AAED;;oEAEoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,OAAO,EAAE,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,IAAkB;IAC9D,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,CAAE,IAAI,EAAE,OAA8C,IAAI,EAAE,CAAC,EAAE,CAAC;IAChG,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,75 @@
+/** Wayfarer domain types — the shapes that flow through discover → … → ground. */
+import type { Usdc } from "@naulon/shared";
+/** An essay the agent could pay to read, before it has decided anything. */
+export interface Candidate {
+    slug: string;
+    title: string;
+    /** Public teaser the agent reads for free to judge relevance. */
+    summary: string;
+    /**
+     * Publisher host this candidate is served from (e.g. `example.com`). Optional:
+     * the single-gate pipeline leaves it unset (one configured origin). Multi-gate
+     * discovery (the fleet directory) populates it, and the policy engine uses it
+     * for domain allow/deny + per-domain caps.
+     */
+    host?: string;
+    /**
+     * Canonical URL this candidate is served from — the real link a discovery source
+     * (RSS `<link>`, sitemap `<loc>`, catalog/directory `url`) already knows. When
+     * present, quote/pay use it VERBATIM. Absent ⇒ the pipeline falls back to
+     * `articleUrl(base, slug)` (the single-gate `/essays/<slug>` convention). Carrying
+     * the real URL is what lets one buyer pay any publisher's URL shape — `/articles/`,
+     * a custom domain, a query string — instead of reconstructing a fixed template.
+     */
+    url?: string;
+    /** Indicative read price (USDC) a fleet catalog may carry. Advisory — the 402 is the truth. */
+    priceUsdc?: number;
+    /** Indicative citation price (USDC). Advisory — the 402 is the truth. */
+    citationPriceUsdc?: number;
+}
+/** A candidate after the tollgate has quoted a price for it. The author split is
+ * the seller's concern (recorded on the event); the buyer only needs the price. */
+export interface PricedCandidate extends Candidate {
+    price: Usdc;
+}
+/** A candidate after appraisal — how useful it looks for the topic. */
+export interface AppraisedCandidate extends PricedCandidate {
+    /** 0..1 estimate of relevance/value to the research topic. */
+    relevance: number;
+    /** Human-readable justification (shown in the decision log + demo). */
+    rationale: string;
+}
+export type Action = "pay" | "skip" | "cache" | "approve";
+/** The agent's verdict on one candidate, with a visible reason. */
+export interface Decision {
+    slug: string;
+    title: string;
+    /** Canonical URL carried from the candidate (see `Candidate.url`) so the pay
+     *  step targets the real link, not a reconstructed `/essays/<slug>` path. */
+    url?: string;
+    action: Action;
+    reason: string;
+    relevance: number;
+    price: number;
+    /** value density = relevance / price, the ranking key. */
+    density: number;
+}
+/** A source the agent actually obtained (paid or from cache) and can cite. */
+export interface Source {
+    slug: string;
+    title: string;
+    content: string;
+    paidUsdc: number;
+    settlementRef?: string;
+    /** Citation License `jti` proving this read was paid for (verifiable at the gate). */
+    licenseId?: string;
+}
+export interface RunResult {
+    topic: string;
+    budget: number;
+    spent: number;
+    decisions: Decision[];
+    sources: Source[];
+    answer: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAE3C,4EAA4E;AAC5E,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+FAA+F;IAC/F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;mFACmF;AACnF,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,KAAK,EAAE,IAAI,CAAC;CACb;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IACzD,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;AAE1D,mEAAmE;AACnE,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd;iFAC6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,8EAA8E;AAC9E,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sFAAsF;IACtF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/wallet.d.ts

@@ -0,0 +1,12 @@
+export interface AgentWallet {
+    address: string;
+    mock: boolean;
+    /**
+     * Sign an EIP-191 personal_sign message (a holder-of-key proof). Present
+     * whenever a private key is available (always, on the dev path). Absent only
+     * when BUYER_ADDRESS is set without a key — then PoP re-reads can't be proven.
+     */
+    signMessage?: (message: string) => Promise<string>;
+}
+export declare function getWallet(): AgentWallet;
+//# sourceMappingURL=wallet.d.ts.map

package/dist/wallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../src/wallet.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACpD;AAiBD,wBAAgB,SAAS,IAAI,WAAW,CAqBvC"}

package/dist/wallet.js

@@ -0,0 +1,46 @@
+/**
+ * The agent's wallet. With BUYER_PRIVATE_KEY set, derives the real Arc address
+ * via viem and can sign holder-of-key proofs. Without it, falls back to a
+ * deterministic DEV key (derived from a fixed non-secret seed, so it's stable
+ * across processes) so the full loop — including the proof-of-possession re-read
+ * across the two demo runs — works offline against the mock tollgate.
+ * BUYER_ADDRESS still overrides the address for legacy/no-sign demos, but then
+ * proofs won't match the dev key (re-read safely falls back to paying).
+ */
+import { createHash } from "node:crypto";
+import { privateKeyToAccount } from "viem/accounts";
+import { getConfig } from "@naulon/shared";
+/**
+ * A deterministic, non-secret DEV key derived from a fixed seed — never used with
+ * real funds. It gives the offline mock agent a consistent address+key (stable
+ * across the two demo runs) so it can sign PoP proofs without any real wallet.
+ * Derived at runtime so no key material is committed to the repo.
+ */
+function devDemoKey() {
+    const bytes = createHash("sha256").update("naulon:dev-wallet:v1").digest();
+    return `0x${bytes.toString("hex")}`;
+}
+function normalizeKey(raw) {
+    return (raw.startsWith("0x") ? raw : `0x${raw}`);
+}
+export function getWallet() {
+    const cfg = getConfig();
+    if (cfg.BUYER_PRIVATE_KEY) {
+        const account = privateKeyToAccount(normalizeKey(cfg.BUYER_PRIVATE_KEY));
+        return {
+            address: account.address,
+            mock: false,
+            signMessage: (message) => account.signMessage({ message }),
+        };
+    }
+    // No real key: use the derived dev key so the agent has a consistent signable
+    // identity. A caller-supplied BUYER_ADDRESS still wins for the address (legacy
+    // demos), but the dev key signs — only matching when BUYER_ADDRESS is unset.
+    const account = privateKeyToAccount(devDemoKey());
+    return {
+        address: cfg.BUYER_ADDRESS ?? account.address,
+        mock: true,
+        signMessage: (message) => account.signMessage({ message }),
+    };
+}
+//# sourceMappingURL=wallet.js.map

package/dist/wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../src/wallet.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAa3C;;;;;GAKG;AACH,SAAS,UAAU;IACjB,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3E,OAAO,KAAK,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAkB,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IAExB,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACzE,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,EAAE,CAAC,CAAC;IAClD,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,OAAO;QAC7C,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;KAC3D,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@naulon/wayfarer",
+  "version": "0.1.1",
+  "description": "The naulon paying agent: discover → quote → appraise → decide → pay → ground. Budgeted x402 buying over Circle Gateway on Arc, with reusable Citation Licenses (pay once, re-read free).",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/naulonapp/naulon.git",
+    "directory": "packages/wayfarer"
+  },
+  "type": "module",
+  "main": "./dist/lib.js",
+  "types": "./dist/lib.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/lib.d.ts",
+      "import": "./dist/lib.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "start": "tsx src/index.ts",
+    "build": "tsc -p tsconfig.json",
+    "prepublishOnly": "npm run build",
+    "test": "node --import tsx --test \"src/**/*.test.ts\""
+  },
+  "dependencies": {
+    "@naulon/shared": "^0.1.2",
+    "@circle-fin/x402-batching": "^3.2.0",
+    "@langchain/core": "^1.1.48",
+    "@langchain/openai": "^1.4.7",
+    "@x402/core": "^2.6.0",
+    "@x402/evm": "^2.6.0",
+    "viem": "^2.52.2"
+  },
+  "engines": {
+    "node": ">=22"
+  }
+}