@paybox-sh/sdk 0.5.0 → 0.8.0

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n// The `paybox` CLI — a thin wrapper over PayboxClient. Mirrors the MCP tools as\n// subcommands; `--json` on any command emits machine-readable output.\n\nimport { spawnSync } from \"node:child_process\";\nimport { readFileSync, rmSync } from \"node:fs\";\nimport { createInterface } from \"node:readline/promises\";\n\nimport { Command } from \"commander\";\n\nimport { agentClientId, appBaseFrom, loginLoopback, openBrowser } from \"./auth.js\";\nimport { PayboxClient } from \"./client.js\";\nimport { configDir, configFile, loadConfig, saveConfig } from \"./config.js\";\n\nconst DEFAULT_BASE_URL = \"https://api.paybox.sh\";\nconst PKG = \"@paybox-sh/sdk\";\nconst VERSION = \"0.5.0\";\n\nconst program = new Command();\nprogram\n  .name(\"paybox\")\n  .description(\"Paybox agent CLI — vaulted cards, wallets, and secrets for agents\")\n  .version(VERSION)\n  .option(\"--base-url <url>\", \"API origin (default https://api.paybox.sh or stored)\")\n  .option(\"--json\", \"machine-readable JSON output\");\n\nfunction jsonMode(): boolean {\n  return Boolean(program.opts().json);\n}\n\nfunction emit(data: unknown): void {\n  if (jsonMode()) console.log(JSON.stringify(data, null, 2));\n  else console.dir(data, { depth: null, colors: process.stdout.isTTY });\n}\n\nfunction client(): PayboxClient {\n  return PayboxClient.fromConfig({ baseUrl: program.opts().baseUrl });\n}\n\nfunction readIntent(value: string): unknown {\n  const raw = value.startsWith(\"@\") ? readFileSync(value.slice(1), \"utf8\") : value;\n  return JSON.parse(raw);\n}\n\nfunction int(flag: string, value: string): number {\n  const n = Number(value);\n  if (!Number.isInteger(n)) {\n    throw new Error(`--${flag} must be an integer, got ${JSON.stringify(value)}`);\n  }\n  return n;\n}\n\nfunction optInt(flag: string, value: string | undefined): number | undefined {\n  return value === undefined ? undefined : int(flag, value);\n}\n\n/** True when semver `a` is strictly greater than `b` (plain x.y.z). */\nfunction isNewer(a: string, b: string): boolean {\n  const pa = a.split(\".\").map(Number);\n  const pb = b.split(\".\").map(Number);\n  for (let i = 0; i < 3; i++) {\n    const x = pa[i] ?? 0;\n    const y = pb[i] ?? 0;\n    if (x !== y) return x > y;\n  }\n  return false;\n}\n\nasync function prompt(question: string): Promise<string> {\n  if (!process.stdin.isTTY) return \"\"; // non-interactive: skip\n  const rl = createInterface({ input: process.stdin, output: process.stderr });\n  try {\n    return (await rl.question(question)).trim();\n  } finally {\n    rl.close();\n  }\n}\n\nasync function run(fn: () => Promise<void>): Promise<void> {\n  try {\n    await fn();\n  } catch (err) {\n    console.error(err instanceof Error ? err.message : String(err));\n    process.exitCode = 1;\n  }\n}\n\nprogram\n  .command(\"login\")\n  .description(\"Authenticate via OAuth (browser + passkey), or store a pbx_live_ key\")\n  .option(\"--key <key>\", \"store a pbx_live_ personal API key instead of OAuth\")\n  .option(\"--signing-key <token>\", \"store a pbxk1. wallet signing key (skips the prompt)\")\n  .option(\"--app-url <url>\", \"Paybox app origin for key provisioning (default: derived from --base-url)\")\n  .option(\"--no-provision\", \"skip the wallet signing-key provisioning step\")\n  .action((opts) =>\n    run(async () => {\n      const cfg = loadConfig();\n      const baseUrl = (\n        program.opts().baseUrl ??\n        process.env.PAYBOX_API_URL ??\n        cfg.baseUrl ??\n        DEFAULT_BASE_URL\n      ).replace(/\\/+$/, \"\");\n      cfg.baseUrl = baseUrl;\n      if (opts.appUrl) cfg.appUrl = opts.appUrl;\n\n      // Step 1 — authenticate.\n      if (opts.key) {\n        cfg.apiKey = opts.key;\n        delete cfg.oauth;\n      } else {\n        cfg.oauth = await loginLoopback(baseUrl);\n        delete cfg.apiKey;\n      }\n      if (opts.signingKey) cfg.signingKey = opts.signingKey;\n      saveConfig(cfg);\n      console.error(`Saved credentials to ${configFile()}`);\n\n      // Step 2 — provision a wallet signing key. Runs only after OAuth (the app\n      // session is warm) and only when one wasn't supplied or disabled. The app\n      // mints a key scoped to this agent and shows a `pbxk1.` token to paste back.\n      if (!cfg.oauth || opts.signingKey || opts.provision === false) return;\n      const cid = agentClientId(cfg.oauth.accessToken);\n      const appBase = appBaseFrom(baseUrl, opts.appUrl ?? process.env.PAYBOX_APP_URL ?? cfg.appUrl);\n      if (!cid || !appBase) {\n        console.error(\n          \"To enable wallet sign/swap, provision a signing key and run\\n\" +\n            \"  paybox login --signing-key <pbxk1...>\" +\n            (cid && !appBase ? \" (or pass --app-url <paybox app origin>)\" : \"\"),\n        );\n        return;\n      }\n      const url = `${appBase}/agent-key?client_id=${cid}`;\n      console.error(\n        `\\nNext, provision a wallet signing key for this agent (needed for sign/swap):\\n  ${url}\\n`,\n      );\n      openBrowser(url);\n      const key = await prompt(\"Paste the pbxk1. signing key when ready (or Enter to skip): \");\n      if (key) {\n        cfg.signingKey = key;\n        saveConfig(cfg);\n        console.error(\"Signing key saved — sign/swap enabled.\");\n      } else {\n        console.error(\"Skipped — add it later with `paybox login --signing-key <pbxk1...>`.\");\n      }\n    }),\n  );\n\nprogram\n  .command(\"logout\")\n  .description(\"Forget stored credentials\")\n  .action(() =>\n    run(async () => {\n      const cfg = loadConfig();\n      delete cfg.apiKey;\n      delete cfg.oauth;\n      delete cfg.signingKey;\n      saveConfig(cfg);\n      console.error(\"Logged out.\");\n    }),\n  );\n\nprogram\n  .command(\"whoami\")\n  .description(\"Show the configured endpoint, auth mode, and signing capability\")\n  .action(() =>\n    run(async () => {\n      const cfg = loadConfig();\n      const c = client();\n      const mode = process.env.PAYBOX_ACCESS_TOKEN\n        ? \"oauth (env token)\"\n        : process.env.PAYBOX_API_KEY || cfg.apiKey\n          ? \"api key\"\n          : cfg.oauth\n            ? \"oauth\"\n            : \"none\";\n      emit({ baseUrl: c.baseUrl, auth: mode, canSign: c.canSign, configFile: configFile() });\n    }),\n  );\n\nprogram\n  .command(\"credentials\")\n  .description(\"List the credentials this client may use\")\n  .action(() => run(async () => emit(await client().listCredentials())));\n\nprogram\n  .command(\"pay\")\n  .description(\"Charge a card credential\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--merchant <name>\")\n  .requiredOption(\"--url <url>\", \"real merchant URL the card is bound to\")\n  .requiredOption(\"--amount <cents>\", \"amount in cents\")\n  .option(\"--currency <code>\", \"ISO 4217 currency\", \"USD\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().requestPayment({\n          credentialId: o.credential,\n          merchant: o.merchant,\n          merchantUrl: o.url,\n          amountCents: int(\"amount\", o.amount),\n          currency: o.currency,\n        }),\n      ),\n    ),\n  );\n\nprogram\n  .command(\"secret\")\n  .description(\"Reveal a secret credential (one-time token, or --raw value)\")\n  .requiredOption(\"--credential <id>\")\n  .option(\"--raw\", \"return the raw secret value (grant-gated)\")\n  .option(\"--purpose <text>\", \"why the secret is requested (shown on approval)\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().requestSecret({\n          credentialId: o.credential,\n          raw: Boolean(o.raw),\n          purpose: o.purpose,\n        }),\n      ),\n    ),\n  );\n\nprogram\n  .command(\"sign\")\n  .description(\"Sign with a wallet credential (intent JSON, or @file)\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--intent <json>\", 'a SignIntent, e.g. \\'{\"op\":\"message\",\"message\":\"hi\"}\\' or @intent.json')\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const res = await c.requestWalletSign({\n        credentialId: o.credential,\n        intent: readIntent(o.intent) as never,\n      });\n      if (res.status === \"pending_signature\" && !c.canSign) {\n        console.error(\n          \"request is awaiting a signature but no signing key is set — \" +\n            \"run `paybox login --signing-key <pbxk1...>` or set PAYBOX_SIGNING_KEY, then poll `paybox request <id>`.\",\n        );\n      }\n      emit(res);\n    }),\n  );\n\nprogram\n  .command(\"swap\")\n  .description(\"Swap tokens from a wallet credential\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--src-chain <caip2>\")\n  .requiredOption(\"--src-token <addr>\", '\"native\" or a token address')\n  .requiredOption(\"--dst-token <addr>\")\n  .requiredOption(\"--amount <smallest-unit>\", \"source amount in smallest units\")\n  .option(\"--dst-chain <caip2>\", \"defaults to --src-chain\")\n  .option(\"--direction <dir>\", \"exact-amount-in | exact-amount-out\", \"exact-amount-in\")\n  .option(\"--slippage <bps>\", \"slippage in bps\", \"50\")\n  .option(\"--recipient <addr>\")\n  .option(\"--value-cents <n>\")\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const result = await c.requestSwap({\n        credentialId: o.credential,\n        srcChain: o.srcChain,\n        dstChain: o.dstChain,\n        srcToken: o.srcToken,\n        dstToken: o.dstToken,\n        amount: o.amount,\n        swapDirection: o.direction,\n        slippageBps: int(\"slippage\", o.slippage),\n        recipient: o.recipient,\n        valueCents: optInt(\"value-cents\", o.valueCents),\n      });\n      if (result.response.status === \"pending_signature\" && !c.canSign) {\n        console.error(\n          \"swap is awaiting signatures but no signing key is set — \" +\n            \"run `paybox login --signing-key <pbxk1...>` or set PAYBOX_SIGNING_KEY, then poll `paybox request <id>`.\",\n        );\n      }\n      emit(result);\n    }),\n  );\n\nprogram\n  .command(\"discover [query]\")\n  .description(\"Discover paid x402 services from the Bazaar catalog (optional ranked search)\")\n  .action((query) => run(async () => emit(await client().discoverServices(query))));\n\nprogram\n  .command(\"pay-x402\")\n  .description(\"Pay a paid x402 endpoint (header mode — returns the X-PAYMENT header to replay)\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--accepts <json>\", \"the 402's accepts[] array (JSON or @file)\")\n  .requiredOption(\"--url <url>\", \"the paywalled resource URL\")\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const result = await c.payX402({\n        credentialId: o.credential,\n        accepts: readIntent(o.accepts) as unknown[],\n        resourceUrl: o.url,\n      });\n      if (result.response.status === \"pending_signature\" && !c.canSign) {\n        console.error(\n          \"payment is awaiting a signature but no signing key is set — \" +\n            \"run `paybox login --signing-key <pbxk1...>` or set PAYBOX_SIGNING_KEY, then poll `paybox request <id>`.\",\n        );\n      }\n      emit(result);\n    }),\n  );\n\nprogram\n  .command(\"use-service\")\n  .description(\"Fetch a paid x402 resource and have paybox pay for it (gateway mode)\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--url <url>\", \"the paid x402 resource URL\")\n  .option(\"--method <verb>\", \"HTTP method\", \"GET\")\n  .option(\"--body <json>\", \"request body (JSON or @file)\")\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const result = await c.useService({\n        credentialId: o.credential,\n        url: o.url,\n        method: o.method,\n        body: o.body === undefined ? undefined : readIntent(o.body),\n      });\n      if (result.response.status === \"pending_signature\" && !c.canSign) {\n        console.error(\n          \"payment is awaiting a signature but no signing key is set — \" +\n            \"run `paybox login --signing-key <pbxk1...>` or set PAYBOX_SIGNING_KEY, then poll `paybox request <id>`.\",\n        );\n      }\n      emit(result);\n    }),\n  );\n\nprogram\n  .command(\"portfolio\")\n  .description(\"List a wallet address's token balances across chains\")\n  .requiredOption(\"--address <addr>\")\n  .option(\"--networks <ids>\", 'comma-separated network IDs, e.g. \"1,8453\"')\n  .action((o) =>\n    run(async () =>\n      emit(await client().getPortfolio({ address: o.address, networkIds: o.networks })),\n    ),\n  );\n\nprogram\n  .command(\"request <id>\")\n  .description(\"Poll a request's status\")\n  .option(\"--wait\", \"block until it leaves the pending state\")\n  .action((id, o) =>\n    run(async () => {\n      const c = client();\n      emit(o.wait ? await c.waitForRequest(id) : await c.getRequest(id));\n    }),\n  );\n\nprogram\n  .command(\"version\")\n  .description(\"Show the installed CLI version (and whether an update is available)\")\n  .action(() =>\n    run(async () => {\n      let latest: string | undefined;\n      try {\n        const res = await fetch(`https://registry.npmjs.org/${PKG}/latest`);\n        if (res.ok) latest = ((await res.json()) as { version?: string }).version;\n      } catch {\n        /* offline — just report the installed version */\n      }\n      const updateAvailable = Boolean(latest && isNewer(latest, VERSION));\n      if (jsonMode()) {\n        emit({ version: VERSION, latest: latest ?? null, updateAvailable });\n        return;\n      }\n      console.log(`${PKG} v${VERSION}`);\n      if (updateAvailable) {\n        console.log(`Update available: v${latest} — run \\`paybox update\\`.`);\n      }\n    }),\n  );\n\nprogram\n  .command(\"update\")\n  .description(\"Update the globally-installed paybox CLI to the latest version\")\n  .option(\"--print\", \"print the update command instead of running it\")\n  .action((opts) =>\n    run(async () => {\n      const args = [\"install\", \"-g\", `${PKG}@latest`];\n      if (opts.print) {\n        console.log(`npm ${args.join(\" \")}`);\n        return;\n      }\n      console.error(`Updating ${PKG} (npm ${args.join(\" \")})…`);\n      const r = spawnSync(\"npm\", args, { stdio: \"inherit\" });\n      if (r.status !== 0) {\n        console.error(\n          `\\nIf this isn't a global install: run \\`pnpm up ${PKG}\\` in your project, ` +\n            `or use \\`npx ${PKG}@latest …\\` to always run the latest.`,\n        );\n        process.exitCode = r.status ?? 1;\n      }\n    }),\n  );\n\nprogram\n  .command(\"uninstall\")\n  .description(\"Remove stored Paybox credentials/config (and show how to remove the CLI)\")\n  .action(() =>\n    run(async () => {\n      const dir = configDir();\n      rmSync(dir, { recursive: true, force: true });\n      console.error(`Removed stored config at ${dir}.`);\n      console.error(\n        `The CLI binary is managed by npm — remove it with:\\n  npm rm -g ${PKG}`,\n      );\n    }),\n  );\n\nprogram.parseAsync(process.argv);\n"],"mappings":";;;;;;;;;;;;;;AAIA,SAAS,iBAAiB;AAC1B,SAAS,cAAc,cAAc;AACrC,SAAS,uBAAuB;AAEhC,SAAS,eAAe;AAMxB,IAAM,mBAAmB;AACzB,IAAM,MAAM;AACZ,IAAM,UAAU;AAEhB,IAAM,UAAU,IAAI,QAAQ;AAC5B,QACG,KAAK,QAAQ,EACb,YAAY,wEAAmE,EAC/E,QAAQ,OAAO,EACf,OAAO,oBAAoB,sDAAsD,EACjF,OAAO,UAAU,8BAA8B;AAElD,SAAS,WAAoB;AAC3B,SAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI;AACpC;AAEA,SAAS,KAAK,MAAqB;AACjC,MAAI,SAAS,EAAG,SAAQ,IAAI,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA,MACpD,SAAQ,IAAI,MAAM,EAAE,OAAO,MAAM,QAAQ,QAAQ,OAAO,MAAM,CAAC;AACtE;AAEA,SAAS,SAAuB;AAC9B,SAAO,aAAa,WAAW,EAAE,SAAS,QAAQ,KAAK,EAAE,QAAQ,CAAC;AACpE;AAEA,SAAS,WAAW,OAAwB;AAC1C,QAAM,MAAM,MAAM,WAAW,GAAG,IAAI,aAAa,MAAM,MAAM,CAAC,GAAG,MAAM,IAAI;AAC3E,SAAO,KAAK,MAAM,GAAG;AACvB;AAEA,SAAS,IAAI,MAAc,OAAuB;AAChD,QAAM,IAAI,OAAO,KAAK;AACtB,MAAI,CAAC,OAAO,UAAU,CAAC,GAAG;AACxB,UAAM,IAAI,MAAM,KAAK,IAAI,4BAA4B,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC9E;AACA,SAAO;AACT;AAEA,SAAS,OAAO,MAAc,OAA+C;AAC3E,SAAO,UAAU,SAAY,SAAY,IAAI,MAAM,KAAK;AAC1D;AAGA,SAAS,QAAQ,GAAW,GAAoB;AAC9C,QAAM,KAAK,EAAE,MAAM,GAAG,EAAE,IAAI,MAAM;AAClC,QAAM,KAAK,EAAE,MAAM,GAAG,EAAE,IAAI,MAAM;AAClC,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK;AAC1B,UAAM,IAAI,GAAG,CAAC,KAAK;AACnB,UAAM,IAAI,GAAG,CAAC,KAAK;AACnB,QAAI,MAAM,EAAG,QAAO,IAAI;AAAA,EAC1B;AACA,SAAO;AACT;AAEA,eAAe,OAAO,UAAmC;AACvD,MAAI,CAAC,QAAQ,MAAM,MAAO,QAAO;AACjC,QAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAC3E,MAAI;AACF,YAAQ,MAAM,GAAG,SAAS,QAAQ,GAAG,KAAK;AAAA,EAC5C,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;AAEA,eAAe,IAAI,IAAwC;AACzD,MAAI;AACF,UAAM,GAAG;AAAA,EACX,SAAS,KAAK;AACZ,YAAQ,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAC9D,YAAQ,WAAW;AAAA,EACrB;AACF;AAEA,QACG,QAAQ,OAAO,EACf,YAAY,sEAAsE,EAClF,OAAO,eAAe,qDAAqD,EAC3E,OAAO,yBAAyB,sDAAsD,EACtF,OAAO,mBAAmB,2EAA2E,EACrG,OAAO,kBAAkB,+CAA+C,EACxE;AAAA,EAAO,CAAC,SACP,IAAI,YAAY;AACd,UAAM,MAAM,WAAW;AACvB,UAAM,WACJ,QAAQ,KAAK,EAAE,WACf,QAAQ,IAAI,kBACZ,IAAI,WACJ,kBACA,QAAQ,QAAQ,EAAE;AACpB,QAAI,UAAU;AACd,QAAI,KAAK,OAAQ,KAAI,SAAS,KAAK;AAGnC,QAAI,KAAK,KAAK;AACZ,UAAI,SAAS,KAAK;AAClB,aAAO,IAAI;AAAA,IACb,OAAO;AACL,UAAI,QAAQ,MAAM,cAAc,OAAO;AACvC,aAAO,IAAI;AAAA,IACb;AACA,QAAI,KAAK,WAAY,KAAI,aAAa,KAAK;AAC3C,eAAW,GAAG;AACd,YAAQ,MAAM,wBAAwB,WAAW,CAAC,EAAE;AAKpD,QAAI,CAAC,IAAI,SAAS,KAAK,cAAc,KAAK,cAAc,MAAO;AAC/D,UAAM,MAAM,cAAc,IAAI,MAAM,WAAW;AAC/C,UAAM,UAAU,YAAY,SAAS,KAAK,UAAU,QAAQ,IAAI,kBAAkB,IAAI,MAAM;AAC5F,QAAI,CAAC,OAAO,CAAC,SAAS;AACpB,cAAQ;AAAA,QACN,0GAEG,OAAO,CAAC,UAAU,6CAA6C;AAAA,MACpE;AACA;AAAA,IACF;AACA,UAAM,MAAM,GAAG,OAAO,wBAAwB,GAAG;AACjD,YAAQ;AAAA,MACN;AAAA;AAAA,IAAoF,GAAG;AAAA;AAAA,IACzF;AACA,gBAAY,GAAG;AACf,UAAM,MAAM,MAAM,OAAO,8DAA8D;AACvF,QAAI,KAAK;AACP,UAAI,aAAa;AACjB,iBAAW,GAAG;AACd,cAAQ,MAAM,6CAAwC;AAAA,IACxD,OAAO;AACL,cAAQ,MAAM,2EAAsE;AAAA,IACtF;AAAA,EACF,CAAC;AACH;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,2BAA2B,EACvC;AAAA,EAAO,MACN,IAAI,YAAY;AACd,UAAM,MAAM,WAAW;AACvB,WAAO,IAAI;AACX,WAAO,IAAI;AACX,WAAO,IAAI;AACX,eAAW,GAAG;AACd,YAAQ,MAAM,aAAa;AAAA,EAC7B,CAAC;AACH;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,iEAAiE,EAC7E;AAAA,EAAO,MACN,IAAI,YAAY;AACd,UAAM,MAAM,WAAW;AACvB,UAAM,IAAI,OAAO;AACjB,UAAM,OAAO,QAAQ,IAAI,sBACrB,sBACA,QAAQ,IAAI,kBAAkB,IAAI,SAChC,YACA,IAAI,QACF,UACA;AACR,SAAK,EAAE,SAAS,EAAE,SAAS,MAAM,MAAM,SAAS,EAAE,SAAS,YAAY,WAAW,EAAE,CAAC;AAAA,EACvF,CAAC;AACH;AAEF,QACG,QAAQ,aAAa,EACrB,YAAY,0CAA0C,EACtD,OAAO,MAAM,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEvE,QACG,QAAQ,KAAK,EACb,YAAY,0BAA0B,EACtC,eAAe,mBAAmB,EAClC,eAAe,mBAAmB,EAClC,eAAe,eAAe,wCAAwC,EACtE,eAAe,oBAAoB,iBAAiB,EACpD,OAAO,qBAAqB,qBAAqB,KAAK,EACtD;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,eAAe;AAAA,QAC5B,cAAc,EAAE;AAAA,QAChB,UAAU,EAAE;AAAA,QACZ,aAAa,EAAE;AAAA,QACf,aAAa,IAAI,UAAU,EAAE,MAAM;AAAA,QACnC,UAAU,EAAE;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,6DAA6D,EACzE,eAAe,mBAAmB,EAClC,OAAO,SAAS,2CAA2C,EAC3D,OAAO,oBAAoB,iDAAiD,EAC5E;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,cAAc;AAAA,QAC3B,cAAc,EAAE;AAAA,QAChB,KAAK,QAAQ,EAAE,GAAG;AAAA,QAClB,SAAS,EAAE;AAAA,MACb,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,QACG,QAAQ,MAAM,EACd,YAAY,uDAAuD,EACnE,eAAe,mBAAmB,EAClC,eAAe,mBAAmB,sEAAwE,EAC1G;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,MAAM,MAAM,EAAE,kBAAkB;AAAA,MACpC,cAAc,EAAE;AAAA,MAChB,QAAQ,WAAW,EAAE,MAAM;AAAA,IAC7B,CAAC;AACD,QAAI,IAAI,WAAW,uBAAuB,CAAC,EAAE,SAAS;AACpD,cAAQ;AAAA,QACN;AAAA,MAEF;AAAA,IACF;AACA,SAAK,GAAG;AAAA,EACV,CAAC;AACH;AAEF,QACG,QAAQ,MAAM,EACd,YAAY,sCAAsC,EAClD,eAAe,mBAAmB,EAClC,eAAe,qBAAqB,EACpC,eAAe,sBAAsB,6BAA6B,EAClE,eAAe,oBAAoB,EACnC,eAAe,4BAA4B,iCAAiC,EAC5E,OAAO,uBAAuB,yBAAyB,EACvD,OAAO,qBAAqB,sCAAsC,iBAAiB,EACnF,OAAO,oBAAoB,mBAAmB,IAAI,EAClD,OAAO,oBAAoB,EAC3B,OAAO,mBAAmB,EAC1B;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,SAAS,MAAM,EAAE,YAAY;AAAA,MACjC,cAAc,EAAE;AAAA,MAChB,UAAU,EAAE;AAAA,MACZ,UAAU,EAAE;AAAA,MACZ,UAAU,EAAE;AAAA,MACZ,UAAU,EAAE;AAAA,MACZ,QAAQ,EAAE;AAAA,MACV,eAAe,EAAE;AAAA,MACjB,aAAa,IAAI,YAAY,EAAE,QAAQ;AAAA,MACvC,WAAW,EAAE;AAAA,MACb,YAAY,OAAO,eAAe,EAAE,UAAU;AAAA,IAChD,CAAC;AACD,QAAI,OAAO,SAAS,WAAW,uBAAuB,CAAC,EAAE,SAAS;AAChE,cAAQ;AAAA,QACN;AAAA,MAEF;AAAA,IACF;AACA,SAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEF,QACG,QAAQ,kBAAkB,EAC1B,YAAY,8EAA8E,EAC1F,OAAO,CAAC,UAAU,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,iBAAiB,KAAK,CAAC,CAAC,CAAC;AAElF,QACG,QAAQ,UAAU,EAClB,YAAY,sFAAiF,EAC7F,eAAe,mBAAmB,EAClC,eAAe,oBAAoB,2CAA2C,EAC9E,eAAe,eAAe,4BAA4B,EAC1D;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,SAAS,MAAM,EAAE,QAAQ;AAAA,MAC7B,cAAc,EAAE;AAAA,MAChB,SAAS,WAAW,EAAE,OAAO;AAAA,MAC7B,aAAa,EAAE;AAAA,IACjB,CAAC;AACD,QAAI,OAAO,SAAS,WAAW,uBAAuB,CAAC,EAAE,SAAS;AAChE,cAAQ;AAAA,QACN;AAAA,MAEF;AAAA,IACF;AACA,SAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEF,QACG,QAAQ,aAAa,EACrB,YAAY,sEAAsE,EAClF,eAAe,mBAAmB,EAClC,eAAe,eAAe,4BAA4B,EAC1D,OAAO,mBAAmB,eAAe,KAAK,EAC9C,OAAO,iBAAiB,8BAA8B,EACtD;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,SAAS,MAAM,EAAE,WAAW;AAAA,MAChC,cAAc,EAAE;AAAA,MAChB,KAAK,EAAE;AAAA,MACP,QAAQ,EAAE;AAAA,MACV,MAAM,EAAE,SAAS,SAAY,SAAY,WAAW,EAAE,IAAI;AAAA,IAC5D,CAAC;AACD,QAAI,OAAO,SAAS,WAAW,uBAAuB,CAAC,EAAE,SAAS;AAChE,cAAQ;AAAA,QACN;AAAA,MAEF;AAAA,IACF;AACA,SAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEF,QACG,QAAQ,WAAW,EACnB,YAAY,sDAAsD,EAClE,eAAe,kBAAkB,EACjC,OAAO,oBAAoB,4CAA4C,EACvE;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF,KAAK,MAAM,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,YAAY,EAAE,SAAS,CAAC,CAAC;AAAA,EAClF;AACF;AAEF,QACG,QAAQ,cAAc,EACtB,YAAY,yBAAyB,EACrC,OAAO,UAAU,yCAAyC,EAC1D;AAAA,EAAO,CAAC,IAAI,MACX,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,SAAK,EAAE,OAAO,MAAM,EAAE,eAAe,EAAE,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;AAAA,EACnE,CAAC;AACH;AAEF,QACG,QAAQ,SAAS,EACjB,YAAY,qEAAqE,EACjF;AAAA,EAAO,MACN,IAAI,YAAY;AACd,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,MAAM,MAAM,8BAA8B,GAAG,SAAS;AAClE,UAAI,IAAI,GAAI,WAAW,MAAM,IAAI,KAAK,GAA4B;AAAA,IACpE,QAAQ;AAAA,IAER;AACA,UAAM,kBAAkB,QAAQ,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAClE,QAAI,SAAS,GAAG;AACd,WAAK,EAAE,SAAS,SAAS,QAAQ,UAAU,MAAM,gBAAgB,CAAC;AAClE;AAAA,IACF;AACA,YAAQ,IAAI,GAAG,GAAG,KAAK,OAAO,EAAE;AAChC,QAAI,iBAAiB;AACnB,cAAQ,IAAI,sBAAsB,MAAM,gCAA2B;AAAA,IACrE;AAAA,EACF,CAAC;AACH;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,gEAAgE,EAC5E,OAAO,WAAW,gDAAgD,EAClE;AAAA,EAAO,CAAC,SACP,IAAI,YAAY;AACd,UAAM,OAAO,CAAC,WAAW,MAAM,GAAG,GAAG,SAAS;AAC9C,QAAI,KAAK,OAAO;AACd,cAAQ,IAAI,OAAO,KAAK,KAAK,GAAG,CAAC,EAAE;AACnC;AAAA,IACF;AACA,YAAQ,MAAM,YAAY,GAAG,SAAS,KAAK,KAAK,GAAG,CAAC,SAAI;AACxD,UAAM,IAAI,UAAU,OAAO,MAAM,EAAE,OAAO,UAAU,CAAC;AACrD,QAAI,EAAE,WAAW,GAAG;AAClB,cAAQ;AAAA,QACN;AAAA,gDAAmD,GAAG,oCACpC,GAAG;AAAA,MACvB;AACA,cAAQ,WAAW,EAAE,UAAU;AAAA,IACjC;AAAA,EACF,CAAC;AACH;AAEF,QACG,QAAQ,WAAW,EACnB,YAAY,0EAA0E,EACtF;AAAA,EAAO,MACN,IAAI,YAAY;AACd,UAAM,MAAM,UAAU;AACtB,WAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC5C,YAAQ,MAAM,4BAA4B,GAAG,GAAG;AAChD,YAAQ;AAAA,MACN;AAAA,cAAmE,GAAG;AAAA,IACxE;AAAA,EACF,CAAC;AACH;AAEF,QAAQ,WAAW,QAAQ,IAAI;","names":[]}
+{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n// The `paybox` CLI — a thin wrapper over PayboxClient. Mirrors the MCP tools as\n// subcommands; `--json` on any command emits machine-readable output.\n\nimport { spawnSync } from \"node:child_process\";\nimport { readFileSync, rmSync } from \"node:fs\";\nimport { createInterface } from \"node:readline/promises\";\n\nimport { Command } from \"commander\";\n\nimport { agentClientId, appBaseFrom, loginDevice, openBrowser } from \"./auth.js\";\nimport { PayboxClient } from \"./client.js\";\nimport { configDir, configFile, loadConfig, saveConfig } from \"./config.js\";\n\nconst DEFAULT_BASE_URL = \"https://api.paybox.sh\";\nconst PKG = \"@paybox-sh/sdk\";\nconst VERSION = \"0.7.0\";\n\nconst program = new Command();\nprogram\n  .name(\"paybox\")\n  .description(\"PayBox agent CLI — vaulted cards, wallets, and secrets for agents\")\n  .version(VERSION)\n  .option(\"--base-url <url>\", \"API origin (default https://api.paybox.sh or stored)\")\n  .option(\"--json\", \"machine-readable JSON output\");\n\nfunction jsonMode(): boolean {\n  return Boolean(program.opts().json);\n}\n\nfunction emit(data: unknown): void {\n  if (jsonMode()) console.log(JSON.stringify(data, null, 2));\n  else console.dir(data, { depth: null, colors: process.stdout.isTTY });\n}\n\nfunction client(): PayboxClient {\n  return PayboxClient.fromConfig({ baseUrl: program.opts().baseUrl });\n}\n\nfunction readIntent(value: string): unknown {\n  const raw = value.startsWith(\"@\") ? readFileSync(value.slice(1), \"utf8\") : value;\n  return JSON.parse(raw);\n}\n\nfunction int(flag: string, value: string): number {\n  const n = Number(value);\n  if (!Number.isInteger(n)) {\n    throw new Error(`--${flag} must be an integer, got ${JSON.stringify(value)}`);\n  }\n  return n;\n}\n\nfunction optInt(flag: string, value: string | undefined): number | undefined {\n  return value === undefined ? undefined : int(flag, value);\n}\n\n/** True when semver `a` is strictly greater than `b` (plain x.y.z). */\nfunction isNewer(a: string, b: string): boolean {\n  const pa = a.split(\".\").map(Number);\n  const pb = b.split(\".\").map(Number);\n  for (let i = 0; i < 3; i++) {\n    const x = pa[i] ?? 0;\n    const y = pb[i] ?? 0;\n    if (x !== y) return x > y;\n  }\n  return false;\n}\n\nasync function prompt(question: string): Promise<string> {\n  if (!process.stdin.isTTY) return \"\"; // non-interactive: skip\n  const rl = createInterface({ input: process.stdin, output: process.stderr });\n  try {\n    return (await rl.question(question)).trim();\n  } finally {\n    rl.close();\n  }\n}\n\nasync function run(fn: () => Promise<void>): Promise<void> {\n  try {\n    await fn();\n  } catch (err) {\n    console.error(err instanceof Error ? err.message : String(err));\n    process.exitCode = 1;\n  }\n}\n\n/** A request parked at `pending_signature` can only complete in-process with a\n *  `pbxk1.` key (there is no signing window on this surface). */\nfunction warnIfUnsignable(c: PayboxClient, status: string): void {\n  if (status === \"pending_signature\" && !c.canSign) {\n    console.error(\n      \"awaiting signatures but no valid pbxk1. signing key is set — \" +\n        \"run `paybox login --signing-key <pbxk1...>` or set PAYBOX_SIGNING_KEY, then poll `paybox request <id>`.\",\n    );\n  }\n}\n\nprogram\n  .command(\"login\")\n  .description(\"Authenticate via OAuth (browser + passkey), or store a pbx_live_ key\")\n  .option(\"--key <key>\", \"store a pbx_live_ personal API key instead of OAuth\")\n  .option(\"--signing-key <token>\", \"store a pbxk1. wallet signing key (skips the prompt)\")\n  .option(\"--app-url <url>\", \"PayBox app origin for key provisioning (default: derived from --base-url)\")\n  .option(\"--no-provision\", \"skip the wallet signing-key provisioning step\")\n  .action((opts) =>\n    run(async () => {\n      const cfg = loadConfig();\n      const baseUrl = (\n        program.opts().baseUrl ??\n        process.env.PAYBOX_API_URL ??\n        cfg.baseUrl ??\n        DEFAULT_BASE_URL\n      ).replace(/\\/+$/, \"\");\n      cfg.baseUrl = baseUrl;\n      if (opts.appUrl) cfg.appUrl = opts.appUrl;\n\n      // Step 1 — authenticate.\n      if (opts.key) {\n        cfg.apiKey = opts.key;\n        delete cfg.oauth;\n      } else {\n        cfg.oauth = await loginDevice(baseUrl);\n        delete cfg.apiKey;\n      }\n      if (opts.signingKey) cfg.signingKey = opts.signingKey;\n      saveConfig(cfg);\n      console.error(`Saved credentials to ${configFile()}`);\n\n      // Step 2 — provision a wallet signing key. Runs only after OAuth (the app\n      // session is warm) and only when one wasn't supplied or disabled. The app\n      // mints a key scoped to this agent and shows a `pbxk1.` token to paste back.\n      if (!cfg.oauth || opts.signingKey || opts.provision === false) return;\n      const cid = agentClientId(cfg.oauth.accessToken);\n      const appBase = appBaseFrom(baseUrl, opts.appUrl ?? process.env.PAYBOX_APP_URL ?? cfg.appUrl);\n      if (!cid || !appBase) {\n        console.error(\n          \"To enable wallet sign/swap, provision a signing key and run\\n\" +\n            \"  paybox login --signing-key <pbxk1...>\" +\n            (cid && !appBase ? \" (or pass --app-url <paybox app origin>)\" : \"\"),\n        );\n        return;\n      }\n      const url = `${appBase}/agent-key?client_id=${cid}`;\n      console.error(\n        `\\nNext, provision a wallet signing key for this agent (needed for sign/swap):\\n  ${url}\\n`,\n      );\n      openBrowser(url);\n      const key = await prompt(\"Paste the pbxk1. signing key when ready (or Enter to skip): \");\n      if (key) {\n        cfg.signingKey = key;\n        saveConfig(cfg);\n        console.error(\"Signing key saved — sign/swap enabled.\");\n      } else {\n        console.error(\"Skipped — add it later with `paybox login --signing-key <pbxk1...>`.\");\n      }\n    }),\n  );\n\nprogram\n  .command(\"logout\")\n  .description(\"Forget stored credentials\")\n  .action(() =>\n    run(async () => {\n      const cfg = loadConfig();\n      delete cfg.apiKey;\n      delete cfg.oauth;\n      delete cfg.signingKey;\n      saveConfig(cfg);\n      console.error(\"Logged out.\");\n    }),\n  );\n\nprogram\n  .command(\"whoami\")\n  .description(\"Show the configured endpoint, auth mode, and signing capability\")\n  .action(() =>\n    run(async () => {\n      const cfg = loadConfig();\n      const c = client();\n      const mode = process.env.PAYBOX_ACCESS_TOKEN\n        ? \"oauth (env token)\"\n        : process.env.PAYBOX_API_KEY || cfg.apiKey\n          ? \"api key\"\n          : cfg.oauth\n            ? \"oauth\"\n            : \"none\";\n      emit({ baseUrl: c.baseUrl, auth: mode, canSign: c.canSign, configFile: configFile() });\n    }),\n  );\n\nprogram\n  .command(\"credentials\")\n  .description(\"List the credentials this client may use\")\n  .action(() => run(async () => emit(await client().listCredentials())));\n\nprogram\n  .command(\"pay\")\n  .description(\"Charge a card credential\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--merchant <name>\")\n  .requiredOption(\"--url <url>\", \"real merchant URL the card is bound to\")\n  .requiredOption(\"--amount <cents>\", \"amount in cents\")\n  .option(\"--currency <code>\", \"ISO 4217 currency\", \"USD\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().requestPayment({\n          credentialId: o.credential,\n          merchant: o.merchant,\n          merchantUrl: o.url,\n          amountCents: int(\"amount\", o.amount),\n          currency: o.currency,\n        }),\n      ),\n    ),\n  );\n\nprogram\n  .command(\"secret\")\n  .description(\"Reveal a secret credential (one-time token, or --raw value)\")\n  .requiredOption(\"--credential <id>\")\n  .option(\"--raw\", \"return the raw secret value (grant-gated)\")\n  .option(\"--purpose <text>\", \"why the secret is requested (shown on approval)\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().requestSecret({\n          credentialId: o.credential,\n          raw: Boolean(o.raw),\n          purpose: o.purpose,\n        }),\n      ),\n    ),\n  );\n\nprogram\n  .command(\"sign\")\n  .description(\"Sign with a wallet credential (intent JSON, or @file)\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--intent <json>\", 'a SignIntent, e.g. \\'{\"op\":\"message\",\"message\":\"hi\"}\\' or @intent.json')\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const res = await c.requestWalletSign({\n        credentialId: o.credential,\n        intent: readIntent(o.intent) as never,\n      });\n      warnIfUnsignable(c, res.status);\n      emit(res);\n    }),\n  );\n\nprogram\n  .command(\"swap\")\n  .description(\"Swap tokens from a wallet credential\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--src-chain <caip2>\")\n  .requiredOption(\"--src-token <addr>\", '\"native\" or a token address')\n  .requiredOption(\"--dst-token <addr>\")\n  .requiredOption(\"--amount <smallest-unit>\", \"source amount in smallest units\")\n  .option(\"--dst-chain <caip2>\", \"defaults to --src-chain\")\n  .option(\"--direction <dir>\", \"exact-amount-in | exact-amount-out\", \"exact-amount-in\")\n  .option(\"--slippage <bps>\", \"slippage in bps\", \"150\")\n  .option(\"--recipient <addr>\")\n  .option(\"--value-cents <n>\")\n  .option(\"--wait\", \"if approval is required, wait for it and then sign in-process\")\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const result = await c.requestSwap(\n        {\n          credentialId: o.credential,\n          srcChain: o.srcChain,\n          dstChain: o.dstChain,\n          srcToken: o.srcToken,\n          dstToken: o.dstToken,\n          amount: o.amount,\n          swapDirection: o.direction,\n          slippageBps: int(\"slippage\", o.slippage),\n          recipient: o.recipient,\n          valueCents: optInt(\"value-cents\", o.valueCents),\n        },\n        { waitForApproval: Boolean(o.wait) },\n      );\n      warnIfUnsignable(c, result.response.status);\n      emit(result);\n    }),\n  );\n\nprogram\n  .command(\"discover [query]\")\n  .description(\"Discover curated paid x402 services from Bazaar (optional search)\")\n  .option(\"--raw\", \"return uncurated compact Bazaar service summaries (debug)\")\n  .action((query, o) =>\n    run(async () => emit(await client().discoverServices(query, { raw: Boolean(o.raw) }))),\n  );\n\nprogram\n  .command(\"pay-x402\")\n  .description(\"Pay a paid x402 endpoint (header mode — returns the X-PAYMENT header to replay)\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--accepts <json>\", \"the 402's accepts[] array (JSON or @file)\")\n  .requiredOption(\"--url <url>\", \"the paywalled resource URL\")\n  .option(\"--wait\", \"if approval is required, wait for it and then sign in-process\")\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const result = await c.payX402(\n        {\n          credentialId: o.credential,\n          accepts: readIntent(o.accepts) as unknown[],\n          resourceUrl: o.url,\n        },\n        { waitForApproval: Boolean(o.wait) },\n      );\n      warnIfUnsignable(c, result.response.status);\n      emit(result);\n    }),\n  );\n\nprogram\n  .command(\"use-service\")\n  .description(\"Fetch a paid x402 resource and have paybox pay for it (gateway mode)\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--url <url>\", \"the paid x402 resource URL\")\n  .option(\"--method <verb>\", \"HTTP method\", \"GET\")\n  .option(\"--body <json>\", \"request body (JSON or @file)\")\n  .option(\"--wait\", \"if approval is required, wait for it and then sign in-process\")\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const result = await c.useService(\n        {\n          credentialId: o.credential,\n          url: o.url,\n          method: o.method,\n          body: o.body === undefined ? undefined : readIntent(o.body),\n        },\n        { waitForApproval: Boolean(o.wait) },\n      );\n      warnIfUnsignable(c, result.response.status);\n      emit(result);\n    }),\n  );\n\nprogram\n  .command(\"portfolio\")\n  .description(\"List a wallet address's token balances across chains\")\n  .requiredOption(\"--address <addr>\")\n  .option(\"--networks <ids>\", 'comma-separated network IDs, e.g. \"1,8453\"')\n  .action((o) =>\n    run(async () =>\n      emit(await client().getPortfolio({ address: o.address, networkIds: o.networks })),\n    ),\n  );\n\nprogram\n  .command(\"verify-solana-balance\")\n  .description(\"Verify a Solana transaction's wallet/token effect and current balance\")\n  .requiredOption(\"--address <addr>\", \"canonical Solana wallet address\")\n  .requiredOption(\"--mint <addr>\", \"canonical SPL or Token-2022 mint\")\n  .requiredOption(\"--transaction <signature>\", \"confirmed Solana transaction signature\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().verifySolanaBalance({\n          address: o.address,\n          tokenMint: o.mint,\n          transactionSignature: o.transaction,\n        }),\n      ),\n    ),\n  );\n\nprogram\n  .command(\"claim <request-id>\")\n  .description(\"Claim the usable card credentials of an approved payment (one-time)\")\n  .action((id) => run(async () => emit(await client().claimPaymentCredentials(id))));\n\nprogram\n  .command(\"account-change\")\n  .description(\"Get a manage_url for the USER to update this client's access in the app\")\n  .option(\"--note <text>\", \"why the change is needed (shown to the user)\")\n  .action((o) => run(async () => emit(await client().requestAccountChange(o.note))));\n\nprogram\n  .command(\"buy-link\")\n  .description(\"Signed MoonPay checkout URL funding a granted wallet (charges nothing)\")\n  .requiredOption(\"--credential <id>\", \"a granted wallet credential\")\n  .option(\n    \"--destination <chain>\",\n    \"exact network: eip155:8453 (default EVM), eip155:1, or solana:mainnet\",\n  )\n  .option(\"--currency <code>\", \"enabled MoonPay code matching the exact destination\")\n  .option(\"--amount-usd <n>\", \"prefill amount in USD\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().getBuyLink({\n          credentialId: o.credential,\n          destinationChain: o.destination,\n          currencyCode: o.currency,\n          amountUsd: o.amountUsd === undefined ? undefined : Number(o.amountUsd),\n        }),\n      ),\n    ),\n  );\n\n// ---- World discovery. Money tools require the geofenced MCP signing window. ----\nconst world = program\n  .command(\"world\")\n  .description(\"World prediction markets (requires the world plugin)\");\n\nworld\n  .command(\"markets\")\n  .description(\"Browse markets (or events with --events)\")\n  .option(\"--events\", \"list events (each groups its markets)\")\n  .option(\"--limit <n>\")\n  .option(\"--cursor <n>\", \"rows to skip; the response carries the next cursor\")\n  .option(\"--event-ticker <ticker>\")\n  .option(\"--series-ticker <ticker>\")\n  .option(\"--status <status>\", \"active | initialized | determined | finalized\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().worldMarkets({\n          events: Boolean(o.events),\n          limit: optInt(\"limit\", o.limit),\n          cursor: optInt(\"cursor\", o.cursor),\n          eventTicker: o.eventTicker,\n          seriesTicker: o.seriesTicker,\n          status: o.status,\n        }),\n      ),\n    ),\n  );\n\nworld\n  .command(\"market <event-ticker>\")\n  .description(\"One event with its nested markets (disable with --no-nested)\")\n  .option(\"--no-nested\", \"exclude the event's markets\")\n  .action((ticker, o) =>\n    run(async () => emit(await client().worldMarket(ticker, Boolean(o.nested)))),\n  );\n\nworld\n  .command(\"orderbook <id>\")\n  .description(\"A market's orderbook (id is a ticker, or a mint with --by-mint)\")\n  .option(\"--by-mint\", \"look up by outcome mint instead of ticker\")\n  .action((id, o) =>\n    run(async () => emit(await client().worldOrderbook(id, Boolean(o.byMint)))),\n  );\n\nworld\n  .command(\"prices <ticker>\")\n  .description(\"A market's price history\")\n  .requiredOption(\"--start <unix-ts>\")\n  .requiredOption(\"--end <unix-ts>\")\n  .option(\"--resolution <n>\")\n  .action((ticker, o) =>\n    run(async () =>\n      emit(\n        await client().worldPrices({\n          ticker,\n          startTs: int(\"start\", o.start),\n          endTs: int(\"end\", o.end),\n          resolution: optInt(\"resolution\", o.resolution),\n        }),\n      ),\n    ),\n  );\n\nworld\n  .command(\"filter-mints <addresses...>\")\n  .description(\"Filter addresses down to World outcome mints\")\n  .action((addresses) =>\n    run(async () => emit(await client().worldFilterOutcomeMints(addresses))),\n  );\n\nworld\n  .command(\"positions <address>\")\n  .description(\"Solana token positions for an address\")\n  .action((address) => run(async () => emit(await client().worldPositions(address))));\n\n// ---- Hyperliquid plugin (read-only spot discovery). Requires the\n// `hyperliquid` plugin enabled in the paybox app. ----\nconst hyperliquid = program\n  .command(\"hyperliquid\")\n  .description(\"Hyperliquid spot discovery (requires the hyperliquid plugin)\");\n\nhyperliquid\n  .command(\"markets\")\n  .description(\"Spot markets\")\n  .action(() => run(async () => emit(await client().hyperliquidMarkets())));\n\nhyperliquid\n  .command(\"prices\")\n  .description(\"Spot prices\")\n  .action(() => run(async () => emit(await client().hyperliquidPrices())));\n\nhyperliquid\n  .command(\"token <name>\")\n  .description(\"Resolve one token by name\")\n  .action((name) => run(async () => emit(await client().hyperliquidToken(name))));\n\nprogram\n  .command(\"request <id>\")\n  .description(\"Poll a request's status\")\n  .option(\"--wait\", \"block until it leaves the pending state\")\n  .action((id, o) =>\n    run(async () => {\n      const c = client();\n      emit(o.wait ? await c.waitForRequest(id) : await c.getRequest(id));\n    }),\n  );\n\nprogram\n  .command(\"version\")\n  .description(\"Show the installed CLI version (and whether an update is available)\")\n  .action(() =>\n    run(async () => {\n      let latest: string | undefined;\n      try {\n        const res = await fetch(`https://registry.npmjs.org/${PKG}/latest`);\n        if (res.ok) latest = ((await res.json()) as { version?: string }).version;\n      } catch {\n        /* offline — just report the installed version */\n      }\n      const updateAvailable = Boolean(latest && isNewer(latest, VERSION));\n      if (jsonMode()) {\n        emit({ version: VERSION, latest: latest ?? null, updateAvailable });\n        return;\n      }\n      console.log(`${PKG} v${VERSION}`);\n      if (updateAvailable) {\n        console.log(`Update available: v${latest} — run \\`paybox update\\`.`);\n      }\n    }),\n  );\n\nprogram\n  .command(\"update\")\n  .description(\"Update the globally-installed paybox CLI to the latest version\")\n  .option(\"--print\", \"print the update command instead of running it\")\n  .action((opts) =>\n    run(async () => {\n      const args = [\"install\", \"-g\", `${PKG}@latest`];\n      if (opts.print) {\n        console.log(`npm ${args.join(\" \")}`);\n        return;\n      }\n      console.error(`Updating ${PKG} (npm ${args.join(\" \")})…`);\n      const r = spawnSync(\"npm\", args, { stdio: \"inherit\" });\n      if (r.status !== 0) {\n        console.error(\n          `\\nIf this isn't a global install: run \\`pnpm up ${PKG}\\` in your project, ` +\n            `or use \\`npx ${PKG}@latest …\\` to always run the latest.`,\n        );\n        process.exitCode = r.status ?? 1;\n      }\n    }),\n  );\n\nprogram\n  .command(\"uninstall\")\n  .description(\"Remove stored PayBox credentials/config (and show how to remove the CLI)\")\n  .action(() =>\n    run(async () => {\n      const dir = configDir();\n      rmSync(dir, { recursive: true, force: true });\n      console.error(`Removed stored config at ${dir}.`);\n      console.error(\n        `The CLI binary is managed by npm — remove it with:\\n  npm rm -g ${PKG}`,\n      );\n    }),\n  );\n\nprogram.parseAsync(process.argv);\n"],"mappings":";;;;;;;;;;;;;;AAIA,SAAS,iBAAiB;AAC1B,SAAS,cAAc,cAAc;AACrC,SAAS,uBAAuB;AAEhC,SAAS,eAAe;AAMxB,IAAM,mBAAmB;AACzB,IAAM,MAAM;AACZ,IAAM,UAAU;AAEhB,IAAM,UAAU,IAAI,QAAQ;AAC5B,QACG,KAAK,QAAQ,EACb,YAAY,wEAAmE,EAC/E,QAAQ,OAAO,EACf,OAAO,oBAAoB,sDAAsD,EACjF,OAAO,UAAU,8BAA8B;AAElD,SAAS,WAAoB;AAC3B,SAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI;AACpC;AAEA,SAAS,KAAK,MAAqB;AACjC,MAAI,SAAS,EAAG,SAAQ,IAAI,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA,MACpD,SAAQ,IAAI,MAAM,EAAE,OAAO,MAAM,QAAQ,QAAQ,OAAO,MAAM,CAAC;AACtE;AAEA,SAAS,SAAuB;AAC9B,SAAO,aAAa,WAAW,EAAE,SAAS,QAAQ,KAAK,EAAE,QAAQ,CAAC;AACpE;AAEA,SAAS,WAAW,OAAwB;AAC1C,QAAM,MAAM,MAAM,WAAW,GAAG,IAAI,aAAa,MAAM,MAAM,CAAC,GAAG,MAAM,IAAI;AAC3E,SAAO,KAAK,MAAM,GAAG;AACvB;AAEA,SAAS,IAAI,MAAc,OAAuB;AAChD,QAAM,IAAI,OAAO,KAAK;AACtB,MAAI,CAAC,OAAO,UAAU,CAAC,GAAG;AACxB,UAAM,IAAI,MAAM,KAAK,IAAI,4BAA4B,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC9E;AACA,SAAO;AACT;AAEA,SAAS,OAAO,MAAc,OAA+C;AAC3E,SAAO,UAAU,SAAY,SAAY,IAAI,MAAM,KAAK;AAC1D;AAGA,SAAS,QAAQ,GAAW,GAAoB;AAC9C,QAAM,KAAK,EAAE,MAAM,GAAG,EAAE,IAAI,MAAM;AAClC,QAAM,KAAK,EAAE,MAAM,GAAG,EAAE,IAAI,MAAM;AAClC,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK;AAC1B,UAAM,IAAI,GAAG,CAAC,KAAK;AACnB,UAAM,IAAI,GAAG,CAAC,KAAK;AACnB,QAAI,MAAM,EAAG,QAAO,IAAI;AAAA,EAC1B;AACA,SAAO;AACT;AAEA,eAAe,OAAO,UAAmC;AACvD,MAAI,CAAC,QAAQ,MAAM,MAAO,QAAO;AACjC,QAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAC3E,MAAI;AACF,YAAQ,MAAM,GAAG,SAAS,QAAQ,GAAG,KAAK;AAAA,EAC5C,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;AAEA,eAAe,IAAI,IAAwC;AACzD,MAAI;AACF,UAAM,GAAG;AAAA,EACX,SAAS,KAAK;AACZ,YAAQ,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAC9D,YAAQ,WAAW;AAAA,EACrB;AACF;AAIA,SAAS,iBAAiB,GAAiB,QAAsB;AAC/D,MAAI,WAAW,uBAAuB,CAAC,EAAE,SAAS;AAChD,YAAQ;AAAA,MACN;AAAA,IAEF;AAAA,EACF;AACF;AAEA,QACG,QAAQ,OAAO,EACf,YAAY,sEAAsE,EAClF,OAAO,eAAe,qDAAqD,EAC3E,OAAO,yBAAyB,sDAAsD,EACtF,OAAO,mBAAmB,2EAA2E,EACrG,OAAO,kBAAkB,+CAA+C,EACxE;AAAA,EAAO,CAAC,SACP,IAAI,YAAY;AACd,UAAM,MAAM,WAAW;AACvB,UAAM,WACJ,QAAQ,KAAK,EAAE,WACf,QAAQ,IAAI,kBACZ,IAAI,WACJ,kBACA,QAAQ,QAAQ,EAAE;AACpB,QAAI,UAAU;AACd,QAAI,KAAK,OAAQ,KAAI,SAAS,KAAK;AAGnC,QAAI,KAAK,KAAK;AACZ,UAAI,SAAS,KAAK;AAClB,aAAO,IAAI;AAAA,IACb,OAAO;AACL,UAAI,QAAQ,MAAM,YAAY,OAAO;AACrC,aAAO,IAAI;AAAA,IACb;AACA,QAAI,KAAK,WAAY,KAAI,aAAa,KAAK;AAC3C,eAAW,GAAG;AACd,YAAQ,MAAM,wBAAwB,WAAW,CAAC,EAAE;AAKpD,QAAI,CAAC,IAAI,SAAS,KAAK,cAAc,KAAK,cAAc,MAAO;AAC/D,UAAM,MAAM,cAAc,IAAI,MAAM,WAAW;AAC/C,UAAM,UAAU,YAAY,SAAS,KAAK,UAAU,QAAQ,IAAI,kBAAkB,IAAI,MAAM;AAC5F,QAAI,CAAC,OAAO,CAAC,SAAS;AACpB,cAAQ;AAAA,QACN,0GAEG,OAAO,CAAC,UAAU,6CAA6C;AAAA,MACpE;AACA;AAAA,IACF;AACA,UAAM,MAAM,GAAG,OAAO,wBAAwB,GAAG;AACjD,YAAQ;AAAA,MACN;AAAA;AAAA,IAAoF,GAAG;AAAA;AAAA,IACzF;AACA,gBAAY,GAAG;AACf,UAAM,MAAM,MAAM,OAAO,8DAA8D;AACvF,QAAI,KAAK;AACP,UAAI,aAAa;AACjB,iBAAW,GAAG;AACd,cAAQ,MAAM,6CAAwC;AAAA,IACxD,OAAO;AACL,cAAQ,MAAM,2EAAsE;AAAA,IACtF;AAAA,EACF,CAAC;AACH;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,2BAA2B,EACvC;AAAA,EAAO,MACN,IAAI,YAAY;AACd,UAAM,MAAM,WAAW;AACvB,WAAO,IAAI;AACX,WAAO,IAAI;AACX,WAAO,IAAI;AACX,eAAW,GAAG;AACd,YAAQ,MAAM,aAAa;AAAA,EAC7B,CAAC;AACH;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,iEAAiE,EAC7E;AAAA,EAAO,MACN,IAAI,YAAY;AACd,UAAM,MAAM,WAAW;AACvB,UAAM,IAAI,OAAO;AACjB,UAAM,OAAO,QAAQ,IAAI,sBACrB,sBACA,QAAQ,IAAI,kBAAkB,IAAI,SAChC,YACA,IAAI,QACF,UACA;AACR,SAAK,EAAE,SAAS,EAAE,SAAS,MAAM,MAAM,SAAS,EAAE,SAAS,YAAY,WAAW,EAAE,CAAC;AAAA,EACvF,CAAC;AACH;AAEF,QACG,QAAQ,aAAa,EACrB,YAAY,0CAA0C,EACtD,OAAO,MAAM,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEvE,QACG,QAAQ,KAAK,EACb,YAAY,0BAA0B,EACtC,eAAe,mBAAmB,EAClC,eAAe,mBAAmB,EAClC,eAAe,eAAe,wCAAwC,EACtE,eAAe,oBAAoB,iBAAiB,EACpD,OAAO,qBAAqB,qBAAqB,KAAK,EACtD;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,eAAe;AAAA,QAC5B,cAAc,EAAE;AAAA,QAChB,UAAU,EAAE;AAAA,QACZ,aAAa,EAAE;AAAA,QACf,aAAa,IAAI,UAAU,EAAE,MAAM;AAAA,QACnC,UAAU,EAAE;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,6DAA6D,EACzE,eAAe,mBAAmB,EAClC,OAAO,SAAS,2CAA2C,EAC3D,OAAO,oBAAoB,iDAAiD,EAC5E;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,cAAc;AAAA,QAC3B,cAAc,EAAE;AAAA,QAChB,KAAK,QAAQ,EAAE,GAAG;AAAA,QAClB,SAAS,EAAE;AAAA,MACb,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,QACG,QAAQ,MAAM,EACd,YAAY,uDAAuD,EACnE,eAAe,mBAAmB,EAClC,eAAe,mBAAmB,sEAAwE,EAC1G;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,MAAM,MAAM,EAAE,kBAAkB;AAAA,MACpC,cAAc,EAAE;AAAA,MAChB,QAAQ,WAAW,EAAE,MAAM;AAAA,IAC7B,CAAC;AACD,qBAAiB,GAAG,IAAI,MAAM;AAC9B,SAAK,GAAG;AAAA,EACV,CAAC;AACH;AAEF,QACG,QAAQ,MAAM,EACd,YAAY,sCAAsC,EAClD,eAAe,mBAAmB,EAClC,eAAe,qBAAqB,EACpC,eAAe,sBAAsB,6BAA6B,EAClE,eAAe,oBAAoB,EACnC,eAAe,4BAA4B,iCAAiC,EAC5E,OAAO,uBAAuB,yBAAyB,EACvD,OAAO,qBAAqB,sCAAsC,iBAAiB,EACnF,OAAO,oBAAoB,mBAAmB,KAAK,EACnD,OAAO,oBAAoB,EAC3B,OAAO,mBAAmB,EAC1B,OAAO,UAAU,+DAA+D,EAChF;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,SAAS,MAAM,EAAE;AAAA,MACrB;AAAA,QACE,cAAc,EAAE;AAAA,QAChB,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,QACZ,QAAQ,EAAE;AAAA,QACV,eAAe,EAAE;AAAA,QACjB,aAAa,IAAI,YAAY,EAAE,QAAQ;AAAA,QACvC,WAAW,EAAE;AAAA,QACb,YAAY,OAAO,eAAe,EAAE,UAAU;AAAA,MAChD;AAAA,MACA,EAAE,iBAAiB,QAAQ,EAAE,IAAI,EAAE;AAAA,IACrC;AACA,qBAAiB,GAAG,OAAO,SAAS,MAAM;AAC1C,SAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEF,QACG,QAAQ,kBAAkB,EAC1B,YAAY,mEAAmE,EAC/E,OAAO,SAAS,2DAA2D,EAC3E;AAAA,EAAO,CAAC,OAAO,MACd,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,iBAAiB,OAAO,EAAE,KAAK,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AACvF;AAEF,QACG,QAAQ,UAAU,EAClB,YAAY,sFAAiF,EAC7F,eAAe,mBAAmB,EAClC,eAAe,oBAAoB,2CAA2C,EAC9E,eAAe,eAAe,4BAA4B,EAC1D,OAAO,UAAU,+DAA+D,EAChF;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,SAAS,MAAM,EAAE;AAAA,MACrB;AAAA,QACE,cAAc,EAAE;AAAA,QAChB,SAAS,WAAW,EAAE,OAAO;AAAA,QAC7B,aAAa,EAAE;AAAA,MACjB;AAAA,MACA,EAAE,iBAAiB,QAAQ,EAAE,IAAI,EAAE;AAAA,IACrC;AACA,qBAAiB,GAAG,OAAO,SAAS,MAAM;AAC1C,SAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEF,QACG,QAAQ,aAAa,EACrB,YAAY,sEAAsE,EAClF,eAAe,mBAAmB,EAClC,eAAe,eAAe,4BAA4B,EAC1D,OAAO,mBAAmB,eAAe,KAAK,EAC9C,OAAO,iBAAiB,8BAA8B,EACtD,OAAO,UAAU,+DAA+D,EAChF;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,SAAS,MAAM,EAAE;AAAA,MACrB;AAAA,QACE,cAAc,EAAE;AAAA,QAChB,KAAK,EAAE;AAAA,QACP,QAAQ,EAAE;AAAA,QACV,MAAM,EAAE,SAAS,SAAY,SAAY,WAAW,EAAE,IAAI;AAAA,MAC5D;AAAA,MACA,EAAE,iBAAiB,QAAQ,EAAE,IAAI,EAAE;AAAA,IACrC;AACA,qBAAiB,GAAG,OAAO,SAAS,MAAM;AAC1C,SAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEF,QACG,QAAQ,WAAW,EACnB,YAAY,sDAAsD,EAClE,eAAe,kBAAkB,EACjC,OAAO,oBAAoB,4CAA4C,EACvE;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF,KAAK,MAAM,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,YAAY,EAAE,SAAS,CAAC,CAAC;AAAA,EAClF;AACF;AAEF,QACG,QAAQ,uBAAuB,EAC/B,YAAY,uEAAuE,EACnF,eAAe,oBAAoB,iCAAiC,EACpE,eAAe,iBAAiB,kCAAkC,EAClE,eAAe,6BAA6B,wCAAwC,EACpF;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,oBAAoB;AAAA,QACjC,SAAS,EAAE;AAAA,QACX,WAAW,EAAE;AAAA,QACb,sBAAsB,EAAE;AAAA,MAC1B,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,QACG,QAAQ,oBAAoB,EAC5B,YAAY,qEAAqE,EACjF,OAAO,CAAC,OAAO,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC;AAEnF,QACG,QAAQ,gBAAgB,EACxB,YAAY,yEAAyE,EACrF,OAAO,iBAAiB,8CAA8C,EACtE,OAAO,CAAC,MAAM,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC,CAAC;AAEnF,QACG,QAAQ,UAAU,EAClB,YAAY,wEAAwE,EACpF,eAAe,qBAAqB,6BAA6B,EACjE;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,qBAAqB,qDAAqD,EACjF,OAAO,oBAAoB,uBAAuB,EAClD;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,WAAW;AAAA,QACxB,cAAc,EAAE;AAAA,QAChB,kBAAkB,EAAE;AAAA,QACpB,cAAc,EAAE;AAAA,QAChB,WAAW,EAAE,cAAc,SAAY,SAAY,OAAO,EAAE,SAAS;AAAA,MACvE,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAGF,IAAM,QAAQ,QACX,QAAQ,OAAO,EACf,YAAY,sDAAsD;AAErE,MACG,QAAQ,SAAS,EACjB,YAAY,0CAA0C,EACtD,OAAO,YAAY,uCAAuC,EAC1D,OAAO,aAAa,EACpB,OAAO,gBAAgB,oDAAoD,EAC3E,OAAO,yBAAyB,EAChC,OAAO,0BAA0B,EACjC,OAAO,qBAAqB,+CAA+C,EAC3E;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,aAAa;AAAA,QAC1B,QAAQ,QAAQ,EAAE,MAAM;AAAA,QACxB,OAAO,OAAO,SAAS,EAAE,KAAK;AAAA,QAC9B,QAAQ,OAAO,UAAU,EAAE,MAAM;AAAA,QACjC,aAAa,EAAE;AAAA,QACf,cAAc,EAAE;AAAA,QAChB,QAAQ,EAAE;AAAA,MACZ,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,MACG,QAAQ,uBAAuB,EAC/B,YAAY,8DAA8D,EAC1E,OAAO,eAAe,6BAA6B,EACnD;AAAA,EAAO,CAAC,QAAQ,MACf,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,YAAY,QAAQ,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC7E;AAEF,MACG,QAAQ,gBAAgB,EACxB,YAAY,iEAAiE,EAC7E,OAAO,aAAa,2CAA2C,EAC/D;AAAA,EAAO,CAAC,IAAI,MACX,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,eAAe,IAAI,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5E;AAEF,MACG,QAAQ,iBAAiB,EACzB,YAAY,0BAA0B,EACtC,eAAe,mBAAmB,EAClC,eAAe,iBAAiB,EAChC,OAAO,kBAAkB,EACzB;AAAA,EAAO,CAAC,QAAQ,MACf;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,YAAY;AAAA,QACzB;AAAA,QACA,SAAS,IAAI,SAAS,EAAE,KAAK;AAAA,QAC7B,OAAO,IAAI,OAAO,EAAE,GAAG;AAAA,QACvB,YAAY,OAAO,cAAc,EAAE,UAAU;AAAA,MAC/C,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,MACG,QAAQ,6BAA6B,EACrC,YAAY,8CAA8C,EAC1D;AAAA,EAAO,CAAC,cACP,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,wBAAwB,SAAS,CAAC,CAAC;AACzE;AAEF,MACG,QAAQ,qBAAqB,EAC7B,YAAY,uCAAuC,EACnD,OAAO,CAAC,YAAY,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,eAAe,OAAO,CAAC,CAAC,CAAC;AAIpF,IAAM,cAAc,QACjB,QAAQ,aAAa,EACrB,YAAY,8DAA8D;AAE7E,YACG,QAAQ,SAAS,EACjB,YAAY,cAAc,EAC1B,OAAO,MAAM,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAE1E,YACG,QAAQ,QAAQ,EAChB,YAAY,aAAa,EACzB,OAAO,MAAM,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAEzE,YACG,QAAQ,cAAc,EACtB,YAAY,2BAA2B,EACvC,OAAO,CAAC,SAAS,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,iBAAiB,IAAI,CAAC,CAAC,CAAC;AAEhF,QACG,QAAQ,cAAc,EACtB,YAAY,yBAAyB,EACrC,OAAO,UAAU,yCAAyC,EAC1D;AAAA,EAAO,CAAC,IAAI,MACX,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,SAAK,EAAE,OAAO,MAAM,EAAE,eAAe,EAAE,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;AAAA,EACnE,CAAC;AACH;AAEF,QACG,QAAQ,SAAS,EACjB,YAAY,qEAAqE,EACjF;AAAA,EAAO,MACN,IAAI,YAAY;AACd,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,MAAM,MAAM,8BAA8B,GAAG,SAAS;AAClE,UAAI,IAAI,GAAI,WAAW,MAAM,IAAI,KAAK,GAA4B;AAAA,IACpE,QAAQ;AAAA,IAER;AACA,UAAM,kBAAkB,QAAQ,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAClE,QAAI,SAAS,GAAG;AACd,WAAK,EAAE,SAAS,SAAS,QAAQ,UAAU,MAAM,gBAAgB,CAAC;AAClE;AAAA,IACF;AACA,YAAQ,IAAI,GAAG,GAAG,KAAK,OAAO,EAAE;AAChC,QAAI,iBAAiB;AACnB,cAAQ,IAAI,sBAAsB,MAAM,gCAA2B;AAAA,IACrE;AAAA,EACF,CAAC;AACH;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,gEAAgE,EAC5E,OAAO,WAAW,gDAAgD,EAClE;AAAA,EAAO,CAAC,SACP,IAAI,YAAY;AACd,UAAM,OAAO,CAAC,WAAW,MAAM,GAAG,GAAG,SAAS;AAC9C,QAAI,KAAK,OAAO;AACd,cAAQ,IAAI,OAAO,KAAK,KAAK,GAAG,CAAC,EAAE;AACnC;AAAA,IACF;AACA,YAAQ,MAAM,YAAY,GAAG,SAAS,KAAK,KAAK,GAAG,CAAC,SAAI;AACxD,UAAM,IAAI,UAAU,OAAO,MAAM,EAAE,OAAO,UAAU,CAAC;AACrD,QAAI,EAAE,WAAW,GAAG;AAClB,cAAQ;AAAA,QACN;AAAA,gDAAmD,GAAG,oCACpC,GAAG;AAAA,MACvB;AACA,cAAQ,WAAW,EAAE,UAAU;AAAA,IACjC;AAAA,EACF,CAAC;AACH;AAEF,QACG,QAAQ,WAAW,EACnB,YAAY,0EAA0E,EACtF;AAAA,EAAO,MACN,IAAI,YAAY;AACd,UAAM,MAAM,UAAU;AACtB,WAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC5C,YAAQ,MAAM,4BAA4B,GAAG,GAAG;AAChD,YAAQ;AAAA,MACN;AAAA,cAAmE,GAAG;AAAA,IACxE;AAAA,EACF,CAAC;AACH;AAEF,QAAQ,WAAW,QAAQ,IAAI;","names":[]}

package/dist/index.d.ts

@@ -38,7 +38,45 @@ interface PortfolioArgs {
     /** Comma-separated network IDs, e.g. "1,8453". Omit to auto-detect. */
     networkIds?: string;
 }
-type RequestStatus = "pending_approval" | "pending_signature" | "success" | "denied" | "error";
+interface VerifySolanaBalanceArgs$1 {
+    address: string;
+    tokenMint: string;
+    transactionSignature: string;
+}
+interface VerifySolanaBalanceResult {
+    address: string;
+    token_mint: string;
+    transaction_signature: string;
+    source: "alchemy_rpc";
+    network: "solana-mainnet";
+    transaction: {
+        slot: number;
+        pre_balance: string;
+        post_balance: string;
+        delta: string;
+    };
+    balance: {
+        amount: string;
+        decimals: number;
+        ui_amount_string: string;
+    };
+    observed_slot: number;
+    read_covers_transaction: true;
+    as_of: string;
+}
+interface DiscoverServicesOptions {
+    /** Catalogs to search. Defaults to both. */
+    network?: "all" | "base" | "solana";
+    /** @deprecated Accepted for compatibility but not advertised to agents. */
+    raw?: boolean;
+}
+interface DiscoverServicesPageOptions extends DiscoverServicesOptions {
+    /** Results per page. Defaults to 10; maximum 25. */
+    limit?: number;
+    /** Opaque continuation from a prior page. */
+    cursor?: string;
+}
+type RequestStatus = "pending_approval" | "pending_signature" | "pending_settlement" | "pending_confirmation" | "success" | "denied" | "error";
 type OutputType = "payment_token" | "signature" | "tx_hash" | "secret_token" | "raw_secret";
 interface CredentialOutput {
     output_id: string;
@@ -58,6 +96,12 @@ interface AgentResponse {
     output: CredentialOutput | null;
     approval_id: string | null;
     error: string | null;
+    /** SPE-456: set on a terminal `error`/`denied` when the failure was an expiry
+     *  (the signing/approval window elapsed and nothing was signed or spent), so
+     *  re-issuing the same request is the correct recovery. `retry_hint` is plain
+     *  guidance. Absent on non-expiry outcomes. */
+    retryable?: boolean;
+    retry_hint?: string | null;
 }
 interface CredentialSummary {
     id: string;
@@ -71,13 +115,27 @@ interface CredentialSummary {
 }
 interface Grant {
     credential_id: string;
-    approval_mode: "always_approve" | "autonomous";
+    approval_mode: "always_approve" | "iframe" | "autonomous";
     [key: string]: unknown;
 }
 interface ClientGrantSummary {
     credential: CredentialSummary;
     grant: Grant;
 }
+/** An active credential the user owns but has not granted this connector.
+ * Carries identity + safe display metadata (wallet chain family, card
+ * brand/last4) so the connector can request a specific credential by id; never
+ * card tokens or secret material. */
+interface UngrantedCredential {
+    credential_id: string;
+    name: string;
+    kind: "card" | "wallet" | "secret";
+    metadata: Record<string, unknown>;
+}
+interface ClientCredentialList {
+    credentials: ClientGrantSummary[];
+    ungranted: UngrantedCredential[];
+}
 /** The wallet binding the server echoes for a wallet-sign / resolve. Mirrors
  *  `WalletBinding` in server/src/agent.rs (key_id/derivation_path may be null
  *  for an unprovisioned wallet). */
@@ -96,13 +154,15 @@ interface SwapPlan {
     quote: Record<string, unknown>;
     txs: PlanTx[];
 }
-/** `POST /agent/swap` response: the parked request plus the sign-ready plan. */
+/** `POST /agent/swap` response. The sign-ready plan is present only while the
+ *  request is awaiting approval or signature; terminal responses return null. */
 interface SwapResult {
     response: AgentResponse;
-    plan: SwapPlan;
+    plan: SwapPlan | null;
 }
-/** `POST /agent/wallet-sign` response: the parked request plus the wallet
- *  binding, so the signer can sign without a separate resolve round-trip. */
+/** `POST /agent/wallet-sign` response. The wallet binding is present only while
+ *  approval or signature is pending, so the signer can sign without a separate
+ *  resolve round-trip; terminal responses return null. */
 interface WalletSignResult {
     response: AgentResponse;
     binding: BindingResponse | null;
@@ -110,7 +170,7 @@ interface WalletSignResult {
 interface X402Args {
     credentialId: string;
     /** The 402's `accepts` PaymentRequirements array, verbatim (from the resource's
-     *  own 402 — discover_services gives you the catalog entry to start from). */
+     *  own 402 — discover_services gives you a curated catalog entry to start from). */
     accepts: unknown[];
     /** The paywalled resource URL. */
     resourceUrl: string;
@@ -135,20 +195,76 @@ interface X402Plan {
     };
     x402: Record<string, unknown>;
 }
-/** `POST /agent/x402` | `/agent/use-service` response: parked request + plan. On
- *  success, header mode puts the X-PAYMENT header in
+/** `POST /agent/x402` | `/agent/use-service` response. The plan is present only
+ *  while approval or signature is pending. On success, header mode puts the
+ *  X-PAYMENT header in
  *  `response.output.value.x_payment`; gateway mode puts the resource's reply in
  *  `response.output.value.response`. */
 interface X402Result {
     response: AgentResponse;
-    plan: X402Plan;
+    plan: X402Plan | null;
 }
-/** One discovered x402 service (the `discover_services` tool / `/agent/services`):
+/** One curated x402 service (the `discover_services` tool / `/agent/services`):
  *  where it lives, a human description, and its `accepts` PaymentRequirements. */
 interface ServiceSummary {
     resource: string;
     description: string | null;
-    accepts: unknown;
+    accepts: Array<{
+        scheme: string;
+        network: string;
+        asset: string;
+        amount: string;
+    }>;
+    contract_uri?: string;
+}
+interface DiscoverServicesPage {
+    services: ServiceSummary[];
+    has_more: boolean;
+    next_cursor?: string;
+}
+/** `POST /agent/account-change` (the `request_account_change` tool): a pure
+ *  launcher. Surface `manage_url` to the user — they edit this client's access
+ *  in their own app session (passkey-gated); nothing is parked server-side. */
+interface AccountChangeResult {
+    kind: "account_change";
+    client_id: string;
+    manage_url: string;
+    note?: string | null;
+}
+interface BuyLinkArgs {
+    /** A granted wallet credential to fund. */
+    credentialId: string;
+    /** Exact network. Defaults to Base for EVM or Solana mainnet for Solana. */
+    destinationChain?: "eip155:8453" | "eip155:1" | "solana:mainnet";
+    /** Enabled MoonPay code matching the destination's exact network. */
+    currencyCode?: string;
+    /** Prefill amount in USD. */
+    amountUsd?: number;
+}
+/** `GET /agent/buy-link` (the `get_buy_link` tool): a signed MoonPay checkout
+ *  URL funding the wallet. Generating the link charges nothing. */
+interface BuyLinkResult {
+    url: string;
+    currency_code: string;
+    wallet_address: string;
+    network: "eip155:8453" | "eip155:1" | "solana:mainnet";
+}
+interface WorldMarketsArgs {
+    /** Return the events list (each event groups its markets) instead of markets. */
+    events?: boolean;
+    limit?: number;
+    /** Rows to skip; the response carries the next cursor. */
+    cursor?: number;
+    eventTicker?: string;
+    seriesTicker?: string;
+    /** One of active | initialized | determined | finalized. */
+    status?: string;
+}
+interface WorldPricesArgs {
+    ticker: string;
+    startTs: number;
+    endTs: number;
+    resolution?: number;
 }
 
 declare class PayboxError extends Error {
@@ -170,6 +286,11 @@ interface PayboxClientOptions {
 interface SignOptions {
     /** Sign in-process when the request clears to `pending_signature`. Default true. */
     autoSign?: boolean;
+    /** Wait for passkey approval and then sign in-process. Default false. */
+    waitForApproval?: boolean | {
+        intervalMs?: number;
+        timeoutMs?: number;
+    };
 }
 declare class PayboxClient {
     readonly baseUrl: string;
@@ -180,15 +301,20 @@ declare class PayboxClient {
     constructor(options?: PayboxClientOptions);
     /** Build a client from `~/.config/paybox/config.json` + env, with overrides. */
     static fromConfig(overrides?: PayboxClientOptions): PayboxClient;
-    /** Whether in-process signing is available (a `pbxk1.` key is configured). */
+    private signingCreds;
+    /** Whether in-process signing is available (a parseable `pbxk1.` key is set). */
     get canSign(): boolean;
     private bearer;
     private request;
     private readonly poster;
-    /** List the credentials this client may use (the `list_credentials` tool). */
-    listCredentials(): Promise<ClientGrantSummary[]>;
+    /** List granted credentials plus the `ungranted` credentials (id, name, kind,
+     *  safe metadata) the user owns but hasn't granted this connector. */
+    listCredentials(): Promise<ClientCredentialList>;
     /** Token balances across chains (the `get_portfolio` tool). */
     getPortfolio(args: PortfolioArgs): Promise<unknown>;
+    /** Verify one confirmed Solana transaction's exact wallet/mint effect, then
+     *  read the current balance at or after its slot (`verify_solana_balance`). */
+    verifySolanaBalance(args: VerifySolanaBalanceArgs$1): Promise<VerifySolanaBalanceResult>;
     /** Charge a card credential (the `request_payment` tool). */
     requestPayment(args: PaymentArgs): Promise<AgentResponse>;
     /** Reveal a secret credential (the `request_secret` tool). */
@@ -196,16 +322,41 @@ declare class PayboxClient {
     /** Sign with a wallet credential (the `request_wallet_sign` tool). Signs
      *  in-process and returns the completed request when a signing key is set and
      *  the request clears immediately; otherwise returns the pending response.
-     *  Uses `/agent/wallet-sign`, which echoes the wallet binding so the signer
-     *  need not resolve it separately. */
+     *  Uses `/agent/wallet-sign`, which echoes the wallet binding only while
+     *  approval or signature is pending so the signer need not resolve it
+     *  separately. Terminal responses carry a null binding. */
     requestWalletSign(args: WalletSignArgs, opts?: SignOptions): Promise<AgentResponse>;
     /** Swap tokens from a wallet credential (the `request_swap` tool). Returns the
-     *  parked response + sign-ready plan; signs + submits in-process when a signing
-     *  key is set and the swap cleared immediately. */
+     *  parked response and its sign-ready plan while approval or signature is
+     *  pending; terminal responses carry a null plan. Signs + submits in-process
+     *  when a signing key is set and the swap cleared immediately. */
     requestSwap(args: SwapArgs, opts?: SignOptions): Promise<SwapResult>;
-    /** Discover paid x402 services from the Bazaar catalog (the `discover_services`
-     *  tool). Pass a query for a ranked search; omit it for the catalog listing. */
-    discoverServices(query?: string): Promise<ServiceSummary[]>;
+    /** Complete a swap request: optionally wait out a `pending_approval` dwell,
+     *  then sign the plan in-process and submit envelopes. Signing first refreshes
+     *  the parked request via `/agent/requests/{id}/refresh`, so a long approval
+     *  dwell never signs stale bytes. */
+    private completeSwap;
+    /** Poll while the request sits in `pending_approval` (the user is approving
+     *  with their passkey); returns the first non-approval state. */
+    private waitWhileApproval;
+    /** Run an operation and, if it terminates on a server-marked expiry
+     *  (`retryable` on a terminal `error`/`denied`: the window elapsed and nothing
+     *  was signed or spent), re-issue it exactly once (SPE-456). Never loops: the
+     *  second attempt's result is returned as-is. */
+    private withExpiryRetry;
+    /** Sign a parked request; if the sign/submit call fails, reconcile against the
+     *  authoritative state once (SPE-456). The server leaves a pre-broadcast
+     *  completion failure recoverable — the claim is released and the row stays
+     *  `pending_signature` — so re-sign a still-open request a single time; a
+     *  terminal or already-broadcast row is left as-is for the caller to read (and
+     *  for `withExpiryRetry` to re-issue if it is retryable). Bounded to one extra
+     *  attempt: a second failure propagates. */
+    private signWithReconcile;
+    /** Discover x402 services with the original array-returning response. */
+    discoverServices(query?: string, opts?: DiscoverServicesOptions): Promise<ServiceSummary[]>;
+    /** Discover one bounded page of x402 services. Reuse the returned cursor with
+     * the same query and network while `has_more` is true. */
+    discoverServicesPage(query?: string, opts?: DiscoverServicesPageOptions): Promise<DiscoverServicesPage>;
     /** Pay a paid x402 endpoint from a wallet credential (the `pay_x402` tool,
      *  header mode). Signs in-process when a signing key is set and the payment
      *  clears immediately — then the X-PAYMENT header is on the completed
@@ -215,12 +366,50 @@ declare class PayboxClient {
      *  tool, gateway mode): paybox probes the url, pays the 402, re-fetches with the
      *  payment, and returns the resource's reply on `output.value.response`. */
     useService(args: UseServiceArgs, opts?: SignOptions): Promise<X402Result>;
-    /** Shared completion for the two x402 entry points: sign the parked typed data
-     *  in-process (when a key is set + the request cleared) and return the finished
-     *  request, exactly like the swap path. */
+    /** Shared completion for the two x402 entry points: optionally wait out a
+     *  `pending_approval` dwell, then sign the parked typed data in-process and
+     *  return the finished request, exactly like the swap path. */
     private completeX402;
+    /** Claim the usable card credentials of an approved payment (the
+     *  `claim_payment_credentials` tool). One-time: the claim is consumed. */
+    claimPaymentCredentials(requestId: string): Promise<Record<string, unknown>>;
+    /** Open the account-change flow (the `request_account_change` tool): returns a
+     *  `manage_url` deep link for the USER to open — they update this client's
+     *  access (or add a credential) in their own passkey-gated app session.
+     *  Nothing is parked or applied server-side. */
+    requestAccountChange(note?: string): Promise<AccountChangeResult>;
+    /** A signed MoonPay checkout URL funding a granted wallet (the `get_buy_link`
+     *  tool). Share the URL with the user; generating it charges nothing. */
+    getBuyLink(args: BuyLinkArgs): Promise<BuyLinkResult>;
+    /** Browse World prediction markets (the `world_find_markets` tool). */
+    worldMarkets(args?: WorldMarketsArgs): Promise<unknown>;
+    /** One World event with its markets (the `world_get_market` tool). Nested
+     *  markets default on, matching the tool — they carry the outcome mint ids
+     *  the orderbook/trade calls need. */
+    worldMarket(eventTicker: string, withNestedMarkets?: boolean): Promise<unknown>;
+    /** A World market's orderbook (the `world_orderbook` tool). */
+    worldOrderbook(id: string, byMint?: boolean): Promise<unknown>;
+    /** A World market's price history (the `world_market_prices` tool). */
+    worldPrices(args: WorldPricesArgs): Promise<unknown>;
+    /** Filter addresses down to World outcome mints (the
+     *  `world_filter_outcome_mints` tool). */
+    worldFilterOutcomeMints(addresses: string[]): Promise<unknown>;
+    /** A wallet's World prediction-market positions: classified `positions` /
+     *  `settled` entries (each with a `position_result`) plus `settlement_cash`
+     *  for a settled winner's CASH cash-out (swap CASH to USDC via request_swap).
+     *  The `world_positions` tool. */
+    worldPositions(address: string): Promise<unknown>;
+    /** Hyperliquid spot markets (the `hyperliquid_markets` tool). */
+    hyperliquidMarkets(): Promise<unknown>;
+    /** Hyperliquid spot prices (the `hyperliquid_prices` tool). */
+    hyperliquidPrices(): Promise<unknown>;
+    /** Resolve one Hyperliquid token by name (the `hyperliquid_token` tool). */
+    hyperliquidToken(name: string): Promise<unknown>;
     /** Poll a request's status (the `get_request` tool). */
     getRequest(requestId: string): Promise<AgentResponse>;
+    /** After in-process sign, `--wait` polls through settlement/confirmation;
+     *  without it, return the first snapshot (the historical no-wait contract). */
+    private requestAfterSign;
     /** Poll until the request leaves a pending state (or the timeout elapses). */
     waitForRequest(requestId: string, opts?: {
         intervalMs?: number;
@@ -298,5 +487,10 @@ interface GetPortfolioArgs {
     address: string;
     network_ids?: string | null;
 }
+interface VerifySolanaBalanceArgs {
+    address: string;
+    token_mint: string;
+    transaction_signature: string;
+}
 
-export { type AgentResponse, type BindingResponse, type ClientGrantSummary, type CredentialOutput, type CredentialSummary, type GetPortfolioArgs, type Grant, type LoginOptions, type OAuthTokens, type OutputType, PayboxClient, type PayboxClientOptions, PayboxError, type PaymentArgs, type PortfolioArgs, type RequestPaymentArgs, type RequestSecretArgs, type RequestStatus, type RequestSwapArgs, type RequestWalletSignArgs, type SecretArgs, type SignOptions, type StoredConfig, type SwapArgs, type SwapPlan, type SwapResult, type WalletSignArgs, type WalletSignResult, configFile, credsFromToken, loadConfig, loginLoopback, mcpResource, refreshTokens, saveConfig };
+export { type AccountChangeResult, type AgentResponse, type BindingResponse, type BuyLinkArgs, type BuyLinkResult, type ClientCredentialList, type ClientGrantSummary, type CredentialOutput, type CredentialSummary, type DiscoverServicesOptions, type GetPortfolioArgs, type Grant, type LoginOptions, type OAuthTokens, type OutputType, PayboxClient, type PayboxClientOptions, PayboxError, type PaymentArgs, type PortfolioArgs, type RequestPaymentArgs, type RequestSecretArgs, type RequestStatus, type RequestSwapArgs, type RequestWalletSignArgs, type SecretArgs, type ServiceSummary, type SignOptions, type StoredConfig, type SwapArgs, type SwapPlan, type SwapResult, type UngrantedCredential, type UseServiceArgs, type VerifySolanaBalanceArgs$1 as VerifySolanaBalanceArgs, type VerifySolanaBalanceResult, type VerifySolanaBalanceArgs as VerifySolanaBalanceWireArgs, type WalletSignArgs, type WalletSignResult, type WorldMarketsArgs, type WorldPricesArgs, type X402Args, type X402Plan, type X402Result, configFile, credsFromToken, loadConfig, loginLoopback, mcpResource, refreshTokens, saveConfig };

package/dist/index.js

@@ -8,7 +8,7 @@ import {
   mcpResource,
   refreshTokens,
   saveConfig
-} from "./chunk-DIMOTJ2E.js";
+} from "./chunk-7VW4QMV4.js";
 export {
   PayboxClient,
   PayboxError,

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@paybox-sh/sdk",
-  "version": "0.5.0",
+  "version": "0.8.0",
   "type": "module",
-  "description": "Typed Node SDK + `paybox` CLI for the Paybox agent API. Mirrors the MCP tool surface (list_credentials, request_payment, request_wallet_sign, request_secret, request_swap, get_portfolio, get_request) over REST, with in-process non-custodial wallet signing.",
+  "description": "Typed Node SDK + `paybox` CLI for the PayBox agent API. Mirrors the MCP tool surface (list_credentials, request_payment, request_wallet_sign, request_secret, request_swap, get_portfolio, verify_solana_balance, get_request) over REST, with in-process non-custodial wallet signing.",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -37,7 +37,8 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "SKILL.md"
   ],
   "engines": {
     "node": ">=18"
@@ -45,12 +46,13 @@
   "scripts": {
     "build": "tsup",
     "dev": "tsup --watch",
+    "test": "tsx --test test/*.test.ts",
     "typecheck": "tsc --noEmit",
     "gen": "tsx scripts/generate.ts",
     "prepublishOnly": "pnpm build"
   },
   "dependencies": {
-    "@moon-x/core": "0.10.0",
+    "@moon-x/core": "0.17.0",
     "@moon-x/evm-adapter": "0.3.0",
     "@moon-x/solana-adapter": "0.3.0",
     "@solana/web3.js": "1.98.4",
@@ -68,5 +70,11 @@
     "tsup": "8.3.5",
     "tsx": "4.19.2",
     "typescript": "5.9.3"
+  },
+  "pnpm": {
+    "comment:overrides": "ASEC-8563 (GHSA-67mh-4wv8-2f99): force tsup's transitive esbuild off 0.24.2 so no flagged version remains in this lockfile. Targets 0.24.2 only; tsx's 0.23.1 is unaffected.",
+    "overrides": {
+      "esbuild@0.24.2": "0.25.0"
+    }
   }
 }