@paybox-sh/sdk 0.8.0 → 0.8.2

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n// The `paybox` CLI — a thin wrapper over PayboxClient. Mirrors the MCP tools as\n// subcommands; `--json` on any command emits machine-readable output.\n\nimport { spawnSync } from \"node:child_process\";\nimport { readFileSync, rmSync } from \"node:fs\";\nimport { createInterface } from \"node:readline/promises\";\n\nimport { Command } from \"commander\";\n\nimport { agentClientId, appBaseFrom, loginDevice, openBrowser } from \"./auth.js\";\nimport { PayboxClient } from \"./client.js\";\nimport { configDir, configFile, loadConfig, saveConfig } from \"./config.js\";\n\nconst DEFAULT_BASE_URL = \"https://api.paybox.sh\";\nconst PKG = \"@paybox-sh/sdk\";\nconst VERSION = \"0.7.0\";\n\nconst program = new Command();\nprogram\n  .name(\"paybox\")\n  .description(\"PayBox agent CLI — vaulted cards, wallets, and secrets for agents\")\n  .version(VERSION)\n  .option(\"--base-url <url>\", \"API origin (default https://api.paybox.sh or stored)\")\n  .option(\"--json\", \"machine-readable JSON output\");\n\nfunction jsonMode(): boolean {\n  return Boolean(program.opts().json);\n}\n\nfunction emit(data: unknown): void {\n  if (jsonMode()) console.log(JSON.stringify(data, null, 2));\n  else console.dir(data, { depth: null, colors: process.stdout.isTTY });\n}\n\nfunction client(): PayboxClient {\n  return PayboxClient.fromConfig({ baseUrl: program.opts().baseUrl });\n}\n\nfunction readIntent(value: string): unknown {\n  const raw = value.startsWith(\"@\") ? readFileSync(value.slice(1), \"utf8\") : value;\n  return JSON.parse(raw);\n}\n\nfunction int(flag: string, value: string): number {\n  const n = Number(value);\n  if (!Number.isInteger(n)) {\n    throw new Error(`--${flag} must be an integer, got ${JSON.stringify(value)}`);\n  }\n  return n;\n}\n\nfunction optInt(flag: string, value: string | undefined): number | undefined {\n  return value === undefined ? undefined : int(flag, value);\n}\n\n/** True when semver `a` is strictly greater than `b` (plain x.y.z). */\nfunction isNewer(a: string, b: string): boolean {\n  const pa = a.split(\".\").map(Number);\n  const pb = b.split(\".\").map(Number);\n  for (let i = 0; i < 3; i++) {\n    const x = pa[i] ?? 0;\n    const y = pb[i] ?? 0;\n    if (x !== y) return x > y;\n  }\n  return false;\n}\n\nasync function prompt(question: string): Promise<string> {\n  if (!process.stdin.isTTY) return \"\"; // non-interactive: skip\n  const rl = createInterface({ input: process.stdin, output: process.stderr });\n  try {\n    return (await rl.question(question)).trim();\n  } finally {\n    rl.close();\n  }\n}\n\nasync function run(fn: () => Promise<void>): Promise<void> {\n  try {\n    await fn();\n  } catch (err) {\n    console.error(err instanceof Error ? err.message : String(err));\n    process.exitCode = 1;\n  }\n}\n\n/** A request parked at `pending_signature` can only complete in-process with a\n *  `pbxk1.` key (there is no signing window on this surface). */\nfunction warnIfUnsignable(c: PayboxClient, status: string): void {\n  if (status === \"pending_signature\" && !c.canSign) {\n    console.error(\n      \"awaiting signatures but no valid pbxk1. signing key is set — \" +\n        \"run `paybox login --signing-key <pbxk1...>` or set PAYBOX_SIGNING_KEY, then poll `paybox request <id>`.\",\n    );\n  }\n}\n\nprogram\n  .command(\"login\")\n  .description(\"Authenticate via OAuth (browser + passkey), or store a pbx_live_ key\")\n  .option(\"--key <key>\", \"store a pbx_live_ personal API key instead of OAuth\")\n  .option(\"--signing-key <token>\", \"store a pbxk1. wallet signing key (skips the prompt)\")\n  .option(\"--app-url <url>\", \"PayBox app origin for key provisioning (default: derived from --base-url)\")\n  .option(\"--no-provision\", \"skip the wallet signing-key provisioning step\")\n  .action((opts) =>\n    run(async () => {\n      const cfg = loadConfig();\n      const baseUrl = (\n        program.opts().baseUrl ??\n        process.env.PAYBOX_API_URL ??\n        cfg.baseUrl ??\n        DEFAULT_BASE_URL\n      ).replace(/\\/+$/, \"\");\n      cfg.baseUrl = baseUrl;\n      if (opts.appUrl) cfg.appUrl = opts.appUrl;\n\n      // Step 1 — authenticate.\n      if (opts.key) {\n        cfg.apiKey = opts.key;\n        delete cfg.oauth;\n      } else {\n        cfg.oauth = await loginDevice(baseUrl);\n        delete cfg.apiKey;\n      }\n      if (opts.signingKey) cfg.signingKey = opts.signingKey;\n      saveConfig(cfg);\n      console.error(`Saved credentials to ${configFile()}`);\n\n      // Step 2 — provision a wallet signing key. Runs only after OAuth (the app\n      // session is warm) and only when one wasn't supplied or disabled. The app\n      // mints a key scoped to this agent and shows a `pbxk1.` token to paste back.\n      if (!cfg.oauth || opts.signingKey || opts.provision === false) return;\n      const cid = agentClientId(cfg.oauth.accessToken);\n      const appBase = appBaseFrom(baseUrl, opts.appUrl ?? process.env.PAYBOX_APP_URL ?? cfg.appUrl);\n      if (!cid || !appBase) {\n        console.error(\n          \"To enable wallet sign/swap, provision a signing key and run\\n\" +\n            \"  paybox login --signing-key <pbxk1...>\" +\n            (cid && !appBase ? \" (or pass --app-url <paybox app origin>)\" : \"\"),\n        );\n        return;\n      }\n      const url = `${appBase}/agent-key?client_id=${cid}`;\n      console.error(\n        `\\nNext, provision a wallet signing key for this agent (needed for sign/swap):\\n  ${url}\\n`,\n      );\n      openBrowser(url);\n      const key = await prompt(\"Paste the pbxk1. signing key when ready (or Enter to skip): \");\n      if (key) {\n        cfg.signingKey = key;\n        saveConfig(cfg);\n        console.error(\"Signing key saved — sign/swap enabled.\");\n      } else {\n        console.error(\"Skipped — add it later with `paybox login --signing-key <pbxk1...>`.\");\n      }\n    }),\n  );\n\nprogram\n  .command(\"logout\")\n  .description(\"Forget stored credentials\")\n  .action(() =>\n    run(async () => {\n      const cfg = loadConfig();\n      delete cfg.apiKey;\n      delete cfg.oauth;\n      delete cfg.signingKey;\n      saveConfig(cfg);\n      console.error(\"Logged out.\");\n    }),\n  );\n\nprogram\n  .command(\"whoami\")\n  .description(\"Show the configured endpoint, auth mode, and signing capability\")\n  .action(() =>\n    run(async () => {\n      const cfg = loadConfig();\n      const c = client();\n      const mode = process.env.PAYBOX_ACCESS_TOKEN\n        ? \"oauth (env token)\"\n        : process.env.PAYBOX_API_KEY || cfg.apiKey\n          ? \"api key\"\n          : cfg.oauth\n            ? \"oauth\"\n            : \"none\";\n      emit({ baseUrl: c.baseUrl, auth: mode, canSign: c.canSign, configFile: configFile() });\n    }),\n  );\n\nprogram\n  .command(\"credentials\")\n  .description(\"List the credentials this client may use\")\n  .action(() => run(async () => emit(await client().listCredentials())));\n\nprogram\n  .command(\"pay\")\n  .description(\"Charge a card credential\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--merchant <name>\")\n  .requiredOption(\"--url <url>\", \"real merchant URL the card is bound to\")\n  .requiredOption(\"--amount <cents>\", \"amount in cents\")\n  .option(\"--currency <code>\", \"ISO 4217 currency\", \"USD\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().requestPayment({\n          credentialId: o.credential,\n          merchant: o.merchant,\n          merchantUrl: o.url,\n          amountCents: int(\"amount\", o.amount),\n          currency: o.currency,\n        }),\n      ),\n    ),\n  );\n\nprogram\n  .command(\"secret\")\n  .description(\"Reveal a secret credential (one-time token, or --raw value)\")\n  .requiredOption(\"--credential <id>\")\n  .option(\"--raw\", \"return the raw secret value (grant-gated)\")\n  .option(\"--purpose <text>\", \"why the secret is requested (shown on approval)\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().requestSecret({\n          credentialId: o.credential,\n          raw: Boolean(o.raw),\n          purpose: o.purpose,\n        }),\n      ),\n    ),\n  );\n\nprogram\n  .command(\"sign\")\n  .description(\"Sign with a wallet credential (intent JSON, or @file)\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--intent <json>\", 'a SignIntent, e.g. \\'{\"op\":\"message\",\"message\":\"hi\"}\\' or @intent.json')\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const res = await c.requestWalletSign({\n        credentialId: o.credential,\n        intent: readIntent(o.intent) as never,\n      });\n      warnIfUnsignable(c, res.status);\n      emit(res);\n    }),\n  );\n\nprogram\n  .command(\"swap\")\n  .description(\"Swap tokens from a wallet credential\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--src-chain <caip2>\")\n  .requiredOption(\"--src-token <addr>\", '\"native\" or a token address')\n  .requiredOption(\"--dst-token <addr>\")\n  .requiredOption(\"--amount <smallest-unit>\", \"source amount in smallest units\")\n  .option(\"--dst-chain <caip2>\", \"defaults to --src-chain\")\n  .option(\"--direction <dir>\", \"exact-amount-in | exact-amount-out\", \"exact-amount-in\")\n  .option(\"--slippage <bps>\", \"slippage in bps\", \"150\")\n  .option(\"--recipient <addr>\")\n  .option(\"--value-cents <n>\")\n  .option(\"--wait\", \"if approval is required, wait for it and then sign in-process\")\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const result = await c.requestSwap(\n        {\n          credentialId: o.credential,\n          srcChain: o.srcChain,\n          dstChain: o.dstChain,\n          srcToken: o.srcToken,\n          dstToken: o.dstToken,\n          amount: o.amount,\n          swapDirection: o.direction,\n          slippageBps: int(\"slippage\", o.slippage),\n          recipient: o.recipient,\n          valueCents: optInt(\"value-cents\", o.valueCents),\n        },\n        { waitForApproval: Boolean(o.wait) },\n      );\n      warnIfUnsignable(c, result.response.status);\n      emit(result);\n    }),\n  );\n\nprogram\n  .command(\"discover [query]\")\n  .description(\"Discover curated paid x402 services from Bazaar (optional search)\")\n  .option(\"--raw\", \"return uncurated compact Bazaar service summaries (debug)\")\n  .action((query, o) =>\n    run(async () => emit(await client().discoverServices(query, { raw: Boolean(o.raw) }))),\n  );\n\nprogram\n  .command(\"pay-x402\")\n  .description(\"Pay a paid x402 endpoint (header mode — returns the X-PAYMENT header to replay)\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--accepts <json>\", \"the 402's accepts[] array (JSON or @file)\")\n  .requiredOption(\"--url <url>\", \"the paywalled resource URL\")\n  .option(\"--wait\", \"if approval is required, wait for it and then sign in-process\")\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const result = await c.payX402(\n        {\n          credentialId: o.credential,\n          accepts: readIntent(o.accepts) as unknown[],\n          resourceUrl: o.url,\n        },\n        { waitForApproval: Boolean(o.wait) },\n      );\n      warnIfUnsignable(c, result.response.status);\n      emit(result);\n    }),\n  );\n\nprogram\n  .command(\"use-service\")\n  .description(\"Fetch a paid x402 resource and have paybox pay for it (gateway mode)\")\n  .requiredOption(\"--credential <id>\")\n  .requiredOption(\"--url <url>\", \"the paid x402 resource URL\")\n  .option(\"--method <verb>\", \"HTTP method\", \"GET\")\n  .option(\"--body <json>\", \"request body (JSON or @file)\")\n  .option(\"--wait\", \"if approval is required, wait for it and then sign in-process\")\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const result = await c.useService(\n        {\n          credentialId: o.credential,\n          url: o.url,\n          method: o.method,\n          body: o.body === undefined ? undefined : readIntent(o.body),\n        },\n        { waitForApproval: Boolean(o.wait) },\n      );\n      warnIfUnsignable(c, result.response.status);\n      emit(result);\n    }),\n  );\n\nprogram\n  .command(\"portfolio\")\n  .description(\"List a wallet address's token balances across chains\")\n  .requiredOption(\"--address <addr>\")\n  .option(\"--networks <ids>\", 'comma-separated network IDs, e.g. \"1,8453\"')\n  .action((o) =>\n    run(async () =>\n      emit(await client().getPortfolio({ address: o.address, networkIds: o.networks })),\n    ),\n  );\n\nprogram\n  .command(\"verify-solana-balance\")\n  .description(\"Verify a Solana transaction's wallet/token effect and current balance\")\n  .requiredOption(\"--address <addr>\", \"canonical Solana wallet address\")\n  .requiredOption(\"--mint <addr>\", \"canonical SPL or Token-2022 mint\")\n  .requiredOption(\"--transaction <signature>\", \"confirmed Solana transaction signature\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().verifySolanaBalance({\n          address: o.address,\n          tokenMint: o.mint,\n          transactionSignature: o.transaction,\n        }),\n      ),\n    ),\n  );\n\nprogram\n  .command(\"claim <request-id>\")\n  .description(\"Claim the usable card credentials of an approved payment (one-time)\")\n  .action((id) => run(async () => emit(await client().claimPaymentCredentials(id))));\n\nprogram\n  .command(\"account-change\")\n  .description(\"Get a manage_url for the USER to update this client's access in the app\")\n  .option(\"--note <text>\", \"why the change is needed (shown to the user)\")\n  .action((o) => run(async () => emit(await client().requestAccountChange(o.note))));\n\nprogram\n  .command(\"buy-link\")\n  .description(\"Signed MoonPay checkout URL funding a granted wallet (charges nothing)\")\n  .requiredOption(\"--credential <id>\", \"a granted wallet credential\")\n  .option(\n    \"--destination <chain>\",\n    \"exact network: eip155:8453 (default EVM), eip155:1, or solana:mainnet\",\n  )\n  .option(\"--currency <code>\", \"enabled MoonPay code matching the exact destination\")\n  .option(\"--amount-usd <n>\", \"prefill amount in USD\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().getBuyLink({\n          credentialId: o.credential,\n          destinationChain: o.destination,\n          currencyCode: o.currency,\n          amountUsd: o.amountUsd === undefined ? undefined : Number(o.amountUsd),\n        }),\n      ),\n    ),\n  );\n\n// ---- World discovery. Money tools require the geofenced MCP signing window. ----\nconst world = program\n  .command(\"world\")\n  .description(\"World prediction markets (requires the world plugin)\");\n\nworld\n  .command(\"markets\")\n  .description(\"Browse markets (or events with --events)\")\n  .option(\"--events\", \"list events (each groups its markets)\")\n  .option(\"--limit <n>\")\n  .option(\"--cursor <n>\", \"rows to skip; the response carries the next cursor\")\n  .option(\"--event-ticker <ticker>\")\n  .option(\"--series-ticker <ticker>\")\n  .option(\"--status <status>\", \"active | initialized | determined | finalized\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().worldMarkets({\n          events: Boolean(o.events),\n          limit: optInt(\"limit\", o.limit),\n          cursor: optInt(\"cursor\", o.cursor),\n          eventTicker: o.eventTicker,\n          seriesTicker: o.seriesTicker,\n          status: o.status,\n        }),\n      ),\n    ),\n  );\n\nworld\n  .command(\"market <event-ticker>\")\n  .description(\"One event with its nested markets (disable with --no-nested)\")\n  .option(\"--no-nested\", \"exclude the event's markets\")\n  .action((ticker, o) =>\n    run(async () => emit(await client().worldMarket(ticker, Boolean(o.nested)))),\n  );\n\nworld\n  .command(\"orderbook <id>\")\n  .description(\"A market's orderbook (id is a ticker, or a mint with --by-mint)\")\n  .option(\"--by-mint\", \"look up by outcome mint instead of ticker\")\n  .action((id, o) =>\n    run(async () => emit(await client().worldOrderbook(id, Boolean(o.byMint)))),\n  );\n\nworld\n  .command(\"prices <ticker>\")\n  .description(\"A market's price history\")\n  .requiredOption(\"--start <unix-ts>\")\n  .requiredOption(\"--end <unix-ts>\")\n  .option(\"--resolution <n>\")\n  .action((ticker, o) =>\n    run(async () =>\n      emit(\n        await client().worldPrices({\n          ticker,\n          startTs: int(\"start\", o.start),\n          endTs: int(\"end\", o.end),\n          resolution: optInt(\"resolution\", o.resolution),\n        }),\n      ),\n    ),\n  );\n\nworld\n  .command(\"filter-mints <addresses...>\")\n  .description(\"Filter addresses down to World outcome mints\")\n  .action((addresses) =>\n    run(async () => emit(await client().worldFilterOutcomeMints(addresses))),\n  );\n\nworld\n  .command(\"positions <address>\")\n  .description(\"Solana token positions for an address\")\n  .action((address) => run(async () => emit(await client().worldPositions(address))));\n\n// ---- Hyperliquid plugin (read-only spot discovery). Requires the\n// `hyperliquid` plugin enabled in the paybox app. ----\nconst hyperliquid = program\n  .command(\"hyperliquid\")\n  .description(\"Hyperliquid spot discovery (requires the hyperliquid plugin)\");\n\nhyperliquid\n  .command(\"markets\")\n  .description(\"Spot markets\")\n  .action(() => run(async () => emit(await client().hyperliquidMarkets())));\n\nhyperliquid\n  .command(\"prices\")\n  .description(\"Spot prices\")\n  .action(() => run(async () => emit(await client().hyperliquidPrices())));\n\nhyperliquid\n  .command(\"token <name>\")\n  .description(\"Resolve one token by name\")\n  .action((name) => run(async () => emit(await client().hyperliquidToken(name))));\n\nprogram\n  .command(\"request <id>\")\n  .description(\"Poll a request's status\")\n  .option(\"--wait\", \"block until it leaves the pending state\")\n  .action((id, o) =>\n    run(async () => {\n      const c = client();\n      emit(o.wait ? await c.waitForRequest(id) : await c.getRequest(id));\n    }),\n  );\n\nprogram\n  .command(\"version\")\n  .description(\"Show the installed CLI version (and whether an update is available)\")\n  .action(() =>\n    run(async () => {\n      let latest: string | undefined;\n      try {\n        const res = await fetch(`https://registry.npmjs.org/${PKG}/latest`);\n        if (res.ok) latest = ((await res.json()) as { version?: string }).version;\n      } catch {\n        /* offline — just report the installed version */\n      }\n      const updateAvailable = Boolean(latest && isNewer(latest, VERSION));\n      if (jsonMode()) {\n        emit({ version: VERSION, latest: latest ?? null, updateAvailable });\n        return;\n      }\n      console.log(`${PKG} v${VERSION}`);\n      if (updateAvailable) {\n        console.log(`Update available: v${latest} — run \\`paybox update\\`.`);\n      }\n    }),\n  );\n\nprogram\n  .command(\"update\")\n  .description(\"Update the globally-installed paybox CLI to the latest version\")\n  .option(\"--print\", \"print the update command instead of running it\")\n  .action((opts) =>\n    run(async () => {\n      const args = [\"install\", \"-g\", `${PKG}@latest`];\n      if (opts.print) {\n        console.log(`npm ${args.join(\" \")}`);\n        return;\n      }\n      console.error(`Updating ${PKG} (npm ${args.join(\" \")})…`);\n      const r = spawnSync(\"npm\", args, { stdio: \"inherit\" });\n      if (r.status !== 0) {\n        console.error(\n          `\\nIf this isn't a global install: run \\`pnpm up ${PKG}\\` in your project, ` +\n            `or use \\`npx ${PKG}@latest …\\` to always run the latest.`,\n        );\n        process.exitCode = r.status ?? 1;\n      }\n    }),\n  );\n\nprogram\n  .command(\"uninstall\")\n  .description(\"Remove stored PayBox credentials/config (and show how to remove the CLI)\")\n  .action(() =>\n    run(async () => {\n      const dir = configDir();\n      rmSync(dir, { recursive: true, force: true });\n      console.error(`Removed stored config at ${dir}.`);\n      console.error(\n        `The CLI binary is managed by npm — remove it with:\\n  npm rm -g ${PKG}`,\n      );\n    }),\n  );\n\nprogram.parseAsync(process.argv);\n"],"mappings":";;;;;;;;;;;;;;AAIA,SAAS,iBAAiB;AAC1B,SAAS,cAAc,cAAc;AACrC,SAAS,uBAAuB;AAEhC,SAAS,eAAe;AAMxB,IAAM,mBAAmB;AACzB,IAAM,MAAM;AACZ,IAAM,UAAU;AAEhB,IAAM,UAAU,IAAI,QAAQ;AAC5B,QACG,KAAK,QAAQ,EACb,YAAY,wEAAmE,EAC/E,QAAQ,OAAO,EACf,OAAO,oBAAoB,sDAAsD,EACjF,OAAO,UAAU,8BAA8B;AAElD,SAAS,WAAoB;AAC3B,SAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI;AACpC;AAEA,SAAS,KAAK,MAAqB;AACjC,MAAI,SAAS,EAAG,SAAQ,IAAI,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA,MACpD,SAAQ,IAAI,MAAM,EAAE,OAAO,MAAM,QAAQ,QAAQ,OAAO,MAAM,CAAC;AACtE;AAEA,SAAS,SAAuB;AAC9B,SAAO,aAAa,WAAW,EAAE,SAAS,QAAQ,KAAK,EAAE,QAAQ,CAAC;AACpE;AAEA,SAAS,WAAW,OAAwB;AAC1C,QAAM,MAAM,MAAM,WAAW,GAAG,IAAI,aAAa,MAAM,MAAM,CAAC,GAAG,MAAM,IAAI;AAC3E,SAAO,KAAK,MAAM,GAAG;AACvB;AAEA,SAAS,IAAI,MAAc,OAAuB;AAChD,QAAM,IAAI,OAAO,KAAK;AACtB,MAAI,CAAC,OAAO,UAAU,CAAC,GAAG;AACxB,UAAM,IAAI,MAAM,KAAK,IAAI,4BAA4B,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC9E;AACA,SAAO;AACT;AAEA,SAAS,OAAO,MAAc,OAA+C;AAC3E,SAAO,UAAU,SAAY,SAAY,IAAI,MAAM,KAAK;AAC1D;AAGA,SAAS,QAAQ,GAAW,GAAoB;AAC9C,QAAM,KAAK,EAAE,MAAM,GAAG,EAAE,IAAI,MAAM;AAClC,QAAM,KAAK,EAAE,MAAM,GAAG,EAAE,IAAI,MAAM;AAClC,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK;AAC1B,UAAM,IAAI,GAAG,CAAC,KAAK;AACnB,UAAM,IAAI,GAAG,CAAC,KAAK;AACnB,QAAI,MAAM,EAAG,QAAO,IAAI;AAAA,EAC1B;AACA,SAAO;AACT;AAEA,eAAe,OAAO,UAAmC;AACvD,MAAI,CAAC,QAAQ,MAAM,MAAO,QAAO;AACjC,QAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAC3E,MAAI;AACF,YAAQ,MAAM,GAAG,SAAS,QAAQ,GAAG,KAAK;AAAA,EAC5C,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;AAEA,eAAe,IAAI,IAAwC;AACzD,MAAI;AACF,UAAM,GAAG;AAAA,EACX,SAAS,KAAK;AACZ,YAAQ,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAC9D,YAAQ,WAAW;AAAA,EACrB;AACF;AAIA,SAAS,iBAAiB,GAAiB,QAAsB;AAC/D,MAAI,WAAW,uBAAuB,CAAC,EAAE,SAAS;AAChD,YAAQ;AAAA,MACN;AAAA,IAEF;AAAA,EACF;AACF;AAEA,QACG,QAAQ,OAAO,EACf,YAAY,sEAAsE,EAClF,OAAO,eAAe,qDAAqD,EAC3E,OAAO,yBAAyB,sDAAsD,EACtF,OAAO,mBAAmB,2EAA2E,EACrG,OAAO,kBAAkB,+CAA+C,EACxE;AAAA,EAAO,CAAC,SACP,IAAI,YAAY;AACd,UAAM,MAAM,WAAW;AACvB,UAAM,WACJ,QAAQ,KAAK,EAAE,WACf,QAAQ,IAAI,kBACZ,IAAI,WACJ,kBACA,QAAQ,QAAQ,EAAE;AACpB,QAAI,UAAU;AACd,QAAI,KAAK,OAAQ,KAAI,SAAS,KAAK;AAGnC,QAAI,KAAK,KAAK;AACZ,UAAI,SAAS,KAAK;AAClB,aAAO,IAAI;AAAA,IACb,OAAO;AACL,UAAI,QAAQ,MAAM,YAAY,OAAO;AACrC,aAAO,IAAI;AAAA,IACb;AACA,QAAI,KAAK,WAAY,KAAI,aAAa,KAAK;AAC3C,eAAW,GAAG;AACd,YAAQ,MAAM,wBAAwB,WAAW,CAAC,EAAE;AAKpD,QAAI,CAAC,IAAI,SAAS,KAAK,cAAc,KAAK,cAAc,MAAO;AAC/D,UAAM,MAAM,cAAc,IAAI,MAAM,WAAW;AAC/C,UAAM,UAAU,YAAY,SAAS,KAAK,UAAU,QAAQ,IAAI,kBAAkB,IAAI,MAAM;AAC5F,QAAI,CAAC,OAAO,CAAC,SAAS;AACpB,cAAQ;AAAA,QACN,0GAEG,OAAO,CAAC,UAAU,6CAA6C;AAAA,MACpE;AACA;AAAA,IACF;AACA,UAAM,MAAM,GAAG,OAAO,wBAAwB,GAAG;AACjD,YAAQ;AAAA,MACN;AAAA;AAAA,IAAoF,GAAG;AAAA;AAAA,IACzF;AACA,gBAAY,GAAG;AACf,UAAM,MAAM,MAAM,OAAO,8DAA8D;AACvF,QAAI,KAAK;AACP,UAAI,aAAa;AACjB,iBAAW,GAAG;AACd,cAAQ,MAAM,6CAAwC;AAAA,IACxD,OAAO;AACL,cAAQ,MAAM,2EAAsE;AAAA,IACtF;AAAA,EACF,CAAC;AACH;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,2BAA2B,EACvC;AAAA,EAAO,MACN,IAAI,YAAY;AACd,UAAM,MAAM,WAAW;AACvB,WAAO,IAAI;AACX,WAAO,IAAI;AACX,WAAO,IAAI;AACX,eAAW,GAAG;AACd,YAAQ,MAAM,aAAa;AAAA,EAC7B,CAAC;AACH;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,iEAAiE,EAC7E;AAAA,EAAO,MACN,IAAI,YAAY;AACd,UAAM,MAAM,WAAW;AACvB,UAAM,IAAI,OAAO;AACjB,UAAM,OAAO,QAAQ,IAAI,sBACrB,sBACA,QAAQ,IAAI,kBAAkB,IAAI,SAChC,YACA,IAAI,QACF,UACA;AACR,SAAK,EAAE,SAAS,EAAE,SAAS,MAAM,MAAM,SAAS,EAAE,SAAS,YAAY,WAAW,EAAE,CAAC;AAAA,EACvF,CAAC;AACH;AAEF,QACG,QAAQ,aAAa,EACrB,YAAY,0CAA0C,EACtD,OAAO,MAAM,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEvE,QACG,QAAQ,KAAK,EACb,YAAY,0BAA0B,EACtC,eAAe,mBAAmB,EAClC,eAAe,mBAAmB,EAClC,eAAe,eAAe,wCAAwC,EACtE,eAAe,oBAAoB,iBAAiB,EACpD,OAAO,qBAAqB,qBAAqB,KAAK,EACtD;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,eAAe;AAAA,QAC5B,cAAc,EAAE;AAAA,QAChB,UAAU,EAAE;AAAA,QACZ,aAAa,EAAE;AAAA,QACf,aAAa,IAAI,UAAU,EAAE,MAAM;AAAA,QACnC,UAAU,EAAE;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,6DAA6D,EACzE,eAAe,mBAAmB,EAClC,OAAO,SAAS,2CAA2C,EAC3D,OAAO,oBAAoB,iDAAiD,EAC5E;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,cAAc;AAAA,QAC3B,cAAc,EAAE;AAAA,QAChB,KAAK,QAAQ,EAAE,GAAG;AAAA,QAClB,SAAS,EAAE;AAAA,MACb,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,QACG,QAAQ,MAAM,EACd,YAAY,uDAAuD,EACnE,eAAe,mBAAmB,EAClC,eAAe,mBAAmB,sEAAwE,EAC1G;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,MAAM,MAAM,EAAE,kBAAkB;AAAA,MACpC,cAAc,EAAE;AAAA,MAChB,QAAQ,WAAW,EAAE,MAAM;AAAA,IAC7B,CAAC;AACD,qBAAiB,GAAG,IAAI,MAAM;AAC9B,SAAK,GAAG;AAAA,EACV,CAAC;AACH;AAEF,QACG,QAAQ,MAAM,EACd,YAAY,sCAAsC,EAClD,eAAe,mBAAmB,EAClC,eAAe,qBAAqB,EACpC,eAAe,sBAAsB,6BAA6B,EAClE,eAAe,oBAAoB,EACnC,eAAe,4BAA4B,iCAAiC,EAC5E,OAAO,uBAAuB,yBAAyB,EACvD,OAAO,qBAAqB,sCAAsC,iBAAiB,EACnF,OAAO,oBAAoB,mBAAmB,KAAK,EACnD,OAAO,oBAAoB,EAC3B,OAAO,mBAAmB,EAC1B,OAAO,UAAU,+DAA+D,EAChF;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,SAAS,MAAM,EAAE;AAAA,MACrB;AAAA,QACE,cAAc,EAAE;AAAA,QAChB,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,QACZ,QAAQ,EAAE;AAAA,QACV,eAAe,EAAE;AAAA,QACjB,aAAa,IAAI,YAAY,EAAE,QAAQ;AAAA,QACvC,WAAW,EAAE;AAAA,QACb,YAAY,OAAO,eAAe,EAAE,UAAU;AAAA,MAChD;AAAA,MACA,EAAE,iBAAiB,QAAQ,EAAE,IAAI,EAAE;AAAA,IACrC;AACA,qBAAiB,GAAG,OAAO,SAAS,MAAM;AAC1C,SAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEF,QACG,QAAQ,kBAAkB,EAC1B,YAAY,mEAAmE,EAC/E,OAAO,SAAS,2DAA2D,EAC3E;AAAA,EAAO,CAAC,OAAO,MACd,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,iBAAiB,OAAO,EAAE,KAAK,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AACvF;AAEF,QACG,QAAQ,UAAU,EAClB,YAAY,sFAAiF,EAC7F,eAAe,mBAAmB,EAClC,eAAe,oBAAoB,2CAA2C,EAC9E,eAAe,eAAe,4BAA4B,EAC1D,OAAO,UAAU,+DAA+D,EAChF;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,SAAS,MAAM,EAAE;AAAA,MACrB;AAAA,QACE,cAAc,EAAE;AAAA,QAChB,SAAS,WAAW,EAAE,OAAO;AAAA,QAC7B,aAAa,EAAE;AAAA,MACjB;AAAA,MACA,EAAE,iBAAiB,QAAQ,EAAE,IAAI,EAAE;AAAA,IACrC;AACA,qBAAiB,GAAG,OAAO,SAAS,MAAM;AAC1C,SAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEF,QACG,QAAQ,aAAa,EACrB,YAAY,sEAAsE,EAClF,eAAe,mBAAmB,EAClC,eAAe,eAAe,4BAA4B,EAC1D,OAAO,mBAAmB,eAAe,KAAK,EAC9C,OAAO,iBAAiB,8BAA8B,EACtD,OAAO,UAAU,+DAA+D,EAChF;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,SAAS,MAAM,EAAE;AAAA,MACrB;AAAA,QACE,cAAc,EAAE;AAAA,QAChB,KAAK,EAAE;AAAA,QACP,QAAQ,EAAE;AAAA,QACV,MAAM,EAAE,SAAS,SAAY,SAAY,WAAW,EAAE,IAAI;AAAA,MAC5D;AAAA,MACA,EAAE,iBAAiB,QAAQ,EAAE,IAAI,EAAE;AAAA,IACrC;AACA,qBAAiB,GAAG,OAAO,SAAS,MAAM;AAC1C,SAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEF,QACG,QAAQ,WAAW,EACnB,YAAY,sDAAsD,EAClE,eAAe,kBAAkB,EACjC,OAAO,oBAAoB,4CAA4C,EACvE;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF,KAAK,MAAM,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,YAAY,EAAE,SAAS,CAAC,CAAC;AAAA,EAClF;AACF;AAEF,QACG,QAAQ,uBAAuB,EAC/B,YAAY,uEAAuE,EACnF,eAAe,oBAAoB,iCAAiC,EACpE,eAAe,iBAAiB,kCAAkC,EAClE,eAAe,6BAA6B,wCAAwC,EACpF;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,oBAAoB;AAAA,QACjC,SAAS,EAAE;AAAA,QACX,WAAW,EAAE;AAAA,QACb,sBAAsB,EAAE;AAAA,MAC1B,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,QACG,QAAQ,oBAAoB,EAC5B,YAAY,qEAAqE,EACjF,OAAO,CAAC,OAAO,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC;AAEnF,QACG,QAAQ,gBAAgB,EACxB,YAAY,yEAAyE,EACrF,OAAO,iBAAiB,8CAA8C,EACtE,OAAO,CAAC,MAAM,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC,CAAC;AAEnF,QACG,QAAQ,UAAU,EAClB,YAAY,wEAAwE,EACpF,eAAe,qBAAqB,6BAA6B,EACjE;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,qBAAqB,qDAAqD,EACjF,OAAO,oBAAoB,uBAAuB,EAClD;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,WAAW;AAAA,QACxB,cAAc,EAAE;AAAA,QAChB,kBAAkB,EAAE;AAAA,QACpB,cAAc,EAAE;AAAA,QAChB,WAAW,EAAE,cAAc,SAAY,SAAY,OAAO,EAAE,SAAS;AAAA,MACvE,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAGF,IAAM,QAAQ,QACX,QAAQ,OAAO,EACf,YAAY,sDAAsD;AAErE,MACG,QAAQ,SAAS,EACjB,YAAY,0CAA0C,EACtD,OAAO,YAAY,uCAAuC,EAC1D,OAAO,aAAa,EACpB,OAAO,gBAAgB,oDAAoD,EAC3E,OAAO,yBAAyB,EAChC,OAAO,0BAA0B,EACjC,OAAO,qBAAqB,+CAA+C,EAC3E;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,aAAa;AAAA,QAC1B,QAAQ,QAAQ,EAAE,MAAM;AAAA,QACxB,OAAO,OAAO,SAAS,EAAE,KAAK;AAAA,QAC9B,QAAQ,OAAO,UAAU,EAAE,MAAM;AAAA,QACjC,aAAa,EAAE;AAAA,QACf,cAAc,EAAE;AAAA,QAChB,QAAQ,EAAE;AAAA,MACZ,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,MACG,QAAQ,uBAAuB,EAC/B,YAAY,8DAA8D,EAC1E,OAAO,eAAe,6BAA6B,EACnD;AAAA,EAAO,CAAC,QAAQ,MACf,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,YAAY,QAAQ,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC7E;AAEF,MACG,QAAQ,gBAAgB,EACxB,YAAY,iEAAiE,EAC7E,OAAO,aAAa,2CAA2C,EAC/D;AAAA,EAAO,CAAC,IAAI,MACX,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,eAAe,IAAI,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5E;AAEF,MACG,QAAQ,iBAAiB,EACzB,YAAY,0BAA0B,EACtC,eAAe,mBAAmB,EAClC,eAAe,iBAAiB,EAChC,OAAO,kBAAkB,EACzB;AAAA,EAAO,CAAC,QAAQ,MACf;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,YAAY;AAAA,QACzB;AAAA,QACA,SAAS,IAAI,SAAS,EAAE,KAAK;AAAA,QAC7B,OAAO,IAAI,OAAO,EAAE,GAAG;AAAA,QACvB,YAAY,OAAO,cAAc,EAAE,UAAU;AAAA,MAC/C,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,MACG,QAAQ,6BAA6B,EACrC,YAAY,8CAA8C,EAC1D;AAAA,EAAO,CAAC,cACP,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,wBAAwB,SAAS,CAAC,CAAC;AACzE;AAEF,MACG,QAAQ,qBAAqB,EAC7B,YAAY,uCAAuC,EACnD,OAAO,CAAC,YAAY,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,eAAe,OAAO,CAAC,CAAC,CAAC;AAIpF,IAAM,cAAc,QACjB,QAAQ,aAAa,EACrB,YAAY,8DAA8D;AAE7E,YACG,QAAQ,SAAS,EACjB,YAAY,cAAc,EAC1B,OAAO,MAAM,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAE1E,YACG,QAAQ,QAAQ,EAChB,YAAY,aAAa,EACzB,OAAO,MAAM,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAEzE,YACG,QAAQ,cAAc,EACtB,YAAY,2BAA2B,EACvC,OAAO,CAAC,SAAS,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,iBAAiB,IAAI,CAAC,CAAC,CAAC;AAEhF,QACG,QAAQ,cAAc,EACtB,YAAY,yBAAyB,EACrC,OAAO,UAAU,yCAAyC,EAC1D;AAAA,EAAO,CAAC,IAAI,MACX,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,SAAK,EAAE,OAAO,MAAM,EAAE,eAAe,EAAE,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;AAAA,EACnE,CAAC;AACH;AAEF,QACG,QAAQ,SAAS,EACjB,YAAY,qEAAqE,EACjF;AAAA,EAAO,MACN,IAAI,YAAY;AACd,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,MAAM,MAAM,8BAA8B,GAAG,SAAS;AAClE,UAAI,IAAI,GAAI,WAAW,MAAM,IAAI,KAAK,GAA4B;AAAA,IACpE,QAAQ;AAAA,IAER;AACA,UAAM,kBAAkB,QAAQ,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAClE,QAAI,SAAS,GAAG;AACd,WAAK,EAAE,SAAS,SAAS,QAAQ,UAAU,MAAM,gBAAgB,CAAC;AAClE;AAAA,IACF;AACA,YAAQ,IAAI,GAAG,GAAG,KAAK,OAAO,EAAE;AAChC,QAAI,iBAAiB;AACnB,cAAQ,IAAI,sBAAsB,MAAM,gCAA2B;AAAA,IACrE;AAAA,EACF,CAAC;AACH;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,gEAAgE,EAC5E,OAAO,WAAW,gDAAgD,EAClE;AAAA,EAAO,CAAC,SACP,IAAI,YAAY;AACd,UAAM,OAAO,CAAC,WAAW,MAAM,GAAG,GAAG,SAAS;AAC9C,QAAI,KAAK,OAAO;AACd,cAAQ,IAAI,OAAO,KAAK,KAAK,GAAG,CAAC,EAAE;AACnC;AAAA,IACF;AACA,YAAQ,MAAM,YAAY,GAAG,SAAS,KAAK,KAAK,GAAG,CAAC,SAAI;AACxD,UAAM,IAAI,UAAU,OAAO,MAAM,EAAE,OAAO,UAAU,CAAC;AACrD,QAAI,EAAE,WAAW,GAAG;AAClB,cAAQ;AAAA,QACN;AAAA,gDAAmD,GAAG,oCACpC,GAAG;AAAA,MACvB;AACA,cAAQ,WAAW,EAAE,UAAU;AAAA,IACjC;AAAA,EACF,CAAC;AACH;AAEF,QACG,QAAQ,WAAW,EACnB,YAAY,0EAA0E,EACtF;AAAA,EAAO,MACN,IAAI,YAAY;AACd,UAAM,MAAM,UAAU;AACtB,WAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC5C,YAAQ,MAAM,4BAA4B,GAAG,GAAG;AAChD,YAAQ;AAAA,MACN;AAAA,cAAmE,GAAG;AAAA,IACxE;AAAA,EACF,CAAC;AACH;AAEF,QAAQ,WAAW,QAAQ,IAAI;","names":[]}
+{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n\nimport { spawnSync } from \"node:child_process\";\nimport { readFileSync, rmSync } from \"node:fs\";\nimport { createRequire } from \"node:module\";\nimport { createInterface } from \"node:readline/promises\";\n\nimport { Command } from \"commander\";\n\nimport { agentClientId, appBaseFrom, loginDevice, openBrowser } from \"./auth.js\";\nimport { PayboxClient, didNotHappen } from \"./client.js\";\nimport { configDir, configFile, loadConfig, saveConfig } from \"./config.js\";\n\nconst DEFAULT_BASE_URL = \"https://api.paybox.sh\";\nconst PKG = \"@paybox-sh/sdk\";\nconst VERSION = createRequire(import.meta.url)(\"../package.json\").version as string;\n\nconst program = new Command();\nprogram\n  .name(\"paybox\")\n  .description(\"PayBox agent CLI — vaulted cards, wallets, and secrets for agents\")\n  .version(VERSION)\n  .option(\"--base-url <url>\", \"API origin (default https://api.paybox.sh or stored)\")\n  .option(\"--json\", \"machine-readable JSON output\");\n\nfunction jsonMode(): boolean {\n  return Boolean(program.opts().json);\n}\n\nfunction emit(data: unknown): void {\n  if (jsonMode()) console.log(JSON.stringify(data, null, 2));\n  else console.dir(data, { depth: null, colors: process.stdout.isTTY });\n  const d = data as { status?: unknown; response?: { status?: unknown } } | null;\n  if (didNotHappen(d) || didNotHappen(d?.response)) process.exitCode = 1;\n}\n\nfunction client(): PayboxClient {\n  return PayboxClient.fromConfig({ baseUrl: program.opts().baseUrl });\n}\n\nfunction readIntent(value: string): unknown {\n  const raw = value.startsWith(\"@\") ? readFileSync(value.slice(1), \"utf8\") : value;\n  return JSON.parse(raw);\n}\n\nfunction int(flag: string, value: string): number {\n  const n = Number(value);\n  if (!Number.isInteger(n)) {\n    throw new Error(`--${flag} must be an integer, got ${JSON.stringify(value)}`);\n  }\n  return n;\n}\n\nfunction optInt(flag: string, value: string | undefined): number | undefined {\n  return value === undefined ? undefined : int(flag, value);\n}\n\nconst UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nfunction credentialId(value: string): string {\n  return uuid(\n    value,\n    \"--credential expects a credential id, not a name\",\n    \"Run `paybox credentials` and use the `credential.id` of the one you want.\",\n  );\n}\n\nfunction requestId(value: string): string {\n  return uuid(\n    value,\n    \"not a request id\",\n    \"Request ids come back from the command that created the request, and from `paybox requests`.\",\n  );\n}\n\nfunction uuid(value: string, what: string, hint: string): string {\n  if (UUID.test(value)) return value;\n  throw new Error(`${what}: got ${JSON.stringify(value)}. ${hint}`);\n}\n\nfunction isNewer(a: string, b: string): boolean {\n  const pa = a.split(\".\").map(Number);\n  const pb = b.split(\".\").map(Number);\n  for (let i = 0; i < 3; i++) {\n    const x = pa[i] ?? 0;\n    const y = pb[i] ?? 0;\n    if (x !== y) return x > y;\n  }\n  return false;\n}\n\nasync function prompt(question: string): Promise<string> {\n  if (!process.stdin.isTTY) return \"\";\n  const rl = createInterface({ input: process.stdin, output: process.stderr });\n  try {\n    return (await rl.question(question)).trim();\n  } finally {\n    rl.close();\n  }\n}\n\nasync function run(fn: () => Promise<void>): Promise<void> {\n  try {\n    await fn();\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    if (jsonMode()) console.log(JSON.stringify({ error: message }, null, 2));\n    else console.error(message);\n    process.exitCode = 1;\n  }\n}\n\nfunction warnIfUnsignable(c: PayboxClient, status: string): void {\n  if (status === \"pending_signature\" && !c.canSign) {\n    console.error(\n      \"awaiting signatures but no valid pbxk1. signing key is set — \" +\n        \"set PAYBOX_SIGNING_KEY and re-run `paybox login`, then poll `paybox request <id>`.\",\n    );\n  }\n}\n\nprogram\n  .command(\"login\")\n  .description(\"Authenticate via OAuth (browser + passkey), or store a pbx_live_ key\")\n  .option(\"--key <key>\", \"store a pbx_live_ personal API key instead of OAuth\")\n  .option(\n    \"--signing-key <token>\",\n    \"store a pbxk1. wallet signing key; prefer PAYBOX_SIGNING_KEY (an argument is visible in shell history)\",\n  )\n  .option(\"--app-url <url>\", \"PayBox app origin for key provisioning (default: derived from --base-url)\")\n  .option(\"--no-provision\", \"skip the wallet signing-key provisioning step\")\n  .action((opts) =>\n    run(async () => {\n      const cfg = loadConfig();\n      const baseUrl = (\n        program.opts().baseUrl ??\n        process.env.PAYBOX_API_URL ??\n        cfg.baseUrl ??\n        DEFAULT_BASE_URL\n      ).replace(/\\/+$/, \"\");\n      cfg.baseUrl = baseUrl;\n      if (opts.appUrl) cfg.appUrl = opts.appUrl;\n\n      const keepExistingLogin = Boolean(opts.signingKey) && Boolean(cfg.apiKey ?? cfg.oauth);\n      if (opts.key) {\n        cfg.apiKey = opts.key;\n        delete cfg.oauth;\n      } else if (!keepExistingLogin) {\n        cfg.oauth = await loginDevice(baseUrl);\n        delete cfg.apiKey;\n      }\n      if (opts.signingKey) cfg.signingKey = opts.signingKey;\n      saveConfig(cfg);\n      console.error(`Saved credentials to ${configFile()}`);\n\n      if (!cfg.oauth || opts.signingKey || opts.provision === false) return;\n      const cid = agentClientId(cfg.oauth.accessToken);\n      const appBase = appBaseFrom(baseUrl, opts.appUrl ?? process.env.PAYBOX_APP_URL ?? cfg.appUrl);\n      if (!cid || !appBase) {\n        console.error(\n          \"To enable wallet sign/swap, provision a signing key, then set\\n\" +\n            \"  PAYBOX_SIGNING_KEY=<pbxk1...>  and re-run `paybox login`\" +\n            (cid && !appBase ? \" (or pass --app-url <paybox app origin>)\" : \"\"),\n        );\n        return;\n      }\n      const url = `${appBase}/agent-key?client_id=${cid}`;\n      console.error(\n        `\\nNext, provision a wallet signing key for this agent (needed for sign/swap):\\n  ${url}\\n`,\n      );\n      openBrowser(url);\n      const key = process.stdin.isTTY\n        ? await prompt(\"Paste the pbxk1. signing key when ready (or Enter to skip): \")\n        : (process.env.PAYBOX_SIGNING_KEY ?? \"\").trim();\n      if (key) {\n        cfg.signingKey = key;\n        saveConfig(cfg);\n        console.error(\"Signing key saved — sign/swap enabled.\");\n      } else if (process.stdin.isTTY) {\n        console.error(\n          \"Skipped — provision one later by setting PAYBOX_SIGNING_KEY and re-running `paybox login`.\",\n        );\n      } else {\n        console.error(\n          \"No signing key configured, so sign and swap will stop at pending_signature.\\n\" +\n            \"Set PAYBOX_SIGNING_KEY to the `pbxk1.` token and re-run `paybox login`.\",\n        );\n      }\n    }),\n  );\n\nprogram\n  .command(\"logout\")\n  .description(\"Forget stored credentials\")\n  .action(() =>\n    run(async () => {\n      const cfg = loadConfig();\n      delete cfg.apiKey;\n      delete cfg.oauth;\n      delete cfg.signingKey;\n      saveConfig(cfg);\n      console.error(\"Logged out.\");\n    }),\n  );\n\nprogram\n  .command(\"whoami\")\n  .description(\"Show the configured endpoint, auth mode, and signing capability\")\n  .action(() =>\n    run(async () => {\n      const cfg = loadConfig();\n      const c = client();\n      const mode = process.env.PAYBOX_ACCESS_TOKEN\n        ? \"oauth (env token)\"\n        : process.env.PAYBOX_API_KEY || cfg.apiKey\n          ? \"api key\"\n          : cfg.oauth\n            ? \"oauth\"\n            : \"none\";\n      emit({ baseUrl: c.baseUrl, auth: mode, canSign: c.canSign, configFile: configFile() });\n    }),\n  );\n\nprogram\n  .command(\"credentials\")\n  .description(\"List the credentials this client may use\")\n  .action(() => run(async () => emit(await client().listCredentials())));\n\nprogram\n  .command(\"pay\")\n  .description(\"Charge a card credential\")\n  .requiredOption(\"--credential <id>\", \"credential id from `paybox credentials`\")\n  .requiredOption(\"--merchant <name>\")\n  .requiredOption(\"--url <url>\", \"real merchant URL the card is bound to\")\n  .requiredOption(\"--amount <cents>\", \"amount in cents\")\n  .option(\"--currency <code>\", \"ISO 4217 currency\", \"USD\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().requestPayment({\n          credentialId: credentialId(o.credential),\n          merchant: o.merchant,\n          merchantUrl: o.url,\n          amountCents: int(\"amount\", o.amount),\n          currency: o.currency,\n        }),\n      ),\n    ),\n  );\n\nprogram\n  .command(\"secret\")\n  .description(\"Reveal a secret credential (one-time token, or --raw value)\")\n  .requiredOption(\"--credential <id>\", \"credential id from `paybox credentials`\")\n  .option(\"--raw\", \"return the raw secret value (grant-gated)\")\n  .option(\"--purpose <text>\", \"why the secret is requested (shown on approval)\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().requestSecret({\n          credentialId: credentialId(o.credential),\n          raw: Boolean(o.raw),\n          purpose: o.purpose,\n        }),\n      ),\n    ),\n  );\n\nprogram\n  .command(\"sign\")\n  .description(\"Sign with a wallet credential (intent JSON, or @file)\")\n  .requiredOption(\"--credential <id>\", \"credential id from `paybox credentials`\")\n  .requiredOption(\"--intent <json>\", 'a SignIntent, e.g. \\'{\"op\":\"message\",\"message\":\"hi\"}\\' or @intent.json')\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const res = await c.requestWalletSign({\n        credentialId: credentialId(o.credential),\n        intent: readIntent(o.intent) as never,\n      });\n      warnIfUnsignable(c, res.status);\n      emit(res);\n    }),\n  );\n\nprogram\n  .command(\"swap\")\n  .description(\"Swap tokens from a wallet credential\")\n  .requiredOption(\"--credential <id>\", \"credential id from `paybox credentials`\")\n  .requiredOption(\"--src-chain <caip2>\")\n  .requiredOption(\"--src-token <addr>\", '\"native\" or a token address')\n  .requiredOption(\"--dst-token <addr>\")\n  .requiredOption(\"--amount <smallest-unit>\", \"source amount in smallest units\")\n  .option(\"--dst-chain <caip2>\", \"defaults to --src-chain\")\n  .option(\"--direction <dir>\", \"exact-amount-in | exact-amount-out\", \"exact-amount-in\")\n  .option(\"--slippage <bps>\", \"slippage in bps\", \"150\")\n  .option(\"--recipient <addr>\")\n  .option(\"--value-cents <n>\")\n  .option(\"--wait\", \"if approval is required, wait for it and then sign in-process\")\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const result = await c.requestSwap(\n        {\n          credentialId: credentialId(o.credential),\n          srcChain: o.srcChain,\n          dstChain: o.dstChain,\n          srcToken: o.srcToken,\n          dstToken: o.dstToken,\n          amount: o.amount,\n          swapDirection: o.direction,\n          slippageBps: int(\"slippage\", o.slippage),\n          recipient: o.recipient,\n          valueCents: optInt(\"value-cents\", o.valueCents),\n        },\n        { waitForApproval: Boolean(o.wait) },\n      );\n      warnIfUnsignable(c, result.response.status);\n      emit(result);\n    }),\n  );\n\nprogram\n  .command(\"discover [query]\")\n  .description(\"Discover curated paid x402 services from Bazaar (optional search)\")\n  .option(\"--raw\", \"return uncurated compact Bazaar service summaries (debug)\")\n  .action((query, o) =>\n    run(async () => emit(await client().discoverServices(query, { raw: Boolean(o.raw) }))),\n  );\n\nprogram\n  .command(\"pay-x402\")\n  .description(\"Pay a paid x402 endpoint (header mode — returns the X-PAYMENT header to replay)\")\n  .requiredOption(\"--credential <id>\", \"credential id from `paybox credentials`\")\n  .requiredOption(\"--accepts <json>\", \"the 402's accepts[] array (JSON or @file)\")\n  .requiredOption(\"--url <url>\", \"the paywalled resource URL\")\n  .option(\"--wait\", \"if approval is required, wait for it and then sign in-process\")\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const result = await c.payX402(\n        {\n          credentialId: credentialId(o.credential),\n          accepts: readIntent(o.accepts) as unknown[],\n          resourceUrl: o.url,\n        },\n        { waitForApproval: Boolean(o.wait) },\n      );\n      warnIfUnsignable(c, result.response.status);\n      emit(result);\n    }),\n  );\n\nprogram\n  .command(\"use-service\")\n  .description(\"Fetch a paid x402 resource and have paybox pay for it (gateway mode)\")\n  .requiredOption(\"--credential <id>\", \"credential id from `paybox credentials`\")\n  .requiredOption(\"--url <url>\", \"the paid x402 resource URL\")\n  .option(\"--method <verb>\", \"HTTP method\", \"GET\")\n  .option(\"--body <json>\", \"request body (JSON or @file)\")\n  .option(\"--wait\", \"if approval is required, wait for it and then sign in-process\")\n  .action((o) =>\n    run(async () => {\n      const c = client();\n      const result = await c.useService(\n        {\n          credentialId: credentialId(o.credential),\n          url: o.url,\n          method: o.method,\n          body: o.body === undefined ? undefined : readIntent(o.body),\n        },\n        { waitForApproval: Boolean(o.wait) },\n      );\n      warnIfUnsignable(c, result.response.status);\n      emit(result);\n    }),\n  );\n\nprogram\n  .command(\"portfolio\")\n  .description(\"List a wallet address's token balances across chains\")\n  .requiredOption(\"--address <addr>\")\n  .option(\"--networks <ids>\", 'comma-separated network IDs, e.g. \"1,8453\"')\n  .action((o) =>\n    run(async () =>\n      emit(await client().getPortfolio({ address: o.address, networkIds: o.networks })),\n    ),\n  );\n\nprogram\n  .command(\"verify-solana-balance\")\n  .description(\"Verify a Solana transaction's wallet/token effect and current balance\")\n  .requiredOption(\"--address <addr>\", \"canonical Solana wallet address\")\n  .requiredOption(\"--mint <addr>\", \"canonical SPL or Token-2022 mint\")\n  .requiredOption(\"--transaction <signature>\", \"confirmed Solana transaction signature\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().verifySolanaBalance({\n          address: o.address,\n          tokenMint: o.mint,\n          transactionSignature: o.transaction,\n        }),\n      ),\n    ),\n  );\n\nprogram\n  .command(\"claim <request-id>\")\n  .description(\"Claim the usable card credentials of an approved payment (one-time)\")\n  .action((id) => run(async () => emit(await client().claimPaymentCredentials(requestId(id)))));\n\nprogram\n  .command(\"account-change\")\n  .description(\"Get a manage_url for the USER to update this client's access in the app\")\n  .option(\"--note <text>\", \"why the change is needed (shown to the user)\")\n  .action((o) => run(async () => emit(await client().requestAccountChange(o.note))));\n\nprogram\n  .command(\"buy-link\")\n  .description(\"Signed MoonPay checkout URL funding a granted wallet (charges nothing)\")\n  .requiredOption(\"--credential <id>\", \"a granted wallet credential\")\n  .option(\n    \"--destination <chain>\",\n    \"exact network: eip155:8453 (default EVM), eip155:1, or solana:mainnet\",\n  )\n  .option(\"--currency <code>\", \"enabled MoonPay code matching the exact destination\")\n  .option(\"--amount-usd <n>\", \"prefill amount in USD\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().getBuyLink({\n          credentialId: credentialId(o.credential),\n          destinationChain: o.destination,\n          currencyCode: o.currency,\n          amountUsd: o.amountUsd === undefined ? undefined : Number(o.amountUsd),\n        }),\n      ),\n    ),\n  );\n\nconst world = program\n  .command(\"world\")\n  .description(\"World prediction markets (requires the world plugin)\");\n\nworld\n  .command(\"markets\")\n  .description(\"Browse markets (or events with --events)\")\n  .option(\"--events\", \"list events (each groups its markets)\")\n  .option(\"--limit <n>\")\n  .option(\"--cursor <n>\", \"rows to skip; the response carries the next cursor\")\n  .option(\"--event-ticker <ticker>\")\n  .option(\"--series-ticker <ticker>\")\n  .option(\"--status <status>\", \"active | initialized | determined | finalized\")\n  .action((o) =>\n    run(async () =>\n      emit(\n        await client().worldMarkets({\n          events: Boolean(o.events),\n          limit: optInt(\"limit\", o.limit),\n          cursor: optInt(\"cursor\", o.cursor),\n          eventTicker: o.eventTicker,\n          seriesTicker: o.seriesTicker,\n          status: o.status,\n        }),\n      ),\n    ),\n  );\n\nworld\n  .command(\"market <event-ticker>\")\n  .description(\"One event with its nested markets (disable with --no-nested)\")\n  .option(\"--no-nested\", \"exclude the event's markets\")\n  .action((ticker, o) =>\n    run(async () => emit(await client().worldMarket(ticker, Boolean(o.nested)))),\n  );\n\nworld\n  .command(\"orderbook <id>\")\n  .description(\"A market's orderbook (id is a ticker, or a mint with --by-mint)\")\n  .option(\"--by-mint\", \"look up by outcome mint instead of ticker\")\n  .action((id, o) =>\n    run(async () => emit(await client().worldOrderbook(id, Boolean(o.byMint)))),\n  );\n\nworld\n  .command(\"prices <ticker>\")\n  .description(\"A market's price history\")\n  .requiredOption(\"--start <unix-ts>\")\n  .requiredOption(\"--end <unix-ts>\")\n  .option(\"--resolution <n>\")\n  .action((ticker, o) =>\n    run(async () =>\n      emit(\n        await client().worldPrices({\n          ticker,\n          startTs: int(\"start\", o.start),\n          endTs: int(\"end\", o.end),\n          resolution: optInt(\"resolution\", o.resolution),\n        }),\n      ),\n    ),\n  );\n\nworld\n  .command(\"filter-mints <addresses...>\")\n  .description(\"Filter addresses down to World outcome mints\")\n  .action((addresses) =>\n    run(async () => emit(await client().worldFilterOutcomeMints(addresses))),\n  );\n\nworld\n  .command(\"positions <address>\")\n  .description(\"Solana token positions for an address\")\n  .action((address) => run(async () => emit(await client().worldPositions(address))));\n\nconst hyperliquid = program\n  .command(\"hyperliquid\")\n  .description(\"Hyperliquid spot discovery (requires the hyperliquid plugin)\");\n\nhyperliquid\n  .command(\"markets\")\n  .description(\"Spot markets\")\n  .action(() => run(async () => emit(await client().hyperliquidMarkets())));\n\nhyperliquid\n  .command(\"prices\")\n  .description(\"Spot prices\")\n  .action(() => run(async () => emit(await client().hyperliquidPrices())));\n\nhyperliquid\n  .command(\"token <name>\")\n  .description(\"Resolve one token by name\")\n  .action((name) => run(async () => emit(await client().hyperliquidToken(name))));\n\nprogram\n  .command(\"request <id>\")\n  .description(\"Poll a request's status\")\n  .option(\"--wait\", \"block until it leaves the pending state\")\n  .action((id, o) =>\n    run(async () => {\n      const c = client();\n      const rid = requestId(id);\n      emit(o.wait ? await c.waitForRequest(rid) : await c.getRequest(rid));\n    }),\n  );\n\nprogram\n  .command(\"version\")\n  .description(\"Show the installed CLI version (and whether an update is available)\")\n  .action(() =>\n    run(async () => {\n      let latest: string | undefined;\n      try {\n        const res = await fetch(`https://registry.npmjs.org/${PKG}/latest`);\n        if (res.ok) latest = ((await res.json()) as { version?: string }).version;\n      } catch {\n      }\n      const updateAvailable = Boolean(latest && isNewer(latest, VERSION));\n      if (jsonMode()) {\n        emit({\n          version: VERSION,\n          latest: latest ?? null,\n          updateAvailable,\n          binary: process.argv[1] ?? null,\n        });\n        return;\n      }\n      console.log(`${PKG} v${VERSION}`);\n      if (updateAvailable) {\n        console.log(`Update available: v${latest} — run \\`paybox update\\`.`);\n      }\n    }),\n  );\n\nprogram\n  .command(\"update\")\n  .description(\"Update the globally-installed paybox CLI to the latest version\")\n  .option(\"--print\", \"print the update command instead of running it\")\n  .action((opts) =>\n    run(async () => {\n      const args = [\"install\", \"-g\", `${PKG}@latest`];\n      if (opts.print) {\n        console.log(`npm ${args.join(\" \")}`);\n        return;\n      }\n      console.error(`Updating ${PKG} (npm ${args.join(\" \")})…`);\n      const r = spawnSync(\"npm\", args, { stdio: \"inherit\" });\n      if (r.status !== 0) {\n        console.error(\n          `\\nIf this isn't a global install: run \\`pnpm up ${PKG}\\` in your project, ` +\n            `or use \\`npx ${PKG}@latest …\\` to always run the latest.`,\n        );\n        process.exitCode = r.status ?? 1;\n      }\n    }),\n  );\n\nprogram\n  .command(\"uninstall\")\n  .description(\"Remove stored PayBox credentials/config (and show how to remove the CLI)\")\n  .action(() =>\n    run(async () => {\n      const dir = configDir();\n      rmSync(dir, { recursive: true, force: true });\n      console.error(`Removed stored config at ${dir}.`);\n      console.error(\n        `The CLI binary is managed by npm — remove it with:\\n  npm rm -g ${PKG}`,\n      );\n    }),\n  );\n\nfunction rejectUnknownCommand(argv: string[]): void {\n  if (!argv.includes(\"--help\") && !argv.includes(\"-h\")) return;\n  let node: Command = program;\n  for (let i = 2; i < argv.length; i++) {\n    const arg = argv[i];\n    if (node.options.some((o) => o.long === arg && o.required)) i++;\n    if (arg.startsWith(\"-\")) continue;\n    const next = node.commands.find((c) => c.name() === arg || c.aliases().includes(arg));\n    if (next) {\n      node = next;\n      continue;\n    }\n    if (node.commands.length === 0) return;\n    if (node === program && arg === \"help\") return;\n    program.error(`error: unknown command '${arg}'`);\n  }\n}\n\nrejectUnknownCommand(process.argv);\nprogram.parseAsync(process.argv);\n"],"mappings":";;;;;;;;;;;;;;;AAEA,SAAS,iBAAiB;AAC1B,SAAS,cAAc,cAAc;AACrC,SAAS,qBAAqB;AAC9B,SAAS,uBAAuB;AAEhC,SAAS,eAAe;AAMxB,IAAM,mBAAmB;AACzB,IAAM,MAAM;AACZ,IAAM,UAAU,cAAc,YAAY,GAAG,EAAE,iBAAiB,EAAE;AAElE,IAAM,UAAU,IAAI,QAAQ;AAC5B,QACG,KAAK,QAAQ,EACb,YAAY,wEAAmE,EAC/E,QAAQ,OAAO,EACf,OAAO,oBAAoB,sDAAsD,EACjF,OAAO,UAAU,8BAA8B;AAElD,SAAS,WAAoB;AAC3B,SAAO,QAAQ,QAAQ,KAAK,EAAE,IAAI;AACpC;AAEA,SAAS,KAAK,MAAqB;AACjC,MAAI,SAAS,EAAG,SAAQ,IAAI,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA,MACpD,SAAQ,IAAI,MAAM,EAAE,OAAO,MAAM,QAAQ,QAAQ,OAAO,MAAM,CAAC;AACpE,QAAM,IAAI;AACV,MAAI,aAAa,CAAC,KAAK,aAAa,GAAG,QAAQ,EAAG,SAAQ,WAAW;AACvE;AAEA,SAAS,SAAuB;AAC9B,SAAO,aAAa,WAAW,EAAE,SAAS,QAAQ,KAAK,EAAE,QAAQ,CAAC;AACpE;AAEA,SAAS,WAAW,OAAwB;AAC1C,QAAM,MAAM,MAAM,WAAW,GAAG,IAAI,aAAa,MAAM,MAAM,CAAC,GAAG,MAAM,IAAI;AAC3E,SAAO,KAAK,MAAM,GAAG;AACvB;AAEA,SAAS,IAAI,MAAc,OAAuB;AAChD,QAAM,IAAI,OAAO,KAAK;AACtB,MAAI,CAAC,OAAO,UAAU,CAAC,GAAG;AACxB,UAAM,IAAI,MAAM,KAAK,IAAI,4BAA4B,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC9E;AACA,SAAO;AACT;AAEA,SAAS,OAAO,MAAc,OAA+C;AAC3E,SAAO,UAAU,SAAY,SAAY,IAAI,MAAM,KAAK;AAC1D;AAEA,IAAM,OAAO;AAEb,SAAS,aAAa,OAAuB;AAC3C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,UAAU,OAAuB;AACxC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,KAAK,OAAe,MAAc,MAAsB;AAC/D,MAAI,KAAK,KAAK,KAAK,EAAG,QAAO;AAC7B,QAAM,IAAI,MAAM,GAAG,IAAI,SAAS,KAAK,UAAU,KAAK,CAAC,KAAK,IAAI,EAAE;AAClE;AAEA,SAAS,QAAQ,GAAW,GAAoB;AAC9C,QAAM,KAAK,EAAE,MAAM,GAAG,EAAE,IAAI,MAAM;AAClC,QAAM,KAAK,EAAE,MAAM,GAAG,EAAE,IAAI,MAAM;AAClC,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK;AAC1B,UAAM,IAAI,GAAG,CAAC,KAAK;AACnB,UAAM,IAAI,GAAG,CAAC,KAAK;AACnB,QAAI,MAAM,EAAG,QAAO,IAAI;AAAA,EAC1B;AACA,SAAO;AACT;AAEA,eAAe,OAAO,UAAmC;AACvD,MAAI,CAAC,QAAQ,MAAM,MAAO,QAAO;AACjC,QAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAC3E,MAAI;AACF,YAAQ,MAAM,GAAG,SAAS,QAAQ,GAAG,KAAK;AAAA,EAC5C,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;AAEA,eAAe,IAAI,IAAwC;AACzD,MAAI;AACF,UAAM,GAAG;AAAA,EACX,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,QAAI,SAAS,EAAG,SAAQ,IAAI,KAAK,UAAU,EAAE,OAAO,QAAQ,GAAG,MAAM,CAAC,CAAC;AAAA,QAClE,SAAQ,MAAM,OAAO;AAC1B,YAAQ,WAAW;AAAA,EACrB;AACF;AAEA,SAAS,iBAAiB,GAAiB,QAAsB;AAC/D,MAAI,WAAW,uBAAuB,CAAC,EAAE,SAAS;AAChD,YAAQ;AAAA,MACN;AAAA,IAEF;AAAA,EACF;AACF;AAEA,QACG,QAAQ,OAAO,EACf,YAAY,sEAAsE,EAClF,OAAO,eAAe,qDAAqD,EAC3E;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,mBAAmB,2EAA2E,EACrG,OAAO,kBAAkB,+CAA+C,EACxE;AAAA,EAAO,CAAC,SACP,IAAI,YAAY;AACd,UAAM,MAAM,WAAW;AACvB,UAAM,WACJ,QAAQ,KAAK,EAAE,WACf,QAAQ,IAAI,kBACZ,IAAI,WACJ,kBACA,QAAQ,QAAQ,EAAE;AACpB,QAAI,UAAU;AACd,QAAI,KAAK,OAAQ,KAAI,SAAS,KAAK;AAEnC,UAAM,oBAAoB,QAAQ,KAAK,UAAU,KAAK,QAAQ,IAAI,UAAU,IAAI,KAAK;AACrF,QAAI,KAAK,KAAK;AACZ,UAAI,SAAS,KAAK;AAClB,aAAO,IAAI;AAAA,IACb,WAAW,CAAC,mBAAmB;AAC7B,UAAI,QAAQ,MAAM,YAAY,OAAO;AACrC,aAAO,IAAI;AAAA,IACb;AACA,QAAI,KAAK,WAAY,KAAI,aAAa,KAAK;AAC3C,eAAW,GAAG;AACd,YAAQ,MAAM,wBAAwB,WAAW,CAAC,EAAE;AAEpD,QAAI,CAAC,IAAI,SAAS,KAAK,cAAc,KAAK,cAAc,MAAO;AAC/D,UAAM,MAAM,cAAc,IAAI,MAAM,WAAW;AAC/C,UAAM,UAAU,YAAY,SAAS,KAAK,UAAU,QAAQ,IAAI,kBAAkB,IAAI,MAAM;AAC5F,QAAI,CAAC,OAAO,CAAC,SAAS;AACpB,cAAQ;AAAA,QACN,+HAEG,OAAO,CAAC,UAAU,6CAA6C;AAAA,MACpE;AACA;AAAA,IACF;AACA,UAAM,MAAM,GAAG,OAAO,wBAAwB,GAAG;AACjD,YAAQ;AAAA,MACN;AAAA;AAAA,IAAoF,GAAG;AAAA;AAAA,IACzF;AACA,gBAAY,GAAG;AACf,UAAM,MAAM,QAAQ,MAAM,QACtB,MAAM,OAAO,8DAA8D,KAC1E,QAAQ,IAAI,sBAAsB,IAAI,KAAK;AAChD,QAAI,KAAK;AACP,UAAI,aAAa;AACjB,iBAAW,GAAG;AACd,cAAQ,MAAM,6CAAwC;AAAA,IACxD,WAAW,QAAQ,MAAM,OAAO;AAC9B,cAAQ;AAAA,QACN;AAAA,MACF;AAAA,IACF,OAAO;AACL,cAAQ;AAAA,QACN;AAAA,MAEF;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,2BAA2B,EACvC;AAAA,EAAO,MACN,IAAI,YAAY;AACd,UAAM,MAAM,WAAW;AACvB,WAAO,IAAI;AACX,WAAO,IAAI;AACX,WAAO,IAAI;AACX,eAAW,GAAG;AACd,YAAQ,MAAM,aAAa;AAAA,EAC7B,CAAC;AACH;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,iEAAiE,EAC7E;AAAA,EAAO,MACN,IAAI,YAAY;AACd,UAAM,MAAM,WAAW;AACvB,UAAM,IAAI,OAAO;AACjB,UAAM,OAAO,QAAQ,IAAI,sBACrB,sBACA,QAAQ,IAAI,kBAAkB,IAAI,SAChC,YACA,IAAI,QACF,UACA;AACR,SAAK,EAAE,SAAS,EAAE,SAAS,MAAM,MAAM,SAAS,EAAE,SAAS,YAAY,WAAW,EAAE,CAAC;AAAA,EACvF,CAAC;AACH;AAEF,QACG,QAAQ,aAAa,EACrB,YAAY,0CAA0C,EACtD,OAAO,MAAM,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEvE,QACG,QAAQ,KAAK,EACb,YAAY,0BAA0B,EACtC,eAAe,qBAAqB,yCAAyC,EAC7E,eAAe,mBAAmB,EAClC,eAAe,eAAe,wCAAwC,EACtE,eAAe,oBAAoB,iBAAiB,EACpD,OAAO,qBAAqB,qBAAqB,KAAK,EACtD;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,eAAe;AAAA,QAC5B,cAAc,aAAa,EAAE,UAAU;AAAA,QACvC,UAAU,EAAE;AAAA,QACZ,aAAa,EAAE;AAAA,QACf,aAAa,IAAI,UAAU,EAAE,MAAM;AAAA,QACnC,UAAU,EAAE;AAAA,MACd,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,6DAA6D,EACzE,eAAe,qBAAqB,yCAAyC,EAC7E,OAAO,SAAS,2CAA2C,EAC3D,OAAO,oBAAoB,iDAAiD,EAC5E;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,cAAc;AAAA,QAC3B,cAAc,aAAa,EAAE,UAAU;AAAA,QACvC,KAAK,QAAQ,EAAE,GAAG;AAAA,QAClB,SAAS,EAAE;AAAA,MACb,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,QACG,QAAQ,MAAM,EACd,YAAY,uDAAuD,EACnE,eAAe,qBAAqB,yCAAyC,EAC7E,eAAe,mBAAmB,sEAAwE,EAC1G;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,MAAM,MAAM,EAAE,kBAAkB;AAAA,MACpC,cAAc,aAAa,EAAE,UAAU;AAAA,MACvC,QAAQ,WAAW,EAAE,MAAM;AAAA,IAC7B,CAAC;AACD,qBAAiB,GAAG,IAAI,MAAM;AAC9B,SAAK,GAAG;AAAA,EACV,CAAC;AACH;AAEF,QACG,QAAQ,MAAM,EACd,YAAY,sCAAsC,EAClD,eAAe,qBAAqB,yCAAyC,EAC7E,eAAe,qBAAqB,EACpC,eAAe,sBAAsB,6BAA6B,EAClE,eAAe,oBAAoB,EACnC,eAAe,4BAA4B,iCAAiC,EAC5E,OAAO,uBAAuB,yBAAyB,EACvD,OAAO,qBAAqB,sCAAsC,iBAAiB,EACnF,OAAO,oBAAoB,mBAAmB,KAAK,EACnD,OAAO,oBAAoB,EAC3B,OAAO,mBAAmB,EAC1B,OAAO,UAAU,+DAA+D,EAChF;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,SAAS,MAAM,EAAE;AAAA,MACrB;AAAA,QACE,cAAc,aAAa,EAAE,UAAU;AAAA,QACvC,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,QACZ,UAAU,EAAE;AAAA,QACZ,QAAQ,EAAE;AAAA,QACV,eAAe,EAAE;AAAA,QACjB,aAAa,IAAI,YAAY,EAAE,QAAQ;AAAA,QACvC,WAAW,EAAE;AAAA,QACb,YAAY,OAAO,eAAe,EAAE,UAAU;AAAA,MAChD;AAAA,MACA,EAAE,iBAAiB,QAAQ,EAAE,IAAI,EAAE;AAAA,IACrC;AACA,qBAAiB,GAAG,OAAO,SAAS,MAAM;AAC1C,SAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEF,QACG,QAAQ,kBAAkB,EAC1B,YAAY,mEAAmE,EAC/E,OAAO,SAAS,2DAA2D,EAC3E;AAAA,EAAO,CAAC,OAAO,MACd,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,iBAAiB,OAAO,EAAE,KAAK,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AACvF;AAEF,QACG,QAAQ,UAAU,EAClB,YAAY,sFAAiF,EAC7F,eAAe,qBAAqB,yCAAyC,EAC7E,eAAe,oBAAoB,2CAA2C,EAC9E,eAAe,eAAe,4BAA4B,EAC1D,OAAO,UAAU,+DAA+D,EAChF;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,SAAS,MAAM,EAAE;AAAA,MACrB;AAAA,QACE,cAAc,aAAa,EAAE,UAAU;AAAA,QACvC,SAAS,WAAW,EAAE,OAAO;AAAA,QAC7B,aAAa,EAAE;AAAA,MACjB;AAAA,MACA,EAAE,iBAAiB,QAAQ,EAAE,IAAI,EAAE;AAAA,IACrC;AACA,qBAAiB,GAAG,OAAO,SAAS,MAAM;AAC1C,SAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEF,QACG,QAAQ,aAAa,EACrB,YAAY,sEAAsE,EAClF,eAAe,qBAAqB,yCAAyC,EAC7E,eAAe,eAAe,4BAA4B,EAC1D,OAAO,mBAAmB,eAAe,KAAK,EAC9C,OAAO,iBAAiB,8BAA8B,EACtD,OAAO,UAAU,+DAA+D,EAChF;AAAA,EAAO,CAAC,MACP,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,SAAS,MAAM,EAAE;AAAA,MACrB;AAAA,QACE,cAAc,aAAa,EAAE,UAAU;AAAA,QACvC,KAAK,EAAE;AAAA,QACP,QAAQ,EAAE;AAAA,QACV,MAAM,EAAE,SAAS,SAAY,SAAY,WAAW,EAAE,IAAI;AAAA,MAC5D;AAAA,MACA,EAAE,iBAAiB,QAAQ,EAAE,IAAI,EAAE;AAAA,IACrC;AACA,qBAAiB,GAAG,OAAO,SAAS,MAAM;AAC1C,SAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEF,QACG,QAAQ,WAAW,EACnB,YAAY,sDAAsD,EAClE,eAAe,kBAAkB,EACjC,OAAO,oBAAoB,4CAA4C,EACvE;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF,KAAK,MAAM,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,YAAY,EAAE,SAAS,CAAC,CAAC;AAAA,EAClF;AACF;AAEF,QACG,QAAQ,uBAAuB,EAC/B,YAAY,uEAAuE,EACnF,eAAe,oBAAoB,iCAAiC,EACpE,eAAe,iBAAiB,kCAAkC,EAClE,eAAe,6BAA6B,wCAAwC,EACpF;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,oBAAoB;AAAA,QACjC,SAAS,EAAE;AAAA,QACX,WAAW,EAAE;AAAA,QACb,sBAAsB,EAAE;AAAA,MAC1B,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,QACG,QAAQ,oBAAoB,EAC5B,YAAY,qEAAqE,EACjF,OAAO,CAAC,OAAO,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,wBAAwB,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;AAE9F,QACG,QAAQ,gBAAgB,EACxB,YAAY,yEAAyE,EACrF,OAAO,iBAAiB,8CAA8C,EACtE,OAAO,CAAC,MAAM,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC,CAAC;AAEnF,QACG,QAAQ,UAAU,EAClB,YAAY,wEAAwE,EACpF,eAAe,qBAAqB,6BAA6B,EACjE;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,qBAAqB,qDAAqD,EACjF,OAAO,oBAAoB,uBAAuB,EAClD;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,WAAW;AAAA,QACxB,cAAc,aAAa,EAAE,UAAU;AAAA,QACvC,kBAAkB,EAAE;AAAA,QACpB,cAAc,EAAE;AAAA,QAChB,WAAW,EAAE,cAAc,SAAY,SAAY,OAAO,EAAE,SAAS;AAAA,MACvE,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,IAAM,QAAQ,QACX,QAAQ,OAAO,EACf,YAAY,sDAAsD;AAErE,MACG,QAAQ,SAAS,EACjB,YAAY,0CAA0C,EACtD,OAAO,YAAY,uCAAuC,EAC1D,OAAO,aAAa,EACpB,OAAO,gBAAgB,oDAAoD,EAC3E,OAAO,yBAAyB,EAChC,OAAO,0BAA0B,EACjC,OAAO,qBAAqB,+CAA+C,EAC3E;AAAA,EAAO,CAAC,MACP;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,aAAa;AAAA,QAC1B,QAAQ,QAAQ,EAAE,MAAM;AAAA,QACxB,OAAO,OAAO,SAAS,EAAE,KAAK;AAAA,QAC9B,QAAQ,OAAO,UAAU,EAAE,MAAM;AAAA,QACjC,aAAa,EAAE;AAAA,QACf,cAAc,EAAE;AAAA,QAChB,QAAQ,EAAE;AAAA,MACZ,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,MACG,QAAQ,uBAAuB,EAC/B,YAAY,8DAA8D,EAC1E,OAAO,eAAe,6BAA6B,EACnD;AAAA,EAAO,CAAC,QAAQ,MACf,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,YAAY,QAAQ,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC7E;AAEF,MACG,QAAQ,gBAAgB,EACxB,YAAY,iEAAiE,EAC7E,OAAO,aAAa,2CAA2C,EAC/D;AAAA,EAAO,CAAC,IAAI,MACX,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,eAAe,IAAI,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5E;AAEF,MACG,QAAQ,iBAAiB,EACzB,YAAY,0BAA0B,EACtC,eAAe,mBAAmB,EAClC,eAAe,iBAAiB,EAChC,OAAO,kBAAkB,EACzB;AAAA,EAAO,CAAC,QAAQ,MACf;AAAA,IAAI,YACF;AAAA,MACE,MAAM,OAAO,EAAE,YAAY;AAAA,QACzB;AAAA,QACA,SAAS,IAAI,SAAS,EAAE,KAAK;AAAA,QAC7B,OAAO,IAAI,OAAO,EAAE,GAAG;AAAA,QACvB,YAAY,OAAO,cAAc,EAAE,UAAU;AAAA,MAC/C,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEF,MACG,QAAQ,6BAA6B,EACrC,YAAY,8CAA8C,EAC1D;AAAA,EAAO,CAAC,cACP,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,wBAAwB,SAAS,CAAC,CAAC;AACzE;AAEF,MACG,QAAQ,qBAAqB,EAC7B,YAAY,uCAAuC,EACnD,OAAO,CAAC,YAAY,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,eAAe,OAAO,CAAC,CAAC,CAAC;AAEpF,IAAM,cAAc,QACjB,QAAQ,aAAa,EACrB,YAAY,8DAA8D;AAE7E,YACG,QAAQ,SAAS,EACjB,YAAY,cAAc,EAC1B,OAAO,MAAM,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAE1E,YACG,QAAQ,QAAQ,EAChB,YAAY,aAAa,EACzB,OAAO,MAAM,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAEzE,YACG,QAAQ,cAAc,EACtB,YAAY,2BAA2B,EACvC,OAAO,CAAC,SAAS,IAAI,YAAY,KAAK,MAAM,OAAO,EAAE,iBAAiB,IAAI,CAAC,CAAC,CAAC;AAEhF,QACG,QAAQ,cAAc,EACtB,YAAY,yBAAyB,EACrC,OAAO,UAAU,yCAAyC,EAC1D;AAAA,EAAO,CAAC,IAAI,MACX,IAAI,YAAY;AACd,UAAM,IAAI,OAAO;AACjB,UAAM,MAAM,UAAU,EAAE;AACxB,SAAK,EAAE,OAAO,MAAM,EAAE,eAAe,GAAG,IAAI,MAAM,EAAE,WAAW,GAAG,CAAC;AAAA,EACrE,CAAC;AACH;AAEF,QACG,QAAQ,SAAS,EACjB,YAAY,qEAAqE,EACjF;AAAA,EAAO,MACN,IAAI,YAAY;AACd,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,MAAM,MAAM,8BAA8B,GAAG,SAAS;AAClE,UAAI,IAAI,GAAI,WAAW,MAAM,IAAI,KAAK,GAA4B;AAAA,IACpE,QAAQ;AAAA,IACR;AACA,UAAM,kBAAkB,QAAQ,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAClE,QAAI,SAAS,GAAG;AACd,WAAK;AAAA,QACH,SAAS;AAAA,QACT,QAAQ,UAAU;AAAA,QAClB;AAAA,QACA,QAAQ,QAAQ,KAAK,CAAC,KAAK;AAAA,MAC7B,CAAC;AACD;AAAA,IACF;AACA,YAAQ,IAAI,GAAG,GAAG,KAAK,OAAO,EAAE;AAChC,QAAI,iBAAiB;AACnB,cAAQ,IAAI,sBAAsB,MAAM,gCAA2B;AAAA,IACrE;AAAA,EACF,CAAC;AACH;AAEF,QACG,QAAQ,QAAQ,EAChB,YAAY,gEAAgE,EAC5E,OAAO,WAAW,gDAAgD,EAClE;AAAA,EAAO,CAAC,SACP,IAAI,YAAY;AACd,UAAM,OAAO,CAAC,WAAW,MAAM,GAAG,GAAG,SAAS;AAC9C,QAAI,KAAK,OAAO;AACd,cAAQ,IAAI,OAAO,KAAK,KAAK,GAAG,CAAC,EAAE;AACnC;AAAA,IACF;AACA,YAAQ,MAAM,YAAY,GAAG,SAAS,KAAK,KAAK,GAAG,CAAC,SAAI;AACxD,UAAM,IAAI,UAAU,OAAO,MAAM,EAAE,OAAO,UAAU,CAAC;AACrD,QAAI,EAAE,WAAW,GAAG;AAClB,cAAQ;AAAA,QACN;AAAA,gDAAmD,GAAG,oCACpC,GAAG;AAAA,MACvB;AACA,cAAQ,WAAW,EAAE,UAAU;AAAA,IACjC;AAAA,EACF,CAAC;AACH;AAEF,QACG,QAAQ,WAAW,EACnB,YAAY,0EAA0E,EACtF;AAAA,EAAO,MACN,IAAI,YAAY;AACd,UAAM,MAAM,UAAU;AACtB,WAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC5C,YAAQ,MAAM,4BAA4B,GAAG,GAAG;AAChD,YAAQ;AAAA,MACN;AAAA,cAAmE,GAAG;AAAA,IACxE;AAAA,EACF,CAAC;AACH;AAEF,SAAS,qBAAqB,MAAsB;AAClD,MAAI,CAAC,KAAK,SAAS,QAAQ,KAAK,CAAC,KAAK,SAAS,IAAI,EAAG;AACtD,MAAI,OAAgB;AACpB,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,MAAM,KAAK,CAAC;AAClB,QAAI,KAAK,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,QAAQ,EAAG;AAC5D,QAAI,IAAI,WAAW,GAAG,EAAG;AACzB,UAAM,OAAO,KAAK,SAAS,KAAK,CAAC,MAAM,EAAE,KAAK,MAAM,OAAO,EAAE,QAAQ,EAAE,SAAS,GAAG,CAAC;AACpF,QAAI,MAAM;AACR,aAAO;AACP;AAAA,IACF;AACA,QAAI,KAAK,SAAS,WAAW,EAAG;AAChC,QAAI,SAAS,WAAW,QAAQ,OAAQ;AACxC,YAAQ,MAAM,2BAA2B,GAAG,GAAG;AAAA,EACjD;AACF;AAEA,qBAAqB,QAAQ,IAAI;AACjC,QAAQ,WAAW,QAAQ,IAAI;","names":[]}

package/dist/index.d.ts

@@ -4,8 +4,6 @@ import { Creds } from '@paybox/mcp-app/creds';
 
 interface WalletSignArgs {
     credentialId: string;
-    /** What to sign. The chain, destination, and value are read from the intent —
-     *  there are no separate declared fields. */
     intent: SignIntent;
 }
 interface PaymentArgs {
@@ -26,7 +24,6 @@ interface SwapArgs {
     dstChain?: string;
     srcToken: string;
     dstToken: string;
-    /** Amount in the source token's smallest unit, as a decimal string. */
     amount: string;
     swapDirection?: "exact-amount-in" | "exact-amount-out";
     slippageBps?: number;
@@ -35,7 +32,6 @@ interface SwapArgs {
 }
 interface PortfolioArgs {
     address: string;
-    /** Comma-separated network IDs, e.g. "1,8453". Omit to auto-detect. */
     networkIds?: string;
 }
 interface VerifySolanaBalanceArgs$1 {
@@ -65,15 +61,11 @@ interface VerifySolanaBalanceResult {
     as_of: string;
 }
 interface DiscoverServicesOptions {
-    /** Catalogs to search. Defaults to both. */
     network?: "all" | "base" | "solana";
-    /** @deprecated Accepted for compatibility but not advertised to agents. */
     raw?: boolean;
 }
 interface DiscoverServicesPageOptions extends DiscoverServicesOptions {
-    /** Results per page. Defaults to 10; maximum 25. */
     limit?: number;
-    /** Opaque continuation from a prior page. */
     cursor?: string;
 }
 type RequestStatus = "pending_approval" | "pending_signature" | "pending_settlement" | "pending_confirmation" | "success" | "denied" | "error";
@@ -96,10 +88,6 @@ interface AgentResponse {
     output: CredentialOutput | null;
     approval_id: string | null;
     error: string | null;
-    /** SPE-456: set on a terminal `error`/`denied` when the failure was an expiry
-     *  (the signing/approval window elapsed and nothing was signed or spent), so
-     *  re-issuing the same request is the correct recovery. `retry_hint` is plain
-     *  guidance. Absent on non-expiry outcomes. */
     retryable?: boolean;
     retry_hint?: string | null;
 }
@@ -122,10 +110,6 @@ interface ClientGrantSummary {
     credential: CredentialSummary;
     grant: Grant;
 }
-/** An active credential the user owns but has not granted this connector.
- * Carries identity + safe display metadata (wallet chain family, card
- * brand/last4) so the connector can request a specific credential by id; never
- * card tokens or secret material. */
 interface UngrantedCredential {
     credential_id: string;
     name: string;
@@ -136,9 +120,6 @@ interface ClientCredentialList {
     credentials: ClientGrantSummary[];
     ungranted: UngrantedCredential[];
 }
-/** The wallet binding the server echoes for a wallet-sign / resolve. Mirrors
- *  `WalletBinding` in server/src/agent.rs (key_id/derivation_path may be null
- *  for an unprovisioned wallet). */
 interface BindingResponse {
     wallet_id: string;
     key_id: string | null;
@@ -154,38 +135,25 @@ interface SwapPlan {
     quote: Record<string, unknown>;
     txs: PlanTx[];
 }
-/** `POST /agent/swap` response. The sign-ready plan is present only while the
- *  request is awaiting approval or signature; terminal responses return null. */
 interface SwapResult {
     response: AgentResponse;
     plan: SwapPlan | null;
 }
-/** `POST /agent/wallet-sign` response. The wallet binding is present only while
- *  approval or signature is pending, so the signer can sign without a separate
- *  resolve round-trip; terminal responses return null. */
 interface WalletSignResult {
     response: AgentResponse;
     binding: BindingResponse | null;
 }
 interface X402Args {
     credentialId: string;
-    /** The 402's `accepts` PaymentRequirements array, verbatim (from the resource's
-     *  own 402 — discover_services gives you a curated catalog entry to start from). */
     accepts: unknown[];
-    /** The paywalled resource URL. */
     resourceUrl: string;
 }
 interface UseServiceArgs {
     credentialId: string;
-    /** The paid x402 resource URL to fetch. */
     url: string;
-    /** HTTP method (default GET). */
     method?: string;
-    /** Optional JSON request body (for POST/PUT services). */
     body?: unknown;
 }
-/** The x402 sign-ready plan (`POST /agent/x402` | `/agent/use-service`): the
- *  EIP-3009 typed data to sign + the wallet binding. */
 interface X402Plan {
     typed_data: unknown;
     binding: {
@@ -193,19 +161,17 @@ interface X402Plan {
         key_id?: string | null;
         derivation_path?: string | null;
     };
-    x402: Record<string, unknown>;
+    x402: Record<string, unknown> & {
+        rail?: string;
+    };
+    solana?: {
+        transaction?: string;
+    };
 }
-/** `POST /agent/x402` | `/agent/use-service` response. The plan is present only
- *  while approval or signature is pending. On success, header mode puts the
- *  X-PAYMENT header in
- *  `response.output.value.x_payment`; gateway mode puts the resource's reply in
- *  `response.output.value.response`. */
 interface X402Result {
     response: AgentResponse;
     plan: X402Plan | null;
 }
-/** One curated x402 service (the `discover_services` tool / `/agent/services`):
- *  where it lives, a human description, and its `accepts` PaymentRequirements. */
 interface ServiceSummary {
     resource: string;
     description: string | null;
@@ -222,9 +188,6 @@ interface DiscoverServicesPage {
     has_more: boolean;
     next_cursor?: string;
 }
-/** `POST /agent/account-change` (the `request_account_change` tool): a pure
- *  launcher. Surface `manage_url` to the user — they edit this client's access
- *  in their own app session (passkey-gated); nothing is parked server-side. */
 interface AccountChangeResult {
     kind: "account_change";
     client_id: string;
@@ -232,17 +195,11 @@ interface AccountChangeResult {
     note?: string | null;
 }
 interface BuyLinkArgs {
-    /** A granted wallet credential to fund. */
     credentialId: string;
-    /** Exact network. Defaults to Base for EVM or Solana mainnet for Solana. */
     destinationChain?: "eip155:8453" | "eip155:1" | "solana:mainnet";
-    /** Enabled MoonPay code matching the destination's exact network. */
     currencyCode?: string;
-    /** Prefill amount in USD. */
     amountUsd?: number;
 }
-/** `GET /agent/buy-link` (the `get_buy_link` tool): a signed MoonPay checkout
- *  URL funding the wallet. Generating the link charges nothing. */
 interface BuyLinkResult {
     url: string;
     currency_code: string;
@@ -250,14 +207,11 @@ interface BuyLinkResult {
     network: "eip155:8453" | "eip155:1" | "solana:mainnet";
 }
 interface WorldMarketsArgs {
-    /** Return the events list (each event groups its markets) instead of markets. */
     events?: boolean;
     limit?: number;
-    /** Rows to skip; the response carries the next cursor. */
     cursor?: number;
     eventTicker?: string;
     seriesTicker?: string;
-    /** One of active | initialized | determined | finalized. */
     status?: string;
 }
 interface WorldPricesArgs {
@@ -273,20 +227,14 @@ declare class PayboxError extends Error {
     constructor(status: number, body: string, context: string);
 }
 interface PayboxClientOptions {
-    /** API origin (the OAuth issuer). Default `https://api.paybox.sh`. */
     baseUrl?: string;
-    /** A `pbx_live_*` personal API key. */
     apiKey?: string;
-    /** A raw OAuth access token (skips the stored-token path). */
     token?: string;
-    /** A `pbxk1.` signing key token; enables in-process wallet/swap signing. */
     signingKey?: string;
     fetchImpl?: typeof fetch;
 }
 interface SignOptions {
-    /** Sign in-process when the request clears to `pending_signature`. Default true. */
     autoSign?: boolean;
-    /** Wait for passkey approval and then sign in-process. Default false. */
     waitForApproval?: boolean | {
         intervalMs?: number;
         timeoutMs?: number;
@@ -299,118 +247,42 @@ declare class PayboxClient {
     private oauth?;
     private configBacked;
     constructor(options?: PayboxClientOptions);
-    /** Build a client from `~/.config/paybox/config.json` + env, with overrides. */
     static fromConfig(overrides?: PayboxClientOptions): PayboxClient;
     private signingCreds;
-    /** Whether in-process signing is available (a parseable `pbxk1.` key is set). */
     get canSign(): boolean;
     private bearer;
     private request;
     private readonly poster;
-    /** List granted credentials plus the `ungranted` credentials (id, name, kind,
-     *  safe metadata) the user owns but hasn't granted this connector. */
     listCredentials(): Promise<ClientCredentialList>;
-    /** Token balances across chains (the `get_portfolio` tool). */
     getPortfolio(args: PortfolioArgs): Promise<unknown>;
-    /** Verify one confirmed Solana transaction's exact wallet/mint effect, then
-     *  read the current balance at or after its slot (`verify_solana_balance`). */
     verifySolanaBalance(args: VerifySolanaBalanceArgs$1): Promise<VerifySolanaBalanceResult>;
-    /** Charge a card credential (the `request_payment` tool). */
     requestPayment(args: PaymentArgs): Promise<AgentResponse>;
-    /** Reveal a secret credential (the `request_secret` tool). */
     requestSecret(args: SecretArgs): Promise<AgentResponse>;
-    /** Sign with a wallet credential (the `request_wallet_sign` tool). Signs
-     *  in-process and returns the completed request when a signing key is set and
-     *  the request clears immediately; otherwise returns the pending response.
-     *  Uses `/agent/wallet-sign`, which echoes the wallet binding only while
-     *  approval or signature is pending so the signer need not resolve it
-     *  separately. Terminal responses carry a null binding. */
     requestWalletSign(args: WalletSignArgs, opts?: SignOptions): Promise<AgentResponse>;
-    /** Swap tokens from a wallet credential (the `request_swap` tool). Returns the
-     *  parked response and its sign-ready plan while approval or signature is
-     *  pending; terminal responses carry a null plan. Signs + submits in-process
-     *  when a signing key is set and the swap cleared immediately. */
     requestSwap(args: SwapArgs, opts?: SignOptions): Promise<SwapResult>;
-    /** Complete a swap request: optionally wait out a `pending_approval` dwell,
-     *  then sign the plan in-process and submit envelopes. Signing first refreshes
-     *  the parked request via `/agent/requests/{id}/refresh`, so a long approval
-     *  dwell never signs stale bytes. */
     private completeSwap;
-    /** Poll while the request sits in `pending_approval` (the user is approving
-     *  with their passkey); returns the first non-approval state. */
     private waitWhileApproval;
-    /** Run an operation and, if it terminates on a server-marked expiry
-     *  (`retryable` on a terminal `error`/`denied`: the window elapsed and nothing
-     *  was signed or spent), re-issue it exactly once (SPE-456). Never loops: the
-     *  second attempt's result is returned as-is. */
     private withExpiryRetry;
-    /** Sign a parked request; if the sign/submit call fails, reconcile against the
-     *  authoritative state once (SPE-456). The server leaves a pre-broadcast
-     *  completion failure recoverable — the claim is released and the row stays
-     *  `pending_signature` — so re-sign a still-open request a single time; a
-     *  terminal or already-broadcast row is left as-is for the caller to read (and
-     *  for `withExpiryRetry` to re-issue if it is retryable). Bounded to one extra
-     *  attempt: a second failure propagates. */
     private signWithReconcile;
-    /** Discover x402 services with the original array-returning response. */
     discoverServices(query?: string, opts?: DiscoverServicesOptions): Promise<ServiceSummary[]>;
-    /** Discover one bounded page of x402 services. Reuse the returned cursor with
-     * the same query and network while `has_more` is true. */
     discoverServicesPage(query?: string, opts?: DiscoverServicesPageOptions): Promise<DiscoverServicesPage>;
-    /** Pay a paid x402 endpoint from a wallet credential (the `pay_x402` tool,
-     *  header mode). Signs in-process when a signing key is set and the payment
-     *  clears immediately — then the X-PAYMENT header is on the completed
-     *  response's `output.value.x_payment` (replay it on the original request). */
     payX402(args: X402Args, opts?: SignOptions): Promise<X402Result>;
-    /** Fetch a paid x402 resource and have paybox pay for it (the `use_service`
-     *  tool, gateway mode): paybox probes the url, pays the 402, re-fetches with the
-     *  payment, and returns the resource's reply on `output.value.response`. */
     useService(args: UseServiceArgs, opts?: SignOptions): Promise<X402Result>;
-    /** Shared completion for the two x402 entry points: optionally wait out a
-     *  `pending_approval` dwell, then sign the parked typed data in-process and
-     *  return the finished request, exactly like the swap path. */
     private completeX402;
-    /** Claim the usable card credentials of an approved payment (the
-     *  `claim_payment_credentials` tool). One-time: the claim is consumed. */
     claimPaymentCredentials(requestId: string): Promise<Record<string, unknown>>;
-    /** Open the account-change flow (the `request_account_change` tool): returns a
-     *  `manage_url` deep link for the USER to open — they update this client's
-     *  access (or add a credential) in their own passkey-gated app session.
-     *  Nothing is parked or applied server-side. */
     requestAccountChange(note?: string): Promise<AccountChangeResult>;
-    /** A signed MoonPay checkout URL funding a granted wallet (the `get_buy_link`
-     *  tool). Share the URL with the user; generating it charges nothing. */
     getBuyLink(args: BuyLinkArgs): Promise<BuyLinkResult>;
-    /** Browse World prediction markets (the `world_find_markets` tool). */
     worldMarkets(args?: WorldMarketsArgs): Promise<unknown>;
-    /** One World event with its markets (the `world_get_market` tool). Nested
-     *  markets default on, matching the tool — they carry the outcome mint ids
-     *  the orderbook/trade calls need. */
     worldMarket(eventTicker: string, withNestedMarkets?: boolean): Promise<unknown>;
-    /** A World market's orderbook (the `world_orderbook` tool). */
     worldOrderbook(id: string, byMint?: boolean): Promise<unknown>;
-    /** A World market's price history (the `world_market_prices` tool). */
     worldPrices(args: WorldPricesArgs): Promise<unknown>;
-    /** Filter addresses down to World outcome mints (the
-     *  `world_filter_outcome_mints` tool). */
     worldFilterOutcomeMints(addresses: string[]): Promise<unknown>;
-    /** A wallet's World prediction-market positions: classified `positions` /
-     *  `settled` entries (each with a `position_result`) plus `settlement_cash`
-     *  for a settled winner's CASH cash-out (swap CASH to USDC via request_swap).
-     *  The `world_positions` tool. */
     worldPositions(address: string): Promise<unknown>;
-    /** Hyperliquid spot markets (the `hyperliquid_markets` tool). */
     hyperliquidMarkets(): Promise<unknown>;
-    /** Hyperliquid spot prices (the `hyperliquid_prices` tool). */
     hyperliquidPrices(): Promise<unknown>;
-    /** Resolve one Hyperliquid token by name (the `hyperliquid_token` tool). */
     hyperliquidToken(name: string): Promise<unknown>;
-    /** Poll a request's status (the `get_request` tool). */
     getRequest(requestId: string): Promise<AgentResponse>;
-    /** After in-process sign, `--wait` polls through settlement/confirmation;
-     *  without it, return the first snapshot (the historical no-wait contract). */
     private requestAfterSign;
-    /** Poll until the request leaves a pending state (or the timeout elapses). */
     waitForRequest(requestId: string, opts?: {
         intervalMs?: number;
         timeoutMs?: number;
@@ -421,15 +293,11 @@ interface OAuthTokens {
     clientId: string;
     accessToken: string;
     refreshToken?: string;
-    /** Epoch millis the access token expires. */
     expiresAt?: number;
-    /** The audience the token is bound to (`<baseUrl>/mcp`). */
     resource: string;
 }
 interface StoredConfig {
     baseUrl?: string;
-    /** Paybox app origin used for signing-key provisioning (derived from baseUrl
-     *  when unset). */
     appUrl?: string;
     apiKey?: string;
     oauth?: OAuthTokens;
@@ -439,20 +307,16 @@ declare function configFile(): string;
 declare function loadConfig(): StoredConfig;
 declare function saveConfig(config: StoredConfig): void;
 
-/** The MCP resource the access token is audience-bound to. */
 declare function mcpResource(baseUrl: string): string;
 interface LoginOptions {
     scope?: string;
     clientName?: string;
-    /** Sink for the "open this URL" prompt; defaults to console.error. */
     log?: (msg: string) => void;
-    /** Abort with an error if no approval arrives in this long. Default 5 min. */
     timeoutMs?: number;
 }
 declare function loginLoopback(baseUrl: string, opts?: LoginOptions): Promise<OAuthTokens>;
 declare function refreshTokens(baseUrl: string, current: OAuthTokens): Promise<OAuthTokens>;
 
-/** Parse the one-string `pbxk1.` token into the agent keypair the core expects. */
 declare function credsFromToken(token: string): Creds;
 
 interface RequestPaymentArgs {

package/dist/index.js

@@ -8,7 +8,7 @@ import {
   mcpResource,
   refreshTokens,
   saveConfig
-} from "./chunk-7VW4QMV4.js";
+} from "./chunk-WRPYONXW.js";
 export {
   PayboxClient,
   PayboxError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paybox-sh/sdk",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "type": "module",
   "description": "Typed Node SDK + `paybox` CLI for the PayBox agent API. Mirrors the MCP tool surface (list_credentials, request_payment, request_wallet_sign, request_secret, request_swap, get_portfolio, verify_solana_balance, get_request) over REST, with in-process non-custodial wallet signing.",
   "license": "Apache-2.0",