@paydlux/agent 0.1.0 → 0.1.2

package/README.md

@@ -46,13 +46,21 @@ npx tsx stellar/demo.ts             # 12 checks, live testnet
 npx tsx stellar/story.ts --public   # one unguessable link; approve from your phone
 ```
 
-No wallet, no faucet, no config. The SDK also builds as an npm package
-(`npm run build` → `dist/`, published as `@paydlux/agent`):
+No wallet, no faucet, no config.
+
+Use it as a package instead of cloning:
+
+```bash
+npm install @paydlux/agent
+```
 
 ```ts
 import { StellarVault, Gateway, PaydluxAgent } from "@paydlux/agent";
 ```
 
+`npm run build` produces `dist/`. The package depends only on
+`@stellar/stellar-sdk` — no transitive `toml`, so `npm audit` is clean.
+
 `story.ts --public` matters for demos: the portal has no login, so the printed
 link carries a 22-character key and every request without it gets a 403.
 

package/dist/agent.d.ts

@@ -1,4 +1,4 @@
-import { Horizon } from "stellar-sdk";
+import { Horizon } from "@stellar/stellar-sdk";
 import { type Mandate } from "./vault.ts";
 export type AgentConfig = {
     /** the agent's own key. One of two signers on the vault. */

package/dist/agent.js

@@ -5,7 +5,7 @@
 //
 // The agent holds one key of two. It can ask, and it can execute a mandate a
 // human already signed. It cannot move money on its own — the ledger refuses.
-import { Horizon, Keypair, Transaction } from "stellar-sdk";
+import { Horizon, Keypair, Transaction } from "@stellar/stellar-sdk";
 import { passphrase } from "./vault.js";
 const PAY_HEADER = "x-payment";
 export class PaydluxAgent {

package/dist/desk.js

@@ -11,7 +11,7 @@
 //   - the approval is a real ledger signature, not a database flag
 import { createServer } from "node:http";
 import { randomBytes, timingSafeEqual } from "node:crypto";
-import { Keypair } from "stellar-sdk";
+import { Keypair } from "@stellar/stellar-sdk";
 import { portalPage } from "./portal.js";
 /** A portal link is a capability: whoever holds it can approve. So it is long,
  *  random, and compared without leaking timing. */

package/dist/gateway.d.ts

@@ -1,5 +1,5 @@
 import { type IncomingMessage, type ServerResponse } from "node:http";
-import { Transaction } from "stellar-sdk";
+import { Transaction } from "@stellar/stellar-sdk";
 import { StellarVault, StellarTxError, type Amount, type Mandate, type Network } from "./vault.ts";
 import { ApprovalDesk, type DeskStore } from "./desk.ts";
 export declare const PAY_HEADER = "x-payment";
@@ -58,7 +58,7 @@ export declare class Gateway {
         payTo: string;
         token: {
             code: string;
-            issuer: string;
+            issuer: string | undefined;
         };
         vault: string;
         mode: "approval" | "preauth";
@@ -72,7 +72,7 @@ export declare class Gateway {
      */
     verify(uri: string, proof: PaymentProof): Promise<{
         route: Route;
-        tx: Transaction<import("stellar-sdk").Memo<import("stellar-sdk").MemoType>, import("stellar-sdk").Operation[]>;
+        tx: Transaction;
         hash: string;
     }>;
     handler(getContent: (uri: string) => string): (req: IncomingMessage, res: ServerResponse) => Promise<void>;

package/dist/gateway.js

@@ -13,8 +13,8 @@
 //
 // Either way the agent's key alone can never move money: threshold is 2.
 import { createServer } from "node:http";
-import { Keypair, StrKey, Transaction } from "stellar-sdk";
-import { StellarTxError, passphrase } from "./vault.js";
+import { Keypair, StrKey, Transaction } from "@stellar/stellar-sdk";
+import { StellarTxError, hex, passphrase } from "./vault.js";
 import { ApprovalDesk } from "./desk.js";
 export const PAY_HEADER = "x-payment";
 export class Gateway {
@@ -123,7 +123,7 @@ export class Gateway {
             || op.asset?.getIssuer?.() !== this.cfg.vault.token.getIssuer()) {
             throw new Error("envelope pays in a different token");
         }
-        const hash = tx.hash().toString("hex");
+        const hash = hex(tx.hash());
         if (hash !== proof.mandateHash)
             throw new Error("envelope hash does not match the declared mandate");
         // The vault stores the mandate as a strkey "T…" signer (base32 of the hash),
@@ -131,7 +131,7 @@ export class Gateway {
         const live = await this.cfg.vault.signerSummary();
         const registered = live.signers
             .filter((s) => s.type === "preauth-mandate")
-            .map((s) => StrKey.decodePreAuthTx(s.key).toString("hex"));
+            .map((s) => hex(StrKey.decodePreAuthTx(s.key)));
         if (!registered.includes(hash)) {
             throw new Error("mandate is not registered on the vault (expired or revoked)");
         }
@@ -212,7 +212,7 @@ export class Gateway {
                 const agentSig = tx.signatures?.[0];
                 if (!agentSig)
                     throw new Error("envelope carries no agent signature");
-                const envHash = tx.hash().toString("hex");
+                const envHash = hex(tx.hash());
                 if (this.settled.has(envHash))
                     throw new Error("mandate already redeemed");
                 const applied = await this.cfg.vault.txExists(envHash);

package/dist/vault.d.ts

@@ -1,5 +1,7 @@
-import { Asset, Horizon, Keypair, Networks } from "stellar-sdk";
+import { Asset, Horizon, Keypair, Networks } from "@stellar/stellar-sdk";
 export type Network = "testnet" | "public";
+/** stellar-sdk v17 hands back Uint8Array where v13 gave Buffer. One helper, one shape. */
+export declare function hex(b: Uint8Array | string): string;
 /**
  * Circle's own USDC issuer on Stellar. Not a wrapped token, not a bridge:
  * native, and Circle is the issuer. Anyone can put "USDC" on a token name —

package/dist/vault.js

@@ -14,7 +14,11 @@
 // amount, the payee, the window, or run it twice — the ledger says no.
 //
 // Verified on testnet by stellar/probe-envelope.ts before this file existed.
-import { Account, Asset, Horizon, Keypair, Memo, Networks, Operation, StrKey, Transaction, TransactionBuilder, } from "stellar-sdk";
+import { Account, Asset, Horizon, Keypair, Memo, Networks, Operation, StrKey, Transaction, TransactionBuilder, } from "@stellar/stellar-sdk";
+/** stellar-sdk v17 hands back Uint8Array where v13 gave Buffer. One helper, one shape. */
+export function hex(b) {
+    return typeof b === "string" ? b : Buffer.from(b).toString("hex");
+}
 /**
  * Circle's own USDC issuer on Stellar. Not a wrapped token, not a bridge:
  * native, and Circle is the issuer. Anyone can put "USDC" on a token name —
@@ -181,7 +185,7 @@ export class StellarVault {
         if (spec.memo)
             eb.addMemo(Memo.text(spec.memo));
         const envelope = eb.build();
-        const hash = envelope.hash().toString("hex");
+        const hash = hex(envelope.hash());
         // register the hash as a weight-1 signer. Two signatures now exist that
         // reach threshold 2: (agent + this hash) and (principal + approver).
         // setOptions needs med threshold 2, so registering a mandate always takes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paydlux/agent",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Payments for AI agents that a human approves. Spending mandates enforced on the Stellar ledger: 2-of-2 vault, pre-authorised transaction envelopes, HTTP 402, USDC.",
   "type": "module",
   "main": "./dist/index.js",
@@ -54,7 +54,7 @@
     "access": "public"
   },
   "dependencies": {
-    "stellar-sdk": "^13.3.0"
+    "@stellar/stellar-sdk": "^17.4.0"
   },
   "devDependencies": {
     "@types/node": "^26.6.6",