@quartermaster-sh/sdk 0.1.0

package/README.md

@@ -0,0 +1,290 @@
+# @quartermaster-sh/sdk
+
+**Check before your agent pays.** Quartermaster is a policy gateway and
+attestation ledger for AI-agent spending. Before your agent makes an x402
+payment, ask Quartermaster: *is this allowed?* — and get back a signed,
+tamper-evident record of the decision.
+
+This SDK hides all the crypto. You bring an API key; it handles Ed25519 request
+signing, x402 message construction, and chain verification for you.
+
+```ts
+import { Quartermaster, usdc } from '@quartermaster-sh/sdk';
+
+const qm = new Quartermaster({ apiKey: process.env.QM_API_KEY! }); // points at the sandbox by default
+
+const check = await qm.check({ agent: 'research-bot', to: 'openai', amount: usdc(5) });
+if (!check.approved) throw new Error(`Payment blocked: ${check.reasons.join(', ')}`);
+console.log('✓ checked & logged — proof:', check.receipt!.hash); // your signed, tamper-evident proof
+```
+
+That's the whole thing. One credential, one call. Your agent's spend just got
+checked against its policy and written to an append-only ledger.
+
+And when a payment is **not** allowed, you get a clear reason instead of a
+surprise. On the sandbox, `research-bot` caps at **$5** and only pays a small
+allowlist of friendly payees (`openai`, `anthropic`, …), so each rule denies on
+its own:
+
+```ts
+// Over the per-transaction cap, to an allowed payee:
+const overCap = await qm.check({ agent: 'research-bot', to: 'openai', amount: usdc(500) });
+// overCap.approved === false
+// overCap.reasons  === ['per_tx_cap_exceeded']
+
+// Within the cap, but a payee that isn't on the sandbox allowlist:
+const badPayee = await qm.check({ agent: 'research-bot', to: 'sketchy-vendor', amount: usdc(5) });
+// badPayee.approved === false
+// badPayee.reasons  === ['payee_not_allowed']
+```
+
+> `check()` reports **every** rule a payment breaks, so a request that is both
+> over-cap *and* to a disallowed payee comes back with both reasons.
+
+---
+
+## Install
+
+```sh
+npm i @quartermaster-sh/sdk
+```
+
+Node ≥ 18. ESM-only. Zero heavy dependencies — just audited `@noble` crypto
+primitives. Runs on Node, edge runtimes, and modern browsers.
+
+---
+
+## The 30-second mental model
+
+- **Your API key is a *tenant* credential.** It identifies your organization —
+  not any single agent. Keep it server-side.
+- **An *agent* is a spender you refer to by name** (`'research-bot'`). Each agent
+  has its own Ed25519 signing key; the SDK signs every request with it so
+  Quartermaster knows *who* is asking. On the sandbox, demo agents are built in,
+  so you don't provide keys until you go to production.
+- **A *receipt* is an *attestation*** — a signed, hash-chained ledger record of
+  the decision. `check.receipt.hash` is your proof it happened and hasn't been
+  altered.
+- **Deny by default.** No matching policy, an ambiguous rule, or a malformed
+  request all result in DENY. Quartermaster never approves on an error path.
+- **No money moves here.** v1 *authorizes and records*; settlement is handled by
+  an upstream x402 facilitator. `check()` is the authorization + receipt step.
+
+---
+
+## `check()`
+
+```ts
+qm.check(input: CheckInput): Promise<CheckResult>
+```
+
+| `CheckInput` field | | |
+|---|---|---|
+| `to` | required | Payee. An address, or a sandbox payee name like `'openai'`. |
+| `amount` | required | Atomic units as a string — use `usdc()`. Never a float. |
+| `agent` | optional | Agent name. Defaults to your configured default / the sandbox demo agent. |
+| `network` | optional | CAIP-2 network. Default `'eip155:8453'` (Base). |
+| `asset` | optional | Asset contract/code. Default USDC on Base. |
+| `nonce` | optional | 32-byte hex EIP-3009 nonce. Default: a fresh random one. |
+| `validForSeconds` | optional | Authorization validity window. Default `600`. |
+
+```ts
+interface CheckResult {
+  approved: boolean;            // true iff the decision was APPROVE
+  decision: 'APPROVE' | 'DENY';
+  reasons: DenyReason[];        // [] when approved
+  receipt?: Receipt;            // the signed record — present on APPROVE and chained denials
+  denialEventId?: string;       // present for unchained denials (see below)
+  raw: unknown;                 // the full server response, for fields the SDK doesn't model
+}
+```
+
+**A DENY is not an error** — it's a normal result with `approved: false`. Only
+transport failures and HTTP 4xx/5xx throw (see [Errors](#errors)).
+
+### Deny reasons
+
+| reason | meaning |
+|---|---|
+| `per_tx_cap_exceeded` | amount is over the agent's per-transaction cap |
+| `window_cap_exceeded` | this would push the agent over its rolling window budget |
+| `payee_not_allowed` | `to` isn't on the policy's payee allowlist |
+| `network_not_allowed` / `asset_not_allowed` | rail not permitted by policy |
+| `agent_suspended` | the agent is registered but suspended |
+| `agent_unknown` | no such agent in your org |
+| `wallet_mismatch` | the paying wallet doesn't match the agent's bound wallet |
+| `stale_authorization` | the payment authorization window is expired or not yet valid |
+| `replay` | this nonce was already used |
+| `no_policy` | the agent has no policy assigned |
+| `malformed` | the payment couldn't be parsed/evaluated |
+
+> **Chained vs. unchained denials.** Most decisions (all APPROVEs and policy
+> denials) are written to the hash chain and carry a `receipt`. Three denial
+> classes can't be chained — `agent_unknown`, `malformed`, and `replay` — and
+> instead come back with a `denialEventId` (recorded in a separate audit table).
+
+---
+
+## `verify()` — trust, don't ask
+
+The ledger is a SHA-256 hash chain: each record commits to the one before it and
+is Ed25519-signed by your org's Quartermaster key. `verify()` confirms that chain
+is intact.
+
+```ts
+// Zero-config: ask the server to check its own chain.
+const r = await qm.verify();
+// → { valid: true, length: 42, problems: [], anchored: false }
+```
+
+But the strong version doesn't take the server's word for it. Give `verify()`
+your org's **pinned public key** and the SDK pulls the raw ledger rows and
+**re-derives the entire chain locally** — recomputing every hash and checking
+every signature against your key:
+
+```ts
+const r = await qm.verify({ publicKey: process.env.QM_ORG_PUBKEY! });
+if (!r.valid) console.error('ledger integrity FAILED', r.problems);
+```
+
+This is the guarantee that matters: a database-level attacker who rewrote the
+ledger *and* re-signed it with a fresh key would pass a server-side check, but
+can't forge signatures under a key you pinned out-of-band. You can also confirm a
+specific receipt is part of the verified chain:
+
+```ts
+const r = await qm.verify({ publicKey, hash: check.receipt!.hash });
+// r.entryFound === true
+```
+
+---
+
+## Production setup
+
+The sandbox ships public demo agents so the quickstart just works. In production
+you point at your deployment and bring your **own** agents — each with its own
+Ed25519 signing key (generate one per agent; keep it in your secrets manager):
+
+```ts
+const qm = new Quartermaster({
+  apiKey: process.env.QM_API_KEY!,
+  baseUrl: 'https://quartermaster.your-company.com',
+  agents: {
+    'research-bot':    { id: 'agt_research',    signingKey: process.env.RESEARCH_KEY!,    wallet: '0xResearchWallet' },
+    'procurement-bot': { id: 'agt_procurement', signingKey: process.env.PROCUREMENT_KEY!, wallet: '0xProcurementWallet' },
+  },
+  agent: 'research-bot', // the default for qm.check() when no agent is named
+});
+
+await qm.check({ agent: 'procurement-bot', to: '0xVendor', amount: usdc(120) });
+```
+
+The call site never changes — `check({ agent: 'research-bot', … })` is the same
+line; it's just backed by your real key now.
+
+For a process that drives one agent per worker, grab a bound handle:
+
+```ts
+const research = qm.agent('research-bot');
+await research.check({ to: 'openai', amount: usdc(5) });
+```
+
+---
+
+## Amounts
+
+Amounts are **strings in atomic units**, end to end — Quartermaster never uses
+floats (money and rounding don't mix). `usdc()` is the one sugar:
+
+```ts
+usdc(40)        // → '40000000'   (6 decimals)
+usdc('1.50')    // → '1500000'
+usdc('0.000001')// → '1'
+usdc('1.2345678') // throws — more precision than USDC has
+```
+
+For other assets, pass atomic units directly as a string.
+
+---
+
+## Reading the ledger
+
+```ts
+const { items, nextCursor } = await qm.ledger({ limit: 50 });
+for (const receipt of items) console.log(receipt.seq, receipt.decision, receipt.amount);
+
+// Paginate with the cursor:
+if (nextCursor) await qm.ledger({ limit: 50, after: nextCursor });
+```
+
+Read-only and scoped to your org.
+
+---
+
+## What `check()` does and doesn't do
+
+- **It does:** evaluate the payment against the agent's policy, sign an
+  attestation with your org's Quartermaster key, and append it to the ledger.
+  The receipt travels inside standard x402 traffic under the
+  `com.quartermaster.attestation` extension key.
+- **It does not:** produce a settleable on-chain payment. `check()` uses a
+  placeholder for the EIP-3009/EIP-712 authorization signature, because
+  Quartermaster authorizes and records — it doesn't move funds. When you settle
+  through the gateway, your wallet supplies the real signed authorization; the
+  matching receipt is what lets settlement proceed.
+
+---
+
+## Configuration
+
+```ts
+new Quartermaster({
+  apiKey: string,                       // required — tenant credential
+  baseUrl?: string,                     // default: the hosted sandbox
+  agents?: Record<string, AgentConfig>, // production agents (name → identity)
+  agent?: string,                       // default agent name for check()
+  fetch?: typeof fetch,                 // inject a custom transport (tests, proxies)
+  timeoutMs?: number,                   // per-request timeout, default 10_000
+});
+```
+
+`AgentConfig = { id: string; signingKey: string; wallet: string }` — the
+registered agent id, its Ed25519 private key (hex), and its EIP-3009 `from`
+wallet.
+
+---
+
+## Errors
+
+```ts
+import { QuartermasterError } from '@quartermaster-sh/sdk';
+
+try {
+  await qm.check({ agent: 'research-bot', to: 'openai', amount: usdc(5) });
+} catch (err) {
+  if (err instanceof QuartermasterError) {
+    console.error(err.status, err.body); // e.g. 401 { error: 'invalid_api_key' }
+  }
+}
+```
+
+`QuartermasterError` carries `status` (HTTP status, or `0` for a network error)
+and the parsed `body`. Again: a policy **DENY does not throw** — check
+`result.approved`.
+
+---
+
+## API reference
+
+| | |
+|---|---|
+| `new Quartermaster(config)` | Create a client. |
+| `qm.check(input)` | Check + record a payment. Returns `CheckResult`. |
+| `qm.agent(name \| config)` | A handle bound to one agent, with `.check()` and `.id`. |
+| `qm.checkAs(config, input)` | `check()` against an inline signing identity. |
+| `qm.verify(opts?)` | Verify the ledger chain (locally with `publicKey`, else server-side). |
+| `qm.ledger(opts?)` | Read a page of the ledger. |
+| `usdc(value)` | Decimal → 6-decimal atomic-unit string. |
+| `randomNonce()` | A fresh 32-byte hex nonce. |
+| `verifyChainLocally(pubKey, rows)` | The pure local chain verifier, if you have rows already. |
+| `BASE_MAINNET`, `USDC_BASE` | Handy constants. |

package/dist/amounts.d.ts

@@ -0,0 +1,9 @@
+/** Base mainnet, CAIP-2. */
+export declare const BASE_MAINNET = "eip155:8453";
+/** USDC on Base (6 decimals). */
+export declare const USDC_BASE = "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
+/** USDC decimal amount → 6-decimal atomic units string. `usdc(40)` → "40000000". */
+export declare function usdc(value: string | number): string;
+/** A fresh EIP-3009 nonce: 32 random bytes, lowercase hex, no 0x prefix. */
+export declare function randomNonce(): string;
+//# sourceMappingURL=amounts.d.ts.map

package/dist/amounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"amounts.d.ts","sourceRoot":"","sources":["../src/amounts.ts"],"names":[],"mappings":"AAKA,4BAA4B;AAC5B,eAAO,MAAM,YAAY,gBAAgB,CAAC;AAC1C,iCAAiC;AACjC,eAAO,MAAM,SAAS,+CAA+C,CAAC;AAsCtE,oFAAoF;AACpF,wBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAEnD;AAED,4EAA4E;AAC5E,wBAAgB,WAAW,IAAI,MAAM,CAIpC"}

package/dist/amounts.js

@@ -0,0 +1,48 @@
+// Amount + nonce helpers and network constants. Amounts are strings in atomic
+// units end to end (Quartermaster rule 6 — never float, BigInt for math). The
+// only sugar the SDK offers is usdc(), and it returns a string.
+import { bytesToHex } from '@noble/hashes/utils.js';
+/** Base mainnet, CAIP-2. */
+export const BASE_MAINNET = 'eip155:8453';
+/** USDC on Base (6 decimals). */
+export const USDC_BASE = '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913';
+const USDC_DECIMALS = 6;
+// Convert a decimal amount (e.g. "40", 5, "1.50") into atomic units as a
+// digits-only string. Integer/string math throughout: a value is never parsed
+// into a float, so nothing rounds. Rejects negatives, scientific notation, and
+// more fractional digits than the asset supports.
+function toAtomic(value, decimals) {
+    let text;
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value)) {
+            throw new TypeError(`amount must be a finite number, got ${value}`);
+        }
+        text = String(value);
+        if (/[eE]/.test(text)) {
+            throw new TypeError(`amount ${value} is in scientific notation and cannot be converted precisely — pass it as a string`);
+        }
+    }
+    else {
+        text = value.trim();
+    }
+    if (!/^\d+(\.\d+)?$/.test(text)) {
+        throw new TypeError(`amount "${value}" must be a non-negative decimal string (no sign, no exponent)`);
+    }
+    const [whole, fraction = ''] = text.split('.');
+    if (fraction.length > decimals) {
+        throw new TypeError(`amount "${value}" has ${fraction.length} fractional digits; the asset supports at most ${decimals}`);
+    }
+    const atomic = `${whole}${fraction.padEnd(decimals, '0')}`.replace(/^0+(?=\d)/, '');
+    return atomic;
+}
+/** USDC decimal amount → 6-decimal atomic units string. `usdc(40)` → "40000000". */
+export function usdc(value) {
+    return toAtomic(value, USDC_DECIMALS);
+}
+/** A fresh EIP-3009 nonce: 32 random bytes, lowercase hex, no 0x prefix. */
+export function randomNonce() {
+    const bytes = new Uint8Array(32);
+    crypto.getRandomValues(bytes);
+    return bytesToHex(bytes);
+}
+//# sourceMappingURL=amounts.js.map

package/dist/amounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"amounts.js","sourceRoot":"","sources":["../src/amounts.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8EAA8E;AAC9E,gEAAgE;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,4BAA4B;AAC5B,MAAM,CAAC,MAAM,YAAY,GAAG,aAAa,CAAC;AAC1C,iCAAiC;AACjC,MAAM,CAAC,MAAM,SAAS,GAAG,4CAA4C,CAAC;AAEtE,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,yEAAyE;AACzE,8EAA8E;AAC9E,+EAA+E;AAC/E,kDAAkD;AAClD,SAAS,QAAQ,CAAC,KAAsB,EAAE,QAAgB;IACxD,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,uCAAuC,KAAK,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,SAAS,CACjB,UAAU,KAAK,oFAAoF,CACpG,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,WAAW,KAAK,gEAAgE,CAAC,CAAC;IACxG,CAAC;IAED,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CACjB,WAAW,KAAK,SAAS,QAAQ,CAAC,MAAM,kDAAkD,QAAQ,EAAE,CACrG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACpF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,IAAI,CAAC,KAAsB;IACzC,OAAO,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,WAAW;IACzB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC"}

package/dist/canonical-json.d.ts

@@ -0,0 +1,2 @@
+export declare function canonicalJson(value: unknown): string;
+//# sourceMappingURL=canonical-json.d.ts.map

package/dist/canonical-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-json.d.ts","sourceRoot":"","sources":["../src/canonical-json.ts"],"names":[],"mappings":"AASA,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAsCpD"}

package/dist/canonical-json.js

@@ -0,0 +1,47 @@
+// Canonical JSON serialization: sorted keys, no whitespace. This is a
+// BYTE-IDENTICAL port of the server's src/ledger/canonical-json.ts. The agent
+// request signature is Ed25519 over canonicalJson({ agentId, payload,
+// requirements }); if this diverges from the server by a single byte, every
+// signature the SDK produces is rejected 401. It is also the hash preimage the
+// local chain verifier (verify.ts) recomputes, so it must match the exact
+// serialization the ledger hashed. Do not "improve" this without changing the
+// server in lockstep — the byte-equality unit test guards it.
+export function canonicalJson(value) {
+    if (value === null)
+        return 'null';
+    switch (typeof value) {
+        case 'string':
+            return JSON.stringify(value);
+        case 'boolean':
+            return value ? 'true' : 'false';
+        case 'number':
+            if (!Number.isSafeInteger(value)) {
+                throw new TypeError(`canonicalJson: only safe integers are serializable, got ${value} — represent amounts and large values as strings`);
+            }
+            return String(value);
+        case 'bigint':
+            throw new TypeError('canonicalJson: convert BigInt to a string before serializing');
+        case 'undefined':
+            throw new TypeError('canonicalJson: undefined is not serializable — use null');
+        default:
+            break;
+    }
+    if (Array.isArray(value)) {
+        return `[${value.map((v) => canonicalJson(v)).join(',')}]`;
+    }
+    if (typeof value === 'object') {
+        const record = value;
+        const keys = Object.keys(record).sort();
+        const parts = [];
+        for (const key of keys) {
+            const v = record[key];
+            if (v === undefined) {
+                throw new TypeError(`canonicalJson: key "${key}" is undefined — use null or omit the key`);
+            }
+            parts.push(`${JSON.stringify(key)}:${canonicalJson(v)}`);
+        }
+        return `{${parts.join(',')}}`;
+    }
+    throw new TypeError(`canonicalJson: cannot serialize a ${typeof value}`);
+}
+//# sourceMappingURL=canonical-json.js.map

package/dist/canonical-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-json.js","sourceRoot":"","sources":["../src/canonical-json.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,8EAA8E;AAC9E,sEAAsE;AACtE,4EAA4E;AAC5E,+EAA+E;AAC/E,0EAA0E;AAC1E,8EAA8E;AAC9E,8DAA8D;AAE9D,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,KAAK,QAAQ;YACX,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,SAAS,CACjB,2DAA2D,KAAK,kDAAkD,CACnH,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,KAAK,QAAQ;YACX,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;QACtF,KAAK,WAAW;YACd,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAC;QACjF;YACE,MAAM;IACV,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpB,MAAM,IAAI,SAAS,CAAC,uBAAuB,GAAG,2CAA2C,CAAC,CAAC;YAC7F,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,qCAAqC,OAAO,KAAK,EAAE,CAAC,CAAC;AAC3E,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,47 @@
+import type { AgentConfig, CheckInput, CheckResult, LedgerOptions, LedgerPage, QuartermasterConfig, VerifyOptions, VerifyResult } from './types.js';
+export declare class Quartermaster {
+    readonly baseUrl: string;
+    private readonly apiKey;
+    private readonly fetchImpl;
+    private readonly timeoutMs;
+    private readonly agents;
+    private readonly defaultAgentName;
+    constructor(config: QuartermasterConfig);
+    /** Resolve a friendly agent name to its signing identity, or throw clearly. */
+    private resolveAgent;
+    private request;
+    /**
+     * Check a payment against the agent's policy before it happens. Signs the
+     * request with the agent's Ed25519 key and records the decision on the
+     * append-only ledger. Returns a typed decision; a DENY is not an error.
+     */
+    check(input: CheckInput): Promise<CheckResult>;
+    /**
+     * The single build → sign → attest path, against an explicit signing
+     * identity. `qm.check` resolves a name to a config and calls this; an Agent
+     * handle calls it directly. Advanced callers may pass an inline AgentConfig.
+     */
+    checkAs(agent: AgentConfig, input: Omit<CheckInput, 'agent'>): Promise<CheckResult>;
+    /** A handle bound to one agent — for processes that drive several agents. */
+    agent(nameOrConfig: string | AgentConfig): Agent;
+    /** One page of the org-scoped, read-only ledger. */
+    ledger(opts?: LedgerOptions): Promise<LedgerPage>;
+    private fetchAllRows;
+    /**
+     * Confirm the ledger's hash-chain integrity. With `publicKey`, re-derives the
+     * entire chain LOCALLY from raw rows and checks every signature against that
+     * pinned key — the guarantee that does not trust our API. Without it, asks the
+     * server's /v1/ledger/verify.
+     */
+    verify(opts?: VerifyOptions): Promise<VerifyResult>;
+}
+/** A per-agent handle returned by `qm.agent(...)`. */
+export declare class Agent {
+    private readonly client;
+    private readonly config;
+    constructor(client: Quartermaster, config: AgentConfig);
+    get id(): string;
+    /** Same as client.check(), pinned to this agent's signing identity. */
+    check(input: Omit<CheckInput, 'agent'>): Promise<CheckResult>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,WAAW,EAEX,aAAa,EACb,UAAU,EACV,mBAAmB,EAEnB,aAAa,EACb,YAAY,EACb,MAAM,YAAY,CAAC;AAcpB,qBAAa,aAAa;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;gBAE1C,MAAM,EAAE,mBAAmB;IAqBvC,+EAA+E;IAC/E,OAAO,CAAC,YAAY;YAiBN,OAAO;IAqCrB;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IAI9C;;;;OAIG;IACG,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;IAsBzF,6EAA6E;IAC7E,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,WAAW,GAAG,KAAK;IAKhD,oDAAoD;IAC9C,MAAM,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,UAAU,CAAC;YAO7C,YAAY;IAY1B;;;;;OAKG;IACG,MAAM,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,YAAY,CAAC;CA6B9D;AAED,sDAAsD;AACtD,qBAAa,KAAK;IAEd,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,WAAW;IAGtC,IAAI,EAAE,IAAI,MAAM,CAEf;IAED,uEAAuE;IACvE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;CAG9D"}

package/dist/client.js

@@ -0,0 +1,186 @@
+// The Quartermaster client. Two public verbs the developer cares about:
+//   check()  — sign + POST /v1/attest, return a clean typed decision.
+//   verify() — confirm the ledger's hash chain (locally, if given a pinned key).
+// Everything crypto (Ed25519 request signing, x402 message construction, chain
+// re-derivation) is hidden. A policy DENY is a normal result, not an error;
+// only transport / 4xx-5xx throw QuartermasterError.
+import { signRequestBody } from './sign.js';
+import { buildX402Pair } from './x402.js';
+import { verifyChainLocally } from './verify.js';
+import { QuartermasterError } from './errors.js';
+import { SANDBOX_AGENTS, SANDBOX_BASE_URL, SANDBOX_DEFAULT_AGENT } from './sandbox.js';
+const DEFAULT_TIMEOUT_MS = 10_000;
+const DEFAULT_PAGE_SIZE = 200;
+const MAX_LEDGER_PAGES = 10_000; // generous guard against a broken cursor loop
+export class Quartermaster {
+    baseUrl;
+    apiKey;
+    fetchImpl;
+    timeoutMs;
+    agents;
+    defaultAgentName;
+    constructor(config) {
+        if (!config.apiKey)
+            throw new TypeError('Quartermaster: apiKey is required');
+        this.apiKey = config.apiKey;
+        this.baseUrl = (config.baseUrl ?? SANDBOX_BASE_URL).replace(/\/+$/, '');
+        this.timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        const injected = config.fetch ?? globalThis.fetch;
+        if (typeof injected !== 'function') {
+            throw new TypeError('Quartermaster: no fetch available — pass config.fetch on this runtime');
+        }
+        // Bind to avoid "Illegal invocation" when using the global fetch.
+        this.fetchImpl = injected.bind(globalThis);
+        // Bundled sandbox demo agents apply only when pointed at the sandbox; a
+        // custom baseUrl gets only the caller's own agents (referencing a demo name
+        // there would just 404 as agent_unknown).
+        const onSandbox = this.baseUrl === SANDBOX_BASE_URL.replace(/\/+$/, '');
+        this.agents = { ...(onSandbox ? SANDBOX_AGENTS : {}), ...(config.agents ?? {}) };
+        this.defaultAgentName = config.agent ?? (onSandbox ? SANDBOX_DEFAULT_AGENT : undefined);
+    }
+    /** Resolve a friendly agent name to its signing identity, or throw clearly. */
+    resolveAgent(name) {
+        const resolved = name ?? this.defaultAgentName;
+        if (resolved === undefined) {
+            throw new TypeError('Quartermaster: no agent specified and no default configured — pass check({ agent }) or set config.agent');
+        }
+        const agent = this.agents[resolved];
+        if (agent === undefined) {
+            const known = Object.keys(this.agents);
+            throw new TypeError(`Quartermaster: unknown agent "${resolved}"${known.length ? ` — known agents: ${known.join(', ')}` : ' — no agents configured'}`);
+        }
+        return agent;
+    }
+    async request(opts) {
+        const url = new URL(this.baseUrl + opts.path);
+        for (const [k, v] of Object.entries(opts.query ?? {}))
+            url.searchParams.set(k, v);
+        const headers = { authorization: `Bearer ${this.apiKey}` };
+        if (opts.body !== undefined)
+            headers['content-type'] = 'application/json';
+        if (opts.signature !== undefined)
+            headers['x-qm-signature'] = opts.signature;
+        let res;
+        try {
+            res = await this.fetchImpl(url.toString(), {
+                method: opts.method,
+                headers,
+                body: opts.body === undefined ? undefined : JSON.stringify(opts.body),
+                signal: AbortSignal.timeout(this.timeoutMs),
+            });
+        }
+        catch (err) {
+            throw new QuartermasterError(`request to ${opts.method} ${opts.path} failed: ${err instanceof Error ? err.message : String(err)}`, 0, undefined);
+        }
+        const text = await res.text();
+        let json;
+        try {
+            json = text === '' ? null : JSON.parse(text);
+        }
+        catch {
+            json = text;
+        }
+        if (!res.ok) {
+            throw new QuartermasterError(`${opts.method} ${opts.path} → ${res.status}`, res.status, json);
+        }
+        return json;
+    }
+    /**
+     * Check a payment against the agent's policy before it happens. Signs the
+     * request with the agent's Ed25519 key and records the decision on the
+     * append-only ledger. Returns a typed decision; a DENY is not an error.
+     */
+    check(input) {
+        return this.checkAs(this.resolveAgent(input.agent), input);
+    }
+    /**
+     * The single build → sign → attest path, against an explicit signing
+     * identity. `qm.check` resolves a name to a config and calls this; an Agent
+     * handle calls it directly. Advanced callers may pass an inline AgentConfig.
+     */
+    async checkAs(agent, input) {
+        const { payload, requirements } = buildX402Pair({ ...input, agent: agent.id }, agent);
+        const body = { agentId: agent.id, payload, requirements };
+        const signature = signRequestBody(body, agent.signingKey);
+        const json = await this.request({ method: 'POST', path: '/v1/attest', body, signature });
+        return {
+            approved: json.decision === 'APPROVE',
+            decision: json.decision,
+            reasons: (json.denyReasons ?? []),
+            receipt: json.attestation,
+            denialEventId: json.denialEventId,
+            raw: json,
+        };
+    }
+    /** A handle bound to one agent — for processes that drive several agents. */
+    agent(nameOrConfig) {
+        const config = typeof nameOrConfig === 'string' ? this.resolveAgent(nameOrConfig) : nameOrConfig;
+        return new Agent(this, config);
+    }
+    /** One page of the org-scoped, read-only ledger. */
+    async ledger(opts = {}) {
+        const query = {};
+        if (opts.limit !== undefined)
+            query.limit = String(opts.limit);
+        if (opts.after !== undefined)
+            query.after = opts.after;
+        return this.request({ method: 'GET', path: '/v1/ledger', query });
+    }
+    async fetchAllRows(pageSize) {
+        const rows = [];
+        let after;
+        for (let page = 0; page < MAX_LEDGER_PAGES; page++) {
+            const { items, nextCursor } = await this.ledger({ limit: pageSize, after });
+            rows.push(...items);
+            if (nextCursor === null || items.length === 0)
+                return rows;
+            after = nextCursor;
+        }
+        throw new QuartermasterError('ledger pagination did not terminate', 0, undefined);
+    }
+    /**
+     * Confirm the ledger's hash-chain integrity. With `publicKey`, re-derives the
+     * entire chain LOCALLY from raw rows and checks every signature against that
+     * pinned key — the guarantee that does not trust our API. Without it, asks the
+     * server's /v1/ledger/verify.
+     */
+    async verify(opts = {}) {
+        if (opts.publicKey !== undefined) {
+            const rows = await this.fetchAllRows(opts.pageSize ?? DEFAULT_PAGE_SIZE);
+            const result = verifyChainLocally(opts.publicKey, rows);
+            if (opts.hash !== undefined) {
+                result.entryFound = rows.some((r) => r.hash === opts.hash);
+            }
+            return result;
+        }
+        const server = await this.request({ method: 'GET', path: '/v1/ledger/verify' });
+        const result = {
+            valid: server.valid,
+            length: server.length,
+            problems: server.problems,
+            anchored: server.anchored,
+        };
+        if (opts.hash !== undefined) {
+            const rows = await this.fetchAllRows(opts.pageSize ?? DEFAULT_PAGE_SIZE);
+            result.entryFound = rows.some((r) => r.hash === opts.hash);
+        }
+        return result;
+    }
+}
+/** A per-agent handle returned by `qm.agent(...)`. */
+export class Agent {
+    client;
+    config;
+    constructor(client, config) {
+        this.client = client;
+        this.config = config;
+    }
+    get id() {
+        return this.config.id;
+    }
+    /** Same as client.check(), pinned to this agent's signing identity. */
+    check(input) {
+        return this.client.checkAs(this.config, input);
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,sEAAsE;AACtE,iFAAiF;AACjF,+EAA+E;AAC/E,4EAA4E;AAC5E,qDAAqD;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAcvF,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,gBAAgB,GAAG,MAAM,CAAC,CAAC,8CAA8C;AAU/E,MAAM,OAAO,aAAa;IACf,OAAO,CAAS;IACR,MAAM,CAAS;IACf,SAAS,CAAe;IACxB,SAAS,CAAS;IAClB,MAAM,CAA8B;IACpC,gBAAgB,CAAqB;IAEtD,YAAY,MAA2B;QACrC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;QAExD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAClD,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CAAC,uEAAuE,CAAC,CAAC;QAC/F,CAAC;QACD,kEAAkE;QAClE,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE3C,wEAAwE;QACxE,4EAA4E;QAC5E,0CAA0C;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,KAAK,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1F,CAAC;IAED,+EAA+E;IACvE,YAAY,CAAC,IAAwB;QAC3C,MAAM,QAAQ,GAAG,IAAI,IAAI,IAAI,CAAC,gBAAgB,CAAC;QAC/C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,SAAS,CACjB,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,IAAI,SAAS,CACjB,iCAAiC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB,EAAE,CACjI,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,IAAoB;QAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAElF,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC1E,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QAE7E,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;gBACzC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;gBACrE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,kBAAkB,CAC1B,cAAc,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACpG,CAAC,EACD,SAAS,CACV,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,kBAAkB,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAiB;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,KAAkB,EAAE,KAAgC;QAChE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAE1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAK5B,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAE5D,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,SAAS;YACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAiB;YACjD,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,GAAG,EAAE,IAAI;SACV,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,YAAkC;QACtC,MAAM,MAAM,GAAG,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QACjG,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,MAAM,CAAC,OAAsB,EAAE;QACnC,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CAAa,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAgB;QACzC,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,IAAI,KAAyB,CAAC;QAC9B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC;YACnD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;YACpB,IAAI,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3D,KAAK,GAAG,UAAU,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IACpF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,OAAsB,EAAE;QACnC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACxD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAK9B,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAiB;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAC;YACzE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,sDAAsD;AACtD,MAAM,OAAO,KAAK;IAEG;IACA;IAFnB,YACmB,MAAqB,EACrB,MAAmB;QADnB,WAAM,GAAN,MAAM,CAAe;QACrB,WAAM,GAAN,MAAM,CAAa;IACnC,CAAC;IAEJ,IAAI,EAAE;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACxB,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,KAAgC;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;CACF"}

package/dist/errors.d.ts

@@ -0,0 +1,8 @@
+export declare class QuartermasterError extends Error {
+    /** HTTP status, or 0 when the request never got a response (network error). */
+    readonly status: number;
+    /** Parsed response body when available (often { error, detail }). */
+    readonly body: unknown;
+    constructor(message: string, status: number, body: unknown);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAKA,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;gBAEX,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO;CAM3D"}

package/dist/errors.js

@@ -0,0 +1,18 @@
+// The only error type the SDK throws for HTTP/transport problems. A policy
+// DENY is NOT an error — it is a normal CheckResult with approved:false.
+// QuartermasterError is reserved for the things that genuinely went wrong:
+// a bad/missing API key, a malformed request the server rejected (4xx), an
+// upstream/server fault (5xx), or the network being unreachable.
+export class QuartermasterError extends Error {
+    /** HTTP status, or 0 when the request never got a response (network error). */
+    status;
+    /** Parsed response body when available (often { error, detail }). */
+    body;
+    constructor(message, status, body) {
+        super(message);
+        this.name = 'QuartermasterError';
+        this.status = status;
+        this.body = body;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,yEAAyE;AACzE,2EAA2E;AAC3E,2EAA2E;AAC3E,iEAAiE;AACjE,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,+EAA+E;IACtE,MAAM,CAAS;IACxB,qEAAqE;IAC5D,IAAI,CAAU;IAEvB,YAAY,OAAe,EAAE,MAAc,EAAE,IAAa;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { Quartermaster, Agent } from './client.js';
+export { QuartermasterError } from './errors.js';
+export { usdc, randomNonce, BASE_MAINNET, USDC_BASE } from './amounts.js';
+export { verifyChainLocally, GENESIS_PREV_HASH } from './verify.js';
+export { canonicalJson } from './canonical-json.js';
+export { SANDBOX_BASE_URL, SANDBOX_AGENTS, SANDBOX_DEFAULT_AGENT, demoAgentPublicKey, } from './sandbox.js';
+export type { AgentConfig, QuartermasterConfig, CheckInput, CheckResult, Decision, DenyReason, Receipt, VerifyOptions, VerifyResult, ChainProblem, LedgerOptions, LedgerPage, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,WAAW,EACX,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,QAAQ,EACR,UAAU,EACV,OAAO,EACP,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,UAAU,GACX,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+// @quartermaster-sh/sdk — check before your agent pays.
+export { Quartermaster, Agent } from './client.js';
+export { QuartermasterError } from './errors.js';
+export { usdc, randomNonce, BASE_MAINNET, USDC_BASE } from './amounts.js';
+export { verifyChainLocally, GENESIS_PREV_HASH } from './verify.js';
+export { canonicalJson } from './canonical-json.js';
+export { SANDBOX_BASE_URL, SANDBOX_AGENTS, SANDBOX_DEFAULT_AGENT, demoAgentPublicKey, } from './sandbox.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,cAAc,CAAC"}

package/dist/sandbox.d.ts

@@ -0,0 +1,8 @@
+import type { AgentConfig } from './types.js';
+export declare const SANDBOX_BASE_URL = "https://quartermaster-sandbox.vercel.app";
+/** Ed25519 public key (hex) for a demo agent — for the sandbox seed, not runtime. */
+export declare function demoAgentPublicKey(agent: AgentConfig): string;
+export declare const SANDBOX_AGENTS: Record<string, AgentConfig>;
+/** The agent qm.check() uses by default on the sandbox when none is named. */
+export declare const SANDBOX_DEFAULT_AGENT = "research-bot";
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAM9C,eAAO,MAAM,gBAAgB,6CAA6C,CAAC;AAW3E,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAE7D;AAMD,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAGtD,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,iBAAiB,CAAC"}

package/dist/sandbox.js

@@ -0,0 +1,41 @@
+// The hosted sandbox: default base URL + the bundled public demo agents that
+// make the one-credential quickstart work. These demo identities are
+// DELIBERATELY PUBLIC — on the sandbox they can mint APPROVE attestations and
+// consume window budget, but they can never settle (no real EIP-712 key), so
+// shipping their signing keys is safe. In production you pass your own `agents`
+// map and none of this is used.
+//
+// The keys/ids/wallets below are derived deterministically from a fixed
+// namespace. When the sandbox org is provisioned, seed its agents to EXACTLY
+// these ids, public keys, and wallets (same derivation) so the quickstart runs
+// as written. Until then, `baseUrl` is configurable and production users are
+// unaffected.
+import * as ed from '@noble/ed25519';
+import { sha256, sha512 } from '@noble/hashes/sha2.js';
+import { bytesToHex, hexToBytes, utf8ToBytes } from '@noble/hashes/utils.js';
+ed.hashes.sha512 = sha512;
+// The hosted sandbox deployment. The SDK defaults here so the quickstart
+// needs no `baseUrl`.
+export const SANDBOX_BASE_URL = 'https://quartermaster-sandbox.vercel.app';
+const NS = 'quartermaster:sandbox:v1:';
+/** Derivation the sandbox seed must reuse verbatim to match the bundled agents. */
+function demoAgent(name) {
+    const signingKey = bytesToHex(sha256(utf8ToBytes(`${NS}agent:${name}`)));
+    const wallet = `0x${bytesToHex(sha256(utf8ToBytes(`${NS}wallet:${name}`))).slice(0, 40)}`;
+    return { id: name, signingKey, wallet };
+}
+/** Ed25519 public key (hex) for a demo agent — for the sandbox seed, not runtime. */
+export function demoAgentPublicKey(agent) {
+    return bytesToHex(ed.getPublicKey(hexToBytes(agent.signingKey)));
+}
+// Two demo spenders with different caps so both APPROVE and DENY are legible
+// from the README. The sandbox policy for `research-bot` caps at $5 (so the
+// usdc(500) example denies per_tx_cap_exceeded) and allowlists friendly payees
+// like 'openai' (so usdc(5) → 'openai' approves; 'sketchy-vendor' denies).
+export const SANDBOX_AGENTS = {
+    'research-bot': demoAgent('research-bot'),
+    'procurement-bot': demoAgent('procurement-bot'),
+};
+/** The agent qm.check() uses by default on the sandbox when none is named. */
+export const SANDBOX_DEFAULT_AGENT = 'research-bot';
+//# sourceMappingURL=sandbox.js.map

package/dist/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,qEAAqE;AACrE,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,gCAAgC;AAChC,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,cAAc;AACd,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAG7E,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;AAE1B,yEAAyE;AACzE,sBAAsB;AACtB,MAAM,CAAC,MAAM,gBAAgB,GAAG,0CAA0C,CAAC;AAE3E,MAAM,EAAE,GAAG,2BAA2B,CAAC;AAEvC,mFAAmF;AACnF,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,KAAK,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC1F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,KAAkB;IACnD,OAAO,UAAU,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,+EAA+E;AAC/E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,cAAc,GAAgC;IACzD,cAAc,EAAE,SAAS,CAAC,cAAc,CAAC;IACzC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,CAAC;CAChD,CAAC;AAEF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,CAAC"}

package/dist/sign.d.ts

@@ -0,0 +1,3 @@
+/** Ed25519 signature (128-char hex) over the canonical JSON of `body`. */
+export declare function signRequestBody(body: unknown, signingKeyHex: string): string;
+//# sourceMappingURL=sign.d.ts.map

package/dist/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../src/sign.ts"],"names":[],"mappings":"AAYA,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAE5E"}

package/dist/sign.js

@@ -0,0 +1,15 @@
+// Agent request signing. The server verifies ed25519(canonicalJson({ agentId,
+// payload, requirements })) against the agent's registered public key (see the
+// server's src/http/attest-common.ts verifyAgentSignature). We sign the exact
+// same preimage here so the developer never touches crypto.
+import * as ed from '@noble/ed25519';
+import { sha512 } from '@noble/hashes/sha2.js';
+import { bytesToHex, hexToBytes, utf8ToBytes } from '@noble/hashes/utils.js';
+import { canonicalJson } from './canonical-json.js';
+// @noble/ed25519 needs a sha512 implementation wired in (same as the server).
+ed.hashes.sha512 = sha512;
+/** Ed25519 signature (128-char hex) over the canonical JSON of `body`. */
+export function signRequestBody(body, signingKeyHex) {
+    return bytesToHex(ed.sign(utf8ToBytes(canonicalJson(body)), hexToBytes(signingKeyHex)));
+}
+//# sourceMappingURL=sign.js.map

package/dist/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../src/sign.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,4DAA4D;AAC5D,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,8EAA8E;AAC9E,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;AAE1B,0EAA0E;AAC1E,MAAM,UAAU,eAAe,CAAC,IAAa,EAAE,aAAqB;IAClE,OAAO,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,114 @@
+export interface AgentConfig {
+    /** The registered agent id (x-qm-agent-id / body.agentId). */
+    id: string;
+    /** Ed25519 private key (32-byte hex). Used to sign every request; never sent. */
+    signingKey: string;
+    /** The agent's EIP-3009 `from` wallet. Also satisfies on-chain wallet binding. */
+    wallet: string;
+}
+export interface QuartermasterConfig {
+    /** Tenant API key → Authorization: Bearer. Identifies the org, not the agent. */
+    apiKey: string;
+    /** Base URL of the Quartermaster deployment. Defaults to the hosted sandbox. */
+    baseUrl?: string;
+    /** Production: friendly name → signing identity. Merged over the sandbox demo set. */
+    agents?: Record<string, AgentConfig>;
+    /** Default agent name used when check() is called without one. */
+    agent?: string;
+    /** Injectable fetch (tests / custom transport). Defaults to globalThis.fetch. */
+    fetch?: typeof fetch;
+    /** Per-request timeout in milliseconds (default 10_000). */
+    timeoutMs?: number;
+}
+export interface CheckInput {
+    /** Payee (payTo). An opaque string — an address, or a sandbox payee name. */
+    to: string;
+    /** Amount in atomic units (6-decimal for USDC). Use usdc() — never a float. */
+    amount: string;
+    /** Agent name; defaults to the client's default agent / the sandbox demo agent. */
+    agent?: string;
+    /** CAIP-2 network. Default 'eip155:8453' (Base mainnet). */
+    network?: string;
+    /** Asset contract / code. Default USDC on Base. */
+    asset?: string;
+    /** EIP-3009 nonce (32-byte hex, 0x optional). Default: fresh random. */
+    nonce?: string;
+    /** Authorization validity window in seconds from now (default 600). */
+    validForSeconds?: number;
+}
+export type DenyReason = 'agent_suspended' | 'agent_unknown' | 'wallet_mismatch' | 'per_tx_cap_exceeded' | 'window_cap_exceeded' | 'network_not_allowed' | 'asset_not_allowed' | 'payee_not_allowed' | 'replay' | 'stale_authorization' | 'no_policy' | 'malformed';
+export type Decision = 'APPROVE' | 'DENY';
+export interface Receipt {
+    id: string;
+    organizationId: string;
+    seq: string;
+    agentId: string;
+    policyId: string | null;
+    decision: Decision;
+    denyReasons: string[];
+    network: string;
+    asset: string;
+    payTo: string;
+    amount: string;
+    eip3009Nonce: string;
+    payloadSha256: string;
+    requirements: unknown;
+    policySnapshot: unknown;
+    prevHash: string;
+    hash: string;
+    signature: string;
+    createdAt: string;
+}
+export interface CheckResult {
+    /** true exactly when the policy decision was APPROVE. */
+    approved: boolean;
+    decision: Decision;
+    /** Deny reasons ([] when approved). Strings from the engine vocabulary. */
+    reasons: DenyReason[];
+    /**
+     * The signed receipt. Present whenever the request was recorded on the hash
+     * chain — always on APPROVE, and on chainable denials. Absent only for
+     * unchained denials (agent_unknown / malformed / replay), which carry
+     * denialEventId instead.
+     */
+    receipt?: Receipt;
+    /** Present for unchained denials recorded as DenialEvents. */
+    denialEventId?: string;
+    /** The raw server JSON, for callers that need fields the SDK does not model. */
+    raw: unknown;
+}
+export interface VerifyOptions {
+    /**
+     * The org's Ed25519 signing public key (hex). When provided, verify()
+     * re-derives the whole chain LOCALLY from raw ledger rows and checks every
+     * signature against this pinned key — the strong guarantee that does not
+     * trust the server's own verdict.
+     */
+    publicKey?: string;
+    /** When set, also assert this attestation hash appears in the verified chain. */
+    hash?: string;
+    /** Max rows to pull per ledger page during local recompute (default 200). */
+    pageSize?: number;
+}
+export interface ChainProblem {
+    seq: string;
+    problem: string;
+}
+export interface VerifyResult {
+    valid: boolean;
+    length: number;
+    problems: ChainProblem[];
+    /** Only from the server path: whether the org's key is pinned server-side. */
+    anchored?: boolean;
+    /** Only when opts.hash was given: whether that entry is in the verified chain. */
+    entryFound?: boolean;
+}
+export interface LedgerOptions {
+    limit?: number;
+    after?: string;
+}
+export interface LedgerPage {
+    items: Receipt[];
+    nextCursor: string | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,WAAW;IAC1B,8DAA8D;IAC9D,EAAE,EAAE,MAAM,CAAC;IACX,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,6EAA6E;IAC7E,EAAE,EAAE,MAAM,CAAC;IACX,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAGD,MAAM,MAAM,UAAU,GAClB,iBAAiB,GACjB,eAAe,GACf,iBAAiB,GACjB,qBAAqB,GACrB,qBAAqB,GACrB,qBAAqB,GACrB,mBAAmB,GACnB,mBAAmB,GACnB,QAAQ,GACR,qBAAqB,GACrB,WAAW,GACX,WAAW,CAAC;AAEhB,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;AAK1C,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,yDAAyD;IACzD,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,QAAQ,CAAC;IACnB,2EAA2E;IAC3E,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,GAAG,EAAE,OAAO,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kFAAkF;IAClF,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B"}

package/dist/types.js

@@ -0,0 +1,5 @@
+// Public types for @quartermaster-sh/sdk. x402 message shapes follow spec v2
+// §5.1.2 / §5.2.2 and mirror the server's src/engine/types.ts — see the
+// x402-protocol skill before changing them.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,wEAAwE;AACxE,4CAA4C"}

package/dist/verify.d.ts

@@ -0,0 +1,8 @@
+import type { Receipt, VerifyResult } from './types.js';
+export declare const GENESIS_PREV_HASH = "GENESIS";
+/**
+ * Re-derive and verify a whole org chain locally against a pinned signing key.
+ * `rows` must be the complete ledger in ascending seq order, starting at seq 1.
+ */
+export declare function verifyChainLocally(signingPubKeyHex: string, rows: readonly Receipt[]): VerifyResult;
+//# sourceMappingURL=verify.d.ts.map

package/dist/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAgB,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAItE,eAAO,MAAM,iBAAiB,YAAY,CAAC;AAyD3C;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,OAAO,EAAE,GAAG,YAAY,CA4CnG"}

package/dist/verify.js

@@ -0,0 +1,94 @@
+// Local chain re-derivation — the trust demonstration. Given the raw ledger
+// rows and the org's PINNED Ed25519 public key, this recomputes the entire hash
+// chain from row 1 exactly as the server does, so a caller never has to trust
+// the /v1/ledger/verify endpoint's own word. Ports the pure logic from the
+// server's src/ledger/chain.ts + src/ledger/verify.ts, byte-for-byte.
+//
+// Why pinned key: verification against a key the server also stores proves
+// nothing to a database-level attacker who can rewrite the chain, re-sign with
+// a fresh key, and update the stored key in one breath. The pubkey must come
+// from outside the API (the org's published anchor).
+import * as ed from '@noble/ed25519';
+import { sha256, sha512 } from '@noble/hashes/sha2.js';
+import { bytesToHex, hexToBytes, utf8ToBytes } from '@noble/hashes/utils.js';
+import { canonicalJson } from './canonical-json.js';
+ed.hashes.sha512 = sha512;
+export const GENESIS_PREV_HASH = 'GENESIS';
+function hashInputFromRow(row) {
+    return {
+        id: row.id,
+        organizationId: row.organizationId,
+        seq: row.seq,
+        agentId: row.agentId,
+        policyId: row.policyId,
+        decision: row.decision,
+        denyReasons: row.denyReasons,
+        network: row.network,
+        asset: row.asset,
+        payTo: row.payTo,
+        amount: row.amount,
+        eip3009Nonce: row.eip3009Nonce,
+        payloadSha256: row.payloadSha256,
+        requirements: row.requirements,
+        policySnapshot: row.policySnapshot,
+        prevHash: row.prevHash,
+        createdAt: row.createdAt,
+    };
+}
+function computeAttestationHash(input) {
+    return bytesToHex(sha256(utf8ToBytes(canonicalJson(input))));
+}
+function verifyAttestationSignature(hashHex, signatureHex, publicKeyHex) {
+    try {
+        return ed.verify(hexToBytes(signatureHex), hexToBytes(hashHex), hexToBytes(publicKeyHex));
+    }
+    catch {
+        return false; // malformed hex never verifies
+    }
+}
+/**
+ * Re-derive and verify a whole org chain locally against a pinned signing key.
+ * `rows` must be the complete ledger in ascending seq order, starting at seq 1.
+ */
+export function verifyChainLocally(signingPubKeyHex, rows) {
+    const problems = [];
+    if (rows.length === 0) {
+        return { valid: true, length: 0, problems };
+    }
+    const organizationId = rows[0].organizationId;
+    let expectedPrevHash = GENESIS_PREV_HASH;
+    rows.forEach((row, i) => {
+        const expectedSeq = BigInt(i + 1);
+        if (row.organizationId !== organizationId) {
+            problems.push({ seq: row.seq, problem: `row belongs to org ${row.organizationId}` });
+        }
+        if (BigInt(row.seq) !== expectedSeq) {
+            problems.push({ seq: row.seq, problem: `sequence gap: expected seq ${expectedSeq}, found ${row.seq}` });
+        }
+        if (row.prevHash !== expectedPrevHash) {
+            problems.push({
+                seq: row.seq,
+                problem: `broken link: prevHash ${row.prevHash} != prior hash ${expectedPrevHash}`,
+            });
+        }
+        let recomputed = null;
+        try {
+            recomputed = computeAttestationHash(hashInputFromRow(row));
+        }
+        catch (err) {
+            problems.push({ seq: row.seq, problem: `hash input not canonicalizable: ${String(err)}` });
+        }
+        if (recomputed !== null && recomputed !== row.hash) {
+            problems.push({
+                seq: row.seq,
+                problem: `hash mismatch: stored ${row.hash}, recomputed ${recomputed} — row content was altered`,
+            });
+        }
+        if (!verifyAttestationSignature(row.hash, row.signature, signingPubKeyHex)) {
+            problems.push({ seq: row.seq, problem: 'signature does not verify against org signing key' });
+        }
+        expectedPrevHash = row.hash;
+    });
+    return { valid: problems.length === 0, length: rows.length, problems };
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAC9E,2EAA2E;AAC3E,sEAAsE;AACtE,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,qDAAqD;AACrD,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;AAE1B,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAuB3C,SAAS,gBAAgB,CAAC,GAAY;IACpC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAA2B;IACzD,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe,EAAE,YAAoB,EAAE,YAAoB;IAC7F,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,+BAA+B;IAC/C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,gBAAwB,EAAE,IAAwB;IACnF,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,cAAc,CAAC;IAC/C,IAAI,gBAAgB,GAAG,iBAAiB,CAAC;IAEzC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACtB,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,sBAAsB,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,WAAW,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,8BAA8B,WAAW,WAAW,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC;gBACZ,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,OAAO,EAAE,yBAAyB,GAAG,CAAC,QAAQ,kBAAkB,gBAAgB,EAAE;aACnF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,CAAC;YACH,UAAU,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,mCAAmC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC;gBACZ,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,OAAO,EAAE,yBAAyB,GAAG,CAAC,IAAI,gBAAgB,UAAU,4BAA4B;aACjG,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,CAAC;YAC3E,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,gBAAgB,GAAG,GAAG,CAAC,IAAI,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;AACzE,CAAC"}

package/dist/x402.d.ts

@@ -0,0 +1,30 @@
+import type { AgentConfig, CheckInput } from './types.js';
+export interface PaymentRequirements {
+    scheme: 'exact';
+    network: string;
+    amount: string;
+    asset: string;
+    payTo: string;
+    maxTimeoutSeconds: number;
+}
+export interface PaymentPayload {
+    x402Version: 2;
+    accepted: PaymentRequirements;
+    payload: {
+        signature: string;
+        authorization: {
+            from: string;
+            to: string;
+            value: string;
+            validAfter: string;
+            validBefore: string;
+            nonce: string;
+        };
+    };
+}
+export interface X402Pair {
+    requirements: PaymentRequirements;
+    payload: PaymentPayload;
+}
+export declare function buildX402Pair(input: CheckInput, agent: AgentConfig, nowMs?: number): X402Pair;
+//# sourceMappingURL=x402.d.ts.map

package/dist/x402.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402.d.ts","sourceRoot":"","sources":["../src/x402.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAY1D,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,CAAC,CAAC;IACf,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE;YACb,IAAI,EAAE,MAAM,CAAC;YACb,EAAE,EAAE,MAAM,CAAC;YACX,KAAK,EAAE,MAAM,CAAC;YACd,UAAU,EAAE,MAAM,CAAC;YACnB,WAAW,EAAE,MAAM,CAAC;YACpB,KAAK,EAAE,MAAM,CAAC;SACf,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,QAAQ;IACvB,YAAY,EAAE,mBAAmB,CAAC;IAClC,OAAO,EAAE,cAAc,CAAC;CACzB;AAgBD,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,GAAE,MAAmB,GAAG,QAAQ,CA8BzG"}

package/dist/x402.js

@@ -0,0 +1,50 @@
+import { BASE_MAINNET, USDC_BASE, randomNonce } from './amounts.js';
+// The EIP-712 authorization signature is verified UPSTREAM at settlement (spec
+// §6.1.2), never by the policy engine. check() produces an attestation, not a
+// settleable on-chain payment, so a placeholder is correct and honest here —
+// documented in the README's "what check() does and does not do".
+const PLACEHOLDER_EIP712_SIGNATURE = `0x${'00'.repeat(65)}`;
+const DEFAULT_MAX_TIMEOUT_SECONDS = 60;
+const DEFAULT_VALID_FOR_SECONDS = 600;
+// Normalize a caller-supplied nonce (or mint one) to the `0x`-prefixed 32-byte
+// hex the authorization carries. The engine/ledger normalize it again to their
+// canonical form, but we validate here so a bad nonce fails in the SDK, loudly,
+// before signing.
+function toAuthorizationNonce(nonce) {
+    const hex = (nonce ?? randomNonce()).toLowerCase().replace(/^0x/, '');
+    if (!/^[0-9a-f]{64}$/.test(hex)) {
+        throw new TypeError(`nonce must be 32-byte hex (0x optional); got "${nonce}"`);
+    }
+    return `0x${hex}`;
+}
+// `nowMs` is injectable purely so tests are deterministic; production passes the
+// real wall clock (the server evaluates the validity window at receive time).
+export function buildX402Pair(input, agent, nowMs = Date.now()) {
+    const nowSeconds = Math.floor(nowMs / 1000);
+    const validForSeconds = input.validForSeconds ?? DEFAULT_VALID_FOR_SECONDS;
+    const requirements = {
+        scheme: 'exact',
+        network: input.network ?? BASE_MAINNET,
+        amount: input.amount,
+        asset: input.asset ?? USDC_BASE,
+        payTo: input.to,
+        maxTimeoutSeconds: DEFAULT_MAX_TIMEOUT_SECONDS,
+    };
+    const payload = {
+        x402Version: 2,
+        accepted: { ...requirements },
+        payload: {
+            signature: PLACEHOLDER_EIP712_SIGNATURE,
+            authorization: {
+                from: agent.wallet,
+                to: input.to,
+                value: input.amount,
+                validAfter: String(nowSeconds - 60),
+                validBefore: String(nowSeconds + validForSeconds),
+                nonce: toAuthorizationNonce(input.nonce),
+            },
+        },
+    };
+    return { requirements, payload };
+}
+//# sourceMappingURL=x402.js.map

package/dist/x402.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402.js","sourceRoot":"","sources":["../src/x402.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEpE,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,kEAAkE;AAClE,MAAM,4BAA4B,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAE5D,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAgCtC,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,kBAAkB;AAClB,SAAS,oBAAoB,CAAC,KAAyB;IACrD,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,iDAAiD,KAAK,GAAG,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,GAAG,EAAE,CAAC;AACpB,CAAC;AAED,iFAAiF;AACjF,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAAC,KAAiB,EAAE,KAAkB,EAAE,QAAgB,IAAI,CAAC,GAAG,EAAE;IAC7F,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAC5C,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,yBAAyB,CAAC;IAE3E,MAAM,YAAY,GAAwB;QACxC,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,YAAY;QACtC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,SAAS;QAC/B,KAAK,EAAE,KAAK,CAAC,EAAE;QACf,iBAAiB,EAAE,2BAA2B;KAC/C,CAAC;IAEF,MAAM,OAAO,GAAmB;QAC9B,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,EAAE,GAAG,YAAY,EAAE;QAC7B,OAAO,EAAE;YACP,SAAS,EAAE,4BAA4B;YACvC,aAAa,EAAE;gBACb,IAAI,EAAE,KAAK,CAAC,MAAM;gBAClB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,UAAU,EAAE,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;gBACnC,WAAW,EAAE,MAAM,CAAC,UAAU,GAAG,eAAe,CAAC;gBACjD,KAAK,EAAE,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC;aACzC;SACF;KACF,CAAC;IAEF,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC"}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@quartermaster-sh/sdk",
+  "version": "0.1.0",
+  "description": "Check before your agent pays. The TypeScript client for Quartermaster — policy checks + signed, hash-chained receipts for x402 agent spending.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": ["dist", "README.md"],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "@noble/ed25519": "^3.1.0",
+    "@noble/hashes": "^2.2.0"
+  },
+  "devDependencies": {
+    "typescript": "^6.0.3"
+  },
+  "keywords": ["x402", "agent", "payments", "policy", "attestation", "quartermaster"],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/src4511-ops/quartermaster.git",
+    "directory": "packages/sdk"
+  },
+  "bugs": {
+    "url": "https://github.com/src4511-ops/quartermaster/issues"
+  },
+  "homepage": "https://github.com/src4511-ops/quartermaster/tree/main/packages/sdk#readme",
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "MIT"
+}