@seedhape/core 0.1.0

package/dist/__tests__/acp.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=acp.test.d.ts.map

package/dist/__tests__/acp.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/acp.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/acp.test.js

@@ -0,0 +1,16 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { validateAcpCreateCheckout, validateAcpRequestContext } from "../acp.js";
+test("validates an ACP create-session request before side effects", () => {
+    assert.deepEqual(validateAcpCreateCheckout({ items: [{ id: "market-signal", quantity: 1 }], buyer: { email: "buyer@example.test" } }), { items: [{ id: "market-signal", quantity: 1 }], buyer: { email: "buyer@example.test" } });
+    assert.throws(() => validateAcpCreateCheckout({ items: [] }), /non-empty/);
+    assert.throws(() => validateAcpCreateCheckout({ items: [{ id: "x", quantity: 0 }] }), /positive integer/);
+    assert.throws(() => validateAcpCreateCheckout({ items: [{ id: "x", quantity: 1 }], buyer: [] }), /buyer must be an object/);
+});
+test("requires ACP bearer, idempotency, timestamp, and API version headers", () => {
+    const headers = { Authorization: "Bearer test-key", "Idempotency-Key": "request-1", Timestamp: "2026-09-17T12:00:00Z", "API-Version": "2026-04-17" };
+    assert.deepEqual(validateAcpRequestContext(headers), { authorization: "Bearer test-key", idempotencyKey: "request-1", timestamp: headers.Timestamp, apiVersion: headers["API-Version"] });
+    assert.throws(() => validateAcpRequestContext({ ...headers, Authorization: "Basic no" }), /bearer/);
+    assert.throws(() => validateAcpRequestContext({ ...headers, Timestamp: "yesterday" }), /RFC 3339/);
+});
+//# sourceMappingURL=acp.test.js.map

package/dist/__tests__/acp.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp.test.js","sourceRoot":"","sources":["../../src/__tests__/acp.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEjF,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,CAAC,SAAS,CAAC,yBAAyB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAC;IAClO,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;IAC3E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC1G,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,yBAAyB,CAAC,CAAC;AAC9H,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,EAAE,sBAAsB,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;IACrJ,MAAM,CAAC,SAAS,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC1L,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;AACrG,CAAC,CAAC,CAAC"}

package/dist/__tests__/ap2-official.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ap2-official.test.d.ts.map

package/dist/__tests__/ap2-official.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ap2-official.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/ap2-official.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/ap2-official.test.js

@@ -0,0 +1,49 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { generateKeyPair, exportJWK } from "jose";
+import { AP2_VCT, issueClosedAp2MandateBundle, issueOpenAp2MandateBundle, issueAp2SdJwt, verifyAp2SdJwt, } from "../ap2/official.js";
+test("issues and verifies an AP2 payment SD-JWT with selective disclosures", async () => {
+    const { privateKey, publicKey } = await generateKeyPair("ES256");
+    const publicJwk = await exportJWK(publicKey);
+    const credential = await issueAp2SdJwt({
+        vct: AP2_VCT.paymentOpen,
+        issuer: "https://seedhape.example",
+        privateKey,
+        publicJwk,
+        expiresAt: Math.floor(Date.now() / 1000) + 3600,
+        claims: {
+            constraints: [{ type: "payment.amount_range", currency: "USD", min: 0, max: 5 }],
+            merchant: { name: "Demo Merchant", website: "https://merchant.example" },
+        },
+    });
+    const payload = await verifyAp2SdJwt(credential.token, publicKey, AP2_VCT.paymentOpen);
+    assert.deepEqual(payload.merchant, { name: "Demo Merchant", website: "https://merchant.example" });
+    await assert.rejects(() => verifyAp2SdJwt(credential.token, publicKey, AP2_VCT.checkoutOpen));
+    await assert.rejects(() => verifyAp2SdJwt(`${credential.issuerJwt}~${credential.disclosures[0]}~${credential.disclosures[0]}~`, publicKey, AP2_VCT.paymentOpen), /digest mismatch/);
+    await assert.rejects(() => issueAp2SdJwt({ vct: AP2_VCT.paymentOpen, issuer: "https://seedhape.example", privateKey, publicJwk, expiresAt: 1_800_000_000, claims: { exp: 1 } }), /reserved/);
+});
+test("binds closed AP2 mandates to the exact open mandate pair", async () => {
+    const { privateKey, publicKey } = await generateKeyPair("ES256");
+    const publicJwk = await exportJWK(publicKey);
+    const issuer = "https://seedhape.example";
+    const expiresAt = Math.floor(Date.now() / 1000) + 3600;
+    const openCheckout = await issueAp2SdJwt({ vct: AP2_VCT.checkoutOpen, issuer, subject: "0xsubject", privateKey, publicJwk, expiresAt, claims: { constraints: [{ type: "checkout.allowed_merchants", allowed: [{ id: "m", name: "Merchant", website: "https://merchant.example", payTo: "m" }] }] } });
+    const openPayment = await issueAp2SdJwt({ vct: AP2_VCT.paymentOpen, issuer, subject: "0xsubject", privateKey, publicJwk, expiresAt, claims: { constraints: [{ type: "payment.amount_range", min: 0.5, max: 1, currency: "USD" }, { type: "payment.allowed_payees", allowed: [{ id: "m", name: "Merchant", website: "https://merchant.example", payTo: "m" }] }, { type: "payment.allowed_payment_instruments", allowed: [{ id: "i", type: "card", description: "Card" }] }] } });
+    const open = { checkout: { ...openCheckout, payload: await verifyAp2SdJwt(openCheckout.token, publicKey, AP2_VCT.checkoutOpen) }, payment: { ...openPayment, payload: await verifyAp2SdJwt(openPayment.token, publicKey, AP2_VCT.paymentOpen) }, issuer, issuedAt: expiresAt - 1, expiresAt };
+    const closed = await issueClosedAp2MandateBundle({ open, checkoutJwt: "checkout.jwt", amount: 100n, decimals: 2, currency: "USD", payee: { id: "m", name: "Merchant", website: "https://merchant.example", payTo: "m" }, paymentInstrument: { id: "i", type: "card", description: "Card" }, issuer, privateKey, publicJwk, expiresAt: expiresAt - 1 });
+    const checkout = await verifyAp2SdJwt(closed.checkout.token, publicKey, AP2_VCT.checkout);
+    const payment = await verifyAp2SdJwt(closed.payment.token, publicKey, AP2_VCT.payment);
+    assert.equal(checkout.open_checkout_hash.length > 0, true);
+    assert.equal(payment.open_payment_hash.length > 0, true);
+    await assert.rejects(() => issueClosedAp2MandateBundle({ open, checkoutJwt: "checkout.jwt", amount: 101n, decimals: 2, currency: "USD", payee: { id: "m", name: "Merchant", website: "https://merchant.example", payTo: "m" }, paymentInstrument: { id: "i", type: "card", description: "Card" }, issuer, privateKey, publicJwk, expiresAt: expiresAt - 1 }), /amount constraint/);
+    await assert.rejects(() => issueClosedAp2MandateBundle({ open, checkoutJwt: "checkout.jwt", amount: 49n, decimals: 2, currency: "USD", payee: { id: "m", name: "Merchant", website: "https://merchant.example", payTo: "m" }, paymentInstrument: { id: "i", type: "card", description: "Card" }, issuer, privateKey, publicJwk, expiresAt: expiresAt - 1 }), /amount constraint/);
+    await assert.rejects(() => issueClosedAp2MandateBundle({ open, checkoutJwt: "checkout.jwt", amount: 100n, decimals: 2, currency: "USD", payee: { id: "m", name: "Merchant", website: "https://merchant.example", payTo: "m" }, paymentInstrument: { id: "i", type: "bank", description: "Card" }, issuer, privateKey, publicJwk, expiresAt: expiresAt - 1 }), /instrument/);
+    await assert.rejects(() => issueClosedAp2MandateBundle({ open, checkoutJwt: "checkout.jwt", amount: 100n, decimals: 2, currency: "USD", payee: { id: "m", name: "Merchant", website: "https://merchant.example", payTo: "m" }, paymentInstrument: { id: "i", type: "card", description: "Card" }, issuer: "https://other.example", privateKey, publicJwk, expiresAt: expiresAt - 1 }));
+    await assert.rejects(() => issueClosedAp2MandateBundle({ open, checkoutJwt: "checkout.jwt", amount: 0n, decimals: 2, currency: "USD", payee: { id: "m", name: "Merchant", website: "https://merchant.example", payTo: "m" }, paymentInstrument: { id: "i", type: "card", description: "Card" }, issuer, privateKey, publicJwk, expiresAt: expiresAt - 1 }), /amount/);
+});
+test("requires a concrete payout address for an AP2 open mandate", async () => {
+    const { privateKey, publicKey } = await generateKeyPair("ES256");
+    const publicJwk = await exportJWK(publicKey);
+    await assert.rejects(() => issueOpenAp2MandateBundle({ mandate: {}, issuer: "https://seedhape.example", privateKey, publicJwk, merchant: { id: "m", name: "Merchant", website: "https://merchant.example", payTo: "" }, instrument: { id: "i", type: "card", description: "Card" } }), /payout address/);
+});
+//# sourceMappingURL=ap2-official.test.js.map

package/dist/__tests__/ap2-official.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ap2-official.test.js","sourceRoot":"","sources":["../../src/__tests__/ap2-official.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAClD,OAAO,EACL,OAAO,EACP,2BAA2B,EAC3B,yBAAyB,EACzB,aAAa,EACb,cAAc,GACf,MAAM,oBAAoB,CAAC;AAE5B,IAAI,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACtF,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC;QACrC,GAAG,EAAE,OAAO,CAAC,WAAW;QACxB,MAAM,EAAE,0BAA0B;QAClC,UAAU;QACV,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;QAC/C,MAAM,EAAE;YACN,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YAChF,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE;SACzE;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACvF,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACnG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9F,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACpL,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,0BAA0B,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;AAC/L,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC1E,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,0BAA0B,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACvD,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACtS,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,qCAAqC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACjd,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;IAC9R,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,EAAE,CAAC,CAAC;IACvV,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,MAAM,CAAC,KAAK,CAAE,QAAQ,CAAC,kBAA6B,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAE,OAAO,CAAC,iBAA4B,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACrE,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACnX,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAClX,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;IAC5W,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACvX,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;AACxW,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;IAC5E,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,EAAE,OAAO,EAAE,EAAW,EAAE,MAAM,EAAE,0BAA0B,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACpT,CAAC,CAAC,CAAC"}

package/dist/__tests__/mpp.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mpp.test.d.ts.map

package/dist/__tests__/mpp.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mpp.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/mpp.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/mpp.test.js

@@ -0,0 +1,42 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { fetchWithMpp, formatMppChallenge, formatMppCredential, formatMppReceipt, parseMppChallenge, parseMppCredential, parseMppReceipt } from "../mpp.js";
+test("round-trips an MPP challenge with encoded request and extensions", () => {
+    const input = { id: "challenge-1", realm: "seedhape.example", method: "stripe", intent: "charge", request: { amount: "500", currency: "usd" }, expires: 1_800_000_000, profile: "preview" };
+    assert.deepEqual(parseMppChallenge(formatMppChallenge(input)), input);
+});
+test("rejects malformed and duplicate MPP challenge parameters", () => {
+    assert.throws(() => parseMppChallenge('Payment id="a", id="b", realm="r", method="m", intent="i", request="e30"'), /Duplicate/);
+    assert.throws(() => parseMppChallenge('Payment id="a", realm="r", method="m", intent="i", request="not-base64"'), /Invalid MPP challenge request/);
+});
+test("round-trips credential and receipt wire values", () => {
+    const credential = { challenge: { id: "c", realm: "r", method: "tempo", intent: "charge", request: {} }, payload: { transaction: "signed" }, source: { account: "agent" } };
+    assert.deepEqual(parseMppCredential(formatMppCredential(credential)), credential);
+    const receipt = { status: "settled", method: "tempo", timestamp: 1_800_000_000, reference: "tx-1", network: "tempo" };
+    assert.deepEqual(parseMppReceipt(formatMppReceipt(receipt)), receipt);
+});
+test("retries one MPP challenge and parses the settlement receipt", async () => {
+    const challenge = { id: "challenge-outbound", realm: "merchant.test", method: "stripe", intent: "charge", request: { amount: "50", currency: "usd" } };
+    const receipt = { status: "settled", method: "stripe", timestamp: 1_800_000_000, reference: "pi_123" };
+    const calls = [];
+    const result = await fetchWithMpp("https://merchant.test/api", { method: "POST" }, async (received) => {
+        assert.deepEqual(received, challenge);
+        return { challenge: received, payload: { token: "opaque" } };
+    }, async (_input, init) => {
+        calls.push(init ?? {});
+        if (calls.length === 1)
+            return new Response("payment required", { status: 402, headers: { "www-authenticate": formatMppChallenge(challenge) } });
+        return new Response("ok", { status: 200, headers: { "payment-receipt": formatMppReceipt(receipt) } });
+    });
+    assert.equal(result.response.status, 200);
+    assert.deepEqual(result.receipt, receipt);
+    assert.equal(calls.length, 2);
+    assert.match(String(new Headers(calls[1].headers).get("authorization")), /^Payment /);
+});
+test("does not create a credential for an expired MPP challenge", async () => {
+    const challenge = { id: "expired", realm: "merchant.test", method: "stripe", intent: "charge", request: {}, expires: Math.floor(Date.now() / 1000) - 1 };
+    let credentialCalls = 0;
+    await assert.rejects(() => fetchWithMpp("https://merchant.test/api", {}, async () => { credentialCalls += 1; return { challenge, payload: {} }; }, async () => new Response("payment required", { status: 402, headers: { "www-authenticate": formatMppChallenge(challenge) } })), /expired/);
+    assert.equal(credentialCalls, 0);
+});
+//# sourceMappingURL=mpp.test.js.map

package/dist/__tests__/mpp.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mpp.test.js","sourceRoot":"","sources":["../../src/__tests__/mpp.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5J,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;IAC5E,MAAM,KAAK,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAC5L,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACxE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACpE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,0EAA0E,CAAC,EAAE,WAAW,CAAC,CAAC;IAChI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,yEAAyE,CAAC,EAAE,+BAA+B,CAAC,CAAC;AACrJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,UAAU,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;IAC5K,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACtH,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,SAAS,GAAG,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;IACvJ,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACvG,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QACpG,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACtC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC/D,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACxB,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACvB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,QAAQ,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QACjJ,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AACxF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;IAC3E,MAAM,SAAS,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACzJ,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,2BAA2B,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE,GAAG,eAAe,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9R,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC"}

package/dist/__tests__/outbound.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=outbound.test.d.ts.map

package/dist/__tests__/outbound.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/outbound.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/outbound.test.js

@@ -0,0 +1,23 @@
+import { test, describe } from "node:test";
+import assert from "node:assert/strict";
+import { validateOutboundUrl } from "../x402/outbound.js";
+describe("outbound request policy", () => {
+    test("rejects loopback and private address literals", async () => {
+        await assert.rejects(() => validateOutboundUrl("http://127.0.0.1:8080/health"), /blocked loopback address/);
+        await assert.rejects(() => validateOutboundUrl("http://192.168.1.10/internal"), /blocked private 192\.168\/16 address/);
+    });
+    test("rejects non-HTTP protocols and embedded credentials", async () => {
+        await assert.rejects(() => validateOutboundUrl("file:///etc/passwd"), /must use HTTP\(S\)/);
+        await assert.rejects(() => validateOutboundUrl("https://agent:secret@example.com/pay"), /embedded credentials/);
+    });
+    test("allows loopback only with an explicit isolated-test override", async () => {
+        const url = await validateOutboundUrl("http://127.0.0.1:8080/health", {
+            allowPrivateNetworks: true,
+        });
+        assert.equal(url.hostname, "127.0.0.1");
+    });
+    test("can require HTTPS outside production defaults", async () => {
+        await assert.rejects(() => validateOutboundUrl("http://example.com/pay", { requireHttps: true }), /must use HTTPS/);
+    });
+});
+//# sourceMappingURL=outbound.test.js.map

package/dist/__tests__/outbound.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound.test.js","sourceRoot":"","sources":["../../src/__tests__/outbound.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,mBAAmB,CAAC,8BAA8B,CAAC,EACzD,0BAA0B,CAC3B,CAAC;QACF,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,mBAAmB,CAAC,8BAA8B,CAAC,EACzD,sCAAsC,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,EAC/C,oBAAoB,CACrB,CAAC;QACF,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,mBAAmB,CAAC,sCAAsC,CAAC,EACjE,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,8BAA8B,EAAE;YACpE,oBAAoB,EAAE,IAAI;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,mBAAmB,CAAC,wBAAwB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAC3E,gBAAgB,CACjB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/protocols.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=protocols.test.d.ts.map

package/dist/__tests__/protocols.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocols.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/protocols.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/protocols.test.js

@@ -0,0 +1,16 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { PROTOCOL_COMPATIBILITY, validateProtocolCapability } from "../protocols.js";
+test("compatibility manifest includes every planned protocol exactly once", () => {
+    assert.deepEqual(PROTOCOL_COMPATIBILITY.map(({ id }) => id), ["acp", "ucp", "ap2", "x402", "mpp", "webmcp", "web_bot_auth"]);
+    assert.equal(new Set(PROTOCOL_COMPATIBILITY.map(({ id }) => id)).size, 7);
+    for (const capability of PROTOCOL_COMPATIBILITY)
+        assert.ok(["enabled", "preview", "planned"].includes(capability.status));
+    for (const capability of PROTOCOL_COMPATIBILITY)
+        assert.doesNotThrow(() => validateProtocolCapability(capability));
+});
+test("enabled capabilities must declare a version", () => {
+    assert.throws(() => validateProtocolCapability({ id: "x402", role: "http_payment", status: "enabled", versions: [] }), /declare a version/);
+    assert.throws(() => validateProtocolCapability({ id: "x402", role: "unknown", status: "preview", versions: ["2"] }), /Invalid protocol capability/);
+});
+//# sourceMappingURL=protocols.test.js.map

package/dist/__tests__/protocols.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocols.test.js","sourceRoot":"","sources":["../../src/__tests__/protocols.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAErF,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7H,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1E,KAAK,MAAM,UAAU,IAAI,sBAAsB;QAAE,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1H,KAAK,MAAM,UAAU,IAAI,sBAAsB;QAAE,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC;AACrH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6CAA6C,EAAE,GAAG,EAAE;IACvD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC5I,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,6BAA6B,CAAC,CAAC;AAC/J,CAAC,CAAC,CAAC"}

package/dist/__tests__/providers.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=providers.test.d.ts.map

package/dist/__tests__/providers.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/providers.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/providers.test.js

@@ -0,0 +1,41 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { EoaPaymentProvider, HttpCoinbaseSpendPermissionProvider, HttpMetaMaskDelegationProvider, selectPaymentProvider, } from "../wallet/providers.js";
+const address = "0x1111111111111111111111111111111111111111";
+const token = "0x2222222222222222222222222222222222222222";
+function requirement(method) {
+    return {
+        scheme: "exact", network: "eip155:84532", maxAmountRequired: "10000", resource: "https://merchant.test/api", description: "demo", payTo: address,
+        maxTimeoutSeconds: 300, asset: token, extra: method ? { assetTransferMethod: method } : undefined,
+    };
+}
+test("provider selection follows the merchant transfer method", async () => {
+    const eoa = new EoaPaymentProvider(address, async () => ({ signature: "0xabc" }));
+    const meta = new HttpMetaMaskDelegationProvider({ baseUrl: "https://custody.test", bearerToken: "secret", address, fetchImpl: async () => new Response(null, { status: 500 }) });
+    assert.equal(selectPaymentProvider([meta, eoa], requirement()).kind, "eoa");
+    assert.equal(selectPaymentProvider([eoa, meta], requirement("erc7710")).kind, "metamask-erc7710");
+    assert.throws(() => selectPaymentProvider([eoa], requirement("coinbase-spend-permission")), /No configured payment provider/);
+});
+test("remote providers validate grants and never expose signing keys", async () => {
+    const responses = {
+        "/grant": { grant: { account: address, spender: address, token, network: "eip155:84532", allowance: "5000000", periodSeconds: 86400, start: 1, end: 2 } },
+        "/remaining": { remaining: "4990000" },
+        "/payment-payload": { payer: address, payload: { delegationManager: address, permissionContext: "0xdeadbeef", delegator: address } },
+        "/revoke": { ok: true },
+    };
+    const provider = new HttpCoinbaseSpendPermissionProvider({
+        baseUrl: "https://custody.test", bearerToken: "secret", address,
+        fetchImpl: async (input, init) => {
+            const path = new URL(String(input)).pathname;
+            assert.equal(init?.headers?.authorization, "Bearer secret");
+            return new Response(JSON.stringify(responses[path]), { status: 200, headers: { "content-type": "application/json" } });
+        },
+    });
+    assert.equal((await provider.currentPermission())?.allowance, 5000000n);
+    assert.equal(await provider.remainingAllowance(), 4990000n);
+    const payment = await provider.createPaymentAuthorization({ requirement: requirement("coinbase-spend-permission"), resource: "https://merchant.test/api" });
+    assert.equal(payment.transferMethod, "coinbase-spend-permission");
+    assert.equal(payment.payer, address);
+    await provider.revokePermission();
+});
+//# sourceMappingURL=providers.test.js.map

package/dist/__tests__/providers.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.test.js","sourceRoot":"","sources":["../../src/__tests__/providers.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,kBAAkB,EAClB,mCAAmC,EACnC,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,OAAO,GAAG,4CAA6D,CAAC;AAC9E,MAAM,KAAK,GAAG,4CAA6D,CAAC;AAE5E,SAAS,WAAW,CAAC,MAAe;IAClC,OAAO;QACL,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,2BAA2B,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;QAChJ,iBAAiB,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;KAClG,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,GAAG,GAAG,IAAI,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,IAAI,8BAA8B,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACjL,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5E,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAClG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,2BAA2B,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;AAChI,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;IAChF,MAAM,SAAS,GAA4B;QACzC,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE;QACzJ,YAAY,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE;QACtC,kBAAkB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE;QACpI,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;KACxB,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,mCAAmC,CAAC;QACvD,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO;QAC/D,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAE,IAAI,EAAE,OAAkC,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;YACxF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACzH,CAAC;KACF,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,iBAAiB,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,kBAAkB,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,0BAA0B,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,2BAA2B,EAAE,CAAC,CAAC;IAC5J,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IAClE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,QAAQ,CAAC,gBAAgB,EAAE,CAAC;AACpC,CAAC,CAAC,CAAC"}

package/dist/__tests__/reconciliation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=reconciliation.test.d.ts.map

package/dist/__tests__/reconciliation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconciliation.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/reconciliation.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/reconciliation.test.js

@@ -0,0 +1,35 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { SqliteStore, reconcilePendingSpends } from "../index.js";
+const spend = (id) => ({
+    id, userId: "user-1", intentHash: "intent", resource: `https://merchant.test/${id}`,
+    host: "merchant.test", payTo: "0x0000000000000000000000000000000000000001", amount: 5n,
+    asset: { address: "0x0000000000000000000000000000000000000002", symbol: "USDC", decimals: 6, network: "base" },
+    inrPaise: 500n, fxRateScaled: 1n, status: "pending", createdAt: 100,
+});
+test("reconciles settled and failed spends exactly once", async () => {
+    const store = new SqliteStore(":memory:");
+    await store.putSpend(spend("settled"));
+    await store.putSpend(spend("failed"));
+    assert.equal(await store.reserveSpend("user-1", "settled", 5n, 0, 20n, 100), true);
+    assert.equal(await store.reserveSpend("user-1", "failed", 5n, 0, 20n, 100), true);
+    const result = await reconcilePendingSpends(store, "user-1", async (item) => item.id === "settled" ? { status: "settled", txHash: "0xabc" } : { status: "failed", reason: "provider declined" }, undefined, 200);
+    assert.deepEqual(result, { inspected: 2, settled: 1, failed: 1, pending: 0, errors: 0 });
+    assert.equal((await store.listSpends("user-1")).find((item) => item.id === "settled")?.status, "settled");
+    assert.equal((await store.listSpends("user-1")).find((item) => item.id === "failed")?.status, "failed");
+    const replay = await reconcilePendingSpends(store, "user-1", async () => { throw new Error("must not be called"); });
+    assert.deepEqual(replay, { inspected: 0, settled: 0, failed: 0, pending: 0, errors: 0 });
+    store.close();
+});
+test("keeps unresolved spends reserved when lookup is pending or errors", async () => {
+    const store = new SqliteStore(":memory:");
+    await store.putSpend(spend("pending"));
+    await store.putSpend(spend("error"));
+    assert.equal(await store.reserveSpend("user-1", "pending", 5n, 0, 20n, 100), true);
+    assert.equal(await store.reserveSpend("user-1", "error", 5n, 0, 20n, 100), true);
+    const result = await reconcilePendingSpends(store, "user-1", async (item) => item.id === "pending" ? { status: "pending" } : Promise.reject(new Error("network")));
+    assert.deepEqual(result, { inspected: 2, settled: 0, failed: 0, pending: 1, errors: 1 });
+    assert.deepEqual(await store.getAccountBudgetUsage("user-1", 0), { spent: 0n, reserved: 10n });
+    store.close();
+});
+//# sourceMappingURL=reconciliation.test.js.map

package/dist/__tests__/reconciliation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconciliation.test.js","sourceRoot":"","sources":["../../src/__tests__/reconciliation.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAoB,MAAM,aAAa,CAAC;AAEpF,MAAM,KAAK,GAAG,CAAC,EAAU,EAAe,EAAE,CAAC,CAAC;IAC1C,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAyB,EAAE,QAAQ,EAAE,yBAAyB,EAAE,EAAE;IACpG,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,4CAA4C,EAAE,MAAM,EAAE,EAAE;IACtF,KAAK,EAAE,EAAE,OAAO,EAAE,4CAA4C,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE;IAC9G,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG;CACpE,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;IACnE,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACvC,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACnF,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAClO,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACzF,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC1G,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACxG,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrH,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACzF,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACvC,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACnF,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnK,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACzF,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,qBAAqB,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/F,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC,CAAC,CAAC"}

package/dist/__tests__/spending-controls.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=spending-controls.test.d.ts.map

package/dist/__tests__/spending-controls.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spending-controls.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/spending-controls.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/spending-controls.test.js

@@ -0,0 +1,47 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { SqliteStore } from "../store.js";
+test("spending pause persists and defaults to unpaused", async () => {
+    const directory = mkdtempSync(join(tmpdir(), "seedhape-controls-"));
+    const database = join(directory, "ledger.db");
+    try {
+        const first = new SqliteStore(database);
+        assert.equal(await first.isSpendingPaused("user-1"), false);
+        assert.equal(await first.getAccountBudget("user-1"), null);
+        await first.setAccountBudget("user-1", { amount: 25n, currency: "USDC", periodSeconds: 3600, periodStart: 90 }, 100);
+        assert.deepEqual(await first.getAccountBudget("user-1"), { amount: 25n, currency: "USDC", periodSeconds: 3600, periodStart: 90 });
+        await first.setSpendingPaused("user-1", true, 100);
+        assert.equal(await first.isSpendingPaused("user-1"), true);
+        first.close();
+        const reopened = new SqliteStore(database);
+        assert.equal(await reopened.isSpendingPaused("user-1"), true);
+        await reopened.setSpendingPaused("user-1", false, 101);
+        assert.equal(await reopened.isSpendingPaused("user-1"), false);
+        reopened.close();
+    }
+    finally {
+        rmSync(directory, { recursive: true, force: true });
+    }
+});
+test("spend reservations are atomic across concurrent callers", async () => {
+    const directory = mkdtempSync(join(tmpdir(), "seedhape-reservations-"));
+    const store = new SqliteStore(join(directory, "ledger.db"));
+    try {
+        const results = await Promise.all([
+            store.reserveSpend("user-1", "attempt-a", 7n, 0, 10n, 100),
+            store.reserveSpend("user-1", "attempt-b", 7n, 0, 10n, 100),
+        ]);
+        assert.deepEqual(results.sort(), [false, true]);
+        await store.releaseSpendReservation("attempt-a");
+        await store.releaseSpendReservation("attempt-b");
+        assert.equal(await store.reserveSpend("user-1", "attempt-c", 10n, 0, 10n, 101), true);
+    }
+    finally {
+        store.close();
+        rmSync(directory, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=spending-controls.test.js.map

package/dist/__tests__/spending-controls.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spending-controls.test.js","sourceRoot":"","sources":["../../src/__tests__/spending-controls.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IAClE,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,KAAK,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACrH,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAClI,MAAM,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3D,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/D,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC;YAC1D,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC;SAC3D,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACxF,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/__tests__/tax-and-policy.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Tests for the two subsystems where a silent bug is expensive: the tax ledger
+ * (wrong numbers on a filing) and the policy engine (money leaving that
+ * shouldn't). Run with `node --test`.
+ */
+export {};
+//# sourceMappingURL=tax-and-policy.test.d.ts.map

package/dist/__tests__/tax-and-policy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tax-and-policy.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/tax-and-policy.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}