@stellar-agent-services/payment-client 0.0.0-stage → 0.1.1

package/dist/onchain.js

@@ -0,0 +1,75 @@
+// On-chain settlement proof: a receipt is a claim until the transaction is confirmed [J16].
+//
+// The transaction must have succeeded, and its token `transfer` event must move exactly what the user
+// approved: the approved asset contract, from the payer, to payTo, for the amount. The expected values
+// come from the journal, never from the provider's receipt.
+import { SOROBAN_RPC_URL } from "@stellar-agent-services/protocol";
+import { rpc, scValToNative, StrKey } from "@stellar/stellar-sdk";
+export function rpcConfirmPayment(options = {}) {
+    return async (transaction, expected) => {
+        let server = options.server;
+        if (server === undefined) {
+            const url = options.rpcUrl ?? SOROBAN_RPC_URL[expected.network];
+            if (url === undefined)
+                return { confirmed: false, reason: `no RPC URL for ${expected.network}; pass rpcUrl` };
+            server = new rpc.Server(url);
+        }
+        // The provider may answer before the RPC node has ingested the ledger.
+        for (let attempt = 0; attempt < 10; attempt++) {
+            let result;
+            try {
+                result = await server.getTransaction(transaction);
+            }
+            catch (error) {
+                return { confirmed: false, reason: `the RPC lookup failed: ${error.message}` };
+            }
+            if (result.status === rpc.Api.GetTransactionStatus.SUCCESS)
+                return checkTransfer(result.events.contractEventsXdr.flat(), expected);
+            if (result.status === rpc.Api.GetTransactionStatus.FAILED)
+                return { confirmed: false, reason: "the transaction failed on chain" };
+            await new Promise((resolve) => setTimeout(resolve, 1500));
+        }
+        return { confirmed: false, reason: "the transaction is not on chain yet" };
+    };
+}
+/**
+ * Matches a transaction's contract events to the approved payment. The payer must send exactly one
+ * transfer of the approved asset, and it must go to payTo for the approved amount.
+ */
+export function checkTransfer(events, expected) {
+    const transfers = events.flatMap((event) => {
+        const contractId = event.contractId();
+        // Typed as Opaque[], but the SDK's own Buffer at runtime, in Node and in the browser.
+        if (contractId === null || StrKey.encodeContract(contractId) !== expected.asset)
+            return [];
+        const topics = event.body().v0().topics().map((topic) => scValToNative(topic));
+        if (topics[0] !== "transfer" || topics[1] !== expected.payer)
+            return [];
+        return [{ to: topics[2], amount: transferAmount(event.body().v0().data()) }];
+    });
+    if (transfers.length === 0)
+        return { confirmed: false, reason: "the transaction has no transfer of the approved asset from the payer" };
+    if (transfers.length > 1)
+        return { confirmed: false, reason: `the transaction has ${transfers.length} transfers from the payer, expected one` };
+    const [transfer] = transfers;
+    if (transfer.to !== expected.payTo)
+        return { confirmed: false, reason: `the transfer went to ${String(transfer.to)}, not ${expected.payTo}` };
+    if (transfer.amount !== BigInt(expected.amount)) {
+        return { confirmed: false, reason: `the transfer moved ${String(transfer.amount)}, not ${expected.amount} base units` };
+    }
+    return { confirmed: true };
+}
+// The data is an i128, or a map with `amount` when the payee is a muxed account (CAP-67).
+function transferAmount(data) {
+    const value = scValToNative(data);
+    if (typeof value === "bigint")
+        return value;
+    if (typeof value === "object" && value !== null && typeof value.amount === "bigint") {
+        return value.amount;
+    }
+    return undefined;
+}
+export function explorerUrl(network, transaction) {
+    return `https://stellar.expert/explorer/${network === "stellar:pubnet" ? "public" : "testnet"}/tx/${transaction}`;
+}
+//# sourceMappingURL=onchain.js.map

package/dist/onchain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onchain.js","sourceRoot":"","sources":["../src/onchain.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,EAAE;AACF,sGAAsG;AACtG,uGAAuG;AACvG,4DAA4D;AAE5D,OAAO,EAAE,eAAe,EAAuB,MAAM,kCAAkC,CAAC;AACxF,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAY,MAAM,sBAAsB,CAAC;AAQ5E,MAAM,UAAU,iBAAiB,CAAC,UAA2D,EAAE;IAC7F,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;QACrC,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC5B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChE,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,QAAQ,CAAC,OAAO,eAAe,EAAE,CAAC;YAC9G,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QACD,uEAAuE;QACvE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,IAAI,MAAsC,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA2B,KAAe,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5F,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,OAAO;gBAAE,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;YACnI,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM;gBAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;YAClI,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IAC7E,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAoC,EAAE,QAAyB;IAC3F,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACzC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QACtC,sFAAsF;QACtF,IAAI,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,UAA+B,CAAC,KAAK,QAAQ,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QAChH,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAY,CAAC,CAAC;QAC1F,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACxE,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,sEAAsE,EAAE,CAAC;IACxI,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,SAAS,CAAC,MAAM,yCAAyC,EAAE,CAAC;IAChJ,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;IAC7B,IAAI,QAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,KAAK;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,MAAM,CAAC,QAAS,CAAC,EAAE,CAAC,SAAS,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IAChJ,IAAI,QAAS,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,MAAM,CAAC,QAAS,CAAC,MAAM,CAAC,SAAS,QAAQ,CAAC,MAAM,aAAa,EAAE,CAAC;IAC3H,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,0FAA0F;AAC1F,SAAS,cAAc,CAAC,IAAe;IACrC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAY,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9G,OAAQ,KAA4B,CAAC,MAAM,CAAC;IAC9C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAuB,EAAE,WAAmB;IACtE,OAAO,mCAAmC,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,OAAO,WAAW,EAAE,CAAC;AACpH,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,63 @@
+import { type StellarNetwork } from "@stellar-agent-services/protocol";
+export interface SpendingPolicy {
+    /** Format version of this document, so a later format can migrate it. */
+    version: 1;
+    policyId: string;
+    /** The human who set the policy, when known. */
+    ownerAddress?: string;
+    /** The key that pays under this policy. */
+    agentAddress: string;
+    agentId?: number;
+    allowedActions: string[];
+    /** Asset contracts that may be paid with. */
+    allowedContracts: string[];
+    blockedContracts: string[];
+    maxValuePerTx: string;
+    maxValuePerDay: string;
+    /** Unix seconds. */
+    validAfter: number;
+    validUntil: number;
+    /** ERC-8196 name: the maximum allowed provider risk score, 0–100, lower is safer (erc-compatibility.md T4). */
+    minVerificationScore?: number;
+    stellar: {
+        network: StellarNetwork;
+        /** Payee lists, since the real payee is an argument of `transfer`, not the called contract. */
+        payees: {
+            allow?: string[];
+            block: string[];
+        };
+        minProviderLevel?: number;
+        /** Payments at or below this amount, and inside every limit, need no prompt. "0": approve every payment. */
+        autoApproveUpTo: string;
+    };
+}
+export interface PaymentRequest {
+    action: string;
+    network: string;
+    asset: string;
+    amount: string;
+    payTo: string;
+    /** What this policy already paid in the last 24 hours. */
+    spentLast24h: bigint;
+    /** Already authenticated by the caller's trusted verification source [V1]. */
+    verification?: {
+        riskScore?: number;
+        level?: number;
+    };
+    now?: Date;
+}
+export interface PolicyViolation {
+    field: string;
+    message: string;
+}
+export interface PolicyDecision {
+    allowed: boolean;
+    violations: PolicyViolation[];
+    /** Allowed, but above autoApproveUpTo: a human must approve this exact payment. */
+    needsApproval: boolean;
+}
+export declare const PAY_ACTION = "x402.pay";
+export declare function defaultPolicy(agentAddress: string, network: StellarNetwork, now?: Date): SpendingPolicy;
+export declare function policyHash(policy: SpendingPolicy): Promise<string>;
+export declare function checkPolicy(policy: SpendingPolicy, request: PaymentRequest): PolicyDecision;
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAOA,OAAO,EAA+B,KAAK,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAEpG,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,6CAA6C;IAC7C,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,+GAA+G;IAC/G,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE;QACP,OAAO,EAAE,cAAc,CAAC;QACxB,+FAA+F;QAC/F,MAAM,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,4GAA4G;QAC5G,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,YAAY,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,mFAAmF;IACnF,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,eAAO,MAAM,UAAU,aAAa,CAAC;AAIrC,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,OAAa,GAAG,cAAc,CAe7G;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAElE;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,GAAG,cAAc,CAqC3F"}

package/dist/policy.js

@@ -0,0 +1,78 @@
+// Spending policy: ERC-8196 field names plus named Stellar extensions (docs/payment-client.md).
+//
+// A failed check blocks the payment; it never passes silently. Amounts are in the asset's base
+// units (USDC: 7 decimals), not a native value.
+//
+// Configured verification limits require trusted evidence [V1], including when set to zero.
+import { canonicalSha256, USDC_ASSET } from "@stellar-agent-services/protocol";
+export const PAY_ACTION = "x402.pay";
+const DAY_SECONDS = 86400;
+export function defaultPolicy(agentAddress, network, now = new Date()) {
+    const seconds = Math.floor(now.getTime() / 1000);
+    return {
+        version: 1,
+        policyId: crypto.randomUUID(),
+        agentAddress,
+        allowedActions: [PAY_ACTION],
+        allowedContracts: [USDC_ASSET[network]],
+        blockedContracts: [],
+        maxValuePerTx: "1000000", // 0.10 USDC
+        maxValuePerDay: "10000000", // 1.00 USDC
+        validAfter: seconds,
+        validUntil: seconds + 30 * DAY_SECONDS,
+        stellar: { network, payees: { block: [] }, autoApproveUpTo: "0" },
+    };
+}
+export function policyHash(policy) {
+    return canonicalSha256(policy);
+}
+export function checkPolicy(policy, request) {
+    const violations = [];
+    const refuse = (field, message) => violations.push({ field, message });
+    const now = Math.floor((request.now ?? new Date()).getTime() / 1000);
+    const amount = BigInt(request.amount);
+    if (now < policy.validAfter)
+        refuse("validAfter", "the policy is not active yet");
+    if (now >= policy.validUntil)
+        refuse("validUntil", "the policy has expired");
+    if (!policy.allowedActions.includes(request.action))
+        refuse("allowedActions", `"${request.action}" is not an allowed action`);
+    if (request.network !== policy.stellar.network)
+        refuse("stellar.network", `the policy is for ${policy.stellar.network}, not ${request.network}`);
+    if (!policy.allowedContracts.includes(request.asset))
+        refuse("allowedContracts", "this asset is not allowed");
+    if (policy.blockedContracts.includes(request.asset))
+        refuse("blockedContracts", "this asset is blocked");
+    if (policy.stellar.payees.block.includes(request.payTo))
+        refuse("stellar.payees.block", "this payee is blocked");
+    const allow = policy.stellar.payees.allow;
+    if (allow !== undefined && !allow.includes(request.payTo))
+        refuse("stellar.payees.allow", "this payee is not on the allow list");
+    if (amount <= 0n)
+        refuse("amount", "the amount must be above zero");
+    if (amount > BigInt(policy.maxValuePerTx))
+        refuse("maxValuePerTx", "the amount is above the per-payment limit");
+    if (request.spentLast24h + amount > BigInt(policy.maxValuePerDay))
+        refuse("maxValuePerDay", "the payment would exceed the 24-hour limit");
+    for (const [field, limit, observed, maximum] of [
+        ["minVerificationScore", policy.minVerificationScore, request.verification?.riskScore, 100],
+        ["stellar.minProviderLevel", policy.stellar.minProviderLevel, request.verification?.level, 3],
+    ]) {
+        if (limit === undefined)
+            continue;
+        if (!Number.isInteger(limit) || limit < 0 || limit > maximum) {
+            refuse(field, `[V1] the verification limit must be an integer from 0 to ${maximum}`);
+        }
+        else if (observed === undefined || !Number.isInteger(observed) || observed < 0 || observed > maximum) {
+            refuse(field, "[V1] trusted verification evidence is missing or invalid");
+        }
+        else if (field === "minVerificationScore" ? observed > limit : observed < limit) {
+            refuse(field, field === "minVerificationScore"
+                ? "[V1] the provider exceeds the permitted risk score"
+                : "[V1] the provider is below the required verification level");
+        }
+    }
+    const allowed = violations.length === 0;
+    return { allowed, violations, needsApproval: allowed && amount > BigInt(policy.stellar.autoApproveUpTo) };
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,EAAE;AACF,+FAA+F;AAC/F,gDAAgD;AAChD,EAAE;AACF,4FAA4F;AAE5F,OAAO,EAAE,eAAe,EAAE,UAAU,EAAuB,MAAM,kCAAkC,CAAC;AAyDpG,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,CAAC;AAErC,MAAM,WAAW,GAAG,KAAK,CAAC;AAE1B,MAAM,UAAU,aAAa,CAAC,YAAoB,EAAE,OAAuB,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE;QAC7B,YAAY;QACZ,cAAc,EAAE,CAAC,UAAU,CAAC;QAC5B,gBAAgB,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACvC,gBAAgB,EAAE,EAAE;QACpB,aAAa,EAAE,SAAS,EAAE,YAAY;QACtC,cAAc,EAAE,UAAU,EAAE,YAAY;QACxC,UAAU,EAAE,OAAO;QACnB,UAAU,EAAE,OAAO,GAAG,EAAE,GAAG,WAAW;QACtC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE;KAClE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAsB;IAC/C,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAsB,EAAE,OAAuB;IACzE,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,OAAe,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACvF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAEtC,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU;QAAE,MAAM,CAAC,YAAY,EAAE,8BAA8B,CAAC,CAAC;IAClF,IAAI,GAAG,IAAI,MAAM,CAAC,UAAU;QAAE,MAAM,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,gBAAgB,EAAE,IAAI,OAAO,CAAC,MAAM,4BAA4B,CAAC,CAAC;IAC9H,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,CAAC,iBAAiB,EAAE,qBAAqB,MAAM,CAAC,OAAO,CAAC,OAAO,SAAS,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACjJ,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,kBAAkB,EAAE,2BAA2B,CAAC,CAAC;IAC9G,IAAI,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;IACzG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;IACjH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,sBAAsB,EAAE,qCAAqC,CAAC,CAAC;IACjI,IAAI,MAAM,IAAI,EAAE;QAAE,MAAM,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAC;IACpE,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,MAAM,CAAC,eAAe,EAAE,2CAA2C,CAAC,CAAC;IAChH,IAAI,OAAO,CAAC,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;QAAE,MAAM,CAAC,gBAAgB,EAAE,4CAA4C,CAAC,CAAC;IAE1I,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI;QAC9C,CAAC,sBAAsB,EAAE,MAAM,CAAC,oBAAoB,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC;QAC3F,CAAC,0BAA0B,EAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;KACrF,EAAE,CAAC;QACX,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;YAC7D,MAAM,CAAC,KAAK,EAAE,4DAA4D,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,OAAO,EAAE,CAAC;YACvG,MAAM,CAAC,KAAK,EAAE,0DAA0D,CAAC,CAAC;QAC5E,CAAC;aAAM,IAAI,KAAK,KAAK,sBAAsB,CAAC,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,KAAK,EAAE,CAAC;YAClF,MAAM,CAAC,KAAK,EAAE,KAAK,KAAK,sBAAsB;gBAC5C,CAAC,CAAC,oDAAoD;gBACtD,CAAC,CAAC,4DAA4D,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;IACxC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;AAC5G,CAAC"}

package/dist/strategies.d.ts

@@ -0,0 +1,40 @@
+import type { StellarNetwork } from "@stellar-agent-services/protocol";
+import type { PaymentPayload, PaymentRequirements } from "@x402/core/types";
+import type { ClientStellarSigner } from "@x402/stellar";
+/** Who holds the key: the SEP-43 shape @x402/stellar signs with. */
+export interface Signer extends ClientStellarSigner {
+    /**
+     * For a wallet that enforces its own limits on chain: what it can still pay of `asset`, in base units.
+     * Undefined when it sets no limit. The core refuses a payment above it, and refuses when it throws.
+     */
+    budget?(network: StellarNetwork, asset: string): Promise<string | undefined>;
+}
+/** A challenge entry's payment, signed and ready for the PAYMENT-SIGNATURE header. */
+export type SignedPayload = Pick<PaymentPayload, "x402Version" | "payload">;
+/** What the user approved, as journaled in `sending`. */
+export interface ExpectedPayment {
+    network: StellarNetwork;
+    /** The asset's contract address (C...), as in the challenge. */
+    asset: string;
+    /** Base units. */
+    amount: string;
+    payTo: string;
+    payer: string;
+}
+export interface Confirmation {
+    confirmed: boolean;
+    /** Why the payment is not confirmed. */
+    reason?: string;
+}
+/** How an x402 challenge entry is paid, and how that payment is proven. */
+export interface PaymentMethod {
+    /** A stable name. It is journaled with each payment, so recovery confirms with the same method. */
+    readonly id: string;
+    /** Whether this method can pay the entry. False for any scheme or network it does not know. */
+    matches(requirements: PaymentRequirements): boolean;
+    /** Signs the payment. The only step that uses the signer; the core runs it once per job. */
+    createPayload(requirements: PaymentRequirements, signer: Signer): Promise<SignedPayload>;
+    /** Checks the transaction against what the user approved, never against the provider's receipt [J16]. */
+    confirm(transaction: string, expected: ExpectedPayment): Promise<Confirmation>;
+}
+//# sourceMappingURL=strategies.d.ts.map

package/dist/strategies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategies.d.ts","sourceRoot":"","sources":["../src/strategies.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEzD,oEAAoE;AACpE,MAAM,WAAW,MAAO,SAAQ,mBAAmB;IACjD;;;OAGG;IACH,MAAM,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC9E;AAED,sFAAsF;AACtF,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,EAAE,aAAa,GAAG,SAAS,CAAC,CAAC;AAE5E,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,cAAc,CAAC;IACxB,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,mGAAmG;IACnG,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,+FAA+F;IAC/F,OAAO,CAAC,YAAY,EAAE,mBAAmB,GAAG,OAAO,CAAC;IACpD,4FAA4F;IAC5F,aAAa,CAAC,YAAY,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzF,yGAAyG;IACzG,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAChF"}

package/dist/strategies.js

@@ -0,0 +1,12 @@
+// The two strategies the core plugs in (docs/payment-client.md, "Strategies"):
+//
+//   Signer         who holds the key: the built-in local key, later browser wallets, passkey smart
+//                  accounts or other policy wallets
+//   PaymentMethod  how an x402 challenge entry is paid and proven: the built-in x402 `exact` on Stellar
+//
+// The core keeps every safety step whatever is plugged in. The terms the user approves come from the
+// challenge, never from an adapter. Policy and approval run before any signing, `sending` is journaled
+// before anything is sent, and confirmation runs against the journal. Adapters can add capabilities,
+// but they can't skip any of these steps.
+export {};
+//# sourceMappingURL=strategies.js.map

package/dist/strategies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategies.js","sourceRoot":"","sources":["../src/strategies.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,mGAAmG;AACnG,oDAAoD;AACpD,wGAAwG;AACxG,EAAE;AACF,qGAAqG;AACrG,uGAAuG;AACvG,qGAAqG;AACrG,0CAA0C"}

package/dist/verification.d.ts

@@ -0,0 +1,29 @@
+import type { ConformanceLevel, StellarNetwork } from "@stellar-agent-services/protocol";
+export interface VerificationSubject {
+    network: StellarNetwork;
+    payTo: string;
+    manifestUrl: string;
+    /** SHA-256 of the approved manifest's RFC 8785 canonical JSON. */
+    manifestSha256: string;
+    agentId?: number;
+}
+export interface ProviderVerification extends VerificationSubject {
+    /** RFC 3339: when the source checked this provider, and when its evidence becomes too old to use. */
+    checkedAt: string;
+    expiresAt: string;
+    /** ERC-8126 risk score, 0–100, lower is better. Separate from the §8 conformance score. */
+    riskScore?: number;
+    /** Provider Standard §8: 0, Described (1), Payable (2), Recoverable (3). */
+    level?: ConformanceLevel;
+}
+/**
+ * Installed by the application, never selected by a provider. A source must authenticate its trusted
+ * validators, verify receipt hashes against registry records when used, and apply bounded network timeouts.
+ * Return undefined when there is no trustworthy evidence. Do not copy a manifest's claims into an answer.
+ */
+export interface VerificationSource {
+    read(subject: VerificationSubject): Promise<ProviderVerification | undefined>;
+}
+/** Unknown, stale or mismatched evidence never satisfies a configured minimum [V1]. */
+export declare function matchesVerification(evidence: ProviderVerification | undefined, subject: VerificationSubject, now?: number): evidence is ProviderVerification;
+//# sourceMappingURL=verification.d.ts.map

package/dist/verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../src/verification.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAEzF,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAC/D,qGAAqG;IACrG,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;CAC/E;AAED,uFAAuF;AACvF,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,oBAAoB,GAAG,SAAS,EAC1C,OAAO,EAAE,mBAAmB,EAC5B,GAAG,SAAa,GACf,QAAQ,IAAI,oBAAoB,CAgBlC"}

package/dist/verification.js

@@ -0,0 +1,26 @@
+// The application's trusted verification source [V1]. Provider-supplied badges or receipts alone are not proof.
+// Sources authenticate their validator and receipt/registry data; the core binds their answer to this payment.
+/** Unknown, stale or mismatched evidence never satisfies a configured minimum [V1]. */
+export function matchesVerification(evidence, subject, now = Date.now()) {
+    if (evidence === undefined || evidence === null || typeof evidence !== "object")
+        return false;
+    if (evidence.network !== subject.network || evidence.payTo !== subject.payTo ||
+        evidence.manifestUrl !== subject.manifestUrl || evidence.manifestSha256 !== subject.manifestSha256 ||
+        evidence.agentId !== subject.agentId)
+        return false;
+    if (evidence.riskScore !== undefined &&
+        (!Number.isInteger(evidence.riskScore) || evidence.riskScore < 0 || evidence.riskScore > 100))
+        return false;
+    if (evidence.level !== undefined &&
+        (!Number.isInteger(evidence.level) || evidence.level < 0 || evidence.level > 3))
+        return false;
+    // Requiring an explicit time zone avoids interpreting a source's dates in the machine's local zone.
+    const timestamp = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$/;
+    if (typeof evidence.checkedAt !== "string" || typeof evidence.expiresAt !== "string" ||
+        !timestamp.test(evidence.checkedAt) || !timestamp.test(evidence.expiresAt))
+        return false;
+    const checkedAt = Date.parse(evidence.checkedAt);
+    const expiresAt = Date.parse(evidence.expiresAt);
+    return Number.isFinite(checkedAt) && Number.isFinite(expiresAt) && checkedAt <= now && now < expiresAt;
+}
+//# sourceMappingURL=verification.js.map

package/dist/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../src/verification.ts"],"names":[],"mappings":"AAAA,gHAAgH;AAChH,+GAA+G;AAgC/G,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CACjC,QAA0C,EAC1C,OAA4B,EAC5B,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9F,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;QACxE,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;QAClG,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;QAChC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,SAAS,GAAG,CAAC,IAAI,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChH,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAC5B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClG,oGAAoG;IACpG,MAAM,SAAS,GAAG,sEAAsE,CAAC;IACzF,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;QAChF,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,GAAG,IAAI,GAAG,GAAG,SAAS,CAAC;AACzG,CAAC"}

package/dist/x402-exact-stellar.d.ts

@@ -0,0 +1,11 @@
+import { type TransactionReader } from "./onchain.js";
+import type { PaymentMethod } from "./strategies.js";
+export declare const X402_EXACT_STELLAR = "x402-exact-stellar";
+export interface X402ExactStellarOptions {
+    /** Soroban RPC for signing and confirmation. Defaults to the public testnet RPC. */
+    rpcUrl?: string;
+    /** Reads transactions for confirmation. Defaults to an rpc.Server; tests pass a fake chain. */
+    server?: TransactionReader;
+}
+export declare function x402ExactStellar(options?: X402ExactStellarOptions): PaymentMethod;
+//# sourceMappingURL=x402-exact-stellar.d.ts.map

package/dist/x402-exact-stellar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-exact-stellar.d.ts","sourceRoot":"","sources":["../src/x402-exact-stellar.ts"],"names":[],"mappings":"AAMA,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD,MAAM,WAAW,uBAAuB;IACtC,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+FAA+F;IAC/F,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,GAAG,aAAa,CAQrF"}

package/dist/x402-exact-stellar.js

@@ -0,0 +1,17 @@
+// The built-in payment method, and the only one Provider Standard v1 allows: x402 `exact` on Stellar.
+// The signer authorizes one SAC `transfer(payer, payTo, amount)`, the provider's facilitator submits
+// it, and the `transfer` event proves it (onchain.ts).
+import { STELLAR_NETWORKS } from "@stellar-agent-services/protocol";
+import { ExactStellarScheme } from "@x402/stellar/exact/client";
+import { rpcConfirmPayment } from "./onchain.js";
+export const X402_EXACT_STELLAR = "x402-exact-stellar";
+export function x402ExactStellar(options = {}) {
+    const rpcConfig = options.rpcUrl === undefined ? undefined : { url: options.rpcUrl };
+    return {
+        id: X402_EXACT_STELLAR,
+        matches: (requirements) => requirements.scheme === "exact" && STELLAR_NETWORKS.includes(requirements.network),
+        createPayload: (requirements, signer) => new ExactStellarScheme(signer, rpcConfig).createPaymentPayload(2, requirements),
+        confirm: rpcConfirmPayment(options),
+    };
+}
+//# sourceMappingURL=x402-exact-stellar.js.map

package/dist/x402-exact-stellar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-exact-stellar.js","sourceRoot":"","sources":["../src/x402-exact-stellar.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,qGAAqG;AACrG,uDAAuD;AAEvD,OAAO,EAAE,gBAAgB,EAAuB,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAA0B,MAAM,cAAc,CAAC;AAGzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AASvD,MAAM,UAAU,gBAAgB,CAAC,UAAmC,EAAE;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IACrF,OAAO;QACL,EAAE,EAAE,kBAAkB;QACtB,OAAO,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,KAAK,OAAO,IAAI,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAyB,CAAC;QAC/H,aAAa,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,oBAAoB,CAAC,CAAC,EAAE,YAAY,CAAC;QACxH,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC;KACpC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,54 @@
 {
   "name": "@stellar-agent-services/payment-client",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "description": "Buyer-side payment client: approval, spending policy, hash-chained journal, payment and job recovery (PoC).",
+  "type": "module",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AlgoriaLabs/stellar-agent-services.git",
+    "directory": "packages/payment-client"
+  },
+  "engines": {
+    "node": ">=22.13"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./conformance": {
+      "types": "./dist/conformance.d.ts",
+      "default": "./dist/conformance.js"
+    },
+    "./node": {
+      "types": "./dist/file-storage.d.ts",
+      "default": "./dist/file-storage.js"
+    },
+    "./browser": {
+      "types": "./dist/browser-storage.d.ts",
+      "default": "./dist/browser-storage.js"
+    }
+  },
+  "files": [
+    "dist",
+    "!dist/.tsbuildinfo"
+  ],
+  "scripts": {
+    "build": "tsc -b"
+  },
+  "dependencies": {
+    "@stellar-agent-services/protocol": "0.1.1",
+    "@stellar/stellar-sdk": "16.4.1",
+    "@x402/core": "2.28.0",
+    "@x402/stellar": "2.28.0",
+    "ajv": "8.20.0"
+  },
+  "bin": {
+    "stellar-pay": "./dist/cli.js"
+  },
+  "devDependencies": {
+    "@stellar-agent-services/provider-kit": "0.1.1",
+    "fake-indexeddb": "6.2.5"
+  }
+}