@tempoxyz/patron 0.0.15 → 0.0.17

package/README.md

@@ -7,9 +7,10 @@ npx @tempoxyz/patron
 ```
 
 First run signs you in with Tempo Wallet, asks for a monthly budget (default $5), buys
-seals and adds a hook to Claude Code. After that, every page Claude Code fetches pays its
-site one seal. Nothing stays running: the hook runs once per read and exits, and when
-seals run low it starts a one-shot purchase that exits when done.
+seals and adds a hook to every supported agent it finds. After that, every page an agent
+reads pays its site one seal. Nothing stays running: the hook hands each read to a one-shot
+background payment and exits at once, so the agent never waits, and when seals run low it
+starts a one-shot purchase that exits when done.
 
 Run `npx @tempoxyz/patron` again for status (seals left, pages paid, budget used, rank) and to pause,
 change the budget or uninstall.
@@ -24,9 +25,23 @@ change the budget or uninstall.
 | `patron budget <usd>` | Change the monthly budget |
 | `patron tip <url> [usd]` | Tip a site, $0.10 by default |
 | `patron name <handle>` | Set your public leaderboard name |
+| `patron per-page <usd>` | What each site gets per page read, $0.001 to $0.01 |
 | `patron uninstall` | Remove agent hooks, optionally local data |
 | `patron hook` | Run by agents after each web read |
 
+## What gets paid
+
+- A fetched page pays its site only when it loads (a 2xx status). Error pages, blocks and
+  redirect notices pay nothing.
+- A search pays each site in its results, up to 10 sites per search.
+- Each site's seals are redeemed at once, in separate relayed requests, never batched: the
+  gateway cannot tell which sites one reader read together.
+- Sites are paid per registrable domain: `docs.python.org` pays `python.org`. Authors on shared
+  hosts are paid as their own site: `alice.github.io`, `app.vercel.app`, `alice.substack.com`.
+  X profiles and posts pay the profile.
+- Never paid: mail, chat and private documents (Gmail, Google Docs, Slack, WhatsApp), sign-in
+  pages, banking, health portals, link shorteners (`t.co`, `bit.ly`), localhost and IPs.
+
 ## Privacy
 
 Seals are Privacy Pass blind tokens (RFC 9578). The gateway knows your address bought a
@@ -48,9 +63,9 @@ limit equal to the budget, renewed every 30 days.
 | Agent | Hook |
 | :- | :- |
 | Claude Code | Async `PostToolUse` hook for WebFetch and WebSearch in `~/.claude/settings.json` |
-
-Codex runs web search as a hosted tool that hooks do not see, and Cursor and Amp have no
-documented hook for web reads, so they are not supported yet.
+| Cursor | `postToolUse` hook for WebFetch and WebSearch in `~/.cursor/hooks.json` |
+| Codex | `notify` and a `Stop` hook; pays the sites in the session rollout at the end of each turn |
+| Amp | Plugin in `~/.config/amp/plugins/patron.ts` for `read_web_page` and `web_search` |
 
 ## Environment
 

package/dist/bin.js

@@ -4,10 +4,14 @@ const require = __patronCreateRequire(import.meta.url)
 
 // src/bin.ts
 if (process.argv[2] === "hook") {
-  const { runHookProcess } = await import("./chunks/hook-process-BWDVTYRO.js");
+  const { runHookProcess } = await import("./chunks/hook-process-WAFRLISI.js");
   await runHookProcess().catch(() => void 0);
   process.exit(0);
+} else if (process.argv[2] === "pay") {
+  const { runPayProcess } = await import("./chunks/hook-process-WAFRLISI.js");
+  await runPayProcess().catch(() => void 0);
+  process.exit(0);
 } else {
-  const { run } = await import("./chunks/-OLXWVEEQ.js");
+  const { run } = await import("./chunks/-4YBTFSTL.js");
   process.exitCode = await run(process.argv.slice(2));
 }

package/dist/chunks/{-OLXWVEEQ.js → -4YBTFSTL.js}

@@ -40,7 +40,7 @@ import {
   withPatronStatus,
   withoutPatronHandlers,
   writeJsonObject
-} from "./chunk-REXWTXUY.js";
+} from "./chunk-GYL4GCNU.js";
 import {
   AGENT_IDS,
   ensureHome,

package/dist/chunks/{chunk-REXWTXUY.js → chunk-GYL4GCNU.js}

@@ -8589,6 +8589,30 @@ var TOKEN_TYPE = 2;
 
 // ../protocol/src/domain.ts
 var import_tldts = __toESM(require_cjs(), 1);
+var AUTHOR_PLATFORMS = /* @__PURE__ */ new Set([
+  "ghost.io",
+  "glitch.me",
+  "hashnode.dev",
+  "medium.com",
+  "micro.blog",
+  "neocities.org",
+  "substack.com",
+  "tumblr.com",
+  "typepad.com",
+  "wordpress.com"
+]);
+var PLATFORM_LABELS = /* @__PURE__ */ new Set([
+  "api",
+  "app",
+  "cdn",
+  "docs",
+  "help",
+  "m",
+  "mobile",
+  "status",
+  "support",
+  "www"
+]);
 function normalizeDomain(input2) {
   const trimmed = input2.trim();
   if (!trimmed) return null;
@@ -8603,9 +8627,14 @@ function normalizeDomain(input2) {
   const hostname3 = url2.hostname.replace(/\.$/, "").toLowerCase();
   if (!hostname3 || hostname3 === "localhost" || hostname3.endsWith(".localhost"))
     return null;
-  const parsed = (0, import_tldts.parse)(hostname3);
-  if (parsed.isIp || !parsed.domain || !parsed.isIcann) return null;
-  return parsed.domain;
+  const parsed = (0, import_tldts.parse)(hostname3, { allowPrivateDomains: true });
+  if (parsed.isIp || !parsed.domain || !(parsed.isIcann || parsed.isPrivate)) return null;
+  return authorSite(hostname3, parsed.domain) ?? parsed.domain;
+}
+function authorSite(hostname3, domain2) {
+  if (!AUTHOR_PLATFORMS.has(domain2)) return null;
+  const author = hostname3.slice(0, -(domain2.length + 1)).split(".").at(-1);
+  return author && !PLATFORM_LABELS.has(author) ? `${author}.${domain2}` : null;
 }
 
 // ../protocol/src/payee.ts
@@ -8646,6 +8675,26 @@ var X_RESERVED = /* @__PURE__ */ new Set([
   "tos"
 ]);
 var X_HANDLE = /^[a-z0-9_]{1,15}$/;
+var SHORTENER_HOSTS = /* @__PURE__ */ new Set([
+  "bit.ly",
+  "buff.ly",
+  "cutt.ly",
+  "dlvr.it",
+  "goo.gl",
+  "ift.tt",
+  "is.gd",
+  "lnkd.in",
+  "ow.ly",
+  "rb.gy",
+  "rebrand.ly",
+  "s.id",
+  "shorturl.at",
+  "t.co",
+  "t.ly",
+  "tiny.cc",
+  "tinyurl.com",
+  "trib.al"
+]);
 function xPayee(handle) {
   const lower = handle.replace(/^@/, "").toLowerCase();
   return X_HANDLE.test(lower) && !X_RESERVED.has(lower) ? `${X_PAYEE_PREFIX}${lower}` : null;
@@ -8663,6 +8712,7 @@ function normalizePayee(input2) {
     return null;
   }
   const host = url2.hostname.toLowerCase().replace(/\.$/, "");
+  if (SHORTENER_HOSTS.has(host.replace(/^www\./, ""))) return null;
   const bareHost = !/^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed) && !trimmed.includes("/");
   if (X_HOSTS.has(host) && !bareHost && (url2.protocol === "https:" || url2.protocol === "http:")) {
     const [first, second] = url2.pathname.split("/").filter(Boolean);
@@ -8695,6 +8745,180 @@ function fromBase64Url(value) {
   return bytes;
 }
 
+// ../protocol/src/exclusions.ts
+var DEFAULT_EXCLUSIONS = {
+  email: {
+    label: "Email",
+    hosts: [
+      "mail.google.com",
+      "inbox.google.com",
+      "outlook.live.com",
+      "outlook.office.com",
+      "outlook.office365.com",
+      "mail.yahoo.com",
+      "mail.aol.com",
+      "mail.proton.me",
+      "mail.zoho.com",
+      "fastmail.com",
+      "hey.com",
+      "tuta.com",
+      "gmx.com",
+      "mail.com",
+      "icloud.com"
+    ]
+  },
+  workspace: {
+    label: "Chat, calendars and documents",
+    hosts: [
+      "calendar.google.com",
+      "drive.google.com",
+      "docs.google.com",
+      "messages.google.com",
+      "chat.google.com",
+      "app.slack.com",
+      "teams.microsoft.com",
+      "teams.live.com",
+      "web.whatsapp.com",
+      "web.telegram.org",
+      "messenger.com",
+      "discord.com",
+      "notion.so",
+      "dropbox.com",
+      "onedrive.live.com"
+    ]
+  },
+  auth: {
+    label: "Sign-in and passwords",
+    hosts: [
+      "accounts.google.com",
+      "myaccount.google.com",
+      "login.microsoftonline.com",
+      "login.live.com",
+      "account.microsoft.com",
+      "appleid.apple.com",
+      "account.apple.com",
+      "login.yahoo.com",
+      "account.proton.me",
+      "auth0.com",
+      "okta.com",
+      "onelogin.com",
+      "duosecurity.com",
+      "login.gov",
+      "id.me",
+      "1password.com",
+      "bitwarden.com",
+      "lastpass.com",
+      "dashlane.com",
+      "wallet.tempo.xyz"
+    ]
+  },
+  finance: {
+    label: "Banking and money",
+    hosts: [
+      "chase.com",
+      "bankofamerica.com",
+      "wellsfargo.com",
+      "citi.com",
+      "citibank.com",
+      "capitalone.com",
+      "usbank.com",
+      "pnc.com",
+      "tdbank.com",
+      "ally.com",
+      "discover.com",
+      "americanexpress.com",
+      "schwab.com",
+      "fidelity.com",
+      "vanguard.com",
+      "etrade.com",
+      "morganstanley.com",
+      "marcus.com",
+      "interactivebrokers.com",
+      "robinhood.com",
+      "sofi.com",
+      "chime.com",
+      "mercury.com",
+      "brex.com",
+      "paypal.com",
+      "venmo.com",
+      "wise.com",
+      "revolut.com",
+      "monzo.com",
+      "n26.com",
+      "hsbc.com",
+      "hsbc.co.uk",
+      "barclays.co.uk",
+      "lloydsbank.com",
+      "natwest.com",
+      "santander.co.uk",
+      "rbcroyalbank.com",
+      "td.com",
+      "scotiabank.com",
+      "coinbase.com",
+      "kraken.com",
+      "binance.com",
+      "creditkarma.com",
+      "experian.com",
+      "equifax.com",
+      "transunion.com",
+      "irs.gov",
+      "intuit.com",
+      "dashboard.stripe.com"
+    ]
+  },
+  health: {
+    label: "Health portals",
+    hosts: [
+      "mychart.com",
+      "mychart.org",
+      "kp.org",
+      "healthcare.gov",
+      "medicare.gov",
+      "cvs.com",
+      "walgreens.com",
+      "goodrx.com",
+      "zocdoc.com",
+      "teladoc.com",
+      "onemedical.com",
+      "betterhelp.com",
+      "talkspace.com",
+      "labcorp.com",
+      "questdiagnostics.com",
+      "23andme.com",
+      "aetna.com",
+      "anthem.com",
+      "cigna.com",
+      "uhc.com",
+      "humana.com",
+      "bcbs.com",
+      "hims.com",
+      "forhers.com",
+      "plannedparenthood.org"
+    ]
+  }
+};
+var EXCLUSION_CATEGORIES = Object.keys(DEFAULT_EXCLUSIONS);
+function matchesRule(host, domain2, rule) {
+  const normalized = rule.toLowerCase().replace(/^\*\./, "").replace(/^www\./, "");
+  return host === normalized || host.endsWith(`.${normalized}`) || domain2 === normalized;
+}
+function isExcludedByDefault(url2) {
+  const domain2 = normalizePayee(url2);
+  const host = hostOf(url2);
+  if (!domain2 || !host) return true;
+  return EXCLUSION_CATEGORIES.some(
+    (category) => DEFAULT_EXCLUSIONS[category].hosts.some((rule) => matchesRule(host, domain2, rule))
+  );
+}
+function hostOf(url2) {
+  try {
+    const parsed = new URL(/^[a-z][a-z0-9+.-]*:/i.test(url2) ? url2 : `https://${url2}`);
+    return parsed.hostname.toLowerCase().replace(/\.$/, "") || null;
+  } catch {
+    return null;
+  }
+}
+
 // ../protocol/src/money.ts
 function formatUsd(units) {
   const negative = units < 0n;
@@ -28477,11 +28701,25 @@ var SiteInfo = external_exports.object({
 });
 var LeaderboardResponse = external_exports.object({
   patrons: external_exports.array(external_exports.object({ name: external_exports.string(), tokens: external_exports.number().int(), usd })),
+  /** Claimed sites and unclaimed ones past the listing threshold, by earnings. */
   sites: external_exports.array(
-    external_exports.object({ domain: external_exports.string(), earnedUsd: usd, visits: external_exports.number().int() })
+    external_exports.object({
+      domain: external_exports.string(),
+      earnedUsd: usd,
+      visits: external_exports.number().int(),
+      /** Whether the owner proved the domain; older gateways listed only claimed sites. */
+      claimed: external_exports.boolean().default(true)
+    })
   ),
-  /** Claimed X profiles, by earnings: their own leaderboard. */
-  creators: external_exports.array(external_exports.object({ handle: external_exports.string(), earnedUsd: usd, visits: external_exports.number().int() })).default([]),
+  /** X profiles, claimed or past the listing threshold, by earnings: their own leaderboard. */
+  creators: external_exports.array(
+    external_exports.object({
+      handle: external_exports.string(),
+      earnedUsd: usd,
+      visits: external_exports.number().int(),
+      claimed: external_exports.boolean().default(true)
+    })
+  ).default([]),
   totals: external_exports.object({ tokens: external_exports.number().int(), sites: external_exports.number().int(), usd })
 });
 var ClaimRequest = external_exports.object({
@@ -35690,6 +35928,26 @@ function startRefill(script = process.argv[1]) {
   } catch {
   }
 }
+function startPayment(payload, script = process.argv[1]) {
+  return new Promise((resolve) => {
+    try {
+      if (!script) return resolve(false);
+      const child = spawn(process.execPath, [...process.execArgv, script, "pay"], {
+        detached: true,
+        env: process.env,
+        stdio: ["pipe", "ignore", "ignore"]
+      });
+      child.on("error", () => resolve(false));
+      child.stdin.on("error", () => resolve(false));
+      child.stdin.end(payload, () => {
+        child.unref();
+        resolve(true);
+      });
+    } catch {
+      resolve(false);
+    }
+  });
+}
 
 // src/codex.ts
 import { mkdir as mkdir2, readFile as readFile3 } from "node:fs/promises";
@@ -35915,9 +36173,10 @@ export {
   MIN_TOKENS_PER_PAGE,
   MAX_TOKENS_PER_PAGE,
   clampTokensPerPage,
+  normalizePayee,
+  isExcludedByDefault,
   formatUsd,
   tokensToUnits,
-  normalizePayee,
   LeaderboardResponse,
   PatronInfo,
   profileMessage,
@@ -35949,7 +36208,8 @@ export {
   resolveSettings,
   settingsFor,
   FileTokenStore,
-  startRefill
+  startRefill,
+  startPayment
 };
 /*! Bundled license information:
 

package/dist/chunks/{hook-process-BWDVTYRO.js → hook-process-WAFRLISI.js}

@@ -4,6 +4,7 @@ import {
   FileTokenStore,
   clampTokensPerPage,
   codexHome,
+  isExcludedByDefault,
   loadIssuer,
   needsRefill,
   normalizePayee,
@@ -11,8 +12,9 @@ import {
   resolveSettings,
   settingsFor,
   spend,
+  startPayment,
   startRefill
-} from "./chunk-REXWTXUY.js";
+} from "./chunk-GYL4GCNU.js";
 import {
   readConfig,
   readUsage,
@@ -35,6 +37,7 @@ function hookUrls(payload) {
   const tool = payload.tool_name;
   const response = "tool_response" in payload ? payload.tool_response : jsonValue(payload.tool_output);
   if (FETCH_TOOLS.has(tool)) {
+    if (!succeeded(response)) return [];
     const input = payload.tool_input;
     if (isRecord(input) && typeof input.url === "string") return [input.url];
     const urls2 = [];
@@ -50,12 +53,20 @@ function hookUrls(payload) {
 function hookDomains(payload) {
   const domains = [];
   for (const url of hookUrls(payload)) {
-    const domain = normalizePayee(url);
+    const domain = payableDomain(url);
     if (domain && !domains.includes(domain)) domains.push(domain);
     if (domains.length >= MAX_DOMAINS_PER_HOOK) break;
   }
   return domains;
 }
+function payableDomain(url) {
+  return isExcludedByDefault(url) ? null : normalizePayee(url);
+}
+function succeeded(response) {
+  if (!isRecord(response)) return true;
+  const status = response.code ?? response.status ?? response.statusCode;
+  return typeof status !== "number" || status >= 200 && status < 300;
+}
 function turnEnd(payload) {
   if (!isRecord(payload)) return void 0;
   if (payload.hook_event_name === "Stop" && typeof payload.turn_id === "string" && typeof payload.transcript_path === "string")
@@ -179,7 +190,7 @@ async function takeTranscriptDomains(home, transcriptPath2, options) {
       const known = /* @__PURE__ */ new Set([...state.paid, ...state.pending]);
       const pending = [...state.pending];
       for (const url of codexRolloutUrls(lines)) {
-        const domain = normalizePayee(url);
+        const domain = payableDomain(url);
         if (domain && !known.has(domain)) {
           known.add(domain);
           pending.push(domain);
@@ -289,6 +300,7 @@ function isRecord2(value) {
 
 // src/hook.ts
 var HOOK_TIMEOUT_MS = 2e3;
+var PAY_TIMEOUT_MS = 2e4;
 var ABORT_MARGIN_MS = 500;
 async function runHook(dependencies, timeoutMs = HOOK_TIMEOUT_MS) {
   let timer;
@@ -337,25 +349,28 @@ async function payReads(dependencies, deadline) {
   let empty = false;
   const perPage = clampTokensPerPage(config.tokensPerPage);
   let pending = domains.slice();
-  rounds: for (let round = 0; round < perPage && pending.length > 0; round++) {
+  for (let round = 0; round < perPage && pending.length > 0; round++) {
+    if (Date.now() >= deadline) break;
+    const results = await Promise.all(
+      pending.map(
+        (domain) => spend({
+          domain,
+          fetch: boundedFetch,
+          issuer,
+          relayUrl: settings.relayUrl,
+          store
+        }).catch(() => null)
+      )
+    );
     const next = [];
-    for (const domain of pending) {
-      if (Date.now() >= deadline) break rounds;
-      const result = await spend({
-        domain,
-        fetch: boundedFetch,
-        issuer,
-        relayUrl: settings.relayUrl,
-        store
-      }).catch(() => null);
-      if (result === void 0) {
-        empty = true;
-        break rounds;
-      }
-      if (!result?.ok) continue;
+    results.forEach((result, index) => {
+      const domain = pending[index];
+      if (result === void 0) empty = true;
+      if (!result?.ok) return;
       if (round === 0) paid.push(result.domain || domain);
       next.push(domain);
-    }
+    });
+    if (empty) break;
     pending = next;
   }
   const now = dependencies.now?.() ?? /* @__PURE__ */ new Date();
@@ -393,13 +408,28 @@ var MAX_INPUT_BYTES = 8 * 1024 * 1024;
 async function runHookProcess(argument = process.argv[3]) {
   setTimeout(() => process.exit(0), HOOK_TIMEOUT_MS + 500).unref();
   const raw = argument ?? await readStdin(HOOK_TIMEOUT_MS / 2);
-  if (isCursorPayload(parseHookInput(raw))) process.stdout.write("{}\n");
+  const payload = parseHookInput(raw);
+  if (isCursorPayload(payload)) process.stdout.write("{}\n");
+  if (!turnEnd(payload) && hookDomains(payload).length === 0) return;
+  if (await startPayment(raw)) return;
   await runHook({
     readInput: async () => raw,
     settings: resolveSettings(),
     startRefill: () => startRefill()
   });
 }
+async function runPayProcess() {
+  setTimeout(() => process.exit(0), PAY_TIMEOUT_MS + 1e3).unref();
+  const raw = await readStdin(HOOK_TIMEOUT_MS);
+  await runHook(
+    {
+      readInput: async () => raw,
+      settings: resolveSettings(),
+      startRefill: () => startRefill()
+    },
+    PAY_TIMEOUT_MS
+  );
+}
 function readStdin(timeoutMs) {
   return new Promise((resolve) => {
     const chunks = [];
@@ -425,5 +455,6 @@ function readStdin(timeoutMs) {
   });
 }
 export {
-  runHookProcess
+  runHookProcess,
+  runPayProcess
 };

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@tempoxyz/patron",
-	"version": "0.0.15",
+	"version": "0.0.17",
 	"description": "Pay the websites your AI agents read, privately",
 	"type": "module",
 	"bin": {