@totemsdk/edge-adapters 0.2.0 → 0.2.1

package/dist/artifact-cache.d.ts

@@ -0,0 +1,36 @@
+/**
+ * edge-adapters/artifact-cache.ts — RFC-007 Amendment A, phase A1.
+ *
+ * The first consumer of the Edge persistence injection point (`PersistencePorts`).
+ * A scoped, content-addressed artifact cache over the injected `storage` (KV
+ * retention index) and `artifacts` (byte store) surfaces.
+ *
+ * Typed structurally against `@totemsdk/storage` — this module must NOT import
+ * `@totemsdk/edge`, so it carries no Edge runtime dependency.
+ *
+ * Guarantees:
+ *   - `assertPersistence()` validates surfaces/capabilities at construction.
+ *   - Scope is collision-control only (namespaces); authorization stays above.
+ *   - Retrieval re-verifies digests via `ArtifactStore.get` (`corrupt` vs
+ *     `not-found` are never conflated).
+ *   - Retention/expiry entries survive restart when the injected storage is durable.
+ */
+import type { ArtifactBackendCapabilities, ArtifactRead, ArtifactRef, EffectivePersistence, PersistencePorts, PersistenceRequirement, StorageScope } from '@totemsdk/storage';
+/**
+ * Per-object cache policy. Deliberately does NOT reuse the `retention:
+ * 'fixed'|'managed'|'none'` vocabulary: that is a BACKEND capability, not a
+ * per-object request.
+ */
+export interface ArtifactCacheRetentionPolicy {
+    readonly ttlMs?: number;
+    readonly invalidateOnExpiry?: boolean;
+}
+export interface EdgeArtifactCache {
+    readonly capabilities: ArtifactBackendCapabilities;
+    /** Reported after assertPersistence(); callers must never assume durability. */
+    readonly effective: EffectivePersistence;
+    put(scope: StorageScope, bytes: Uint8Array, policy?: ArtifactCacheRetentionPolicy): Promise<ArtifactRef>;
+    get(scope: StorageScope, ref: ArtifactRef, policy?: ArtifactCacheRetentionPolicy): Promise<ArtifactRead>;
+    invalidate(scope: StorageScope, ref: ArtifactRef): Promise<void>;
+}
+export declare function createEdgeArtifactCache(ports: PersistencePorts, requirement?: PersistenceRequirement, policy?: ArtifactCacheRetentionPolicy): EdgeArtifactCache;

package/dist/artifact-cache.js

@@ -0,0 +1,82 @@
+"use strict";
+/**
+ * edge-adapters/artifact-cache.ts — RFC-007 Amendment A, phase A1.
+ *
+ * The first consumer of the Edge persistence injection point (`PersistencePorts`).
+ * A scoped, content-addressed artifact cache over the injected `storage` (KV
+ * retention index) and `artifacts` (byte store) surfaces.
+ *
+ * Typed structurally against `@totemsdk/storage` — this module must NOT import
+ * `@totemsdk/edge`, so it carries no Edge runtime dependency.
+ *
+ * Guarantees:
+ *   - `assertPersistence()` validates surfaces/capabilities at construction.
+ *   - Scope is collision-control only (namespaces); authorization stays above.
+ *   - Retrieval re-verifies digests via `ArtifactStore.get` (`corrupt` vs
+ *     `not-found` are never conflated).
+ *   - Retention/expiry entries survive restart when the injected storage is durable.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createEdgeArtifactCache = createEdgeArtifactCache;
+const storage_1 = require("@totemsdk/storage");
+/** Scope-derived artifact namespace: separate scopes never alias the same blob. */
+function scopeNamespace(scope) {
+    const parts = [scope.principal, scope.adapter, scope.purpose, scope.domain]
+        .filter((p) => typeof p === 'string' && p.length > 0)
+        .map((p) => encodeURIComponent(p));
+    return `edge-cache:${parts.join('/')}`;
+}
+function createEdgeArtifactCache(ports, requirement = { durable: false }, policy = {}) {
+    const label = 'edge-artifact-cache';
+    // The cache always needs both surfaces and a deletable artifact backend.
+    const effective = (0, storage_1.assertPersistence)(ports, { ...requirement, needsArtifacts: true, needsArtifactDelete: true }, label);
+    const storage = ports.storage;
+    const artifacts = ports.artifacts;
+    if (!storage) {
+        throw new storage_1.StorageError(`${label}: a storage index is required for retention/expiry`, 'unavailable');
+    }
+    if (!artifacts) {
+        throw new storage_1.StorageError(`${label}: an artifact store is required`, 'unavailable');
+    }
+    const defaultTtlMs = policy.ttlMs;
+    const defaultInvalidateOnExpiry = policy.invalidateOnExpiry ?? false;
+    const now = () => Date.now();
+    const scoped = (scope) => (0, storage_1.createScopedStorage)(storage, scope);
+    return {
+        capabilities: artifacts.capabilities,
+        effective,
+        async put(scope, bytes, putPolicy) {
+            const ttlMs = putPolicy?.ttlMs ?? defaultTtlMs;
+            const receipt = await artifacts.put(scopeNamespace(scope), bytes, {
+                ...(ttlMs !== undefined ? { retentionMs: ttlMs } : {}),
+            });
+            const entry = {
+                ref: receipt.ref,
+                size: receipt.size,
+                createdAt: now(),
+                ...(ttlMs !== undefined ? { expiresAt: now() + ttlMs } : {}),
+            };
+            await scoped(scope).set((0, storage_1.artifactRefId)(receipt.ref), entry);
+            return receipt.ref;
+        },
+        async get(scope, ref, getPolicy) {
+            const entry = await scoped(scope).get((0, storage_1.artifactRefId)(ref));
+            if (!entry) {
+                // Not known to this scope — never fall through to the raw backend.
+                return { status: 'not-found' };
+            }
+            if (entry.expiresAt !== undefined && now() > entry.expiresAt) {
+                const invalidate = getPolicy?.invalidateOnExpiry ?? defaultInvalidateOnExpiry;
+                if (invalidate)
+                    await this.invalidate(scope, ref);
+                return { status: 'not-found' };
+            }
+            // Digest re-verification + corrupt/not-found taxonomy live in ArtifactStore.
+            return artifacts.get(ref);
+        },
+        async invalidate(scope, ref) {
+            await artifacts.delete(ref);
+            await scoped(scope).remove((0, storage_1.artifactRefId)(ref));
+        },
+    };
+}

package/dist/index.d.ts

@@ -3,6 +3,10 @@ export type { LiquidityPortConfig } from './liquidity.js';
 export { createProofPortAdapter } from './proof.js';
 export type { ProofPortConfig } from './proof.js';
 export { createLookupPortAdapter } from './lookup.js';
+export { createPurchaseLookupAdapter, type PurchaseLookupAdapterConfig } from './purchase-lookup.js';
+export { createPurchaseAuthorityAdapter, type PurchaseAuthorityAdapterConfig } from './purchase-authority.js';
+export { createPurchasePaymentAdapter, type PurchasePaymentAdapterConfig, type PurchasePaymentStore, type PurchasePaymentClaimRecord, } from './purchase-payment.js';
+export { createStreamNegotiationTransport, createPubSubNegotiationTransport, type StreamNegotiationTransportConfig, type PubSubNegotiationTransportConfig, } from './negotiation-transport.js';
 export { createLocationPortAdapter } from './location.js';
 export type { LocationPortConfig } from './location.js';
 export { createPolicyPortAdapter } from './policy.js';
@@ -17,3 +21,5 @@ export { createOmniaHostPort } from './omnia.js';
 export type { OmniaHostPortConfig } from './omnia.js';
 export { createStreamPortAdapter } from './stream.js';
 export { createPubSubPortAdapter } from './pubsub.js';
+export { SQLiteCommerceStore, createSQLiteCommerceStore, type CommerceStore, type SQLiteCommerceStoreConfig, } from './sqlite-commerce-store.js';
+export { createEdgeArtifactCache, type EdgeArtifactCache, type ArtifactCacheRetentionPolicy, } from './artifact-cache.js';

package/dist/index.js

@@ -1,12 +1,21 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createPubSubPortAdapter = exports.createStreamPortAdapter = exports.createOmniaHostPort = exports.createOmniaL2PaymentPort = exports.createMinimaL1PaymentPort = exports.createManifestPortAdapter = exports.createIdentityPortAdapter = exports.createPolicyPortAdapter = exports.createLocationPortAdapter = exports.createLookupPortAdapter = exports.createProofPortAdapter = exports.createLiquidityPortAdapter = void 0;
+exports.createEdgeArtifactCache = exports.createSQLiteCommerceStore = exports.SQLiteCommerceStore = exports.createPubSubPortAdapter = exports.createStreamPortAdapter = exports.createOmniaHostPort = exports.createOmniaL2PaymentPort = exports.createMinimaL1PaymentPort = exports.createManifestPortAdapter = exports.createIdentityPortAdapter = exports.createPolicyPortAdapter = exports.createLocationPortAdapter = exports.createPubSubNegotiationTransport = exports.createStreamNegotiationTransport = exports.createPurchasePaymentAdapter = exports.createPurchaseAuthorityAdapter = exports.createPurchaseLookupAdapter = exports.createLookupPortAdapter = exports.createProofPortAdapter = exports.createLiquidityPortAdapter = void 0;
 var liquidity_js_1 = require("./liquidity.js");
 Object.defineProperty(exports, "createLiquidityPortAdapter", { enumerable: true, get: function () { return liquidity_js_1.createLiquidityPortAdapter; } });
 var proof_js_1 = require("./proof.js");
 Object.defineProperty(exports, "createProofPortAdapter", { enumerable: true, get: function () { return proof_js_1.createProofPortAdapter; } });
 var lookup_js_1 = require("./lookup.js");
 Object.defineProperty(exports, "createLookupPortAdapter", { enumerable: true, get: function () { return lookup_js_1.createLookupPortAdapter; } });
+var purchase_lookup_js_1 = require("./purchase-lookup.js");
+Object.defineProperty(exports, "createPurchaseLookupAdapter", { enumerable: true, get: function () { return purchase_lookup_js_1.createPurchaseLookupAdapter; } });
+var purchase_authority_js_1 = require("./purchase-authority.js");
+Object.defineProperty(exports, "createPurchaseAuthorityAdapter", { enumerable: true, get: function () { return purchase_authority_js_1.createPurchaseAuthorityAdapter; } });
+var purchase_payment_js_1 = require("./purchase-payment.js");
+Object.defineProperty(exports, "createPurchasePaymentAdapter", { enumerable: true, get: function () { return purchase_payment_js_1.createPurchasePaymentAdapter; } });
+var negotiation_transport_js_1 = require("./negotiation-transport.js");
+Object.defineProperty(exports, "createStreamNegotiationTransport", { enumerable: true, get: function () { return negotiation_transport_js_1.createStreamNegotiationTransport; } });
+Object.defineProperty(exports, "createPubSubNegotiationTransport", { enumerable: true, get: function () { return negotiation_transport_js_1.createPubSubNegotiationTransport; } });
 var location_js_1 = require("./location.js");
 Object.defineProperty(exports, "createLocationPortAdapter", { enumerable: true, get: function () { return location_js_1.createLocationPortAdapter; } });
 var policy_js_1 = require("./policy.js");
@@ -25,3 +34,8 @@ var stream_js_1 = require("./stream.js");
 Object.defineProperty(exports, "createStreamPortAdapter", { enumerable: true, get: function () { return stream_js_1.createStreamPortAdapter; } });
 var pubsub_js_1 = require("./pubsub.js");
 Object.defineProperty(exports, "createPubSubPortAdapter", { enumerable: true, get: function () { return pubsub_js_1.createPubSubPortAdapter; } });
+var sqlite_commerce_store_js_1 = require("./sqlite-commerce-store.js");
+Object.defineProperty(exports, "SQLiteCommerceStore", { enumerable: true, get: function () { return sqlite_commerce_store_js_1.SQLiteCommerceStore; } });
+Object.defineProperty(exports, "createSQLiteCommerceStore", { enumerable: true, get: function () { return sqlite_commerce_store_js_1.createSQLiteCommerceStore; } });
+var artifact_cache_js_1 = require("./artifact-cache.js");
+Object.defineProperty(exports, "createEdgeArtifactCache", { enumerable: true, get: function () { return artifact_cache_js_1.createEdgeArtifactCache; } });

package/dist/negotiation-transport.d.ts

@@ -0,0 +1,50 @@
+/**
+ * negotiation-transport.ts — NegotiationTransport adapters over Edge ports.
+ *
+ * Two adapters:
+ *   - createStreamNegotiationTransport: raw byte stream (EdgeStreamPort).
+ *     Messages are framed as length-prefixed JSON. The sender address is
+ *     resolved by the caller (the stream is a single authenticated peer).
+ *   - createPubSubNegotiationTransport: topic-based (EdgePubSubPort).
+ *     Each negotiation uses a topic derived from the negotiationId; the
+ *     sender address is carried in the envelope.
+ *
+ * Transport metadata stays separate from economic protocol objects. The
+ * NegotiationEngine never sees sockets/topics/connection IDs.
+ */
+import type { NegotiationTransport } from '@totemsdk/edge';
+import type { EdgePubSubPort, EdgeStreamPort } from '@totemsdk/edge';
+export interface StreamNegotiationTransportConfig {
+    stream: EdgeStreamPort;
+    /** The authenticated sender address for this stream (resolved by caller). */
+    sender: string;
+    /** The local recipient address. */
+    recipient: string;
+    /** Max message size in bytes (default 64 KiB). */
+    maxBytes?: number;
+}
+/**
+ * Create a NegotiationTransport over a raw byte stream.
+ *
+ * Messages are framed as `[4-byte BE length][JSON bytes]`. The stream is
+ * assumed to be a single authenticated peer connection, so the sender address
+ * is fixed by the caller.
+ */
+export declare function createStreamNegotiationTransport(config: StreamNegotiationTransportConfig): NegotiationTransport;
+export interface PubSubNegotiationTransportConfig {
+    pubsub: EdgePubSubPort;
+    /** The local recipient address. */
+    recipient: string;
+    /** Topic prefix (default 'totem.negotiation'). */
+    topicPrefix?: string;
+    /** Max message size in bytes (default 64 KiB). */
+    maxBytes?: number;
+}
+/**
+ * Create a NegotiationTransport over a pub/sub transport.
+ *
+ * Each negotiation uses a topic derived from its negotiationId. The sender
+ * address is carried in the envelope (a `sender` field on the message), so
+ * the ingress pipeline can authenticate it.
+ */
+export declare function createPubSubNegotiationTransport(config: PubSubNegotiationTransportConfig): NegotiationTransport;

package/dist/negotiation-transport.js

@@ -0,0 +1,122 @@
+"use strict";
+/**
+ * negotiation-transport.ts — NegotiationTransport adapters over Edge ports.
+ *
+ * Two adapters:
+ *   - createStreamNegotiationTransport: raw byte stream (EdgeStreamPort).
+ *     Messages are framed as length-prefixed JSON. The sender address is
+ *     resolved by the caller (the stream is a single authenticated peer).
+ *   - createPubSubNegotiationTransport: topic-based (EdgePubSubPort).
+ *     Each negotiation uses a topic derived from the negotiationId; the
+ *     sender address is carried in the envelope.
+ *
+ * Transport metadata stays separate from economic protocol objects. The
+ * NegotiationEngine never sees sockets/topics/connection IDs.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createStreamNegotiationTransport = createStreamNegotiationTransport;
+exports.createPubSubNegotiationTransport = createPubSubNegotiationTransport;
+/**
+ * Create a NegotiationTransport over a raw byte stream.
+ *
+ * Messages are framed as `[4-byte BE length][JSON bytes]`. The stream is
+ * assumed to be a single authenticated peer connection, so the sender address
+ * is fixed by the caller.
+ */
+function createStreamNegotiationTransport(config) {
+    const { stream, sender, recipient } = config;
+    const maxBytes = config.maxBytes ?? 64 * 1024;
+    return {
+        async send(_recipient, message) {
+            const bytes = new TextEncoder().encode(JSON.stringify(message));
+            if (bytes.length > maxBytes) {
+                throw new Error(`negotiation message exceeds ${maxBytes} bytes`);
+            }
+            const frame = new Uint8Array(4 + bytes.length);
+            new DataView(frame.buffer).setUint32(0, bytes.length);
+            frame.set(bytes, 4);
+            // Raw byte-stream send does NOT prove durable remote processing —
+            // return no receipt so the outbox drainer does not mark delivered.
+            stream.send(frame);
+            return undefined;
+        },
+        subscribe(handler) {
+            let buffer = new Uint8Array(0);
+            const off = stream.onData((chunk) => {
+                buffer = concatBytes(buffer, chunk);
+                while (buffer.length >= 4) {
+                    const view = new DataView(buffer.buffer, buffer.byteOffset, 4);
+                    const len = view.getUint32(0);
+                    if (buffer.length < 4 + len)
+                        break;
+                    const payload = buffer.slice(4, 4 + len);
+                    buffer = buffer.slice(4 + len);
+                    try {
+                        const message = JSON.parse(new TextDecoder().decode(payload));
+                        void handler(message, { sender, recipient });
+                    }
+                    catch {
+                        // Malformed frame — drop.
+                    }
+                }
+            });
+            return off;
+        },
+    };
+}
+function topicFor(topicPrefix, negotiationId) {
+    return `${topicPrefix}.${negotiationId}`;
+}
+/**
+ * Create a NegotiationTransport over a pub/sub transport.
+ *
+ * Each negotiation uses a topic derived from its negotiationId. The sender
+ * address is carried in the envelope (a `sender` field on the message), so
+ * the ingress pipeline can authenticate it.
+ */
+function createPubSubNegotiationTransport(config) {
+    const { pubsub, recipient } = config;
+    const topicPrefix = config.topicPrefix ?? 'totem.negotiation';
+    const maxBytes = config.maxBytes ?? 64 * 1024;
+    return {
+        async send(recipientAddress, message) {
+            const negotiationId = message.negotiationId;
+            if (!negotiationId)
+                throw new Error('negotiation message missing negotiationId');
+            const topic = topicFor(topicPrefix, negotiationId);
+            const envelope = { ...message, sender: recipientAddress, recipient };
+            const bytes = new TextEncoder().encode(JSON.stringify(envelope));
+            if (bytes.length > maxBytes) {
+                throw new Error(`negotiation message exceeds ${maxBytes} bytes`);
+            }
+            // Pub/sub publish() proves local broker transmission, not durable remote
+            // processing — return no receipt so the outbox drainer does not mark
+            // delivered on local send alone.
+            await pubsub.publish(topic, bytes);
+            return undefined;
+        },
+        subscribe(handler) {
+            return pubsub.onMessage(({ topic, payload }) => {
+                if (!topic.startsWith(topicPrefix))
+                    return;
+                try {
+                    const envelope = JSON.parse(new TextDecoder().decode(payload));
+                    const sender = envelope.sender ?? 'unknown';
+                    void handler(envelope, { sender, recipient });
+                }
+                catch {
+                    // Malformed message — drop.
+                }
+            });
+        },
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Helpers
+// ─────────────────────────────────────────────────────────────────────────────
+function concatBytes(a, b) {
+    const out = new Uint8Array(a.length + b.length);
+    out.set(a, 0);
+    out.set(b, a.length);
+    return out;
+}

package/dist/purchase-authority.d.ts

@@ -0,0 +1,42 @@
+/**
+ * purchase-authority.ts — AuthorityPort adapter over @totemsdk/agent-policy.
+ *
+ * Maps a machine-commerce TradeAgreement + PurchaseIntent to an AgentProposal
+ * and evaluates it through a ComposablePolicy (or any AgentPolicy).
+ *
+ * Architectural boundary preserved:
+ *   TradeProposal  = machine ↔ machine bargaining (peer-to-peer)
+ *   AgentProposal  = agent → trusted local authority (wallet/policy)
+ *
+ * The machine negotiation strategy never receives a private key. This adapter
+ * is the trusted boundary that decides whether the local authority approves
+ * the economic commitment.
+ */
+import type { AgentPolicy, PolicyMiddleware } from '@totemsdk/agent-policy';
+import type { EdgeOperationResult } from '@totemsdk/edge';
+import type { PurchaseIntent, TradeAgreement } from '@totemsdk/edge';
+type PolicyLike = AgentPolicy | PolicyMiddleware;
+export interface PurchaseAuthorityAdapterConfig {
+    /** The local policy (ComposablePolicy, AgentPolicy, or PolicyMiddleware). */
+    policy: PolicyLike;
+    /** Agent identifier used in the AgentProposal (e.g. 'edge-purchase-agent'). */
+    agentId?: string;
+    /** Optional risk level for the proposal. */
+    risk?: 'low' | 'medium' | 'high';
+}
+/**
+ * Create an AuthorityPort adapter over an agent-policy.
+ *
+ * approve() builds an AgentProposal from the agreement + intent and evaluates
+ * it through the policy. Returns `{ allowed, reason }`.
+ */
+export declare function createPurchaseAuthorityAdapter(config: PurchaseAuthorityAdapterConfig): {
+    approve(params: {
+        agreement: TradeAgreement;
+        intent: PurchaseIntent;
+    }): Promise<EdgeOperationResult<{
+        allowed: boolean;
+        reason?: string;
+    }>>;
+};
+export {};

package/dist/purchase-authority.js

@@ -0,0 +1,79 @@
+"use strict";
+/**
+ * purchase-authority.ts — AuthorityPort adapter over @totemsdk/agent-policy.
+ *
+ * Maps a machine-commerce TradeAgreement + PurchaseIntent to an AgentProposal
+ * and evaluates it through a ComposablePolicy (or any AgentPolicy).
+ *
+ * Architectural boundary preserved:
+ *   TradeProposal  = machine ↔ machine bargaining (peer-to-peer)
+ *   AgentProposal  = agent → trusted local authority (wallet/policy)
+ *
+ * The machine negotiation strategy never receives a private key. This adapter
+ * is the trusted boundary that decides whether the local authority approves
+ * the economic commitment.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPurchaseAuthorityAdapter = createPurchaseAuthorityAdapter;
+function isMiddleware(p) {
+    return 'evaluate' in p && typeof p.evaluate === 'function';
+}
+/**
+ * Create an AuthorityPort adapter over an agent-policy.
+ *
+ * approve() builds an AgentProposal from the agreement + intent and evaluates
+ * it through the policy. Returns `{ allowed, reason }`.
+ */
+function createPurchaseAuthorityAdapter(config) {
+    const { policy } = config;
+    const agentId = config.agentId ?? 'edge-purchase-agent';
+    const risk = config.risk ?? 'medium';
+    return {
+        async approve(params) {
+            try {
+                const { agreement, intent } = params;
+                const proposal = {
+                    id: `edge-purchase:${agreement.agreementId}`,
+                    agentId,
+                    intent: {
+                        type: 'payment',
+                        amount: agreement.terms.price,
+                        tokenId: agreement.terms.tokenId,
+                        recipient: agreement.seller,
+                        reason: `purchase ${intent.resource} from ${agreement.seller}`,
+                        risk,
+                        metadata: {
+                            agreementId: agreement.agreementId,
+                            negotiationId: agreement.negotiationId,
+                            resource: intent.resource,
+                        },
+                    },
+                    explanation: `Machine purchase of ${intent.resource} for ${agreement.terms.price} ${agreement.terms.tokenId ?? '0x00'} from ${agreement.seller}`,
+                    confidence: 1,
+                    createdAt: Date.now(),
+                };
+                if (isMiddleware(policy)) {
+                    const result = await policy.evaluate(proposal);
+                    return {
+                        ok: true,
+                        data: {
+                            allowed: result.outcome === 'approved',
+                            reason: result.reason,
+                        },
+                    };
+                }
+                const allowed = await policy.canAutoApprove(proposal);
+                return {
+                    ok: true,
+                    data: {
+                        allowed,
+                        reason: allowed ? undefined : 'Purchase requires user approval per configured policy',
+                    },
+                };
+            }
+            catch (err) {
+                return { ok: false, error: err instanceof Error ? err.message : String(err) };
+            }
+        },
+    };
+}

package/dist/purchase-lookup.d.ts

@@ -0,0 +1,44 @@
+/**
+ * purchase-lookup.ts — PurchaseLookupPort adapter over @totemsdk/lookup-client.
+ *
+ * Maps a machine-commerce `resource` (e.g. "compute", "storage") to a
+ * capability query on the Lookup Node, returning signed manifests for the
+ * buyer's discovery flow.
+ *
+ * Discovery is publication, not authority: the buyer MUST still verify each
+ * returned manifest's signature, identity binding, expiry, and capabilities
+ * before negotiation/payment. This adapter only fetches candidates.
+ */
+import type { LookupClient } from '@totemsdk/lookup-client';
+import type { EdgeOperationResult } from '@totemsdk/edge';
+export interface PurchaseLookupAdapterConfig {
+    client: LookupClient;
+    /** Optional provider address filter (authorAddress for apps). */
+    provider?: string;
+    /** Optional max price filter (agents). */
+    maxPricePerCall?: number;
+    /** Optional max latency filter (agents). */
+    maxLatencyMs?: number;
+    /** Optional result limit. */
+    limit?: number;
+}
+/**
+ * Create a PurchaseLookupPort adapter over a LookupClient.
+ *
+ * `resource` is treated as a capability name for agent manifests (the
+ * machine-commerce case). If the resource matches a known app category, it
+ * falls back to app queries. Returns `{ id, manifest: Uint8Array, nodeId }`
+ * candidates for the buyer's manifest-verification pipeline.
+ */
+export declare function createPurchaseLookupAdapter(config: PurchaseLookupAdapterConfig): {
+    query(params: {
+        resource: string;
+        provider?: string;
+    }): Promise<EdgeOperationResult<{
+        results: Array<{
+            id: string;
+            manifest: Uint8Array;
+            nodeId: string;
+        }>;
+    }>>;
+};

package/dist/purchase-lookup.js

@@ -0,0 +1,60 @@
+"use strict";
+/**
+ * purchase-lookup.ts — PurchaseLookupPort adapter over @totemsdk/lookup-client.
+ *
+ * Maps a machine-commerce `resource` (e.g. "compute", "storage") to a
+ * capability query on the Lookup Node, returning signed manifests for the
+ * buyer's discovery flow.
+ *
+ * Discovery is publication, not authority: the buyer MUST still verify each
+ * returned manifest's signature, identity binding, expiry, and capabilities
+ * before negotiation/payment. This adapter only fetches candidates.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPurchaseLookupAdapter = createPurchaseLookupAdapter;
+/**
+ * Create a PurchaseLookupPort adapter over a LookupClient.
+ *
+ * `resource` is treated as a capability name for agent manifests (the
+ * machine-commerce case). If the resource matches a known app category, it
+ * falls back to app queries. Returns `{ id, manifest: Uint8Array, nodeId }`
+ * candidates for the buyer's manifest-verification pipeline.
+ */
+function createPurchaseLookupAdapter(config) {
+    const { client } = config;
+    return {
+        async query(params) {
+            try {
+                const provider = params.provider ?? config.provider;
+                const limit = config.limit ?? 20;
+                // Agent capability query (machine-commerce primary path).
+                const agents = await client.queryAgents({
+                    capabilityName: params.resource,
+                    maxPricePerCall: config.maxPricePerCall,
+                    maxLatencyMs: config.maxLatencyMs,
+                    limit,
+                });
+                const results = agents.map((a) => ({
+                    id: a.capabilityId,
+                    manifest: a.manifest,
+                    nodeId: a.nodeId,
+                }));
+                // If no agent results and a provider is specified, also try app query
+                // filtered by author address (provider = operator).
+                if (results.length === 0 && provider) {
+                    const apps = await client.queryApps({
+                        authorAddress: provider,
+                        limit,
+                    });
+                    for (const a of apps) {
+                        results.push({ id: a.appId, manifest: a.manifest, nodeId: a.nodeId });
+                    }
+                }
+                return { ok: true, data: { results } };
+            }
+            catch (err) {
+                return { ok: false, error: err instanceof Error ? err.message : String(err) };
+            }
+        },
+    };
+}

package/dist/purchase-payment.d.ts

@@ -0,0 +1,78 @@
+/**
+ * purchase-payment.ts — PurchasePaymentPort adapter with an atomic claim.
+ *
+ * Wraps any EdgePaymentPort (L1 Minima, L2 Omnia, hosted) and adds a stable
+ * idempotency-key claim so a retry after a lost response never double-pays.
+ *
+ * The idempotency key is the stable purchase operation identity
+ * (`purchaseId:agreementId:payment`) supplied by the purchasing layer. The
+ * wrapper records an atomic pending marker (claim) *before* it invokes the
+ * underlying payment port; only the caller that wins the claim pays. A retry
+ * with the same key returns the prior result without re-invoking the port, and
+ * a concurrent duplicate never double-pays — it either replays the completed
+ * outcome or surfaces `PAYMENT_STATE_UNKNOWN` for an in-flight claim.
+ *
+ * Final exactly-once still depends on the payment system's own reconciliation:
+ * if the process dies between the port accepting the payment and the outcome
+ * being recorded, the key stays `pending`, and retries return
+ * `PAYMENT_STATE_UNKNOWN` rather than risking a second payment. The owner
+ * reconciles that window against the payment ledger.
+ */
+import type { EdgeOperationResult } from '@totemsdk/edge';
+import { type CasStore, type StorageAdapterWithCapabilities, type WriteAckMode } from '@totemsdk/storage';
+export interface PaymentResult {
+    txpowId?: string;
+}
+export interface PaymentPortLike {
+    pay(params: {
+        recipient: string;
+        amount: string;
+        tokenId?: string;
+        memo?: string;
+        idempotencyKey?: string;
+    }): Promise<EdgeOperationResult<PaymentResult>>;
+}
+/**
+ * Idempotency claim record. `pending` is written atomically before the port
+ * call; `completed` records the outcome. A `pending` key is never re-claimed
+ * automatically — that is the double-pay guard.
+ */
+export type PurchasePaymentClaimRecord = {
+    phase: 'pending';
+    claimedAt: number;
+} | {
+    phase: 'completed';
+    result: EdgeOperationResult<PaymentResult>;
+    completedAt: number;
+};
+/** The durable idempotency store must support conditional (CAS) writes. */
+export type PurchasePaymentStore = StorageAdapterWithCapabilities & CasStore;
+export interface PurchasePaymentAdapterConfig {
+    /** The underlying payment port (L1/L2/hosted). */
+    port: PaymentPortLike;
+    /**
+     * Optional claim store. When omitted, a dev in-memory store is used (no
+     * crash guarantees and no cross-instance dedup). A durable CAS-capable
+     * store (e.g. a `@totemsdk/storage` FileStore/SqliteStore) makes retries
+     * safe across restarts and processes. No silent downgrade: a supplied
+     * store is asserted CAS-capable and `durably-acknowledged` unless
+     * `requireAckMode` opts into a weaker acknowledgment.
+     */
+    store?: PurchasePaymentStore;
+    /** Key namespace prefix; default `totem_payment:v1:`. */
+    namespace?: string;
+    /** Required write acknowledgment for a supplied store; default `durably-acknowledged`. */
+    requireAckMode?: WriteAckMode;
+}
+/**
+ * Create a PurchasePaymentPort with an atomic idempotency-key claim.
+ */
+export declare function createPurchasePaymentAdapter(config: PurchasePaymentAdapterConfig): {
+    pay(params: {
+        recipient: string;
+        amount: string;
+        tokenId?: string;
+        memo?: string;
+        idempotencyKey?: string;
+    }): Promise<EdgeOperationResult<PaymentResult>>;
+};

package/dist/purchase-payment.js

@@ -0,0 +1,108 @@
+"use strict";
+/**
+ * purchase-payment.ts — PurchasePaymentPort adapter with an atomic claim.
+ *
+ * Wraps any EdgePaymentPort (L1 Minima, L2 Omnia, hosted) and adds a stable
+ * idempotency-key claim so a retry after a lost response never double-pays.
+ *
+ * The idempotency key is the stable purchase operation identity
+ * (`purchaseId:agreementId:payment`) supplied by the purchasing layer. The
+ * wrapper records an atomic pending marker (claim) *before* it invokes the
+ * underlying payment port; only the caller that wins the claim pays. A retry
+ * with the same key returns the prior result without re-invoking the port, and
+ * a concurrent duplicate never double-pays — it either replays the completed
+ * outcome or surfaces `PAYMENT_STATE_UNKNOWN` for an in-flight claim.
+ *
+ * Final exactly-once still depends on the payment system's own reconciliation:
+ * if the process dies between the port accepting the payment and the outcome
+ * being recorded, the key stays `pending`, and retries return
+ * `PAYMENT_STATE_UNKNOWN` rather than risking a second payment. The owner
+ * reconciles that window against the payment ledger.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPurchasePaymentAdapter = createPurchasePaymentAdapter;
+const storage_1 = require("@totemsdk/storage");
+const DEFAULT_NAMESPACE = 'totem_payment:v1:';
+/** In-process serialization so concurrent claims never double-pay on one store. */
+const locks = new WeakMap();
+function withPaymentLock(store, fn) {
+    const tail = locks.get(store);
+    const next = tail ? tail.then(fn, fn) : fn();
+    const settled = next.catch(() => undefined);
+    locks.set(store, settled);
+    return next;
+}
+/**
+ * Create a PurchasePaymentPort with an atomic idempotency-key claim.
+ */
+function createPurchasePaymentAdapter(config) {
+    const { port } = config;
+    const namespace = config.namespace ?? DEFAULT_NAMESPACE;
+    const store = config.store ??
+        new storage_1.MemoryStore(); // dev mode — volatile, process-local
+    if (config.store) {
+        // No silent downgrade: a consumer-supplied store must be able to claim
+        // (CAS) and acknowledge durable writes unless explicitly opted out.
+        (0, storage_1.assertCapabilities)(store, {
+            conditional: true,
+            acknowledge: config.requireAckMode ?? 'durably-acknowledged',
+        });
+    }
+    const keyFor = (idempotencyKey) => namespace + idempotencyKey;
+    return {
+        async pay(params) {
+            const key = params.idempotencyKey;
+            if (!key) {
+                // No idempotency possible without a stable key — pass straight through.
+                return port.pay(params);
+            }
+            // The whole claim→pay→complete path is serialized per store so that N
+            // concurrent same-key callers resolve consistently: the winner pays, and
+            // every loser replays the completed outcome rather than racing the
+            // in-flight window.
+            return withPaymentLock(store, async () => {
+                const claimKey = keyFor(key);
+                // Atomic claim: exactly one caller wins `pending`; concurrent duplicates
+                // either replay a completed outcome or get PAYMENT_STATE_UNKNOWN.
+                const claim = await store.conditionalUpdate(claimKey, (current) => {
+                    if (current === null || current === undefined) {
+                        return { next: { phase: 'pending', claimedAt: Date.now() } };
+                    }
+                    return { abort: 'already-claimed' };
+                });
+                if (!claim.applied) {
+                    const existing = await store.get(claimKey);
+                    if (existing && existing.phase === 'completed') {
+                        return existing.result;
+                    }
+                    return {
+                        ok: false,
+                        errorCode: 'PAYMENT_STATE_UNKNOWN',
+                        error: `payment for idempotency key '${key}' is already in flight`,
+                    };
+                }
+                let result;
+                try {
+                    result = await port.pay(params);
+                }
+                catch (err) {
+                    result = {
+                        ok: false,
+                        errorCode: 'PAYMENT_STATE_UNKNOWN',
+                        error: `payment port threw: ${err.message}`,
+                    };
+                }
+                // Record the outcome only if we still own the pending claim.
+                await store.conditionalUpdate(claimKey, (current) => {
+                    if (current !== null && current !== undefined && current.phase === 'pending') {
+                        return {
+                            next: { phase: 'completed', result, completedAt: Date.now() },
+                        };
+                    }
+                    return { abort: 'gone' };
+                });
+                return result;
+            });
+        },
+    };
+}

package/dist/sqlite-commerce-store.d.ts

@@ -0,0 +1,69 @@
+/**
+ * sqlite-commerce-store.ts — Production SQLite-backed CommerceStore.
+ *
+ * Implements the five durable commerce contracts over ONE SQLite database:
+ *   NegotiationStore, PurchaseStore, ReplayLedger, PrincipalNegotiationStore,
+ *   OutboxStore.
+ *
+ * The database connection, journal/busy pragmas, transaction lifecycle, and
+ * CAS kinematics are owned by the shared `SqliteStore` primitive from
+ * `@totemsdk/storage/sqlite` (RFC-007 §4.2). All consumer mutations run through
+ * `transactionalSync` (atomic multi-statement batches) or the generalized
+ * `transitionAndEnqueue` (revision-CAS update + outbox-style enqueue in one
+ * commit). Table schemas and row shapes are unchanged ("records unchanged in
+ * shape").
+ *
+ * The critical guarantee — `transitionAndEnqueue` (negotiation CAS + outbox
+ * enqueue) — maps to ONE transaction on the shared primitive:
+ *
+ *   BEGIN
+ *   UPDATE negotiations SET ... WHERE negotiation_id=? AND revision=?
+ *   INSERT INTO outbox (...) VALUES (...)
+ *   COMMIT   (or ROLLBACK on CAS miss — nothing is enqueued)
+ *
+ * Uses WAL mode + busy_timeout for concurrent runtime use. Does NOT persist
+ * private keys — only stable references/IDs.
+ *
+ * All statements use positional `?` parameters so the same SQL runs on the
+ * real better-sqlite3 native binding and the node:sqlite jest mock.
+ */
+import type { NegotiationStore, PrincipalNegotiationStore, PurchaseStore } from '@totemsdk/edge';
+import type { ReplayLedger } from '@totemsdk/edge';
+import type { OutboxStore } from '@totemsdk/edge';
+/** Aggregated durable commerce store. */
+export interface CommerceStore {
+    negotiations: NegotiationStore;
+    purchases: PurchaseStore;
+    replay: ReplayLedger;
+    principals: PrincipalNegotiationStore;
+    outbox: OutboxStore;
+}
+export interface SQLiteCommerceStoreConfig {
+    /** File path, or ':memory:' for ephemeral. */
+    filename: string;
+    /** WAL mode (default true). */
+    wal?: boolean;
+    /** Busy timeout ms (default 5000). */
+    busyTimeoutMs?: number;
+}
+export declare class SQLiteCommerceStore implements CommerceStore {
+    readonly negotiations: NegotiationStore;
+    readonly purchases: PurchaseStore;
+    readonly replay: ReplayLedger;
+    readonly principals: PrincipalNegotiationStore;
+    readonly outbox: OutboxStore;
+    private readonly store;
+    constructor(config: SQLiteCommerceStoreConfig);
+    close(): void;
+    private createNegotiationStore;
+    private createPurchaseStore;
+    private createReplayLedger;
+    private createPrincipalStore;
+    private createOutboxStore;
+}
+/**
+ * Create a SQLite-backed CommerceStore.
+ *
+ * @param config filename (or ':memory:') + WAL/busy options.
+ */
+export declare function createSQLiteCommerceStore(config: SQLiteCommerceStoreConfig): SQLiteCommerceStore;

package/dist/sqlite-commerce-store.js

@@ -0,0 +1,416 @@
+"use strict";
+/**
+ * sqlite-commerce-store.ts — Production SQLite-backed CommerceStore.
+ *
+ * Implements the five durable commerce contracts over ONE SQLite database:
+ *   NegotiationStore, PurchaseStore, ReplayLedger, PrincipalNegotiationStore,
+ *   OutboxStore.
+ *
+ * The database connection, journal/busy pragmas, transaction lifecycle, and
+ * CAS kinematics are owned by the shared `SqliteStore` primitive from
+ * `@totemsdk/storage/sqlite` (RFC-007 §4.2). All consumer mutations run through
+ * `transactionalSync` (atomic multi-statement batches) or the generalized
+ * `transitionAndEnqueue` (revision-CAS update + outbox-style enqueue in one
+ * commit). Table schemas and row shapes are unchanged ("records unchanged in
+ * shape").
+ *
+ * The critical guarantee — `transitionAndEnqueue` (negotiation CAS + outbox
+ * enqueue) — maps to ONE transaction on the shared primitive:
+ *
+ *   BEGIN
+ *   UPDATE negotiations SET ... WHERE negotiation_id=? AND revision=?
+ *   INSERT INTO outbox (...) VALUES (...)
+ *   COMMIT   (or ROLLBACK on CAS miss — nothing is enqueued)
+ *
+ * Uses WAL mode + busy_timeout for concurrent runtime use. Does NOT persist
+ * private keys — only stable references/IDs.
+ *
+ * All statements use positional `?` parameters so the same SQL runs on the
+ * real better-sqlite3 native binding and the node:sqlite jest mock.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SQLiteCommerceStore = void 0;
+exports.createSQLiteCommerceStore = createSQLiteCommerceStore;
+const sqlite_1 = require("@totemsdk/storage/sqlite");
+// ─────────────────────────────────────────────────────────────────────────────
+// Serialization helpers
+// ─────────────────────────────────────────────────────────────────────────────
+function toJson(value) {
+    return JSON.stringify(value, (_key, v) => (typeof v === 'bigint' ? v.toString() : v));
+}
+function fromJson(json) {
+    return JSON.parse(json);
+}
+/** Reconstruct a NegotiationRecord, restoring bigint fields. */
+function rowToNegotiation(row) {
+    const record = fromJson(row.record_json);
+    return {
+        ...record,
+        cumulativeWork: BigInt(String(record.cumulativeWork ?? '0')),
+    };
+}
+function negotiationToRow(record) {
+    return {
+        negotiation_id: record.negotiationId,
+        record_json: toJson(record),
+        revision: record.revision,
+        state: record.state,
+        principal: record.principal,
+        updated_at: record.updatedAt,
+    };
+}
+function rowToPurchase(row) {
+    return fromJson(row.record_json);
+}
+function purchaseToRow(record) {
+    return {
+        purchase_id: record.purchaseId,
+        record_json: toJson(record),
+        revision: record.revision,
+        status: record.status,
+        updated_at: record.updatedAt,
+    };
+}
+function rowToReplay(row) {
+    if (row.state === 'COMPLETED') {
+        return {
+            state: 'COMPLETED',
+            outcome: fromJson(row.outcome_json ?? '{}'),
+            completedAt: row.completed_at ?? 0,
+        };
+    }
+    return {
+        state: 'PROCESSING',
+        claimedAt: row.claimed_at,
+        ...(row.lease_until !== null ? { leaseUntil: row.lease_until } : {}),
+    };
+}
+function rowToOutbox(row) {
+    return {
+        messageId: row.message_id,
+        recipient: row.recipient,
+        message: fromJson(row.payload),
+        enqueuedAt: row.enqueued_at,
+        ...(row.delivered_at !== null ? { deliveredAt: row.delivered_at } : {}),
+        attempts: row.attempts,
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Schema (unchanged — "records unchanged in shape")
+// ─────────────────────────────────────────────────────────────────────────────
+const SCHEMA = `
+  CREATE TABLE IF NOT EXISTS negotiations (
+    negotiation_id TEXT PRIMARY KEY,
+    record_json TEXT NOT NULL,
+    revision INTEGER NOT NULL,
+    state TEXT NOT NULL,
+    principal TEXT NOT NULL,
+    updated_at INTEGER NOT NULL
+  );
+  CREATE INDEX IF NOT EXISTS idx_negotiations_principal ON negotiations(principal);
+  CREATE INDEX IF NOT EXISTS idx_negotiations_state ON negotiations(state);
+
+  CREATE TABLE IF NOT EXISTS purchases (
+    purchase_id TEXT PRIMARY KEY,
+    record_json TEXT NOT NULL,
+    revision INTEGER NOT NULL,
+    status TEXT NOT NULL,
+    updated_at INTEGER NOT NULL
+  );
+  CREATE INDEX IF NOT EXISTS idx_purchases_status ON purchases(status);
+
+  CREATE TABLE IF NOT EXISTS replay (
+    message_id TEXT PRIMARY KEY,
+    state TEXT NOT NULL,
+    claimed_at INTEGER NOT NULL,
+    lease_until INTEGER,
+    outcome_json TEXT,
+    completed_at INTEGER
+  );
+
+  CREATE TABLE IF NOT EXISTS principal_slots (
+    principal TEXT NOT NULL,
+    negotiation_id TEXT NOT NULL,
+    opened_at INTEGER NOT NULL,
+    PRIMARY KEY (principal, negotiation_id)
+  );
+  CREATE INDEX IF NOT EXISTS idx_principal_slots_principal ON principal_slots(principal);
+
+  CREATE TABLE IF NOT EXISTS principal_cooldown (
+    principal TEXT PRIMARY KEY,
+    cooldown_until INTEGER NOT NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS outbox (
+    message_id TEXT PRIMARY KEY,
+    recipient TEXT NOT NULL,
+    payload TEXT NOT NULL,
+    enqueued_at INTEGER NOT NULL,
+    delivered_at INTEGER,
+    attempts INTEGER NOT NULL DEFAULT 0
+  );
+  CREATE INDEX IF NOT EXISTS idx_outbox_undelivered ON outbox(delivered_at);
+`;
+// ─────────────────────────────────────────────────────────────────────────────
+// SQLite CommerceStore
+// ─────────────────────────────────────────────────────────────────────────────
+class SQLiteCommerceStore {
+    constructor(config) {
+        this.store = new sqlite_1.SqliteStore(config.filename, {
+            createKvTable: false,
+            wal: config.wal,
+            busyTimeoutMs: config.busyTimeoutMs ?? 5000,
+        });
+        this.store.transactionalSync((tx) => tx.exec(SCHEMA));
+        this.negotiations = this.createNegotiationStore();
+        this.purchases = this.createPurchaseStore();
+        this.replay = this.createReplayLedger();
+        this.principals = this.createPrincipalStore();
+        this.outbox = this.createOutboxStore();
+    }
+    close() {
+        void this.store.close();
+    }
+    // ── NegotiationStore ──────────────────────────────────────────────────────
+    createNegotiationStore() {
+        const store = this.store;
+        const INSERT_SQL = `
+      INSERT INTO negotiations (negotiation_id, record_json, revision, state, principal, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?)
+    `;
+        const GET_SQL = `SELECT * FROM negotiations WHERE negotiation_id = ?`;
+        const CAS_SQL = `
+      UPDATE negotiations
+       SET record_json = ?, revision = ?, state = ?, updated_at = ?
+       WHERE negotiation_id = ? AND revision = ?
+    `;
+        const LIST_RECOVERABLE_SQL = `
+      SELECT * FROM negotiations WHERE state NOT IN ('AGREED','REJECTED','CANCELLED','EXHAUSTED','EXPIRED')
+    `;
+        return {
+            async create(record) {
+                const row = negotiationToRow(record);
+                store.transactionalSync((tx) => {
+                    tx.run(INSERT_SQL, row.negotiation_id, row.record_json, row.revision, row.state, row.principal, row.updated_at);
+                });
+            },
+            async get(negotiationId) {
+                const row = store.transactionalSync((tx) => tx.get(GET_SQL, negotiationId));
+                return row ? rowToNegotiation(row) : undefined;
+            },
+            async compareAndSet(negotiationId, expectedRevision, next) {
+                const row = negotiationToRow(next);
+                const touched = store.transactionalSync((tx) => tx.run(CAS_SQL, row.record_json, row.revision, row.state, row.updated_at, negotiationId, expectedRevision));
+                return touched === 1;
+            },
+            async transitionAndEnqueue(negotiationId, expectedRevision, next, outboxMessages) {
+                // Generalized transitionAndEnqueue: CAS the negotiation and enqueue
+                // every outbox message in ONE transaction (rollback on CAS miss).
+                const row = negotiationToRow(next);
+                const now = Date.now();
+                return store.transitionAndEnqueue({
+                    casUpdateSql: CAS_SQL,
+                    casUpdateParams: [
+                        row.record_json, row.revision, row.state, row.updated_at,
+                        negotiationId, expectedRevision,
+                    ],
+                    enqueueSql: `
+            INSERT OR REPLACE INTO outbox (message_id, recipient, payload, enqueued_at, attempts)
+             VALUES (?, ?, ?, ?, 0)
+          `,
+                    enqueueRows: outboxMessages.map((m) => [m.messageId, m.recipient, m.payload, now]),
+                });
+            },
+            async listRecoverable() {
+                const rows = store.transactionalSync((tx) => tx.all(LIST_RECOVERABLE_SQL));
+                return rows.map(rowToNegotiation);
+            },
+        };
+    }
+    // ── PurchaseStore ─────────────────────────────────────────────────────────
+    createPurchaseStore() {
+        const store = this.store;
+        const INSERT_SQL = `
+      INSERT INTO purchases (purchase_id, record_json, revision, status, updated_at)
+       VALUES (?, ?, ?, ?, ?)
+    `;
+        const GET_SQL = `SELECT * FROM purchases WHERE purchase_id = ?`;
+        const CAS_SQL = `
+      UPDATE purchases
+       SET record_json = ?, revision = ?, status = ?, updated_at = ?
+       WHERE purchase_id = ? AND revision = ?
+    `;
+        const LIST_RECOVERABLE_SQL = `
+      SELECT * FROM purchases WHERE status NOT IN ('COMPLETED','FAILED','CANCELLED')
+    `;
+        return {
+            async create(record) {
+                const row = purchaseToRow(record);
+                store.transactionalSync((tx) => {
+                    tx.run(INSERT_SQL, row.purchase_id, row.record_json, row.revision, row.status, row.updated_at);
+                });
+            },
+            async get(purchaseId) {
+                const row = store.transactionalSync((tx) => tx.get(GET_SQL, purchaseId));
+                return row ? rowToPurchase(row) : undefined;
+            },
+            async compareAndSet(purchaseId, expectedRevision, next) {
+                const row = purchaseToRow(next);
+                const touched = store.transactionalSync((tx) => tx.run(CAS_SQL, row.record_json, row.revision, row.status, row.updated_at, purchaseId, expectedRevision));
+                return touched === 1;
+            },
+            async listRecoverable() {
+                const rows = store.transactionalSync((tx) => tx.all(LIST_RECOVERABLE_SQL));
+                return rows.map(rowToPurchase);
+            },
+        };
+    }
+    // ── ReplayLedger ──────────────────────────────────────────────────────────
+    createReplayLedger() {
+        const store = this.store;
+        const GET_SQL = `SELECT * FROM replay WHERE message_id = ?`;
+        const INSERT_PROCESSING_SQL = `
+      INSERT INTO replay (message_id, state, claimed_at, lease_until)
+       VALUES (?, 'PROCESSING', ?, ?)
+    `;
+        const UPDATE_PROCESSING_SQL = `
+      UPDATE replay SET claimed_at = ?, lease_until = ? WHERE message_id = ? AND state = 'PROCESSING'
+    `;
+        const COMPLETE_SQL = `
+      UPDATE replay SET state = 'COMPLETED', outcome_json = ?, completed_at = ?
+       WHERE message_id = ?
+    `;
+        return {
+            async claim(messageId, receivedAt, leaseMs = 30000) {
+                return store.transactionalSync((tx) => {
+                    const row = tx.get(GET_SQL, messageId);
+                    if (!row) {
+                        tx.run(INSERT_PROCESSING_SQL, messageId, receivedAt, receivedAt + leaseMs);
+                        return { claimed: true };
+                    }
+                    if (row.state === 'COMPLETED') {
+                        return { claimed: false, entry: rowToReplay(row) };
+                    }
+                    // PROCESSING — reclaim if lease expired.
+                    if (row.lease_until !== null && receivedAt > row.lease_until) {
+                        tx.run(UPDATE_PROCESSING_SQL, receivedAt, receivedAt + leaseMs, messageId);
+                        return { claimed: true, reclaimed: true };
+                    }
+                    return { claimed: false, entry: rowToReplay(row) };
+                });
+            },
+            async complete(messageId, outcome) {
+                store.transactionalSync((tx) => {
+                    tx.run(COMPLETE_SQL, toJson(outcome), Date.now(), messageId);
+                });
+            },
+            async get(messageId) {
+                const row = store.transactionalSync((tx) => tx.get(GET_SQL, messageId));
+                return row ? rowToReplay(row) : undefined;
+            },
+        };
+    }
+    // ── PrincipalNegotiationStore ────────────────────────────────────────────
+    createPrincipalStore() {
+        const store = this.store;
+        const INSERT_SLOT_SQL = `
+      INSERT INTO principal_slots (principal, negotiation_id, opened_at) VALUES (?, ?, ?)
+    `;
+        const DELETE_SLOT_SQL = `
+      DELETE FROM principal_slots WHERE principal = ? AND negotiation_id = ?
+    `;
+        const SLOTS_FOR_SQL = `SELECT * FROM principal_slots WHERE principal = ?`;
+        const GET_COOLDOWN_SQL = `SELECT cooldown_until FROM principal_cooldown WHERE principal = ?`;
+        const SET_COOLDOWN_SQL = `
+      INSERT OR REPLACE INTO principal_cooldown (principal, cooldown_until) VALUES (?, ?)
+    `;
+        return {
+            async tryOpen(principal, negotiationId, now, limits) {
+                // Atomic on the shared transaction primitive: check cooldown, window,
+                // concurrency, then consume — two concurrent opens cannot both pass.
+                return store.transactionalSync((tx) => {
+                    const cooldownRow = tx.get(GET_COOLDOWN_SQL, principal);
+                    if (cooldownRow && now < cooldownRow.cooldown_until) {
+                        return { allowed: false, reason: 'COOLDOWN' };
+                    }
+                    const slots = tx.all(SLOTS_FOR_SQL, principal);
+                    const recent = slots.filter((s) => now - s.opened_at < limits.windowMs);
+                    if (recent.length >= limits.maxNegotiationsPerWindow) {
+                        return { allowed: false, reason: 'WINDOW_LIMIT' };
+                    }
+                    if (slots.length >= limits.maxConcurrentNegotiations) {
+                        return { allowed: false, reason: 'CONCURRENCY_LIMIT' };
+                    }
+                    tx.run(INSERT_SLOT_SQL, principal, negotiationId, now);
+                    return { allowed: true };
+                });
+            },
+            async close(principal, negotiationId) {
+                store.transactionalSync((tx) => {
+                    tx.run(DELETE_SLOT_SQL, principal, negotiationId);
+                });
+            },
+            async reconcile(principal, activeNegotiationIds) {
+                store.transactionalSync((tx) => {
+                    const slots = tx.all(SLOTS_FOR_SQL, principal);
+                    const active = new Set(activeNegotiationIds);
+                    for (const slot of slots) {
+                        if (!active.has(slot.negotiation_id)) {
+                            tx.run(DELETE_SLOT_SQL, principal, slot.negotiation_id);
+                        }
+                    }
+                });
+            },
+            async getCooldownUntil(principal) {
+                const row = store.transactionalSync((tx) => tx.get(GET_COOLDOWN_SQL, principal));
+                return row?.cooldown_until ?? 0;
+            },
+            async setCooldownUntil(principal, until) {
+                store.transactionalSync((tx) => {
+                    tx.run(SET_COOLDOWN_SQL, principal, until);
+                });
+            },
+        };
+    }
+    // ── OutboxStore ───────────────────────────────────────────────────────────
+    createOutboxStore() {
+        const store = this.store;
+        const ENQUEUE_SQL = `
+      INSERT OR REPLACE INTO outbox (message_id, recipient, payload, enqueued_at, attempts)
+       VALUES (?, ?, ?, ?, ?)
+    `;
+        const LIST_UNDELIVERED_SQL = `SELECT * FROM outbox WHERE delivered_at IS NULL`;
+        const MARK_DELIVERED_SQL = `UPDATE outbox SET delivered_at = ? WHERE message_id = ?`;
+        const RECORD_ATTEMPT_SQL = `UPDATE outbox SET attempts = attempts + 1 WHERE message_id = ?`;
+        return {
+            async enqueue(entry) {
+                store.transactionalSync((tx) => {
+                    tx.run(ENQUEUE_SQL, entry.messageId, entry.recipient, toJson(entry.message), entry.enqueuedAt, entry.attempts);
+                });
+            },
+            async listUndelivered() {
+                const rows = store.transactionalSync((tx) => tx.all(LIST_UNDELIVERED_SQL));
+                return rows.map(rowToOutbox);
+            },
+            async markDelivered(messageId, deliveredAt) {
+                store.transactionalSync((tx) => {
+                    tx.run(MARK_DELIVERED_SQL, deliveredAt, messageId);
+                });
+            },
+            async recordAttempt(messageId) {
+                store.transactionalSync((tx) => {
+                    tx.run(RECORD_ATTEMPT_SQL, messageId);
+                });
+            },
+        };
+    }
+}
+exports.SQLiteCommerceStore = SQLiteCommerceStore;
+/**
+ * Create a SQLite-backed CommerceStore.
+ *
+ * @param config filename (or ':memory:') + WAL/busy options.
+ */
+function createSQLiteCommerceStore(config) {
+    return new SQLiteCommerceStore(config);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@totemsdk/edge-adapters",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Reference adapters bridging Totem SDK packages to @totemsdk/edge port interfaces",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -16,17 +16,20 @@
     "README.md",
     "LICENSE"
   ],
+  "dependencies": {
+    "@totemsdk/storage": "^0.1.0"
+  },
   "peerDependencies": {
-    "@totemsdk/agent-policy": "^0.2.1",
-    "@totemsdk/identity": "^1.0.0",
-    "@totemsdk/chain-provider": "^0.2.0",
-    "@totemsdk/location-proof": "^1.0.0",
+    "@totemsdk/agent-policy": "^0.3.1",
+    "@totemsdk/chain-provider": "^0.2.1",
     "@totemsdk/lookup-client": "^0.2.0",
+    "@totemsdk/identity": "^1.0.1",
+    "@totemsdk/location-proof": "^1.0.0",
     "@totemsdk/manifest": "^1.0.0",
-    "@totemsdk/omnia-router": "^0.2.0",
+    "@totemsdk/omnia-router": "^0.2.1",
     "@totemsdk/proof": "^1.0.0",
     "@totemsdk/pubsub-transport": "^0.2.0",
-    "@totemsdk/root-identity": "^1.0.8",
+    "@totemsdk/root-identity": "^1.0.9",
     "@totemsdk/stream-transport": "^0.2.0"
   },
   "peerDependenciesMeta": {
@@ -70,18 +73,20 @@
     "jest": "^30.4.2",
     "ts-jest": "^29.0.0",
     "typescript": "^7.0.2",
-    "@totemsdk/chain-provider": "^0.2.0",
-    "@totemsdk/edge": "^1.0.0",
+    "@totemsdk/agent-policy": "^0.3.1",
+    "@totemsdk/chain-provider": "^0.2.1",
+    "@totemsdk/core": "^1.2.11",
+    "@totemsdk/edge": "^1.2.0",
+    "@totemsdk/identity": "^1.0.1",
     "@totemsdk/lookup-client": "^0.2.0",
-    "@totemsdk/identity": "^1.0.0",
-    "@totemsdk/agent-policy": "^0.2.1",
-    "@totemsdk/location-proof": "^1.0.0",
     "@totemsdk/manifest": "^1.0.0",
-    "@totemsdk/omnia-router": "^0.2.0",
+    "@totemsdk/omnia-router": "^0.2.1",
     "@totemsdk/pubsub-transport": "^0.2.0",
-    "@totemsdk/stream-transport": "^0.2.0",
+    "@totemsdk/location-proof": "^1.0.0",
+    "@totemsdk/root-identity": "^1.0.9",
     "@totemsdk/proof": "^1.0.0",
-    "@totemsdk/root-identity": "^1.0.8"
+    "@totemsdk/txpow": "^1.0.2",
+    "@totemsdk/stream-transport": "^0.2.0"
   },
   "engines": {
     "node": ">=18.0.0"
@@ -91,7 +96,7 @@
   },
   "license": "MIT",
   "author": "Totem SDK",
-  "homepage": "https://totem.ing",
+  "homepage": "https://docs.totem.ing",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Totem-Edge/totem-sdk.git",