@vapi-network/core 0.5.0 → 0.8.0

package/dist/vault-key.d.ts

@@ -0,0 +1,41 @@
+import type { SecretStore } from "./secret-store.js";
+import { type Vault } from "./vault.js";
+export declare const VAULT_KEY_ACCOUNT = "vault-key";
+export declare const VAULT_SESSION_ACCOUNT = "vault-session";
+export type VaultEnv = Record<string, string | undefined>;
+export declare function loadOrCreateDeviceKey(args: {
+    secrets: SecretStore;
+    randomBytes?: (size: number) => Uint8Array;
+}): Promise<Uint8Array>;
+export declare function protectVault(args: {
+    path: string;
+    secrets: SecretStore;
+    password?: string;
+    env?: VaultEnv;
+    randomBytes?: (size: number) => Uint8Array;
+}): Promise<void>;
+export declare function unprotectVault(args: {
+    path: string;
+    secrets: SecretStore;
+    password?: string;
+    env?: VaultEnv;
+}): Promise<void>;
+export declare function unlockProtectedVault(args: {
+    path: string;
+    secrets: SecretStore;
+    password?: string;
+    env?: VaultEnv;
+    sessionHours?: number;
+    now?: () => Date;
+}): Promise<Uint8Array>;
+export declare function lockVault(args: {
+    secrets: SecretStore;
+}): Promise<boolean>;
+export declare function restoreVault(args: {
+    path: string;
+    key: Uint8Array;
+    phrase: string;
+    probe: (address: `0x${string}`) => Promise<boolean>;
+    now?: () => Date;
+}): Promise<Vault>;
+//# sourceMappingURL=vault-key.d.ts.map

package/dist/vault-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-key.d.ts","sourceRoot":"","sources":["../src/vault-key.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAQL,KAAK,KAAK,EACX,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAC7C,eAAO,MAAM,qBAAqB,kBAAkB,CAAC;AACrD,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAa1D,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,OAAO,EAAE,WAAW,CAAC;IACrB,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,CAAC;CAC5C,GAAG,OAAO,CAAC,UAAU,CAAC,CAatB;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,CAAC;CAC5C,GAAG,OAAO,CAAC,IAAI,CAAC,CA+ChB;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,QAAQ,CAAC;CAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BhB;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,OAAO,CAAC,UAAU,CAAC,CAyCtB;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAMhF;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,OAAO,CAAC,KAAK,CAAC,CA0CjB"}

package/dist/vault-migrate.d.ts

@@ -0,0 +1,29 @@
+import { type AuditRecord } from "./audit.js";
+import { type Vault } from "./vault.js";
+export declare const MIGRATED_DIRECTORY = "wallets.migrated";
+export type MigrationSkipReason = "passphrase_needed" | "unreadable" | "name_taken";
+export type KeystoreMigration = {
+    imported: string[];
+    skipped: {
+        name: string;
+        reason: MigrationSkipReason;
+    }[];
+};
+/** Returns the 0.5 passphrase for one wallet name, or undefined when it cannot be obtained without a person. */
+export type PassphraseResolver = (name: string) => Promise<string | undefined>;
+/**
+ * Names of the 0.5 keystores still under `<home>/wallets/`. Only regular files
+ * named for a valid wallet are returned.
+ */
+export declare function legacyKeystoreNames(home: string): Promise<string[]>;
+export declare function migrateKeystores(args: {
+    home: string;
+    vault: Vault;
+    resolvePassphrase: PassphraseResolver;
+    /** Audit writer; defaults to appendAudit(home, record, { now }). Injected so tests can capture lines. */
+    audit?: (record: AuditRecord) => Promise<unknown>;
+    now?: () => Date;
+    /** When given, only these names are considered (the store uses it to migrate one keystore on unlock). */
+    only?: readonly string[];
+}): Promise<KeystoreMigration>;
+//# sourceMappingURL=vault-migrate.d.ts.map

package/dist/vault-migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-migrate.d.ts","sourceRoot":"","sources":["../src/vault-migrate.ts"],"names":[],"mappings":"AAeA,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAG3D,OAAO,EAAc,KAAK,KAAK,EAAqB,MAAM,YAAY,CAAC;AAGvE,eAAO,MAAM,kBAAkB,qBAAqB,CAAC;AACrD,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,GAAG,YAAY,GAAG,YAAY,CAAC;AACpF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,mBAAmB,CAAA;KAAE,EAAE,CAAC;CAC1D,CAAC;AACF,gHAAgH;AAChH,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAE/E;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAczE;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;IACb,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,yGAAyG;IACzG,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,yGAAyG;IACzG,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAwF7B"}

package/dist/vault.d.ts

@@ -0,0 +1,104 @@
+import { type VapiPaymentAccount } from "./keystore.js";
+export type VaultAccount = {
+    name: string;
+    kind: "derived";
+    index: number;
+    address: `0x${string}`;
+    createdAt: string;
+} | {
+    name: string;
+    kind: "imported";
+    address: `0x${string}`;
+    createdAt: string;
+};
+export type VaultFile = {
+    version: 2;
+    kdf: "device-key";
+    cipher: "aes-256-gcm";
+    phrase: string;
+    accounts: (VaultAccount & {
+        key?: string;
+    })[];
+    /** Monotonic high-water mark; absent in vaults written before account removal was supported. */
+    nextDerivedIndex?: number;
+    protected: boolean;
+    wrappedKey?: string;
+};
+export type VaultErrorCode = "not_found" | "name_taken" | "has_balance" | "bad_key" | "corrupt" | "already_protected" | "not_protected" | "password_required";
+export declare class VaultError extends Error {
+    readonly code: VaultErrorCode;
+    constructor(code: VaultErrorCode, message: string, options?: ErrorOptions);
+}
+export type VaultOptions = {
+    path: string;
+    key: Uint8Array;
+    /** Chain read used by removeAccount; removal fails closed when it is absent. */
+    balanceOf?: (address: `0x${string}`) => Promise<bigint>;
+    /** Injected clock for createdAt; defaults to () => new Date(). */
+    now?: () => Date;
+};
+export interface Vault {
+    accounts(): VaultAccount[];
+    deriveAccount(name: string): Promise<VaultAccount>;
+    importAccount(name: string, privateKey: `0x${string}`): Promise<VaultAccount>;
+    removeAccount(name: string): Promise<void>;
+    rename(from: string, to: string): Promise<void>;
+    signer(name: string): Promise<VapiPaymentAccount>;
+    phrase(): Promise<string>;
+    save(): Promise<void>;
+}
+type StoredDerivedAccount = Extract<VaultAccount, {
+    kind: "derived";
+}>;
+type StoredImportedAccount = Extract<VaultAccount, {
+    kind: "imported";
+}> & {
+    key: string;
+};
+type StoredAccount = StoredDerivedAccount | StoredImportedAccount;
+export type StoredVaultFile = Omit<VaultFile, "accounts"> & {
+    accounts: StoredAccount[];
+};
+export type StoredVaultAccount = StoredVaultFile["accounts"][number];
+export declare function createVault(args: VaultOptions & {
+    phrase?: string;
+}): Promise<Vault>;
+export declare function openVault(args: VaultOptions): Promise<Vault>;
+/**
+ * Puts a stored account record back into the vault under the vault lock: the exact
+ * record `readVaultFileUnlocked` returned before `removeAccount` took it out.
+ * Refuses (VaultError "name_taken") a name that is already present or, for a
+ * derived record, an index already in use; refuses ("bad_key") an imported record
+ * whose key does not decrypt to its address with this device key. Returns the
+ * public VaultAccount.
+ */
+export declare function reinstateVaultAccount(args: {
+    path: string;
+    key: Uint8Array;
+    account: StoredVaultAccount;
+}): Promise<VaultAccount>;
+/** Human-only: opens the vault and returns the recovery phrase. Re-exported ONLY from secrets.ts. */
+export declare function exportVaultPhrase(args: VaultOptions): Promise<string>;
+/** Human-only: decrypts one named account's private key. Re-exported ONLY from secrets.ts. */
+export declare function exportVaultAccountKey(args: {
+    path: string;
+    key: Uint8Array;
+    name: string;
+}): Promise<`0x${string}`>;
+/**
+ * One swarm member's own private key, for a member bundle that runs it on a
+ * remote sandbox. It is `exportVaultAccountKey` under the name the remote path
+ * uses: one account, never the phrase. Which accounts may leave the machine is
+ * the caller's policy; this function refuses nothing beyond an unknown name.
+ */
+export declare function exportMemberKey(args: {
+    path: string;
+    key: Uint8Array;
+    name: string;
+}): Promise<`0x${string}`>;
+export declare function readVaultFileUnlocked(path: string): Promise<StoredVaultFile>;
+export declare function writeVaultFile(path: string, file: StoredVaultFile): Promise<void>;
+/** Serializes vault read-modify-write transactions across CLI and MCP processes. */
+export declare function withVaultLock<T>(path: string, operation: () => Promise<T>): Promise<T>;
+export {};
+//# sourceMappingURL=vault.d.ts.map

package/dist/vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":"AASA,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AASvB,MAAM,MAAM,YAAY,GACpB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAElF,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,CAAC,CAAC;IACX,GAAG,EAAE,YAAY,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,CAAC,YAAY,GAAG;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAC9C,gGAAgG;IAChG,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,cAAc,GACtB,WAAW,GACX,YAAY,GACZ,aAAa,GACb,SAAS,GACT,SAAS,GACT,mBAAmB,GACnB,eAAe,GACf,mBAAmB,CAAC;AAExB,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;gBAElB,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAK1E;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;IAChB,gFAAgF;IAChF,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,WAAW,KAAK;IACpB,QAAQ,IAAI,YAAY,EAAE,CAAC;IAC3B,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACnD,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9E,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClD,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,KAAK,oBAAoB,GAAG,OAAO,CAAC,YAAY,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AACvE,KAAK,qBAAqB,GAAG,OAAO,CAAC,YAAY,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAC3F,KAAK,aAAa,GAAG,oBAAoB,GAAG,qBAAqB,CAAC;AAClE,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG;IAAE,QAAQ,EAAE,aAAa,EAAE,CAAA;CAAE,CAAC;AAC1F,MAAM,MAAM,kBAAkB,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAySrE,wBAAsB,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAuC1F;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAGlE;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;IAChB,OAAO,EAAE,kBAAkB,CAAC;CAC7B,GAAG,OAAO,CAAC,YAAY,CAAC,CAwCxB;AAED,qGAAqG;AACrG,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAE3E;AAED,8FAA8F;AAC9F,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAuCzB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC,CAEzB;AA0KD,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAalF;AAcD,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAcvF;AAED,oFAAoF;AACpF,wBAAsB,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAyB5F"}

package/dist/wallet-store.d.ts

@@ -1,7 +1,9 @@
 import { z } from "zod";
+import { type AuditRecord } from "./audit.js";
 import { type SpendCaps } from "./config.js";
 import { type VapiPaymentAccount } from "./keystore.js";
-import type { SecretStore } from "./secret-store.js";
+import { type SecretStore } from "./secret-store.js";
+import { type PassphraseResolver } from "./vault-migrate.js";
 import { type WalletName } from "./wallet-name.js";
 export { DEFAULT_WALLET_NAME, isWalletName, walletNameSchema, WALLET_NAME_PATTERN, type WalletName, } from "./wallet-name.js";
 export type AgentLink = {
@@ -19,7 +21,19 @@ export type RouterRefill = {
     belowUsd: number;
     tierUsd: RouterTopupTier;
 };
-/** What `wallets.json` records about one wallet. The keys live in its keystore. */
+declare const ceilingSweepPendingSchema: z.ZodObject<{
+    owner: z.ZodString;
+    target: z.ZodOptional<z.ZodString>;
+    amountAtomic: z.ZodString;
+    nonce: z.ZodString;
+    createdAt: z.ZodISODateTime;
+    status: z.ZodEnum<{
+        unknown: "unknown";
+        planned: "planned";
+    }>;
+}, z.core.$strict>;
+export type WalletCeilingSweepPending = z.infer<typeof ceilingSweepPendingSchema>;
+/** What `wallets.json` records about one wallet. Keys live in the vault or a legacy keystore. */
 export declare const walletEntrySchema: z.ZodObject<{
     createdAt: z.ZodISODateTime;
     label: z.ZodOptional<z.ZodString>;
@@ -27,6 +41,19 @@ export declare const walletEntrySchema: z.ZodObject<{
         perCallAtomic: z.ZodString;
         perDayAtomic: z.ZodString;
     }, z.core.$strip>;
+    ceilingAtomic: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    ceilingSweepAttemptedAt: z.ZodOptional<z.ZodISODateTime>;
+    ceilingSweepPending: z.ZodOptional<z.ZodObject<{
+        owner: z.ZodString;
+        target: z.ZodOptional<z.ZodString>;
+        amountAtomic: z.ZodString;
+        nonce: z.ZodString;
+        createdAt: z.ZodISODateTime;
+        status: z.ZodEnum<{
+            unknown: "unknown";
+            planned: "planned";
+        }>;
+    }, z.core.$strict>>;
     routerRefill: z.ZodOptional<z.ZodType<RouterRefill, unknown, z.core.$ZodTypeInternals<RouterRefill, unknown>>>;
     link: z.ZodOptional<z.ZodType<AgentLink, unknown, z.core.$ZodTypeInternals<AgentLink, unknown>>>;
 }, z.core.$strip>;
@@ -40,12 +67,29 @@ export declare const walletRegistrySchema: z.ZodObject<{
             perCallAtomic: z.ZodString;
             perDayAtomic: z.ZodString;
         }, z.core.$strip>;
+        ceilingAtomic: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        ceilingSweepAttemptedAt: z.ZodOptional<z.ZodISODateTime>;
+        ceilingSweepPending: z.ZodOptional<z.ZodObject<{
+            owner: z.ZodString;
+            target: z.ZodOptional<z.ZodString>;
+            amountAtomic: z.ZodString;
+            nonce: z.ZodString;
+            createdAt: z.ZodISODateTime;
+            status: z.ZodEnum<{
+                unknown: "unknown";
+                planned: "planned";
+            }>;
+        }, z.core.$strict>>;
         routerRefill: z.ZodOptional<z.ZodType<RouterRefill, unknown, z.core.$ZodTypeInternals<RouterRefill, unknown>>>;
         link: z.ZodOptional<z.ZodType<AgentLink, unknown, z.core.$ZodTypeInternals<AgentLink, unknown>>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type WalletEntry = z.infer<typeof walletEntrySchema>;
 export type WalletRegistry = z.infer<typeof walletRegistrySchema>;
+export type WalletCeilingCaps = {
+    ceilingAtomic: bigint | null;
+    effectiveCeilingAtomic: bigint | null;
+};
 /** How a caller names the wallet it wants; every field is optional. */
 export type WalletSelection = {
     /** An explicit name, from `--wallet` or an MCP argument. */
@@ -69,7 +113,7 @@ export type WalletInfo = ResolvedWallet & {
 };
 export type CreatedWallet = ResolvedWallet & {
     account: VapiPaymentAccount;
-    recoveryPhrase: string;
+    recoveryPhrase?: string;
 };
 export type ImportedWallet = ResolvedWallet & {
     account: VapiPaymentAccount;
@@ -82,27 +126,46 @@ export type TrashedWallet = {
 };
 /** Reads the USDC balance of an address, so `remove` can refuse a funded wallet. */
 export type WalletBalanceReader = (address: string) => Promise<bigint>;
+type WalletRenameOptions = {
+    secrets?: SecretStore;
+    serialize?: <T>(operation: () => Promise<T>) => Promise<T>;
+};
+type WalletRemoveOptions = {
+    force?: boolean;
+    balanceReader?: WalletBalanceReader;
+    allowDefault?: boolean;
+};
 export type WalletStoreOptions = {
     /** Injected clock, so `createdAt` is deterministic in tests. */
     now?: () => Date;
+    /** OS secret store holding the device vault key and optional legacy passphrases. */
+    secrets?: SecretStore;
+    /** Environment used for vault and legacy-keystore passwords. */
+    env?: NodeJS.ProcessEnv;
+    /** Resolves a 0.5 keystore passphrase without prompting. */
+    resolvePassphrase?: PassphraseResolver;
+    /** Writes migration audit records. */
+    audit?: (record: AuditRecord) => Promise<unknown>;
 };
 export type LayoutMigration = {
     moved: boolean;
     from?: string;
     to?: string;
 };
+export declare const VAULT_LOCKED_MESSAGE = "The vault is locked. Run vapi vault unlock, or set VAPI_VAULT_PASSWORD.";
 /**
- * The wallets on this machine: one registry file, one keystore per wallet, and
- * the rules for picking the wallet a command acts on. Keys never leave the
- * keystore files; the store only moves, names and caps them.
+ * The wallets on this machine: a vault of keys, a registry of settings, and the
+ * rules for picking the wallet a command acts on.
  *
  * Layout under the config home (`~/.vapi`, or `VAPI_HOME`):
  *
  * ```
+ * vault.json            encrypted device vault and named accounts
  * wallets.json          registry: default wallet, per-wallet caps and labels
- * wallets/<name>.json   one keystore per wallet, mode 0600
- * wallets/.trash/       removed wallets, kept encrypted, never auto-deleted
- * keystore.json         symlink to wallets/main.json after the 0.2.x migration
+ * wallets/<name>.json   0.5 keystores awaiting migration
+ * wallets.migrated/     migrated 0.5 keystores, retained as encrypted backups
+ * wallets/.trash/       removed accounts and their registry sidecars
+ * audit.log             append-only local audit trail
  * ```
  */
 export declare class WalletStore {
@@ -110,13 +173,20 @@ export declare class WalletStore {
     readonly home: string;
     private readonly options;
     private registry;
+    private readonly secrets;
+    private readonly environment;
+    private readonly passphraseResolver;
+    private readonly audit;
+    private cachedVault;
+    private vaultKey;
+    private balanceProbe;
     private constructor();
     /** Opens the store, migrating a 0.2.x single-keystore home on the way. */
     static open(home?: string, options?: WalletStoreOptions): Promise<WalletStore>;
     get registryPath(): string;
     get walletsDirectory(): string;
     get trashDirectory(): string;
-    /** The keystore path of a wallet, whether or not it exists yet. */
+    /** The legacy 0.5 keystore path of a wallet, whether or not it exists. */
     pathFor(name: string): string;
     /** The names this machine knows, in registry order. */
     names(): WalletName[];
@@ -126,9 +196,11 @@ export declare class WalletStore {
     hasRegistry(): boolean;
     entry(name: string): WalletEntry | undefined;
     has(name: string): boolean;
+    /** True only when the device vault currently contains an account with this name. */
+    hasVaultAccount(name: string): Promise<boolean>;
     /** A copy of the registry as it was last read or written. */
     snapshot(): WalletRegistry;
-    /** Re-reads `wallets.json` from disk. */
+    /** Re-reads `wallets.json` from disk and drops the process-local vault cache. */
     reload(): Promise<WalletRegistry>;
     /**
      * Picks the wallet a command acts on: an explicit name first, then
@@ -140,72 +212,90 @@ export declare class WalletStore {
     /** The stored Base address of a wallet, without its passphrase. */
     readAddress(name: string): Promise<string | undefined>;
     /**
-     * Creates a wallet from a fresh or supplied recovery phrase. The first wallet
-     * on a machine also becomes the default. The phrase is returned once and is
-     * never written anywhere but the encrypted keystore.
+     * Creates a vault account from a fresh or supplied recovery phrase. The first
+     * wallet on a machine also becomes the default. `passphrase` and
+     * `enableSolana` are accepted and ignored for one release. Every derived
+     * account returns the vault's shared phrase to preserve this method's public
+     * contract; callers decide whether their current flow may display it.
      */
     create(name: string, passphrase: string, options?: {
         phrase?: string;
         enableSolana?: boolean;
         label?: string;
         spendCaps?: SpendCaps;
-    }): Promise<CreatedWallet>;
-    /** Wraps a private key the user already holds in a new named wallet. */
+    }): Promise<CreatedWallet & {
+        recoveryPhrase: string;
+    }>;
+    /** Imports a private key into the vault. `passphrase` is ignored for one release. */
     importKey(name: string, passphrase: string, privateKey: string, options?: {
         label?: string;
         spendCaps?: SpendCaps;
     }): Promise<ImportedWallet>;
-    /** Opens one wallet's keystore with its passphrase. */
+    /** Returns one wallet's vault signer, migrating its legacy keystore if needed. */
     unlock(name: string, passphrase: string): Promise<VapiPaymentAccount>;
     setDefault(name: string): Promise<WalletRegistry>;
     setSpendCaps(name: string, caps: SpendCaps): Promise<WalletEntry>;
+    /** Stores an explicit atomic ceiling, or null to disable automatic sweeps. */
+    setCeiling(name: string, ceilingAtomic: bigint | null): Promise<WalletEntry>;
+    /** Updates a ceiling from the latest value while holding the registry write lock. */
+    updateCeiling(name: string, update: (current: bigint | null) => bigint | null): Promise<WalletEntry>;
+    /** Reads the configured ceiling and the per-day-cap floor for one wallet. */
+    ceilingCaps(name: string): WalletCeilingCaps;
+    /**
+     * Atomically claims the ten-minute sweep window. The timestamp is written
+     * before authorization work, so failed attempts consume the window too.
+     */
+    claimCeilingSweepAttempt(name: string, now: Date, guardMs?: number): Promise<boolean>;
+    /** Reads the durable authorization plan used to resume an uncertain sweep. */
+    ceilingSweepPending(name: string): WalletCeilingSweepPending | undefined;
+    /** Updates an uncertain sweep from the latest registry value under its lock. */
+    updateCeilingSweepPending(name: string, update: (current: Readonly<WalletCeilingSweepPending> | undefined) => WalletCeilingSweepPending | undefined): Promise<WalletCeilingSweepPending | undefined>;
+    /** Updates spend caps from the latest registry value while holding its write lock. */
+    updateSpendCaps(name: string, update: (current: Readonly<SpendCaps>) => SpendCaps): Promise<WalletEntry>;
+    /** Atomically keeps the stricter current or planned provisioning limit in every field. */
+    lowerProvisioningLimits(name: string, plannedCaps: SpendCaps, plannedCeilingAtomic: bigint | null): Promise<WalletEntry>;
     setRouterRefill(name: string, refill: RouterRefill | null): Promise<WalletEntry>;
     /** Sets or, with `undefined`, clears the human label of a wallet. */
     setLabel(name: string, label: string | undefined): Promise<WalletEntry>;
     setLink(name: WalletName, link: AgentLink): Promise<WalletEntry>;
     clearLink(name: WalletName): Promise<WalletEntry>;
     /**
-     * Renames a wallet everywhere its name is recorded: the keystore file, the
-     * registry, and the wallet field of its receipts. The keystore contents are
-     * moved untouched.
+     * Renames a wallet everywhere its name is recorded: the vault or legacy
+     * keystore, the registry, and the wallet field of its receipts.
      */
-    rename(oldName: string, newName: string, options?: {
-        secrets?: SecretStore;
-    }): Promise<ResolvedWallet>;
+    rename(oldName: string, newName: string, options?: WalletRenameOptions): Promise<ResolvedWallet>;
+    private renameWithMovementLocksHeld;
     /**
-     * Moves a wallet's keystore to `wallets/.trash/`. Nothing is deleted: the
-     * encrypted file stays, and its passphrase still opens it. The default wallet
-     * and a wallet that still holds USDC are refused unless forced.
+     * Moves a wallet's encrypted vault record or legacy keystore to
+     * `wallets/.trash/`. The default wallet and a wallet that still holds USDC
+     * are refused unless forced.
      *
      * `allowDefault` exists for one caller: `vapi import --replace`, which puts a
      * new wallet under the same name back in place immediately afterwards, so the
      * machine is never left without a default. `vapi wallet remove` never sets it.
      */
-    remove(name: string, options?: {
-        force?: boolean;
-        balanceReader?: WalletBalanceReader;
-        allowDefault?: boolean;
-    }): Promise<TrashedWallet>;
+    remove(name: string, options?: WalletRemoveOptions): Promise<TrashedWallet>;
+    private removeWithMovementLockHeld;
     /** Brings the most recently removed wallet of that name back. */
     restore(name: string): Promise<ResolvedWallet>;
+    private restoreWithAccountMutationLockHeld;
     /** Every removed wallet still in the trash, newest first. */
     listTrash(): Promise<TrashedWallet[]>;
     /**
      * Moves a 0.2.x home into the wallet layout, once: `keystore.json` becomes
-     * `wallets/main.json` and `keystore.json` stays behind as a symlink for one
-     * release, so scripts and 0.2.x callers keep working. The keystore contents
-     * are never rewritten, and a home without a keystore migrates nothing.
+     * `wallets/main.json`, ready for vault migration. The keystore contents are
+     * never rewritten, and a home without a keystore migrates nothing.
      */
     migrateLegacyLayout(): Promise<LayoutMigration>;
     private now;
     private newEntry;
     private prepareNewWallet;
     private registerWallet;
-    /**
-     * Keeps the compatibility symlink honest: when the wallet it points at moves,
-     * the link follows it, and when that wallet is removed, the link goes too.
-     */
-    private retargetLegacyKeystoreLink;
+    private get vaultPath();
+    private readVaultUnlocked;
+    private registerMissingVaultAccounts;
+    private openVault;
+    private dropVaultCache;
     private update;
     private readRegistry;
     private writeRegistry;
@@ -215,6 +305,12 @@ export declare class WalletStore {
  * registry yet — the legacy `config.spendCaps`, and otherwise the defaults.
  */
 export declare function spendCapsForWallet(store: WalletStore, name?: WalletName): Promise<SpendCaps>;
+/** Formats atomic USDC without floating point for JSON-facing cap objects. */
+export declare function formatCeilingUsd(ceilingAtomic: bigint | null): string;
+/** The JSON fragment used by account and caps output. */
+export declare function ceilingCapsJson(caps: Pick<WalletCeilingCaps, "ceilingAtomic">): {
+    ceilingUsd: string;
+};
 /** Rejects anything that is not a wallet name, including path traversal. */
 export declare function assertWalletName(value: string): WalletName;
 //# sourceMappingURL=wallet-store.d.ts.map

package/dist/wallet-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wallet-store.d.ts","sourceRoot":"","sources":["../src/wallet-store.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAIL,KAAK,UAAU,EAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,KAAK,UAAU,GAChB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAYF,eAAO,MAAM,kBAAkB,yBAA0B,CAAC;AAC1D,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAClE,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAAC;AAO1E,mFAAmF;AACnF,eAAO,MAAM,iBAAiB;;;;;;;;;iBAM5B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;iBAI/B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,uEAAuE;AACvE,MAAM,MAAM,eAAe,GAAG;IAC5B,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,WAAW,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG;IAC3C,OAAO,EAAE,kBAAkB,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG;IAC5C,OAAO,EAAE,kBAAkB,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB,CAAC;AAEF,oFAAoF;AACpF,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEvE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb,CAAC;AAOF;;;;;;;;;;;;;GAaG;AACH,qBAAa,WAAW;IAIpB,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,OAAO,CAAC,QAAQ,CAAiB;IAEjC,OAAO;IASP,0EAA0E;WAC7D,IAAI,CACf,IAAI,SAA2B,EAC/B,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,WAAW,CAAC;IAOvB,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,IAAI,gBAAgB,IAAI,MAAM,CAE7B;IAED,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED,mEAAmE;IACnE,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI7B,uDAAuD;IACvD,KAAK,IAAI,UAAU,EAAE;IAIrB,mEAAmE;IACnE,IAAI,WAAW,IAAI,UAAU,GAAG,SAAS,CAExC;IAED,4EAA4E;IAC5E,WAAW,IAAI,OAAO;IAItB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAI5C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,6DAA6D;IAC7D,QAAQ,IAAI,cAAc;IAI1B,yCAAyC;IACnC,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAKvC;;;OAGG;IACH,OAAO,CAAC,SAAS,GAAE,eAAoB,GAAG,cAAc;IAexD,kEAAkE;IAC5D,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAqBnC,mEAAmE;IAC7D,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAI5D;;;;OAIG;IACG,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;QACP,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,SAAS,CAAC;KAClB,GACL,OAAO,CAAC,aAAa,CAAC;IAUzB,wEAAwE;IAClE,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,SAAS,CAAA;KAAO,GACtD,OAAO,CAAC,cAAc,CAAC;IAO1B,uDAAuD;IACjD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAKrE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAOjD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAUjE,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;IAatF,qEAAqE;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAkBvE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAYhE,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IAWvD;;;;OAIG;IACG,MAAM,CACV,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,WAAW,CAAA;KAAO,GACtC,OAAO,CAAC,cAAc,CAAC;IAsC1B;;;;;;;;OAQG;IACG,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;QACP,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,aAAa,CAAC,EAAE,mBAAmB,CAAC;QACpC,YAAY,CAAC,EAAE,OAAO,CAAC;KACnB,GACL,OAAO,CAAC,aAAa,CAAC;IAgCzB,iEAAiE;IAC3D,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAyBpD,6DAA6D;IACvD,SAAS,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAqB3C;;;;;OAKG;IACG,mBAAmB,IAAI,OAAO,CAAC,eAAe,CAAC;IAqCrD,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,QAAQ;YAUF,gBAAgB;YAehB,cAAc;IAY5B;;;OAGG;YACW,0BAA0B;YAqB1B,MAAM;YASN,YAAY;YAkBZ,aAAa;CAK5B;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,WAAW,EAClB,IAAI,GAAE,UAAgC,GACrC,OAAO,CAAC,SAAS,CAAC,CAIpB;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAa1D"}
+{"version":3,"file":"wallet-store.d.ts","sourceRoot":"","sources":["../src/wallet-store.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAML,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAErB,OAAO,EAAiC,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAIvF,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGlE,OAAO,EAAyC,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAYpG,OAAO,EAIL,KAAK,UAAU,EAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,KAAK,UAAU,GAChB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAYF,eAAO,MAAM,kBAAkB,yBAA0B,CAAC;AAC1D,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAClE,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAAC;AAO1E,QAAA,MAAM,yBAAyB;;;;;;;;;;kBAU7B,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,iGAAiG;AACjG,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;iBAW5B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI/B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC,CAAC;AAEF,uEAAuE;AACvE,MAAM,MAAM,eAAe,GAAG;IAC5B,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,WAAW,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG;IAC3C,OAAO,EAAE,kBAAkB,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG;IAC5C,OAAO,EAAE,kBAAkB,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB,CAAC;AAEF,oFAAoF;AACpF,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEvE,KAAK,mBAAmB,GAAG;IACzB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;CAC5D,CAAC;AAEF,KAAK,mBAAmB,GAAG;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,oFAAoF;IACpF,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;IACvC,sCAAsC;IACtC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb,CAAC;AAQF,eAAO,MAAM,oBAAoB,4EAC0C,CAAC;AAE5E;;;;;;;;;;;;;;GAcG;AACH,qBAAa,WAAW;IAWpB,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAZ1B,OAAO,CAAC,QAAQ,CAAiB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4C;IAClE,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,QAAQ,CAAyB;IACzC,OAAO,CAAC,YAAY,CAAkC;IAEtD,OAAO;IAgBP,0EAA0E;WAC7D,IAAI,CACf,IAAI,SAA2B,EAC/B,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,WAAW,CAAC;IAgCvB,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,IAAI,gBAAgB,IAAI,MAAM,CAE7B;IAED,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED,0EAA0E;IAC1E,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI7B,uDAAuD;IACvD,KAAK,IAAI,UAAU,EAAE;IAIrB,mEAAmE;IACnE,IAAI,WAAW,IAAI,UAAU,GAAG,SAAS,CAExC;IAED,4EAA4E;IAC5E,WAAW,IAAI,OAAO;IAItB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAI5C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,oFAAoF;IAC9E,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAMrD,6DAA6D;IAC7D,QAAQ,IAAI,cAAc;IAI1B,iFAAiF;IAC3E,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAMvC;;;OAGG;IACH,OAAO,CAAC,SAAS,GAAE,eAAoB,GAAG,cAAc;IAexD,kEAAkE;IAC5D,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IA6BnC,mEAAmE;IAC7D,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAQ5D;;;;;;OAMG;IACG,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,SAAS,CAAC;KACvB,GACA,OAAO,CAAC,aAAa,GAAG;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAoDtD,qFAAqF;IAC/E,SAAS,CACb,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,SAAS,CAAA;KAAO,GACtD,OAAO,CAAC,cAAc,CAAC;IA0B1B,kFAAkF;IAC5E,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAsCrE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAOjD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAKvE,8EAA8E;IACxE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;IAIlF,qFAAqF;IAC/E,aAAa,CACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,KAAK,MAAM,GAAG,IAAI,GAChD,OAAO,CAAC,WAAW,CAAC;IAuBvB,6EAA6E;IAC7E,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB;IAW5C;;;OAGG;IACG,wBAAwB,CAC5B,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,IAAI,EACT,OAAO,SAAkB,GACxB,OAAO,CAAC,OAAO,CAAC;IAsBnB,8EAA8E;IAC9E,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,yBAAyB,GAAG,SAAS;IAIxE,gFAAgF;IAC1E,yBAAyB,CAC7B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CACN,OAAO,EAAE,QAAQ,CAAC,yBAAyB,CAAC,GAAG,SAAS,KACrD,yBAAyB,GAAG,SAAS,GACzC,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC;IAqBjD,sFAAsF;IAChF,eAAe,CACnB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,SAAS,GAClD,OAAO,CAAC,WAAW,CAAC;IAsBvB,0FAA0F;IACpF,uBAAuB,CAC3B,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,SAAS,EACtB,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAClC,OAAO,CAAC,WAAW,CAAC;IAiCjB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;IAatF,qEAAqE;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAkBvE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;IAYhE,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IAWvD;;;OAGG;IACG,MAAM,CACV,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,cAAc,CAAC;YAuBZ,2BAA2B;IAoFzC;;;;;;;;OAQG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,aAAa,CAAC;YAevE,0BAA0B;IAqExC,iEAAiE;IAC3D,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;YAatC,kCAAkC;IA6ChD,6DAA6D;IACvD,SAAS,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAqB3C;;;;OAIG;IACG,mBAAmB,IAAI,OAAO,CAAC,eAAe,CAAC;IA+BrD,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,QAAQ;YAWF,gBAAgB;YAchB,cAAc;IAY5B,OAAO,KAAK,SAAS,GAEpB;YAEa,iBAAiB;YASjB,4BAA4B;YA4B5B,SAAS;IAuEvB,OAAO,CAAC,cAAc;YAMR,MAAM;YASN,YAAY;YAkBZ,aAAa;CAK5B;AAwMD;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,WAAW,EAClB,IAAI,GAAE,UAAgC,GACrC,OAAO,CAAC,SAAS,CAAC,CAIpB;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAMrE;AAED,yDAAyD;AACzD,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,eAAe,CAAC,GAAG;IAC/E,UAAU,EAAE,MAAM,CAAC;CACpB,CAEA;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAa1D"}

package/dist/x402-pay.d.ts

@@ -1,7 +1,10 @@
+import { type CeilingSweepHook } from "./ceiling.js";
+import type { RunRef } from "./agent-run.js";
 import type { SpendCaps, VapiConfig } from "./config.js";
 import type { VapiPaymentAccount } from "./keystore.js";
 import { type LookupFn } from "./net-guard.js";
 import { type Receipt } from "./receipts.js";
+import { type RunBudget } from "./run-budget.js";
 import type { WalletName } from "./wallet-name.js";
 import { type X402Quote, type X402SettlementOutcome } from "./x402.js";
 export type PayRequestArgs = {
@@ -20,9 +23,14 @@ export type PayRequestArgs = {
     preferNetworks?: string[];
     paymentId?: string;
     now?: Date;
+    allowanceExpiresAt?: Date;
     nowMs?: () => number;
     source?: string;
     lookup?: LookupFn;
+    /** Optional settled-call hook; omitted or false keeps payment tests and custom SDK flows inert. */
+    ceilingSweep?: CeilingSweepHook | false;
+    runBudget?: RunBudget;
+    run?: RunRef;
 };
 export type PayRequestResult = {
     response: Response;
@@ -101,9 +109,13 @@ export type CompleteX402PaymentArgs<T = undefined> = {
     expectedPayTo?: string;
     paymentId?: string;
     now?: Date;
+    allowanceExpiresAt?: Date;
     nowMs?: () => number;
     quoteStartedMs?: number;
     trace?: X402PaymentTrace;
+    /** Runs only after a successful, decisively settled paid result is ready. */
+    ceilingSweep?: CeilingSweepHook | false;
+    runBudget?: RunBudget;
 };
 export type CompleteX402PaymentResult<T = undefined> = {
     response: Response;

package/dist/x402-pay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"x402-pay.d.ts","sourceRoot":"","sources":["../src/x402-pay.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAsC,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEnF,OAAO,EAAiB,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AAG5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAUL,KAAK,SAAS,EACd,KAAK,qBAAqB,EAC3B,MAAM,WAAW,CAAC;AAEnB,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,OAAO,KAAK,CAAC;IACxB,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,QAAQ,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,IAAI,IAAI,CAAC;IACf,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACnE,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE;QACN,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,qBAAa,gBAAiB,SAAQ,KAAK;aAIvB,IAAI,EAAE,kBAAkB,GAAG,qBAAqB,GAAG,oBAAoB;aAEvE,kBAAkB,CAAC,EAAE,sBAAsB;IAL7D,QAAQ,CAAC,IAAI,sBAAsB;gBAGjB,IAAI,EAAE,kBAAkB,GAAG,qBAAqB,GAAG,oBAAoB,EACvF,OAAO,EAAE,MAAM,EACC,kBAAkB,CAAC,EAAE,sBAAsB,YAAA,EAC3D,OAAO,CAAC,EAAE,YAAY,GAAG;QACvB,gBAAgB,CAAC,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,CAAC;QAC5D,mBAAmB,CAAC,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,CAAC;KAChE;IAOH,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACrE,QAAQ,CAAC,mBAAmB,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CACzE;AAED,MAAM,MAAM,uBAAuB,CAAC,CAAC,GAAG,SAAS,IAAI;IACnD,SAAS,EAAE,kBAAkB,CAAC;IAC9B,OAAO,EAAE,kBAAkB,CAAC;IAC5B,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACrD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,yBAAyB,CAAC,CAAC,GAAG,SAAS,IAAI;IACrD,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC;IACpB,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,qBAAqB,CAAC;CAC1C,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2EhF;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,GAAG,SAAS,EACrD,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,GAC/B,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAuMvC"}
+{"version":3,"file":"x402-pay.d.ts","sourceRoot":"","sources":["../src/x402-pay.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAsC,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEnF,OAAO,EAAiB,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAkB,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAUL,KAAK,SAAS,EACd,KAAK,qBAAqB,EAC3B,MAAM,WAAW,CAAC;AAEnB,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,OAAO,KAAK,CAAC;IACxB,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,kBAAkB,CAAC,EAAE,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,mGAAmG;IACnG,YAAY,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;IACxC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAExE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,IAAI,IAAI,CAAC;IACf,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACnE,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE;QACN,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,qBAAa,gBAAiB,SAAQ,KAAK;aAIvB,IAAI,EAAE,kBAAkB,GAAG,qBAAqB,GAAG,oBAAoB;aAEvE,kBAAkB,CAAC,EAAE,sBAAsB;IAL7D,QAAQ,CAAC,IAAI,sBAAsB;gBAGjB,IAAI,EAAE,kBAAkB,GAAG,qBAAqB,GAAG,oBAAoB,EACvF,OAAO,EAAE,MAAM,EACC,kBAAkB,CAAC,EAAE,sBAAsB,YAAA,EAC3D,OAAO,CAAC,EAAE,YAAY,GAAG;QACvB,gBAAgB,CAAC,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,CAAC;QAC5D,mBAAmB,CAAC,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,CAAC;KAChE;IAOH,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACrE,QAAQ,CAAC,mBAAmB,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CACzE;AAED,MAAM,MAAM,uBAAuB,CAAC,CAAC,GAAG,SAAS,IAAI;IACnD,SAAS,EAAE,kBAAkB,CAAC;IAC9B,OAAO,EAAE,kBAAkB,CAAC;IAC5B,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACrD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,kBAAkB,CAAC,EAAE,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;IACxC,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,yBAAyB,CAAC,CAAC,GAAG,SAAS,IAAI;IACrD,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC;IACpB,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,qBAAqB,CAAC;CAC1C,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiFhF;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,GAAG,SAAS,EACrD,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,GAC/B,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CA6OvC"}

package/dist/x402.d.ts

@@ -147,6 +147,7 @@ export declare function buildEip3009TypedData(args: {
     quote: X402Quote;
     nonce: Hex;
     nowSeconds: number;
+    maximumValidBeforeSeconds?: number;
 }): {
     authorization: Eip3009Authorization;
     typedData: X402TypedData;
@@ -155,6 +156,7 @@ export declare function buildX402Payment(args: {
     signer: X402Signer;
     quote: X402Quote;
     nowSeconds?: number;
+    maximumValidBeforeSeconds?: number;
     nonce?: Hex;
     fetchImpl?: typeof fetch;
     paymentId?: string;
@@ -168,6 +170,7 @@ export declare function buildCompatibleX402Payment(args: {
     account: X402Signer;
     quote: X402Quote;
     nowSeconds?: number;
+    maximumValidBeforeSeconds?: number;
     nonce?: Hex;
     fetchImpl?: typeof fetch;
     paymentId?: string;