@x402api/agent-wallet-cli 0.2.1 → 0.2.2

package/README.md

@@ -8,6 +8,12 @@ USDC/USDT. x402api supplies the network fee asset, so buyers do not need ETH or
 SOL. TRON payment authorization returns `unsupported_profile` until that rail
 is launched.
 
+The CLI runs on the buyer or agent host; merchant integrations do not host it
+or receive its keys. A wallet's funded token balance is spend authority, and
+`wallet create --maximum-payment-atomic N` can add a per-payment ceiling. The
+ceiling is not a daily, cumulative, or merchant-specific permission and cannot
+be updated in place in version 0.2.2.
+
 Run `x402api help --json` for the machine-readable command summary. Unlock
 material is accepted only from standard input or an owner-only file named by
 `X402API_WALLET_PASSWORD_FILE`; passphrases are never accepted as command-line
@@ -26,3 +32,6 @@ configured `X402API_NOTIFICATION_URL`. x402api resolves the verified refill
 contact, tenant display name, and purchased product from the subscription
 reference; the CLI never accepts an arbitrary recipient email or untrusted
 tenant/product display text.
+
+The client contract is included in this package, but the hosted notification
+endpoint is deployed separately and is not provided by the CLI package.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@x402api/agent-wallet-cli",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Command-line wallet for autonomous x402 purchases.",
   "license": "MIT",
   "repository": {
@@ -38,6 +38,6 @@
     "lint": "tsc --noEmit -p tsconfig.json"
   },
   "dependencies": {
-    "@x402api/agent-wallet-core": "0.2.1"
+    "@x402api/agent-wallet-core": "0.2.2"
   }
 }

package/skill/SKILL.md

@@ -22,6 +22,11 @@ Install only the skill bundled with the exact CLI version. If it is not already
 installed, an operator can run `x402api skill install --output PATH --json`.
 The command refuses to overwrite an existing skill directory.
 
+The `x402api` CLI runs on the buyer or agent host where its encrypted wallet is
+stored. Merchant tools, including the WarpMetal reference integration, may
+prepare requests and consume artifacts, but they do not host the CLI or receive
+its private keys.
+
 Do not supply a passphrase on the command line. An operator must arrange
 `X402API_WALLET_PASSWORD_FILE` as an owner-only file or supervise
 `--password-stdin`. Never read, print, summarize, or paste that passphrase,
@@ -35,7 +40,8 @@ seed, private key, encrypted keystore, or complete payment signature.
    an address from another network or create a new wallet merely because an
    order is a renewal.
 4. Treat the funded balance as fully spendable by the autonomous agent, subject
-   to any local per-payment ceiling.
+   to any local `maximumPaymentAtomic` per-payment ceiling. That ceiling is not
+   a daily, cumulative, or merchant-specific permission.
 5. Show the public address, exact network, supported asset, sponsored native
    fee currency, and requested token funding amount when funding is
    insufficient. Never ask the owner to fund ETH/SOL or reveal or import a

package/skill/references/cli-reference.md

@@ -31,6 +31,12 @@ x402api wallet retire --wallet NAME --confirm NAME --json
 x402api wallet sweep --wallet NAME --to ADDRESS --json
 ```
 
+`--maximum-payment-atomic` is an optional canonical decimal in atomic units for
+the wallet's supported payment asset. It is enforced on each authorization and
+returns `payment_limit_exceeded` when the exact amount is larger. It is not a
+daily or cumulative budget. Version 0.2.2 sets it only at wallet creation and
+does not provide a policy-update command.
+
 Unlocking commands additionally require `X402API_WALLET_PASSWORD_FILE` or an
 operator-supervised `--password-stdin`. Supported V1 networks are
 `eip155:8453`, `solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp`, and
@@ -42,7 +48,7 @@ operator-supervised `--password-stdin`. Supported V1 networks are
 x402api wallet notify-refill \
   --wallet NAME \
   --subscription-reference ID \
-  --renew-by 2026-08-25T12:00:00.000Z \
+  --renew-by RFC3339_UTC_DEADLINE \
   --target-balance-atomic N \
   --reason renewal \
   --json
@@ -54,6 +60,10 @@ asset balance in atomic units, not the native fee balance. Results have status
 email recipient and derives tenant and product display data from the
 subscription; those values are intentionally not CLI arguments.
 
+The client command is shipped, but this repository does not provide the hosted
+notification endpoint. Configure `X402API_NOTIFICATION_URL` only for an
+approved deployment of the server contract.
+
 ## Payment commands
 
 ```text
@@ -79,6 +89,8 @@ when a merchant-specific integration owns the request lifecycle.
 - `password_required`, `wallet_locked`: request operator unlock assistance;
   never request secret material in chat.
 - `wallet_storage_unsafe`, `payment_artifact_corrupt`: stop and escalate.
+- `payment_limit_exceeded`: the exact payment exceeds the wallet's local
+  per-payment ceiling; do not split or reauthorize it to evade the limit.
 - `insufficient_asset_balance`: show exact funding instructions or request a
   registered refill notification.
 - `insufficient_network_fee_resources`: is not expected for a valid launch

package/skill/references/merchant-integration.md

@@ -47,8 +47,11 @@ never downgraded by a later transport or replay failure.
 
 ## Hosted refill endpoint
 
-The CLI posts a signed envelope to `X402API_NOTIFICATION_URL`. The signed
-intent includes:
+The shipped CLI client posts a signed envelope to
+`X402API_NOTIFICATION_URL`. This repository does not implement or deploy that
+hosted endpoint. An approved server implementing the separate contract must be
+available before a notification workflow is advertised. The signed intent
+includes:
 
 - a domain-separated V1 kind and exact endpoint audience;
 - the subscription reference;

package/skill/references/safety.md

@@ -7,6 +7,11 @@ balance is the economic permission granted to the agent and may be spent at
 different compatible x402 merchants. Preserve separate keys and addresses for
 Base, Solana, and TRON.
 
+An optional `maximumPaymentAtomic` value adds a local ceiling to each payment.
+It does not limit aggregate or daily spend, restrict merchants, revoke existing
+artifacts, or protect a wallet on a compromised same-user host. Version 0.2.2
+sets this value only when creating a wallet and has no policy-update command.
+
 Show the exact network, token contract or mint, public address, and requested
 asset amount before funding. A correct address on the wrong network is not
 valid funding. Buyers do not fund ETH or SOL for launch-sponsored payments.