@xona-labs/xpay 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 xona-labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,226 @@
+# @xona-labs/xpay
+
+> **Agentic-commerce wallet.** Multi-network USDC wallet, x402 payments, and discovery across 20,000+ services — as a CLI, an SDK, and an MCP server.
+
+```bash
+npm install -g @xona-labs/xpay
+xpay init                                  # creates Solana + EVM keys, encrypted
+xpay discover "research API"               # 21k catalog, ranked
+xpay pay  https://api.example.com/x402     # x402 one-liner
+xpay transfer 5 USDC 7G73PL...gC           # direct USDC transfer
+xpay balance                               # unified across networks
+xpay history                               # recent activity, on-chain
+```
+
+```ts
+// SDK — same primitives, programmatic
+import { loadProfile, createXPay } from "@xona-labs/xpay";
+const xpay = createXPay({ profile: await loadProfile({ passphrase }) });
+const result = await xpay.do("translate this PDF to Japanese", { body: { file } });
+```
+
+xPay is the **wallet** and **rail** layer for agentic commerce. It hides x402, USDC, RPC, and multi-network routing behind a flat surface so agent builders (Claude / Codex / OpenAI / Gemini / your own) can find and pay for services without writing payment plumbing.
+
+---
+
+## Install
+
+```bash
+npm install -g @xona-labs/xpay      # CLI + MCP server, system-wide
+npm install     @xona-labs/xpay      # programmatic SDK in a project
+```
+
+## Quickstart
+
+```bash
+xpay init
+# ✔ Profile "default" created at /Users/you/.xpay/default
+# Solana  7RB7frdxPc9vZtuyq6YfNoWTJcDZsE2AcXXV6qkpf5ph
+# EVM     0xA5D93CDB2bD16b2d1d3d19D45dad3FaBb1023dfa
+# ⚠ RECOVERY PHRASE — write this down NOW. We cannot recover it for you.
+#   1. depend   2. guess    3. mercy    4. online
+#   ... (24 words)
+```
+
+Fund the addresses with a few dollars of USDC on Solana mainnet, Base, or both. Then:
+
+```bash
+xpay balance
+xpay discover "image generation"
+xpay pay https://orbisapi.com/proxy/image-alt-text-generator-api-1c9472
+```
+
+## CLI commands
+
+| Command | What it does |
+|---|---|
+| `xpay init [name]` | Create a profile (Solana + EVM keys from one BIP-39 seed). `--import` to restore from a phrase, `--no-encrypt` for dev wallets, `--workspace` to store locally. |
+| `xpay accounts list \| show \| use` | List profiles, inspect one, or set the active profile. |
+| `xpay balance` | USDC balance per network for the active profile. |
+| `xpay discover [query]` | Search 21k+ x402 services from PayAI (cached on disk). `--network`, `--limit`, `--json`. |
+| `xpay pay <url>` | Pay an x402 endpoint. Works on catalog URLs and any URL that returns 402. `--max-usd`, `--body`, `-y`. |
+| `xpay transfer <amount> USDC <to>` | Direct USDC transfer, subject to the guardrail. `--network`, `-y`. |
+| `xpay history` | Recent on-chain USDC activity across all networks. `--network`, `--limit`, `--evm-window`. |
+| `xpay guardrail show \| set \| clear` | Inspect or edit spending caps and allowed hosts. |
+| `xpay mcp` | Start the MCP server on stdio (for Claude Desktop / Cursor / Codex). |
+
+All commands run from a single profile. Switch with `xpay accounts use <name>`.
+
+## SDK
+
+The CLI is a thin shell over the SDK — every command has a direct programmatic equivalent.
+
+```ts
+import {
+  createXPay,
+  initProfile,
+  loadProfile,
+  setProfileGuardrail,
+} from "@xona-labs/xpay";
+
+// One-time setup
+const created = await initProfile({
+  name: "default",
+  passphrase: process.env.XPAY_PASSPHRASE!,
+});
+console.log(created.addresses);   // { solana, evm }
+console.log(created.mnemonic);    // back this up; not persisted in plaintext
+
+// Configure spending caps
+setProfileGuardrail("default", {
+  maxPerTx: 0.5,
+  maxPerDay: 5,
+  allowedHosts: ["api.payai.network", "*.xona.xyz"],
+});
+
+// Use
+const profile = await loadProfile({ name: "default", passphrase: process.env.XPAY_PASSPHRASE });
+const xpay    = createXPay({ profile });
+
+await xpay.discover({ query: "weather" });
+await xpay.useByUrl("https://...");
+await xpay.do("translate this PDF to Japanese");
+await xpay.transfer({ amount: 1, to: "7G73PL...", token: "USDC" });
+await xpay.history({ limit: 10 });
+await xpay.wallet.balance("solana");
+```
+
+### Agent runtimes
+
+xPay ships tool definitions for the three major LLM SDKs. Same handlers, different schema shapes.
+
+```ts
+import Anthropic from "@anthropic-ai/sdk";
+import { createXPay, forClaude, loadProfile } from "@xona-labs/xpay";
+
+const xpay = createXPay({ profile: await loadProfile({ passphrase }) });
+const { tools, handlers } = forClaude(xpay);
+
+const response = await new Anthropic().messages.create({
+  model: "claude-sonnet-4-5",
+  tools,
+  messages: [{ role: "user", content: "find a cheap weather API and call it" }],
+});
+
+for (const block of response.content) {
+  if (block.type === "tool_use") {
+    const result = await handlers[block.name]!(block.input as Record<string, unknown>);
+    // ... feed result back to Claude
+  }
+}
+```
+
+`forOpenAI(xpay)` and `forGemini(xpay)` return the same handlers wrapped in vendor-specific schemas. See [`examples/claude-agent.ts`](./examples/claude-agent.ts) for the full tool-use loop.
+
+## MCP server (Claude Desktop / Cursor / Codex)
+
+Drop xPay into any MCP host's config — no code changes on the agent side.
+
+```jsonc
+// ~/Library/Application Support/Claude/claude_desktop_config.json
+{
+  "mcpServers": {
+    "xpay": {
+      "command": "npx",
+      "args": ["-y", "@xona-labs/xpay", "mcp"],
+      "env": {
+        "XPAY_PASSPHRASE": "<your-passphrase>"
+      }
+    }
+  }
+}
+```
+
+The host then sees seven tools: `xpay_discover`, `xpay_use`, `xpay_do`, `xpay_transfer`, `xpay_balance`, `xpay_history`, `xpay_guardrail`. The server reads the same `~/.xpay/<profile>/` you created with `xpay init`.
+
+## Profiles
+
+Each profile is a directory under `~/.xpay/` with:
+
+```
+~/.xpay/
+├── default/                       (or any name)
+│   ├── wallet.json                BIP-39 seed, AES-256-GCM encrypted by default
+│   └── config.json                networks, guardrail, RPC overrides, link
+└── cache/                         disk cache of catalogs (auto-managed)
+```
+
+Override with `XPAY_HOME=/some/path` or `xpay init --workspace` for project-local profiles.
+
+## Guardrail
+
+The guardrail runs **before** any signer is touched, so a misbehaving agent (or compromised LLM) cannot bypass it.
+
+```bash
+xpay guardrail set \
+  --max-per-tx 0.5 \
+  --max-per-day 5 \
+  --require-approval-above 1 \
+  --allowed-hosts 'api.payai.network,*.xona.xyz'
+```
+
+- **`maxPerTx` / `maxPerDay`** — apply to every paid call *and* direct transfers.
+- **`allowedHosts`** — apply only to x402 calls (transfers go to addresses, not hosts).
+- **`requireApprovalAbove`** — calls ≥ threshold call your `onApprovalRequired` hook (SDK only — wire to a push notification, biometric prompt, or webhook).
+
+## Multi-network
+
+`init` configures Solana and Base by default. Add or change via `~/.xpay/<name>/config.json`:
+
+```json
+{
+  "version": 1,
+  "networks": ["solana", "base", "arbitrum"],
+  "defaultNetwork": "solana",
+  "rpcs": {
+    "solana": "https://your-helius-endpoint",
+    "base":   "https://your-alchemy-endpoint"
+  }
+}
+```
+
+Public RPCs work for development but rate-limit hard. Production deployments should configure dedicated RPC endpoints.
+
+## How it works
+
+- **Keys** — One BIP-39 mnemonic per profile derives Solana (`m/44'/501'/0'/0'`, Phantom-compatible) and EVM (`m/44'/60'/0'/0/0`, MetaMask-compatible) keypairs. Encrypted at rest with scrypt + AES-256-GCM.
+- **Discovery** — PayAI's `/discovery/resources` is the primary catalog (21k+ x402 endpoints). The fetcher walks the offset-pagination, validates each entry against a Zod schema, and persists to `~/.xpay/cache/` for 10 min so CLI invocations don't pay the ~30s cold-fetch tax repeatedly.
+- **Pay** — `use()` and `useByUrl()` both go: guardrail check → signer.pay(USDC) on the right network → `X-Payment` header → retry. The signer abstraction means the same code path works for Solana SPL transfers and EVM ERC-20 transfers.
+- **History** — Solana via `getSignaturesForAddress` + `getParsedTransaction` on the USDC ATA. EVM via chunked `eth_getLogs` for ERC-20 `Transfer` events. No indexer required.
+
+## Project status
+
+**v0.1 (current):**
+- ✅ CLI: init, accounts, balance, discover, pay, transfer, history, guardrail, mcp
+- ✅ SDK: full parity with CLI; tool exporters for Claude / OpenAI / Gemini
+- ✅ MCP server on stdio with 7 tools
+- ✅ Solana + Base mainnet with disk caching
+
+**v0.2 planned:**
+- `bridge` — USDC EVM ↔ SVM via CCTP (Circle's native burn/mint)
+- `link / unlink` — opt-in cloud sync (audit log, dashboard)
+- Pay catalog + xona-labs catalog as additional discovery sources
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/cli/accounts.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `xpay accounts` — multi-profile management.
+ *
+ *   xpay accounts list             list known profiles
+ *   xpay accounts show [name]      show addresses for a profile
+ *   xpay accounts use <name>       set the default profile (via ~/.xpay/active)
+ */
+export declare function getActiveProfile(): string;
+export declare function setActiveProfile(name: string): void;
+export declare function runAccountsList(): void;
+export declare function runAccountsShow(name?: string): void;
+export declare function runAccountsUse(name: string): void;
+//# sourceMappingURL=accounts.d.ts.map

package/dist/cli/accounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.d.ts","sourceRoot":"","sources":["../../src/cli/accounts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH,wBAAgB,gBAAgB,IAAI,MAAM,CAIzC;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAKnD;AAED,wBAAgB,eAAe,IAAI,IAAI,CAetC;AAED,wBAAgB,eAAe,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAanD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAQjD"}

package/dist/cli/accounts.js

@@ -0,0 +1,66 @@
+/**
+ * `xpay accounts` — multi-profile management.
+ *
+ *   xpay accounts list             list known profiles
+ *   xpay accounts show [name]      show addresses for a profile
+ *   xpay accounts use <name>       set the default profile (via ~/.xpay/active)
+ */
+import chalk from "chalk";
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { listProfiles, profilePath, profileExists, xpayHome, } from "../profile/storage.js";
+import { readWalletFile } from "../profile/storage.js";
+const ACTIVE_FILE = "active";
+export function getActiveProfile() {
+    const file = join(xpayHome(), ACTIVE_FILE);
+    if (existsSync(file))
+        return readFileSync(file, "utf8").trim() || "default";
+    return "default";
+}
+export function setActiveProfile(name) {
+    if (!profileExists(name)) {
+        throw new Error(`Profile "${name}" does not exist.`);
+    }
+    writeFileSync(join(xpayHome(), ACTIVE_FILE), name);
+}
+export function runAccountsList() {
+    const profiles = listProfiles();
+    if (profiles.length === 0) {
+        console.log(chalk.yellow("No profiles yet. Run `xpay init` to create one."));
+        return;
+    }
+    const active = getActiveProfile();
+    for (const name of profiles) {
+        const marker = name === active ? chalk.green("●") : chalk.dim("○");
+        const wallet = readWalletFile(profilePath(name));
+        const encrypted = wallet.encrypted ? chalk.dim("(encrypted)") : chalk.red.dim("(unencrypted)");
+        console.log(`  ${marker} ${chalk.bold(name)}  ${encrypted}`);
+        console.log(`     Solana ${chalk.cyan(wallet.addresses.solana)}`);
+        console.log(`     EVM    ${chalk.cyan(wallet.addresses.evm)}`);
+    }
+}
+export function runAccountsShow(name) {
+    const target = name ?? getActiveProfile();
+    if (!profileExists(target)) {
+        console.error(chalk.red(`✗ Profile "${target}" not found.`));
+        process.exit(1);
+    }
+    const wallet = readWalletFile(profilePath(target));
+    console.log(chalk.bold(`Profile "${target}"`));
+    console.log(`  Path:      ${profilePath(target)}`);
+    console.log(`  Encrypted: ${wallet.encrypted ? "yes" : chalk.red("no")}`);
+    console.log(`  Created:   ${wallet.createdAt}`);
+    console.log(`  Solana:    ${chalk.cyan(wallet.addresses.solana)}`);
+    console.log(`  EVM:       ${chalk.cyan(wallet.addresses.evm)}`);
+}
+export function runAccountsUse(name) {
+    try {
+        setActiveProfile(name);
+        console.log(chalk.green(`✔ Active profile set to "${name}"`));
+    }
+    catch (err) {
+        console.error(chalk.red(`✗ ${err.message}`));
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=accounts.js.map

package/dist/cli/accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.js","sourceRoot":"","sources":["../../src/cli/accounts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,YAAY,EACZ,WAAW,EACX,aAAa,EACb,QAAQ,GACT,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,WAAW,GAAG,QAAQ,CAAC;AAE7B,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,CAAC,CAAC;IAC3C,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAC5E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC;IACvD,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iDAAiD,CAAC,CAAC,CAAC;QAC7E,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC/F,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAa;IAC3C,MAAM,MAAM,GAAG,IAAI,IAAI,gBAAgB,EAAE,CAAC;IAC1C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,MAAM,cAAc,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,gBAAgB,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,4BAA4B,IAAI,GAAG,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/cli/balance.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `xpay balance` — show USDC balance per network for the active profile.
+ *
+ * Unlocks the active profile (prompts for passphrase if encrypted, unless
+ * $XPAY_PASSPHRASE is set for non-interactive use), then queries each
+ * configured network's USDC balance.
+ */
+export interface BalanceCmdOptions {
+    profile?: string;
+    network?: string;
+    passphrase?: string;
+}
+export declare function runBalance(opts: BalanceCmdOptions): Promise<void>;
+//# sourceMappingURL=balance.d.ts.map

package/dist/cli/balance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance.d.ts","sourceRoot":"","sources":["../../src/cli/balance.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqDvE"}

package/dist/cli/balance.js

@@ -0,0 +1,60 @@
+/**
+ * `xpay balance` — show USDC balance per network for the active profile.
+ *
+ * Unlocks the active profile (prompts for passphrase if encrypted, unless
+ * $XPAY_PASSPHRASE is set for non-interactive use), then queries each
+ * configured network's USDC balance.
+ */
+import chalk from "chalk";
+import inquirer from "inquirer";
+import { loadProfile, signersFromProfile } from "../profile/index.js";
+import { profileExists } from "../profile/storage.js";
+import { readWalletFile } from "../profile/storage.js";
+import { profilePath } from "../profile/storage.js";
+import { getActiveProfile } from "./accounts.js";
+export async function runBalance(opts) {
+    const name = opts.profile ?? getActiveProfile();
+    if (!profileExists(name)) {
+        console.error(chalk.red(`✗ Profile "${name}" not found. Run \`xpay init\` first.`));
+        process.exit(1);
+    }
+    const wallet = readWalletFile(profilePath(name));
+    let passphrase = opts.passphrase ?? process.env.XPAY_PASSPHRASE;
+    if (wallet.encrypted && !passphrase) {
+        const a = await inquirer.prompt([
+            { type: "password", name: "p", message: `Passphrase for "${name}":`, mask: "*" },
+        ]);
+        passphrase = a.p;
+    }
+    let profile;
+    try {
+        profile = await loadProfile({ name, passphrase });
+    }
+    catch (err) {
+        console.error(chalk.red(`✗ ${err.message}`));
+        process.exit(1);
+    }
+    const signers = signersFromProfile(profile);
+    const networks = opts.network ? [opts.network] : profile.config.networks;
+    console.log("");
+    console.log(chalk.bold(`Profile "${name}"`));
+    console.log("");
+    let total = 0;
+    const rows = [];
+    for (const net of networks) {
+        const signer = signers[net];
+        if (!signer) {
+            rows.push({ network: net, address: chalk.dim("(no signer)"), balance: 0 });
+            continue;
+        }
+        const bal = signer.balance ? await signer.balance().catch(() => 0) : 0;
+        total += bal;
+        rows.push({ network: net, address: signer.address, balance: bal });
+    }
+    for (const r of rows) {
+        console.log(`  ${chalk.bold(r.network.padEnd(10))}  ${chalk.cyan(r.address)}  ${chalk.green(`$${r.balance.toFixed(4)}`)} ${chalk.dim("USDC")}`);
+    }
+    console.log("");
+    console.log(`  ${" ".repeat(10)}  ${" ".repeat(44)}  ${chalk.bold(`$${total.toFixed(4)} total`)}`);
+}
+//# sourceMappingURL=balance.js.map

package/dist/cli/balance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance.js","sourceRoot":"","sources":["../../src/cli/balance.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAQjD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAuB;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC;IAChD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,IAAI,uCAAuC,CAAC,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,IAAI,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAChE,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAgB;YAC7C,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,mBAAmB,IAAI,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;SACjF,CAAC,CAAC;QACH,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;IAEzE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAiE,EAAE,CAAC;IAC9E,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,KAAK,IAAI,GAAG,CAAC;QACb,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,KAAK,CAC7E,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAC3B,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CACzB,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACrG,CAAC"}

package/dist/cli/common.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Shared CLI helpers: unlock the active profile, format addresses + amounts.
+ */
+import type { LoadedProfile } from "../profile/index.js";
+export interface UnlockOptions {
+    profile?: string;
+    passphrase?: string;
+}
+/**
+ * Resolve + unlock the active profile, prompting for passphrase if needed.
+ * Falls back to $XPAY_PASSPHRASE so non-interactive use stays simple.
+ */
+export declare function unlockActive(opts?: UnlockOptions): Promise<LoadedProfile>;
+/** Compact display for long addresses: `7RB7...f5ph`. */
+export declare function shortAddress(addr: string, head?: number, tail?: number): string;
+/** "$0.0123 USDC", consistent width. */
+export declare function formatUsd(amount: number): string;
+/** "2m ago" / "3h ago" / "5d ago". */
+export declare function timeAgo(ts: number | null): string;
+//# sourceMappingURL=common.d.ts.map

package/dist/cli/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/cli/common.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAuBnF;AAED,yDAAyD;AACzD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAI,EAAE,IAAI,SAAI,GAAG,MAAM,CAGrE;AAED,wCAAwC;AACxC,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,sCAAsC;AACtC,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAOjD"}

package/dist/cli/common.js

@@ -0,0 +1,58 @@
+/**
+ * Shared CLI helpers: unlock the active profile, format addresses + amounts.
+ */
+import chalk from "chalk";
+import inquirer from "inquirer";
+import { loadProfile } from "../profile/index.js";
+import { profileExists, readWalletFile, profilePath } from "../profile/storage.js";
+import { getActiveProfile } from "./accounts.js";
+/**
+ * Resolve + unlock the active profile, prompting for passphrase if needed.
+ * Falls back to $XPAY_PASSPHRASE so non-interactive use stays simple.
+ */
+export async function unlockActive(opts = {}) {
+    const name = opts.profile ?? getActiveProfile();
+    if (!profileExists(name)) {
+        console.error(chalk.red(`✗ Profile "${name}" not found. Run \`xpay init\` first.`));
+        process.exit(1);
+    }
+    const wallet = readWalletFile(profilePath(name));
+    let passphrase = opts.passphrase ?? process.env.XPAY_PASSPHRASE;
+    if (wallet.encrypted && !passphrase) {
+        const a = await inquirer.prompt([
+            { type: "password", name: "p", message: `Passphrase for "${name}":`, mask: "*" },
+        ]);
+        passphrase = a.p;
+    }
+    try {
+        return await loadProfile({ name, passphrase });
+    }
+    catch (err) {
+        console.error(chalk.red(`✗ ${err.message}`));
+        process.exit(1);
+    }
+}
+/** Compact display for long addresses: `7RB7...f5ph`. */
+export function shortAddress(addr, head = 4, tail = 4) {
+    if (!addr || addr.length <= head + tail + 3)
+        return addr;
+    return `${addr.slice(0, head)}…${addr.slice(-tail)}`;
+}
+/** "$0.0123 USDC", consistent width. */
+export function formatUsd(amount) {
+    return chalk.green(`$${amount.toFixed(4)}`);
+}
+/** "2m ago" / "3h ago" / "5d ago". */
+export function timeAgo(ts) {
+    if (!ts)
+        return chalk.dim("—");
+    const s = (Date.now() - ts) / 1000;
+    if (s < 60)
+        return `${Math.floor(s)}s ago`;
+    if (s < 3600)
+        return `${Math.floor(s / 60)}m ago`;
+    if (s < 86400)
+        return `${Math.floor(s / 3600)}h ago`;
+    return `${Math.floor(s / 86400)}d ago`;
+}
+//# sourceMappingURL=common.js.map

package/dist/cli/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/cli/common.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAQjD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAsB,EAAE;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC;IAChD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,IAAI,uCAAuC,CAAC,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,IAAI,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAEhE,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAgB;YAC7C,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,mBAAmB,IAAI,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;SACjF,CAAC,CAAC;QACH,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC;IAC3D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,GAAG,IAAI,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,OAAO,CAAC,EAAiB;IACvC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3C,IAAI,CAAC,GAAG,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IAClD,IAAI,CAAC,GAAG,KAAK;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IACrD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;AACzC,CAAC"}

package/dist/cli/discover.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `xpay discover <query>` — search the agentic-commerce catalog.
+ *
+ * Read-only — does not load a profile or touch keys.
+ */
+export interface DiscoverCmdOptions {
+    limit?: string;
+    network?: string;
+    json?: boolean;
+}
+export declare function runDiscover(query: string | undefined, opts: DiscoverCmdOptions): Promise<void>;
+//# sourceMappingURL=discover.d.ts.map

package/dist/cli/discover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../src/cli/discover.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkCpG"}

package/dist/cli/discover.js

@@ -0,0 +1,69 @@
+/**
+ * `xpay discover <query>` — search the agentic-commerce catalog.
+ *
+ * Read-only — does not load a profile or touch keys.
+ */
+import chalk from "chalk";
+import { discover } from "../discover/index.js";
+import { formatUsd, shortAddress } from "./common.js";
+export async function runDiscover(query, opts) {
+    const limit = opts.limit ? Number(opts.limit) : 10;
+    const networks = opts.network ? [opts.network] : undefined;
+    const t0 = Date.now();
+    const results = await discover({ query, limit, networks });
+    const elapsed = Date.now() - t0;
+    if (opts.json) {
+        process.stdout.write(JSON.stringify(results, null, 2) + "\n");
+        return;
+    }
+    if (results.length === 0) {
+        console.log(chalk.yellow(`No services found${query ? ` for "${query}"` : ""}.`));
+        console.log(chalk.dim(`Tip: try broader terms, or omit --network.`));
+        return;
+    }
+    console.log("");
+    console.log(chalk.dim(`${results.length} result${results.length === 1 ? "" : "s"}` +
+        (query ? ` for "${query}"` : "") +
+        ` (${elapsed}ms)`));
+    console.log("");
+    for (let i = 0; i < results.length; i++) {
+        printResource(results[i], i + 1);
+    }
+    console.log("");
+    console.log(chalk.dim(`Use \`xpay pay <url>\` to call one.`));
+}
+function printResource(r, index) {
+    const opt = r.accepts[0];
+    const price = opt?.amount ? formatUsd(Number(opt.amount) / 1_000_000) : chalk.dim("?");
+    const net = chalk.cyan(normalizeNetwork(opt?.network).padEnd(9));
+    const method = chalk.dim(r.method.padEnd(6));
+    const host = safeHost(r.resource);
+    console.log(`  ${chalk.bold(String(index).padStart(2) + ".")} ${price}  ${net} ${method} ${chalk.white(host)}`);
+    console.log(`      ${chalk.dim(r.resource)}`);
+    if (opt?.payTo) {
+        console.log(`      ${chalk.dim("→ pay")} ${chalk.dim(shortAddress(opt.payTo, 6, 6))} ${chalk.dim(`(${opt.asset.slice(0, 12)}…)`)}`);
+    }
+    console.log("");
+}
+function safeHost(url) {
+    try {
+        return new URL(url).host;
+    }
+    catch {
+        return url;
+    }
+}
+function normalizeNetwork(raw) {
+    if (!raw)
+        return "?";
+    if (raw === "eip155:8453")
+        return "base";
+    if (raw === "eip155:1")
+        return "ethereum";
+    if (raw === "eip155:42161")
+        return "arbitrum";
+    if (raw.startsWith("solana"))
+        return "solana";
+    return raw;
+}
+//# sourceMappingURL=discover.js.map

package/dist/cli/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../src/cli/discover.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAStD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAyB,EAAE,IAAwB;IACnF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE3D,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IAEhC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,GAAG,OAAO,CAAC,MAAM,UAAU,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;QAC1D,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,KAAK,OAAO,KAAK,CACpB,CACF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,aAAa,CAAC,CAAW,EAAE,KAAa;IAC/C,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAElC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,KAAK,GAAG,IAAI,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChH,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9C,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CACT,SAAS,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CACvH,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAuB;IAC/C,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,IAAI,GAAG,KAAK,aAAa;QAAE,OAAO,MAAM,CAAC;IACzC,IAAI,GAAG,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC1C,IAAI,GAAG,KAAK,cAAc;QAAE,OAAO,UAAU,CAAC;IAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9C,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/cli/guardrail.d.ts

@@ -0,0 +1,16 @@
+/**
+ * `xpay guardrail show|set|clear` — view and edit the active profile's
+ * spending guardrail. Persisted to config.json; loaded by every command that
+ * builds a runtime client.
+ */
+export interface GuardrailSetOptions {
+    profile?: string;
+    maxPerTx?: string;
+    maxPerDay?: string;
+    allowedHosts?: string;
+    requireApprovalAbove?: string;
+}
+export declare function runGuardrailShow(profileName?: string): void;
+export declare function runGuardrailSet(opts: GuardrailSetOptions): void;
+export declare function runGuardrailClear(profileName?: string): void;
+//# sourceMappingURL=guardrail.d.ts.map

package/dist/cli/guardrail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrail.d.ts","sourceRoot":"","sources":["../../src/cli/guardrail.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,wBAAgB,gBAAgB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAuB3D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAuB/D;AAED,wBAAgB,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAI5D"}