@xona-labs/xpay 0.1.0

package/dist/cli/guardrail.js

@@ -0,0 +1,71 @@
+/**
+ * `xpay guardrail show|set|clear` — view and edit the active profile's
+ * spending guardrail. Persisted to config.json; loaded by every command that
+ * builds a runtime client.
+ */
+import chalk from "chalk";
+import { clearProfileGuardrail, readProfileConfig, setProfileGuardrail, } from "../profile/index.js";
+import { getActiveProfile } from "./accounts.js";
+export function runGuardrailShow(profileName) {
+    const name = profileName ?? getActiveProfile();
+    const config = readProfileConfig(name);
+    const g = config.guardrail;
+    console.log("");
+    console.log(chalk.bold(`Guardrail for "${name}"`));
+    if (!g || Object.keys(g).length === 0) {
+        console.log(chalk.yellow("  (no guardrail configured — calls are uncapped)"));
+        console.log(chalk.dim("  Set one with: xpay guardrail set --max-per-tx 1 --max-per-day 10"));
+        return;
+    }
+    console.log("");
+    if (g.maxPerTx !== undefined)
+        console.log(`  max per tx          $${g.maxPerTx.toFixed(4)}`);
+    if (g.maxPerDay !== undefined)
+        console.log(`  max per 24h         $${g.maxPerDay.toFixed(4)}`);
+    if (g.requireApprovalAbove !== undefined)
+        console.log(`  approval above      $${g.requireApprovalAbove.toFixed(4)}`);
+    if (g.allowedHosts?.length) {
+        console.log(`  allowed hosts       ${g.allowedHosts.join(", ")}`);
+    }
+    else {
+        console.log(`  allowed hosts       ${chalk.dim("(any)")}`);
+    }
+    console.log("");
+}
+export function runGuardrailSet(opts) {
+    const name = opts.profile ?? getActiveProfile();
+    const patch = {};
+    if (opts.maxPerTx !== undefined)
+        patch.maxPerTx = parseDollarsOrExit(opts.maxPerTx, "--max-per-tx");
+    if (opts.maxPerDay !== undefined)
+        patch.maxPerDay = parseDollarsOrExit(opts.maxPerDay, "--max-per-day");
+    if (opts.requireApprovalAbove !== undefined)
+        patch.requireApprovalAbove = parseDollarsOrExit(opts.requireApprovalAbove, "--require-approval-above");
+    if (opts.allowedHosts !== undefined) {
+        patch.allowedHosts = opts.allowedHosts
+            .split(",")
+            .map((s) => s.trim())
+            .filter(Boolean);
+    }
+    if (Object.keys(patch).length === 0) {
+        console.error(chalk.red("✗ no fields provided. See `xpay guardrail set --help`."));
+        process.exit(1);
+    }
+    setProfileGuardrail(name, patch);
+    console.log(chalk.green(`✔ Guardrail updated for "${name}"`));
+    runGuardrailShow(name);
+}
+export function runGuardrailClear(profileName) {
+    const name = profileName ?? getActiveProfile();
+    clearProfileGuardrail(name);
+    console.log(chalk.yellow(`⚠ Guardrail cleared for "${name}" — calls are now uncapped.`));
+}
+function parseDollarsOrExit(raw, flag) {
+    const n = Number(raw);
+    if (!Number.isFinite(n) || n < 0) {
+        console.error(chalk.red(`✗ ${flag} must be a non-negative number (got "${raw}")`));
+        process.exit(1);
+    }
+    return n;
+}
+//# sourceMappingURL=guardrail.js.map

package/dist/cli/guardrail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrail.js","sourceRoot":"","sources":["../../src/cli/guardrail.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAUjD,MAAM,UAAU,gBAAgB,CAAC,WAAoB;IACnD,MAAM,IAAI,GAAG,WAAW,IAAI,gBAAgB,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;IAE3B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,GAAG,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,kDAAkD,CAAC,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC,CAAC;QAC7F,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/F,IAAI,CAAC,CAAC,oBAAoB,KAAK,SAAS;QACtC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC;IAChD,MAAM,KAAK,GAAmE,EAAE,CAAC;IAEjF,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACpG,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACxG,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS;QACzC,KAAK,CAAC,oBAAoB,GAAG,kBAAkB,CAAC,IAAI,CAAC,oBAAoB,EAAE,0BAA0B,CAAC,CAAC;IACzG,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY;aACnC,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,4BAA4B,IAAI,GAAG,CAAC,CAAC,CAAC;IAC9D,gBAAgB,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,WAAoB;IACpD,MAAM,IAAI,GAAG,WAAW,IAAI,gBAAgB,EAAE,CAAC;IAC/C,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,IAAI,6BAA6B,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW,EAAE,IAAY;IACnD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,wCAAwC,GAAG,IAAI,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/history.d.ts

@@ -0,0 +1,16 @@
+/**
+ * `xpay history` — recent USDC activity across all configured networks.
+ *
+ * Public-RPC powered by default. EVM scans a recent block window
+ * (~100k blocks ≈ 2 days on Base); pass --evm-window to widen.
+ */
+export interface HistoryCmdOptions {
+    profile?: string;
+    passphrase?: string;
+    network?: string;
+    limit?: string;
+    evmWindow?: string;
+    json?: boolean;
+}
+export declare function runHistory(opts: HistoryCmdOptions): Promise<void>;
+//# sourceMappingURL=history.d.ts.map

package/dist/cli/history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../../src/cli/history.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4DvE"}

package/dist/cli/history.js

@@ -0,0 +1,59 @@
+/**
+ * `xpay history` — recent USDC activity across all configured networks.
+ *
+ * Public-RPC powered by default. EVM scans a recent block window
+ * (~100k blocks ≈ 2 days on Base); pass --evm-window to widen.
+ */
+import chalk from "chalk";
+import { createXPay } from "../index.js";
+import { unlockActive, shortAddress, timeAgo, formatUsd } from "./common.js";
+export async function runHistory(opts) {
+    const profile = await unlockActive(opts);
+    const xpay = createXPay({ profile });
+    const limit = opts.limit ? Number(opts.limit) : 25;
+    const networks = opts.network ? [opts.network] : undefined;
+    const evmBlockWindow = opts.evmWindow ? Number(opts.evmWindow) : undefined;
+    const t0 = Date.now();
+    let entries;
+    try {
+        entries = await xpay.history({ limit, networks, evmBlockWindow });
+    }
+    catch (err) {
+        console.error(chalk.red(`✗ ${err.message}`));
+        process.exit(1);
+    }
+    const elapsed = Date.now() - t0;
+    if (opts.json) {
+        process.stdout.write(JSON.stringify(entries, null, 2) + "\n");
+        return;
+    }
+    if (entries.length === 0) {
+        console.log(chalk.yellow("No USDC activity in the scanned window."));
+        console.log(chalk.dim("Tip: widen the EVM window with --evm-window 500000, or run `xpay balance`."));
+        return;
+    }
+    console.log("");
+    console.log(chalk.dim(`${entries.length} entr${entries.length === 1 ? "y" : "ies"} (${elapsed}ms)`));
+    console.log("");
+    // Header
+    console.log(chalk.dim("  TIME".padEnd(12) +
+        "NETWORK".padEnd(10) +
+        "DIR".padEnd(10) +
+        "AMOUNT".padEnd(14) +
+        "COUNTERPARTY".padEnd(18) +
+        "TX"));
+    for (const e of entries) {
+        const dir = e.direction === "send" ? chalk.red("→ send") : chalk.green("← recv");
+        const amount = formatUsd(e.amountUsdc).padEnd(20); // padEnd ignores ANSI codes
+        console.log("  " +
+            timeAgo(e.timestamp).padEnd(12) +
+            chalk.cyan(e.network.padEnd(10)) +
+            dir.padEnd(18) + // padEnd ignores ANSI
+            formatUsd(e.amountUsdc).padEnd(20) +
+            chalk.white(shortAddress(e.counterparty, 6, 6).padEnd(18)) +
+            chalk.dim(shortAddress(e.signature, 6, 6)));
+        void amount;
+    }
+    console.log("");
+}
+//# sourceMappingURL=history.js.map

package/dist/cli/history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.js","sourceRoot":"","sources":["../../src/cli/history.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAW7E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAuB;IACtD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAErC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE3E,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IAEhC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC,CAAC;QACrG,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,QAAQ,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,KAAK,CAAC,CAAC,CAAC;IACrG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,SAAS;IACT,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjB,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAChB,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,IAAI,CACP,CACF,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,4BAA4B;QAC/E,OAAO,CAAC,GAAG,CACT,IAAI;YACF,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,sBAAsB;YACvC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1D,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAC7C,CAAC;QACF,KAAK,MAAM,CAAC;IACd,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+/**
+ * xpay CLI — agentic-commerce wallet.
+ *
+ * Top-level commands:
+ *   xpay init [--import] [--no-encrypt] [--workspace]
+ *   xpay accounts list|show|use
+ *   xpay balance [--network solana|base|...]
+ *   xpay mcp                                 (default: start MCP server on stdio)
+ *
+ * More to come: discover, pay, transfer, history, bridge, guardrail, link.
+ *
+ * Designed to also run as the MCP server entry point (the `bin` field points
+ * here) — invoking `xpay-mcp` directly defaults to the `mcp` subcommand.
+ */
+import "dotenv/config";
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;GAaG;AAEH,OAAO,eAAe,CAAC"}

package/dist/cli/index.js

@@ -0,0 +1,165 @@
+#!/usr/bin/env node
+/**
+ * xpay CLI — agentic-commerce wallet.
+ *
+ * Top-level commands:
+ *   xpay init [--import] [--no-encrypt] [--workspace]
+ *   xpay accounts list|show|use
+ *   xpay balance [--network solana|base|...]
+ *   xpay mcp                                 (default: start MCP server on stdio)
+ *
+ * More to come: discover, pay, transfer, history, bridge, guardrail, link.
+ *
+ * Designed to also run as the MCP server entry point (the `bin` field points
+ * here) — invoking `xpay-mcp` directly defaults to the `mcp` subcommand.
+ */
+import "dotenv/config";
+import { basename } from "node:path";
+import { Command } from "commander";
+import chalk from "chalk";
+import { runInit } from "./init.js";
+import { runAccountsList, runAccountsShow, runAccountsUse } from "./accounts.js";
+import { runBalance } from "./balance.js";
+import { runDiscover } from "./discover.js";
+import { runPay } from "./pay.js";
+import { runHistory } from "./history.js";
+import { runTransfer } from "./transfer.js";
+import { runGuardrailShow, runGuardrailSet, runGuardrailClear } from "./guardrail.js";
+import { startMcpServer } from "./mcp-server.js";
+const program = new Command();
+program
+    .name("xpay")
+    .description("xPay — discovery, payments, and wallet for agentic commerce.")
+    .version("0.1.0");
+// ---------------------------------------------------------------- init
+program
+    .command("init [name]")
+    .description("Create a new profile (Solana + EVM keys).")
+    .option("--import", "Import an existing recovery phrase instead of generating one")
+    .option("--no-encrypt", "Skip passphrase encryption (dev wallets only)")
+    .option("--workspace", "Store under <cwd>/.xpay/ instead of ~/.xpay/")
+    .option("--overwrite", "Replace an existing profile with the same name")
+    .option("--passphrase <value>", "Non-interactive passphrase (scripts/tests)")
+    .option("--mnemonic <phrase>", "Non-interactive mnemonic (scripts/tests)")
+    .action(async (name, opts) => {
+    await runInit({ name, ...opts });
+});
+// ---------------------------------------------------------------- accounts
+const accounts = program
+    .command("accounts")
+    .description("Manage local profiles.");
+accounts
+    .command("list", { isDefault: true })
+    .description("List all profiles in ~/.xpay/.")
+    .action(() => runAccountsList());
+accounts
+    .command("show [name]")
+    .description("Show addresses + metadata for a profile.")
+    .action((name) => runAccountsShow(name));
+accounts
+    .command("use <name>")
+    .description("Set the active profile.")
+    .action((name) => runAccountsUse(name));
+// ---------------------------------------------------------------- discover
+program
+    .command("discover [query]")
+    .description("Search the agentic-commerce catalog (PayAI + sources).")
+    .option("--limit <n>", "Max results (default 10)")
+    .option("--network <net>", "Filter by network (solana, base, ...)")
+    .option("--json", "Emit raw JSON instead of the table view")
+    .action(async (query, opts) => {
+    await runDiscover(query, opts);
+});
+// ---------------------------------------------------------------- pay
+program
+    .command("pay <url>")
+    .description("Pay an x402 endpoint (catalog URL or any URL that returns 402).")
+    .option("--profile <name>", "Profile to pay from (defaults to active)")
+    .option("--passphrase <value>", "Non-interactive passphrase")
+    .option("--max-usd <n>", "Override per-tx guardrail cap for this call")
+    .option("--body <json>", "Request body for POST endpoints (JSON)")
+    .option("-y, --yes", "Skip the confirmation prompt")
+    .action(async (url, opts) => {
+    await runPay(url, opts);
+});
+// ---------------------------------------------------------------- history
+program
+    .command("history")
+    .description("Recent USDC activity across all configured networks.")
+    .option("--profile <name>", "Profile to query (defaults to active)")
+    .option("--passphrase <value>", "Non-interactive passphrase")
+    .option("--network <net>", "Restrict to one network")
+    .option("--limit <n>", "Max entries (default 25)")
+    .option("--evm-window <blocks>", "Block window for EVM scans (default 100000)")
+    .option("--json", "Emit raw JSON")
+    .action(async (opts) => {
+    await runHistory(opts);
+});
+// ---------------------------------------------------------------- transfer
+program
+    .command("transfer <amount> <token> <to>")
+    .description("Send USDC to an address (no x402). Subject to the active guardrail.")
+    .option("--profile <name>", "Profile to send from (defaults to active)")
+    .option("--passphrase <value>", "Non-interactive passphrase")
+    .option("--network <net>", "Force network (solana, base, ethereum, ...)")
+    .option("-y, --yes", "Skip the confirmation prompt")
+    .action(async (amount, token, to, opts) => {
+    await runTransfer(amount, token, to, opts);
+});
+// ---------------------------------------------------------------- guardrail
+const guardrail = program
+    .command("guardrail")
+    .description("Inspect or edit spending caps for the active profile.");
+guardrail
+    .command("show [profile]", { isDefault: true })
+    .description("Print the current guardrail config.")
+    .action((profile) => runGuardrailShow(profile));
+guardrail
+    .command("set")
+    .description("Update guardrail fields. Unspecified fields are left alone.")
+    .option("--profile <name>", "Profile to edit (defaults to active)")
+    .option("--max-per-tx <usd>", "Hard cap per single call (USD)")
+    .option("--max-per-day <usd>", "Hard cap per rolling 24h (USD)")
+    .option("--require-approval-above <usd>", "Calls ≥ USD require an approval hook (set in SDK)")
+    .option("--allowed-hosts <list>", "Comma-separated host globs (use '*' to allow any)")
+    .action((opts) => runGuardrailSet(opts));
+guardrail
+    .command("clear [profile]")
+    .description("Remove the guardrail entirely.")
+    .action((profile) => runGuardrailClear(profile));
+// ---------------------------------------------------------------- balance
+program
+    .command("balance")
+    .description("Show USDC balance per network for the active profile.")
+    .option("--profile <name>", "Profile to query (defaults to active)")
+    .option("--network <net>", "Restrict to one network (solana, base, ...)")
+    .option("--passphrase <value>", "Non-interactive passphrase")
+    .action(async (opts) => {
+    await runBalance(opts);
+});
+// ---------------------------------------------------------------- mcp
+program
+    .command("mcp")
+    .description("Start the MCP server on stdio (for Claude Desktop / Cursor / Codex).")
+    .action(async () => {
+    process.stderr.write(chalk.cyan("[xpay-mcp] starting...\n"));
+    try {
+        await startMcpServer();
+    }
+    catch (err) {
+        process.stderr.write(chalk.red(`[xpay-mcp] fatal: ${err.message}\n`));
+        process.exit(1);
+    }
+});
+// ---------------------------------------------------------------- run
+// When invoked as `xpay-mcp` (or any binary name containing "mcp"), default to
+// the MCP server so MCP hosts don't need a subcommand in their config.
+const invokedAs = basename(process.argv[1] ?? "");
+if (invokedAs.includes("mcp") && process.argv.length <= 2) {
+    process.argv.push("mcp");
+}
+program.parseAsync(process.argv).catch((err) => {
+    process.stderr.write(chalk.red(`xpay: ${err}\n`));
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;GAaG;AAEH,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACtF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,8DAA8D,CAAC;KAC3E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,wEAAwE;AACxE,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,2CAA2C,CAAC;KACxD,MAAM,CAAC,UAAU,EAAE,8DAA8D,CAAC;KAClF,MAAM,CAAC,cAAc,EAAE,+CAA+C,CAAC;KACvE,MAAM,CAAC,aAAa,EAAE,8CAA8C,CAAC;KACrE,MAAM,CAAC,aAAa,EAAE,gDAAgD,CAAC;KACvE,MAAM,CAAC,sBAAsB,EAAE,4CAA4C,CAAC;KAC5E,MAAM,CAAC,qBAAqB,EAAE,0CAA0C,CAAC;KACzE,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,IAAI,EAAE,EAAE;IAC/C,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AAEL,4EAA4E;AAC5E,MAAM,QAAQ,GAAG,OAAO;KACrB,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,wBAAwB,CAAC,CAAC;AAEzC,QAAQ;KACL,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KACpC,WAAW,CAAC,gCAAgC,CAAC;KAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;AAEnC,QAAQ;KACL,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,0CAA0C,CAAC;KACvD,MAAM,CAAC,CAAC,IAAa,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AAEpD,QAAQ;KACL,OAAO,CAAC,YAAY,CAAC;KACrB,WAAW,CAAC,yBAAyB,CAAC;KACtC,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;AAElD,4EAA4E;AAC5E,OAAO;KACJ,OAAO,CAAC,kBAAkB,CAAC;KAC3B,WAAW,CAAC,wDAAwD,CAAC;KACrE,MAAM,CAAC,aAAa,EAAE,0BAA0B,CAAC;KACjD,MAAM,CAAC,iBAAiB,EAAE,uCAAuC,CAAC;KAClE,MAAM,CAAC,QAAQ,EAAE,yCAAyC,CAAC;KAC3D,MAAM,CAAC,KAAK,EAAE,KAAyB,EAAE,IAAI,EAAE,EAAE;IAChD,MAAM,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEL,uEAAuE;AACvE,OAAO;KACJ,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,iEAAiE,CAAC;KAC9E,MAAM,CAAC,kBAAkB,EAAE,0CAA0C,CAAC;KACtE,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;KAC5D,MAAM,CAAC,eAAe,EAAE,6CAA6C,CAAC;KACtE,MAAM,CAAC,eAAe,EAAE,wCAAwC,CAAC;KACjE,MAAM,CAAC,WAAW,EAAE,8BAA8B,CAAC;KACnD,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,IAAI,EAAE,EAAE;IAClC,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,2EAA2E;AAC3E,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,sDAAsD,CAAC;KACnE,MAAM,CAAC,kBAAkB,EAAE,uCAAuC,CAAC;KACnE,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;KAC5D,MAAM,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;KACpD,MAAM,CAAC,aAAa,EAAE,0BAA0B,CAAC;KACjD,MAAM,CAAC,uBAAuB,EAAE,6CAA6C,CAAC;KAC9E,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;KACjC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC;AAEL,4EAA4E;AAC5E,OAAO;KACJ,OAAO,CAAC,gCAAgC,CAAC;KACzC,WAAW,CAAC,qEAAqE,CAAC;KAClF,MAAM,CAAC,kBAAkB,EAAE,2CAA2C,CAAC;KACvE,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;KAC5D,MAAM,CAAC,iBAAiB,EAAE,6CAA6C,CAAC;KACxE,MAAM,CAAC,WAAW,EAAE,8BAA8B,CAAC;KACnD,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,KAAa,EAAE,EAAU,EAAE,IAAI,EAAE,EAAE;IAChE,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEL,6EAA6E;AAC7E,MAAM,SAAS,GAAG,OAAO;KACtB,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,uDAAuD,CAAC,CAAC;AAExE,SAAS;KACN,OAAO,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KAC9C,WAAW,CAAC,qCAAqC,CAAC;KAClD,MAAM,CAAC,CAAC,OAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;AAE3D,SAAS;KACN,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,6DAA6D,CAAC;KAC1E,MAAM,CAAC,kBAAkB,EAAE,sCAAsC,CAAC;KAClE,MAAM,CAAC,oBAAoB,EAAE,gCAAgC,CAAC;KAC9D,MAAM,CAAC,qBAAqB,EAAE,gCAAgC,CAAC;KAC/D,MAAM,CAAC,gCAAgC,EAAE,mDAAmD,CAAC;KAC7F,MAAM,CAAC,wBAAwB,EAAE,mDAAmD,CAAC;KACrF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AAE3C,SAAS;KACN,OAAO,CAAC,iBAAiB,CAAC;KAC1B,WAAW,CAAC,gCAAgC,CAAC;KAC7C,MAAM,CAAC,CAAC,OAAgB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;AAE5D,2EAA2E;AAC3E,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,uDAAuD,CAAC;KACpE,MAAM,CAAC,kBAAkB,EAAE,uCAAuC,CAAC;KACnE,MAAM,CAAC,iBAAiB,EAAE,6CAA6C,CAAC;KACxE,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;KAC5D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC;AAEL,uEAAuE;AACvE,OAAO;KACJ,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,sEAAsE,CAAC;KACnF,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAsB,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,uEAAuE;AACvE,+EAA+E;AAC/E,uEAAuE;AACvE,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAClD,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/cli/init.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `xpay init` — create a new profile (or import one).
+ *
+ * Flow:
+ *   1. Confirm profile name (default: "default") + workspace flag.
+ *   2. Either generate a fresh 24-word mnemonic or accept --import.
+ *   3. Prompt for passphrase (twice, with confirmation) unless --no-encrypt.
+ *   4. Write wallet.json + config.json under ~/.xpay/<name>/ (mode 0700).
+ *   5. Print addresses + force user to acknowledge the seed phrase.
+ */
+export interface InitCmdOptions {
+    name?: string;
+    import?: boolean;
+    noEncrypt?: boolean;
+    workspace?: boolean;
+    overwrite?: boolean;
+    /** Non-interactive passphrase (for scripts/tests). */
+    passphrase?: string;
+    /** Non-interactive mnemonic (for scripts/tests). */
+    mnemonic?: string;
+}
+export declare function runInit(opts: InitCmdOptions): Promise<void>;
+//# sourceMappingURL=init.d.ts.map

package/dist/cli/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAiGjE"}

package/dist/cli/init.js

@@ -0,0 +1,114 @@
+/**
+ * `xpay init` — create a new profile (or import one).
+ *
+ * Flow:
+ *   1. Confirm profile name (default: "default") + workspace flag.
+ *   2. Either generate a fresh 24-word mnemonic or accept --import.
+ *   3. Prompt for passphrase (twice, with confirmation) unless --no-encrypt.
+ *   4. Write wallet.json + config.json under ~/.xpay/<name>/ (mode 0700).
+ *   5. Print addresses + force user to acknowledge the seed phrase.
+ */
+import chalk from "chalk";
+import inquirer from "inquirer";
+import { initProfile, profileExists } from "../profile/index.js";
+import { assertValidMnemonic } from "../profile/derive.js";
+export async function runInit(opts) {
+    const name = opts.name ?? "default";
+    if (profileExists(name, { workspace: opts.workspace }) && !opts.overwrite) {
+        console.error(chalk.red(`✗ Profile "${name}" already exists.`) +
+            ` Pass --overwrite to replace it (you will lose access to the old wallet).`);
+        process.exit(1);
+    }
+    // --- Mnemonic ---
+    let mnemonic = opts.mnemonic;
+    if (opts.import && !mnemonic) {
+        const answer = await inquirer.prompt([
+            {
+                type: "input",
+                name: "mnemonic",
+                message: "Paste your 12- or 24-word recovery phrase:",
+                filter: (v) => v.trim().toLowerCase().replace(/\s+/g, " "),
+            },
+        ]);
+        mnemonic = answer.mnemonic;
+    }
+    if (mnemonic) {
+        try {
+            assertValidMnemonic(mnemonic);
+        }
+        catch (err) {
+            console.error(chalk.red(`✗ ${err.message}`));
+            process.exit(1);
+        }
+    }
+    // --- Passphrase ---
+    let passphrase = opts.passphrase;
+    if (!opts.noEncrypt && passphrase === undefined) {
+        const { p1, p2 } = await inquirer.prompt([
+            {
+                type: "password",
+                name: "p1",
+                message: "Encryption passphrase (used to unlock this wallet):",
+                mask: "*",
+                validate: (v) => v.length >= 8 || "Use at least 8 characters (or pass --no-encrypt for dev wallets)",
+            },
+            { type: "password", name: "p2", message: "Confirm passphrase:", mask: "*" },
+        ]);
+        if (p1 !== p2) {
+            console.error(chalk.red("✗ Passphrases do not match."));
+            process.exit(1);
+        }
+        passphrase = p1;
+    }
+    // --- Create ---
+    const result = await initProfile({
+        name,
+        mnemonic,
+        passphrase,
+        workspace: opts.workspace,
+        overwrite: opts.overwrite,
+    });
+    // --- Output ---
+    console.log("");
+    console.log(chalk.green(`✔ Profile "${result.name}" created at ${result.path}`));
+    console.log("");
+    console.log(chalk.bold("Addresses:"));
+    console.log(`  Solana  ${chalk.cyan(result.addresses.solana)}`);
+    console.log(`  EVM     ${chalk.cyan(result.addresses.evm)}`);
+    console.log("");
+    if (!opts.import) {
+        console.log(chalk.yellow.bold("⚠  RECOVERY PHRASE — write this down NOW. We cannot recover it for you."));
+        console.log("");
+        printMnemonicGrid(result.mnemonic);
+        console.log("");
+        if (process.stdin.isTTY && !opts.passphrase) {
+            const { ack } = await inquirer.prompt([
+                {
+                    type: "confirm",
+                    name: "ack",
+                    message: "I have written down the recovery phrase in a safe place.",
+                    default: false,
+                },
+            ]);
+            if (!ack) {
+                console.log(chalk.yellow("Take your time. The phrase is also visible above."));
+            }
+        }
+    }
+    console.log(chalk.dim("Next steps:"));
+    console.log(chalk.dim("  xpay balance        # check funded balance"));
+    console.log(chalk.dim("  xpay discover foo   # search the catalog"));
+    console.log(chalk.dim("  xpay pay <url>      # pay an x402 endpoint"));
+}
+function printMnemonicGrid(mnemonic) {
+    const words = mnemonic.split(" ");
+    const cols = 4;
+    for (let i = 0; i < words.length; i += cols) {
+        const row = words
+            .slice(i, i + cols)
+            .map((w, j) => chalk.dim(`${String(i + j + 1).padStart(2)}.`) + ` ${chalk.bold(w.padEnd(12))}`)
+            .join("  ");
+        console.log("  " + row);
+    }
+}
+//# sourceMappingURL=init.js.map

package/dist/cli/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAc3D,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAoB;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;IAEpC,IAAI,aAAa,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1E,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,cAAc,IAAI,mBAAmB,CAAC;YAC9C,2EAA2E,CAC9E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,mBAAmB;IACnB,IAAI,QAAQ,GAAuB,IAAI,CAAC,QAAQ,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAuB;YACzD;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,4CAA4C;gBACrD,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aACnE;SACF,CAAC,CAAC;QACH,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,UAAU,GAAuB,IAAI,CAAC,UAAU,CAAC;IACrD,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAA6B;YACnE;gBACE,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,qDAAqD;gBAC9D,IAAI,EAAE,GAAG;gBACT,QAAQ,EAAE,CAAC,CAAS,EAAE,EAAE,CACtB,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,kEAAkE;aACtF;YACD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,GAAG,EAAE;SAC5E,CAAC,CAAC;QACH,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,UAAU,GAAG,EAAE,CAAC;IAClB,CAAC;IAED,iBAAiB;IACjB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,IAAI;QACJ,QAAQ;QACR,UAAU;QACV,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IAEH,iBAAiB;IACjB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,IAAI,gBAAgB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC,CAAC;QAC1G,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAmB;gBACtD;oBACE,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,KAAK;oBACX,OAAO,EAAE,0DAA0D;oBACnE,OAAO,EAAE,KAAK;iBACf;aACF,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,mDAAmD,CAAC,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,KAAK;aACd,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;aAClB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;aAC9F,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC"}

package/dist/cli/mcp-server.d.ts

@@ -0,0 +1,26 @@
+/**
+ * xPay MCP server.
+ *
+ * Exposes every CLI capability as an MCP tool over stdio. Designed to be
+ * dropped into Claude Desktop / Cursor / Codex configs verbatim:
+ *
+ *   {
+ *     "mcpServers": {
+ *       "xpay": {
+ *         "command": "npx",
+ *         "args": ["-y", "@xona-labs/xpay"],
+ *         "env": { "XPAY_PASSPHRASE": "<your-passphrase>" }
+ *       }
+ *     }
+ *   }
+ *
+ * Configuration via env:
+ *   XPAY_PROFILE     profile to load (default: active profile, else "default")
+ *   XPAY_PASSPHRASE  passphrase for encrypted wallets
+ *   XPAY_HOME        override ~/.xpay/ root (mirrors the CLI)
+ *
+ * For ephemeral / test setups you can still bypass profiles with:
+ *   XPAY_SOLANA_SECRET, XPAY_EVM_KEY, XPAY_EVM_NETWORK
+ */
+export declare function startMcpServer(): Promise<void>;
+//# sourceMappingURL=mcp-server.d.ts.map

package/dist/cli/mcp-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../../src/cli/mcp-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAiBH,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAsCpD"}