@xona-labs/xpay 0.1.0

package/dist/profile/storage.js

@@ -0,0 +1,162 @@
+/**
+ * Profile storage — read/write `wallet.json` + `config.json` under
+ * `~/.xpay/<name>/` (or a workspace path) with passphrase-based encryption.
+ *
+ * Encryption uses Node's built-in crypto (no new deps): scrypt → AES-256-GCM
+ * over the mnemonic. AES-GCM gives us authenticated encryption so we detect
+ * wrong passphrases / tampering instead of returning garbage.
+ */
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { existsSync, mkdirSync, readFileSync, writeFileSync, readdirSync, chmodSync, statSync } from "node:fs";
+import { randomBytes, scryptSync, createCipheriv, createDecipheriv } from "node:crypto";
+const SCRYPT_N = 1 << 15; // 32768 — sane default, tunable.
+const SCRYPT_R = 8;
+const SCRYPT_P = 1;
+const KEY_LEN = 32;
+/** Root directory holding all profiles. Honors $XPAY_HOME. */
+export function xpayHome() {
+    return process.env.XPAY_HOME ?? join(homedir(), ".xpay");
+}
+/** Workspace-local profile dir (when `--workspace` is passed). */
+export function workspaceXpayDir(cwd = process.cwd()) {
+    return join(resolve(cwd), ".xpay");
+}
+export function profilePath(name, opts = {}) {
+    const root = opts.workspace
+        ? typeof opts.workspace === "string"
+            ? workspaceXpayDir(opts.workspace)
+            : workspaceXpayDir()
+        : xpayHome();
+    return join(root, name);
+}
+export function profileExists(name, opts = {}) {
+    return existsSync(join(profilePath(name, opts), "wallet.json"));
+}
+export function listProfiles(opts = {}) {
+    const root = opts.workspace
+        ? typeof opts.workspace === "string"
+            ? workspaceXpayDir(opts.workspace)
+            : workspaceXpayDir()
+        : xpayHome();
+    if (!existsSync(root))
+        return [];
+    return readdirSync(root).filter((name) => {
+        try {
+            return statSync(join(root, name)).isDirectory() && existsSync(join(root, name, "wallet.json"));
+        }
+        catch {
+            return false;
+        }
+    });
+}
+// -----------------------------------------------------------------------------
+// Encryption
+// -----------------------------------------------------------------------------
+function encryptMnemonic(mnemonic, passphrase) {
+    const salt = randomBytes(16);
+    const key = scryptSync(passphrase, salt, KEY_LEN, {
+        N: SCRYPT_N,
+        r: SCRYPT_R,
+        p: SCRYPT_P,
+        maxmem: 64 * 1024 * 1024,
+    });
+    const iv = randomBytes(12);
+    const cipher = createCipheriv("aes-256-gcm", key, iv);
+    const ciphertext = Buffer.concat([cipher.update(mnemonic, "utf8"), cipher.final()]);
+    const authTag = cipher.getAuthTag();
+    return {
+        cipher: "aes-256-gcm",
+        kdf: { name: "scrypt", salt: salt.toString("hex"), N: SCRYPT_N, r: SCRYPT_R, p: SCRYPT_P },
+        iv: iv.toString("hex"),
+        ciphertext: ciphertext.toString("hex"),
+        authTag: authTag.toString("hex"),
+    };
+}
+function decryptMnemonic(payload, passphrase) {
+    const salt = Buffer.from(payload.kdf.salt, "hex");
+    const key = scryptSync(passphrase, salt, KEY_LEN, {
+        N: payload.kdf.N,
+        r: payload.kdf.r,
+        p: payload.kdf.p,
+        maxmem: 64 * 1024 * 1024,
+    });
+    const iv = Buffer.from(payload.iv, "hex");
+    const decipher = createDecipheriv("aes-256-gcm", key, iv);
+    decipher.setAuthTag(Buffer.from(payload.authTag, "hex"));
+    try {
+        const plain = Buffer.concat([
+            decipher.update(Buffer.from(payload.ciphertext, "hex")),
+            decipher.final(),
+        ]);
+        return plain.toString("utf8");
+    }
+    catch {
+        throw new Error("Wrong passphrase, or wallet file is corrupted/tampered");
+    }
+}
+// -----------------------------------------------------------------------------
+// Read / write
+// -----------------------------------------------------------------------------
+export function writeWalletFile(dir, wallet) {
+    ensureDir(dir);
+    const file = join(dir, "wallet.json");
+    writeFileSync(file, JSON.stringify(wallet, null, 2));
+    // 0600 — readable only by the owner.
+    try {
+        chmodSync(file, 0o600);
+    }
+    catch { /* not POSIX */ }
+}
+export function readWalletFile(dir) {
+    const file = join(dir, "wallet.json");
+    if (!existsSync(file)) {
+        throw new Error(`No wallet at ${file}. Run \`xpay init\` first.`);
+    }
+    return JSON.parse(readFileSync(file, "utf8"));
+}
+export function writeConfigFile(dir, config) {
+    ensureDir(dir);
+    writeFileSync(join(dir, "config.json"), JSON.stringify(config, null, 2));
+}
+export function readConfigFile(dir) {
+    const file = join(dir, "config.json");
+    if (!existsSync(file))
+        return defaultConfig();
+    return JSON.parse(readFileSync(file, "utf8"));
+}
+export function defaultConfig() {
+    return {
+        version: 1,
+        networks: ["solana", "base"],
+        defaultNetwork: "solana",
+    };
+}
+function ensureDir(dir) {
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+}
+export function buildWalletFile(input) {
+    const base = {
+        version: 1,
+        createdAt: new Date().toISOString(),
+        addresses: input.addresses,
+    };
+    if (input.passphrase && input.passphrase.length > 0) {
+        base.encrypted = encryptMnemonic(input.mnemonic, input.passphrase);
+    }
+    else {
+        base.mnemonic = input.mnemonic;
+    }
+    return base;
+}
+export function unlockWalletFile(wallet, passphrase) {
+    if (wallet.mnemonic)
+        return wallet.mnemonic; // unencrypted
+    if (!wallet.encrypted)
+        throw new Error("Wallet file has neither mnemonic nor encrypted payload");
+    if (!passphrase)
+        throw new Error("Wallet is encrypted — passphrase required");
+    return decryptMnemonic(wallet.encrypted, passphrase);
+}
+//# sourceMappingURL=storage.js.map

package/dist/profile/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/profile/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/G,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGxF,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,iCAAiC;AAC3D,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnB,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnB,MAAM,OAAO,GAAG,EAAE,CAAC;AAEnB,8DAA8D;AAC9D,MAAM,UAAU,QAAQ;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,gBAAgB,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAClD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAAyC,EAAE;IACnF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS;QACzB,CAAC,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YAClC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;YAClC,CAAC,CAAC,gBAAgB,EAAE;QACtB,CAAC,CAAC,QAAQ,EAAE,CAAC;IACf,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAyC,EAAE;IACrF,OAAO,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAyC,EAAE;IACtE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS;QACzB,CAAC,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YAClC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;YAClC,CAAC,CAAC,gBAAgB,EAAE;QACtB,CAAC,CAAC,QAAQ,EAAE,CAAC;IACf,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACvC,IAAI,CAAC;YACH,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QACjG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF,SAAS,eAAe,CAAC,QAAgB,EAAE,UAAkB;IAC3D,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE;QAChD,CAAC,EAAE,QAAQ;QACX,CAAC,EAAE,QAAQ;QACX,CAAC,EAAE,QAAQ;QACX,MAAM,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KACzB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACpC,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE;QAC1F,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAA6C,EAAE,UAAkB;IACxF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE;QAChD,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KACzB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;YAC1B,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACvD,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,MAAkB;IAElB,SAAS,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACtC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACrD,qCAAqC;IACrC,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,4BAA4B,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,MAAqB;IAChE,SAAS,CAAC,GAAG,CAAC,CAAC;IACf,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,EAAE,CAAC;IAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAkB,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC5B,cAAc,EAAE,QAAQ;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACzE,CAAC;AAYD,MAAM,UAAU,eAAe,CAAC,KAAuB;IACrD,MAAM,IAAI,GAAe;QACvB,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAkB,EAAE,UAAmB;IACtE,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc;IAC3D,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACjG,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9E,OAAO,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AACvD,CAAC"}

package/dist/profile/types.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Profile types. A profile is a named set of keys + config persisted under
+ * `~/.xpay/<name>/` (or `<workspace>/.xpay/<name>/` when workspace-local).
+ *
+ * One mnemonic derives both Solana and EVM keys — standard BIP-39 + BIP-44
+ * paths so the keys are recoverable in Phantom, MetaMask, Solflare, etc.
+ */
+export interface ProfileAddresses {
+    /** Base58 Solana public key. */
+    solana: string;
+    /** 0x-prefixed EVM address (same address on every EVM chain). */
+    evm: string;
+}
+/** Shape persisted on disk (`wallet.json`). */
+export interface WalletFile {
+    version: 1;
+    createdAt: string;
+    addresses: ProfileAddresses;
+    /** When unencrypted (dev only), the mnemonic lives here in plaintext. */
+    mnemonic?: string;
+    /** When encrypted: scrypt-derived AES-256-GCM blob containing the mnemonic. */
+    encrypted?: {
+        cipher: "aes-256-gcm";
+        kdf: {
+            name: "scrypt";
+            salt: string;
+            N: number;
+            r: number;
+            p: number;
+        };
+        iv: string;
+        ciphertext: string;
+        authTag: string;
+    };
+}
+/** Shape persisted on disk (`config.json`). Hand-edited by users sometimes. */
+export interface ProfileConfig {
+    version: 1;
+    /** Networks the profile is active on. */
+    networks: string[];
+    /** Default network for transfers / pay when not specified. */
+    defaultNetwork: string;
+    /** Per-network RPC overrides. Falls back to SDK defaults. */
+    rpcs?: Partial<Record<string, string>>;
+    /** Guardrail policy (mirrors GuardrailConfig but JSON-serializable). */
+    guardrail?: {
+        maxPerTx?: number;
+        maxPerDay?: number;
+        allowedHosts?: string[];
+        requireApprovalAbove?: number;
+    };
+    /** Linked API key for opt-in dashboard sync. */
+    link?: {
+        apiKey: string;
+        endpoint: string;
+    };
+}
+/** Runtime handle returned by {@link initProfile}/{@link loadProfile}. */
+export interface LoadedProfile {
+    /** Profile name (directory name under `~/.xpay/`). */
+    name: string;
+    /** Absolute path to the profile directory. */
+    path: string;
+    addresses: ProfileAddresses;
+    config: ProfileConfig;
+    /** Decoded mnemonic — only present while the process holds the unlocked profile. */
+    mnemonic: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/profile/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/profile/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;CACb;AAED,+CAA+C;AAC/C,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,SAAS,CAAC,EAAE;QACV,MAAM,EAAE,aAAa,CAAC;QACtB,GAAG,EAAE;YAAE,IAAI,EAAE,QAAQ,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,CAAC,EAAE,MAAM,CAAC;YAAC,CAAC,EAAE,MAAM,CAAC;YAAC,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACvE,EAAE,EAAE,MAAM,CAAC;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,+EAA+E;AAC/E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,yCAAyC;IACzC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,8DAA8D;IAC9D,cAAc,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvC,wEAAwE;IACxE,SAAS,CAAC,EAAE;QACV,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,gDAAgD;IAChD,IAAI,CAAC,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,oFAAoF;IACpF,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/profile/types.js

@@ -0,0 +1,9 @@
+/**
+ * Profile types. A profile is a named set of keys + config persisted under
+ * `~/.xpay/<name>/` (or `<workspace>/.xpay/<name>/` when workspace-local).
+ *
+ * One mnemonic derives both Solana and EVM keys — standard BIP-39 + BIP-44
+ * paths so the keys are recoverable in Phantom, MetaMask, Solflare, etc.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/profile/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/profile/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/signers/index.d.ts

@@ -0,0 +1,5 @@
+export { rawSolanaSigner } from "./raw-solana.js";
+export { rawEvmSigner } from "./raw-evm.js";
+export { phantomSigner } from "./phantom.js";
+export { privySigner } from "./privy.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/signers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/signers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/signers/index.js

@@ -0,0 +1,5 @@
+export { rawSolanaSigner } from "./raw-solana.js";
+export { rawEvmSigner } from "./raw-evm.js";
+export { phantomSigner } from "./phantom.js";
+export { privySigner } from "./privy.js";
+//# sourceMappingURL=index.js.map

package/dist/signers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/signers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/signers/phantom.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Phantom browser-wallet signer (stub).
+ *
+ * Real implementation requires the browser `window.solana` provider. This
+ * stub keeps the import surface stable and documents the contract; the
+ * implementation lands when xpay-react is added.
+ */
+import type { Signer } from "../types.js";
+export interface PhantomSignerOptions {
+    /** Override the provider for tests. Defaults to `window.solana`. */
+    provider?: unknown;
+}
+export declare function phantomSigner(_opts?: PhantomSignerOptions): Signer;
+//# sourceMappingURL=phantom.d.ts.map

package/dist/signers/phantom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phantom.d.ts","sourceRoot":"","sources":["../../src/signers/phantom.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,WAAW,oBAAoB;IACnC,oEAAoE;IACpE,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,aAAa,CAAC,KAAK,GAAE,oBAAyB,GAAG,MAAM,CAKtE"}

package/dist/signers/phantom.js

@@ -0,0 +1,12 @@
+/**
+ * Phantom browser-wallet signer (stub).
+ *
+ * Real implementation requires the browser `window.solana` provider. This
+ * stub keeps the import surface stable and documents the contract; the
+ * implementation lands when xpay-react is added.
+ */
+export function phantomSigner(_opts = {}) {
+    throw new Error("phantomSigner is not implemented yet. Use rawSolanaSigner for server-side use, " +
+        "or wait for @xona-labs/xpay-react which will ship a browser-ready Phantom adapter.");
+}
+//# sourceMappingURL=phantom.js.map

package/dist/signers/phantom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phantom.js","sourceRoot":"","sources":["../../src/signers/phantom.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,MAAM,UAAU,aAAa,CAAC,QAA8B,EAAE;IAC5D,MAAM,IAAI,KAAK,CACb,iFAAiF;QAC/E,oFAAoF,CACvF,CAAC;AACJ,CAAC"}

package/dist/signers/privy.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Privy signer adapter (stub).
+ *
+ * Privy is `@xona-labs/xpay`'s recommended production custody. The adapter
+ * accepts a Privy wallet client and exposes our {@link Signer} interface.
+ *
+ * Stubbed in v0 because the implementation depends on whether the consumer
+ * uses the React SDK (`@privy-io/react-auth`) or the Node SDK
+ * (`@privy-io/server-sdk`). The full implementation lands when we publish
+ * `@xona-labs/xpay-react` and a dedicated server adapter.
+ */
+import type { Signer } from "../types.js";
+export interface PrivySignerOptions {
+    /** Privy wallet client (shape varies by SDK). */
+    wallet: unknown;
+    /** Network this signer is bound to. */
+    network: string;
+}
+export declare function privySigner(_opts: PrivySignerOptions): Signer;
+//# sourceMappingURL=privy.d.ts.map

package/dist/signers/privy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privy.d.ts","sourceRoot":"","sources":["../../src/signers/privy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,WAAW,kBAAkB;IACjC,iDAAiD;IACjD,MAAM,EAAE,OAAO,CAAC;IAChB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAI7D"}

package/dist/signers/privy.js

@@ -0,0 +1,15 @@
+/**
+ * Privy signer adapter (stub).
+ *
+ * Privy is `@xona-labs/xpay`'s recommended production custody. The adapter
+ * accepts a Privy wallet client and exposes our {@link Signer} interface.
+ *
+ * Stubbed in v0 because the implementation depends on whether the consumer
+ * uses the React SDK (`@privy-io/react-auth`) or the Node SDK
+ * (`@privy-io/server-sdk`). The full implementation lands when we publish
+ * `@xona-labs/xpay-react` and a dedicated server adapter.
+ */
+export function privySigner(_opts) {
+    throw new Error("privySigner is not implemented yet. Track progress in @xona-labs/xpay-react.");
+}
+//# sourceMappingURL=privy.js.map

package/dist/signers/privy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privy.js","sourceRoot":"","sources":["../../src/signers/privy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAWH,MAAM,UAAU,WAAW,CAAC,KAAyB;IACnD,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;AACJ,CAAC"}

package/dist/signers/raw-evm.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Raw EVM signer — works for Base, Ethereum, Arbitrum, Optimism, and other
+ * EIP-155 chains. Holds a hex private key via `ethers.Wallet`.
+ */
+import type { Network, Signer } from "../types.js";
+export interface RawEvmSignerOptions {
+    /** 0x-prefixed hex private key. */
+    privateKey: string;
+    /** Target network. Required so we know which RPC + chainId to use. */
+    network: Network;
+    /** Override the default RPC URL. */
+    rpcUrl?: string;
+}
+export declare function rawEvmSigner(opts: RawEvmSignerOptions): Signer;
+//# sourceMappingURL=raw-evm.d.ts.map

package/dist/signers/raw-evm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-evm.d.ts","sourceRoot":"","sources":["../../src/signers/raw-evm.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAsB,MAAM,EAAE,MAAM,aAAa,CAAC;AAuBvE,MAAM,WAAW,mBAAmB;IAClC,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,OAAO,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAgD9D"}

package/dist/signers/raw-evm.js

@@ -0,0 +1,70 @@
+/**
+ * Raw EVM signer — works for Base, Ethereum, Arbitrum, Optimism, and other
+ * EIP-155 chains. Holds a hex private key via `ethers.Wallet`.
+ */
+import { Contract, JsonRpcProvider, Wallet, getBytes, hashMessage } from "ethers";
+/** Per-network USDC contract addresses. */
+const USDC_CONTRACTS = {
+    base: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
+    ethereum: "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48",
+    arbitrum: "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
+    optimism: "0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",
+};
+const DEFAULT_RPCS = {
+    base: "https://mainnet.base.org",
+    ethereum: "https://eth.llamarpc.com",
+    arbitrum: "https://arb1.arbitrum.io/rpc",
+    optimism: "https://mainnet.optimism.io",
+};
+const ERC20_ABI = [
+    "function transfer(address to, uint256 amount) returns (bool)",
+    "function decimals() view returns (uint8)",
+    "function balanceOf(address owner) view returns (uint256)",
+];
+export function rawEvmSigner(opts) {
+    const rpc = opts.rpcUrl ?? DEFAULT_RPCS[opts.network];
+    if (!rpc) {
+        throw new Error(`rawEvmSigner: no default RPC for network "${opts.network}". Pass rpcUrl.`);
+    }
+    const provider = new JsonRpcProvider(rpc);
+    const wallet = new Wallet(opts.privateKey, provider);
+    return {
+        network: opts.network,
+        address: wallet.address,
+        async signMessage(message) {
+            const sig = await wallet.signMessage(getBytes(hashMessage(message)));
+            return getBytes(sig);
+        },
+        async balance() {
+            const usdc = USDC_CONTRACTS[opts.network];
+            if (!usdc)
+                return 0;
+            try {
+                const erc20 = new Contract(usdc, ERC20_ABI, provider);
+                const raw = (await erc20.balanceOf(wallet.address));
+                // USDC has 6 decimals on every supported chain.
+                return Number(raw) / 1_000_000;
+            }
+            catch {
+                return 0;
+            }
+        },
+        async pay(req) {
+            // Native ETH transfer (asset is the zero address).
+            if (req.asset === "0x0000000000000000000000000000000000000000") {
+                const tx = await wallet.sendTransaction({
+                    to: req.payTo,
+                    value: BigInt(req.amount ?? "0"),
+                });
+                const receipt = await tx.wait();
+                return receipt?.hash ?? tx.hash;
+            }
+            // ERC-20 transfer.
+            const erc20 = new Contract(req.asset, ERC20_ABI, wallet);
+            const tx = await erc20.transfer(req.payTo, BigInt(req.amount ?? "0"));
+            const receipt = await tx.wait();
+            return receipt?.hash ?? tx.hash;
+        },
+    };
+}
+//# sourceMappingURL=raw-evm.js.map

package/dist/signers/raw-evm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-evm.js","sourceRoot":"","sources":["../../src/signers/raw-evm.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAGlF,2CAA2C;AAC3C,MAAM,cAAc,GAA2B;IAC7C,IAAI,EAAE,4CAA4C;IAClD,QAAQ,EAAE,4CAA4C;IACtD,QAAQ,EAAE,4CAA4C;IACtD,QAAQ,EAAE,4CAA4C;CACvD,CAAC;AAEF,MAAM,YAAY,GAA2B;IAC3C,IAAI,EAAE,0BAA0B;IAChC,QAAQ,EAAE,0BAA0B;IACpC,QAAQ,EAAE,8BAA8B;IACxC,QAAQ,EAAE,6BAA6B;CACxC,CAAC;AAEF,MAAM,SAAS,GAAG;IAChB,8DAA8D;IAC9D,0CAA0C;IAC1C,0DAA0D;CAC3D,CAAC;AAWF,MAAM,UAAU,YAAY,CAAC,IAAyB;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,CAAC,OAAO,iBAAiB,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAErD,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QAEvB,KAAK,CAAC,WAAW,CAAC,OAAO;YACvB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACrE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,OAAO;YACX,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACtD,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,SAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAW,CAAC;gBAC/D,gDAAgD;gBAChD,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,GAAuB;YAC/B,mDAAmD;YACnD,IAAI,GAAG,CAAC,KAAK,KAAK,4CAA4C,EAAE,CAAC;gBAC/D,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;oBACtC,EAAE,EAAE,GAAG,CAAC,KAAK;oBACb,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;iBACjC,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;gBAChC,OAAO,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC;YAClC,CAAC;YAED,mBAAmB;YACnB,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,QAAS,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC;YACvE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;YAChC,OAAO,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC;QAClC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/signers/raw-solana.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Raw Solana signer — for tests, server-side agents, and other scenarios where
+ * you hold a Solana keypair directly.
+ *
+ * Production wallets should prefer Privy or Phantom signers.
+ */
+import type { Signer } from "../types.js";
+export interface RawSolanaSignerOptions {
+    /** Base58 secret key (64 bytes) or a 64-byte Uint8Array. */
+    secretKey: string | Uint8Array;
+    /** Solana RPC. Defaults to public mainnet (rate-limited, swap for prod). */
+    rpcUrl?: string;
+}
+export declare function rawSolanaSigner(opts: RawSolanaSignerOptions): Signer;
+//# sourceMappingURL=raw-solana.d.ts.map

package/dist/signers/raw-solana.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-solana.d.ts","sourceRoot":"","sources":["../../src/signers/raw-solana.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgBH,OAAO,KAAK,EAAsB,MAAM,EAAE,MAAM,aAAa,CAAC;AAO9D,MAAM,WAAW,sBAAsB;IACrC,4DAA4D;IAC5D,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;IAC/B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,MAAM,CA6DpE"}

package/dist/signers/raw-solana.js

@@ -0,0 +1,88 @@
+/**
+ * Raw Solana signer — for tests, server-side agents, and other scenarios where
+ * you hold a Solana keypair directly.
+ *
+ * Production wallets should prefer Privy or Phantom signers.
+ */
+import { Connection, Keypair, PublicKey, Transaction, sendAndConfirmTransaction, } from "@solana/web3.js";
+import { createTransferInstruction, getAssociatedTokenAddress, getAccount, getOrCreateAssociatedTokenAccount, } from "@solana/spl-token";
+import nacl from "tweetnacl";
+/** Mainnet USDC mint. Used for the default balance lookup. */
+const USDC_MINT_MAINNET = "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v";
+const DEFAULT_RPC = "https://api.mainnet-beta.solana.com";
+export function rawSolanaSigner(opts) {
+    const secret = typeof opts.secretKey === "string"
+        ? decodeBase58(opts.secretKey)
+        : opts.secretKey;
+    const keypair = Keypair.fromSecretKey(secret);
+    const connection = new Connection(opts.rpcUrl ?? DEFAULT_RPC, "confirmed");
+    return {
+        network: "solana",
+        address: keypair.publicKey.toBase58(),
+        async signMessage(message) {
+            const sig = nacl.sign.detached(message, keypair.secretKey);
+            return sig;
+        },
+        async balance() {
+            try {
+                const mint = new PublicKey(USDC_MINT_MAINNET);
+                const ata = await getAssociatedTokenAddress(mint, keypair.publicKey);
+                const acc = await getAccount(connection, ata);
+                // USDC has 6 decimals.
+                return Number(acc.amount) / 1_000_000;
+            }
+            catch {
+                // Account doesn't exist yet → 0 balance.
+                return 0;
+            }
+        },
+        /**
+         * Pay an SPL token (typically USDC) per the requirement.
+         *
+         * v0 builds the transfer naively. A production version should batch with
+         * the resource request (e.g. via x402 facilitator) and use versioned
+         * transactions + priority fees.
+         */
+        async pay(req) {
+            const mint = new PublicKey(req.asset);
+            const recipient = new PublicKey(req.payTo);
+            const amount = BigInt(req.amount ?? "0");
+            const fromAta = await getOrCreateAssociatedTokenAccount(connection, keypair, mint, keypair.publicKey);
+            const toAta = await getOrCreateAssociatedTokenAccount(connection, keypair, mint, recipient);
+            const tx = new Transaction().add(createTransferInstruction(fromAta.address, toAta.address, keypair.publicKey, amount));
+            const sig = await sendAndConfirmTransaction(connection, tx, [keypair]);
+            return sig;
+        },
+    };
+}
+/** Minimal Base58 decode — avoids pulling in bs58 just for this. */
+function decodeBase58(s) {
+    const ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+    const map = new Map();
+    for (let i = 0; i < ALPHABET.length; i++)
+        map.set(ALPHABET[i], i);
+    let bytes = [0];
+    for (const c of s) {
+        const v = map.get(c);
+        if (v === undefined)
+            throw new Error(`Invalid base58 char: ${c}`);
+        let carry = v;
+        for (let i = 0; i < bytes.length; i++) {
+            carry += bytes[i] * 58;
+            bytes[i] = carry & 0xff;
+            carry >>= 8;
+        }
+        while (carry) {
+            bytes.push(carry & 0xff);
+            carry >>= 8;
+        }
+    }
+    for (const c of s) {
+        if (c === "1")
+            bytes.push(0);
+        else
+            break;
+    }
+    return new Uint8Array(bytes.reverse());
+}
+//# sourceMappingURL=raw-solana.js.map

package/dist/signers/raw-solana.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-solana.js","sourceRoot":"","sources":["../../src/signers/raw-solana.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,UAAU,EACV,OAAO,EACP,SAAS,EACT,WAAW,EACX,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,UAAU,EACV,iCAAiC,GAClC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,8DAA8D;AAC9D,MAAM,iBAAiB,GAAG,8CAA8C,CAAC;AAEzE,MAAM,WAAW,GAAG,qCAAqC,CAAC;AAS1D,MAAM,UAAU,eAAe,CAAC,IAA4B;IAC1D,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAC/C,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;IACnB,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,IAAI,WAAW,EAAE,WAAW,CAAC,CAAC;IAE3E,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE;QAErC,KAAK,CAAC,WAAW,CAAC,OAAO;YACvB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3D,OAAO,GAAG,CAAC;QACb,CAAC;QAED,KAAK,CAAC,OAAO;YACX,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,iBAAiB,CAAC,CAAC;gBAC9C,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrE,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBAC9C,uBAAuB;gBACvB,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;gBACzC,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QAED;;;;;;WAMG;QACH,KAAK,CAAC,GAAG,CAAC,GAAuB;YAC/B,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;YAEzC,MAAM,OAAO,GAAG,MAAM,iCAAiC,CACrD,UAAU,EACV,OAAO,EACP,IAAI,EACJ,OAAO,CAAC,SAAS,CAClB,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,iCAAiC,CACnD,UAAU,EACV,OAAO,EACP,IAAI,EACJ,SAAS,CACV,CAAC;YAEF,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC,GAAG,CAC9B,yBAAyB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CACrF,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YACvE,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,SAAS,YAAY,CAAC,CAAS;IAC7B,MAAM,QAAQ,GAAG,4DAA4D,CAAC;IAC9E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC;IAEnE,IAAI,KAAK,GAAa,CAAC,CAAC,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC;YACxB,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;YACxB,KAAK,KAAK,CAAC,CAAC;QACd,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;YACzB,KAAK,KAAK,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YACxB,MAAM;IACb,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/tools/index.d.ts

@@ -0,0 +1,48 @@
+/**
+ * LLM tool-definition exporters.
+ *
+ * Each helper returns the tool/function-calling schema in the vendor's
+ * preferred shape plus a `handlers` map. Wire them into your agent loop:
+ *
+ *   const { tools, handlers } = forClaude(xpay);
+ *   // pass `tools` to Anthropic, look up `handlers[name]` on tool_use blocks.
+ *
+ * The tool surface mirrors the CLI commands so an agent's mental model is
+ * the same whether it's calling the SDK, the CLI, or MCP.
+ */
+import type { XPay } from "../index.js";
+export interface ToolBundle<TDef> {
+    tools: TDef[];
+    handlers: Record<string, (input: Record<string, unknown>) => Promise<unknown>>;
+}
+export interface ClaudeToolDef {
+    name: string;
+    description: string;
+    input_schema: Record<string, unknown>;
+}
+/** Anthropic Claude tool definitions. */
+export declare function forClaude(xpay: XPay): ToolBundle<ClaudeToolDef>;
+/** OpenAI function-calling tool definitions (derived from the Claude shape). */
+export declare function forOpenAI(xpay: XPay): {
+    tools: {
+        type: "function";
+        function: {
+            name: string;
+            description: string;
+            parameters: Record<string, unknown>;
+        };
+    }[];
+    handlers: Record<string, (input: Record<string, unknown>) => Promise<unknown>>;
+};
+/** Google Gemini function-declaration definitions. */
+export declare function forGemini(xpay: XPay): {
+    tools: {
+        functionDeclarations: {
+            name: string;
+            description: string;
+            parameters: Record<string, unknown>;
+        }[];
+    }[];
+    handlers: Record<string, (input: Record<string, unknown>) => Promise<unknown>>;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,WAAW,UAAU,CAAC,IAAI;IAC9B,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;CAChF;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,yCAAyC;AACzC,wBAAgB,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,aAAa,CAAC,CAuI/D;AAED,gFAAgF;AAChF,wBAAgB,SAAS,CAAC,IAAI,EAAE,IAAI;;;;;;;;;qCApJD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;EAiK9E;AAED,sDAAsD;AACtD,wBAAgB,SAAS,CAAC,IAAI,EAAE,IAAI;;;;;;;;qCApKD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;EAkL9E"}