@xona-labs/xpay 0.1.0

package/dist/use/index.js

@@ -0,0 +1,173 @@
+/**
+ * Use — call a paid resource, handling x402 payment end-to-end.
+ *
+ * Two modes:
+ *  - **Catalog mode** (`resource` has `accepts[]`): we pick a requirement up
+ *    front, run guardrail, pay, then call with the X-Payment header.
+ *  - **Live challenge mode** (`resource.accepts` empty *or* `useByUrl()`): we
+ *    call the URL first, expect a `402` with a body listing accepted payment
+ *    options, then settle and retry. This is the canonical x402 v2 flow and
+ *    lets agents pay resources they discovered *outside* of any catalog.
+ *
+ * Both paths converge on the same {@link UseResult}.
+ */
+import { ResourceSchema, } from "../types.js";
+export async function use(args) {
+    // If we have accepts up front, take the fast path.
+    if (args.resource.accepts.length > 0) {
+        return useWithRequirements(args, args.resource.accepts);
+    }
+    // Otherwise probe the resource for a 402 challenge.
+    return useWithLiveChallenge(args);
+}
+export async function useByUrl(args) {
+    const resource = {
+        resource: args.url,
+        type: "http",
+        method: args.method ?? "GET",
+        accepts: [],
+    };
+    return useWithLiveChallenge({
+        resource,
+        wallet: args.wallet,
+        guardrail: args.guardrail,
+        body: args.body,
+        headers: args.headers,
+    });
+}
+async function useWithRequirements(args, reqs) {
+    const req = args.wallet.pickRequirement(reqs);
+    if (!req) {
+        throw new Error(`xpay.use: no compatible payment option. Resource accepts: ${reqs.map((a) => a.network).join(", ")}`);
+    }
+    // Guardrail runs *before* signing — this is the security boundary.
+    await args.guardrail.check({ resource: args.resource, requirement: req });
+    const network = normalizeNetwork(req.network);
+    const signer = args.wallet.signer(network);
+    const txSig = await signer.pay(req);
+    const res = await callResource(args, paymentHeader(req, txSig, args.resource.x402Version ?? 1));
+    return finalize(res, network, req.amount ?? "0", txSig);
+}
+async function useWithLiveChallenge(args) {
+    // Step 1: probe without payment.
+    const probe = await callResource(args, undefined);
+    if (probe.res.status !== 402) {
+        // No payment required — return the probe response as-is. (Useful when a
+        // resource later becomes free or for sanity checks.)
+        return finalize(probe, "unknown", "0");
+    }
+    // Step 2: parse the 402 body. x402 v2 returns a body shaped like a Resource
+    // (`{ accepts: [...] }`); we accept either that or a bare PaymentRequirement[].
+    const reqs = parseChallenge(probe.data);
+    if (reqs.length === 0) {
+        throw new Error(`xpay.use: ${args.resource.resource} returned 402 but no parseable accepts[] payload`);
+    }
+    const req = args.wallet.pickRequirement(reqs);
+    if (!req) {
+        throw new Error(`xpay.use: ${args.resource.resource} accepts ${reqs.map((r) => r.network).join(", ")} but wallet has no matching signer`);
+    }
+    await args.guardrail.check({ resource: args.resource, requirement: req });
+    const network = normalizeNetwork(req.network);
+    const signer = args.wallet.signer(network);
+    const txSig = await signer.pay(req);
+    // Step 3: retry with X-Payment.
+    const res = await callResource(args, paymentHeader(req, txSig, 2));
+    return finalize(res, network, req.amount ?? "0", txSig);
+}
+async function callResource(args, paymentHeader) {
+    const headers = {
+        accept: "application/json",
+        ...args.headers,
+    };
+    if (paymentHeader)
+        headers["x-payment"] = paymentHeader;
+    let body;
+    if (args.body !== undefined && args.resource.method !== "GET") {
+        headers["content-type"] = "application/json";
+        body = JSON.stringify(args.body);
+    }
+    const res = await fetch(args.resource.resource, {
+        method: args.resource.method,
+        headers,
+        body,
+    });
+    const text = await res.text();
+    let data = text;
+    try {
+        data = JSON.parse(text);
+    }
+    catch {
+        /* keep as string */
+    }
+    return { res, data };
+}
+function finalize(raw, network, amountPaid, txSig) {
+    if (!raw.res.ok) {
+        throw new Error(`xpay.use: ${raw.res.status} ${raw.res.statusText} — ${typeof raw.data === "string" ? raw.data : JSON.stringify(raw.data)}`);
+    }
+    return {
+        data: raw.data,
+        status: raw.res.status,
+        network,
+        amountPaid,
+        txSig,
+    };
+}
+/**
+ * x402 `X-Payment` header.
+ *
+ * Format is a base64-encoded JSON blob with the settlement details. Each
+ * facilitator validates differently, but the common subset (txSig, payTo,
+ * asset, amount, network) is what's encoded here.
+ */
+function paymentHeader(req, txSig, x402Version) {
+    const payload = {
+        scheme: req.scheme,
+        network: req.network,
+        payTo: req.payTo,
+        asset: req.asset,
+        amount: req.amount ?? "0",
+        txSig,
+        x402Version,
+    };
+    return Buffer.from(JSON.stringify(payload), "utf8").toString("base64");
+}
+/**
+ * Parse a 402 response body into PaymentRequirement[].
+ * Accepts either the v2 envelope (`{ accepts: [...] }` matching Resource) or a
+ * bare array (some facilitators ship this).
+ */
+function parseChallenge(data) {
+    if (Array.isArray(data)) {
+        const parsed = ResourceSchema.safeParse({
+            resource: "",
+            type: "http",
+            method: "GET",
+            accepts: data,
+        });
+        return parsed.success ? parsed.data.accepts : [];
+    }
+    if (data && typeof data === "object") {
+        const parsed = ResourceSchema.safeParse({
+            resource: "",
+            type: "http",
+            method: "GET",
+            ...data,
+        });
+        if (parsed.success)
+            return parsed.data.accepts;
+    }
+    return [];
+}
+function normalizeNetwork(raw) {
+    if (raw === "eip155:8453")
+        return "base";
+    if (raw === "eip155:1")
+        return "ethereum";
+    if (raw === "eip155:42161")
+        return "arbitrum";
+    if (raw === "eip155:10")
+        return "optimism";
+    return raw;
+}
+//# sourceMappingURL=index.js.map

package/dist/use/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/use/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,cAAc,GAIf,MAAM,aAAa,CAAC;AAYrB,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAa;IACrC,mDAAmD;IACnD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,oDAAoD;IACpD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB;IAC/C,MAAM,QAAQ,GAAa;QACzB,QAAQ,EAAE,IAAI,CAAC,GAAG;QAClB,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;QAC5B,OAAO,EAAE,EAAE;KACZ,CAAC;IACF,OAAO,oBAAoB,CAAC;QAC1B,QAAQ;QACR,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,IAAa,EACb,IAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,6DAA6D,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrG,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;IAE1E,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEpC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC;IAChG,OAAO,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAa;IAC/C,iCAAiC;IACjC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7B,wEAAwE;QACxE,qDAAqD;QACrD,OAAO,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,QAAQ,CAAC,QAAQ,kDAAkD,CACtF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,QAAQ,CAAC,QAAQ,YAAY,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,CACzH,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEpC,gCAAgC;IAChC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC;AAC1D,CAAC;AAOD,KAAK,UAAU,YAAY,CACzB,IAAa,EACb,aAAiC;IAEjC,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,GAAG,IAAI,CAAC,OAAO;KAChB,CAAC;IACF,IAAI,aAAa;QAAE,OAAO,CAAC,WAAW,CAAC,GAAG,aAAa,CAAC;IAExD,IAAI,IAA0B,CAAC;IAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9D,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC7C,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE;QAC9C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;QAC5B,OAAO;QACP,IAAI;KACL,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CACf,GAAgB,EAChB,OAAe,EACf,UAAkB,EAClB,KAAc;IAEd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,aAAa,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,MAC/C,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CACnE,EAAE,CACH,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM;QACtB,OAAO;QACP,UAAU;QACV,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,GAAuB,EACvB,KAAa,EACb,WAAmB;IAEnB,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG;QACzB,KAAK;QACL,WAAW;KACZ,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAAa;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC;YACtC,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC;YACtC,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,KAAK;YACb,GAAG,IAAI;SACR,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,GAAG,KAAK,aAAa;QAAE,OAAO,MAAM,CAAC;IACzC,IAAI,GAAG,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC1C,IAAI,GAAG,KAAK,cAAc;QAAE,OAAO,UAAU,CAAC;IAC9C,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,UAAU,CAAC;IAC3C,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/wallet/index.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Multi-network wallet. Thin facade over per-network {@link Signer}s.
+ *
+ * The wallet doesn't hold keys — signers do. This module just exposes a
+ * unified view (addresses, balances) and lets callers pick which network to
+ * use for a given payment.
+ */
+import type { Network, PaymentRequirement, Signer } from "../types.js";
+export interface WalletOptions {
+    networks: Network[];
+    signers: Partial<Record<Network, Signer>>;
+}
+export interface Wallet {
+    /** Networks this wallet is configured for. */
+    readonly networks: Network[];
+    /** Get the address on a specific network. */
+    address(network?: Network): string;
+    /** Get the signer for a network, or throw if not configured. */
+    signer(network: Network): Signer;
+    /** True if a signer is configured for the network. */
+    has(network: Network): boolean;
+    /** USDC balance on a network in human units (e.g. 4.70). Returns 0 if unsupported. */
+    balance(network?: Network): Promise<number>;
+    /**
+     * Pick the best network to satisfy one of the given payment requirements.
+     * Strategy v0: first match where we have a signer + (eventually) enough balance.
+     */
+    pickRequirement(reqs: PaymentRequirement[]): PaymentRequirement | undefined;
+}
+export declare function createWallet(opts: WalletOptions): Wallet;
+//# sourceMappingURL=index.d.ts.map

package/dist/wallet/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/wallet/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,MAAM;IACrB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC7B,6CAA6C;IAC7C,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACnC,gEAAgE;IAChE,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;IACjC,sDAAsD;IACtD,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;IAC/B,sFAAsF;IACtF,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C;;;OAGG;IACH,eAAe,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,kBAAkB,GAAG,SAAS,CAAC;CAC7E;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAwCxD"}

package/dist/wallet/index.js

@@ -0,0 +1,56 @@
+/**
+ * Multi-network wallet. Thin facade over per-network {@link Signer}s.
+ *
+ * The wallet doesn't hold keys — signers do. This module just exposes a
+ * unified view (addresses, balances) and lets callers pick which network to
+ * use for a given payment.
+ */
+export function createWallet(opts) {
+    const networks = opts.networks;
+    const signers = opts.signers;
+    function signer(network) {
+        const s = signers[network];
+        if (!s)
+            throw new Error(`No signer configured for network "${network}"`);
+        return s;
+    }
+    return {
+        networks,
+        address(network = networks[0]) {
+            return signer(network).address;
+        },
+        signer,
+        has: (network) => Boolean(signers[network]),
+        async balance(network = networks[0]) {
+            // v0: signers may expose a `balance()` method; fall back to 0 if not.
+            const s = signers[network];
+            if (!s)
+                return 0;
+            if (typeof s.balance === "function")
+                return s.balance();
+            return 0;
+        },
+        pickRequirement(reqs) {
+            // Normalize EIP-155 strings ("eip155:8453") to our network slugs.
+            const matchNetwork = (raw) => {
+                if (signers[raw])
+                    return raw;
+                if (raw === "eip155:8453" && signers["base"])
+                    return "base";
+                if (raw === "eip155:1" && signers["ethereum"])
+                    return "ethereum";
+                if (raw === "eip155:42161" && signers["arbitrum"])
+                    return "arbitrum";
+                if (raw === "eip155:10" && signers["optimism"])
+                    return "optimism";
+                return undefined;
+            };
+            for (const req of reqs) {
+                if (matchNetwork(req.network))
+                    return req;
+            }
+            return undefined;
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/wallet/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/wallet/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA2BH,MAAM,UAAU,YAAY,CAAC,IAAmB;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAE7B,SAAS,MAAM,CAAC,OAAgB;QAC9B,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,GAAG,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO;QACL,QAAQ;QACR,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC;YAC3B,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QACjC,CAAC;QACD,MAAM;QACN,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC;YACjC,sEAAsE;YACtE,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAA6D,CAAC;YACvF,IAAI,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;YACjB,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,UAAU;gBAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;YACxD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,eAAe,CAAC,IAAI;YAClB,kEAAkE;YAClE,MAAM,YAAY,GAAG,CAAC,GAAW,EAAuB,EAAE;gBACxD,IAAI,OAAO,CAAC,GAAG,CAAC;oBAAE,OAAO,GAAG,CAAC;gBAC7B,IAAI,GAAG,KAAK,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;oBAAE,OAAO,MAAM,CAAC;gBAC5D,IAAI,GAAG,KAAK,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC;oBAAE,OAAO,UAAU,CAAC;gBACjE,IAAI,GAAG,KAAK,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC;oBAAE,OAAO,UAAU,CAAC;gBACrE,IAAI,GAAG,KAAK,WAAW,IAAI,OAAO,CAAC,UAAU,CAAC;oBAAE,OAAO,UAAU,CAAC;gBAClE,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;YACF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;oBAAE,OAAO,GAAG,CAAC;YAC5C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,70 @@
+{
+  "name": "@xona-labs/xpay",
+  "version": "0.1.0",
+  "description": "Discovery and usage layer for agentic commerce — multi-network wallet, x402 payments, 20k+ services via PayAI and other catalogs",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "xpay": "dist/cli/index.js",
+    "xpay-mcp": "dist/cli/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "prepublishOnly": "npm run build",
+    "dev": "tsx src/cli/index.ts",
+    "demo": "tsx examples/discover-and-pay.ts"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/xona-labs/xpay"
+  },
+  "homepage": "https://xpay.xona.xyz",
+  "keywords": [
+    "x402",
+    "agentic-commerce",
+    "payai",
+    "solana",
+    "base",
+    "ai-agent",
+    "mcp",
+    "xona",
+    "discovery",
+    "wallet",
+    "usdc"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "@solana/spl-token": "^0.4.14",
+    "@solana/web3.js": "^1.95.0",
+    "bip39": "^3.1.0",
+    "chalk": "^5.4.1",
+    "commander": "^13.1.0",
+    "dotenv": "^16.4.7",
+    "ed25519-hd-key": "^2.0.0",
+    "ethers": "^6.16.0",
+    "inquirer": "^13.4.3",
+    "tweetnacl": "^1.0.3",
+    "zod": "^3.23.0"
+  },
+  "peerDependencies": {
+    "@privy-io/react-auth": "^2.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@privy-io/react-auth": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@types/inquirer": "^9.0.9",
+    "@types/node": "^22.15.0",
+    "tsx": "^4.19.4",
+    "typescript": "^5.8.3"
+  }
+}