@xona-labs/xpay 0.2.24 → 0.2.25

package/dist/transfer/index.d.ts

@@ -1,11 +1,11 @@
 /**
- * Direct SPL / ERC-20 transfer — no x402, no provider, just send funds.
+ * Direct SPL / ERC-20 transfer - no x402, no provider, just send funds.
  *
  * Goes through the same guardrail as `use()` so a compromised CLI / agent
  * can't drain the wallet past the configured caps.
  *
  * Solana: any SPL token by symbol (USDC, BONK, JUP, …) or raw mint address.
- * EVM:    the network's stablecoin only — USDC, or USDT0 on Stable (other
+ * EVM:    the network's stablecoin only - USDC, or USDT0 on Stable (other
  *         ERC-20 addresses can be added to EVM_STABLECOIN as needed).
  */
 import type { Network } from "../types.js";
@@ -17,7 +17,7 @@ export interface SplTokenInfo {
     decimals: number;
     symbol: string;
 }
-/** Well-known Solana SPL tokens — symbol (uppercase) → info. */
+/** Well-known Solana SPL tokens - symbol (uppercase) → info. */
 export declare const SOLANA_TOKENS: Record<string, SplTokenInfo>;
 /** Symbols users can name in CLI / MCP. */
 export declare const KNOWN_SOLANA_SYMBOLS: string[];
@@ -31,7 +31,7 @@ export interface TransferArgs {
     /**
      * Token to transfer.
      * - Solana: symbol ("USDC", "BONK", "JUP", …) or raw mint address.
-     * - EVM: only the network's stablecoin — "USDC", or "USDT0" on Stable.
+     * - EVM: only the network's stablecoin - "USDC", or "USDT0" on Stable.
      * Defaults to the network's stablecoin.
      */
     token?: string;

package/dist/transfer/index.js

@@ -1,17 +1,17 @@
 /**
- * Direct SPL / ERC-20 transfer — no x402, no provider, just send funds.
+ * Direct SPL / ERC-20 transfer - no x402, no provider, just send funds.
  *
  * Goes through the same guardrail as `use()` so a compromised CLI / agent
  * can't drain the wallet past the configured caps.
  *
  * Solana: any SPL token by symbol (USDC, BONK, JUP, …) or raw mint address.
- * EVM:    the network's stablecoin only — USDC, or USDT0 on Stable (other
+ * EVM:    the network's stablecoin only - USDC, or USDT0 on Stable (other
  *         ERC-20 addresses can be added to EVM_STABLECOIN as needed).
  */
 import { Connection, PublicKey, SystemProgram, Transaction, LAMPORTS_PER_SOL, } from "@solana/web3.js";
 import { getMint } from "@solana/spl-token";
 import { magicBlockPrivateTransfer } from "../magicblock/client.js";
-/** Well-known Solana SPL tokens — symbol (uppercase) → info. */
+/** Well-known Solana SPL tokens - symbol (uppercase) → info. */
 export const SOLANA_TOKENS = {
     USDC: { mint: "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v", decimals: 6, symbol: "USDC" },
     USDT: { mint: "Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB", decimals: 6, symbol: "USDT" },
@@ -58,7 +58,7 @@ export async function transfer(args) {
             throw new Error(`transfer: no stablecoin registered for EVM network "${network}"`);
         }
         // Accept the network's own symbol, plus the generic "USDC"/"USDT" the
-        // caller may default to — on Stable they all mean USDT0.
+        // caller may default to - on Stable they all mean USDT0.
         const tokenSymbol = (args.token ?? stablecoin.symbol).toUpperCase();
         const aliases = network === "stable" ? ["USDT0", "USDT", "USDC"] : ["USDC"];
         if (!aliases.includes(tokenSymbol)) {
@@ -83,7 +83,7 @@ export async function transfer(args) {
     if (tokenKey === "SOL") {
         if (args.private) {
             throw new Error(`transfer: native SOL is not supported by MagicBlock PER (SPL tokens only). ` +
-                `Use "wSOL" instead — it goes through the PER and settles as wrapped SOL on the other end.`);
+                `Use "wSOL" instead - it goes through the PER and settles as wrapped SOL on the other end.`);
         }
         return transferNativeSol(args);
     }
@@ -134,7 +134,7 @@ async function transferNativeSol(args) {
     const rpc = process.env.XPAY_SOLANA_RPC ?? "https://solana-mainnet.g.alchemy.com/v2/Ug5mqBVIbSHoa8ZHgTUSJ";
     const connection = new Connection(rpc, "confirmed");
     // Reconstruct keypair from the signer's signMessage so we can sign the tx.
-    // rawSolanaSigner keeps the keypair internally — we access it by signing a
+    // rawSolanaSigner keeps the keypair internally - we access it by signing a
     // known message and rebuilding. Instead, we use a lower-level approach:
     // delegate to signer.pay() with a synthetic SOL "requirement" if it supports
     // it, otherwise build the SystemProgram.transfer tx ourselves.
@@ -173,7 +173,7 @@ async function resolveSolanaToken(token) {
     // Reverse lookup by mint address.
     if (BY_MINT[token])
         return BY_MINT[token];
-    // Looks like a base58 mint address — fetch from chain.
+    // Looks like a base58 mint address - fetch from chain.
     if (/^[1-9A-HJ-NP-Za-km-z]{32,44}$/.test(token)) {
         const rpc = process.env.XPAY_SOLANA_RPC ?? "https://solana-mainnet.g.alchemy.com/v2/Ug5mqBVIbSHoa8ZHgTUSJ";
         try {
@@ -203,7 +203,7 @@ function resolveNetwork(args) {
         // Auto-detect only across networks the profile actually opted into.
         // Robinhood and Stable signers are always registered (see
         // signersFromProfile), so keying off `wallet.has()` alone would make every
-        // EVM transfer ambiguous — reach those two with an explicit --network
+        // EVM transfer ambiguous - reach those two with an explicit --network
         // unless they're in the profile's `networks`.
         const evm = args.wallet.networks.filter((n) => EVM_NETWORKS.includes(n) && args.wallet.has(n));
         if (evm.length === 0)

package/dist/types.d.ts

@@ -8,9 +8,9 @@
 import { z } from "zod";
 /** A network slug. Keep this open-ended so new chains can be added without an SDK release. */
 export type Network = "solana" | "base" | "ethereum" | "arbitrum" | "optimism"
-/** Robinhood Chain (Arbitrum Orbit L2, eip155:4663) — ETH-native. */
+/** Robinhood Chain (Arbitrum Orbit L2, eip155:4663) - ETH-native. */
  | "robinhood"
-/** Stable (eip155:988) — Tether/Bitfinex payments L1, settles USDT0. */
+/** Stable (eip155:988) - Tether/Bitfinex payments L1, settles USDT0. */
  | "stable" | (string & {});
 /**
  * One payment option attached to a {@link Resource}.
@@ -189,7 +189,7 @@ export interface PlatformFeeResult {
     txSig?: string;
     /** Whether the fee was successfully charged. */
     success: boolean;
-    /** Error message if the fee charge failed (non-fatal — the use result is still returned). */
+    /** Error message if the fee charge failed (non-fatal - the use result is still returned). */
     error?: string;
 }
 /** Result returned by {@link XPay.use}. */
@@ -218,7 +218,7 @@ export interface UseResult {
 }
 /** Options passed to {@link XPay.discover}. */
 export interface DiscoverOptions {
-    /** Free-text query — matched against resource URL, metadata, and category. */
+    /** Free-text query - matched against resource URL, metadata, and category. */
     query?: string;
     /** Restrict to specific networks. Defaults to all configured. */
     networks?: Network[];
@@ -246,7 +246,7 @@ export interface Signer {
     address: string;
     /**
      * Sign an arbitrary message (used for x402 payment authorization payloads).
-     * The exact bytes signed depend on the network — see implementations.
+     * The exact bytes signed depend on the network - see implementations.
      */
     signMessage(message: Uint8Array): Promise<Uint8Array>;
     /**
@@ -280,7 +280,7 @@ export interface Signer {
      * Optional (EVM signers): sign an EIP-712 typed-data payload and return the
      * hex signature. When present, `use()` pays eip155 endpoints gaslessly via
      * a signed EIP-3009 `transferWithAuthorization` (the facilitator broadcasts
-     * and covers gas — no native ETH needed); when absent, it falls back to the
+     * and covers gas - no native ETH needed); when absent, it falls back to the
      * legacy `pay()` (broadcasts an ERC-20 transfer, wallet pays its own gas).
      */
     signEvmTypedData?(typedData: {
@@ -295,7 +295,7 @@ export interface Signer {
      * Optional (EVM signers): return the underlying ethers `Wallet` (connected to
      * a provider) so higher-level flows like on-chain DEX trades can read chain
      * state and broadcast arbitrary contract calls (swaps, approvals). Typed
-     * `unknown` to keep ethers out of the core type surface — callers cast it.
+     * `unknown` to keep ethers out of the core type surface - callers cast it.
      * Mirrors {@link Signer.getKitSigner}. Implemented by `rawEvmSigner`.
      */
     getEvmWallet?(): unknown;

package/dist/use/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * Use — call a paid resource, handling x402 payment end-to-end.
+ * Use - call a paid resource, handling x402 payment end-to-end.
  *
  * Two modes:
  *  - **Catalog mode** (`resource` has `accepts[]`): we pick a requirement up
@@ -21,13 +21,13 @@ export interface UseArgs {
     guardrail: Guardrail;
     body?: unknown;
     headers?: Record<string, string>;
-    /** AgenC hire settings (RPC, review window) — used only for AgenC resources. */
+    /** AgenC hire settings (RPC, review window) - used only for AgenC resources. */
     agenc?: AgencHireConfig;
 }
 export declare function use(args: UseArgs): Promise<UseResult>;
 /**
  * Convenience: call any URL with x402 support. Agents can use this when they
- * have a URL but no catalog entry — e.g. crawled from the web.
+ * have a URL but no catalog entry - e.g. crawled from the web.
  */
 export interface UseByUrlArgs {
     url: string;
@@ -40,8 +40,8 @@ export interface UseByUrlArgs {
 export declare function useByUrl(args: UseByUrlArgs): Promise<UseResult>;
 /**
  * Charge the xPay platform fee ($0.01 USDC) via the x402 endpoint.
- * Fires after every successful `use` call (including AgenC hires — exported
- * for the agenc module). Non-fatal — a failure is reported in
+ * Fires after every successful `use` call (including AgenC hires - exported
+ * for the agenc module). Non-fatal - a failure is reported in
  * `platformFee.error` rather than throwing.
  */
 export declare function chargePlatformFee(wallet: Wallet): Promise<PlatformFeeResult>;

package/dist/use/index.js

@@ -1,5 +1,5 @@
 /**
- * Use — call a paid resource, handling x402 payment end-to-end.
+ * Use - call a paid resource, handling x402 payment end-to-end.
  *
  * Two modes:
  *  - **Catalog mode** (`resource` has `accepts[]`): we pick a requirement up
@@ -16,21 +16,21 @@ import { buildSvmPaymentHeader, isSvmNetwork } from "../x402/svm-payment.js";
 import { buildEvmPaymentHeader, hasEvmDomainParams, isEvmNetwork } from "../x402/evm-payment.js";
 import { isAgencResource } from "../agenc/api.js";
 export async function use(args) {
-    // AgenC listings are not HTTP resources — payment is an on-chain escrow
+    // AgenC listings are not HTTP resources - payment is an on-chain escrow
     // hire, so branch before any x402 catalog / live-challenge logic.
     if (isAgencResource(args.resource)) {
         const { useAgencHire } = await import("../agenc/hire.js");
         return useAgencHire(args);
     }
     // If we have accepts up front, pick the network we can actually pay on
-    // (balance-aware) and take the fast path — unless the chosen option is
+    // (balance-aware) and take the fast path - unless the chosen option is
     // missing fields that only a live 402 challenge carries.
     if (args.resource.accepts.length > 0) {
         const req = await args.wallet.pickRequirementByBalance(args.resource.accepts);
         if (req) {
             if (!reqNeedsLiveChallenge(args, req))
                 return useWithRequirements(args, req);
-            // Chosen option needs a live 402 (SVM v2 missing feePayer) — fall through.
+            // Chosen option needs a live 402 (SVM v2 missing feePayer) - fall through.
         }
         else if (args.wallet.pickRequirement(args.resource.accepts)) {
             // We can sign for an option but no payable network has the funds.
@@ -41,7 +41,7 @@ export async function use(args) {
     return useWithLiveChallenge(args);
 }
 /**
- * Catalog entries are snapshots — they carry payTo/asset/amount but not the
+ * Catalog entries are snapshots - they carry payTo/asset/amount but not the
  * per-facilitator settlement fields that only a fresh 402 challenge provides.
  * SVM v2 settlement needs `extra.feePayer` (the facilitator's fee-payer
  * pubkey); gasless EVM settlement needs the asset's EIP-712 domain params
@@ -75,7 +75,7 @@ export async function useByUrl(args) {
     });
 }
 async function useWithRequirements(args, req) {
-    // Guardrail runs *before* signing — this is the security boundary.
+    // Guardrail runs *before* signing - this is the security boundary.
     await args.guardrail.check({ resource: args.resource, requirement: req });
     const settled = await settle(args, req, args.resource.x402Version ?? 1);
     const res = await callResource(args, settled.header);
@@ -87,11 +87,11 @@ async function useWithLiveChallenge(args) {
     // Step 1: probe without payment.
     const probe = await callResource(args, undefined);
     if (probe.res.status !== 402) {
-        // No payment required — return the probe response as-is. (Useful when a
+        // No payment required - return the probe response as-is. (Useful when a
         // resource later becomes free or for sanity checks.)
         return finalize(probe, "unknown", "0");
     }
-    // Step 2: parse the 402 challenge — may live in the body OR a response header.
+    // Step 2: parse the 402 challenge - may live in the body OR a response header.
     const { accepts: reqs } = extractRequirements(probe.res.headers, probe.data);
     if (reqs.length === 0) {
         throw new Error(`xpay.use: ${args.resource.resource} returned 402 but no parseable accepts[] in body or headers`);
@@ -117,13 +117,13 @@ async function useWithLiveChallenge(args) {
  * value plus accounting fields. Picks the right encoding by network:
  *
  *   SVM (solana / solana:*) + signer has getKitSigner →
- *     canonical x402 v2 — sign-but-don't-broadcast, header carries the
+ *     canonical x402 v2 - sign-but-don't-broadcast, header carries the
  *     signed tx, facilitator settles. Returns header only (no txSig until
  *     the upstream call comes back).
  *
  *   EVM (eip155:* / base / ethereum / …) + signer has signEvmTypedData +
  *   requirement carries EIP-712 domain params →
- *     canonical x402 v2 — gasless EIP-3009 transferWithAuthorization
+ *     canonical x402 v2 - gasless EIP-3009 transferWithAuthorization
  *     signature in the header, facilitator broadcasts and pays gas.
  *
  *   Anything else (legacy v1) →
@@ -142,7 +142,7 @@ async function settle(args, req, x402Version) {
         });
         return { header, network };
     }
-    // Gasless EVM v2 — sign an EIP-3009 transferWithAuthorization, facilitator
+    // Gasless EVM v2 - sign an EIP-3009 transferWithAuthorization, facilitator
     // broadcasts and pays gas. Needs the EIP-712 domain params from the 402
     // challenge; catalog snapshots without them were already routed through the
     // live flow by reqNeedsLiveChallenge().
@@ -157,7 +157,7 @@ async function settle(args, req, x402Version) {
         });
         return { header, network };
     }
-    // Legacy path — sign + broadcast on our side, send txSig in the header.
+    // Legacy path - sign + broadcast on our side, send txSig in the header.
     const txSig = await signer.pay(req);
     return { header: paymentHeader(req, txSig, x402Version), network, txSig };
 }
@@ -168,7 +168,7 @@ async function callResource(args, paymentHeader) {
     };
     if (paymentHeader) {
         // Most x402 servers read `X-PAYMENT`; some (e.g. Nansen) read
-        // `Payment-Signature`. The payload is identical, so send both — servers
+        // `Payment-Signature`. The payload is identical, so send both - servers
         // ignore the header name they don't recognise.
         headers["x-payment"] = paymentHeader;
         headers["payment-signature"] = paymentHeader;
@@ -195,7 +195,7 @@ async function callResource(args, paymentHeader) {
 }
 function finalize(raw, network, amountPaid, txSig) {
     if (!raw.res.ok) {
-        throw new Error(`xpay.use: ${raw.res.status} ${raw.res.statusText} — ${typeof raw.data === "string" ? raw.data : JSON.stringify(raw.data)}`);
+        throw new Error(`xpay.use: ${raw.res.status} ${raw.res.statusText} - ${typeof raw.data === "string" ? raw.data : JSON.stringify(raw.data)}`);
     }
     // For SVM v2 calls the facilitator broadcasts and echoes settlement details
     // in the `PAYMENT-RESPONSE` header. If present, prefer its signature over
@@ -233,8 +233,8 @@ const PLATFORM_FEE_URL = "https://api.xona-agent.com/platform-fee";
 const PLATFORM_FEE_AMOUNT = 0.01;
 /**
  * Charge the xPay platform fee ($0.01 USDC) via the x402 endpoint.
- * Fires after every successful `use` call (including AgenC hires — exported
- * for the agenc module). Non-fatal — a failure is reported in
+ * Fires after every successful `use` call (including AgenC hires - exported
+ * for the agenc module). Non-fatal - a failure is reported in
  * `platformFee.error` rather than throwing.
  */
 export async function chargePlatformFee(wallet) {
@@ -262,7 +262,7 @@ export async function chargePlatformFee(wallet) {
         if (!req) {
             return { amount: PLATFORM_FEE_AMOUNT, success: false, error: `platform-fee: wallet has no signer for ${reqs.map(r => r.network).join(", ")}` };
         }
-        // Pay and retry — use a minimal UseArgs stub (no guardrail needed for our own fee).
+        // Pay and retry - use a minimal UseArgs stub (no guardrail needed for our own fee).
         const network = normalizeNetwork(req.network);
         const signer = wallet.signer(network);
         let header;
@@ -302,13 +302,13 @@ export async function chargePlatformFee(wallet) {
 /**
  * Build a clear "you can't afford this" error listing the USDC balance on each
  * network the wallet could have paid on. Raised only when every payable option
- * is underfunded — better than attempting a doomed payment and surfacing a raw
+ * is underfunded - better than attempting a doomed payment and surfacing a raw
  * 402 from the upstream provider.
  */
 async function insufficientBalanceError(reqs, wallet) {
     const nets = [...new Set(reqs.map((r) => normalizeNetwork(r.network)).filter((n) => wallet.has(n)))];
     const parts = await Promise.all(nets.map(async (n) => `${n} $${(await wallet.balance(n).catch(() => 0)).toFixed(2)}`));
-    return new Error(`xpay.use: insufficient USDC balance to pay on any funded network — ${parts.join(", ")}. ` +
+    return new Error(`xpay.use: insufficient USDC balance to pay on any funded network - ${parts.join(", ")}. ` +
         `Fund one of these and retry.`);
 }
 function normalizeNetwork(raw) {
@@ -324,7 +324,7 @@ function normalizeNetwork(raw) {
         return "robinhood";
     if (raw === "eip155:988")
         return "stable";
-    // Solana CAIP — any `solana:<genesis>` form collapses to our "solana" slug.
+    // Solana CAIP - any `solana:<genesis>` form collapses to our "solana" slug.
     if (raw === "solana" || raw.startsWith("solana:") || raw.startsWith("solana-"))
         return "solana";
     return raw;

package/dist/wallet/index.d.ts

@@ -1,7 +1,7 @@
 /**
  * Multi-network wallet. Thin facade over per-network {@link Signer}s.
  *
- * The wallet doesn't hold keys — signers do. This module just exposes a
+ * The wallet doesn't hold keys - signers do. This module just exposes a
  * unified view (addresses, balances) and lets callers pick which network to
  * use for a given payment.
  */
@@ -28,7 +28,7 @@ export interface Wallet {
     pickRequirement(reqs: PaymentRequirement[]): PaymentRequirement | undefined;
     /**
      * Balance-aware picker. Among requirements we have a signer for, prefer the
-     * first (in listed order) whose wallet balance covers the cost — so a $0
+     * first (in listed order) whose wallet balance covers the cost - so a $0
      * Base wallet falls through to a funded Solana one. When there are multiple
      * payable networks but none can cover the cost, returns `undefined` so the
      * caller can raise a clear "insufficient balance" error instead of attempting

package/dist/wallet/index.js

@@ -1,7 +1,7 @@
 /**
  * Multi-network wallet. Thin facade over per-network {@link Signer}s.
  *
- * The wallet doesn't hold keys — signers do. This module just exposes a
+ * The wallet doesn't hold keys - signers do. This module just exposes a
  * unified view (addresses, balances) and lets callers pick which network to
  * use for a given payment.
  */
@@ -18,7 +18,7 @@ export function createWallet(opts) {
     function matchNetwork(raw) {
         if (signers[raw])
             return raw;
-        // Solana CAIP — `solana:<genesis-hash>` (mainnet/devnet/testnet) → "solana".
+        // Solana CAIP - `solana:<genesis-hash>` (mainnet/devnet/testnet) → "solana".
         if ((raw === "solana" || raw.startsWith("solana:") || raw.startsWith("solana-")) && signers["solana"]) {
             return "solana";
         }
@@ -71,7 +71,7 @@ export function createWallet(opts) {
                 return candidates[0];
             // Multiple payable networks: read each balance in parallel and pick the
             // first (listed order) that covers the cost. Compare assumes USDC
-            // (6 decimals) — the asset for virtually all x402 calls.
+            // (6 decimals) - the asset for virtually all x402 calls.
             const scored = await Promise.all(candidates.map(async (req) => {
                 const net = matchNetwork(req.network);
                 const bal = await balanceOf(net);

package/dist/x402/evm-payment.d.ts

@@ -3,7 +3,7 @@
  *
  * Spec flow (`exact` scheme on eip155 networks):
  *   client signs an EIP-3009 `TransferWithAuthorization` typed-data payload
- *   (an off-chain signature — USDC supports it natively) → header carries
+ *   (an off-chain signature - USDC supports it natively) → header carries
  *   the authorization + signature → facilitator submits the transfer
  *   on-chain and pays the gas.
  *
@@ -19,7 +19,7 @@ import type { PaymentRequirement } from "../types.js";
 export interface BuildEvmPaymentArgs {
     /** Payer address (the EVM signer's wallet address). */
     address: string;
-    /** EIP-712 typed-data signer — from `signer.signEvmTypedData`. */
+    /** EIP-712 typed-data signer - from `signer.signEvmTypedData`. */
     signTypedData: (typedData: {
         domain: Record<string, unknown>;
         types: Record<string, Array<{
@@ -39,12 +39,12 @@ export declare function isEvmNetwork(network: string): boolean;
 /**
  * True when this requirement carries the EIP-712 domain params (`extra.name`
  * + `extra.version`) the gasless signature needs. Catalog snapshots usually
- * strip `extra` — a fresh 402 challenge always has it.
+ * strip `extra` - a fresh 402 challenge always has it.
  */
 export declare function hasEvmDomainParams(req: PaymentRequirement): boolean;
 /**
  * Returns the value of the `X-Payment` header (base64 of canonical JSON
- * envelope), ready to attach to the retry request. Nothing is broadcast —
+ * envelope), ready to attach to the retry request. Nothing is broadcast -
  * the facilitator settles server-side.
  */
 export declare function buildEvmPaymentHeader(args: BuildEvmPaymentArgs): Promise<string>;

package/dist/x402/evm-payment.js

@@ -3,7 +3,7 @@
  *
  * Spec flow (`exact` scheme on eip155 networks):
  *   client signs an EIP-3009 `TransferWithAuthorization` typed-data payload
- *   (an off-chain signature — USDC supports it natively) → header carries
+ *   (an off-chain signature - USDC supports it natively) → header carries
  *   the authorization + signature → facilitator submits the transfer
  *   on-chain and pays the gas.
  *
@@ -54,29 +54,29 @@ export function isEvmNetwork(network) {
 /**
  * True when this requirement carries the EIP-712 domain params (`extra.name`
  * + `extra.version`) the gasless signature needs. Catalog snapshots usually
- * strip `extra` — a fresh 402 challenge always has it.
+ * strip `extra` - a fresh 402 challenge always has it.
  */
 export function hasEvmDomainParams(req) {
     return Boolean(req.extra?.name && req.extra?.version);
 }
 /**
  * Returns the value of the `X-Payment` header (base64 of canonical JSON
- * envelope), ready to attach to the retry request. Nothing is broadcast —
+ * envelope), ready to attach to the retry request. Nothing is broadcast -
  * the facilitator settles server-side.
  */
 export async function buildEvmPaymentHeader(args) {
     const req = args.requirement;
-    // The EIP-3009 payload shape only exists in x402 v2 — never emit a v1
+    // The EIP-3009 payload shape only exists in x402 v2 - never emit a v1
     // envelope here (v1 catalog entries without a version reach us as 1).
     const version = Math.max(args.x402Version ?? 2, 2);
     if (!hasEvmDomainParams(req)) {
-        throw new Error(`buildEvmPaymentHeader: EIP-712 domain params (extra.name/extra.version) missing for asset ${req.asset} — re-fetch the live 402 challenge`);
+        throw new Error(`buildEvmPaymentHeader: EIP-712 domain params (extra.name/extra.version) missing for asset ${req.asset} - re-fetch the live 402 challenge`);
     }
     const now = Math.floor(Date.now() / 1000);
     const nonceBytes = globalThis.crypto.getRandomValues(new Uint8Array(32));
     const nonce = "0x" + Buffer.from(nonceBytes).toString("hex");
     // Authorization values travel as decimal strings in the header payload but
-    // are signed as uint256 — same split @x402/evm's client makes.
+    // are signed as uint256 - same split @x402/evm's client makes.
     const authorization = {
         from: args.address,
         to: req.payTo,

package/dist/x402/extract.d.ts

@@ -9,7 +9,7 @@
  *             envelope, or a SINGLE bare requirement object
  *   encoding: raw JSON, base64-JSON, url-encoded JSON, or "<scheme> <payload>"
  *   fields:   PayAI uses `amount`/`payTo`; the x402 spec uses
- *             `maxAmountRequired`/`payTo`; others use `recipient`/`token` —
+ *             `maxAmountRequired`/`payTo`; others use `recipient`/`token` -
  *             we alias them all into our PaymentRequirement.
  *
  * Shared by `probe()` and `useByUrl()`.

package/dist/x402/extract.js

@@ -9,7 +9,7 @@
  *             envelope, or a SINGLE bare requirement object
  *   encoding: raw JSON, base64-JSON, url-encoded JSON, or "<scheme> <payload>"
  *   fields:   PayAI uses `amount`/`payTo`; the x402 spec uses
- *             `maxAmountRequired`/`payTo`; others use `recipient`/`token` —
+ *             `maxAmountRequired`/`payTo`; others use `recipient`/`token` -
  *             we alias them all into our PaymentRequirement.
  *
  * Shared by `probe()` and `useByUrl()`.

package/dist/x402/svm-payment.d.ts

@@ -8,14 +8,14 @@
  * This is the path xPay 0.1.4+ takes for Solana endpoints reporting
  * `x402Version >= 2` (CAIP networks like `solana:5eykt4…`). Legacy 0.1.x
  * sent a sign-and-broadcast `txSig` header which is *not* what the
- * canonical x402 servers expect — your endpoint would 4xx on the retry.
+ * canonical x402 servers expect - your endpoint would 4xx on the retry.
  *
  * Inputs (the `PaymentRequirement` xPay parsed from the 402 challenge) are
  * normalized into `@x402/core/types`'s `PaymentRequirements` shape.
  */
 import type { PaymentRequirement } from "../types.js";
 export interface BuildSvmPaymentArgs {
-    /** A `@solana/kit` TransactionSigner — from `signer.getKitSigner()`. */
+    /** A `@solana/kit` TransactionSigner - from `signer.getKitSigner()`. */
     kitSigner: unknown;
     /** What the server's 402 told us we owe. */
     requirement: PaymentRequirement;

package/dist/x402/svm-payment.js

@@ -8,7 +8,7 @@
  * This is the path xPay 0.1.4+ takes for Solana endpoints reporting
  * `x402Version >= 2` (CAIP networks like `solana:5eykt4…`). Legacy 0.1.x
  * sent a sign-and-broadcast `txSig` header which is *not* what the
- * canonical x402 servers expect — your endpoint would 4xx on the retry.
+ * canonical x402 servers expect - your endpoint would 4xx on the retry.
  *
  * Inputs (the `PaymentRequirement` xPay parsed from the 402 challenge) are
  * normalized into `@x402/core/types`'s `PaymentRequirements` shape.
@@ -43,7 +43,7 @@ export async function buildSvmPaymentHeader(args) {
     // partial = { x402Version, payload: { transaction: <base64 signed tx> } }
     // Assemble the FULL canonical PaymentPayloadV2 envelope:
     //   { x402Version, accepted: <the requirement we're paying>, payload }
-    // The `accepted` field is REQUIRED in v2 — it tells the facilitator which
+    // The `accepted` field is REQUIRED in v2 - it tells the facilitator which
     // of its advertised `accepts[]` items we picked. (Loose top-level
     // scheme/network is v1; v2 nests them inside `accepted`.)
     const envelope = {

package/dist/zauth/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * zauth partner integration — repository security scans behind zauth's
+ * zauth partner integration - repository security scans behind zauth's
  * x402-paywalled endpoint. The scan POST is paid (normal x402 flow); results
  * are polled from an unpaid status URL keyed by sessionToken. A repo that
  * zauth has scanned recently may return its cached report on the POST
@@ -13,7 +13,7 @@ export interface ScanPending {
 }
 /**
  * Kickoff response from the paid POST: `{ status, scanId, sessionToken }`.
- * Only this response carries the sessionToken (a ~1h JWT) — poll responses
+ * Only this response carries the sessionToken (a ~1h JWT) - poll responses
  * echo just `{ status, scanId, progress }`, so callers must hold on to the
  * token themselves.
  */
@@ -23,7 +23,7 @@ export declare function isScanning(data: unknown): boolean;
 /** One unpaid GET against the scan-status endpoint. */
 export declare function fetchScanStatus(sessionToken: string): Promise<unknown>;
 /**
- * Completed reports embed every provenance match with full file contents —
+ * Completed reports embed every provenance match with full file contents -
  * tens of KB the caller rarely needs (analysisMarkdown already summarizes
  * them). Swap the array for a count; use the raw payload when full detail
  * matters (CLI --json).
@@ -38,7 +38,7 @@ export interface PollOptions {
 /**
  * Poll the unpaid status endpoint until the scan leaves "scanning" or the
  * timeout elapses. On timeout the last payload (still pending) is returned
- * rather than throwing — callers surface the sessionToken for a later check.
+ * rather than throwing - callers surface the sessionToken for a later check.
  */
 export declare function pollRepoScan(sessionToken: string, opts?: PollOptions): Promise<unknown>;
 //# sourceMappingURL=index.d.ts.map

package/dist/zauth/index.js

@@ -1,5 +1,5 @@
 /**
- * zauth partner integration — repository security scans behind zauth's
+ * zauth partner integration - repository security scans behind zauth's
  * x402-paywalled endpoint. The scan POST is paid (normal x402 flow); results
  * are polled from an unpaid status URL keyed by sessionToken. A repo that
  * zauth has scanned recently may return its cached report on the POST
@@ -8,7 +8,7 @@
 export const ZAUTH_BASE = process.env.XPAY_ZAUTH_ENDPOINT ?? "https://api.zauth.inc";
 /**
  * Kickoff response from the paid POST: `{ status, scanId, sessionToken }`.
- * Only this response carries the sessionToken (a ~1h JWT) — poll responses
+ * Only this response carries the sessionToken (a ~1h JWT) - poll responses
  * echo just `{ status, scanId, progress }`, so callers must hold on to the
  * token themselves.
  */
@@ -26,7 +26,7 @@ export async function fetchScanStatus(sessionToken) {
     // The kickoff response carries both a short scanId and a JWT sessionToken;
     // only the JWT works here. Catch the mixup before it becomes an opaque 401.
     if (!sessionToken.includes(".")) {
-        throw new Error(`zauth: "${sessionToken}" looks like a scanId — pass the sessionToken (the long JWT from the scan kickoff) instead`);
+        throw new Error(`zauth: "${sessionToken}" looks like a scanId - pass the sessionToken (the long JWT from the scan kickoff) instead`);
     }
     const res = await fetch(`${ZAUTH_BASE}/x402/reposcan/${encodeURIComponent(sessionToken)}`);
     const text = await res.text();
@@ -46,7 +46,7 @@ export async function fetchScanStatus(sessionToken) {
     return data;
 }
 /**
- * Completed reports embed every provenance match with full file contents —
+ * Completed reports embed every provenance match with full file contents -
  * tens of KB the caller rarely needs (analysisMarkdown already summarizes
  * them). Swap the array for a count; use the raw payload when full detail
  * matters (CLI --json).
@@ -62,7 +62,7 @@ export function compactScanReport(data) {
 /**
  * Poll the unpaid status endpoint until the scan leaves "scanning" or the
  * timeout elapses. On timeout the last payload (still pending) is returned
- * rather than throwing — callers surface the sessionToken for a later check.
+ * rather than throwing - callers surface the sessionToken for a later check.
  */
 export async function pollRepoScan(sessionToken, opts = {}) {
     const timeoutMs = opts.timeoutMs ?? 90_000;

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@xona-labs/xpay",
-  "version": "0.2.24",
+  "version": "0.2.25",
   "mcpName": "io.github.xona-labs/xpay",
-  "description": "Discovery and usage layer for agentic commerce — multi-network wallet, x402 payments, AgenC marketplace hires, 20k+ services via PayAI and other catalogs",
+  "description": "Xona Wallet: agent wallet and payment rail for agentic commerce. Multi-network wallet, x402 payments, AgenC marketplace hires, 20k+ services via PayAI and other catalogs",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -27,8 +27,9 @@
     "type": "git",
     "url": "https://github.com/xona-labs/xpay"
   },
-  "homepage": "https://xpay.xona-agent.com",
+  "homepage": "https://wallet.xona-agent.com",
   "keywords": [
+    "xona-wallet",
     "x402",
     "agentic-commerce",
     "agenc",