@xona-labs/xpay 0.2.24 → 0.2.26

package/dist/x402/evm-payment.d.ts

@@ -3,7 +3,7 @@
  *
  * Spec flow (`exact` scheme on eip155 networks):
  *   client signs an EIP-3009 `TransferWithAuthorization` typed-data payload
- *   (an off-chain signature — USDC supports it natively) → header carries
+ *   (an off-chain signature - USDC supports it natively) → header carries
  *   the authorization + signature → facilitator submits the transfer
  *   on-chain and pays the gas.
  *
@@ -19,7 +19,7 @@ import type { PaymentRequirement } from "../types.js";
 export interface BuildEvmPaymentArgs {
     /** Payer address (the EVM signer's wallet address). */
     address: string;
-    /** EIP-712 typed-data signer — from `signer.signEvmTypedData`. */
+    /** EIP-712 typed-data signer - from `signer.signEvmTypedData`. */
     signTypedData: (typedData: {
         domain: Record<string, unknown>;
         types: Record<string, Array<{
@@ -39,12 +39,12 @@ export declare function isEvmNetwork(network: string): boolean;
 /**
  * True when this requirement carries the EIP-712 domain params (`extra.name`
  * + `extra.version`) the gasless signature needs. Catalog snapshots usually
- * strip `extra` — a fresh 402 challenge always has it.
+ * strip `extra` - a fresh 402 challenge always has it.
  */
 export declare function hasEvmDomainParams(req: PaymentRequirement): boolean;
 /**
  * Returns the value of the `X-Payment` header (base64 of canonical JSON
- * envelope), ready to attach to the retry request. Nothing is broadcast —
+ * envelope), ready to attach to the retry request. Nothing is broadcast -
  * the facilitator settles server-side.
  */
 export declare function buildEvmPaymentHeader(args: BuildEvmPaymentArgs): Promise<string>;

package/dist/x402/evm-payment.js

@@ -3,7 +3,7 @@
  *
  * Spec flow (`exact` scheme on eip155 networks):
  *   client signs an EIP-3009 `TransferWithAuthorization` typed-data payload
- *   (an off-chain signature — USDC supports it natively) → header carries
+ *   (an off-chain signature - USDC supports it natively) → header carries
  *   the authorization + signature → facilitator submits the transfer
  *   on-chain and pays the gas.
  *
@@ -54,29 +54,29 @@ export function isEvmNetwork(network) {
 /**
  * True when this requirement carries the EIP-712 domain params (`extra.name`
  * + `extra.version`) the gasless signature needs. Catalog snapshots usually
- * strip `extra` — a fresh 402 challenge always has it.
+ * strip `extra` - a fresh 402 challenge always has it.
  */
 export function hasEvmDomainParams(req) {
     return Boolean(req.extra?.name && req.extra?.version);
 }
 /**
  * Returns the value of the `X-Payment` header (base64 of canonical JSON
- * envelope), ready to attach to the retry request. Nothing is broadcast —
+ * envelope), ready to attach to the retry request. Nothing is broadcast -
  * the facilitator settles server-side.
  */
 export async function buildEvmPaymentHeader(args) {
     const req = args.requirement;
-    // The EIP-3009 payload shape only exists in x402 v2 — never emit a v1
+    // The EIP-3009 payload shape only exists in x402 v2 - never emit a v1
     // envelope here (v1 catalog entries without a version reach us as 1).
     const version = Math.max(args.x402Version ?? 2, 2);
     if (!hasEvmDomainParams(req)) {
-        throw new Error(`buildEvmPaymentHeader: EIP-712 domain params (extra.name/extra.version) missing for asset ${req.asset} — re-fetch the live 402 challenge`);
+        throw new Error(`buildEvmPaymentHeader: EIP-712 domain params (extra.name/extra.version) missing for asset ${req.asset} - re-fetch the live 402 challenge`);
     }
     const now = Math.floor(Date.now() / 1000);
     const nonceBytes = globalThis.crypto.getRandomValues(new Uint8Array(32));
     const nonce = "0x" + Buffer.from(nonceBytes).toString("hex");
     // Authorization values travel as decimal strings in the header payload but
-    // are signed as uint256 — same split @x402/evm's client makes.
+    // are signed as uint256 - same split @x402/evm's client makes.
     const authorization = {
         from: args.address,
         to: req.payTo,

package/dist/x402/extract.d.ts

@@ -9,7 +9,7 @@
  *             envelope, or a SINGLE bare requirement object
  *   encoding: raw JSON, base64-JSON, url-encoded JSON, or "<scheme> <payload>"
  *   fields:   PayAI uses `amount`/`payTo`; the x402 spec uses
- *             `maxAmountRequired`/`payTo`; others use `recipient`/`token` —
+ *             `maxAmountRequired`/`payTo`; others use `recipient`/`token` -
  *             we alias them all into our PaymentRequirement.
  *
  * Shared by `probe()` and `useByUrl()`.

package/dist/x402/extract.js

@@ -9,7 +9,7 @@
  *             envelope, or a SINGLE bare requirement object
  *   encoding: raw JSON, base64-JSON, url-encoded JSON, or "<scheme> <payload>"
  *   fields:   PayAI uses `amount`/`payTo`; the x402 spec uses
- *             `maxAmountRequired`/`payTo`; others use `recipient`/`token` —
+ *             `maxAmountRequired`/`payTo`; others use `recipient`/`token` -
  *             we alias them all into our PaymentRequirement.
  *
  * Shared by `probe()` and `useByUrl()`.

package/dist/x402/svm-payment.d.ts

@@ -8,14 +8,14 @@
  * This is the path xPay 0.1.4+ takes for Solana endpoints reporting
  * `x402Version >= 2` (CAIP networks like `solana:5eykt4…`). Legacy 0.1.x
  * sent a sign-and-broadcast `txSig` header which is *not* what the
- * canonical x402 servers expect — your endpoint would 4xx on the retry.
+ * canonical x402 servers expect - your endpoint would 4xx on the retry.
  *
  * Inputs (the `PaymentRequirement` xPay parsed from the 402 challenge) are
  * normalized into `@x402/core/types`'s `PaymentRequirements` shape.
  */
 import type { PaymentRequirement } from "../types.js";
 export interface BuildSvmPaymentArgs {
-    /** A `@solana/kit` TransactionSigner — from `signer.getKitSigner()`. */
+    /** A `@solana/kit` TransactionSigner - from `signer.getKitSigner()`. */
     kitSigner: unknown;
     /** What the server's 402 told us we owe. */
     requirement: PaymentRequirement;

package/dist/x402/svm-payment.js

@@ -8,7 +8,7 @@
  * This is the path xPay 0.1.4+ takes for Solana endpoints reporting
  * `x402Version >= 2` (CAIP networks like `solana:5eykt4…`). Legacy 0.1.x
  * sent a sign-and-broadcast `txSig` header which is *not* what the
- * canonical x402 servers expect — your endpoint would 4xx on the retry.
+ * canonical x402 servers expect - your endpoint would 4xx on the retry.
  *
  * Inputs (the `PaymentRequirement` xPay parsed from the 402 challenge) are
  * normalized into `@x402/core/types`'s `PaymentRequirements` shape.
@@ -43,7 +43,7 @@ export async function buildSvmPaymentHeader(args) {
     // partial = { x402Version, payload: { transaction: <base64 signed tx> } }
     // Assemble the FULL canonical PaymentPayloadV2 envelope:
     //   { x402Version, accepted: <the requirement we're paying>, payload }
-    // The `accepted` field is REQUIRED in v2 — it tells the facilitator which
+    // The `accepted` field is REQUIRED in v2 - it tells the facilitator which
     // of its advertised `accepts[]` items we picked. (Loose top-level
     // scheme/network is v1; v2 nests them inside `accepted`.)
     const envelope = {

package/dist/zauth/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * zauth partner integration — repository security scans behind zauth's
+ * zauth partner integration - repository security scans behind zauth's
  * x402-paywalled endpoint. The scan POST is paid (normal x402 flow); results
  * are polled from an unpaid status URL keyed by sessionToken. A repo that
  * zauth has scanned recently may return its cached report on the POST
@@ -13,7 +13,7 @@ export interface ScanPending {
 }
 /**
  * Kickoff response from the paid POST: `{ status, scanId, sessionToken }`.
- * Only this response carries the sessionToken (a ~1h JWT) — poll responses
+ * Only this response carries the sessionToken (a ~1h JWT) - poll responses
  * echo just `{ status, scanId, progress }`, so callers must hold on to the
  * token themselves.
  */
@@ -23,7 +23,7 @@ export declare function isScanning(data: unknown): boolean;
 /** One unpaid GET against the scan-status endpoint. */
 export declare function fetchScanStatus(sessionToken: string): Promise<unknown>;
 /**
- * Completed reports embed every provenance match with full file contents —
+ * Completed reports embed every provenance match with full file contents -
  * tens of KB the caller rarely needs (analysisMarkdown already summarizes
  * them). Swap the array for a count; use the raw payload when full detail
  * matters (CLI --json).
@@ -38,7 +38,7 @@ export interface PollOptions {
 /**
  * Poll the unpaid status endpoint until the scan leaves "scanning" or the
  * timeout elapses. On timeout the last payload (still pending) is returned
- * rather than throwing — callers surface the sessionToken for a later check.
+ * rather than throwing - callers surface the sessionToken for a later check.
  */
 export declare function pollRepoScan(sessionToken: string, opts?: PollOptions): Promise<unknown>;
 //# sourceMappingURL=index.d.ts.map

package/dist/zauth/index.js

@@ -1,5 +1,5 @@
 /**
- * zauth partner integration — repository security scans behind zauth's
+ * zauth partner integration - repository security scans behind zauth's
  * x402-paywalled endpoint. The scan POST is paid (normal x402 flow); results
  * are polled from an unpaid status URL keyed by sessionToken. A repo that
  * zauth has scanned recently may return its cached report on the POST
@@ -8,7 +8,7 @@
 export const ZAUTH_BASE = process.env.XPAY_ZAUTH_ENDPOINT ?? "https://api.zauth.inc";
 /**
  * Kickoff response from the paid POST: `{ status, scanId, sessionToken }`.
- * Only this response carries the sessionToken (a ~1h JWT) — poll responses
+ * Only this response carries the sessionToken (a ~1h JWT) - poll responses
  * echo just `{ status, scanId, progress }`, so callers must hold on to the
  * token themselves.
  */
@@ -26,7 +26,7 @@ export async function fetchScanStatus(sessionToken) {
     // The kickoff response carries both a short scanId and a JWT sessionToken;
     // only the JWT works here. Catch the mixup before it becomes an opaque 401.
     if (!sessionToken.includes(".")) {
-        throw new Error(`zauth: "${sessionToken}" looks like a scanId — pass the sessionToken (the long JWT from the scan kickoff) instead`);
+        throw new Error(`zauth: "${sessionToken}" looks like a scanId - pass the sessionToken (the long JWT from the scan kickoff) instead`);
     }
     const res = await fetch(`${ZAUTH_BASE}/x402/reposcan/${encodeURIComponent(sessionToken)}`);
     const text = await res.text();
@@ -46,7 +46,7 @@ export async function fetchScanStatus(sessionToken) {
     return data;
 }
 /**
- * Completed reports embed every provenance match with full file contents —
+ * Completed reports embed every provenance match with full file contents -
  * tens of KB the caller rarely needs (analysisMarkdown already summarizes
  * them). Swap the array for a count; use the raw payload when full detail
  * matters (CLI --json).
@@ -62,7 +62,7 @@ export function compactScanReport(data) {
 /**
  * Poll the unpaid status endpoint until the scan leaves "scanning" or the
  * timeout elapses. On timeout the last payload (still pending) is returned
- * rather than throwing — callers surface the sessionToken for a later check.
+ * rather than throwing - callers surface the sessionToken for a later check.
  */
 export async function pollRepoScan(sessionToken, opts = {}) {
     const timeoutMs = opts.timeoutMs ?? 90_000;

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@xona-labs/xpay",
-  "version": "0.2.24",
+  "version": "0.2.26",
   "mcpName": "io.github.xona-labs/xpay",
-  "description": "Discovery and usage layer for agentic commerce — multi-network wallet, x402 payments, AgenC marketplace hires, 20k+ services via PayAI and other catalogs",
+  "description": "Xona Wallet: agent wallet and payment rail for agentic commerce. Multi-network wallet, x402 payments, AgenC marketplace hires, 20k+ services via PayAI and other catalogs",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -27,8 +27,9 @@
     "type": "git",
     "url": "https://github.com/xona-labs/xpay"
   },
-  "homepage": "https://xpay.xona-agent.com",
+  "homepage": "https://wallet.xona-agent.com",
   "keywords": [
+    "xona-wallet",
     "x402",
     "agentic-commerce",
     "agenc",