cspr402 0.4.7

package/dist/soroban.d.ts

@@ -0,0 +1,92 @@
+import { rpc, xdr, type Transaction } from '@stellar/stellar-sdk';
+export declare function getSorobanRpcUrl(networkPassphrase: string): string;
+export declare function getHorizonUrl(networkPassphrase?: string): string;
+/**
+ * Convert a decimal string like "10.00" or "1.2345678" to a 7-decimal i128
+ * bigint (stroops / micro-USDC). Rejects inputs with >7 fractional digits.
+ */
+export declare function decimalToStroops(decimal: string): bigint;
+/**
+ * Thrown when Soroban rejects a transaction because the offered fee was
+ * too low. `requiredFee` is the minimum the network demanded (in stroops),
+ * taken directly from the error response — callers should use it as the
+ * floor when rebuilding the transaction.
+ */
+export declare class InsufficientFeeError extends Error {
+    requiredFee: string;
+    constructor(requiredFee: string);
+}
+export type PaymentFn = 'pay_usdc' | 'pay_xlm';
+export interface BuildContractTxOpts {
+    contractId: string;
+    fn: PaymentFn;
+    fromPublicKey: string;
+    amountStroops: bigint;
+    orderId: string;
+    networkPassphrase: string;
+    rpcUrl?: string;
+    /**
+     * Force the built tx to use this exact sequence number instead of
+     * whatever Soroban RPC reports as the account's current sequence.
+     *
+     * Used by payViaContractOWS's retry loop to guarantee mutual
+     * exclusion with a prior failed submit. If the original tx ends
+     * up landing (e.g. it was accepted by the network despite the
+     * client-side 120s deadline expiring), the retry — which shares
+     * the same sequence — will fail with `tx_bad_seq` rather than
+     * landing as a second payment. That gives us a free double-pay
+     * safety property: at most one of the two attempts can ever
+     * credit the order.
+     *
+     * Pass the sequence number that should appear in the built tx
+     * (i.e. the post-bump value captured from a prior Transaction's
+     * `.sequence` field). The builder internally converts that into
+     * a pre-bump Account so the TransactionBuilder's
+     * incrementSequenceNumber() call lands on exactly this value.
+     */
+    preservedSequence?: string;
+    /**
+     * Override the fee (stroops). Defaults to BASE_FEE. Set this to the
+     * `requiredFee` from an InsufficientFeeError to retry with the fee
+     * floor the network actually demanded.
+     */
+    fee?: string;
+}
+/**
+ * Build a Soroban transaction that invokes the receiver contract's pay_usdc
+ * or pay_xlm function. Returns an unsigned, simulation-prepared Transaction
+ * ready for the caller to sign (either via keypair or OWS) and submit.
+ */
+export declare function buildContractPaymentTx(opts: BuildContractTxOpts): Promise<{
+    tx: Transaction;
+    server: rpc.Server;
+}>;
+/**
+ * Submit a signed Soroban transaction and poll until it reaches a terminal
+ * status. Returns the transaction hash on success.
+ *
+ * Important: a successful return only guarantees the tx has been accepted
+ * onto the ledger. The cards402 backend's contract watcher is the source
+ * of truth for "the order has been credited" — the SDK's purchaseCardOWS
+ * always follows up with waitForCard against the order id, so even if
+ * this function gives up before finalization, the watcher still has a
+ * chance to credit the order if the tx eventually lands.
+ */
+export declare function submitSorobanTx(tx: Transaction, server: rpc.Server, horizonUrl?: string): Promise<string>;
+/**
+ * Decide which contract function + asset amount to use based on the
+ * PaymentInstructions returned from POST /v1/orders.
+ */
+export declare function selectContractCall(payment: {
+    usdc: {
+        amount: string;
+    };
+    xlm?: {
+        amount: string;
+    };
+}, paymentAsset: 'usdc' | 'xlm'): {
+    fn: PaymentFn;
+    amountDecimal: string;
+};
+export { xdr };
+//# sourceMappingURL=soroban.d.ts.map

package/dist/soroban.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"soroban.d.ts","sourceRoot":"","sources":["../src/soroban.ts"],"names":[],"mappings":"AAKA,OAAO,EAQL,GAAG,EACH,GAAG,EACH,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAC;AAO9B,wBAAgB,gBAAgB,CAAC,iBAAiB,EAAE,MAAM,GAAG,MAAM,CAElE;AAOD,wBAAgB,aAAa,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAqBxD;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,WAAW,EAAE,MAAM,CAAC;gBACR,WAAW,EAAE,MAAM;CAIhC;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,SAAS,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;;;;;;;;OAkBG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC;IAAE,EAAE,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAA;CAAE,CAAC,CAkClD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,GAAG,CAAC,MAAM,EAMlB,UAAU,GAAE,MAAwB,GACnC,OAAO,CAAC,MAAM,CAAC,CAoMjB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE;IAAE,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,GAAG,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EAC/D,YAAY,EAAE,MAAM,GAAG,KAAK,GAC3B;IAAE,EAAE,EAAE,SAAS,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAQ1C;AAID,OAAO,EAAE,GAAG,EAAE,CAAC"}

package/dist/soroban.js

@@ -0,0 +1,313 @@
+"use strict";
+// Soroban contract payment helpers — shared by raw-keypair (stellar.ts) and
+// OWS-wallet (ows.ts) payment paths. The receiver contract's pay_usdc/pay_xlm
+// functions take (from: Address, amount: i128, order_id: Bytes) and emit a
+// payment event that the cards402 backend watcher indexes.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.xdr = exports.InsufficientFeeError = void 0;
+exports.getSorobanRpcUrl = getSorobanRpcUrl;
+exports.getHorizonUrl = getHorizonUrl;
+exports.decimalToStroops = decimalToStroops;
+exports.buildContractPaymentTx = buildContractPaymentTx;
+exports.submitSorobanTx = submitSorobanTx;
+exports.selectContractCall = selectContractCall;
+const stellar_sdk_1 = require("@stellar/stellar-sdk");
+Object.defineProperty(exports, "xdr", { enumerable: true, get: function () { return stellar_sdk_1.xdr; } });
+const MAINNET_RPC = 'https://mainnet.sorobanrpc.com';
+const TESTNET_RPC = 'https://soroban-testnet.stellar.org';
+const MAINNET_HORIZON = 'https://horizon.stellar.org';
+const TESTNET_HORIZON = 'https://horizon-testnet.stellar.org';
+function getSorobanRpcUrl(networkPassphrase) {
+    return networkPassphrase === stellar_sdk_1.Networks.TESTNET ? TESTNET_RPC : MAINNET_RPC;
+}
+// F3-soroban (2026-04-16): network-aware Horizon URL. Pre-fix, every
+// Horizon fallback in submitSorobanTx was hardcoded to mainnet.
+// Testnet agents got 404s from mainnet Horizon for their testnet txs,
+// which the SDK interpreted as "tx never applied" with `dropped: true`
+// — triggering the retry loop and risking a double-payment.
+function getHorizonUrl(networkPassphrase) {
+    return networkPassphrase === stellar_sdk_1.Networks.TESTNET ? TESTNET_HORIZON : MAINNET_HORIZON;
+}
+/**
+ * Convert a decimal string like "10.00" or "1.2345678" to a 7-decimal i128
+ * bigint (stroops / micro-USDC). Rejects inputs with >7 fractional digits.
+ */
+function decimalToStroops(decimal) {
+    if (!/^\d+(\.\d+)?$/.test(decimal)) {
+        throw new Error(`Invalid decimal amount: ${decimal}`);
+    }
+    const parts = decimal.split('.');
+    const whole = parts[0] ?? '0';
+    const frac = parts[1] ?? '';
+    if (frac.length > 7) {
+        throw new Error(`Amount has more than 7 decimal places: ${decimal}`);
+    }
+    const padded = frac.padEnd(7, '0');
+    const stroops = BigInt(whole) * 10000000n + BigInt(padded || '0');
+    // F1-soroban (2026-04-16): reject zero amounts early. A pay_usdc(0)
+    // or pay_xlm(0) invocation costs gas, clutters the ledger with a
+    // zero-value event, and the backend watcher dead-letters it (the
+    // F4-stellar audit rejects non-positive i128 at parse time). Catching
+    // it here saves the agent gas and avoids a confusing dead-letter row.
+    if (stroops <= 0n) {
+        throw new Error(`Amount must be positive: ${decimal}`);
+    }
+    return stroops;
+}
+/**
+ * Thrown when Soroban rejects a transaction because the offered fee was
+ * too low. `requiredFee` is the minimum the network demanded (in stroops),
+ * taken directly from the error response — callers should use it as the
+ * floor when rebuilding the transaction.
+ */
+class InsufficientFeeError extends Error {
+    requiredFee;
+    constructor(requiredFee) {
+        super(`Soroban transaction rejected: fee too low (network requires ${requiredFee} stroops)`);
+        this.requiredFee = requiredFee;
+    }
+}
+exports.InsufficientFeeError = InsufficientFeeError;
+/**
+ * Build a Soroban transaction that invokes the receiver contract's pay_usdc
+ * or pay_xlm function. Returns an unsigned, simulation-prepared Transaction
+ * ready for the caller to sign (either via keypair or OWS) and submit.
+ */
+async function buildContractPaymentTx(opts) {
+    const server = new stellar_sdk_1.rpc.Server(opts.rpcUrl ?? getSorobanRpcUrl(opts.networkPassphrase));
+    // When preservedSequence is set, build the Account manually from
+    // the pre-bump value (N-1) so TransactionBuilder's implicit
+    // incrementSequenceNumber() call lands exactly on the requested N.
+    // Otherwise, load the current on-chain state.
+    const account = opts.preservedSequence
+        ? new stellar_sdk_1.Account(opts.fromPublicKey, (BigInt(opts.preservedSequence) - 1n).toString())
+        : await server.getAccount(opts.fromPublicKey);
+    const contract = new stellar_sdk_1.Contract(opts.contractId);
+    const orderIdBytes = Buffer.from(opts.orderId, 'utf-8');
+    const op = contract.call(opts.fn, new stellar_sdk_1.Address(opts.fromPublicKey).toScVal(), (0, stellar_sdk_1.nativeToScVal)(opts.amountStroops, { type: 'i128' }), (0, stellar_sdk_1.nativeToScVal)(orderIdBytes, { type: 'bytes' }));
+    const raw = new stellar_sdk_1.TransactionBuilder(account, {
+        fee: opts.fee ?? stellar_sdk_1.BASE_FEE,
+        networkPassphrase: opts.networkPassphrase,
+    })
+        .addOperation(op)
+        .setTimeout(180)
+        .build();
+    const sim = await server.simulateTransaction(raw);
+    if (stellar_sdk_1.rpc.Api.isSimulationError(sim)) {
+        throw new Error(`Soroban simulation failed: ${sim.error}`);
+    }
+    const prepared = stellar_sdk_1.rpc.assembleTransaction(raw, sim).build();
+    return { tx: prepared, server };
+}
+/**
+ * Submit a signed Soroban transaction and poll until it reaches a terminal
+ * status. Returns the transaction hash on success.
+ *
+ * Important: a successful return only guarantees the tx has been accepted
+ * onto the ledger. The cards402 backend's contract watcher is the source
+ * of truth for "the order has been credited" — the SDK's purchaseCardOWS
+ * always follows up with waitForCard against the order id, so even if
+ * this function gives up before finalization, the watcher still has a
+ * chance to credit the order if the tx eventually lands.
+ */
+async function submitSorobanTx(tx, server, 
+// F3-soroban (2026-04-16): callers pass the network-aware Horizon URL
+// so the fallback checks hit the correct network. Pre-fix, all three
+// fetch sites below were hardcoded to mainnet. Default to mainnet for
+// backward compat — callers that don't pass this parameter get the
+// same behaviour as before.
+horizonUrl = MAINNET_HORIZON) {
+    // sendTransaction is idempotent for the same envelope. Three cases we
+    // retry explicitly:
+    //   - TRY_AGAIN_LATER: RPC is congested, re-send after a short wait
+    //   - thrown network error (fetch/DNS/TCP): the request never reached
+    //     the RPC, safe to retry
+    //   - DUPLICATE is treated as "already in flight" — fall through to
+    //     the polling loop below instead of looping forever
+    // Up to 5 total attempts with 1.5s spacing covers typical RPC drops.
+    const MAX_SEND_ATTEMPTS = 5;
+    let send;
+    let sendErr;
+    for (let attempt = 0; attempt < MAX_SEND_ATTEMPTS; attempt++) {
+        try {
+            send = await server.sendTransaction(tx);
+            if (send.status === 'TRY_AGAIN_LATER') {
+                if (attempt < MAX_SEND_ATTEMPTS - 1) {
+                    await new Promise((r) => setTimeout(r, 1500));
+                    continue;
+                }
+                throw new Error(`Soroban network congested — sendTransaction returned TRY_AGAIN_LATER after ${MAX_SEND_ATTEMPTS} attempts. Retry the purchase in a minute.`);
+            }
+            if (send.status === 'ERROR') {
+                // txInsufficientFee — the network tells us what fee it needed.
+                // Surface it as InsufficientFeeError so callers can rebuild
+                // with the required fee as the floor and retry immediately.
+                try {
+                    if (send.errorResult?.result().switch().name === 'txInsufficientFee') {
+                        throw new InsufficientFeeError(send.errorResult.feeCharged().toString());
+                    }
+                }
+                catch (feeErr) {
+                    if (feeErr instanceof InsufficientFeeError)
+                        throw feeErr;
+                    // XDR parsing failed — fall through to the generic error.
+                }
+                throw new Error(`Soroban sendTransaction error: ${JSON.stringify(send.errorResult ?? send)}`);
+            }
+            // PENDING or DUPLICATE — envelope is now known to the network. Break
+            // out of the retry loop and poll for finalization.
+            break;
+        }
+        catch (err) {
+            sendErr = err;
+            // If the thrown error is structured (TRY_AGAIN_LATER, ERROR) let it
+            // propagate directly. Otherwise assume it was a transient network
+            // failure and retry.
+            if (err instanceof InsufficientFeeError ||
+                (err instanceof Error &&
+                    (err.message.startsWith('Soroban network congested') ||
+                        err.message.startsWith('Soroban sendTransaction error')))) {
+                throw err;
+            }
+            if (attempt >= MAX_SEND_ATTEMPTS - 1) {
+                throw new Error(`Soroban sendTransaction failed after ${MAX_SEND_ATTEMPTS} attempts: ${err?.message ?? String(err)}`);
+            }
+            await new Promise((r) => setTimeout(r, 1500));
+        }
+    }
+    if (!send) {
+        throw new Error(`Soroban sendTransaction produced no result: ${sendErr?.message ?? 'unknown error'}`);
+    }
+    // Poll for finalization. 120s deadline (was 60s) so we don't bail on
+    // mainnet RPC under modest backpressure. Each poll is cheap; the cost
+    // of a longer wait is much less than the cost of a stranded order.
+    // Some stellar-sdk versions can't parse newer Soroban RPC response XDR
+    // ("Bad union switch: 4"); when that happens, fall back to Horizon.
+    //
+    // Error-handling contract — changed 2026-04-14 after we shipped a
+    // stranded-order bug where FAILED statuses from getTransaction were
+    // silently caught by the inner try/catch and the loop kept polling
+    // until the deadline, at which point a txHash-attached error was
+    // thrown and purchaseCardOWS fell through to waitForCard on a tx
+    // that had actually failed on-chain. The new rules are:
+    //
+    //   - Any throw whose message starts with "Soroban transaction " is
+    //     one of OUR OWN terminal throws; the catch re-raises it out of
+    //     the while loop unchanged.
+    //   - A `txHash` is only attached to the final timeout error when we
+    //     genuinely believe the tx MAY still land on the ledger later
+    //     (Horizon unreachable). In every other terminal state — tx
+    //     applied and failed, or Horizon confirms the tx never made a
+    //     ledger — we throw a plain Error, which purchaseCardOWS will
+    //     propagate to the caller instead of entering waitForCard.
+    const POLL_DEADLINE_MS = 120_000;
+    const deadline = Date.now() + POLL_DEADLINE_MS;
+    while (Date.now() < deadline) {
+        try {
+            const status = await server.getTransaction(send.hash);
+            if (status.status === 'SUCCESS')
+                return send.hash;
+            if (status.status === 'FAILED') {
+                throw new Error(`Soroban transaction ${send.hash} failed on-chain`);
+            }
+            // NOT_FOUND (or any transient non-terminal status): keep polling.
+        }
+        catch (pollErr) {
+            // Re-raise our own terminal throws so they escape the loop.
+            if (pollErr instanceof Error &&
+                pollErr.message.startsWith(`Soroban transaction ${send.hash}`)) {
+                throw pollErr;
+            }
+            // "Bad union switch" = XDR version mismatch between SDK and RPC.
+            // The TX was accepted by sendTransaction; confirm via Horizon instead.
+            if (String(pollErr?.message || '').includes('Bad union switch')) {
+                try {
+                    const horizonResp = await fetch(`${horizonUrl}/transactions/${send.hash}`);
+                    if (horizonResp.ok) {
+                        const horizonData = (await horizonResp.json());
+                        if (horizonData.successful)
+                            return send.hash;
+                        // Horizon can see it and it failed — terminal, no recovery.
+                        throw new Error(`Soroban transaction ${send.hash} failed on-chain (Horizon)`);
+                    }
+                }
+                catch (horizonErr) {
+                    // Re-raise our own terminal Horizon throws
+                    if (horizonErr instanceof Error &&
+                        horizonErr.message.startsWith(`Soroban transaction ${send.hash}`)) {
+                        throw horizonErr;
+                    }
+                    /* Horizon unreachable — keep polling Soroban RPC */
+                }
+            }
+            // Any other poll-layer error: treat as transient, keep polling.
+        }
+        await new Promise((r) => setTimeout(r, 2000));
+    }
+    // Deadline reached without a terminal status. Before giving up, ask
+    // Horizon what actually happened to the tx — it's the authoritative
+    // record of what hit a ledger, independent of Soroban RPC's state.
+    try {
+        const horizonResp = await fetch(`${horizonUrl}/transactions/${send.hash}`);
+        if (horizonResp.ok) {
+            const horizonData = (await horizonResp.json());
+            if (horizonData.successful)
+                return send.hash;
+            // Tx landed and failed. No recovery path — throw without txHash
+            // so the caller propagates the error instead of waiting on a card
+            // that will never come.
+            throw new Error(`Soroban transaction ${send.hash} applied on-chain but failed — no card will be credited. Retry the purchase.`);
+        }
+        if (horizonResp.status === 404) {
+            // Tx was accepted by Soroban RPC (we have a hash) but it never
+            // made it into a ledger on Horizon. This is the "network rejected
+            // at apply time" case — e.g., source account sequence drifted,
+            // host function errored before any effects landed. It is NOT
+            // going to "eventually land".
+            //
+            // Attach both txHash and a structured `dropped: true` marker.
+            // payViaContractOWS's retry loop uses the marker to decide whether
+            // to resubmit with the same sequence (guaranteeing mutual
+            // exclusion). Without the marker, the retry layer can't
+            // distinguish this case from "on-chain failure" (where retrying
+            // would be incorrect because the sequence was consumed by the
+            // failed tx).
+            const droppedErr = new Error(`Soroban transaction ${send.hash} was accepted by the RPC but never applied on the ledger within ${POLL_DEADLINE_MS / 1000}s — the network rejected it pre-apply. Retry the purchase.`);
+            droppedErr.txHash = send.hash;
+            droppedErr.dropped = true;
+            throw droppedErr;
+        }
+    }
+    catch (horizonErr) {
+        // Re-raise our own terminal Horizon throws; swallow network errors.
+        if (horizonErr instanceof Error &&
+            horizonErr.message.startsWith(`Soroban transaction ${send.hash}`)) {
+            throw horizonErr;
+        }
+        /* Horizon itself is unreachable — fall through to the timeout
+           error below, where we attach txHash as a last-resort safety net.
+           The watcher may still credit the order if the tx eventually
+           lands and Horizon comes back up. */
+    }
+    // Soroban RPC never saw a terminal state AND Horizon is unreachable
+    // (or the response was neither 2xx nor 404). We genuinely don't know
+    // whether the tx landed, so attach txHash and let purchaseCardOWS
+    // give the cards402 backend watcher a chance to credit the order.
+    const err = new Error(`Soroban transaction ${send.hash} did not finalize within ${POLL_DEADLINE_MS / 1000}s and Horizon is unreachable`);
+    err.txHash = send.hash;
+    throw err;
+}
+/**
+ * Decide which contract function + asset amount to use based on the
+ * PaymentInstructions returned from POST /v1/orders.
+ */
+function selectContractCall(payment, paymentAsset) {
+    if (paymentAsset === 'xlm') {
+        if (!payment.xlm?.amount) {
+            throw new Error('Order response does not include an XLM quote');
+        }
+        return { fn: 'pay_xlm', amountDecimal: payment.xlm.amount };
+    }
+    return { fn: 'pay_usdc', amountDecimal: payment.usdc.amount };
+}
+//# sourceMappingURL=soroban.js.map

package/dist/soroban.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"soroban.js","sourceRoot":"","sources":["../src/soroban.ts"],"names":[],"mappings":";AAAA,4EAA4E;AAC5E,8EAA8E;AAC9E,2EAA2E;AAC3E,2DAA2D;;;AAoB3D,4CAEC;AAOD,sCAEC;AAMD,4CAqBC;AA2DD,wDAoCC;AAaD,0CA6MC;AAMD,gDAWC;AAlYD,sDAW8B;AA2XrB,oFA7XP,iBAAG,OA6XO;AAzXZ,MAAM,WAAW,GAAG,gCAAgC,CAAC;AACrD,MAAM,WAAW,GAAG,qCAAqC,CAAC;AAC1D,MAAM,eAAe,GAAG,6BAA6B,CAAC;AACtD,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAE9D,SAAgB,gBAAgB,CAAC,iBAAyB;IACxD,OAAO,iBAAiB,KAAK,sBAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;AAC5E,CAAC;AAED,qEAAqE;AACrE,gEAAgE;AAChE,sEAAsE;AACtE,uEAAuE;AACvE,4DAA4D;AAC5D,SAAgB,aAAa,CAAC,iBAA0B;IACtD,OAAO,iBAAiB,KAAK,sBAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,0CAA0C,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,SAAW,GAAG,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;IACpE,oEAAoE;IACpE,iEAAiE;IACjE,iEAAiE;IACjE,sEAAsE;IACtE,sEAAsE;IACtE,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,WAAW,CAAS;IACpB,YAAY,WAAmB;QAC7B,KAAK,CAAC,+DAA+D,WAAW,WAAW,CAAC,CAAC;QAC7F,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAND,oDAMC;AAwCD;;;;GAIG;AACI,KAAK,UAAU,sBAAsB,CAC1C,IAAyB;IAEzB,MAAM,MAAM,GAAG,IAAI,iBAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACvF,iEAAiE;IACjE,4DAA4D;IAC5D,mEAAmE;IACnE,8CAA8C;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB;QACpC,CAAC,CAAC,IAAI,qBAAO,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnF,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAEhD,MAAM,QAAQ,GAAG,IAAI,sBAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CACtB,IAAI,CAAC,EAAE,EACP,IAAI,qBAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,EACzC,IAAA,2BAAa,EAAC,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EACnD,IAAA,2BAAa,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAC/C,CAAC;IAEF,MAAM,GAAG,GAAG,IAAI,gCAAkB,CAAC,OAAO,EAAE;QAC1C,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,sBAAQ;QACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CAAC;SACC,YAAY,CAAC,EAAE,CAAC;SAChB,UAAU,CAAC,GAAG,CAAC;SACf,KAAK,EAAE,CAAC;IAEX,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,iBAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAG,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;IAC3D,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,eAAe,CACnC,EAAe,EACf,MAAkB;AAClB,sEAAsE;AACtE,qEAAqE;AACrE,sEAAsE;AACtE,mEAAmE;AACnE,4BAA4B;AAC5B,aAAqB,eAAe;IAEpC,sEAAsE;IACtE,oBAAoB;IACpB,oEAAoE;IACpE,sEAAsE;IACtE,6BAA6B;IAC7B,oEAAoE;IACpE,wDAAwD;IACxD,qEAAqE;IACrE,MAAM,iBAAiB,GAAG,CAAC,CAAC;IAC5B,IAAI,IAAoE,CAAC;IACzE,IAAI,OAAgB,CAAC;IACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7D,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;gBACtC,IAAI,OAAO,GAAG,iBAAiB,GAAG,CAAC,EAAE,CAAC;oBACpC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;oBAC9C,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,8EAA8E,iBAAiB,4CAA4C,CAC5I,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC5B,+DAA+D;gBAC/D,4DAA4D;gBAC5D,4DAA4D;gBAC5D,IAAI,CAAC;oBACH,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;wBACrE,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC3E,CAAC;gBACH,CAAC;gBAAC,OAAO,MAAM,EAAE,CAAC;oBAChB,IAAI,MAAM,YAAY,oBAAoB;wBAAE,MAAM,MAAM,CAAC;oBACzD,0DAA0D;gBAC5D,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,EAAE,CAC7E,CAAC;YACJ,CAAC;YACD,qEAAqE;YACrE,mDAAmD;YACnD,MAAM;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,CAAC;YACd,oEAAoE;YACpE,kEAAkE;YAClE,qBAAqB;YACrB,IACE,GAAG,YAAY,oBAAoB;gBACnC,CAAC,GAAG,YAAY,KAAK;oBACnB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,2BAA2B,CAAC;wBAClD,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,+BAA+B,CAAC,CAAC,CAAC,EAC7D,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,OAAO,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CACb,wCAAwC,iBAAiB,cAAe,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAChH,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,+CAAgD,OAAiB,EAAE,OAAO,IAAI,eAAe,EAAE,CAChG,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,sEAAsE;IACtE,mEAAmE;IACnE,uEAAuE;IACvE,oEAAoE;IACpE,EAAE;IACF,kEAAkE;IAClE,oEAAoE;IACpE,mEAAmE;IACnE,iEAAiE;IACjE,iEAAiE;IACjE,wDAAwD;IACxD,EAAE;IACF,oEAAoE;IACpE,oEAAoE;IACpE,gCAAgC;IAChC,qEAAqE;IACrE,kEAAkE;IAClE,gEAAgE;IAChE,kEAAkE;IAClE,kEAAkE;IAClE,+DAA+D;IAC/D,MAAM,gBAAgB,GAAG,OAAO,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;IAC/C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC;YAClD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,IAAI,kBAAkB,CAAC,CAAC;YACtE,CAAC;YACD,kEAAkE;QACpE,CAAC;QAAC,OAAO,OAAgB,EAAE,CAAC;YAC1B,4DAA4D;YAC5D,IACE,OAAO,YAAY,KAAK;gBACxB,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC,EAC9D,CAAC;gBACD,MAAM,OAAO,CAAC;YAChB,CAAC;YACD,iEAAiE;YACjE,uEAAuE;YACvE,IAAI,MAAM,CAAE,OAAiB,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC3E,IAAI,CAAC;oBACH,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,iBAAiB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC3E,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC;wBACnB,MAAM,WAAW,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,CAA4B,CAAC;wBAC1E,IAAI,WAAW,CAAC,UAAU;4BAAE,OAAO,IAAI,CAAC,IAAI,CAAC;wBAC7C,4DAA4D;wBAC5D,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,IAAI,4BAA4B,CAAC,CAAC;oBAChF,CAAC;gBACH,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,2CAA2C;oBAC3C,IACE,UAAU,YAAY,KAAK;wBAC3B,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC,EACjE,CAAC;wBACD,MAAM,UAAU,CAAC;oBACnB,CAAC;oBACD,oDAAoD;gBACtD,CAAC;YACH,CAAC;YACD,gEAAgE;QAClE,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,oEAAoE;IACpE,oEAAoE;IACpE,mEAAmE;IACnE,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,iBAAiB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,WAAW,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,CAA4B,CAAC;YAC1E,IAAI,WAAW,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC;YAC7C,gEAAgE;YAChE,kEAAkE;YAClE,wBAAwB;YACxB,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,CAAC,IAAI,8EAA8E,CAC/G,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC/B,+DAA+D;YAC/D,kEAAkE;YAClE,+DAA+D;YAC/D,6DAA6D;YAC7D,8BAA8B;YAC9B,EAAE;YACF,8DAA8D;YAC9D,mEAAmE;YACnE,0DAA0D;YAC1D,wDAAwD;YACxD,gEAAgE;YAChE,8DAA8D;YAC9D,cAAc;YACd,MAAM,UAAU,GAAG,IAAI,KAAK,CAC1B,uBAAuB,IAAI,CAAC,IAAI,mEAAmE,gBAAgB,GAAG,IAAI,4DAA4D,CAC1I,CAAC;YAC/C,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;YAC9B,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;YAC1B,MAAM,UAAU,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,OAAO,UAAU,EAAE,CAAC;QACpB,oEAAoE;QACpE,IACE,UAAU,YAAY,KAAK;YAC3B,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC,EACjE,CAAC;YACD,MAAM,UAAU,CAAC;QACnB,CAAC;QACD;;;8CAGsC;IACxC,CAAC;IAED,oEAAoE;IACpE,qEAAqE;IACrE,kEAAkE;IAClE,kEAAkE;IAClE,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,uBAAuB,IAAI,CAAC,IAAI,4BAA4B,gBAAgB,GAAG,IAAI,8BAA8B,CAClH,CAAC;IACD,GAAmC,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;IACxD,MAAM,GAAG,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAChC,OAA+D,EAC/D,YAA4B;IAE5B,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;AAChE,CAAC"}

package/dist/stellar.d.ts

@@ -0,0 +1,53 @@
+import { Networks } from '@stellar/stellar-sdk';
+import type { CardDetails, PaymentInstructions } from './client';
+export interface WalletInfo {
+    publicKey: string;
+    secret: string;
+}
+export declare function createWallet(): WalletInfo;
+export declare function getBalance(publicKey: string, networkPassphrase?: string): Promise<{
+    xlm: string;
+    usdc: string;
+}>;
+export declare function addUsdcTrustline(secret: string, networkPassphrase?: Networks): Promise<string>;
+export interface PayOpts {
+    walletSecret: string;
+    payment: PaymentInstructions;
+    paymentAsset?: 'usdc' | 'xlm';
+    networkPassphrase?: string;
+    sorobanRpcUrl?: string;
+}
+/**
+ * Pay the cards402 receiver contract using a raw Stellar secret key.
+ * Invokes pay_usdc or pay_xlm with the agent's G-address, the quoted amount
+ * converted to 7-decimal stroops, and the order_id from the create-order
+ * response. Returns the Soroban transaction hash.
+ */
+export declare function payViaContract(opts: PayOpts): Promise<string>;
+/**
+ * Full purchase flow with a raw keypair: create order → invoke contract →
+ * wait for card. Pass `resume: { orderId, payment }` to re-enter a partially
+ * completed flow without creating a new order (S-9).
+ */
+export declare function purchaseCard(opts: {
+    apiKey: string;
+    walletSecret: string;
+    amountUsdc: string;
+    paymentAsset?: 'usdc' | 'xlm';
+    baseUrl?: string;
+    networkPassphrase?: string;
+    sorobanRpcUrl?: string;
+    resume?: {
+        orderId: string;
+        payment: PaymentInstructions;
+    };
+    waitForCardOpts?: {
+        timeoutMs?: number;
+        intervalMs?: number;
+    };
+}): Promise<CardDetails & {
+    order_id: string;
+}>;
+/** @deprecated Use `payViaContract` — this is the Soroban contract call, not a direct Stellar payment. */
+export declare const payVCC: typeof payViaContract;
+//# sourceMappingURL=stellar.d.ts.map

package/dist/stellar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stellar.d.ts","sourceRoot":"","sources":["../src/stellar.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,QAAQ,EAOT,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAA8B,MAAM,UAAU,CAAC;AAuC7F,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,YAAY,IAAI,UAAU,CAGzC;AAED,wBAAsB,UAAU,CAC9B,SAAS,EAAE,MAAM,EACjB,iBAAiB,CAAC,EAAE,MAAM,GACzB,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAexC;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,iBAAiB,WAAkB,GAClC,OAAO,CAAC,MAAM,CAAC,CAWjB;AAID,MAAM,WAAW,OAAO;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA6CnE;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,mBAAmB,CAAA;KAAE,CAAC;IAC3D,eAAe,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/D,GAAG,OAAO,CAAC,WAAW,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAgC9C;AAKD,0GAA0G;AAC1G,eAAO,MAAM,MAAM,uBAAiB,CAAC"}

package/dist/stellar.js

@@ -0,0 +1,180 @@
+"use strict";
+// Helpers for agents using a raw Stellar keypair (S...) to pay the cards402
+// receiver contract on Soroban. For OWS-wallet custody, see ./ows.ts.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.payVCC = void 0;
+exports.createWallet = createWallet;
+exports.getBalance = getBalance;
+exports.addUsdcTrustline = addUsdcTrustline;
+exports.payViaContract = payViaContract;
+exports.purchaseCard = purchaseCard;
+const stellar_sdk_1 = require("@stellar/stellar-sdk");
+const soroban_1 = require("./soroban");
+const USDC_ISSUER = 'GA5ZSEJYB37JRC5AVCIA5MOP4RHTM335X2KGX3IHOJAPP5RE34K4KZVN';
+const HORIZON_TIMEOUT_MS = 15000;
+function assertSorobanPayment(payment) {
+    if (payment.type !== 'soroban_contract') {
+        throw new Error(`Expected soroban_contract payment instructions, got ${payment.type}`);
+    }
+}
+function getHorizonUrl(networkPassphrase) {
+    return networkPassphrase === stellar_sdk_1.Networks.TESTNET
+        ? 'https://horizon-testnet.stellar.org'
+        : 'https://horizon.stellar.org';
+}
+function getServer(networkPassphrase) {
+    return new stellar_sdk_1.Horizon.Server(getHorizonUrl(networkPassphrase));
+}
+function withTimeout(promise, ms = HORIZON_TIMEOUT_MS) {
+    return Promise.race([
+        promise,
+        new Promise((_, reject) => setTimeout(() => reject(new Error(`Horizon request timed out after ${ms}ms`)), ms)),
+    ]);
+}
+function createWallet() {
+    const keypair = stellar_sdk_1.Keypair.random();
+    return { publicKey: keypair.publicKey(), secret: keypair.secret() };
+}
+async function getBalance(publicKey, networkPassphrase) {
+    const server = getServer(networkPassphrase);
+    const account = await withTimeout(server.loadAccount(publicKey));
+    let xlm = '0', usdc = '0';
+    for (const b of account.balances) {
+        if (b.asset_type === 'native')
+            xlm = b.balance;
+        if (b.asset_type === 'credit_alphanum4' &&
+            b.asset_code === 'USDC' &&
+            b.asset_issuer === USDC_ISSUER)
+            usdc = b.balance;
+    }
+    return { xlm, usdc };
+}
+async function addUsdcTrustline(secret, networkPassphrase = stellar_sdk_1.Networks.PUBLIC) {
+    const server = getServer(networkPassphrase);
+    const keypair = stellar_sdk_1.Keypair.fromSecret(secret);
+    const account = await withTimeout(server.loadAccount(keypair.publicKey()));
+    const tx = new stellar_sdk_1.TransactionBuilder(account, { fee: stellar_sdk_1.BASE_FEE, networkPassphrase })
+        .addOperation(stellar_sdk_1.Operation.changeTrust({ asset: new stellar_sdk_1.Asset('USDC', USDC_ISSUER) }))
+        .setTimeout(300)
+        .build();
+    tx.sign(keypair);
+    const result = await server.submitTransaction(tx);
+    return result.hash;
+}
+/**
+ * Pay the cards402 receiver contract using a raw Stellar secret key.
+ * Invokes pay_usdc or pay_xlm with the agent's G-address, the quoted amount
+ * converted to 7-decimal stroops, and the order_id from the create-order
+ * response. Returns the Soroban transaction hash.
+ */
+async function payViaContract(opts) {
+    const { walletSecret, payment, paymentAsset = 'usdc', networkPassphrase = stellar_sdk_1.Networks.PUBLIC, sorobanRpcUrl, } = opts;
+    assertSorobanPayment(payment);
+    if (!stellar_sdk_1.StrKey.isValidContract(payment.contract_id)) {
+        throw new Error(`Invalid contract_id in order response: ${payment.contract_id}`);
+    }
+    const keypair = stellar_sdk_1.Keypair.fromSecret(walletSecret);
+    const { fn, amountDecimal } = (0, soroban_1.selectContractCall)(payment, paymentAsset);
+    const amountStroops = (0, soroban_1.decimalToStroops)(amountDecimal);
+    // Fee retry: if the network rejects the fee, rebuild with the
+    // required fee as the floor. At most one retry — the network's
+    // suggested fee should be sufficient on the second attempt.
+    let fee;
+    for (let attempt = 0; attempt < 2; attempt++) {
+        const { tx, server } = await (0, soroban_1.buildContractPaymentTx)({
+            contractId: payment.contract_id,
+            fn,
+            fromPublicKey: keypair.publicKey(),
+            amountStroops,
+            orderId: payment.order_id,
+            networkPassphrase,
+            rpcUrl: sorobanRpcUrl,
+            fee,
+        });
+        tx.sign(keypair);
+        try {
+            return await (0, soroban_1.submitSorobanTx)(tx, server, getHorizonUrl(networkPassphrase));
+        }
+        catch (err) {
+            if (err instanceof soroban_1.InsufficientFeeError && attempt === 0) {
+                fee = err.requiredFee;
+                continue;
+            }
+            throw err;
+        }
+    }
+    throw new Error('payViaContract: fee retry exhausted');
+}
+/**
+ * Full purchase flow with a raw keypair: create order → invoke contract →
+ * wait for card. Pass `resume: { orderId, payment }` to re-enter a partially
+ * completed flow without creating a new order (S-9).
+ */
+async function purchaseCard(opts) {
+    const { Cards402Client } = await Promise.resolve().then(() => __importStar(require('./client')));
+    const client = new Cards402Client({ apiKey: opts.apiKey, baseUrl: opts.baseUrl });
+    const paymentAsset = opts.paymentAsset ?? 'usdc';
+    let orderId;
+    let payment;
+    if (opts.resume) {
+        orderId = opts.resume.orderId;
+        payment = opts.resume.payment;
+        const status = await client.getOrder(orderId);
+        if (status.phase !== 'awaiting_payment') {
+            const card = await client.waitForCard(orderId, opts.waitForCardOpts);
+            return { ...card, order_id: orderId };
+        }
+    }
+    else {
+        const order = await client.createOrder({ amount_usdc: opts.amountUsdc });
+        orderId = order.order_id;
+        payment = order.payment;
+    }
+    await payViaContract({
+        walletSecret: opts.walletSecret,
+        payment,
+        paymentAsset,
+        networkPassphrase: opts.networkPassphrase,
+        sorobanRpcUrl: opts.sorobanRpcUrl,
+    });
+    const card = await client.waitForCard(orderId, opts.waitForCardOpts);
+    return { ...card, order_id: orderId };
+}
+// Back-compat aliases — the pre-V3 SDK exposed these names. Keep them around
+// as deprecated exports so existing imports don't break on upgrade.
+/** @deprecated Use `payViaContract` — this is the Soroban contract call, not a direct Stellar payment. */
+exports.payVCC = payViaContract;
+//# sourceMappingURL=stellar.js.map