cspr402 0.4.7

package/dist/stellar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stellar.js","sourceRoot":"","sources":["../src/stellar.ts"],"names":[],"mappings":";AAAA,4EAA4E;AAC5E,sEAAsE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwDtE,oCAGC;AAED,gCAkBC;AAED,4CAcC;AAkBD,wCA6CC;AAOD,oCA0CC;AA7MD,sDAS8B;AAE9B,uCAMmB;AAEnB,MAAM,WAAW,GAAG,0DAA0D,CAAC;AAC/E,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,SAAS,oBAAoB,CAC3B,OAA4B;IAE5B,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,uDAAuD,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,iBAA0B;IAC/C,OAAO,iBAAiB,KAAK,sBAAQ,CAAC,OAAO;QAC3C,CAAC,CAAC,qCAAqC;QACvC,CAAC,CAAC,6BAA6B,CAAC;AACpC,CAAC;AAED,SAAS,SAAS,CAAC,iBAA0B;IAC3C,OAAO,IAAI,qBAAO,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAAI,OAAmB,EAAE,EAAE,GAAG,kBAAkB;IAClE,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,OAAO;QACP,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CACnF;KACF,CAAC,CAAC;AACL,CAAC;AAOD,SAAgB,YAAY;IAC1B,MAAM,OAAO,GAAG,qBAAO,CAAC,MAAM,EAAE,CAAC;IACjC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AACtE,CAAC;AAEM,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,iBAA0B;IAE1B,MAAM,MAAM,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IACjE,IAAI,GAAG,GAAG,GAAG,EACX,IAAI,GAAG,GAAG,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ;YAAE,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC;QAC/C,IACE,CAAC,CAAC,UAAU,KAAK,kBAAkB;YACnC,CAAC,CAAC,UAAU,KAAK,MAAM;YACvB,CAAC,CAAC,YAAY,KAAK,WAAW;YAE9B,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,iBAAiB,GAAG,sBAAQ,CAAC,MAAM;IAEnC,MAAM,MAAM,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,qBAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,EAAE,GAAG,IAAI,gCAAkB,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,sBAAQ,EAAE,iBAAiB,EAAE,CAAC;SAC7E,YAAY,CAAC,uBAAS,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,mBAAK,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;SAC9E,UAAU,CAAC,GAAG,CAAC;SACf,KAAK,EAAE,CAAC;IACX,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAYD;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAAC,IAAa;IAChD,MAAM,EACJ,YAAY,EACZ,OAAO,EACP,YAAY,GAAG,MAAM,EACrB,iBAAiB,GAAG,sBAAQ,CAAC,MAAM,EACnC,aAAa,GACd,GAAG,IAAI,CAAC;IAET,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,oBAAM,CAAC,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,0CAA0C,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,OAAO,GAAG,qBAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,GAAG,IAAA,4BAAkB,EAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,IAAA,0BAAgB,EAAC,aAAa,CAAC,CAAC;IAEtD,8DAA8D;IAC9D,+DAA+D;IAC/D,4DAA4D;IAC5D,IAAI,GAAuB,CAAC;IAC5B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,gCAAsB,EAAC;YAClD,UAAU,EAAE,OAAO,CAAC,WAAW;YAC/B,EAAE;YACF,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE;YAClC,aAAa;YACb,OAAO,EAAE,OAAO,CAAC,QAAQ;YACzB,iBAAiB;YACjB,MAAM,EAAE,aAAa;YACrB,GAAG;SACJ,CAAC,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,MAAM,IAAA,yBAAe,EAAC,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,8BAAoB,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBACzD,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,YAAY,CAAC,IAUlC;IACC,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAClF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC;IAEjD,IAAI,OAAe,CAAC;IACpB,IAAI,OAA4B,CAAC;IAEjC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9B,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YACrE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACzE,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC;QACzB,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC1B,CAAC;IAED,MAAM,cAAc,CAAC;QACnB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO;QACP,YAAY;QACZ,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACrE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED,6EAA6E;AAC7E,oEAAoE;AAEpE,0GAA0G;AAC7F,QAAA,MAAM,GAAG,cAAc,CAAC"}

package/dist/version-check.d.ts

@@ -0,0 +1,5 @@
+/** Fire-and-forget update check. Returns immediately; the check runs
+ *  in the background. Safe to call at CLI startup regardless of which
+ *  subcommand is about to run. */
+export declare function checkForUpdates(): void;
+//# sourceMappingURL=version-check.d.ts.map

package/dist/version-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-check.d.ts","sourceRoot":"","sources":["../src/version-check.ts"],"names":[],"mappings":"AAuHA;;kCAEkC;AAClC,wBAAgB,eAAe,IAAI,IAAI,CA+CtC"}

package/dist/version-check.js

@@ -0,0 +1,203 @@
+"use strict";
+// Background version check — warns the operator on stderr if their
+// locally-installed cards402 is older than the current `latest` tag on
+// the npm registry.
+//
+// Design constraints (all of these matter for a CLI that agents run
+// inside an LLM loop):
+//
+//   - Fire-and-forget. Never blocks the command. The check runs in
+//     parallel with whatever `main()` dispatched to; if the command
+//     exits first, we let the check drop. If the check finishes first,
+//     the warning prints before the command result.
+//   - Short timeout. 2s on the registry fetch so a slow network never
+//     measurably affects agent throughput.
+//   - Cached. We write the last-check timestamp + seen-latest-version
+//     to `~/.cards402/version-check.json` and skip the registry entirely
+//     if we checked within the last 24h. That's fine because once an
+//     operator has seen the warning they know to upgrade, and repeating
+//     the same warning every second is noise.
+//   - Non-fatal on every failure path. Network down, missing file,
+//     permission denied, JSON parse error, semver comparison throws —
+//     any of those silently no-op. A broken update check must never
+//     break an actual purchase.
+//   - stderr only. Never pollutes stdout so scripts parsing CLI output
+//     aren't affected.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkForUpdates = checkForUpdates;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const REGISTRY_URL = 'https://registry.npmjs.org/cards402/latest';
+const CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000; // once per day
+const FETCH_TIMEOUT_MS = 2_000;
+const STATE_FILE = path.join(os.homedir(), '.cards402', 'version-check.json');
+// F1-version-check (2026-04-16): cap on local state file. Matches the
+// 16 KB pattern from config.ts and purchase.ts. The state file is
+// normally <200 bytes; anything larger is corruption or tampering.
+const MAX_STATE_BYTES = 16 * 1024;
+// F2-version-check (2026-04-16): cap on the npm registry response body.
+// The /latest endpoint returns a package manifest — normally ~2 KB for
+// cards402. A hostile server (DNS hijack, MITM, compromised CDN) could
+// push megabytes within the 2s abort window. 64 KB is generous for any
+// legitimate manifest and bounds memory consumption.
+const MAX_REGISTRY_BODY_BYTES = 64 * 1024;
+function readLocalVersion() {
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        const pkg = require('../package.json');
+        return pkg.version;
+    }
+    catch {
+        return null;
+    }
+}
+function readState() {
+    try {
+        // F1-version-check: size cap before readFileSync. A multi-GB state
+        // file (corruption, symlink) would OOM the process on every CLI
+        // invocation since checkForUpdates fires at startup for every command.
+        const stat = fs.statSync(STATE_FILE);
+        if (stat.size > MAX_STATE_BYTES)
+            return null;
+        const raw = fs.readFileSync(STATE_FILE, 'utf8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+function writeState(state) {
+    try {
+        fs.mkdirSync(path.dirname(STATE_FILE), { recursive: true, mode: 0o700 });
+        fs.writeFileSync(STATE_FILE, JSON.stringify(state), { mode: 0o600 });
+    }
+    catch {
+        /* best-effort */
+    }
+}
+/** Returns >0 if a > b, <0 if a < b, 0 if equal. Handles plain semver
+ *  triples; pre-release tags (e.g. 0.4.6-beta.1) fall back to string
+ *  compare which is accurate enough for our gating. */
+function compareVersions(a, b) {
+    const stripped = (s) => s.split('-')[0] ?? s;
+    const pa = stripped(a)
+        .split('.')
+        .map((n) => parseInt(n, 10));
+    const pb = stripped(b)
+        .split('.')
+        .map((n) => parseInt(n, 10));
+    for (let i = 0; i < 3; i++) {
+        const x = pa[i] ?? 0;
+        const y = pb[i] ?? 0;
+        if (x !== y)
+            return x - y;
+    }
+    return a.localeCompare(b);
+}
+function printWarning(local, latest) {
+    // Write to stderr so scripts piping stdout aren't affected. The
+    // warning is ≤ 3 lines and mentions the exact upgrade command so
+    // an LLM operator can act on it without extra prompting.
+    const msg = [
+        '',
+        `⚠  cards402 ${local} is out of date — ${latest} is available on npm.`,
+        `   Upgrade: npx -y cards402@latest <command>  |  npm i -g cards402@latest`,
+        `   Release notes: https://cards402.com/changelog`,
+        '',
+    ].join('\n');
+    try {
+        process.stderr.write(msg);
+    }
+    catch {
+        /* stderr closed — ignore */
+    }
+}
+/** Fire-and-forget update check. Returns immediately; the check runs
+ *  in the background. Safe to call at CLI startup regardless of which
+ *  subcommand is about to run. */
+function checkForUpdates() {
+    const local = readLocalVersion();
+    if (!local)
+        return;
+    // Throttle: skip if we've checked in the last 24h.
+    const state = readState();
+    if (state?.last_checked_at) {
+        const age = Date.now() - Date.parse(state.last_checked_at);
+        if (age < CHECK_INTERVAL_MS && state.latest_seen) {
+            // Re-use the cached result so a stale install still nags.
+            if (compareVersions(local, state.latest_seen) < 0) {
+                printWarning(local, state.latest_seen);
+            }
+            return;
+        }
+    }
+    // Fetch the registry in the background. `void` the promise so Node
+    // doesn't treat it as unhandled. We use AbortController to cap the
+    // fetch wall time independent of the socket timeouts.
+    void (async () => {
+        try {
+            const ctrl = new AbortController();
+            const timer = setTimeout(() => ctrl.abort(), FETCH_TIMEOUT_MS);
+            const res = await fetch(REGISTRY_URL, { signal: ctrl.signal });
+            clearTimeout(timer);
+            if (!res.ok)
+                return;
+            // F2-version-check: read the body as text with a length cap
+            // before JSON.parse. The 2s abort limits wall time but NOT data
+            // volume — a fast hostile server can push ~200 MB through a
+            // gigabit link in 2 seconds. res.json() loads the entire body
+            // into a string before parsing, so a multi-MB response fills
+            // memory. Cap at MAX_REGISTRY_BODY_BYTES and discard anything
+            // larger — a legitimate npm /latest manifest is ~2 KB.
+            const text = await res.text();
+            if (text.length > MAX_REGISTRY_BODY_BYTES)
+                return;
+            const body = JSON.parse(text);
+            const latest = body?.version;
+            if (!latest)
+                return;
+            writeState({ last_checked_at: new Date().toISOString(), latest_seen: latest });
+            if (compareVersions(local, latest) < 0) {
+                printWarning(local, latest);
+            }
+        }
+        catch {
+            /* network / parse / abort — silent no-op */
+        }
+    })();
+}
+//# sourceMappingURL=version-check.js.map

package/dist/version-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-check.js","sourceRoot":"","sources":["../src/version-check.ts"],"names":[],"mappings":";AAAA,mEAAmE;AACnE,uEAAuE;AACvE,oBAAoB;AACpB,EAAE;AACF,oEAAoE;AACpE,uBAAuB;AACvB,EAAE;AACF,mEAAmE;AACnE,oEAAoE;AACpE,uEAAuE;AACvE,oDAAoD;AACpD,sEAAsE;AACtE,2CAA2C;AAC3C,sEAAsE;AACtE,yEAAyE;AACzE,qEAAqE;AACrE,wEAAwE;AACxE,8CAA8C;AAC9C,mEAAmE;AACnE,sEAAsE;AACtE,oEAAoE;AACpE,gCAAgC;AAChC,uEAAuE;AACvE,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmGvB,0CA+CC;AAhJD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAEzB,MAAM,YAAY,GAAG,4CAA4C,CAAC;AAClE,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,eAAe;AAC9D,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC;AAC9E,sEAAsE;AACtE,kEAAkE;AAClE,mEAAmE;AACnE,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,wEAAwE;AACxE,uEAAuE;AACvE,uEAAuE;AACvE,uEAAuE;AACvE,qDAAqD;AACrD,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AAO1C,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,iEAAiE;QACjE,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;QAC9D,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,CAAC;QACH,mEAAmE;QACnE,gEAAgE;QAChE,uEAAuE;QACvE,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,GAAG,eAAe;YAAE,OAAO,IAAI,CAAC;QAC7C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED;;uDAEuD;AACvD,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;SACnB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;SACnB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,MAAc;IACjD,gEAAgE;IAChE,iEAAiE;IACjE,yDAAyD;IACzD,MAAM,GAAG,GAAG;QACV,EAAE;QACF,eAAe,KAAK,qBAAqB,MAAM,uBAAuB;QACtE,2EAA2E;QAC3E,kDAAkD;QAClD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;AACH,CAAC;AAED;;kCAEkC;AAClC,SAAgB,eAAe;IAC7B,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,mDAAmD;IACnD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,KAAK,EAAE,eAAe,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC3D,IAAI,GAAG,GAAG,iBAAiB,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACjD,0DAA0D;YAC1D,IAAI,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClD,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YACzC,CAAC;YACD,OAAO;QACT,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,mEAAmE;IACnE,sDAAsD;IACtD,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/D,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO;YACpB,4DAA4D;YAC5D,gEAAgE;YAChE,4DAA4D;YAC5D,8DAA8D;YAC9D,6DAA6D;YAC7D,8DAA8D;YAC9D,uDAAuD;YACvD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,uBAAuB;gBAAE,OAAO;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB,CAAC;YACtD,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO,CAAC;YAC7B,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,UAAU,CAAC,EAAE,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/E,IAAI,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;AACP,CAAC"}

package/package.json

@@ -0,0 +1,80 @@
+{
+  "name": "cspr402",
+  "version": "0.4.7",
+  "description": "CSPR402 SDK and CLI for Casper testnet payment verification and mock virtual cards",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.js"
+    },
+    "./mcp": {
+      "types": "./dist/mcp.d.ts",
+      "import": "./dist/mcp.js",
+      "require": "./dist/mcp.js"
+    }
+  },
+  "bin": {
+    "cspr402": "dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "lint": "eslint src",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run src/__tests__/client.test.ts src/__tests__/config.test.ts src/__tests__/errors.test.ts src/__tests__/integration.test.ts",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "keywords": [
+    "casper",
+    "cspr",
+    "testnet",
+    "virtual-card",
+    "vcc",
+    "ai-agent",
+    "mcp",
+    "model-context-protocol",
+    "402-payment",
+    "cep18",
+    "cspr402"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kann420/CSPR402.git"
+  },
+  "homepage": "https://cspr402.xyz",
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "overrides": {
+    "axios": "^1.15.0"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "@ctx.com/stellar-ows-core": "^1.3.0-stellar",
+    "@stellar/stellar-sdk": "^15.0.1"
+  },
+  "optionalDependencies": {
+    "@ctx.com/stellar-ows-core-linux-x64-gnu": "1.3.0-stellar",
+    "@ctx.com/stellar-ows-core-linux-arm64-gnu": "1.3.0-stellar",
+    "@ctx.com/stellar-ows-core-darwin-x64": "1.3.0-stellar",
+    "@ctx.com/stellar-ows-core-darwin-arm64": "1.3.0-stellar"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@vitest/coverage-v8": "^4.1.5",
+    "typescript": "^6.0.0",
+    "vitest": "^4.1.5"
+  }
+}