envoy-pay 0.1.0

package/dist/esm/monitor/multi-watcher.js

@@ -0,0 +1,91 @@
+import { createEvmWatcher } from './evm-watcher.js';
+import { createStellarWatcher } from './stellar-watcher.js';
+import { createSolanaWatcher } from './solana-watcher.js';
+import { noopLogger } from '../logger.js';
+/**
+ * Creates a multi-chain payment watcher.
+ *
+ * @returns Unsubscribe function that stops ALL chain watchers.
+ *
+ * @example
+ * ```ts
+ * const unsub = createMultiChainWatcher({
+ *   evm: [
+ *     { address: '0x...', rpcUrl: 'https://mainnet.base.org', chainName: 'Base', usdcContractAddress: '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913' },
+ *     { address: '0x...', rpcUrl: 'https://arb1.arbitrum.io/rpc', chainName: 'Arbitrum' },
+ *   ],
+ *   stellar: { accountId: 'GABCD...' },
+ *   solana: { address: '7abc...' },
+ *   onPayment: (event) => console.log(`${event.chain}: ${event.amountFormatted} ${event.asset}`),
+ * });
+ *
+ * // Stop all watchers
+ * unsub();
+ * ```
+ */
+export function createMultiChainWatcher(config) {
+    const log = config.logger ?? noopLogger;
+    const unsubscribers = [];
+    log('[multi-watcher] 🌐 Starting multi-chain payment monitor…');
+    // Start EVM watchers
+    if (config.evm) {
+        for (const evmConfig of config.evm) {
+            const unsub = createEvmWatcher({
+                ...evmConfig,
+                onPayment: (event) => {
+                    config.onPayment(event);
+                    evmConfig.onPayment?.(event);
+                },
+                onError: (err) => {
+                    config.onError?.(err);
+                    evmConfig.onError?.(err);
+                },
+                logger: evmConfig.logger ?? log,
+            });
+            unsubscribers.push(unsub);
+        }
+        log(`[multi-watcher] ⛓️ ${config.evm.length} EVM chain(s) active`);
+    }
+    // Start Stellar watcher
+    if (config.stellar) {
+        const unsub = createStellarWatcher({
+            ...config.stellar,
+            onPayment: (event) => {
+                config.onPayment(event);
+                config.stellar.onPayment?.(event);
+            },
+            onError: (err) => {
+                config.onError?.(err);
+                config.stellar.onError?.(err);
+            },
+            logger: config.stellar.logger ?? log,
+        });
+        unsubscribers.push(unsub);
+        log('[multi-watcher] ⭐ Stellar watcher active');
+    }
+    // Start Solana watcher
+    if (config.solana) {
+        const unsub = createSolanaWatcher({
+            ...config.solana,
+            onPayment: (event) => {
+                config.onPayment(event);
+                config.solana.onPayment?.(event);
+            },
+            onError: (err) => {
+                config.onError?.(err);
+                config.solana.onError?.(err);
+            },
+            logger: config.solana.logger ?? log,
+        });
+        unsubscribers.push(unsub);
+        log('[multi-watcher] ◎ Solana watcher active');
+    }
+    log(`[multi-watcher] ✅ ${unsubscribers.length} watcher(s) running`);
+    return () => {
+        for (const unsub of unsubscribers) {
+            unsub();
+        }
+        log('[multi-watcher] 🛑 All watchers stopped');
+    };
+}
+//# sourceMappingURL=multi-watcher.js.map

package/dist/esm/monitor/multi-watcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-watcher.js","sourceRoot":"","sources":["../../../src/monitor/multi-watcher.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAyB,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAA6B,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAA4B,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAU,UAAU,EAAE,MAAM,WAAW,CAAC;AAuB/C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAA+B;IACrE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC;IACxC,MAAM,aAAa,GAAkB,EAAE,CAAC;IAExC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IAEhE,qBAAqB;IACrB,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,gBAAgB,CAAC;gBAC7B,GAAG,SAAS;gBACZ,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;oBACnB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;oBACxB,SAAS,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC;gBAC/B,CAAC;gBACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBACf,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;oBACtB,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;gBAC3B,CAAC;gBACD,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,GAAG;aAChC,CAAC,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,GAAG,CAAC,sBAAsB,MAAM,CAAC,GAAG,CAAC,MAAM,sBAAsB,CAAC,CAAC;IACrE,CAAC;IAED,wBAAwB;IACxB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,oBAAoB,CAAC;YACjC,GAAG,MAAM,CAAC,OAAO;YACjB,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBACnB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACxB,MAAM,CAAC,OAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACf,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;gBACtB,MAAM,CAAC,OAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG;SACrC,CAAC,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAClD,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,mBAAmB,CAAC;YAChC,GAAG,MAAM,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBACnB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACxB,MAAM,CAAC,MAAO,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;YACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACf,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;gBACtB,MAAM,CAAC,MAAO,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG;SACpC,CAAC,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACjD,CAAC;IAED,GAAG,CAAC,qBAAqB,aAAa,CAAC,MAAM,qBAAqB,CAAC,CAAC;IAEpE,OAAO,GAAG,EAAE;QACV,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,KAAK,EAAE,CAAC;QACV,CAAC;QACD,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACjD,CAAC,CAAC;AACJ,CAAC"}

package/dist/esm/monitor/solana-watcher.js

@@ -0,0 +1,169 @@
+import { noopLogger } from '../logger.js';
+/** Mainnet USDC mint address. */
+const USDC_MINT = 'EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v';
+/**
+ * Creates a Solana payment watcher using JSON-RPC polling.
+ *
+ * Polls `getSignaturesForAddress` for new transactions, then
+ * inspects each transaction to detect:
+ * 1. Native SOL transfers TO the target address
+ * 2. SPL USDC transfers TO the target's Associated Token Account
+ *
+ * @returns Unsubscribe function to stop watching.
+ */
+export function createSolanaWatcher(config) {
+    const log = config.logger ?? noopLogger;
+    const rpcUrl = config.rpcUrl ?? 'https://api.mainnet-beta.solana.com';
+    const pollInterval = config.pollIntervalMs ?? 5000;
+    const usdcMint = config.usdcMint ?? USDC_MINT;
+    let running = true;
+    let lastSignature = null;
+    let timer = null;
+    async function rpcCall(method, params) {
+        const response = await fetch(rpcUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ jsonrpc: '2.0', id: 1, method, params }),
+        });
+        const json = await response.json();
+        if (json.error)
+            throw new Error(`Solana RPC error: ${json.error.message}`);
+        return json.result;
+    }
+    async function getNewSignatures() {
+        const params = [
+            config.address,
+            { limit: 20, ...(lastSignature ? { until: lastSignature } : {}) },
+        ];
+        const result = await rpcCall('getSignaturesForAddress', params);
+        if (!Array.isArray(result) || result.length === 0)
+            return [];
+        // Return newest first
+        return result
+            .filter((r) => r.confirmationStatus === 'confirmed' || r.confirmationStatus === 'finalized')
+            .map((r) => r.signature);
+    }
+    async function inspectTransaction(signature) {
+        try {
+            const tx = await rpcCall('getTransaction', [signature, { encoding: 'jsonParsed', maxSupportedTransactionVersion: 0 }]);
+            if (!tx?.meta || tx.meta.err)
+                return null;
+            const targetLower = config.address;
+            // Check parsed instructions for SOL transfers and SPL token transfers
+            const instructions = tx.transaction?.message?.instructions || [];
+            const innerInstructions = tx.meta?.innerInstructions || [];
+            const allInstructions = [
+                ...instructions,
+                ...innerInstructions.flatMap((inner) => inner.instructions || []),
+            ];
+            for (const ix of allInstructions) {
+                const parsed = ix.parsed;
+                if (!parsed)
+                    continue;
+                // Native SOL transfer
+                if (parsed.type === 'transfer' && ix.program === 'system') {
+                    if (parsed.info?.destination === targetLower) {
+                        const lamports = parsed.info.lamports.toString();
+                        return {
+                            amount: lamports,
+                            amountFormatted: formatSol(lamports),
+                            asset: 'SOL',
+                            from: parsed.info.source || 'unknown',
+                            transactionHash: signature,
+                            chain: 'Solana',
+                            caip2Id: 'solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp',
+                            timestamp: new Date((tx.blockTime || Date.now() / 1000) * 1000),
+                            confirmations: 1,
+                        };
+                    }
+                }
+                // SPL Token transfer (including USDC)
+                if ((parsed.type === 'transfer' || parsed.type === 'transferChecked') &&
+                    ix.program === 'spl-token') {
+                    const info = parsed.info;
+                    // Check if this is USDC (by mint address in transferChecked)
+                    const isUsdc = info?.mint === usdcMint;
+                    const amount = info?.amount || info?.tokenAmount?.amount;
+                    if (amount && info?.destination) {
+                        // We need to check if the destination ATA belongs to our address
+                        // For simplicity, we check pre/post token balances
+                        return {
+                            amount: amount.toString(),
+                            amountFormatted: isUsdc ? formatUsdc(amount.toString()) : amount.toString(),
+                            asset: isUsdc ? 'USDC' : 'SPL',
+                            from: info.source || info.authority || 'unknown',
+                            transactionHash: signature,
+                            chain: 'Solana',
+                            caip2Id: 'solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp',
+                            timestamp: new Date((tx.blockTime || Date.now() / 1000) * 1000),
+                            confirmations: 1,
+                        };
+                    }
+                }
+            }
+            return null;
+        }
+        catch (err) {
+            log(`[solana-watcher] ⚠️ Failed to inspect tx ${signature.slice(0, 16)}…: ${err.message}`);
+            return null;
+        }
+    }
+    async function poll() {
+        if (!running)
+            return;
+        try {
+            const signatures = await getNewSignatures();
+            if (signatures.length > 0 && !lastSignature) {
+                // First poll — just record the latest signature
+                lastSignature = signatures[0];
+                log(`[solana-watcher] 🔍 Started watching from signature ${lastSignature.slice(0, 16)}… on Solana`);
+                schedulePoll();
+                return;
+            }
+            if (signatures.length === 0) {
+                schedulePoll();
+                return;
+            }
+            log(`[solana-watcher] 📦 Processing ${signatures.length} new transactions`);
+            for (const sig of signatures.reverse()) { // Oldest first
+                const payment = await inspectTransaction(sig);
+                if (payment) {
+                    log(`[solana-watcher] 💰 Incoming: ${payment.amountFormatted} ${payment.asset} from ${payment.from.slice(0, 10)}…`);
+                    config.onPayment(payment);
+                }
+            }
+            lastSignature = signatures[0]; // Most recent
+        }
+        catch (err) {
+            log(`[solana-watcher] ❌ Poll error: ${err.message}`);
+            config.onError?.(err);
+        }
+        schedulePoll();
+    }
+    function schedulePoll() {
+        if (running && pollInterval > 0) {
+            timer = setTimeout(poll, pollInterval);
+        }
+    }
+    // Start polling
+    poll();
+    return () => {
+        running = false;
+        if (timer)
+            clearTimeout(timer);
+        log(`[solana-watcher] 🛑 Stopped watching on Solana`);
+    };
+}
+function formatSol(lamports) {
+    const n = BigInt(lamports);
+    const whole = n / 1000000000n;
+    const frac = ((n % 1000000000n) / 1000n).toString().padStart(6, '0');
+    return `${whole}.${frac}`;
+}
+function formatUsdc(atomicAmount) {
+    const n = BigInt(atomicAmount);
+    const whole = n / 1000000n;
+    const frac = (n % 1000000n).toString().padStart(6, '0');
+    return `${whole}.${frac}`;
+}
+//# sourceMappingURL=solana-watcher.js.map

package/dist/esm/monitor/solana-watcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"solana-watcher.js","sourceRoot":"","sources":["../../../src/monitor/solana-watcher.ts"],"names":[],"mappings":"AACA,OAAO,EAAU,UAAU,EAAE,MAAM,WAAW,CAAC;AAyB/C,iCAAiC;AACjC,MAAM,SAAS,GAAG,8CAA8C,CAAC;AAEjE;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,qCAAqC,CAAC;IACtE,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC;IAE9C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,KAAK,GAAyC,IAAI,CAAC;IAEvD,KAAK,UAAU,OAAO,CAAC,MAAc,EAAE,MAAa;QAClD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;SAChE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,UAAU,gBAAgB;QAC7B,MAAM,MAAM,GAAU;YACpB,MAAM,CAAC,OAAO;YACd,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAClE,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAE7D,sBAAsB;QACtB,OAAO,MAAM;aACV,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,WAAW,IAAI,CAAC,CAAC,kBAAkB,KAAK,WAAW,CAAC;aAChG,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,UAAU,kBAAkB,CAAC,SAAiB;QACjD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,8BAA8B,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACvH,IAAI,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YAE1C,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC;YAEnC,sEAAsE;YACtE,MAAM,YAAY,GAAG,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,IAAI,EAAE,CAAC;YACjE,MAAM,iBAAiB,GAAG,EAAE,CAAC,IAAI,EAAE,iBAAiB,IAAI,EAAE,CAAC;YAC3D,MAAM,eAAe,GAAG;gBACtB,GAAG,YAAY;gBACf,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC,KAAU,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;aACvE,CAAC;YAEF,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;gBACzB,IAAI,CAAC,MAAM;oBAAE,SAAS;gBAEtB,sBAAsB;gBACtB,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,EAAE,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC1D,IAAI,MAAM,CAAC,IAAI,EAAE,WAAW,KAAK,WAAW,EAAE,CAAC;wBAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;wBACjD,OAAO;4BACL,MAAM,EAAE,QAAQ;4BAChB,eAAe,EAAE,SAAS,CAAC,QAAQ,CAAC;4BACpC,KAAK,EAAE,KAAK;4BACZ,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS;4BACrC,eAAe,EAAE,SAAS;4BAC1B,KAAK,EAAE,QAAQ;4BACf,OAAO,EAAE,yCAAyC;4BAClD,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;4BAC/D,aAAa,EAAE,CAAC;yBACjB,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,sCAAsC;gBACtC,IACE,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC;oBACjE,EAAE,CAAC,OAAO,KAAK,WAAW,EAC1B,CAAC;oBACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;oBACzB,6DAA6D;oBAC7D,MAAM,MAAM,GAAG,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC;oBACvC,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC;oBAEzD,IAAI,MAAM,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;wBAChC,iEAAiE;wBACjE,mDAAmD;wBACnD,OAAO;4BACL,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;4BACzB,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE;4BAC3E,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;4BAC9B,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,IAAI,SAAS;4BAChD,eAAe,EAAE,SAAS;4BAC1B,KAAK,EAAE,QAAQ;4BACf,OAAO,EAAE,yCAAyC;4BAClD,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;4BAC/D,aAAa,EAAE,CAAC;yBACjB,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,4CAA4C,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3F,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,UAAU,IAAI;QACjB,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAE5C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC5C,gDAAgD;gBAChD,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAC9B,GAAG,CAAC,uDAAuD,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC;gBACpG,YAAY,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,YAAY,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YAED,GAAG,CAAC,kCAAkC,UAAU,CAAC,MAAM,mBAAmB,CAAC,CAAC;YAE5E,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,eAAe;gBACvD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBAC9C,IAAI,OAAO,EAAE,CAAC;oBACZ,GAAG,CAAC,iCAAiC,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,KAAK,SAAS,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;oBACpH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAED,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;QAC/C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,kCAAkC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACrD,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAED,YAAY,EAAE,CAAC;IACjB,CAAC;IAED,SAAS,YAAY;QACnB,IAAI,OAAO,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YAChC,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,EAAE,CAAC;IAEP,OAAO,GAAG,EAAE;QACV,OAAO,GAAG,KAAK,CAAC;QAChB,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,GAAG,CAAC,gDAAgD,CAAC,CAAC;IACxD,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,GAAG,WAAc,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,WAAc,CAAC,GAAG,KAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzE,OAAO,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,UAAU,CAAC,YAAoB;IACtC,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,GAAG,QAAU,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,QAAU,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1D,OAAO,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;AAC5B,CAAC"}

package/dist/esm/monitor/stellar-watcher.js

@@ -0,0 +1,122 @@
+import { noopLogger } from '../logger.js';
+/**
+ * Creates a Stellar payment watcher using Horizon SSE streaming.
+ *
+ * Listens for `payment` and `create_account` operations directed
+ * to the target account. Supports asset-based filtering.
+ *
+ * @returns Unsubscribe function to stop watching.
+ */
+export function createStellarWatcher(config) {
+    const log = config.logger ?? noopLogger;
+    const horizonUrl = config.horizonUrl ?? 'https://horizon.stellar.org';
+    const assetFilter = config.asset ?? 'all';
+    const cursor = config.cursor ?? 'now';
+    let abortController = null;
+    let running = true;
+    let reconnectTimer = null;
+    async function startStream() {
+        if (!running)
+            return;
+        const url = `${horizonUrl}/accounts/${config.accountId}/payments?cursor=${cursor}&order=asc`;
+        log(`[stellar-watcher] 🔍 Connecting to Horizon SSE: ${config.accountId.slice(0, 10)}…`);
+        abortController = new AbortController();
+        try {
+            const response = await fetch(url, {
+                headers: { Accept: 'text/event-stream' },
+                signal: abortController.signal,
+            });
+            if (!response.ok) {
+                throw new Error(`Horizon HTTP ${response.status}: ${response.statusText}`);
+            }
+            if (!response.body) {
+                throw new Error('No response body for SSE stream');
+            }
+            const reader = response.body.getReader();
+            const decoder = new TextDecoder();
+            let buffer = '';
+            log(`[stellar-watcher] ✅ SSE connected, watching for payments…`);
+            while (running) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                buffer += decoder.decode(value, { stream: true });
+                // Parse SSE events
+                const lines = buffer.split('\n');
+                buffer = lines.pop() || '';
+                let currentData = '';
+                for (const line of lines) {
+                    if (line.startsWith('data: ')) {
+                        currentData += line.slice(6);
+                    }
+                    else if (line === '' && currentData) {
+                        // End of event — process
+                        if (currentData !== '"hello"' && currentData !== 'hello') {
+                            processEvent(currentData);
+                        }
+                        currentData = '';
+                    }
+                }
+            }
+        }
+        catch (err) {
+            if (err.name === 'AbortError') {
+                log('[stellar-watcher] 🛑 Stream aborted');
+                return;
+            }
+            log(`[stellar-watcher] ❌ Stream error: ${err.message}`);
+            config.onError?.(err);
+            // Reconnect after 5s
+            if (running) {
+                log('[stellar-watcher] 🔄 Reconnecting in 5s…');
+                reconnectTimer = setTimeout(startStream, 5000);
+            }
+        }
+    }
+    function processEvent(data) {
+        try {
+            const record = JSON.parse(data);
+            // Only process payments TO this account
+            if (record.to !== config.accountId)
+                return;
+            // Only process payment operations
+            if (record.type !== 'payment' && record.type !== 'create_account')
+                return;
+            // Determine asset
+            const asset = record.asset_type === 'native'
+                ? 'XLM'
+                : record.asset_code || 'unknown';
+            // Apply asset filter
+            if (assetFilter !== 'all' && asset !== assetFilter)
+                return;
+            // Convert amount to atomic units (stroops = amount * 10^7)
+            const atomicAmount = Math.round(parseFloat(record.amount) * 10_000_000).toString();
+            const payment = {
+                amount: atomicAmount,
+                amountFormatted: record.amount,
+                asset,
+                from: record.from,
+                transactionHash: record.transaction_hash,
+                chain: 'Stellar',
+                caip2Id: 'stellar:pubnet',
+                timestamp: new Date(record.created_at),
+            };
+            log(`[stellar-watcher] 💰 Incoming: ${record.amount} ${asset} from ${record.from.slice(0, 10)}…`);
+            config.onPayment(payment);
+        }
+        catch (err) {
+            log(`[stellar-watcher] ⚠️ Failed to parse event: ${err.message}`);
+        }
+    }
+    // Start the stream
+    startStream();
+    // Return unsubscribe
+    return () => {
+        running = false;
+        abortController?.abort();
+        if (reconnectTimer)
+            clearTimeout(reconnectTimer);
+        log(`[stellar-watcher] 🛑 Stopped watching ${config.accountId.slice(0, 10)}…`);
+    };
+}
+//# sourceMappingURL=stellar-watcher.js.map

package/dist/esm/monitor/stellar-watcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stellar-watcher.js","sourceRoot":"","sources":["../../../src/monitor/stellar-watcher.ts"],"names":[],"mappings":"AACA,OAAO,EAAU,UAAU,EAAE,MAAM,WAAW,CAAC;AAuC/C;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC;IACxC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,6BAA6B,CAAC;IACtE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;IAEtC,IAAI,eAAe,GAA2B,IAAI,CAAC;IACnD,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,cAAc,GAAyC,IAAI,CAAC;IAEhE,KAAK,UAAU,WAAW;QACxB,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,GAAG,GAAG,GAAG,UAAU,aAAa,MAAM,CAAC,SAAS,oBAAoB,MAAM,YAAY,CAAC;QAE7F,GAAG,CAAC,mDAAmD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAEzF,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE;gBACxC,MAAM,EAAE,eAAe,CAAC,MAAM;aAC/B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7E,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;YAClC,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,GAAG,CAAC,2DAA2D,CAAC,CAAC;YAEjE,OAAO,OAAO,EAAE,CAAC;gBACf,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAEhB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAElD,mBAAmB;gBACnB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;gBAE3B,IAAI,WAAW,GAAG,EAAE,CAAC;gBACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC9B,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC/B,CAAC;yBAAM,IAAI,IAAI,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC;wBACtC,yBAAyB;wBACzB,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;4BACzD,YAAY,CAAC,WAAW,CAAC,CAAC;wBAC5B,CAAC;wBACD,WAAW,GAAG,EAAE,CAAC;oBACnB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC9B,GAAG,CAAC,qCAAqC,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,GAAG,CAAC,qCAAqC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;YAEtB,qBAAqB;YACrB,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,0CAA0C,CAAC,CAAC;gBAChD,cAAc,GAAG,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,YAAY,CAAC,IAAY;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAyB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEtD,wCAAwC;YACxC,IAAI,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,SAAS;gBAAE,OAAO;YAE3C,kCAAkC;YAClC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB;gBAAE,OAAO;YAE1E,kBAAkB;YAClB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,KAAK,QAAQ;gBAC1C,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,SAAS,CAAC;YAEnC,qBAAqB;YACrB,IAAI,WAAW,KAAK,KAAK,IAAI,KAAK,KAAK,WAAW;gBAAE,OAAO;YAE3D,2DAA2D;YAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;YAEnF,MAAM,OAAO,GAAoB;gBAC/B,MAAM,EAAE,YAAY;gBACpB,eAAe,EAAE,MAAM,CAAC,MAAM;gBAC9B,KAAK;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,eAAe,EAAE,MAAM,CAAC,gBAAgB;gBACxC,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,gBAAgB;gBACzB,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;aACvC,CAAC;YAEF,GAAG,CAAC,kCAAkC,MAAM,CAAC,MAAM,IAAI,KAAK,SAAS,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YAClG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,+CAA+C,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,WAAW,EAAE,CAAC;IAEd,qBAAqB;IACrB,OAAO,GAAG,EAAE;QACV,OAAO,GAAG,KAAK,CAAC;QAChB,eAAe,EAAE,KAAK,EAAE,CAAC;QACzB,IAAI,cAAc;YAAE,YAAY,CAAC,cAAc,CAAC,CAAC;QACjD,GAAG,CAAC,yCAAyC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACjF,CAAC,CAAC;AACJ,CAAC"}

package/dist/esm/mpp.js

@@ -0,0 +1,175 @@
+/**
+ * MPP — Machine Payments Protocol utilities.
+ *
+ * Handles parsing/building of MPP-standard headers:
+ *   - WWW-Authenticate: Payment (Challenge)
+ *   - Authorization: Payment (Credential)
+ *   - Payment-Receipt (Receipt)
+ *
+ * @see https://mpp.dev/protocol/challenges
+ * @see https://mpp.dev/protocol/credentials
+ * @see https://mpp.dev/protocol/receipts
+ * @see https://paymentauth.org — IETF specification
+ */
+// ─── Base64url helpers ──────────────────────────────────────────────
+/**
+ * Encode string to base64url (RFC 4648 §5).
+ * No padding, URL-safe alphabet.
+ */
+export function base64urlEncode(str) {
+    const b64 = Buffer.from(str, 'utf-8').toString('base64');
+    return b64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/**
+ * Decode base64url string.
+ */
+export function base64urlDecode(str) {
+    // Restore standard base64
+    let b64 = str.replace(/-/g, '+').replace(/_/g, '/');
+    // Add padding
+    while (b64.length % 4 !== 0)
+        b64 += '=';
+    return Buffer.from(b64, 'base64').toString('utf-8');
+}
+// ─── Challenge parsing ──────────────────────────────────────────────
+/**
+ * Parse a `WWW-Authenticate: Payment` header value into an MppChallenge.
+ *
+ * Format:
+ * ```
+ * Payment id="abc", realm="mpp.dev", method="stripe", intent="charge",
+ *   expires="2025-01-15T12:05:00Z", request="eyJhbW91bnQ..."
+ * ```
+ *
+ * @param header — Raw header value (with or without "Payment " prefix)
+ * @returns Parsed challenge object
+ * @throws Error if required fields are missing
+ */
+export function parseMppChallenge(header) {
+    // Strip "Payment " prefix if present
+    let raw = header.trim();
+    if (raw.startsWith('Payment ')) {
+        raw = raw.slice(8);
+    }
+    // Parse RFC 7235 auth-param format: key="value", key="value"
+    const params = parseAuthParams(raw);
+    // Validate required fields
+    const required = ['id', 'realm', 'method', 'intent', 'request'];
+    for (const key of required) {
+        if (!params[key]) {
+            throw new Error(`MPP Challenge missing required field: ${key}`);
+        }
+    }
+    return {
+        id: params.id,
+        realm: params.realm,
+        method: params.method,
+        intent: params.intent,
+        request: params.request,
+        expires: params.expires,
+        description: params.description,
+    };
+}
+/**
+ * Parse multiple `WWW-Authenticate: Payment` headers.
+ * Servers can offer multiple payment options.
+ */
+export function parseMppChallenges(headers) {
+    return headers.map(parseMppChallenge);
+}
+/**
+ * Decode the `request` field of a Challenge into a structured object.
+ */
+export function decodeChallengeRequest(challenge) {
+    const json = base64urlDecode(challenge.request);
+    return JSON.parse(json);
+}
+// ─── Credential building ────────────────────────────────────────────
+/**
+ * Build an MPP Credential for the `Authorization: Payment` header.
+ *
+ * @param challenge — The challenge being responded to
+ * @param source — DID or identifier of the payer
+ * @param payload — Method-specific proof (SPT for Stripe, tx for Tempo)
+ * @returns Base64url-encoded credential string
+ */
+export function buildMppCredential(challenge, source, payload) {
+    const credential = {
+        challenge,
+        source,
+        payload,
+    };
+    return base64urlEncode(JSON.stringify(credential));
+}
+/**
+ * Build the full `Authorization` header value.
+ */
+export function buildAuthorizationHeader(challenge, source, payload) {
+    return `Payment ${buildMppCredential(challenge, source, payload)}`;
+}
+// ─── Receipt parsing ────────────────────────────────────────────────
+/**
+ * Parse a `Payment-Receipt` header.
+ */
+export function parseMppReceipt(header) {
+    try {
+        const json = base64urlDecode(header.trim());
+        return JSON.parse(json);
+    }
+    catch {
+        return { raw: header };
+    }
+}
+// ─── Protocol detection ─────────────────────────────────────────────
+/**
+ * Detect whether a 402 response uses MPP or x402 protocol.
+ *
+ * MPP: has `WWW-Authenticate: Payment` header
+ * x402: has JSON body with `x402Version` and `accepts[]`
+ */
+export function detectProtocol(headers, body) {
+    // Check for MPP: WWW-Authenticate header with Payment scheme
+    const wwwAuth = headers['www-authenticate'] || headers['WWW-Authenticate'];
+    if (wwwAuth) {
+        const values = Array.isArray(wwwAuth) ? wwwAuth : [wwwAuth];
+        if (values.some((v) => v.trim().startsWith('Payment '))) {
+            return 'mpp';
+        }
+    }
+    // Check for x402: JSON body with x402Version
+    if (body && typeof body === 'object' && ('x402Version' in body || 'accepts' in body)) {
+        return 'x402';
+    }
+    return 'unknown';
+}
+/**
+ * Extract all MPP challenges from response headers.
+ * Handles both single and multiple WWW-Authenticate headers.
+ */
+export function extractMppChallenges(headers) {
+    const wwwAuth = headers['www-authenticate'] || headers['WWW-Authenticate'];
+    if (!wwwAuth)
+        return [];
+    const values = Array.isArray(wwwAuth) ? wwwAuth : [wwwAuth];
+    return values
+        .filter((v) => v.trim().startsWith('Payment '))
+        .map(parseMppChallenge);
+}
+// ─── Internal helpers ───────────────────────────────────────────────
+/**
+ * Parse RFC 7235 auth-param format.
+ * `key="value", key="value"`
+ */
+function parseAuthParams(raw) {
+    const params = {};
+    // Match key="value" pairs, handling escaped quotes
+    const regex = /(\w+)="((?:[^"\\]|\\.)*)"/g;
+    let match;
+    while ((match = regex.exec(raw)) !== null) {
+        const [, key, value] = match;
+        // Unescape backslash-escaped characters
+        params[key] = value.replace(/\\(.)/g, '$1');
+    }
+    return params;
+}
+//# sourceMappingURL=mpp.js.map

package/dist/esm/mpp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mpp.js","sourceRoot":"","sources":["../../src/mpp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA0FH,uEAAuE;AAEvE;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzD,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,0BAA0B;IAC1B,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpD,cAAc;IACd,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,GAAG,IAAI,GAAG,CAAC;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,uEAAuE;AAEvE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,qCAAqC;IACrC,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IAED,6DAA6D;IAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAEpC,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;IACzE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAG;QACd,KAAK,EAAE,MAAM,CAAC,KAAM;QACpB,MAAM,EAAE,MAAM,CAAC,MAAoB;QACnC,MAAM,EAAE,MAAM,CAAC,MAAoB;QACnC,OAAO,EAAE,MAAM,CAAC,OAAQ;QACxB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAiB;IAClD,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAuB;IAC5D,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,CAAC;AAC9C,CAAC;AAED,uEAAuE;AAEvE;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAuB,EACvB,MAAc,EACd,OAAiC;IAEjC,MAAM,UAAU,GAAkB;QAChC,SAAS;QACT,MAAM;QACN,OAAO;KACR,CAAC;IACF,OAAO,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAuB,EACvB,MAAc,EACd,OAAiC;IAEjC,OAAO,WAAW,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,uEAAuE;AAEvE;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,uEAAuE;AAEvE;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAsD,EACtD,IAAc;IAEd,6DAA6D;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC3E,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,IAAK,IAAY,IAAI,SAAS,IAAK,IAAY,CAAC,EAAE,CAAC;QACvG,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAsD;IAEtD,MAAM,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC3E,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5D,OAAO,MAAM;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;SAC9C,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAC5B,CAAC;AAED,uEAAuE;AAEvE;;;GAGG;AACH,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,mDAAmD;IACnD,MAAM,KAAK,GAAG,4BAA4B,CAAC;IAC3C,IAAI,KAAK,CAAC;IACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;QAC7B,wCAAwC;QACxC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/policy.js

@@ -0,0 +1,67 @@
+/**
+ * PolicyEngine — On-device budget controller for autonomous AI agents.
+ *
+ * Enforces per-transaction caps, monthly rolling budgets, and optional
+ * destination whitelists so that an agent can never overspend without
+ * explicit human approval.
+ *
+ * Fail-closed: if any check fails, the payment is rejected.
+ */
+import { noopLogger } from './logger.js';
+export class PolicyEngine {
+    policy;
+    currentMonthSpent = 0;
+    log;
+    constructor(policy, logger) {
+        this.policy = policy;
+        this.log = logger ?? noopLogger;
+    }
+    /**
+     * Returns `true` if the proposed spend passes every policy gate.
+     * Fail-closed: any unrecognised state returns `false`.
+     */
+    checkPolicy(amountUsd, destination) {
+        if (amountUsd <= 0) {
+            this.log(`[Policy] 🚫 Invalid amount: $${amountUsd}`);
+            return false;
+        }
+        if (amountUsd > this.policy.maxAmountPerTransaction) {
+            this.log(`[Policy] 🚫 $${amountUsd} exceeds per-tx limit of $${this.policy.maxAmountPerTransaction}`);
+            return false;
+        }
+        if (this.currentMonthSpent + amountUsd > this.policy.monthlyBudget) {
+            this.log(`[Policy] 🚫 $${amountUsd} would exceed monthly budget of $${this.policy.monthlyBudget} (spent: $${this.currentMonthSpent})`);
+            return false;
+        }
+        if (this.policy.allowedDestinations &&
+            this.policy.allowedDestinations.length > 0 &&
+            destination &&
+            !this.policy.allowedDestinations.includes(destination)) {
+            this.log(`[Policy] 🚫 Destination ${destination} not in whitelist`);
+            return false;
+        }
+        return true;
+    }
+    /** Record a successful spend against the rolling budget. */
+    recordSpend(amountUsd) {
+        this.currentMonthSpent += amountUsd;
+        this.log(`[Policy] 📊 Spent $${amountUsd} — total: $${this.currentMonthSpent}/$${this.policy.monthlyBudget}`);
+    }
+    /** Get total USD spent in the current period. */
+    getSpent() {
+        return this.currentMonthSpent;
+    }
+    /** Get remaining USD budget. */
+    getRemainingBudget() {
+        return Math.max(0, this.policy.monthlyBudget - this.currentMonthSpent);
+    }
+    /** Reset the spend counter (e.g. on month rollover or for testing). */
+    resetBudget() {
+        this.currentMonthSpent = 0;
+    }
+    /** Get a snapshot of the current policy configuration. */
+    getPolicy() {
+        return { ...this.policy };
+    }
+}
+//# sourceMappingURL=policy.js.map

package/dist/esm/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAU,UAAU,EAAE,MAAM,UAAU,CAAC;AAW9C,MAAM,OAAO,YAAY;IAKb;IAJF,iBAAiB,GAAG,CAAC,CAAC;IACtB,GAAG,CAAS;IAEpB,YACU,MAAoB,EAC5B,MAAe;QADP,WAAM,GAAN,MAAM,CAAc;QAG5B,IAAI,CAAC,GAAG,GAAG,MAAM,IAAI,UAAU,CAAC;IAClC,CAAC;IAED;;;OAGG;IACI,WAAW,CAAC,SAAiB,EAAE,WAAoB;QACxD,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;YACpD,IAAI,CAAC,GAAG,CACN,gBAAgB,SAAS,6BAA6B,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAC5F,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,IAAI,CAAC,iBAAiB,GAAG,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACnE,IAAI,CAAC,GAAG,CACN,gBAAgB,SAAS,oCAAoC,IAAI,CAAC,MAAM,CAAC,aAAa,aAAa,IAAI,CAAC,iBAAiB,GAAG,CAC7H,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IACE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAC/B,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC;YAC1C,WAAW;YACX,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,EACtD,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,2BAA2B,WAAW,mBAAmB,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4DAA4D;IACrD,WAAW,CAAC,SAAiB;QAClC,IAAI,CAAC,iBAAiB,IAAI,SAAS,CAAC;QACpC,IAAI,CAAC,GAAG,CACN,sBAAsB,SAAS,cAAc,IAAI,CAAC,iBAAiB,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CACpG,CAAC;IACJ,CAAC;IAED,iDAAiD;IAC1C,QAAQ;QACb,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED,gCAAgC;IACzB,kBAAkB;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACzE,CAAC;IAED,uEAAuE;IAChE,WAAW;QAChB,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,0DAA0D;IACnD,SAAS;QACd,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;CACF"}