run402 4.93.1 → 4.94.0

package/lib/allowance.mjs

@@ -1,355 +0,0 @@
-import { readAllowance, saveAllowance, allowanceFile } from "./config.mjs";
-import { getSdk } from "./sdk.mjs";
-import { reportSdkError, fail } from "./sdk-errors.mjs";
-import { assertKnownFlags, flagValue, normalizeArgv, parseIntegerFlag, positionalArgs, failUnknownSubcommand } from "./argparse.mjs";
-
-const HELP = `run402 allowance — Manage your agent allowance
-
-Usage:
-  run402 allowance <subcommand>
-
-Subcommands:
-  status    Show allowance address, network, rail, and funding status
-  create    Generate a new allowance and save it locally
-  fund      Request test funds from the faucet (Base Sepolia or Tempo)
-  balance   Show on-chain balances and Run402 billing balance
-  export    Print the allowance address as JSON (useful for scripting)
-  checkout  Create an org balance checkout session (--amount <usd_micros>)
-  history   View billing transaction history (--limit <n>)
-
-Notes:
-  - Agent allowance is stored locally at ~/.config/run402/allowance.json
-  - The allowance works on any EVM chain (Base for x402, Tempo for MPP)
-  - Use 'run402 init' for x402 or 'run402 init mpp' for MPP rail
-
-Examples:
-  run402 allowance create
-  run402 allowance status
-  run402 allowance fund
-  run402 allowance export
-  run402 allowance balance
-  run402 allowance checkout --amount 5000000
-  run402 allowance history --limit 10
-`;
-
-const SUB_HELP = {
-  checkout: `run402 allowance checkout — Create an org balance checkout session
-
-Usage:
-  run402 allowance checkout --amount <usd_micros>
-
-Options:
-  --amount <n>        Amount in USD micros (required; e.g. 5000000 for $5)
-
-Examples:
-  run402 allowance checkout --amount 5000000
-  run402 allowance checkout --amount 10000000
-`,
-  history: `run402 allowance history — View billing transaction history
-
-Usage:
-  run402 allowance history [--limit <n>]
-
-Options:
-  --limit <n>         Max entries to return (default: 20)
-
-Examples:
-  run402 allowance history
-  run402 allowance history --limit 10
-`,
-};
-
-const USDC_ABI = [{ name: "balanceOf", type: "function", stateMutability: "view", inputs: [{ name: "account", type: "address" }], outputs: [{ name: "", type: "uint256" }] }];
-const USDC_MAINNET = "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
-const USDC_SEPOLIA = "0x036CbD53842c5426634e7929541eC2318f3dCF7e";
-const PATH_USD = "0x20c0000000000000000000000000000000000000";
-const TEMPO_RPC = "https://rpc.moderato.tempo.xyz/";
-
-async function loadDeps() {
-  const { generatePrivateKey, privateKeyToAccount } = await import("viem/accounts");
-  const { createPublicClient, http, defineChain } = await import("viem");
-  const { base, baseSepolia } = await import("viem/chains");
-  const tempoModerato = defineChain({
-    id: 42431,
-    name: "Tempo Moderato",
-    nativeCurrency: { name: "pathUSD", symbol: "pathUSD", decimals: 6 },
-    rpcUrls: { default: { http: [TEMPO_RPC] } },
-  });
-  return { generatePrivateKey, privateKeyToAccount, createPublicClient, http, base, baseSepolia, tempoModerato };
-}
-
-async function status() {
-  try {
-    const data = await getSdk().allowance.status();
-    if (!data.configured) {
-      console.log(JSON.stringify({ wallet: null, hint: "Run: run402 allowance create" }));
-      return;
-    }
-    const w = readAllowance();
-    // The Lightning allowance (mpp-lightning-over-nwc): public facts plus a
-    // best-effort balance read over NWC; the pairing secret never prints.
-    const { describeLightning, readLightningBalance } = await import("./lightning-wallet.mjs");
-    const lightning = w?.lightning ? describeLightning(w, null, await readLightningBalance(w)) : null;
-    console.log(JSON.stringify({
-      wallet: {
-        address: data.address,
-        created: data.created,
-        configured: data.configured,
-        // `faucet_used` is named for what it is: an on-disk marker that
-        // tracks faucet invocation, not pay-readiness. For a true "can this
-        // account pay right now" check, use `run402 allowance balance`.
-        faucet_used: !!data.faucet_used,
-        rail: data.rail ?? w?.rail ?? "x402",
-        path: data.path ?? allowanceFile(),
-      },
-      ...(lightning ? { lightning } : {}),
-    }));
-  } catch (err) {
-    reportSdkError(err);
-  }
-}
-
-async function create() {
-  try {
-    const result = await getSdk().allowance.create();
-    console.log(JSON.stringify({
-      address: result.address,
-      path: result.path ?? allowanceFile(),
-      created: true,
-    }));
-  } catch (err) {
-    const msg = (err instanceof Error) ? err.message : String(err);
-    if (/already exists/i.test(msg)) {
-      fail({
-        code: "ALLOWANCE_EXISTS",
-        message: "Agent allowance already exists.",
-        hint: "Use 'status' to check it.",
-      });
-    }
-    reportSdkError(err);
-  }
-}
-
-async function fund() {
-  const w = readAllowance();
-  if (!w) {
-    fail({
-      code: "NO_ALLOWANCE",
-      message: "No agent allowance.",
-      hint: "Run: run402 allowance create",
-    });
-  }
-
-  if (w.rail === "mpp") {
-    // Tempo Moderato faucet — instant, no polling needed
-    const { createPublicClient, http, tempoModerato } = await loadDeps();
-    const client = createPublicClient({ chain: tempoModerato, transport: http() });
-    const before = await readUsdcBalance(client, PATH_USD, w.address).catch(() => 0);
-
-    const res = await fetch(TEMPO_RPC, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ jsonrpc: "2.0", method: "tempo_fundAddress", params: [w.address], id: 1 }),
-    });
-    const data = await res.json();
-    if (data.error) {
-      fail({
-        code: "FAUCET_FAILED",
-        message: data.error.message || "Tempo faucet failed",
-        details: { rail: "mpp" },
-      });
-    }
-
-    // Re-read balance once (instant confirmation)
-    const now = await readUsdcBalance(client, PATH_USD, w.address).catch(() => before);
-    saveAllowance({ ...w, funded: true, lastFaucet: new Date().toISOString() });
-    console.log(JSON.stringify({
-      address: w.address,
-      rail: "mpp",
-      onchain: {
-        "tempo-moderato_pathusd_micros": now,
-      },
-    }, null, 2));
-    return;
-  }
-
-  // Default: Base Sepolia faucet (existing behavior)
-  const { createPublicClient, http, baseSepolia } = await loadDeps();
-  const client = createPublicClient({ chain: baseSepolia, transport: http() });
-  const before = await readUsdcBalance(client, USDC_SEPOLIA, w.address).catch(() => 0);
-
-  let data;
-  try {
-    data = await getSdk().allowance.faucet(w.address);
-  } catch (err) {
-    reportSdkError(err);
-  }
-
-  const MAX_WAIT = 30;
-  for (let i = 0; i < MAX_WAIT; i++) {
-    await new Promise(r => setTimeout(r, 1000));
-    const now = await readUsdcBalance(client, USDC_SEPOLIA, w.address).catch(() => before);
-    if (now > before) {
-      saveAllowance({ ...w, funded: true, lastFaucet: new Date().toISOString() });
-      console.log(JSON.stringify({
-        address: w.address,
-        rail: w.rail || "x402",
-        onchain: {
-          "base-sepolia_usd_micros": now,
-        },
-      }, null, 2));
-      return;
-    }
-  }
-
-  saveAllowance({ ...w, funded: true, lastFaucet: new Date().toISOString() });
-  console.log(JSON.stringify({ ...data, balance_confirmed: false, hint: "Faucet request sent but on-chain balance not yet confirmed" }));
-}
-
-async function readUsdcBalance(client, usdc, address) {
-  const raw = await client.readContract({ address: usdc, abi: USDC_ABI, functionName: "balanceOf", args: [address] });
-  return Number(raw);
-}
-
-async function balance() {
-  const w = readAllowance();
-  if (!w) {
-    fail({
-      code: "NO_ALLOWANCE",
-      message: "No agent allowance.",
-      hint: "Run: run402 allowance create",
-    });
-  }
-
-  const { createPublicClient, http, base, baseSepolia, tempoModerato } = await loadDeps();
-  const mainnetClient = createPublicClient({ chain: base, transport: http() });
-  const sepoliaClient = createPublicClient({ chain: baseSepolia, transport: http() });
-  const tempoClient = createPublicClient({ chain: tempoModerato, transport: http() });
-
-  const [mainnetUsdc, sepoliaUsdc, tempoPathUsd, billingRes] = await Promise.all([
-    readUsdcBalance(mainnetClient, USDC_MAINNET, w.address).catch(() => null),
-    readUsdcBalance(sepoliaClient, USDC_SEPOLIA, w.address).catch(() => null),
-    readUsdcBalance(tempoClient, PATH_USD, w.address).catch(() => null),
-    getSdk().billing.checkBalance(w.address).catch(() => null),
-  ]);
-
-  console.log(JSON.stringify({
-    address: w.address,
-    rail: w.rail || "x402",
-    onchain: {
-      "base-mainnet_usd_micros": mainnetUsdc,
-      "base-sepolia_usd_micros": sepoliaUsdc,
-      "tempo-moderato_pathusd_micros": tempoPathUsd,
-    },
-    run402: billingRes ? { balance_usd_micros: billingRes.available_usd_micros } : "no organization",
-  }, null, 2));
-}
-
-async function exportAddr(args = []) {
-  const parsedArgs = normalizeArgv(args);
-  assertKnownFlags(parsedArgs, [], []);
-  const bare = positionalArgs(parsedArgs, []);
-  if (bare.length > 0) {
-    fail({
-      code: "BAD_USAGE",
-      message: `Unexpected argument for allowance export: ${bare[0]}`,
-      details: { argument: bare[0] },
-    });
-  }
-  try {
-    const address = await getSdk().allowance.export();
-    console.log(JSON.stringify({ address }));
-  } catch {
-    fail({ code: "NO_ALLOWANCE", message: "No agent allowance." });
-  }
-}
-
-async function checkout(args) {
-  const w = readAllowance();
-  if (!w) {
-    fail({
-      code: "NO_ALLOWANCE",
-      message: "No agent allowance.",
-      hint: "Run: run402 allowance create",
-    });
-  }
-  const parsedArgs = normalizeArgv(args);
-  assertKnownFlags(parsedArgs, ["--amount", "--help", "-h"], ["--amount"]);
-  const bare = positionalArgs(parsedArgs, ["--amount"]);
-  if (bare.length > 0) {
-    fail({
-      code: "BAD_USAGE",
-      message: `Unexpected argument for allowance checkout: ${bare[0]}`,
-      details: { argument: bare[0] },
-    });
-  }
-  const amountRaw = flagValue(parsedArgs, "--amount");
-  if (amountRaw === null) {
-    fail({
-      code: "BAD_USAGE",
-      message: "Missing --amount <usd_micros>",
-      hint: "e.g. --amount 5000000 for $5",
-    });
-  }
-  const amount = parseIntegerFlag("--amount", amountRaw, { min: 1 });
-  try {
-    const org = await getSdk().billing.lookupOrganization(w.address);
-    const data = await getSdk().billing.createCheckout(org.org_id, {
-      product: "balance_topup",
-      amountUsdMicros: amount,
-    });
-    console.log(JSON.stringify(data, null, 2));
-  } catch (err) {
-    reportSdkError(err);
-  }
-}
-
-async function history(args) {
-  const w = readAllowance();
-  if (!w) {
-    fail({
-      code: "NO_ALLOWANCE",
-      message: "No agent allowance.",
-      hint: "Run: run402 allowance create",
-    });
-  }
-  const parsedArgs = normalizeArgv(args);
-  assertKnownFlags(parsedArgs, ["--limit", "--help", "-h"], ["--limit"]);
-  const bare = positionalArgs(parsedArgs, ["--limit"]);
-  if (bare.length > 0) {
-    fail({
-      code: "BAD_USAGE",
-      message: `Unexpected argument for allowance history: ${bare[0]}`,
-      details: { argument: bare[0] },
-    });
-  }
-  const limit = parseIntegerFlag("--limit", flagValue(parsedArgs, "--limit"), { min: 1, def: 20 });
-  try {
-    const data = await getSdk().billing.history(w.address, limit);
-    console.log(JSON.stringify(data, null, 2));
-  } catch (err) {
-    reportSdkError(err);
-  }
-}
-
-export async function run(sub, args) {
-  if (!sub || sub === '--help' || sub === '-h') {
-    console.log(HELP);
-    process.exit(0);
-  }
-  if (Array.isArray(args) && (args.includes("--help") || args.includes("-h"))) {
-    console.log(SUB_HELP[sub] || HELP);
-    process.exit(0);
-  }
-  switch (sub) {
-    case "status":  await status(); break;
-    case "create":  await create(); break;
-    case "fund":    await fund(); break;
-    case "balance": await balance(); break;
-    case "export":   await exportAddr(args); break;
-    case "checkout": await checkout(args); break;
-    case "history":  await history(args); break;
-    default:
-      failUnknownSubcommand("allowance", sub);
-  }
-}

package/lib/operator-proofs.mjs

@@ -1,22 +0,0 @@
-/**
- * one-passkey-per-person: the two proofs a wallet-authenticated notification
- * mutation carries when the human behind this wallet is logged in.
- *
- * `run402 operator login --loopback` caches a passkey-fresh control-plane
- * session. The gateway accepts that session — sent as `Authorization: Bearer`
- * beside the wallet's `SIGN-IN-WITH-X` on the SAME request — as
- * `operator_passkey` assurance for a wallet contact whose verified email the
- * session's principal holds. So a person who logged in once is never asked to
- * enroll a second passkey. With no live cached session this returns
- * `undefined` and the verb behaves exactly as before (wallet auth alone).
- */
-import { allowanceAuthHeaders } from "./config.mjs";
-import { loadLiveControlPlaneSession } from "../core-dist/control-plane-session.js";
-
-/** `{ siwx, token }` for `path`, or `undefined` when no live operator session is cached. */
-export function operatorProofs(path) {
-  const siwx = allowanceAuthHeaders(path)["SIGN-IN-WITH-X"];
-  const live = loadLiveControlPlaneSession();
-  if (!live || !live.control_plane_session_token) return undefined;
-  return { siwx, token: live.control_plane_session_token };
-}