spendctl 0.0.0-stage → 0.1.0

package/dist/state.js

@@ -0,0 +1,72 @@
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { loadConfig, newToken } from "@spendctl/core";
+export function paths(configFlag) {
+    const config = resolve(configFlag ?? process.env.SPENDCTL_CONFIG ?? "spendctl.yaml");
+    const root = dirname(config);
+    const state = join(root, ".spendctl");
+    return {
+        config,
+        root,
+        state,
+        adminToken: join(state, "admin.token"),
+        agentTokens: join(state, "agents.json"),
+        sidecar: join(state, "sidecar.json"),
+    };
+}
+function writeSecret(path, content) {
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, content, { mode: 0o600 });
+    chmodSync(path, 0o600);
+}
+export function ensureAdminToken(p) {
+    if (process.env.SPENDCTL_ADMIN_TOKEN)
+        return process.env.SPENDCTL_ADMIN_TOKEN;
+    if (existsSync(p.adminToken))
+        return readFileSync(p.adminToken, "utf8").trim();
+    const token = newToken();
+    writeSecret(p.adminToken, `${token}\n`);
+    return token;
+}
+export function readAdminToken(p) {
+    if (process.env.SPENDCTL_ADMIN_TOKEN)
+        return process.env.SPENDCTL_ADMIN_TOKEN;
+    if (!existsSync(p.adminToken)) {
+        throw new Error(`No admin token at ${p.adminToken}. Run \`spendctl init\` (or \`spendctl start\`) in this directory first.`);
+    }
+    return readFileSync(p.adminToken, "utf8").trim();
+}
+export function readAgentTokens(p) {
+    if (!existsSync(p.agentTokens))
+        return {};
+    return JSON.parse(readFileSync(p.agentTokens, "utf8"));
+}
+export function writeAgentTokens(p, tokens) {
+    writeSecret(p.agentTokens, `${JSON.stringify(tokens, null, 2)}\n`);
+}
+export function loadDotenv(root) {
+    const file = join(root, ".env");
+    if (existsSync(file))
+        process.loadEnvFile(file);
+}
+export function tryLoadConfig(p) {
+    return existsSync(p.config) ? loadConfig(p.config) : undefined;
+}
+/** Where the running sidecar listens: $SPENDCTL_URL, the pid file, then the config. */
+export function sidecarUrl(p) {
+    if (process.env.SPENDCTL_URL)
+        return process.env.SPENDCTL_URL;
+    if (existsSync(p.sidecar)) {
+        try {
+            const info = JSON.parse(readFileSync(p.sidecar, "utf8"));
+            if (info.url)
+                return info.url;
+        }
+        catch {
+            // fall through
+        }
+    }
+    const config = tryLoadConfig(p);
+    return `http://${config?.server.host ?? "127.0.0.1"}:${config?.server.port ?? 8402}`;
+}
+//# sourceMappingURL=state.js.map

package/dist/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAe,UAAU,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAWnE,MAAM,UAAU,KAAK,CAAC,UAAmB;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,eAAe,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACtC,OAAO;QACL,MAAM;QACN,IAAI;QACJ,KAAK;QACL,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC;QACtC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC;QACvC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,OAAe;IAChD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAAQ;IACvC,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC9E,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,OAAO,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/E,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAQ;IACrC,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAC9E,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,qBAAqB,CAAC,CAAC,UAAU,0EAA0E,CAC5G,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAQ;IACtC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAA2B,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAAQ,EAAE,MAA8B;IACvE,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAQ;IACpC,OAAO,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,UAAU,CAAC,CAAQ;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC9D,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAqB,CAAC;YAC7E,IAAI,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,UAAU,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,WAAW,IAAI,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;AACvF,CAAC"}

package/dist/templates.d.ts

@@ -0,0 +1,4 @@
+export type SignerChoice = "mock" | "cdp" | "private-key";
+export declare function policyTemplate(signer: SignerChoice): string;
+export declare const ENV_EXAMPLE = "# Coinbase CDP (default signer for real payments). https://portal.cdp.coinbase.com\nCDP_API_KEY_ID=\nCDP_API_KEY_SECRET=\nCDP_WALLET_SECRET=\nPAYER_ACCOUNT_NAME=spendctl-payer\n\n# Optional: raw key signer (signer.type: private-key). Testnet only.\n# PAYER_PRIVATE_KEY=0x...\n";
+//# sourceMappingURL=templates.d.ts.map

package/dist/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../src/templates.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,KAAK,GAAG,aAAa,CAAC;AAE1D,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAqD3D;AAED,eAAO,MAAM,WAAW,yRAQvB,CAAC"}

package/dist/templates.js

@@ -0,0 +1,63 @@
+export function policyTemplate(signer) {
+    const signerBlock = signer === "cdp"
+        ? `# Coinbase CDP server wallet: keys stay in CDP, spendctl only asks it to sign.
+# Needs CDP_API_KEY_ID, CDP_API_KEY_SECRET, CDP_WALLET_SECRET and PAYER_ACCOUNT_NAME in .env.
+signer:
+  type: cdp`
+        : signer === "private-key"
+            ? `# Raw private key from $PAYER_PRIVATE_KEY (opt-in; prefer "cdp").
+signer:
+  type: private-key`
+            : `# "mock" signs with a throwaway key that only the bundled mock facilitator accepts.
+# Switch to "cdp" for real (testnet) payments: \`spendctl init --signer cdp --force\`.
+signer:
+  type: mock`;
+    return `# spendctl policy — docs: https://spendctl.dev/docs/policy
+# Everything here is enforced by the sidecar, outside the agent's process.
+version: 1
+
+${signerBlock}
+
+server:
+  host: 127.0.0.1
+  port: 8402
+
+approvals:
+  timeout: 10m        # unanswered approvals are denied
+  hold: true          # keep the agent's request open until a human decides
+  holdMax: 4m         # ...but answer with a retry-mode 402 after this long (the approval stays open)
+  webhooks: []
+  # - url: https://hooks.slack.com/services/T000/B000/XXXX
+  #   format: slack   # json | slack | discord
+
+defaults:
+  networks: ["eip155:84532"]   # Base Sepolia only; add "eip155:8453" to allow Base mainnet
+  assets: ["USDC"]
+  maxChainDepth: 3             # agent -> agent -> agent, then stop
+  priceJumpFactor: 3           # a price >3x the last one paid for an endpoint needs a human
+  firstPaymentMax: "0.05"      # first payment to a new recipient above this needs a human
+
+agents:
+  researcher:
+    description: Research agent that buys weather and search results
+    budget:
+      perRequest: "0.05"
+      daily: "0.03"
+      monthly: "20.00"
+    onBudgetExceeded: approve  # deny | approve
+    requireApprovalAbove: "0.50"
+    allow:
+      - "localhost:4021"       # spendctl mock: weather API (x402 v2)
+      - "localhost:4022"       # spendctl mock: search API (x402 v1)
+`;
+}
+export const ENV_EXAMPLE = `# Coinbase CDP (default signer for real payments). https://portal.cdp.coinbase.com
+CDP_API_KEY_ID=
+CDP_API_KEY_SECRET=
+CDP_WALLET_SECRET=
+PAYER_ACCOUNT_NAME=spendctl-payer
+
+# Optional: raw key signer (signer.type: private-key). Testnet only.
+# PAYER_PRIVATE_KEY=0x...
+`;
+//# sourceMappingURL=templates.js.map

package/dist/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../src/templates.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,MAAM,WAAW,GACf,MAAM,KAAK,KAAK;QACd,CAAC,CAAC;;;YAGI;QACN,CAAC,CAAC,MAAM,KAAK,aAAa;YACxB,CAAC,CAAC;;oBAEU;YACZ,CAAC,CAAC;;;aAGG,CAAC;IACZ,OAAO;;;;EAIP,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCZ,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;CAQ1B,CAAC"}

package/dist/ui.d.ts

@@ -0,0 +1,15 @@
+export declare const c: {
+    bold: (text: string) => string;
+    dim: (text: string) => string;
+    red: (text: string) => string;
+    green: (text: string) => string;
+    yellow: (text: string) => string;
+    blue: (text: string) => string;
+    magenta: (text: string) => string;
+    cyan: (text: string) => string;
+    gray: (text: string) => string;
+};
+export declare function table(rows: string[][], header?: string[]): string;
+export declare function statusColor(status: string): string;
+export declare function short(text: string | undefined, max?: number): string;
+//# sourceMappingURL=ui.d.ts.map

package/dist/ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../src/ui.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,CAAC;IACZ,IAAI,SAH+C,MAAM;IAIzD,GAAG;IACH,GAAG;IACH,KAAK;IACL,MAAM;IACN,IAAI;IACJ,OAAO;IACP,IAAI;IACJ,IAAI;CACL,CAAC;AAMF,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAoBjE;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAKlD;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,SAAK,GAAG,MAAM,CAGhE"}

package/dist/ui.js

@@ -0,0 +1,55 @@
+const enabled = process.stdout.isTTY && !process.env.NO_COLOR && process.env.TERM !== "dumb";
+const forced = process.env.FORCE_COLOR && process.env.FORCE_COLOR !== "0";
+const on = Boolean(enabled || forced);
+const wrap = (open, close) => (text) => (on ? `\u001b[${open}m${text}\u001b[${close}m` : text);
+export const c = {
+    bold: wrap(1, 22),
+    dim: wrap(2, 22),
+    red: wrap(31, 39),
+    green: wrap(32, 39),
+    yellow: wrap(33, 39),
+    blue: wrap(34, 39),
+    magenta: wrap(35, 39),
+    cyan: wrap(36, 39),
+    gray: wrap(90, 39),
+};
+// biome-ignore lint/suspicious/noControlCharactersInRegex: strip ANSI escapes for width math
+const ANSI = /\u001b\[[0-9;]*m/g;
+const width = (text) => text.replace(ANSI, "").length;
+export function table(rows, header) {
+    const all = header ? [header.map((h) => c.dim(h)), ...rows] : rows;
+    const widths = [];
+    for (const row of all) {
+        row.forEach((cell, i) => {
+            widths[i] = Math.max(widths[i] ?? 0, width(cell));
+        });
+    }
+    const columns = process.stdout.columns;
+    return all
+        .map((row) => {
+        const line = row
+            .map((cell, i) => (i === row.length - 1 ? cell : cell + " ".repeat((widths[i] ?? 0) - width(cell))))
+            .join("  ");
+        // Keep tables on one line per row: trim the last (free-text) column to the terminal width.
+        if (!columns || width(line) <= columns)
+            return line;
+        const plain = line.replace(ANSI, "");
+        return `${plain.slice(0, Math.max(0, columns - 1))}…`;
+    })
+        .join("\n");
+}
+export function statusColor(status) {
+    if (status === "settled")
+        return c.green(status);
+    if (status === "pending_approval" || status === "unknown" || status === "dry_run")
+        return c.yellow(status);
+    if (status === "denied" || status === "failed" || status === "expired")
+        return c.red(status);
+    return status;
+}
+export function short(text, max = 18) {
+    if (!text)
+        return "";
+    return text.length > max ? `${text.slice(0, max - 1)}…` : text;
+}
+//# sourceMappingURL=ui.js.map

package/dist/ui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.js","sourceRoot":"","sources":["../src/ui.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC;AAC7F,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC;AAC1E,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;AAEtC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEvH,MAAM,CAAC,MAAM,CAAC,GAAG;IACf,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;IAChB,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IACjB,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IACnB,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IACpB,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IAClB,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IACrB,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IAClB,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;CACnB,CAAC;AAEF,6FAA6F;AAC7F,MAAM,IAAI,GAAG,mBAAmB,CAAC;AACjC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;AAE9D,MAAM,UAAU,KAAK,CAAC,IAAgB,EAAE,MAAiB;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YACtB,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;IACvC,OAAO,GAAG;SACP,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACX,MAAM,IAAI,GAAG,GAAG;aACb,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aACnG,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,2FAA2F;QAC3F,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACxD,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,kBAAkB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3G,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,IAAwB,EAAE,GAAG,GAAG,EAAE;IACtD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC"}

package/package.json

@@ -1,6 +1,46 @@
 {
   "name": "spendctl",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "description": "A corporate card and expense policy for AI agents: budgets, approvals and receipts for x402, MPP and any HTTP 402 API.",
+  "license": "SEE LICENSE IN LICENSE",
+  "type": "module",
+  "bin": {
+    "spendctl": "./bin/spendctl.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "bin",
+    "dist",
+    "README.md",
+    "THIRD_PARTY_NOTICES"
+  ],
+  "engines": {
+    "node": ">=22.13"
+  },
+  "keywords": [
+    "x402",
+    "mpp",
+    "ai-agents",
+    "payments",
+    "budget",
+    "mcp",
+    "spend-control",
+    "http-402"
+  ],
+  "homepage": "https://spendctl.dev",
+  "dependencies": {
+    "@spendctl/client": "^0.1.0",
+    "@spendctl/core": "0.1.0",
+    "@spendctl/mock": "0.1.0",
+    "@spendctl/proxy": "0.1.0",
+    "@spendctl/mcp-server": "0.1.0"
+  },
+  "scripts": {}
 }