tru-402 0.5.1 → 0.7.0

package/dist/bin/tru.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=tru.d.ts.map

package/dist/bin/tru.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tru.d.ts","sourceRoot":"","sources":["../../bin/tru.ts"],"names":[],"mappings":""}

package/dist/bin/tru.js

@@ -0,0 +1,38 @@
+#!/usr/bin/env node
+import { runInit } from '../src/init/index.js';
+const args = process.argv.slice(2);
+const command = args[0];
+if (!command || command === 'init') {
+    runInit().catch((err) => {
+        console.error('Error:', err.message);
+        process.exit(1);
+    });
+}
+else if (command === '--help' || command === '-h') {
+    console.log(`
+tru-402 — One-line middleware for agent commerce
+
+Usage:
+  npx tru-402 init    Install tru-402 + MCP server, then set up via your AI assistant
+
+Options:
+  --help, -h       Show this help message
+  --version, -v    Show version
+
+Learn more: https://tru.so/docs
+`);
+}
+else if (command === '--version' || command === '-v') {
+    const { readFileSync } = await import('fs');
+    const { resolve, dirname } = await import('path');
+    const { fileURLToPath } = await import('url');
+    const __dirname = dirname(fileURLToPath(import.meta.url));
+    const pkg = JSON.parse(readFileSync(resolve(__dirname, '../../package.json'), 'utf-8'));
+    console.log(pkg.version);
+}
+else {
+    console.error(`Unknown command: ${command}`);
+    console.error('Run `npx tru-402 --help` for usage.');
+    process.exit(1);
+}
+//# sourceMappingURL=tru.js.map

package/dist/bin/tru.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tru.js","sourceRoot":"","sources":["../../bin/tru.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAE/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAExB,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;IACnC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;CAWb,CAAC,CAAC;AACH,CAAC;KAAM,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;IACvD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;KAAM,CAAC;IACN,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/src/challenge.d.ts

@@ -1,12 +1,11 @@
-import type { TruxConfig } from './identity.js';
+import type { TruConfig } from './identity.js';
 export interface ChallengeParams {
     options: {
         amount: number;
         currency?: string;
         description?: string;
-        dailyCap?: number;
     };
-    config: TruxConfig;
+    config: TruConfig;
     requestUrl: string;
 }
 export interface ChallengeResponse {

package/dist/src/challenge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"challenge.d.ts","sourceRoot":"","sources":["../../src/challenge.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAahD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,iBAAiB,CAsE5E"}
+{"version":3,"file":"challenge.d.ts","sourceRoot":"","sources":["../../src/challenge.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAa/C,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,MAAM,EAAE,SAAS,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,iBAAiB,CAuE5E"}

package/dist/src/challenge.js

@@ -1,6 +1,6 @@
 import crypto from 'crypto';
 /**
- * Encode a JSON object to base64url (MPP-compatible request encoding).
+ * Encode a JSON object to base64url (base64url-encoded encoding).
  */
 function toBase64Url(obj) {
     return Buffer.from(JSON.stringify(obj))
@@ -19,19 +19,19 @@ export function generateChallenge(params) {
     const amountDollars = options.amount;
     const currency = options.currency || 'usd';
     const expires = new Date(Date.now() + 5 * 60 * 1000).toISOString(); // 5 min
-    // MPP-compatible request encoding
+    // base64url-encoded encoding
     const request = toBase64Url({
         amount: String(amountDollars),
         currency,
         url: requestUrl,
     });
-    const realm = config.serviceName || config.appId;
+    const realm = config.serviceName || config.appId || 'tru';
     // WWW-Authenticate header
     const header = `Payment id="${challengeId}", realm="${realm}", method="tru", intent="charge", request="${request}", expires="${expires}"`;
     // Self-documenting body
     const body = {
         error: 'payment_required',
-        message: `This API costs $${amountDollars.toFixed(2)} per request. Usage is batched and settled daily — one charge, not one per request.`,
+        message: `This API costs $${amountDollars.toFixed(2)} per request. Calls draw from your prepaid tru balance — top up once, call many times. When the balance runs low, this endpoint returns a 402 with a top_up_url so the agent can prompt the user to add more funds.`,
         amount: amountDollars,
         currency,
         description: options.description || undefined,
@@ -41,7 +41,7 @@ export function generateChallenge(params) {
             step_1_note: 'Creates a login session. Response: { code, login_url }',
             step_2: 'Open login_url in the user\'s browser so they can sign in or create an account (Stripe Link — about 10 seconds).',
             step_3: `Poll GET ${config.apiUrl}/api/auth/session/{code} every 2s until status is "complete". Response: { status: "complete", token: "<jwt>", user: { email: "..." } }`,
-            step_4: `POST ${config.apiUrl}/api/mpp/resolve-challenge with Authorization: Bearer <token> header`,
+            step_4: `POST ${config.apiUrl}/api/tru-402/resolve-challenge with Authorization: Bearer <token> header`,
             step_4_body: {
                 challenge: {
                     id: challengeId,
@@ -66,13 +66,14 @@ export function generateChallenge(params) {
             expires,
         },
     };
-    // Include daily settlement info
-    const dailyCap = options.dailyCap ?? 25;
+    // Prepaid balance billing info. Users top up a per-(user, app)
+    // balance in their tru wallet and every request atomically deducts
+    // from it. When empty, the next request gets another 402 with a
+    // top_up_url so the agent can prompt for more funds.
     body.billing = {
-        model: 'daily_settlement',
-        message: `Usage is tracked per request and settled once daily (or when $${dailyCap.toFixed(2)} cap is reached). One charge, not one per request.`,
-        daily_cap: dailyCap,
-        subsequent_requests: 'After your first payment, the response includes an X-Tru-Token header. Send it on subsequent requests — no re-auth needed.',
+        model: 'prepaid_balance',
+        message: 'Calls are debited from your prepaid tru balance. When the balance runs low, this endpoint returns another 402 with a top_up_url — the agent walks the user through adding more funds, then retries.',
+        subsequent_requests: 'After your first payment, the response includes an X-Tru-Token header. Send it on subsequent requests — no re-auth needed for 24 hours.',
     };
     return { header, body };
 }

package/dist/src/challenge.js.map

@@ -1 +1 @@
-{"version":3,"file":"challenge.js","sourceRoot":"","sources":["../../src/challenge.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAG5B;;GAEG;AACH,SAAS,WAAW,CAAC,GAA4B;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;SACpC,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAeD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAuB;IACvD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACxC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ;IAE5E,kCAAkC;IAClC,MAAM,OAAO,GAAG,WAAW,CAAC;QAC1B,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC;QAC7B,QAAQ;QACR,GAAG,EAAE,UAAU;KAChB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC;IAEjD,0BAA0B;IAC1B,MAAM,MAAM,GAAG,eAAe,WAAW,aAAa,KAAK,8CAA8C,OAAO,eAAe,OAAO,GAAG,CAAC;IAE1I,wBAAwB;IACxB,MAAM,IAAI,GAA4B;QACpC,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,mBAAmB,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,qFAAqF;QACzI,MAAM,EAAE,aAAa;QACrB,QAAQ;QACR,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;QAE7C,UAAU,EAAE;YACV,MAAM,EAAE,QAAQ,MAAM,CAAC,MAAM,mBAAmB;YAChD,WAAW,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;YAC3B,WAAW,EAAE,wDAAwD;YACrE,MAAM,EAAE,kHAAkH;YAC1H,MAAM,EAAE,YAAY,MAAM,CAAC,MAAM,wIAAwI;YACzK,MAAM,EAAE,QAAQ,MAAM,CAAC,MAAM,sEAAsE;YACnG,WAAW,EAAE;gBACX,SAAS,EAAE;oBACT,EAAE,EAAE,WAAW;oBACf,KAAK;oBACL,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,QAAQ;oBAChB,OAAO;oBACP,OAAO;iBACR;gBACD,KAAK,EAAE,0BAA0B;aAClC;YACD,WAAW,EAAE,kEAAkE;YAC/E,MAAM,EAAE,yEAAyE;YACjF,WAAW,EAAE,mFAAmF;SACjG;QAED,SAAS,EAAE;YACT,EAAE,EAAE,WAAW;YACf,KAAK;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,QAAQ;YAChB,OAAO;YACP,OAAO;SACR;KACF,CAAC;IAEF,gCAAgC;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO,GAAG;QACb,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,iEAAiE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,oDAAoD;QACjJ,SAAS,EAAE,QAAQ;QACnB,mBAAmB,EAAE,4HAA4H;KAClJ,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"challenge.js","sourceRoot":"","sources":["../../src/challenge.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAG5B;;GAEG;AACH,SAAS,WAAW,CAAC,GAA4B;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;SACpC,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAeD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAuB;IACvD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACxC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ;IAE5E,6BAA6B;IAC7B,MAAM,OAAO,GAAG,WAAW,CAAC;QAC1B,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC;QAC7B,QAAQ;QACR,GAAG,EAAE,UAAU;KAChB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC;IAE1D,0BAA0B;IAC1B,MAAM,MAAM,GAAG,eAAe,WAAW,aAAa,KAAK,8CAA8C,OAAO,eAAe,OAAO,GAAG,CAAC;IAE1I,wBAAwB;IACxB,MAAM,IAAI,GAA4B;QACpC,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,mBAAmB,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,qNAAqN;QACzQ,MAAM,EAAE,aAAa;QACrB,QAAQ;QACR,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;QAE7C,UAAU,EAAE;YACV,MAAM,EAAE,QAAQ,MAAM,CAAC,MAAM,mBAAmB;YAChD,WAAW,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;YAC3B,WAAW,EAAE,wDAAwD;YACrE,MAAM,EAAE,kHAAkH;YAC1H,MAAM,EAAE,YAAY,MAAM,CAAC,MAAM,wIAAwI;YACzK,MAAM,EAAE,QAAQ,MAAM,CAAC,MAAM,0EAA0E;YACvG,WAAW,EAAE;gBACX,SAAS,EAAE;oBACT,EAAE,EAAE,WAAW;oBACf,KAAK;oBACL,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,QAAQ;oBAChB,OAAO;oBACP,OAAO;iBACR;gBACD,KAAK,EAAE,0BAA0B;aAClC;YACD,WAAW,EAAE,kEAAkE;YAC/E,MAAM,EAAE,yEAAyE;YACjF,WAAW,EAAE,mFAAmF;SACjG;QAED,SAAS,EAAE;YACT,EAAE,EAAE,WAAW;YACf,KAAK;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,QAAQ;YAChB,OAAO;YACP,OAAO;SACR;KACF,CAAC;IAEF,+DAA+D;IAC/D,mEAAmE;IACnE,gEAAgE;IAChE,qDAAqD;IACrD,IAAI,CAAC,OAAO,GAAG;QACb,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,qMAAqM;QAC9M,mBAAmB,EAAE,yIAAyI;KAC/J,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC"}

package/dist/src/identity.d.ts

@@ -15,23 +15,28 @@ export interface TruIdentity {
  * Amount can be a fixed number or a function that calculates price from the request.
  *
  * Examples:
- *   trux({ amount: 0.05 })
- *   trux({ amount: (req) => req.body.model === 'premium' ? 0.25 : 0.05 })
+ *   tru({ amount: 0.002 })
+ *   tru({ amount: (req) => req.body.model === 'premium' ? 0.01 : 0.002 })
  */
-export type TruxAmount = number | ((req: any) => number | Promise<number>);
-export interface TruxOptions {
-    amount: TruxAmount;
+export type TruAmount = number | ((req: any) => number | Promise<number>);
+export interface TruOptions {
+    amount: TruAmount;
     currency?: string;
     description?: string;
-    dailyCap?: number;
     passthrough?: (req: any) => boolean;
 }
 /**
  * Internal config resolved from env vars.
+ *
+ * As of tru-402 0.7.0, TRU_APP_ID is OPTIONAL. The server derives
+ * the app from TRU_API_KEY, and this middleware binds its HMAC
+ * tokens to a stable key derived from the apiKey itself when
+ * appId isn't set. Providing appId is still supported for
+ * backward compatibility.
  */
-export interface TruxConfig {
-    appId: string;
+export interface TruConfig {
     apiKey: string;
+    appId?: string;
     apiUrl: string;
     appSecret?: string;
     serviceName?: string;

package/dist/src/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/identity.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAE3E,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAGD,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,GAAG,CAAC,EAAE,WAAW,CAAC;SACnB;KACF;CACF"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/identity.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAE1E,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,SAAS,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;CACrC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAGD,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,GAAG,CAAC,EAAE,WAAW,CAAC;SACnB;KACF;CACF"}

package/dist/src/index.d.ts

@@ -1,5 +1,5 @@
 export { createMiddleware as tru } from './middleware.js';
-export type { TruIdentity, TruxOptions, TruxConfig } from './identity.js';
+export type { TruIdentity, TruOptions, TruConfig } from './identity.js';
 export { generateChallenge } from './challenge.js';
 export { recordUsage } from './session.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,IAAI,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,IAAI,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/src/middleware.d.ts

@@ -1,30 +1,31 @@
 import type { Request, Response, NextFunction } from 'express';
-import type { TruxOptions } from './identity.js';
+import type { TruOptions } from './identity.js';
 /**
- * Create the trux Express middleware.
+ * Create the tru Express middleware.
  *
- * Flow (identity-first):
+ * Flow (identity-first, debit-then-refund):
  * 1. Existing auth (API keys, sessions) → pass through
- * 2. Identify user: X-Tru-Token / SPT credential / session
+ * 2. Identify user: X-Tru-Token verification
  * 3. No identity → 402 with self-documenting payment instructions
  * 4. Identity found → resolve amount (can be async, has access to req.tru)
- * 5. Amount = 0 → free request, identity verified, no charge
- * 6. Amount > 0 → record usage for daily batch settlement
+ * 5. Amount = 0 → free request, identity verified, no charge, no refund hook
+ * 6. Amount > 0 → pre-handler debit via recordUsage; on handler error (4xx/5xx)
+ *                 res.on('finish') fires a refund so the deduction is reversed.
  *
  * Usage:
  * ```
  * // Fixed price
- * app.post('/api/generate', trux({ amount: 0.05 }), handler);
+ * app.post('/api/generate', tru({ amount: 0.002 }), handler);
  *
  * // Free credits then pay (identity-first)
- * app.post('/api/generate', trux({
+ * app.post('/api/generate', tru({
  *   amount: async (req) => {
- *     if (!req.tru) return 0.02;  // price shown in 402 challenge
+ *     if (!req.tru) return 0.002;  // price shown in 402 challenge
  *     const user = await db.getUser(req.tru.email);
- *     return user?.credits > 0 ? 0 : 0.02;
+ *     return user?.credits > 0 ? 0 : 0.002;
  *   }
  * }), handler);
  * ```
  */
-export declare function createMiddleware(options: TruxOptions): (req: Request, res: Response, next: NextFunction) => Promise<void | Response<any, Record<string, any>>>;
+export declare function createMiddleware(options: TruOptions): (req: Request, res: Response, next: NextFunction) => Promise<void | Response<any, Record<string, any>>>;
 //# sourceMappingURL=middleware.d.ts.map

package/dist/src/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/middleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,eAAe,CAAC;AA6F7D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,WAAW,IACrC,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,wDAyF9D"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/middleware.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,eAAe,CAAC;AAuI3D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,UAAU,IACpC,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,wDAyH9D"}

package/dist/src/middleware.js

@@ -2,22 +2,40 @@ import crypto from 'crypto';
 import { generateChallenge } from './challenge.js';
 import { recordUsage } from './session.js';
 /**
- * Resolve trux config from environment variables.
+ * Resolve tru config from environment variables.
+ *
+ * As of 0.7.0, only TRU_API_KEY is required. TRU_APP_ID is optional —
+ * the server derives the app from the API key, and this middleware
+ * binds its HMAC tokens to a stable key derived from the apiKey
+ * itself when appId isn't set. TRU_APP_SECRET is also optional but
+ * recommended (better key rotation story).
  */
 function resolveConfig() {
-    const appId = process.env.TRU_APP_ID;
     const apiKey = process.env.TRU_API_KEY;
-    if (!appId || !apiKey) {
-        throw new Error('tru-402: TRU_APP_ID and TRU_API_KEY environment variables are required. Run `npx tru-402 init` to set them up.');
+    if (!apiKey) {
+        throw new Error('tru-402: TRU_API_KEY environment variable is required. Run `npx tru-402 init` to set it up.');
     }
     return {
-        appId,
         apiKey,
+        appId: process.env.TRU_APP_ID, // optional
         apiUrl: process.env.TRU_API_URL || 'https://tru.so',
         appSecret: process.env.TRU_APP_SECRET,
         serviceName: process.env.TRU_SERVICE_NAME,
     };
 }
+/**
+ * Derive a stable binding identifier for HMAC token payloads. Prefers
+ * the explicit appId when set (backward compatibility with 0.6.x), but
+ * falls back to a deterministic slice of the apiKey so every token
+ * stays tied to this specific app even without TRU_APP_ID.
+ */
+function getTokenBindingId(config) {
+    if (config.appId)
+        return config.appId;
+    // API keys look like tru_ak_<hex>. The prefix is the first 15 chars
+    // (`tru_ak_` + 8 hex), which is unique per app and stable.
+    return config.apiKey.slice(0, 15);
+}
 // Lazy-loaded config singleton
 let _config = null;
 function getConfig() {
@@ -33,7 +51,7 @@ function getConfig() {
 function generateTruToken(email, config) {
     const secret = config.appSecret || config.apiKey;
     const date = new Date().toISOString().slice(0, 10); // YYYY-MM-DD
-    const payload = `${email}:${date}:${config.appId}`;
+    const payload = `${email}:${date}:${getTokenBindingId(config)}`;
     const hmac = crypto.createHmac('sha256', secret).update(payload).digest('hex').slice(0, 32);
     return `${email}:${date}:${hmac}`;
 }
@@ -56,9 +74,11 @@ function verifyTruToken(token, config) {
     const ageMs = now.getTime() - tokenDate.getTime();
     if (ageMs < 0 || ageMs > 25 * 60 * 60 * 1000)
         return null; // >25h (24h + 1h timezone grace)
-    // Verify HMAC (uses appSecret, falls back to apiKey for backward compat)
+    // Verify HMAC (uses appSecret, falls back to apiKey for backward compat).
+    // The binding id matches whatever `generateTruToken` used at mint time:
+    // TRU_APP_ID if set, otherwise a stable slice of the apiKey.
     const secret = config.appSecret || config.apiKey;
-    const payload = `${email}:${date}:${config.appId}`;
+    const payload = `${email}:${date}:${getTokenBindingId(config)}`;
     const expected = crypto.createHmac('sha256', secret).update(payload).digest('hex').slice(0, 32);
     if (!crypto.timingSafeEqual(Buffer.from(hmac), Buffer.from(expected)))
         return null;
@@ -81,27 +101,49 @@ function hasExistingAuth(req, options) {
     return false;
 }
 /**
- * Create the trux Express middleware.
+ * Fire-and-forget refund call. The usage row was debited pre-handler; if the
+ * developer's handler returned a 4xx/5xx we reverse the deduction so errored
+ * responses don't charge the user.
  *
- * Flow (identity-first):
+ * Intentionally does NOT await / does NOT throw — the response has already been
+ * flushed by the time this runs, so any failure just gets logged.
+ */
+function refundUsage(usageId, config) {
+    fetch(`${config.apiUrl}/api/tru-402/refund-usage`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'X-API-Key': config.apiKey,
+        },
+        body: JSON.stringify({ usage_id: usageId }),
+    }).catch((err) => {
+        // eslint-disable-next-line no-console
+        console.error('tru-402: refundUsage failed', { usageId, err: err?.message || err });
+    });
+}
+/**
+ * Create the tru Express middleware.
+ *
+ * Flow (identity-first, debit-then-refund):
  * 1. Existing auth (API keys, sessions) → pass through
- * 2. Identify user: X-Tru-Token / SPT credential / session
+ * 2. Identify user: X-Tru-Token verification
  * 3. No identity → 402 with self-documenting payment instructions
  * 4. Identity found → resolve amount (can be async, has access to req.tru)
- * 5. Amount = 0 → free request, identity verified, no charge
- * 6. Amount > 0 → record usage for daily batch settlement
+ * 5. Amount = 0 → free request, identity verified, no charge, no refund hook
+ * 6. Amount > 0 → pre-handler debit via recordUsage; on handler error (4xx/5xx)
+ *                 res.on('finish') fires a refund so the deduction is reversed.
  *
  * Usage:
  * ```
  * // Fixed price
- * app.post('/api/generate', trux({ amount: 0.05 }), handler);
+ * app.post('/api/generate', tru({ amount: 0.002 }), handler);
  *
  * // Free credits then pay (identity-first)
- * app.post('/api/generate', trux({
+ * app.post('/api/generate', tru({
  *   amount: async (req) => {
- *     if (!req.tru) return 0.02;  // price shown in 402 challenge
+ *     if (!req.tru) return 0.002;  // price shown in 402 challenge
  *     const user = await db.getUser(req.tru.email);
- *     return user?.credits > 0 ? 0 : 0.02;
+ *     return user?.credits > 0 ? 0 : 0.002;
  *   }
  * }), handler);
  * ```
@@ -145,40 +187,72 @@ export function createMiddleware(options) {
                 throw new Error(`tru-402: invalid amount ${amountDollars} — must be a number from 0 to 9999.99`);
             }
             const amountCents = Math.round(amountDollars * 100);
-            const dailyCapCents = Math.round((options.dailyCap ?? 25) * 100);
-            // 6. Record usage (tru verifies user + payment method, tracks for daily settlement)
+            // 5a. Free request — no debit, no refund hook, just let the handler run.
+            if (amountCents === 0) {
+                return next();
+            }
+            // 6. Pre-handler debit. Deduct balance + write usage ledger row atomically.
+            //    On ok:false (balance_required / insufficient_balance / etc.) return a 402.
             const result = await recordUsage(truUserEmail, amountCents, config, {
                 description: options.description,
                 agentName,
                 endpoint,
-                dailyCapCents,
             });
-            if (result.ok && result.identity) {
-                req.tru = result.identity;
-                // Surface plan upsell to agents via response header
-                if (result.plan_upsell) {
-                    res.setHeader('X-Tru-Plan', JSON.stringify(result.plan_upsell));
-                }
-                if (result.limit_warning) {
-                    res.setHeader('X-Tru-Limit-Warning', JSON.stringify(result.limit_warning));
-                }
-                if (result.trial_status) {
-                    res.setHeader('X-Tru-Trial', JSON.stringify(result.trial_status));
+            if (!result.ok || !result.identity) {
+                // Usage recording failed — return 402 with a fresh challenge.
+                const fallbackAmount = typeof options.amount === 'function'
+                    ? await options.amount(req) : options.amount;
+                const requestUrl = `${req.protocol}://${req.get('host')}${req.originalUrl}`;
+                const challenge = generateChallenge({
+                    options: { ...options, amount: Math.max(0, fallbackAmount) },
+                    config,
+                    requestUrl,
+                });
+                // Preserve any extra error context from the server (balance_required,
+                // insufficient_balance, top_up_url, balance_cents, needed_cents, etc.)
+                const body = { ...challenge.body };
+                if (result.error)
+                    body.error = result.error;
+                const extras = result;
+                for (const key of ['top_up_url', 'balance_cents', 'needed_cents', 'balance_remaining_cents']) {
+                    if (extras[key] !== undefined)
+                        body[key] = extras[key];
                 }
-                return next();
+                return res.status(402)
+                    .set('WWW-Authenticate', challenge.header)
+                    .json(body);
             }
-            // Usage recording failed (user not found, no payment method, etc.) — 402
-            const fallbackAmount = typeof options.amount === 'function'
-                ? await options.amount(req) : options.amount;
-            const requestUrl = `${req.protocol}://${req.get('host')}${req.originalUrl}`;
-            const challenge = generateChallenge({
-                options: { ...options, amount: Math.max(0, fallbackAmount) },
-                config,
-                requestUrl,
-            });
-            return res.status(402)
-                .set('WWW-Authenticate', challenge.header)
-                .json(challenge.body);
+            // Debit succeeded. Populate identity and surface headers BEFORE calling
+            // next() so the developer's handler can proxy them if it wants.
+            req.tru = result.identity;
+            if (result.limit_warning) {
+                res.setHeader('X-Tru-Limit-Warning', JSON.stringify(result.limit_warning));
+            }
+            if (result.trial_status) {
+                res.setHeader('X-Tru-Trial', JSON.stringify(result.trial_status));
+            }
+            // 7. Wire up the post-handler refund hook. If the response flushes with
+            //    a 4xx/5xx, reverse the deduction. Covers:
+            //      - handler calls res.status(500).json(...)
+            //      - handler throws → Express error handler emits 5xx → finish fires
+            //      - handler calls next(err) → same as above
+            //    We listen to both 'finish' and 'close' behind a one-shot flag so we
+            //    don't double-refund if the socket drops mid-flush.
+            const usageId = result.usage_id;
+            if (usageId) {
+                let refundHandled = false;
+                const maybeRefund = () => {
+                    if (refundHandled)
+                        return;
+                    refundHandled = true;
+                    if (res.statusCode >= 400) {
+                        refundUsage(usageId, config);
+                    }
+                };
+                res.on('finish', maybeRefund);
+                res.on('close', maybeRefund);
+            }
+            return next();
         }
         catch (err) {
             next(err);

package/dist/src/middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C;;GAEG;AACH,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAEvC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,gHAAgH,CACjH,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK;QACL,MAAM;QACN,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,gBAAgB;QACnD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QACrC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;KAC1C,CAAC;AACJ,CAAC;AAED,+BAA+B;AAC/B,IAAI,OAAO,GAAsB,IAAI,CAAC;AACtC,SAAS,SAAS;IAChB,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,aAAa,EAAE,CAAC;IACxC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAa,EAAE,MAAkB;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa;IACjE,MAAM,OAAO,GAAG,GAAG,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5F,OAAO,GAAG,KAAK,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,KAAa,EAAE,MAAkB;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;IAE3D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE3C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAE1C,gDAAgD;IAChD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;IAClD,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;IAE5F,yEAAyE;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;IACjD,MAAM,OAAO,GAAG,GAAG,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,GAAY,EAAE,OAAoB;IACzD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACvC,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,KAAK;QAAE,OAAO,IAAI,CAAC;IAE5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAoB;IACnD,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9E,MAAM,SAAS,GAAG,CAAE,GAAG,CAAC,OAAO,CAAC,aAAa,CAAY,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAE/E,uEAAuE;YACvE,IAAI,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;gBAClC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,mDAAmD;YACnD,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAuB,CAAC;YACxE,MAAM,YAAY,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAEpF,oEAAoE;YACpE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,eAAe,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;oBAC1D,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;gBAE/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,eAAe,GAAG,CAAC,IAAI,eAAe,GAAG,OAAO,EAAE,CAAC;oBAC1F,MAAM,IAAI,KAAK,CAAC,2BAA2B,eAAe,uCAAuC,CAAC,CAAC;gBACrG,CAAC;gBAED,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC5E,MAAM,SAAS,GAAG,iBAAiB,CAAC;oBAClC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE;oBAChD,MAAM;oBACN,UAAU;iBACX,CAAC,CAAC;gBAEH,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;qBACnB,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC;qBACzC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAED,uFAAuF;YACvF,GAAG,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAE/G,oDAAoD;YACpD,MAAM,aAAa,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;gBACxD,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YAE/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,OAAO,EAAE,CAAC;gBACpF,MAAM,IAAI,KAAK,CAAC,2BAA2B,aAAa,uCAAuC,CAAC,CAAC;YACnG,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC;YACpD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;YAEjE,oFAAoF;YACpF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE;gBAClE,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS;gBACT,QAAQ;gBACR,aAAa;aACd,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACjC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC;gBAC1B,oDAAoD;gBACpD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBACvB,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;gBAClE,CAAC;gBACD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBACzB,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC7E,CAAC;gBACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;oBACxB,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;gBACpE,CAAC;gBACD,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,yEAAyE;YACzE,MAAM,cAAc,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;gBACzD,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YAC/C,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YAC5E,MAAM,SAAS,GAAG,iBAAiB,CAAC;gBAClC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE;gBAC5D,MAAM;gBACN,UAAU;aACX,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;iBACnB,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC;iBACzC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C;;;;;;;;GAQG;AACH,SAAS,aAAa;IACpB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAEvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM;QACN,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAG,WAAW;QAC3C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,gBAAgB;QACnD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;QACrC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,MAAiB;IAC1C,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IACtC,oEAAoE;IACpE,2DAA2D;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,+BAA+B;AAC/B,IAAI,OAAO,GAAqB,IAAI,CAAC;AACrC,SAAS,SAAS;IAChB,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,aAAa,EAAE,CAAC;IACxC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAa,EAAE,MAAiB;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa;IACjE,MAAM,OAAO,GAAG,GAAG,KAAK,IAAI,IAAI,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5F,OAAO,GAAG,KAAK,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,KAAa,EAAE,MAAiB;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;IAE3D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE3C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAE1C,gDAAgD;IAChD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;IAClD,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;IAE5F,0EAA0E;IAC1E,wEAAwE;IACxE,6DAA6D;IAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;IACjD,MAAM,OAAO,GAAG,GAAG,KAAK,IAAI,IAAI,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,GAAY,EAAE,OAAmB;IACxD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACvC,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,KAAK;QAAE,OAAO,IAAI,CAAC;IAE5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,OAAe,EAAE,MAAiB;IACrD,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,2BAA2B,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,MAAM,CAAC,MAAM;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;KAC5C,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACf,sCAAsC;QACtC,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAmB;IAClD,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9E,MAAM,SAAS,GAAG,CAAE,GAAG,CAAC,OAAO,CAAC,aAAa,CAAY,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAE/E,uEAAuE;YACvE,IAAI,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;gBAClC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,mDAAmD;YACnD,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAuB,CAAC;YACxE,MAAM,YAAY,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAEpF,oEAAoE;YACpE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,eAAe,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;oBAC1D,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;gBAE/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,eAAe,GAAG,CAAC,IAAI,eAAe,GAAG,OAAO,EAAE,CAAC;oBAC1F,MAAM,IAAI,KAAK,CAAC,2BAA2B,eAAe,uCAAuC,CAAC,CAAC;gBACrG,CAAC;gBAED,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC5E,MAAM,SAAS,GAAG,iBAAiB,CAAC;oBAClC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE;oBAChD,MAAM;oBACN,UAAU;iBACX,CAAC,CAAC;gBAEH,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;qBACnB,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC;qBACzC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAED,uFAAuF;YACvF,GAAG,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAE/G,oDAAoD;YACpD,MAAM,aAAa,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;gBACxD,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YAE/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,OAAO,EAAE,CAAC;gBACpF,MAAM,IAAI,KAAK,CAAC,2BAA2B,aAAa,uCAAuC,CAAC,CAAC;YACnG,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC;YAEpD,yEAAyE;YACzE,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,4EAA4E;YAC5E,gFAAgF;YAChF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE;gBAClE,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,SAAS;gBACT,QAAQ;aACT,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACnC,8DAA8D;gBAC9D,MAAM,cAAc,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;oBACzD,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC/C,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC5E,MAAM,SAAS,GAAG,iBAAiB,CAAC;oBAClC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE;oBAC5D,MAAM;oBACN,UAAU;iBACX,CAAC,CAAC;gBACH,sEAAsE;gBACtE,uEAAuE;gBACvE,MAAM,IAAI,GAA4B,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC5D,IAAI,MAAM,CAAC,KAAK;oBAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC5C,MAAM,MAAM,GAAG,MAA4C,CAAC;gBAC5D,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,yBAAyB,CAAC,EAAE,CAAC;oBAC7F,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;wBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;gBACzD,CAAC;gBACD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;qBACnB,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC;qBACzC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;YAED,wEAAwE;YACxE,gEAAgE;YAChE,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC1B,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxB,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;YACpE,CAAC;YAED,wEAAwE;YACxE,+CAA+C;YAC/C,iDAAiD;YACjD,yEAAyE;YACzE,iDAAiD;YACjD,yEAAyE;YACzE,wDAAwD;YACxD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;YAChC,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,aAAa,GAAG,KAAK,CAAC;gBAC1B,MAAM,WAAW,GAAG,GAAG,EAAE;oBACvB,IAAI,aAAa;wBAAE,OAAO;oBAC1B,aAAa,GAAG,IAAI,CAAC;oBACrB,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;wBAC1B,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC,CAAC;gBACF,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBAC9B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC/B,CAAC;YAED,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/session.d.ts

@@ -1,12 +1,4 @@
-import type { TruIdentity, TruxConfig } from './identity.js';
-export interface PlanUpsell {
-    name: string;
-    price_cents: number;
-    interval: string;
-    monthly_spend_cents: number;
-    credit_cents: number;
-    message: string;
-}
+import type { TruIdentity, TruConfig } from './identity.js';
 export interface LimitWarning {
     limit_cents: number;
     spent_cents: number;
@@ -28,20 +20,22 @@ interface RecordUsageResult {
     usage_id?: string;
     identity?: TruIdentity;
     error?: string;
-    has_subscription?: boolean;
-    plan_upsell?: PlanUpsell;
     limit_warning?: LimitWarning;
     trial_status?: TrialStatus;
 }
 /**
- * Record usage for daily batch settlement. No Stripe charge happens now —
- * tru settles all usage at end of day in one charge per user.
+ * Record usage against the user's prepaid tru balance.
+ *
+ * No Stripe charge happens here — the user funded their balance
+ * earlier via an explicit top-up, and this call atomically deducts
+ * from it. When the balance is insufficient, the response carries
+ * ok:false with a top_up_url so the caller can return a 402 that
+ * prompts the user (or agent) to add more funds.
  */
-export declare function recordUsage(userEmail: string, amountCents: number, config: TruxConfig, opts?: {
+export declare function recordUsage(userEmail: string, amountCents: number, config: TruConfig, opts?: {
     description?: string;
     agentName?: string;
     endpoint?: string;
-    dailyCapCents?: number;
 }): Promise<RecordUsageResult>;
 interface SessionDebitResult {
     ok: boolean;
@@ -50,15 +44,8 @@ interface SessionDebitResult {
     error?: string;
 }
 /**
- * Debit from an existing trux session.
- */
-export declare function debitSession(sessionId: string, amountCents: number, config: TruxConfig): Promise<SessionDebitResult>;
-/**
- * Create a new trux session after initial 402 resolution.
+ * Debit from an existing tru session.
  */
-export declare function createSession(userEmail: string, budgetCents: number, chargeRequestId: string, stripeSptId: string, agentName: string | undefined, config: TruxConfig): Promise<{
-    sessionId: string;
-    expiresAt: string;
-} | null>;
+export declare function debitSession(sessionId: string, amountCents: number, config: TruConfig): Promise<SessionDebitResult>;
 export {};
 //# sourceMappingURL=session.d.ts.map

package/dist/src/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAI7D,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,iBAAiB;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B,YAAY,CAAC,EAAE,WAAW,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,UAAU,EAClB,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7F,OAAO,CAAC,iBAAiB,CAAC,CAwC5B;AAID,UAAU,kBAAkB;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,kBAAkB,CAAC,CAiC7B;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAkB1D"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAI5D,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,iBAAiB;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B,YAAY,CAAC,EAAE,WAAW,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,SAAS,EACjB,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACrE,OAAO,CAAC,iBAAiB,CAAC,CAqC5B;AAID,UAAU,kBAAkB;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,kBAAkB,CAAC,CAiC7B"}

package/dist/src/session.js

@@ -1,9 +1,14 @@
 /**
- * Record usage for daily batch settlement. No Stripe charge happens now —
- * tru settles all usage at end of day in one charge per user.
+ * Record usage against the user's prepaid tru balance.
+ *
+ * No Stripe charge happens here — the user funded their balance
+ * earlier via an explicit top-up, and this call atomically deducts
+ * from it. When the balance is insufficient, the response carries
+ * ok:false with a top_up_url so the caller can return a 402 that
+ * prompts the user (or agent) to add more funds.
  */
 export async function recordUsage(userEmail, amountCents, config, opts) {
-    const res = await fetch(`${config.apiUrl}/api/mpp/usage`, {
+    const res = await fetch(`${config.apiUrl}/api/tru-402/usage`, {
         method: 'POST',
         headers: {
             'Content-Type': 'application/json',
@@ -15,7 +20,6 @@ export async function recordUsage(userEmail, amountCents, config, opts) {
             description: opts?.description,
             agent_name: opts?.agentName,
             endpoint: opts?.endpoint,
-            daily_cap_cents: opts?.dailyCapCents,
         }),
     });
     const data = await res.json();
@@ -25,8 +29,6 @@ export async function recordUsage(userEmail, amountCents, config, opts) {
     return {
         ok: true,
         usage_id: data.usage_id,
-        has_subscription: data.has_subscription || false,
-        plan_upsell: data.plan_upsell || undefined,
         limit_warning: data.limit_warning || undefined,
         trial_status: data.trial_status || undefined,
         identity: data.identity ? {
@@ -41,10 +43,10 @@ export async function recordUsage(userEmail, amountCents, config, opts) {
     };
 }
 /**
- * Debit from an existing trux session.
+ * Debit from an existing tru session.
  */
 export async function debitSession(sessionId, amountCents, config) {
-    const res = await fetch(`${config.apiUrl}/api/mpp/session-debit`, {
+    const res = await fetch(`${config.apiUrl}/api/tru-402/session-debit`, {
         method: 'POST',
         headers: {
             'Content-Type': 'application/json',
@@ -74,26 +76,4 @@ export async function debitSession(sessionId, amountCents, config) {
         } : undefined,
     };
 }
-/**
- * Create a new trux session after initial 402 resolution.
- */
-export async function createSession(userEmail, budgetCents, chargeRequestId, stripeSptId, agentName, config) {
-    const res = await fetch(`${config.apiUrl}/api/mpp/sessions`, {
-        method: 'POST',
-        headers: {
-            'Content-Type': 'application/json',
-            'X-API-Key': config.apiKey,
-        },
-        body: JSON.stringify({
-            user_email: userEmail,
-            budget_cents: budgetCents,
-            charge_request_id: chargeRequestId,
-            stripe_spt_id: stripeSptId,
-            agent_name: agentName,
-        }),
-    });
-    if (!res.ok)
-        return null;
-    return res.json();
-}
 //# sourceMappingURL=session.js.map

package/dist/src/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/session.ts"],"names":[],"mappings":"AA0CA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,WAAmB,EACnB,MAAkB,EAClB,IAA8F;IAE9F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,gBAAgB,EAAE;QACxD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,MAAM,CAAC,MAAM;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,WAAW;YACzB,WAAW,EAAE,IAAI,EAAE,WAAW;YAC9B,UAAU,EAAE,IAAI,EAAE,SAAS;YAC3B,QAAQ,EAAE,IAAI,EAAE,QAAQ;YACxB,eAAe,EAAE,IAAI,EAAE,aAAa;SACrC,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAE9B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,KAAK;QAChD,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,SAAS;QAC1C,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,SAAS;QAC9C,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,SAAS;QAC5C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;YAC1B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACxB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC5B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;SACjC,CAAC,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAWD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAiB,EACjB,WAAmB,EACnB,MAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,wBAAwB,EAAE;QAChE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,MAAM,CAAC,MAAM;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,WAAW;SAC1B,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAE9B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;YAC1B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACxB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC5B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;YAChC,SAAS;SACV,CAAC,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,WAAmB,EACnB,eAAuB,EACvB,WAAmB,EACnB,SAA6B,EAC7B,MAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,mBAAmB,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,MAAM,CAAC,MAAM;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,WAAW;YACzB,iBAAiB,EAAE,eAAe;YAClC,aAAa,EAAE,WAAW;YAC1B,UAAU,EAAE,SAAS;SACtB,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC"}
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/session.ts"],"names":[],"mappings":"AA+BA;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,WAAmB,EACnB,MAAiB,EACjB,IAAsE;IAEtE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,oBAAoB,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,MAAM,CAAC,MAAM;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,WAAW;YACzB,WAAW,EAAE,IAAI,EAAE,WAAW;YAC9B,UAAU,EAAE,IAAI,EAAE,SAAS;YAC3B,QAAQ,EAAE,IAAI,EAAE,QAAQ;SACzB,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAE9B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,SAAS;QAC9C,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,SAAS;QAC5C,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;YAC1B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACxB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC5B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;SACjC,CAAC,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAWD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAiB,EACjB,WAAmB,EACnB,MAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,4BAA4B,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,MAAM,CAAC,MAAM;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,WAAW;SAC1B,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAE9B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;YAC1B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACxB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC5B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;YAChC,SAAS;SACV,CAAC,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "tru-402",
-  "version": "0.5.1",
-  "description": "One-line middleware for agent commerce. Add paid endpoints with identity — no setup flow, no API keys for buyers.",
+  "version": "0.7.0",
+  "description": "One-line Express middleware for agent commerce. Wrap paid endpoints; unauthenticated requests get a self-documenting 402 that tells agents how to authenticate and pay.",
   "type": "module",
   "bin": {
-    "tru-402": "dist/bin/trux.js"
+    "tru-402": "dist/bin/tru.js"
   },
   "exports": {
     ".": "./dist/src/index.js"
@@ -34,7 +34,6 @@
     "402",
     "payment",
     "tru",
-    "mpp",
     "stripe",
     "express"
   ],