twzrd-x402-gate 0.5.4 → 0.6.0

package/README.md

@@ -18,7 +18,11 @@ const client = new x402Client();
 client.register("solana:*", new ExactSvmScheme(svmSigner));
 // Optional: client.register("eip155:*", new ExactEvmScheme(evmSigner));
 
-installTwzrdX402ClientHook(client, { gateOnCanSpend: true });
+installTwzrdX402ClientHook(client, {
+  gateOnCanSpend: false, // decision-only default (warn allowed)
+  refuseWashFlagged: true,
+});
+// Strict opt-in: gateOnCanSpend: true — also block when can_spend=false
 // → onBeforePaymentCreation: scores selectedRequirements, abort if policy denies
 
 const fetchWithPayment = wrapFetchWithPayment(fetch, client);
@@ -89,6 +93,92 @@ Dogfood:
 npm install twzrd-x402-gate
 ```
 
+## TWZRD Payment Control (protocol-neutral authorization core)
+
+The gate now ships a protocol-neutral policy runtime underneath the x402 surface.
+Defining invariant: **a signer path that calls `assertIntentApproved` will not sign
+an intent that differs from what TWZRD evaluated.** (Honest scope: TWZRD does not
+own third-party wallets - the binding is enforceable exactly where the check runs
+before the signer, not as a claim over arbitrary wallet internals.)
+
+```typescript
+import {
+  evaluateIntent,
+  assertIntentApproved,
+  createLocalDecisionSigner,
+  createDecisionRegistry,
+  x402RequirementsToIntent, // or ap2CheckoutToIntent
+} from "twzrd-x402-gate";
+
+const signer = createLocalDecisionSigner();
+const registry = createDecisionRegistry(); // consume-once
+
+const intent = x402RequirementsToIntent(selectedRequirements, { resourceUrl });
+const token = await evaluateIntent(intent, {
+  signer,
+  mandate,                    // user/company mandate (purpose, ceilings, resource scope)
+  policy,                     // local hard controls (caps, lists, recurring checks)
+  intelligence: twzrdIntel,   // optional remote counterparty intelligence
+});
+
+// Wallet-side, immediately before signing the EXACT intent:
+assertIntentApproved(intentBeingSigned, token, {
+  registry,                       // replay / consume-once
+  publicKeyPem: signer.publicKeyPem, // signature verification
+});
+// throws INTENT_HASH_MISMATCH | DECISION_EXPIRED | DECISION_NOT_ALLOW |
+//        DECISION_REPLAYED | BAD_SIGNATURE -> the signer is never invoked
+```
+
+- `PaymentIntent` v1 (frozen): protocol `x402 | ap2 | ucp | mpp | direct` +
+  network/asset/amount/payTo + resource + facilitator + mandate + recurrence
+  context, bound into one canonical `tiv1:` intent hash.
+- Decisions are signed, expiring `DecisionToken`s - "policy version X approved
+  this exact transaction at this timestamp", auditable offline.
+- A **block is a signed decision**, not an exception - refusals audit the same
+  way approvals do.
+- Local hard controls (mandate scope, ceilings, allow/blocklists, cumulative
+  caps, recurring price checks) never depend on API availability; remote
+  intelligence (wash/fleet, counterparty score) plugs in via a provider.
+- The category test lives in
+  [`test/payment-control.test.ts`](./test/payment-control.test.ts): a mandate
+  permits software under $100, a $12 checkout is approved, orchestration
+  mutates `payTo` after approval, the wallet refuses on hash mismatch,
+  `signerInvocationCount === 0`, and both the decision and the refusal verify
+  from audit records alone.
+
+### On the client hook (opt-in)
+
+`installTwzrdX402ClientHook` wires the runtime into the official
+`onBeforePaymentCreation` seat. Pass `paymentControl` to build the canonical
+intent, run the policy runtime (with the hook's own preflight fed in as remote
+intelligence), and surface a signed, intent-bound `PaymentDecision`:
+
+```typescript
+import { installTwzrdX402ClientHook, createLocalDecisionSigner } from "twzrd-x402-gate";
+
+const signer = createLocalDecisionSigner();
+installTwzrdX402ClientHook(client, {
+  paymentControl: {
+    signer,
+    mandate,                       // optional user/company mandate
+    policy: { maxAmountUsd: "50" }, // optional local hard controls
+  },
+  onDecision: ({ intent, decision }) => handOff(intent, decision), // → assertIntentApproved
+});
+```
+
+- **Tighten-only composition:** a `paymentControl` block aborts even when the
+  legacy preflight allowed; it never loosens a legacy denial.
+- **Opt-in:** with `paymentControl` unset the hook behaves exactly as before.
+- x402 wire amounts (USDC micro units) are converted to the decimal USD the
+  runtime expects before policy evaluation. (The `x402RequirementsToIntent`
+  adapter still passes the raw wire amount through into the decimal `amount`
+  field — a latent unit bug fixed at the hook boundary here; the adapter fix is
+  a follow-up.)
+- Hook binding test:
+  [`test/intent-binding.test.ts`](./test/intent-binding.test.ts).
+
 ### Experimental CLI: `twzrd-safe-fetch` (AgentCash advisory pre-check)
 
 > **Not a challenge-bound firewall.** Classification: `advisory_precheck`.

package/dist/decision-token.d.ts

@@ -0,0 +1,80 @@
+/**
+ * TWZRD Payment Control — signed, expiring DecisionTokens + intent binding.
+ *
+ * A DecisionToken is not "we checked this merchant earlier". It is:
+ * "at this timestamp, policy version X approved this EXACT transaction".
+ * The wallet (or payment client) must verify, before signing:
+ *
+ *   hash(intent being signed) === token.intentHash
+ *
+ * plus expiry, decision === allow, signature, and consume-once. Any mismatch
+ * means refuse — the signer is never invoked.
+ */
+import { type PaymentIntent } from "./intent.js";
+export type PaymentDecisionVerdict = "allow" | "warn" | "block";
+export type DecisionConstraints = {
+    maxAmount?: string;
+    allowedAssets?: string[];
+    requireHumanApproval?: boolean;
+};
+export type PaymentDecision = {
+    decision: PaymentDecisionVerdict;
+    reasonCodes: string[];
+    intentHash: string;
+    policyVersion: string;
+    decisionId: string;
+    /** ISO-8601. Tokens are short-lived by design. */
+    expiresAt: string;
+    constraints?: DecisionConstraints;
+    /** Signer key identifier (for rotation / audit). */
+    keyId: string;
+    /** base64 Ed25519 signature over the domain-separated canonical payload. */
+    signature: string;
+};
+export type DecisionSigner = {
+    keyId: string;
+    sign(preimage: Uint8Array): Uint8Array | Promise<Uint8Array>;
+    /** PEM (SPKI) for local verification; remote signers publish theirs. */
+    publicKeyPem?: string;
+};
+/** Everything signed — the token minus the signature itself. */
+export declare function decisionPreimage(token: Omit<PaymentDecision, "signature">): Buffer;
+/**
+ * Local Ed25519 decision signer. Pass a PKCS#8 PEM to pin a key; otherwise an
+ * ephemeral keypair is generated (fine for tests and per-process runtimes).
+ */
+export declare function createLocalDecisionSigner(options?: {
+    privateKeyPem?: string;
+    keyId?: string;
+}): DecisionSigner & {
+    publicKeyPem: string;
+};
+export declare function signDecision(unsigned: Omit<PaymentDecision, "signature" | "keyId">, signer: DecisionSigner): Promise<PaymentDecision>;
+export declare function verifyDecisionSignature(token: PaymentDecision, publicKeyPem: string): boolean;
+export type BindingErrorCode = "INTENT_HASH_MISMATCH" | "DECISION_EXPIRED" | "DECISION_NOT_ALLOW" | "DECISION_REPLAYED" | "BAD_SIGNATURE";
+export declare class TwzrdIntentBindingError extends Error {
+    readonly code: BindingErrorCode;
+    readonly decisionId: string;
+    constructor(code: BindingErrorCode, decisionId: string, detail: string);
+}
+export type DecisionRegistry = {
+    /** True exactly once per decisionId; false on every replay. */
+    consume(decisionId: string): boolean;
+};
+/** In-process consume-once ledger. Entries expire with the tokens. */
+export declare function createDecisionRegistry(): DecisionRegistry;
+export type AssertIntentApprovedOptions = {
+    now?: number;
+    /** Enforce consume-once semantics (recommended for anything non-idempotent). */
+    registry?: DecisionRegistry;
+    /** Verify the token signature against this key before trusting it. */
+    publicKeyPem?: string;
+};
+/**
+ * The wallet-side check. Call with the EXACT intent about to be signed.
+ * Throws TwzrdIntentBindingError on any violation; returns void when the
+ * signature may proceed. A caught error means: do not invoke the signer.
+ */
+export declare function assertIntentApproved(intent: PaymentIntent, token: PaymentDecision, options?: AssertIntentApprovedOptions): void;
+export declare function newDecisionId(): string;
+//# sourceMappingURL=decision-token.d.ts.map

package/dist/decision-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-token.d.ts","sourceRoot":"","sources":["../src/decision-token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAYH,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAI5E,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AAEhE,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,sBAAsB,CAAC;IACjC,WAAW,EAAE,MAAM,EAAE,CAAC;IAEtB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAC;IAElB,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAElC,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,QAAQ,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,gEAAgE;AAChE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,GAAG,MAAM,CAKlF;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,CAAC,EAAE;IAClD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,cAAc,GAAG;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CAe5C;AAED,wBAAsB,YAAY,CAChC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,OAAO,CAAC,EACtD,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,eAAe,CAAC,CAM1B;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,eAAe,EACtB,YAAY,EAAE,MAAM,GACnB,OAAO,CAYT;AAMD,MAAM,MAAM,gBAAgB,GACxB,sBAAsB,GACtB,kBAAkB,GAClB,oBAAoB,GACpB,mBAAmB,GACnB,eAAe,CAAC;AAEpB,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAChB,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAMvE;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,+DAA+D;IAC/D,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;CACtC,CAAC;AAEF,sEAAsE;AACtE,wBAAgB,sBAAsB,IAAI,gBAAgB,CASzD;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,eAAe,EACtB,OAAO,CAAC,EAAE,2BAA2B,GACpC,IAAI,CA2CN;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}

package/dist/decision-token.js

@@ -0,0 +1,107 @@
+/**
+ * TWZRD Payment Control — signed, expiring DecisionTokens + intent binding.
+ *
+ * A DecisionToken is not "we checked this merchant earlier". It is:
+ * "at this timestamp, policy version X approved this EXACT transaction".
+ * The wallet (or payment client) must verify, before signing:
+ *
+ *   hash(intent being signed) === token.intentHash
+ *
+ * plus expiry, decision === allow, signature, and consume-once. Any mismatch
+ * means refuse — the signer is never invoked.
+ */
+import { createPrivateKey, createPublicKey, generateKeyPairSync, randomUUID, sign as edSign, verify as edVerify, } from "node:crypto";
+import { canonicalJson, intentHash } from "./intent.js";
+const DECISION_DOMAIN = "twzrd-decision-v1\n";
+/** Everything signed — the token minus the signature itself. */
+export function decisionPreimage(token) {
+    return Buffer.concat([
+        Buffer.from(DECISION_DOMAIN, "utf8"),
+        Buffer.from(canonicalJson(token), "utf8"),
+    ]);
+}
+/**
+ * Local Ed25519 decision signer. Pass a PKCS#8 PEM to pin a key; otherwise an
+ * ephemeral keypair is generated (fine for tests and per-process runtimes).
+ */
+export function createLocalDecisionSigner(options) {
+    let privateKey;
+    if (options?.privateKeyPem) {
+        privateKey = createPrivateKey(options.privateKeyPem);
+    }
+    else {
+        ({ privateKey } = generateKeyPairSync("ed25519"));
+    }
+    const publicKeyPem = createPublicKey(privateKey)
+        .export({ type: "spki", format: "pem" })
+        .toString();
+    return {
+        keyId: options?.keyId ?? "local-ed25519",
+        publicKeyPem,
+        sign: (preimage) => edSign(null, Buffer.from(preimage), privateKey),
+    };
+}
+export async function signDecision(unsigned, signer) {
+    const payload = { ...unsigned, keyId: signer.keyId };
+    const signature = Buffer.from(await signer.sign(decisionPreimage(payload))).toString("base64");
+    return { ...payload, signature };
+}
+export function verifyDecisionSignature(token, publicKeyPem) {
+    const { signature, ...payload } = token;
+    try {
+        return edVerify(null, decisionPreimage(payload), createPublicKey(publicKeyPem), Buffer.from(signature, "base64"));
+    }
+    catch {
+        return false;
+    }
+}
+export class TwzrdIntentBindingError extends Error {
+    code;
+    decisionId;
+    constructor(code, decisionId, detail) {
+        super(`[twzrd] ${code}: ${detail} (decisionId=${decisionId})`);
+        this.name = "TwzrdIntentBindingError";
+        this.code = code;
+        this.decisionId = decisionId;
+    }
+}
+/** In-process consume-once ledger. Entries expire with the tokens. */
+export function createDecisionRegistry() {
+    const consumed = new Set();
+    return {
+        consume(decisionId) {
+            if (consumed.has(decisionId))
+                return false;
+            consumed.add(decisionId);
+            return true;
+        },
+    };
+}
+/**
+ * The wallet-side check. Call with the EXACT intent about to be signed.
+ * Throws TwzrdIntentBindingError on any violation; returns void when the
+ * signature may proceed. A caught error means: do not invoke the signer.
+ */
+export function assertIntentApproved(intent, token, options) {
+    const now = options?.now ?? Date.now();
+    if (options?.publicKeyPem && !verifyDecisionSignature(token, options.publicKeyPem)) {
+        throw new TwzrdIntentBindingError("BAD_SIGNATURE", token.decisionId, "decision token signature did not verify");
+    }
+    if (token.decision !== "allow" && token.decision !== "warn") {
+        throw new TwzrdIntentBindingError("DECISION_NOT_ALLOW", token.decisionId, `decision is ${token.decision}`);
+    }
+    if (now >= Date.parse(token.expiresAt)) {
+        throw new TwzrdIntentBindingError("DECISION_EXPIRED", token.decisionId, `expired at ${token.expiresAt}`);
+    }
+    const actual = intentHash(intent);
+    if (actual !== token.intentHash) {
+        throw new TwzrdIntentBindingError("INTENT_HASH_MISMATCH", token.decisionId, `approved ${token.intentHash} but signing ${actual}`);
+    }
+    if (options?.registry && !options.registry.consume(token.decisionId)) {
+        throw new TwzrdIntentBindingError("DECISION_REPLAYED", token.decisionId, "decision token already consumed");
+    }
+}
+export function newDecisionId() {
+    return randomUUID();
+}
+//# sourceMappingURL=decision-token.js.map

package/dist/decision-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-token.js","sourceRoot":"","sources":["../src/decision-token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,UAAU,EACV,IAAI,IAAI,MAAM,EACd,MAAM,IAAI,QAAQ,GAEnB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,aAAa,EAAE,UAAU,EAAsB,MAAM,aAAa,CAAC;AAE5E,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAmC9C,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAAC,KAAyC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAGzC;IACC,IAAI,UAAqB,CAAC;IAC1B,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,CAAC,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,YAAY,GAAG,eAAe,CAAC,UAAU,CAAC;SAC7C,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;SACvC,QAAQ,EAAE,CAAC;IACd,OAAO;QACL,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,eAAe;QACxC,YAAY;QACZ,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAsD,EACtD,MAAsB;IAEtB,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAClF,QAAQ,CACT,CAAC;IACF,OAAO,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAsB,EACtB,YAAoB;IAEpB,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,QAAQ,CACb,IAAI,EACJ,gBAAgB,CAAC,OAAO,CAAC,EACzB,eAAe,CAAC,YAAY,CAAC,EAC7B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CACjC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAaD,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,CAAmB;IACvB,UAAU,CAAS;IAC5B,YAAY,IAAsB,EAAE,UAAkB,EAAE,MAAc;QACpE,KAAK,CAAC,WAAW,IAAI,KAAK,MAAM,gBAAgB,UAAU,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAOD,sEAAsE;AACtE,MAAM,UAAU,sBAAsB;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,OAAO;QACL,OAAO,CAAC,UAAkB;YACxB,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC3C,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAqB,EACrB,KAAsB,EACtB,OAAqC;IAErC,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvC,IAAI,OAAO,EAAE,YAAY,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,KAAK,CAAC,UAAU,EAChB,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC5D,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,KAAK,CAAC,UAAU,EAChB,eAAe,KAAK,CAAC,QAAQ,EAAE,CAChC,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,uBAAuB,CAC/B,kBAAkB,EAClB,KAAK,CAAC,UAAU,EAChB,cAAc,KAAK,CAAC,SAAS,EAAE,CAChC,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,uBAAuB,CAC/B,sBAAsB,EACtB,KAAK,CAAC,UAAU,EAChB,YAAY,KAAK,CAAC,UAAU,gBAAgB,MAAM,EAAE,CACrD,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,EAAE,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,KAAK,CAAC,UAAU,EAChB,iCAAiC,CAClC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC"}

package/dist/index.d.ts

@@ -11,8 +11,12 @@ export { evaluate_x402_resource, type EvaluateX402Options, type EvaluateX402Resu
 export { withTwzrdGuard, type TwzrdGuardOptions } from "./with-guard.js";
 export { installTwzrdAutoGate, type PayWrap, type InstallAutoGateOptions, } from "./auto-gate.js";
 export { safeFetch, runAgentcashFetch, main as safeFetchMain, type SafeFetchOptions, type SafeFetchResult, } from "./safe-fetch.js";
-export { installTwzrdX402ClientHook, twzrdBeforePaymentCreation, type X402ClientLike, type X402SelectedRequirements, type BeforePaymentCreationContext, type BeforePaymentCreationResult, type InstallX402ClientHookOptions, } from "./x402-client-hook.js";
+export { installTwzrdX402ClientHook, twzrdBeforePaymentCreation, type X402ClientLike, type X402SelectedRequirements, type BeforePaymentCreationContext, type BeforePaymentCreationResult, type InstallX402ClientHookOptions, type X402PaymentControlOptions, } from "./x402-client-hook.js";
 export { quickCheck, QUICK_PRICE_USDC, type QuickCheckResult, type QuickCheckOptions, type TwzrdTier, } from "./quick.js";
 export { createSponsoredX402Fetch, type SponsorSettle, type SponsoredX402Options, } from "./sponsored.js";
 export type { TwzrdDecision, TwzrdReadinessCard, TwzrdPreflightInput, TwzrdGateConfig, TwzrdApproveContext, TwzrdApprovalResult, TwzrdUpsellContext, X402PaymentRequirements, X402PaymentRequiredBody, X402McpPaymentRequest, X402McpPaymentRequestedContext, } from "./types.js";
+export { canonicalJson, intentHash, toMicroUsd, INTENT_HASH_PREFIX, type PaymentIntent, type PaymentProtocol, } from "./intent.js";
+export { assertIntentApproved, createDecisionRegistry, createLocalDecisionSigner, decisionPreimage, newDecisionId, signDecision, verifyDecisionSignature, TwzrdIntentBindingError, type AssertIntentApprovedOptions, type BindingErrorCode, type DecisionConstraints, type DecisionRegistry, type DecisionSigner, type PaymentDecision, type PaymentDecisionVerdict, } from "./decision-token.js";
+export { createMemorySpendLedger, evaluateIntent, POLICY_VERSION, type CounterpartyIntelligence, type EvaluateIntentOptions, type IntelligenceProvider, type Mandate, type SpendLedger, type SpendPolicy, } from "./policy-runtime.js";
+export { ap2CheckoutToIntent, x402RequirementsToIntent, type Ap2Cart, type Ap2UserMandate, type X402IntentContext, } from "./intent-adapters.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,YAAY,EACZ,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,GAChC,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EACL,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EACL,oBAAoB,EACpB,KAAK,OAAO,EACZ,KAAK,sBAAsB,GAC5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,IAAI,IAAI,aAAa,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,GAClC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,SAAS,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,wBAAwB,EACxB,KAAK,aAAa,EAClB,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,qBAAqB,EACrB,8BAA8B,GAC/B,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,YAAY,EACZ,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,GAChC,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EACL,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EACL,oBAAoB,EACpB,KAAK,OAAO,EACZ,KAAK,sBAAsB,GAC5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,IAAI,IAAI,aAAa,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,yBAAyB,GAC/B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,SAAS,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,wBAAwB,EACxB,KAAK,aAAa,EAClB,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,qBAAqB,EACrB,8BAA8B,GAC/B,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,aAAa,EACb,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,KAAK,aAAa,EAClB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,uBAAuB,EACvB,uBAAuB,EACvB,KAAK,2BAA2B,EAChC,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,sBAAsB,GAC5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC"}

package/dist/index.js

@@ -17,4 +17,9 @@ export { safeFetch, runAgentcashFetch, main as safeFetchMain, } from "./safe-fet
 export { installTwzrdX402ClientHook, twzrdBeforePaymentCreation, } from "./x402-client-hook.js";
 export { quickCheck, QUICK_PRICE_USDC, } from "./quick.js";
 export { createSponsoredX402Fetch, } from "./sponsored.js";
+/* ── TWZRD Payment Control (protocol-neutral authorization core) ── */
+export { canonicalJson, intentHash, toMicroUsd, INTENT_HASH_PREFIX, } from "./intent.js";
+export { assertIntentApproved, createDecisionRegistry, createLocalDecisionSigner, decisionPreimage, newDecisionId, signDecision, verifyDecisionSignature, TwzrdIntentBindingError, } from "./decision-token.js";
+export { createMemorySpendLedger, evaluateIntent, POLICY_VERSION, } from "./policy-runtime.js";
+export { ap2CheckoutToIntent, x402RequirementsToIntent, } from "./intent-adapters.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,qFAAqF;AACrF,uFAAuF;AACvF,qFAAqF;AACrF,OAAO,EAAE,eAAe,EAAE,WAAW,EAAkB,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,aAAa,EAAgC,MAAM,aAAa,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,GAEpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,YAAY,GAKb,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,iBAAiB,EACjB,sBAAsB,GAIvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EACL,sBAAsB,GAGvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAA0B,MAAM,iBAAiB,CAAC;AACzE,OAAO,EACL,oBAAoB,GAGrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,IAAI,IAAI,aAAa,GAGtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAM3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,UAAU,EACV,gBAAgB,GAIjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,wBAAwB,GAGzB,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,qFAAqF;AACrF,uFAAuF;AACvF,qFAAqF;AACrF,OAAO,EAAE,eAAe,EAAE,WAAW,EAAkB,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,aAAa,EAAgC,MAAM,aAAa,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,GAEpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,YAAY,GAKb,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,iBAAiB,EACjB,sBAAsB,GAIvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EACL,sBAAsB,GAGvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAA0B,MAAM,iBAAiB,CAAC;AACzE,OAAO,EACL,oBAAoB,GAGrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,IAAI,IAAI,aAAa,GAGtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAO3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,UAAU,EACV,gBAAgB,GAIjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,wBAAwB,GAGzB,MAAM,gBAAgB,CAAC;AAexB,uEAAuE;AACvE,OAAO,EACL,aAAa,EACb,UAAU,EACV,UAAU,EACV,kBAAkB,GAGnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,uBAAuB,EACvB,uBAAuB,GAQxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,cAAc,GAOf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,mBAAmB,EACnB,wBAAwB,GAIzB,MAAM,sBAAsB,CAAC"}

package/dist/intent-adapters.d.ts

@@ -0,0 +1,62 @@
+/**
+ * TWZRD Payment Control — protocol adapters into PaymentIntent v1.
+ *
+ * Adapters normalize protocol-specific payment shapes into the one canonical
+ * intent the policy runtime evaluates. The x402 adapter keeps the existing
+ * gate's behavior available on the new core; the AP2/UCP adapter is the
+ * non-x402 reference — it exists to prove the runtime combines a USER MANDATE
+ * with counterparty risk, not merely that it parses another crypto request.
+ */
+import type { PaymentIntent } from "./intent.js";
+import type { Mandate } from "./policy-runtime.js";
+import type { X402SelectedRequirements } from "./x402-client-hook.js";
+export type X402IntentContext = {
+    /** Resource URL when the requirement omits `resource` (v2 top-level). */
+    resourceUrl?: string;
+    method?: string;
+    facilitator?: string;
+    agent?: PaymentIntent["agent"];
+    purpose?: string;
+};
+/** Normalize a selected x402 payment requirement (v1 or v2 field names). */
+export declare function x402RequirementsToIntent(req: X402SelectedRequirements, ctx?: X402IntentContext): PaymentIntent;
+/**
+ * Minimal AP2-style cart: what an agent is about to check out under a user
+ * mandate. Field names follow the AP2 mandate/cart split — the mandate says
+ * what MAY be spent; the cart is the concrete transaction.
+ */
+export type Ap2Cart = {
+    merchantId: string;
+    /** Settlement destination (merchant account / wallet). */
+    payTo: string;
+    currency: string;
+    total: string;
+    items?: Array<{
+        sku?: string;
+        description?: string;
+        price?: string;
+    }>;
+    checkoutUrl?: string;
+    category?: string;
+    recurring?: boolean;
+    priorCharge?: string;
+};
+export type Ap2UserMandate = {
+    mandateId: string;
+    /** Purchase categories the user authorized (e.g. ["software"]). */
+    categories?: string[];
+    maxPerTransaction?: string;
+    monthlyCeiling?: string;
+    merchantAllowPrefixes?: string[];
+    expiresAt?: string;
+};
+/** Cart -> canonical intent. The mandate rides along for the policy runtime. */
+export declare function ap2CheckoutToIntent(cart: Ap2Cart, mandate: Ap2UserMandate, options?: {
+    network?: string;
+    agentId?: string;
+    organization?: string;
+}): {
+    intent: PaymentIntent;
+    mandate: Mandate;
+};
+//# sourceMappingURL=intent-adapters.d.ts.map

package/dist/intent-adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent-adapters.d.ts","sourceRoot":"","sources":["../src/intent-adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAMtE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,4EAA4E;AAC5E,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,wBAAwB,EAC7B,GAAG,CAAC,EAAE,iBAAiB,GACtB,aAAa,CAmBf;AAMD;;;;GAIG;AACH,MAAM,MAAM,OAAO,GAAG;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,gFAAgF;AAChF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CA+B7C"}

package/dist/intent-adapters.js

@@ -0,0 +1,66 @@
+/**
+ * TWZRD Payment Control — protocol adapters into PaymentIntent v1.
+ *
+ * Adapters normalize protocol-specific payment shapes into the one canonical
+ * intent the policy runtime evaluates. The x402 adapter keeps the existing
+ * gate's behavior available on the new core; the AP2/UCP adapter is the
+ * non-x402 reference — it exists to prove the runtime combines a USER MANDATE
+ * with counterparty risk, not merely that it parses another crypto request.
+ */
+/** Normalize a selected x402 payment requirement (v1 or v2 field names). */
+export function x402RequirementsToIntent(req, ctx) {
+    const payTo = req.payTo ?? req.pay_to;
+    const amount = req.amount ?? req.maxAmountRequired;
+    if (!payTo)
+        throw new Error("[twzrd] x402 requirement missing payTo");
+    if (!amount)
+        throw new Error("[twzrd] x402 requirement missing amount");
+    return {
+        protocol: "x402",
+        network: req.network ?? "unknown",
+        asset: req.asset ?? "unknown",
+        amount,
+        payTo,
+        resource: {
+            url: req.resource ?? ctx?.resourceUrl,
+            method: ctx?.method,
+        },
+        facilitator: ctx?.facilitator,
+        agent: ctx?.agent,
+        context: ctx?.purpose ? { purpose: ctx.purpose } : undefined,
+    };
+}
+/** Cart -> canonical intent. The mandate rides along for the policy runtime. */
+export function ap2CheckoutToIntent(cart, mandate, options) {
+    const intent = {
+        protocol: "ap2",
+        network: options?.network ?? "fiat:card",
+        asset: cart.currency,
+        amount: cart.total,
+        payTo: cart.payTo,
+        resource: {
+            url: cart.checkoutUrl,
+            operation: `checkout:${cart.merchantId}`,
+        },
+        agent: {
+            id: options?.agentId,
+            organization: options?.organization,
+            mandateId: mandate.mandateId,
+        },
+        context: {
+            purpose: cart.category,
+            recurring: cart.recurring,
+            priorSpend: cart.priorCharge,
+        },
+    };
+    const normalizedMandate = {
+        mandateId: mandate.mandateId,
+        purposes: mandate.categories,
+        maxPerTransactionUsd: mandate.maxPerTransaction,
+        monthlyCeilingUsd: mandate.monthlyCeiling,
+        resourceAllow: mandate.merchantAllowPrefixes,
+        expiresAt: mandate.expiresAt,
+    };
+    return { intent, mandate: normalizedMandate };
+}
+//# sourceMappingURL=intent-adapters.js.map

package/dist/intent-adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent-adapters.js","sourceRoot":"","sources":["../src/intent-adapters.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAmBH,4EAA4E;AAC5E,MAAM,UAAU,wBAAwB,CACtC,GAA6B,EAC7B,GAAuB;IAEvB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,iBAAiB,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACxE,OAAO;QACL,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;QACjC,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,SAAS;QAC7B,MAAM;QACN,KAAK;QACL,QAAQ,EAAE;YACR,GAAG,EAAE,GAAG,CAAC,QAAQ,IAAI,GAAG,EAAE,WAAW;YACrC,MAAM,EAAE,GAAG,EAAE,MAAM;SACpB;QACD,WAAW,EAAE,GAAG,EAAE,WAAW;QAC7B,KAAK,EAAE,GAAG,EAAE,KAAK;QACjB,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;KAC7D,CAAC;AACJ,CAAC;AAkCD,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CACjC,IAAa,EACb,OAAuB,EACvB,OAAuE;IAEvE,MAAM,MAAM,GAAkB;QAC5B,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,WAAW;QACxC,KAAK,EAAE,IAAI,CAAC,QAAQ;QACpB,MAAM,EAAE,IAAI,CAAC,KAAK;QAClB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE;YACR,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,SAAS,EAAE,YAAY,IAAI,CAAC,UAAU,EAAE;SACzC;QACD,KAAK,EAAE;YACL,EAAE,EAAE,OAAO,EAAE,OAAO;YACpB,YAAY,EAAE,OAAO,EAAE,YAAY;YACnC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B;QACD,OAAO,EAAE;YACP,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B;KACF,CAAC;IACF,MAAM,iBAAiB,GAAY;QACjC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,UAAU;QAC5B,oBAAoB,EAAE,OAAO,CAAC,iBAAiB;QAC/C,iBAAiB,EAAE,OAAO,CAAC,cAAc;QACzC,aAAa,EAAE,OAAO,CAAC,qBAAqB;QAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAChD,CAAC"}

package/dist/intent.d.ts

@@ -0,0 +1,69 @@
+/**
+ * TWZRD Payment Control — PaymentIntent v1 (FROZEN).
+ *
+ * The canonical, protocol-neutral description of one autonomous payment,
+ * evaluated exactly once at the last deterministic checkpoint before signing.
+ *
+ * Defining invariant (honest scope): a signer path that calls
+ * assertIntentApproved will not sign an intent that differs from what TWZRD
+ * evaluated. TWZRD does not own third-party wallets - the binding holds
+ * exactly where the check runs before the signer. Everything that
+ * identifies the transaction — payee, resource, amount, asset, network,
+ * facilitator, method, mandate, recurrence context — is bound into ONE
+ * canonical intent hash. `hash(intent being signed) === decision.intentHash`
+ * or the wallet refuses.
+ *
+ * v1 is frozen: field additions require a new hash prefix (tiv2:), never a
+ * silent change to canonicalization.
+ */
+export type PaymentProtocol = "x402" | "ap2" | "ucp" | "mpp" | "direct";
+export type PaymentIntent = {
+    protocol: PaymentProtocol;
+    /** CAIP-2 where applicable (e.g. "solana:5eykt4...", "eip155:8453"). */
+    network: string;
+    /** Asset identifier (mint / contract / ISO code for fiat-denominated mandates). */
+    asset: string;
+    /** Decimal string. Money is NEVER a float. */
+    amount: string;
+    /** Receiving counterparty (wallet, contract, merchant account). */
+    payTo: string;
+    resource?: {
+        url?: string;
+        method?: string;
+        operation?: string;
+        /** Hash of the exact request body when the resource is request-bound. */
+        requestHash?: string;
+    };
+    facilitator?: string;
+    agent?: {
+        id?: string;
+        organization?: string;
+        mandateId?: string;
+    };
+    context?: {
+        purpose?: string;
+        recurring?: boolean;
+        /** Prior charge for this recurring counterparty, decimal string. */
+        priorSpend?: string;
+        /** ISO-8601 expiry of the intent itself. */
+        expiresAt?: string;
+    };
+};
+export declare const INTENT_HASH_PREFIX = "tiv1:";
+/**
+ * Canonical JSON (frozen with v1):
+ * - object keys sorted lexicographically (code-unit order)
+ * - `undefined` and `null` members omitted
+ * - arrays keep order; `undefined`/`null` elements are rejected
+ * - numbers must be finite (money fields are strings by type)
+ * - no insignificant whitespace
+ */
+export declare function canonicalJson(value: unknown): string;
+/** sha256 over the domain-separated canonical form, `tiv1:`-prefixed hex. */
+export declare function intentHash(intent: PaymentIntent): string;
+/**
+ * Parse a decimal money string into micro-units (6dp) as bigint.
+ * Rejects floats-by-stealth: only `[digits].[<=6 digits]` accepted.
+ */
+export declare function toMicroUsd(amount: string): bigint;
+//# sourceMappingURL=intent.d.ts.map

package/dist/intent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent.d.ts","sourceRoot":"","sources":["../src/intent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,CAAC;AAExE,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IAEd,QAAQ,CAAC,EAAE;QACT,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,yEAAyE;QACzE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,KAAK,CAAC,EAAE;QACN,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IAEF,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,oEAAoE;QACpE,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,4CAA4C;QAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH,CAAC;AAEF,eAAO,MAAM,kBAAkB,UAAU,CAAC;AAG1C;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKpD;AA2BD,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAOxD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAMjD"}

package/dist/intent.js

@@ -0,0 +1,82 @@
+/**
+ * TWZRD Payment Control — PaymentIntent v1 (FROZEN).
+ *
+ * The canonical, protocol-neutral description of one autonomous payment,
+ * evaluated exactly once at the last deterministic checkpoint before signing.
+ *
+ * Defining invariant (honest scope): a signer path that calls
+ * assertIntentApproved will not sign an intent that differs from what TWZRD
+ * evaluated. TWZRD does not own third-party wallets - the binding holds
+ * exactly where the check runs before the signer. Everything that
+ * identifies the transaction — payee, resource, amount, asset, network,
+ * facilitator, method, mandate, recurrence context — is bound into ONE
+ * canonical intent hash. `hash(intent being signed) === decision.intentHash`
+ * or the wallet refuses.
+ *
+ * v1 is frozen: field additions require a new hash prefix (tiv2:), never a
+ * silent change to canonicalization.
+ */
+import { createHash } from "node:crypto";
+export const INTENT_HASH_PREFIX = "tiv1:";
+const INTENT_DOMAIN = "twzrd-intent-v1\n";
+/**
+ * Canonical JSON (frozen with v1):
+ * - object keys sorted lexicographically (code-unit order)
+ * - `undefined` and `null` members omitted
+ * - arrays keep order; `undefined`/`null` elements are rejected
+ * - numbers must be finite (money fields are strings by type)
+ * - no insignificant whitespace
+ */
+export function canonicalJson(value) {
+    if (value === null || value === undefined) {
+        throw new Error("[twzrd] canonicalJson: top-level null/undefined");
+    }
+    return serialize(value);
+}
+function serialize(value) {
+    if (value === null || value === undefined) {
+        throw new Error("[twzrd] canonicalJson: null/undefined array element");
+    }
+    const t = typeof value;
+    if (t === "string" || t === "boolean")
+        return JSON.stringify(value);
+    if (t === "number") {
+        if (!Number.isFinite(value)) {
+            throw new Error("[twzrd] canonicalJson: non-finite number");
+        }
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        return `[${value.map(serialize).join(",")}]`;
+    }
+    if (t === "object") {
+        const entries = Object.entries(value)
+            .filter(([, v]) => v !== undefined && v !== null)
+            .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+            .map(([k, v]) => `${JSON.stringify(k)}:${serialize(v)}`);
+        return `{${entries.join(",")}}`;
+    }
+    throw new Error(`[twzrd] canonicalJson: unsupported type ${t}`);
+}
+/** sha256 over the domain-separated canonical form, `tiv1:`-prefixed hex. */
+export function intentHash(intent) {
+    const canonical = canonicalJson(intent);
+    const digest = createHash("sha256")
+        .update(INTENT_DOMAIN)
+        .update(canonical)
+        .digest("hex");
+    return `${INTENT_HASH_PREFIX}${digest}`;
+}
+/**
+ * Parse a decimal money string into micro-units (6dp) as bigint.
+ * Rejects floats-by-stealth: only `[digits].[<=6 digits]` accepted.
+ */
+export function toMicroUsd(amount) {
+    const m = /^(\d+)(?:\.(\d{1,6}))?$/.exec(amount.trim());
+    if (!m)
+        throw new Error(`[twzrd] bad decimal amount: ${JSON.stringify(amount)}`);
+    const whole = BigInt(m[1]);
+    const frac = BigInt((m[2] ?? "").padEnd(6, "0") || "0");
+    return whole * 1000000n + frac;
+}
+//# sourceMappingURL=intent.js.map

package/dist/intent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent.js","sourceRoot":"","sources":["../src/intent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAyCzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC;IACvB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpE,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAe,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC;aAChD,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAChD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,MAAqB;IAC9C,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,aAAa,CAAC;SACrB,MAAM,CAAC,SAAS,CAAC;SACjB,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,GAAG,kBAAkB,GAAG,MAAM,EAAE,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,MAAM,CAAC,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;IACxD,OAAO,KAAK,GAAG,QAAU,GAAG,IAAI,CAAC;AACnC,CAAC"}

package/dist/policy-runtime.d.ts

@@ -0,0 +1,88 @@
+/**
+ * TWZRD Payment Control — the protocol-neutral policy runtime.
+ *
+ * `evaluateIntent(intent, { policy, mandate, intelligence })` combines:
+ *   - LOCAL hard controls (ceilings, network/asset restrictions, allow/block
+ *     lists, mandate validation, cumulative caps, recurring price checks) —
+ *     deterministic, no network, keeps working through an API outage;
+ *   - REMOTE intelligence (counterparty score, wash/fleet detection) via an
+ *     injectable async provider;
+ * and returns a signed, expiring DecisionToken bound to the intent hash.
+ *
+ * Deliberately NOT a policy language. Five concrete policies, evaluated in a
+ * fixed order with stable reason codes.
+ */
+import { type DecisionSigner, type PaymentDecision } from "./decision-token.js";
+import { type PaymentIntent } from "./intent.js";
+export declare const POLICY_VERSION = "twzrd-pc-v1";
+export type SpendPolicy = {
+    /** Refuse wash-flagged counterparties (default true when intelligence runs). */
+    refuseWashFlagged?: boolean;
+    /** Unknown merchant: allow small spend, act above the line. */
+    unknownCounterparty?: {
+        allowUnderUsd: string;
+        aboveAction?: "block" | "warn";
+    };
+    /** New counterparty: cumulative cap over a rolling window. */
+    newCounterpartyCap?: {
+        capUsd: string;
+        windowHours: number;
+    };
+    /** Recurring service: block a price increase above this percentage. */
+    recurringMaxPriceIncreasePct?: number;
+    allowedNetworks?: string[];
+    allowedAssets?: string[];
+    maxAmountUsd?: string;
+    blocklist?: string[];
+    allowlist?: string[];
+};
+export type Mandate = {
+    mandateId: string;
+    /** Allowed spend purposes (e.g. ["software", "research_api"]). */
+    purposes?: string[];
+    maxPerTransactionUsd?: string;
+    monthlyCeilingUsd?: string;
+    /**
+     * Resource binding: URL prefixes this mandate may pay for.
+     * Approval for /weather cannot pay /admin/export.
+     */
+    resourceAllow?: string[];
+    /** Explicitly forbidden payees (e.g. personal wallets). */
+    payeeBlocklist?: string[];
+    expiresAt?: string;
+};
+/** What remote intelligence contributes. All fields optional; absent = unknown. */
+export type CounterpartyIntelligence = {
+    known?: boolean;
+    washFlagged?: boolean;
+    decision?: "allow" | "warn" | "block";
+    trustScore?: number;
+};
+export type IntelligenceProvider = (intent: PaymentIntent) => Promise<CounterpartyIntelligence> | CounterpartyIntelligence;
+export type SpendLedger = {
+    /** Total recorded spend (micro-USD) for a scope key within the window. */
+    spentMicro(scopeKey: string, windowMs: number, now: number): bigint;
+    record(scopeKey: string, amountMicro: bigint, at: number): void;
+    /** First time this scope key was seen, if ever. */
+    firstSeen(scopeKey: string): number | undefined;
+};
+export declare function createMemorySpendLedger(): SpendLedger;
+export type EvaluateIntentOptions = {
+    policy?: SpendPolicy;
+    mandate?: Mandate;
+    intelligence?: IntelligenceProvider;
+    ledger?: SpendLedger;
+    signer: DecisionSigner;
+    /** Token time-to-live in ms (default 120s — decisions are point-in-time). */
+    ttlMs?: number;
+    now?: number;
+    /** Record allowed spend into the ledger (default true). */
+    recordSpend?: boolean;
+};
+/**
+ * Evaluate one PaymentIntent. Never throws on a policy outcome — a block is a
+ * signed block decision (auditable), not an exception. Throws only on
+ * malformed input (bad amounts) or signer failure.
+ */
+export declare function evaluateIntent(intent: PaymentIntent, options: EvaluateIntentOptions): Promise<PaymentDecision>;
+//# sourceMappingURL=policy-runtime.d.ts.map

package/dist/policy-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-runtime.d.ts","sourceRoot":"","sources":["../src/policy-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,eAAe,EAErB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAA0B,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAEzE,eAAO,MAAM,cAAc,gBAAgB,CAAC;AAM5C,MAAM,MAAM,WAAW,GAAG;IACxB,gFAAgF;IAChF,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,+DAA+D;IAC/D,mBAAmB,CAAC,EAAE;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;KAChC,CAAC;IACF,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,uEAAuE;IACvE,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,2DAA2D;IAC3D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,mFAAmF;AACnF,MAAM,MAAM,wBAAwB,GAAG;IACrC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,CACjC,MAAM,EAAE,aAAa,KAClB,OAAO,CAAC,wBAAwB,CAAC,GAAG,wBAAwB,CAAC;AAMlE,MAAM,MAAM,WAAW,GAAG;IACxB,0EAA0E;IAC1E,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IACpE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAChE,mDAAmD;IACnD,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACjD,CAAC;AAEF,wBAAgB,uBAAuB,IAAI,WAAW,CAoBrD;AAMD,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAIF;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC,CA8H1B"}

package/dist/policy-runtime.js

@@ -0,0 +1,169 @@
+/**
+ * TWZRD Payment Control — the protocol-neutral policy runtime.
+ *
+ * `evaluateIntent(intent, { policy, mandate, intelligence })` combines:
+ *   - LOCAL hard controls (ceilings, network/asset restrictions, allow/block
+ *     lists, mandate validation, cumulative caps, recurring price checks) —
+ *     deterministic, no network, keeps working through an API outage;
+ *   - REMOTE intelligence (counterparty score, wash/fleet detection) via an
+ *     injectable async provider;
+ * and returns a signed, expiring DecisionToken bound to the intent hash.
+ *
+ * Deliberately NOT a policy language. Five concrete policies, evaluated in a
+ * fixed order with stable reason codes.
+ */
+import { newDecisionId, signDecision, } from "./decision-token.js";
+import { intentHash, toMicroUsd } from "./intent.js";
+export const POLICY_VERSION = "twzrd-pc-v1";
+export function createMemorySpendLedger() {
+    const entries = new Map();
+    const first = new Map();
+    return {
+        spentMicro(scopeKey, windowMs, now) {
+            const list = entries.get(scopeKey) ?? [];
+            let total = 0n;
+            for (const e of list)
+                if (now - e.at <= windowMs)
+                    total += e.micro;
+            return total;
+        },
+        record(scopeKey, amountMicro, at) {
+            const list = entries.get(scopeKey) ?? [];
+            list.push({ at, micro: amountMicro });
+            entries.set(scopeKey, list);
+            if (!first.has(scopeKey))
+                first.set(scopeKey, at);
+        },
+        firstSeen(scopeKey) {
+            return first.get(scopeKey);
+        },
+    };
+}
+const MONTH_MS = 30 * 24 * 60 * 60 * 1000;
+/**
+ * Evaluate one PaymentIntent. Never throws on a policy outcome — a block is a
+ * signed block decision (auditable), not an exception. Throws only on
+ * malformed input (bad amounts) or signer failure.
+ */
+export async function evaluateIntent(intent, options) {
+    const now = options.now ?? Date.now();
+    const { policy, mandate } = options;
+    const amountMicro = toMicroUsd(intent.amount);
+    const reasons = [];
+    let blocked = false;
+    let warned = false;
+    const block = (code) => {
+        blocked = true;
+        reasons.push(code);
+    };
+    const warn = (code) => {
+        warned = true;
+        reasons.push(code);
+    };
+    /* 1. Mandate validation (local, deterministic) */
+    if (mandate) {
+        if (mandate.expiresAt && now >= Date.parse(mandate.expiresAt)) {
+            block("MANDATE_EXPIRED");
+        }
+        if (mandate.purposes && !mandate.purposes.includes(intent.context?.purpose ?? "")) {
+            block("MANDATE_PURPOSE");
+        }
+        if (mandate.resourceAllow) {
+            const url = intent.resource?.url ?? "";
+            if (!mandate.resourceAllow.some((prefix) => url.startsWith(prefix))) {
+                block("MANDATE_RESOURCE_SCOPE");
+            }
+        }
+        if (mandate.payeeBlocklist?.includes(intent.payTo)) {
+            block("MANDATE_PAYEE_BLOCKED");
+        }
+        if (mandate.maxPerTransactionUsd !== undefined &&
+            amountMicro > toMicroUsd(mandate.maxPerTransactionUsd)) {
+            block("MANDATE_MAX_PER_TX");
+        }
+        if (mandate.monthlyCeilingUsd !== undefined && options.ledger) {
+            const spent = options.ledger.spentMicro(`mandate:${mandate.mandateId}`, MONTH_MS, now);
+            if (spent + amountMicro > toMicroUsd(mandate.monthlyCeilingUsd)) {
+                block("MANDATE_MONTHLY_CEILING");
+            }
+        }
+    }
+    /* 2. Company policy — local hard controls */
+    if (policy) {
+        if (policy.blocklist?.includes(intent.payTo))
+            block("POLICY_BLOCKLIST");
+        if (policy.allowlist && !policy.allowlist.includes(intent.payTo)) {
+            block("POLICY_NOT_ALLOWLISTED");
+        }
+        if (policy.allowedNetworks && !policy.allowedNetworks.includes(intent.network)) {
+            block("POLICY_NETWORK");
+        }
+        if (policy.allowedAssets && !policy.allowedAssets.includes(intent.asset)) {
+            block("POLICY_ASSET");
+        }
+        if (policy.maxAmountUsd !== undefined && amountMicro > toMicroUsd(policy.maxAmountUsd)) {
+            block("POLICY_MAX_AMOUNT");
+        }
+        if (policy.recurringMaxPriceIncreasePct !== undefined &&
+            intent.context?.recurring &&
+            intent.context.priorSpend) {
+            const prior = toMicroUsd(intent.context.priorSpend);
+            const ceiling = prior + (prior * BigInt(Math.round(policy.recurringMaxPriceIncreasePct * 100))) / 10000n;
+            if (amountMicro > ceiling)
+                block("RECURRING_PRICE_INCREASE");
+        }
+        if (policy.newCounterpartyCap && options.ledger) {
+            const windowMs = policy.newCounterpartyCap.windowHours * 3_600_000;
+            const scope = `counterparty:${intent.payTo}`;
+            const seen = options.ledger.firstSeen(scope);
+            const isNew = seen === undefined || now - seen <= windowMs;
+            if (isNew) {
+                const spent = options.ledger.spentMicro(scope, windowMs, now);
+                if (spent + amountMicro > toMicroUsd(policy.newCounterpartyCap.capUsd)) {
+                    block("NEW_COUNTERPARTY_CAP");
+                }
+            }
+        }
+    }
+    /* 3. Remote intelligence (skipped when already blocked locally) */
+    if (!blocked && options.intelligence) {
+        const intel = await options.intelligence(intent);
+        if (intel.washFlagged && policy?.refuseWashFlagged !== false) {
+            block("WASH_FLAGGED");
+        }
+        if (intel.decision === "block")
+            block("INTEL_BLOCK");
+        if (intel.decision === "warn")
+            warn("INTEL_WARN");
+        if (policy?.unknownCounterparty && intel.known === false) {
+            if (amountMicro <= toMicroUsd(policy.unknownCounterparty.allowUnderUsd)) {
+                warn("UNKNOWN_UNDER_LIMIT");
+            }
+            else if (policy.unknownCounterparty.aboveAction === "warn") {
+                warn("UNKNOWN_ABOVE_LIMIT");
+            }
+            else {
+                block("UNKNOWN_ABOVE_LIMIT");
+            }
+        }
+    }
+    const verdict = blocked ? "block" : warned ? "warn" : "allow";
+    if (verdict === "allow" && reasons.length === 0)
+        reasons.push("ALLOW");
+    /* 4. Record spend that will be permitted (feeds cumulative/monthly caps) */
+    if (!blocked && options.ledger && options.recordSpend !== false) {
+        options.ledger.record(`counterparty:${intent.payTo}`, amountMicro, now);
+        if (mandate)
+            options.ledger.record(`mandate:${mandate.mandateId}`, amountMicro, now);
+    }
+    /* 5. Signed, expiring token bound to the exact intent */
+    return signDecision({
+        decision: verdict,
+        reasonCodes: reasons,
+        intentHash: intentHash(intent),
+        policyVersion: POLICY_VERSION,
+        decisionId: newDecisionId(),
+        expiresAt: new Date(now + (options.ttlMs ?? 120_000)).toISOString(),
+    }, options.signer);
+}
+//# sourceMappingURL=policy-runtime.js.map

package/dist/policy-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-runtime.js","sourceRoot":"","sources":["../src/policy-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,aAAa,EACb,YAAY,GAIb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAsB,MAAM,aAAa,CAAC;AAEzE,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;AAoE5C,MAAM,UAAU,uBAAuB;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgD,CAAC;IACxE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,OAAO;QACL,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG;YAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,IAAI,QAAQ;oBAAE,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,SAAS,CAAC,QAAQ;YAChB,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC;AAmBD,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAqB,EACrB,OAA8B;IAE9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACpC,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;QAC7B,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE;QAC5B,MAAM,GAAG,IAAI,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,kDAAkD;IAClD,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAClF,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBACpE,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACjC,CAAC;QACD,IACE,OAAO,CAAC,oBAAoB,KAAK,SAAS;YAC1C,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,oBAAoB,CAAC,EACtD,CAAC;YACD,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,OAAO,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YACvF,IAAI,KAAK,GAAG,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAChE,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/E,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,KAAK,CAAC,cAAc,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACvF,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC7B,CAAC;QACD,IACE,MAAM,CAAC,4BAA4B,KAAK,SAAS;YACjD,MAAM,CAAC,OAAO,EAAE,SAAS;YACzB,MAAM,CAAC,OAAO,CAAC,UAAU,EACzB,CAAC;YACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,OAAO,GACX,KAAK,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,MAAO,CAAC;YAC5F,IAAI,WAAW,GAAG,OAAO;gBAAE,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,MAAM,CAAC,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,CAAC,WAAW,GAAG,SAAS,CAAC;YACnE,MAAM,KAAK,GAAG,gBAAgB,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,IAAI,QAAQ,CAAC;YAC3D,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC9D,IAAI,KAAK,GAAG,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvE,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,WAAW,IAAI,MAAM,EAAE,iBAAiB,KAAK,KAAK,EAAE,CAAC;YAC7D,KAAK,CAAC,cAAc,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;YAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM;YAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,MAAM,EAAE,mBAAmB,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YACzD,IAAI,WAAW,IAAI,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC;gBACxE,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC9B,CAAC;iBAAM,IAAI,MAAM,CAAC,mBAAmB,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;gBAC7D,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA2B,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACtF,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEvE,4EAA4E;IAC5E,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QAChE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,MAAM,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;QACxE,IAAI,OAAO;YAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,OAAO,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,yDAAyD;IACzD,OAAO,YAAY,CACjB;QACE,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,OAAO;QACpB,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC;QAC9B,aAAa,EAAE,cAAc;QAC7B,UAAU,EAAE,aAAa,EAAE;QAC3B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE;KACpE,EACD,OAAO,CAAC,MAAM,CACf,CAAC;AACJ,CAAC"}

package/dist/x402-client-hook.d.ts

@@ -10,6 +10,9 @@
  * @see https://docs.x402.org/advanced-concepts/lifecycle-hooks
  */
 import type { TwzrdGateConfig } from "./types.js";
+import { type Mandate, type SpendLedger, type SpendPolicy } from "./policy-runtime.js";
+import type { DecisionSigner, PaymentDecision } from "./decision-token.js";
+import type { PaymentIntent } from "./intent.js";
 /** Minimal shape of x402 payment requirements used by the hook. */
 export type X402SelectedRequirements = {
     payTo?: string;
@@ -43,7 +46,38 @@ export type BeforePaymentCreationResult = {
 export type X402ClientLike = {
     onBeforePaymentCreation: (hook: (context: BeforePaymentCreationContext) => Promise<BeforePaymentCreationResult> | BeforePaymentCreationResult) => X402ClientLike | void;
 };
+/**
+ * Opt-in TWZRD Payment Control on the client hook. When set, the hook builds a
+ * canonical PaymentIntent from the selected requirement and runs the policy
+ * runtime — local mandate + company policy as deterministic hard controls, with
+ * the hook's own preflight fed in as remote intelligence — producing a signed,
+ * expiring PaymentDecision bound to the exact intent (surfaced on
+ * onDecision.decision). A downstream cooperating signer re-checks it with
+ * assertIntentApproved and refuses if the intent changed after approval.
+ *
+ * The decision can only TIGHTEN the legacy gate: a policy/mandate block aborts
+ * even when preflight allowed; it never loosens a legacy denial. Leaving
+ * paymentControl unset preserves the exact prior behavior.
+ */
+export type X402PaymentControlOptions = {
+    /** Ed25519 decision signer (createLocalDecisionSigner() or a remote signer). */
+    signer: DecisionSigner;
+    policy?: SpendPolicy;
+    mandate?: Mandate;
+    ledger?: SpendLedger;
+    /** Token time-to-live in ms (default 120s). */
+    ttlMs?: number;
+    /** Spend purpose bound into the intent (matched against mandate.purposes). */
+    purpose?: string;
+    facilitator?: string;
+    /** Resource method bound into the intent (GET/POST/…). */
+    method?: string;
+};
 export type InstallX402ClientHookOptions = TwzrdGateConfig & {
+    /** Opt-in Payment Control: signed intent-bound decisions + local policy/mandate. */
+    paymentControl?: X402PaymentControlOptions;
+    /** Clock for decision issue time, Unix ms. Injectable for tests. Default Date.now. */
+    now?: () => number;
     /**
      * Optional callback after each policy decision (telemetry / logging).
      * Never throws into the payment path.
@@ -57,6 +91,10 @@ export type InstallX402ClientHookOptions = TwzrdGateConfig & {
         amountMicro?: string;
         reputationScored?: boolean;
         policyAction?: string;
+        /** Canonical evaluated intent (present when paymentControl is set). */
+        intent?: PaymentIntent;
+        /** Signed, intent-bound decision (present when paymentControl is set). */
+        decision?: PaymentDecision;
     }) => void;
 };
 /**

package/dist/x402-client-hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"x402-client-hook.d.ts","sourceRoot":"","sources":["../src/x402-client-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,mEAAmE;AACnE,MAAM,MAAM,wBAAwB,GAAG;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,4BAA4B,GAAG;IACzC,oBAAoB,EAAE,wBAAwB,CAAC;IAC/C,uDAAuD;IACvD,YAAY,CAAC,EAAE,wBAAwB,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GACnC;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,GACjB,IAAI,CAAC;AAET;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,uBAAuB,EAAE,CACvB,IAAI,EAAE,CACJ,OAAO,EAAE,4BAA4B,KAClC,OAAO,CAAC,2BAA2B,CAAC,GAAG,2BAA2B,KACpE,cAAc,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,eAAe,GAAG;IAC3D;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE;QACpB,QAAQ,EAAE,OAAO,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,KAAK,IAAI,CAAC;CACZ,CAAC;AAMF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,cAAc,EACtB,OAAO,CAAC,EAAE,4BAA4B,GACrC,cAAc,CA8ChB;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,oBAAoB,EAAE,wBAAwB,EAC9C,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,2BAA2B,CAAC,CAyBtC"}
+{"version":3,"file":"x402-client-hook.d.ts","sourceRoot":"","sources":["../src/x402-client-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,OAAO,EAAkB,KAAK,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvG,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,mEAAmE;AACnE,MAAM,MAAM,wBAAwB,GAAG;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,4BAA4B,GAAG;IACzC,oBAAoB,EAAE,wBAAwB,CAAC;IAC/C,uDAAuD;IACvD,YAAY,CAAC,EAAE,wBAAwB,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GACnC;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,GACjB,IAAI,CAAC;AAET;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,uBAAuB,EAAE,CACvB,IAAI,EAAE,CACJ,OAAO,EAAE,4BAA4B,KAClC,OAAO,CAAC,2BAA2B,CAAC,GAAG,2BAA2B,KACpE,cAAc,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,gFAAgF;IAChF,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,eAAe,GAAG;IAC3D,oFAAoF;IACpF,cAAc,CAAC,EAAE,yBAAyB,CAAC;IAC3C,sFAAsF;IACtF,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE;QACpB,QAAQ,EAAE,OAAO,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,uEAAuE;QACvE,MAAM,CAAC,EAAE,aAAa,CAAC;QACvB,0EAA0E;QAC1E,QAAQ,CAAC,EAAE,eAAe,CAAC;KAC5B,KAAK,IAAI,CAAC;CACZ,CAAC;AA4BF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,cAAc,EACtB,OAAO,CAAC,EAAE,4BAA4B,GACrC,cAAc,CAwFhB;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,oBAAoB,EAAE,wBAAwB,EAC9C,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,2BAA2B,CAAC,CAyBtC"}

package/dist/x402-client-hook.js

@@ -12,9 +12,33 @@
 import { resolveConfig } from "./config.js";
 import { priceUsdcFromAmountMicro } from "./payto.js";
 import { twzrdApprovePayment } from "./policy.js";
+import { x402RequirementsToIntent } from "./intent-adapters.js";
+import { evaluateIntent } from "./policy-runtime.js";
 function pickReq(ctx) {
     return ctx.selectedRequirements ?? ctx.requirements ?? {};
 }
+/**
+ * x402 wire amounts are integer base units (USDC = 6-decimal micro), but
+ * PaymentIntent.amount is a DECIMAL USD string (the policy runtime runs it
+ * through toMicroUsd). Convert precisely with bigint so amount-based policies
+ * are not mis-scaled by 1e6. USDC 6dp matches the gate's existing
+ * priceUsdcFromAmountMicro assumption.
+ *
+ * NOTE: `x402RequirementsToIntent` itself still passes the raw wire amount
+ * through into the decimal field — a latent unit bug when that adapter feeds
+ * evaluateIntent directly. Corrected here at the hook boundary; the adapter
+ * fix belongs in a follow-up (it changes a merged test contract).
+ */
+function microToDecimalUsd(micro, decimals = 6) {
+    const m = /^\d+$/.exec(micro.trim());
+    if (!m)
+        return micro; // non-integer wire amount: leave as-is, let toMicroUsd validate
+    const scale = 10n ** BigInt(decimals);
+    const value = BigInt(micro.trim());
+    const whole = value / scale;
+    const frac = (value % scale).toString().padStart(decimals, "0").replace(/0+$/, "");
+    return frac ? `${whole}.${frac}` : `${whole}`;
+}
 /**
  * Install TWZRD as the default onBeforePaymentCreation policy engine.
  *
@@ -48,6 +72,40 @@ export function installTwzrdX402ClientHook(client, options) {
             agentIntent: "x402_onBeforePaymentCreation",
             chain: network,
         }, cfg);
+        // Opt-in Payment Control: build the canonical intent and run the policy
+        // runtime, feeding the preflight result in as remote intelligence. Skipped
+        // when payTo/amount are missing — the legacy gate already denies those.
+        let intent;
+        let decision;
+        if (options?.paymentControl && payTo && amountMicro) {
+            const pc = options.paymentControl;
+            const rawIntent = x402RequirementsToIntent(req, {
+                resourceUrl: req.resource,
+                method: pc.method,
+                facilitator: pc.facilitator,
+                purpose: pc.purpose,
+            });
+            // Correct the wire micro-amount into the decimal USD the runtime expects.
+            intent = { ...rawIntent, amount: microToDecimalUsd(amountMicro) };
+            decision = await evaluateIntent(intent, {
+                signer: pc.signer,
+                policy: pc.policy,
+                mandate: pc.mandate,
+                ledger: pc.ledger,
+                ttlMs: pc.ttlMs,
+                now: options.now?.(),
+                intelligence: () => ({
+                    known: approval.reputationScored ? true : undefined,
+                    washFlagged: approval.washFlagged ?? undefined,
+                    decision: approval.verdict === "allow" ||
+                        approval.verdict === "warn" ||
+                        approval.verdict === "block"
+                        ? approval.verdict
+                        : undefined,
+                    trustScore: approval.score ?? undefined,
+                }),
+            });
+        }
         try {
             options?.onDecision?.({
                 approved: approval.approved,
@@ -58,16 +116,21 @@ export function installTwzrdX402ClientHook(client, options) {
                 amountMicro,
                 reputationScored: approval.reputationScored,
                 policyAction: approval.policyAction,
+                intent,
+                decision,
             });
         }
         catch {
             // never break payment path on telemetry
         }
-        if (!approval.approved) {
-            return {
-                abort: true,
-                reason: `[twzrd] ${approval.reason} payTo=${payTo ?? "unknown"} network=${network ?? "unknown"}`,
-            };
+        // Payment Control can only TIGHTEN: abort if the legacy gate denied OR the
+        // signed decision blocks. Never loosen a legacy denial.
+        const pcBlocks = decision?.decision === "block";
+        if (!approval.approved || pcBlocks) {
+            const reason = pcBlocks && approval.approved
+                ? `[twzrd] payment_control_block:${decision?.reasonCodes.join(",")} payTo=${payTo ?? "unknown"}`
+                : `[twzrd] ${approval.reason} payTo=${payTo ?? "unknown"} network=${network ?? "unknown"}`;
+            return { abort: true, reason };
         }
         // void / undefined → proceed to payment payload creation (same selectedRequirements)
     });

package/dist/x402-client-hook.js.map

@@ -1 +1 @@
-{"version":3,"file":"x402-client-hook.js","sourceRoot":"","sources":["../src/x402-client-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,aAAa,EAAgC,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AA2DlD,SAAS,OAAO,CAAC,GAAiC;IAChD,OAAO,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAsB,EACtB,OAAsC;IAEtC,MAAM,GAAG,GAA4B,aAAa,CAAC,OAAO,CAAC,CAAC;IAE5D,MAAM,CAAC,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC;QACtC,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,iBAAiB,CAAC;QACxD,MAAM,SAAS,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAE5B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC;YACE,WAAW,EAAE,GAAG,CAAC,QAAQ;YACzB,KAAK;YACL,SAAS;YACT,WAAW,EAAE,8BAA8B;YAC3C,KAAK,EAAE,OAAO;SACf,EACD,GAAG,CACJ,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,EAAE,UAAU,EAAE,CAAC;gBACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACjC,KAAK;gBACL,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,OAAO;gBACpC,WAAW;gBACX,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;gBAC3C,YAAY,EAAE,QAAQ,CAAC,YAAY;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,WAAW,QAAQ,CAAC,MAAM,UAAU,KAAK,IAAI,SAAS,YAAY,OAAO,IAAI,SAAS,EAAE;aACjG,CAAC;QACJ,CAAC;QACD,qFAAqF;IACvF,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,oBAA8C,EAC9C,OAAsC;IAEtC,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,IAAI,oBAAoB,CAAC,MAAM,CAAC;IACxE,MAAM,WAAW,GACf,oBAAoB,CAAC,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,CAAC;IACxE,MAAM,SAAS,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAExD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC;QACE,WAAW,EAAE,oBAAoB,CAAC,QAAQ;QAC1C,KAAK;QACL,SAAS;QACT,WAAW,EAAE,8BAA8B;QAC3C,KAAK,EAAE,oBAAoB,CAAC,OAAO;KACpC,EACD,GAAG,CACJ,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,WAAW,QAAQ,CAAC,MAAM,UAAU,KAAK,IAAI,SAAS,EAAE;SACjE,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"x402-client-hook.js","sourceRoot":"","sources":["../src/x402-client-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,aAAa,EAAgC,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAoD,MAAM,qBAAqB,CAAC;AAgGvG,SAAS,OAAO,CAAC,GAAiC;IAChD,OAAO,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,iBAAiB,CAAC,KAAa,EAAE,QAAQ,GAAG,CAAC;IACpD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,gEAAgE;IACtF,MAAM,KAAK,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IAC5B,MAAM,IAAI,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnF,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAsB,EACtB,OAAsC;IAEtC,MAAM,GAAG,GAA4B,aAAa,CAAC,OAAO,CAAC,CAAC;IAE5D,MAAM,CAAC,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC;QACtC,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,iBAAiB,CAAC;QACxD,MAAM,SAAS,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAE5B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC;YACE,WAAW,EAAE,GAAG,CAAC,QAAQ;YACzB,KAAK;YACL,SAAS;YACT,WAAW,EAAE,8BAA8B;YAC3C,KAAK,EAAE,OAAO;SACf,EACD,GAAG,CACJ,CAAC;QAEF,wEAAwE;QACxE,2EAA2E;QAC3E,wEAAwE;QACxE,IAAI,MAAiC,CAAC;QACtC,IAAI,QAAqC,CAAC;QAC1C,IAAI,OAAO,EAAE,cAAc,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;YACpD,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;YAClC,MAAM,SAAS,GAAG,wBAAwB,CAAC,GAAG,EAAE;gBAC9C,WAAW,EAAE,GAAG,CAAC,QAAQ;gBACzB,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,OAAO,EAAE,EAAE,CAAC,OAAO;aACpB,CAAC,CAAC;YACH,0EAA0E;YAC1E,MAAM,GAAG,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE;gBACtC,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,OAAO,EAAE,EAAE,CAAC,OAAO;gBACnB,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE;gBACpB,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;oBACnB,KAAK,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;oBACnD,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,SAAS;oBAC9C,QAAQ,EACN,QAAQ,CAAC,OAAO,KAAK,OAAO;wBAC5B,QAAQ,CAAC,OAAO,KAAK,MAAM;wBAC3B,QAAQ,CAAC,OAAO,KAAK,OAAO;wBAC1B,CAAC,CAAC,QAAQ,CAAC,OAAO;wBAClB,CAAC,CAAC,SAAS;oBACf,UAAU,EAAE,QAAQ,CAAC,KAAK,IAAI,SAAS;iBACxC,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,OAAO,EAAE,UAAU,EAAE,CAAC;gBACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACjC,KAAK;gBACL,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,OAAO;gBACpC,WAAW;gBACX,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;gBAC3C,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,MAAM;gBACN,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;QAED,2EAA2E;QAC3E,wDAAwD;QACxD,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACnC,MAAM,MAAM,GACV,QAAQ,IAAI,QAAQ,CAAC,QAAQ;gBAC3B,CAAC,CAAC,iCAAiC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,SAAS,EAAE;gBAChG,CAAC,CAAC,WAAW,QAAQ,CAAC,MAAM,UAAU,KAAK,IAAI,SAAS,YAAY,OAAO,IAAI,SAAS,EAAE,CAAC;YAC/F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACjC,CAAC;QACD,qFAAqF;IACvF,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,oBAA8C,EAC9C,OAAsC;IAEtC,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,IAAI,oBAAoB,CAAC,MAAM,CAAC;IACxE,MAAM,WAAW,GACf,oBAAoB,CAAC,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,CAAC;IACxE,MAAM,SAAS,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAExD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC;QACE,WAAW,EAAE,oBAAoB,CAAC,QAAQ;QAC1C,KAAK;QACL,SAAS;QACT,WAAW,EAAE,8BAA8B;QAC3C,KAAK,EAAE,oBAAoB,CAAC,OAAO;KACpC,EACD,GAAG,CACJ,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,WAAW,QAAQ,CAAC,MAAM,UAAU,KAAK,IAAI,SAAS,EAAE;SACjE,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "twzrd-x402-gate",
-  "version": "0.5.4",
-  "description": "Buyer-side x402 trust gate. Run a free TWZRD preflight (ReadinessCard) before signing USDC to any x402 merchant, and autonomously escalate a `warn` to a $0.001 paid trust check that re-decides — blocking the spend on bad paid intel, no human in the loop. Default refuse when free merchant_card.wash_flagged (opt out TWZRD_REFUSE_WASH_FLAGGED=0). A 402 with no extractable payTo fails closed (twzrd_unidentifiable_payment_recipient) instead of falling through to the generic unknown-seller warn. Wraps fetch (HTTP 402) and the @x402/mcp onPaymentRequested hook — fixed in 0.5.2 to read the real @x402/mcp v2 nested `paymentRequired.accepts` shape (verified against @x402/mcp@2.17.0; previously only the flat legacy shape was read, causing a silent 100%-false-block once wired into a real runtime). installTwzrdAutoGate(payWrap) is the default-on one-liner: guards the raw fetch, then hands it to your x402 client, so the correct guard-before-pay composition can't be built backwards. BREAKING(0.2.0): fail-closed by default — set TWZRD_FAIL_OPEN=true to restore legacy allow-on-outage behavior.",
+  "version": "0.6.0",
+  "description": "Buyer-side x402 trust gate. Run a free TWZRD preflight (ReadinessCard) before signing USDC to any x402 merchant, and autonomously escalate a `warn` to a $0.001 paid trust check that re-decides \u2014 blocking the spend on bad paid intel, no human in the loop. Default refuse when free merchant_card.wash_flagged (opt out TWZRD_REFUSE_WASH_FLAGGED=0). A 402 with no extractable payTo fails closed (twzrd_unidentifiable_payment_recipient) instead of falling through to the generic unknown-seller warn. Wraps fetch (HTTP 402) and the @x402/mcp onPaymentRequested hook \u2014 fixed in 0.5.2 to read the real @x402/mcp v2 nested `paymentRequired.accepts` shape (verified against @x402/mcp@2.17.0; previously only the flat legacy shape was read, causing a silent 100%-false-block once wired into a real runtime). installTwzrdAutoGate(payWrap) is the default-on one-liner: guards the raw fetch, then hands it to your x402 client, so the correct guard-before-pay composition can't be built backwards. BREAKING(0.2.0): fail-closed by default \u2014 set TWZRD_FAIL_OPEN=true to restore legacy allow-on-outage behavior.",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -27,7 +27,7 @@
     "build": "tsc",
     "prepublishOnly": "tsc",
     "typecheck": "tsc --noEmit",
-    "test": "tsx test/policy.test.ts && tsx test/wrap-fetch.test.ts && tsx test/mcp-hook.test.ts && tsx test/attribution.test.ts && tsx test/auto-receipt.test.ts && tsx test/quick.test.ts && tsx test/sponsored.test.ts && tsx test/escalation.test.ts && tsx test/wash-refuse.test.ts && tsx test/auto-gate.test.ts && tsx test/network.test.ts && tsx test/safe-fetch.test.ts && tsx test/challenge-swap.test.ts && tsx test/x402-client-hook.test.ts && tsx test/run-attribution.test.ts",
+    "test": "tsx test/policy.test.ts && tsx test/wrap-fetch.test.ts && tsx test/mcp-hook.test.ts && tsx test/attribution.test.ts && tsx test/auto-receipt.test.ts && tsx test/quick.test.ts && tsx test/sponsored.test.ts && tsx test/escalation.test.ts && tsx test/wash-refuse.test.ts && tsx test/auto-gate.test.ts && tsx test/network.test.ts && tsx test/safe-fetch.test.ts && tsx test/challenge-swap.test.ts && tsx test/x402-client-hook.test.ts && tsx test/run-attribution.test.ts && tsx test/payment-control.test.ts && tsx test/intent-binding.test.ts",
     "safe-fetch": "tsx src/safe-fetch.ts",
     "guard-demo": "tsx examples/agentic-market-gate.ts",
     "autoreceipt-demo": "tsx examples/auto-receipt.ts --dry-run",
@@ -69,11 +69,21 @@
     "@x402/svm": ">=2.0.0"
   },
   "peerDependenciesMeta": {
-    "@scure/base": { "optional": true },
-    "@solana/kit": { "optional": true },
-    "@x402/core": { "optional": true },
-    "@x402/fetch": { "optional": true },
-    "@x402/svm": { "optional": true }
+    "@scure/base": {
+      "optional": true
+    },
+    "@solana/kit": {
+      "optional": true
+    },
+    "@x402/core": {
+      "optional": true
+    },
+    "@x402/fetch": {
+      "optional": true
+    },
+    "@x402/svm": {
+      "optional": true
+    }
   },
   "devDependencies": {
     "@scure/base": "^1.2.0",