feat: implement idempotency handling and intent parsing

.gitattributes

@@ -1,2 +1,7 @@
+# I12 depends on dist/ being byte-identical across platforms.
+* text=auto eol=lf
+*.png binary
+*.jpg binary
+
 .github/workflows/*.yml linguist-detectable -linguist-vendored
 .github/workflows/*.yaml linguist-detectable -linguist-vendored

.github/workflows/ci.yml

@@ -0,0 +1,63 @@
+name: CI
+
+on:
+  push:
+    branches: ["**"]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  ground-rules:
+    name: Ground rules
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: npm
+      - run: npm ci
+
+      - name: I1 — layer boundary lint
+        run: npm run lint
+
+      - name: I1 — layer boundary grep
+        run: npm run check:boundary
+
+      - name: I11 — runtime dependency count
+        run: npm run check:deps
+
+      - name: Typecheck
+        run: npm run typecheck
+
+      - name: Tests (I3, I5, I7, I8, I9 and the mock end-to-end)
+        run: npm test
+
+      - name: I12 — dist/ is reproducible from src/
+        run: |
+          npm run build
+          if ! git diff --exit-code -- dist; then
+            echo "::error::dist/ does not match a rebuild from src/. Run 'npm run build' and commit dist/."
+            exit 1
+          fi
+
+  action:
+    name: Action runs and parses an Intent
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Dry-run with no secrets configured
+        id: xops
+        uses: ./
+        with:
+          recipient: "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266"
+          amount: "2500000"
+
+      - name: Assert the run stayed in dry-run and produced a key
+        run: |
+          test "${{ steps.xops.outputs.STATUS }}" = "dry-run"
+          test -n "${{ steps.xops.outputs.IDEMPOTENCY_KEY }}"
+          echo "key: ${{ steps.xops.outputs.IDEMPOTENCY_KEY }}"

.gitignore

@@ -324,3 +324,8 @@ TSWLatexianTemp*
 # option is specified. Footnotes are the stored in a file with suffix Notes.bib.
 # Uncomment the next line to have this generated file ignored.
 #*Notes.bib
+
+node_modules/
+build/
+*.log
+.DS_Store

action.yml

@@ -0,0 +1,50 @@
+name: "XOps"
+description: "CI/CD-native value transfer. A repository event produces a payment intent, a human signs it, the workflow settles it."
+author: "AOSSIE-Org"
+branding:
+  icon: "git-merge"
+  color: "purple"
+
+inputs:
+  recipient:
+    description: "Opaque payout identity. An inline address, or anything a resolver understands."
+    required: true
+  amount:
+    description: "Atomic units, as a string. USDC has 6 decimals, so 2500000 is 2.50 USDC."
+    required: true
+  asset:
+    description: "Opaque asset identifier from the chain registry."
+    required: false
+    default: "USDC"
+  network:
+    description: "CAIP-2 network identifier."
+    required: false
+    default: "eip155:84532"
+  scheme:
+    description: "x402 settlement scheme."
+    required: false
+    default: "exact"
+  round:
+    description: "Bump to deliberately re-pay the same recipient for the same ref."
+    required: false
+    default: "0"
+  mode:
+    description: "dry-run | facilitator | self | auto. Real settlement is always explicit."
+    required: false
+    default: "dry-run"
+
+outputs:
+  TX_HASH:
+    description: "Settlement transaction identifier, when one exists."
+  EXPLORER_URL:
+    description: "Human-readable link to the settlement."
+  STATUS:
+    description: "dry-run | settled | already-paid | error"
+  ERROR_CODE:
+    description: "Code from the XOps error taxonomy, empty on success."
+  IDEMPOTENCY_KEY:
+    description: "Canonical key this run derived. Identical inputs reproduce it."
+
+runs:
+  using: "node20"
+  main: "dist/index.js"