Modules
Autonomous payment capabilities for Raxol agents.
Reads the settlement-accounting deployment contract from the environment.
Payment actions for AI agents.
Agent Action that issues a Xochi delegation envelope from the caller's wallet to a specified agent wallet.
Fetch and verify a Tron-origin cross-chain deposit-route quote.
Agent Action that initiates a Tron cross-chain transfer through the Relay rail.
Agent Action that runs a cross-chain (and optionally stealth) Xochi intent.
Agent Action that lists Xochi delegation envelopes stored locally,
filtered by whether the calling wallet is the issuer (member) or
the addressee (agent).
Agent Action that polls a Relay (Tron) transfer until it reaches a terminal status.
Agent Action that polls a Xochi intent until it reaches a terminal status.
Agent Action that locally deletes a stored Xochi Mandate envelope.
Agent Action that AUTHORIZES an explicit same-chain transfer to an address.
Single spending choke point for payment Actions.
Asset decimals registry.
Per-chain USDC EIP-712 domain name and version values.
Read-only, multi-chain on-chain reader used by the settlement accounting and rebalance advisor: fetch a transaction receipt (to price the gas a fill burned) and read a native/token balance (to size a refuel).
Req-backed Raxol.Payments.ChainReader over per-chain JSON-RPC endpoints.
Deterministic in-memory Raxol.Payments.ChainReader for tests.
Durable idempotency record for an in-flight payment intent.
Raxol.Payments.Checkpoint store backed by Raxol.Agent.ContextStore.
ETS-backed Raxol.Payments.Checkpoint store.
Built-in confirmation callbacks for Raxol.Payments.Req.AutoPay's
:on_confirm option.
Runtime deployment detection for fund-moving defaults.
Semantic payment directive.
EIP-712 typed-structured-data hashing.
Self-pay x402 endpoint for validating the AutoPay stack end-to-end.
Normalized payment failure surfaced to the caller (agent, LLM, or human).
Shared HTTP header utilities for payment protocol implementations.
ETS-backed spend tracking for agent payment operations.
Xochi delegation envelope: an EIP-712-signed authorization from a Xochi Member to a specific agent wallet, scoped to particular endpoints with a budget.
Select the best Mandate envelope from the Store for a given scope and agent wallet.
Local holder for Xochi Mandate envelopes.
Single source of truth for non-budget policy checks.
Shared status-polling engine for cross-chain settlement.
A price_fn for native gas tokens, backed by the public CoinGecko REST API.
A price_fn backed by a fixed symbol -> USD map, for tests and for runs where
the operator supplies prices out of band.
Maps trust scores to privacy tiers, fees, and settlement targets.
Behaviour for payment protocol implementations.
Machine Payments Protocol client (Stripe/Tempo).
Permit2 PermitWitnessTransferFrom signing for Riddler's /order
endpoint.
Riddler cross-chain intent solver protocol.
x402 payment protocol client (Coinbase/Linux Foundation).
Xochi private execution protocol.
JSON-RPC 2.0 client for the pxe-bridge.
Request/response schemas for the pxe-bridge JSON-RPC API.
Recommends -- never executes -- solver treasury moves from a
Raxol.Payments.RebalancePolicy, current balances, and per-chain native drain
(from Raxol.Payments.SettlementLedger). raxol cannot move the solver's funds
(Riddler owns the wallet), so this produces a recommendation list an operator or
the Riddler rebalancer acts on.
Periodically runs Raxol.Payments.RebalanceAdvisor against the solver's live
balances and the SettlementLedger drain, emitting recommendations (via the
advisor's telemetry + logs). Recommend-only: raxol cannot move the solver wallet;
the Riddler auto-rebalancer executes.
Per-chain solver treasury policy: native gas floors/targets, per-asset inventory floors/targets, asset tiers, gas-refuel source preference, and per-destination-tier minimum notionals.
High-level facade over Raxol.Payments.Relay.Client for the Tron rail.
Behaviour for funding a Relay deposit by broadcasting an on-chain token transfer to the Riddler-managed deposit address (the "B" backstop, used when the gasless pull is unavailable; see axol-io/Riddler#120).
Deterministic in-memory Raxol.Payments.Relay.Broadcaster for tests.
Client for Riddler's Relay API: the Tron cross-chain rail.
Request and response shapes for Riddler's Relay API (the Tron cross-chain
rail). Distinct from the Xochi schemas: Relay is deposit-address based (no
client signature), supports Tron and EVM addresses, and uses its own field
names (can_fill, to_amount, deposit_address, status
pending|executing|confirming|completed|failed).
Builds a Req plugin function for use with Raxol.Agent.Backend.HTTP.
Req plugin that transparently handles HTTP 402 Payment Required responses.
Req plugin that attaches a Xochi delegation envelope to outbound requests bound for Xochi endpoints.
Elixir client for the Riddler Commerce API.
Request/response schemas for the Riddler Commerce API.
Selects the optimal payment protocol based on transfer requirements.
An opaque wrapper around sensitive bytes (a private key) that refuses to
reveal itself through Inspect, logging, or string interpolation.
Subscribes to [:raxol, :payments, :xochi, :settled] and books each completed
settlement into a Raxol.Payments.SettlementLedger.
ETS-backed post-settlement P&L ledger: one entry per completed cross-chain fill, recording the fee collected (in the fee token) against the native gas the fill burned, so a corridor's margin and a chain's native-token drain can be measured after the fact.
Turns a completed cross-chain fill into a Raxol.Payments.SettlementLedger entry:
resolves the fee token, fetches the destination fill receipt via a
Raxol.Payments.ChainReader to price the native gas burned, and records it.
CommandHook that enforces spending policy on payment operations.
Spending limits for agent payment operations.
Telemetry event surface for the payment subsystem.
Stock :telemetry handler that pretty-prints payment events to
Logger. Useful as a starter template -- copy + tailor for Datadog,
OpenTelemetry, Phoenix.LiveDashboard, etc.
Tron Base58Check address codec.
Behaviour for wallet implementations providing signing and identity.
Wallet that loads a private key from an environment variable.
Wallet that loads a private key from 1Password via the op CLI.
Client for the solver capability matrix -- the single source of truth for which chains, tokens, and pull methods the Xochi/Riddler stack can settle right now.
Client for the Xochi private execution protocol.
Client-side verification of a Xochi deposit-route quote's deposit_attestation.
Request/response schemas for the Xochi intent API.
A cross-VM deposit-route quote request: a non-EVM origin (Tron) settling to
an EVM destination. The origin has no gasless pull, so the quote returns a
deposit_address (+ deposit_attestation to verify) instead of EIP-712
typed data to sign.
ERC-5564/ERC-6538 stealth address derivation and scanning.
ZKSAR (Zero-Knowledge Sanctions/AML Reporting) attestation verification.
Aggregates verified ZKSAR attestations into a 0-100 trust score using a diminishing-returns formula.
Mix Tasks
Reproducible launch-rehearsal harness. Brings up
Measures the throughput of the fund-moving hot paths that actually gate DEX volume: secp256k1 signing, atomic ledger reservations, and idempotency checkpoint reads/writes. (The render frame budget does not gate volume; these do.)
Run Raxol.Payments.EchoServer for local agent validation.