@402flow/sdk 0.1.0-alpha.24 → 0.1.0-alpha.26

package/README.md

@@ -426,7 +426,28 @@ Responsibility split:
 
 If your host app wants to execute through Dexter, pay.sh, or another provider, that integration should install and own the third-party SDK directly. `@402flow/sdk` only owns the executor contract and the governed authorize/finalize flow.
 
-The repo keeps third-party executor proofs in the separate `third-party-executors/` package so the main `@402flow/sdk` install path stays provider-neutral.
+Official supported adapters live in the separate `@402flow/sdk-third-party-executors` package so the main `@402flow/sdk` install path stays provider-neutral.
+
+```bash
+npm install @402flow/sdk @402flow/sdk-third-party-executors
+```
+
+If you pin versions explicitly, pin both packages to the same version:
+
+```bash
+npm install @402flow/sdk@<version> @402flow/sdk-third-party-executors@<version>
+```
+
+The adapter package is versioned and supported in lockstep with `@402flow/sdk`, so keep the two package versions aligned. In this repo, the published adapter package source lives under `third-party-executors/`.
+
+Current official adapters:
+
+| Adapter | Current scope | Key dependencies |
+| --- | --- | --- |
+| Dexter | Host-owned delegated execution against Dexter's paid request client | `@dexterai/x402` |
+| pay.sh | Host-owned x402 Solana exact delegated execution | `@x402/core`, `@x402/svm`, `@solana/kit` |
+
+The pay.sh adapter intentionally does not depend on `@solana/pay` today. The current proof targets pay.sh's x402 Solana exact flow, so challenge parsing, signed payment payload creation, and paid response parsing come from `@x402/core` plus `@x402/svm`, while `@solana/kit` only supplies the signer. `@solana/pay` becomes relevant when the repo adds a separate Solana Pay or MPP-specific adapter path.
 
 For a repo-wide verification pass from the SDK root, run:
 
@@ -449,6 +470,16 @@ npm run example:dexter-delegated-executor -- \
   '{"topic":"sdk integration rollout","audience":"platform engineers","format":"bullets"}'
 ```
 
+For a repo-local host-owned pay.sh x402 example, run:
+
+```bash
+cd third-party-executors
+npm install
+npm run example:pay-sh-delegated-executor -- --help
+```
+
+The pay.sh example expects the standard SDK auth environment plus a local Solana signer path in `PAY_SH_SOLANA_KEYPAIR_PATH`. Run the `--help` form first to see the full required environment and argument contract.
+
 ## Prepared Result Semantics
 
 `preparePaidRequest()` separates request checking from paid execution.
@@ -601,6 +632,10 @@ When unset, first-party fixtures default to the self-hosted demo merchant at `ht
 
 ## Publish
 
+Publish the main SDK package first. Publish `@402flow/sdk-third-party-executors` second, after the matching SDK version is available.
+
+Main SDK package:
+
 ```bash
 npm run install:all
 npm run check:all
@@ -609,3 +644,13 @@ npm publish --access public
 ```
 
 `npm publish` now also runs `npm run check:all` through the root `prepublishOnly` hook, so the repo-wide test pass is enforced before publish even if you skip that step manually.
+
+Adapter package:
+
+```bash
+cd third-party-executors
+npm install
+npm run check
+npm run pack:check
+npm publish --access public
+```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@402flow/sdk",
-  "version": "0.1.0-alpha.24",
+  "version": "0.1.0-alpha.26",
   "description": "Paid HTTP SDK for AI agents with an inspectable prepare/execute flow.",
   "private": false,
   "type": "module",