@agent-score/commerce 1.6.0 → 1.7.0

package/README.md

@@ -24,10 +24,11 @@ npm install hono mppx @x402/core @x402/evm @solana/mpp @solana/kit stripe   # wh
 | Subpath | What it provides |
 |---|---|
 | `/identity/{hono,express,fastify}` | Trust gate middleware: KYC, sanctions, age, jurisdiction. Context-getter pattern: `agentscoreGate(opts)` middleware + `getAgentScoreData(ctx)` / `getGateDegradedState(ctx)` / `getGateQuotaInfo(ctx)` accessors, `captureWallet(...)`, `verifyWalletSignerMatch(...)`. Plus shared denial helpers: `denialReasonStatus`, `denialReasonToBody`, `buildSignerMismatchBody`, `buildContactSupportNextSteps`, `verificationAgentInstructions`, `isFixableDenial`, `FIXABLE_DENIAL_REASONS`. |
+| `/identity/policy` | Per-product compliance helpers for multi-product merchants (each product carries its own policy: hard gate vs soft vs none, per-product shipping allowlists): `PolicyBlock`, `GateResult`, `EnforcementMode`, `IdentityStatus`, `buildGateOptionsFromPolicy`, `runGateWithEnforcement`, `shippingCountryAllowed`, `shippingStateAllowed`. |
 | `/identity/{nextjs,web}` | Same gate, wrapper pattern: `withAgentScoreGate(opts, handler)` / `createAgentScoreGate(opts) => guard(req)`. The `data` + `degraded` + `infraReason` fields land directly on the handler arg / guard result (no separate getter). Plus shared `captureWallet`, `verifyWalletSignerMatch`. |
 | `/payment` | `networks`, `USDC`, `rails` registries; `paymentDirective`, `buildPaymentDirective`, `wwwAuthenticateHeader`, `paymentRequiredHeader`, `aliasAmountFields` (v1↔v2 amount field shim: emits both `amount` and `maxAmountRequired` so v1-only x402 parsers like Coinbase awal can read v2 bodies), `settlementOverrideHeader`, `dispatchSettlementByNetwork`, `extractPaymentSigner` (returns `{address, network}`); `createX402Server`, `createMppxServer`; drop-in x402 helpers: `validateX402NetworkConfig` (boot-time guard), `verifyX402Request` (parse + validate inbound X-Payment), `processX402Settle` (verify-then-settle with one call), `classifyX402SettleResult` (maps the tagged settle result to a recommended HTTP status / code / nextSteps so merchants get a controlled envelope without coupling to facilitator-specific error text). |
 | `/discovery` | `isDiscoveryProbeRequest`, `buildDiscoveryProbeResponse` (with optional `x402Sample` for x402-aware crawlers, e.g. `awal x402 details`), `sampleX402AcceptForNetwork` (USDC sample-accept builder for known CAIP-2 networks), `buildWellKnownMpp`, `buildLlmsTxt` + `llmsTxtIdentitySection` + `llmsTxtPaymentSection` (compact + verbose modes), `buildSkillMd` (Claude-Skill-compatible `/skill.md` agent-discovery manifest; strictly agent-facing data only, no internal posture), `agentscoreOpenApiSnippets`, `createBazaarDiscovery`, `noindexNonDiscoveryPaths` (Hono middleware that emits `X-Robots-Tag: noindex` on every path except the agent-discovery surfaces; defaults cover `/openapi.json`, `/llms.txt`, `/skill.md`, `/.well-known/{mpp.json,agent-card.json,ucp,jwks.json}`, `/favicon.{png,ico}`; pure helpers `isDiscoveryPath` + `defaultDiscoveryPaths` for non-Hono frameworks). |
-| `/challenge` | `build402Body`, `buildAcceptedMethods`, `buildIdentityMetadata`, `buildHowToPay`, `buildAgentInstructions` (auto-emits per-rail `compatible_clients`: smoke-verified CLIs the agent should use; vendor override supported), `buildPricingBlock`, `firstEncounterAgentMemory`, `OrderReceipt`; `respond402`, a drop-in 402 emit that preserves mppx's `WWW-Authenticate` and layers x402's `PAYMENT-REQUIRED`. `buildValidationError`: structured 4xx body builder (`{error: {code, message}, required_fields?, example_body?, next_steps?, ...extra}`) so vendors compose body shapes by name instead of inlining at every validation site. |
+| `/challenge` | `build402Body`, `buildAcceptedMethods`, `buildIdentityMetadata`, `buildHowToPay`, `buildAgentInstructions` (auto-emits per-rail `compatible_clients`: smoke-verified CLIs the agent should use; vendor override supported; pure helper `compatibleClientsByRails(rails)` returns the same map for vendors building custom 402s), `buildPricingBlock`, `firstEncounterAgentMemory`, `OrderReceipt`; `respond402`, a drop-in 402 emit that preserves mppx's `WWW-Authenticate` and layers x402's `PAYMENT-REQUIRED`. `buildValidationError`: structured 4xx body builder (`{error: {code, message}, required_fields?, example_body?, next_steps?, ...extra}`) so vendors compose body shapes by name instead of inlining at every validation site. |
 | `/stripe-multichain` | `createMultichainPaymentIntent`, `getDepositAddress`, `simulateCryptoDeposit`, `createMppxStripe`; `createPiCache` (TTL'd PI / deposit-address cache, Redis-backed when `redisUrl` set, in-memory otherwise), `simulateDepositIfTestMode` (gates on `sk_test_` and looks up the PI for you), `STRIPE_TEST_TX_HASH_SUCCESS` / `STRIPE_TEST_TX_HASH_FAILED` constants. Peer dep on `stripe`. |
 | `/api` | Everything from `@agent-score/sdk` re-exported in one place: `AgentScore` + `AgentScoreError`, `AGENTSCORE_TEST_ADDRESSES` + `isAgentScoreTestAddress`. **Don't add `@agent-score/sdk` as a separate dep**; the two can drift versions and cause subtle type mismatches. |
 
@@ -223,12 +224,9 @@ const profile = buildUCPProfile({
     ],
   },
   payment_handlers: {
-    'sh.agentscore.payment.tempo': [{
-      id: 'tempo', version: '2026-04-08',
-      spec: 'https://agentscore.sh/specification/payment-handlers/tempo',
-      schema: 'https://agentscore.sh/schemas/payment-handlers/tempo.json',
-      config: { recipient: TEMPO_ADDR },
-    }],
+    ...mppPaymentHandler({ networks: [{ network: 'tempo-mainnet', chain_id: 4217, recipient: TEMPO_ADDR }] }),
+    ...x402PaymentHandler({ networks: [{ network: 'base-8453', recipient: BASE_ADDR }] }),
+    ...stripeSptPaymentHandler({ profile_id: 'profile_5xKvNqM9BaH' }),
   },
   signing_keys,
   // Optional: declare the merchant's gate policy as an `sh.agentscore.identity` capability

package/dist/core.js

@@ -220,7 +220,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"1.6.0"}`;
+  const defaultUa = `@agent-score/commerce@${"1.7.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new import_sdk.AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();

package/dist/core.mjs

@@ -202,7 +202,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"1.6.0"}`;
+  const defaultUa = `@agent-score/commerce@${"1.7.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();

package/dist/identity/express.js

@@ -365,7 +365,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"1.6.0"}`;
+  const defaultUa = `@agent-score/commerce@${"1.7.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new import_sdk.AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();

package/dist/identity/express.mjs

@@ -332,7 +332,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"1.6.0"}`;
+  const defaultUa = `@agent-score/commerce@${"1.7.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();

package/dist/identity/fastify.js

@@ -366,7 +366,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"1.6.0"}`;
+  const defaultUa = `@agent-score/commerce@${"1.7.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new import_sdk.AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();

package/dist/identity/fastify.mjs

@@ -332,7 +332,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"1.6.0"}`;
+  const defaultUa = `@agent-score/commerce@${"1.7.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();

package/dist/identity/hono.js

@@ -365,7 +365,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"1.6.0"}`;
+  const defaultUa = `@agent-score/commerce@${"1.7.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new import_sdk.AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();

package/dist/identity/hono.mjs

@@ -332,7 +332,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"1.6.0"}`;
+  const defaultUa = `@agent-score/commerce@${"1.7.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();

package/dist/identity/nextjs.js

@@ -361,7 +361,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"1.6.0"}`;
+  const defaultUa = `@agent-score/commerce@${"1.7.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new import_sdk.AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();

package/dist/identity/nextjs.mjs

@@ -332,7 +332,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"1.6.0"}`;
+  const defaultUa = `@agent-score/commerce@${"1.7.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();

package/dist/identity/web.js

@@ -361,7 +361,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"1.6.0"}`;
+  const defaultUa = `@agent-score/commerce@${"1.7.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new import_sdk.AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();

package/dist/identity/web.mjs

@@ -332,7 +332,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"1.6.0"}`;
+  const defaultUa = `@agent-score/commerce@${"1.7.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();

package/dist/index.d.mts

@@ -445,13 +445,7 @@ interface AgentScoreGatePolicy {
  *     ],
  *   },
  *   payment_handlers: {
- *     'sh.agentscore.payment.tempo': [{
- *       id: 'tempo',
- *       version: '2026-04-08',
- *       spec: 'https://agentscore.sh/specification/payment-handlers/tempo',
- *       schema: 'https://agentscore.sh/schemas/payment-handlers/tempo.json',
- *       config: { recipient: TEMPO_ADDR },
- *     }],
+ *     ...mppPaymentHandler({ networks: [{ network: 'tempo-mainnet', chain_id: 4217, recipient: TEMPO_ADDR }] }),
  *   },
  *   signing_keys: [signingKey],
  *   agentscore_gate: { require_kyc: true, min_age: 21, allowed_jurisdictions: ['US'] },
@@ -460,6 +454,74 @@ interface AgentScoreGatePolicy {
  */
 declare function buildUCPProfile(input: BuildUCPProfileInput): UCPProfile;
 declare const AGENTSCORE_UCP_CAPABILITY = "sh.agentscore.identity";
+type MppNetwork = 'tempo-mainnet' | 'tempo-testnet' | 'mpp-solana-mainnet' | 'mpp-solana-devnet' | (string & {});
+interface MppNetworkEntry {
+    network: MppNetwork;
+    /** EVM-style chain id (e.g. 4217 for Tempo mainnet). Omit for non-EVM networks. */
+    chain_id?: number;
+    /** Static settlement address. Omit for per-order recipients (e.g. Stripe-derived deposits). */
+    recipient?: string;
+    [k: string]: unknown;
+}
+interface MppPaymentHandlerInput {
+    networks: MppNetworkEntry[];
+}
+type X402Network = `base-${number}` | 'solana-mainnet-beta' | 'solana-devnet' | 'stellar-pubnet' | 'stellar-testnet' | (string & {});
+interface X402NetworkEntry {
+    network: X402Network;
+    /** Static settlement address. Omit for per-order recipients. */
+    recipient?: string;
+    [k: string]: unknown;
+}
+interface X402PaymentHandlerInput {
+    networks: X402NetworkEntry[];
+}
+interface StripeSptPaymentHandlerInput {
+    /** Stripe profile id (the merchant-side network identifier the agent's SPT is scoped to). */
+    profile_id: string;
+}
+/**
+ * Build the `sh.agentscore.payment.mpp` payment handler block for a UCP profile.
+ *
+ * @example
+ * ```ts
+ * buildUCPProfile({
+ *   ...,
+ *   payment_handlers: {
+ *     ...mppPaymentHandler({ networks: [{ network: 'tempo-mainnet', chain_id: 4217 }] }),
+ *   },
+ * });
+ * ```
+ */
+declare function mppPaymentHandler(input: MppPaymentHandlerInput): Record<string, UCPPaymentHandlerBinding[]>;
+/**
+ * Build the `sh.agentscore.payment.x402` payment handler block for a UCP profile.
+ *
+ * @example
+ * ```ts
+ * buildUCPProfile({
+ *   ...,
+ *   payment_handlers: {
+ *     ...x402PaymentHandler({ networks: [{ network: 'base-8453', recipient: '0xabc...' }] }),
+ *   },
+ * });
+ * ```
+ */
+declare function x402PaymentHandler(input: X402PaymentHandlerInput): Record<string, UCPPaymentHandlerBinding[]>;
+/**
+ * Build the `sh.agentscore.payment.stripe_spt` payment handler block for a UCP profile.
+ *
+ * @example
+ * ```ts
+ * buildUCPProfile({
+ *   ...,
+ *   payment_handlers: {
+ *     ...stripeSptPaymentHandler({ profile_id: 'profile_5xKvNqM9BaH' }),
+ *   },
+ * });
+ * ```
+ */
+declare function stripeSptPaymentHandler(input: StripeSptPaymentHandlerInput): Record<string, UCPPaymentHandlerBinding[]>;
 
 /**
  * UCP profile signing helpers (JWKS + JWS).
@@ -592,4 +654,4 @@ declare function verifyUCPProfile(profile: SignedUCPProfile, jwks: JWKSResponse)
  */
 declare function buildJWKSResponse(keys: UCPSigningKey[]): JWKSResponse;
 
-export { type A2AAgentCard, type A2AAgentCardCapabilities, type A2AAgentCardExtension, type A2AAgentCardSignature, type A2AAgentInterface, type A2AAgentProvider, type A2AAgentSkill, AGENTSCORE_UCP_CAPABILITY, type AgentScoreGatePolicy, type BuildA2AAgentCardInput, type BuildUCPProfileInput, type GeneratedUCPKey, type JWKSResponse, type SignUCPProfileOptions, type SignedUCPProfile, type UCPCapabilityBinding, type UCPPaymentHandlerBinding, type UCPProfile, type UCPProfileBody, type UCPServiceBinding, UCPSigningKey, UCPVerificationError, UCP_A2A_EXTENSION_URI, buildA2AAgentCard, buildJWKSResponse, buildUCPProfile, generateUCPSigningKey, signUCPProfile, ucpA2AExtension, verifyUCPProfile };
+export { type A2AAgentCard, type A2AAgentCardCapabilities, type A2AAgentCardExtension, type A2AAgentCardSignature, type A2AAgentInterface, type A2AAgentProvider, type A2AAgentSkill, AGENTSCORE_UCP_CAPABILITY, type AgentScoreGatePolicy, type BuildA2AAgentCardInput, type BuildUCPProfileInput, type GeneratedUCPKey, type JWKSResponse, type MppNetworkEntry, type MppPaymentHandlerInput, type SignUCPProfileOptions, type SignedUCPProfile, type StripeSptPaymentHandlerInput, type UCPCapabilityBinding, type UCPPaymentHandlerBinding, type UCPProfile, type UCPProfileBody, type UCPServiceBinding, UCPSigningKey, UCPVerificationError, UCP_A2A_EXTENSION_URI, type X402NetworkEntry, type X402PaymentHandlerInput, buildA2AAgentCard, buildJWKSResponse, buildUCPProfile, generateUCPSigningKey, mppPaymentHandler, signUCPProfile, stripeSptPaymentHandler, ucpA2AExtension, verifyUCPProfile, x402PaymentHandler };

package/dist/index.d.ts

@@ -445,13 +445,7 @@ interface AgentScoreGatePolicy {
  *     ],
  *   },
  *   payment_handlers: {
- *     'sh.agentscore.payment.tempo': [{
- *       id: 'tempo',
- *       version: '2026-04-08',
- *       spec: 'https://agentscore.sh/specification/payment-handlers/tempo',
- *       schema: 'https://agentscore.sh/schemas/payment-handlers/tempo.json',
- *       config: { recipient: TEMPO_ADDR },
- *     }],
+ *     ...mppPaymentHandler({ networks: [{ network: 'tempo-mainnet', chain_id: 4217, recipient: TEMPO_ADDR }] }),
  *   },
  *   signing_keys: [signingKey],
  *   agentscore_gate: { require_kyc: true, min_age: 21, allowed_jurisdictions: ['US'] },
@@ -460,6 +454,74 @@ interface AgentScoreGatePolicy {
  */
 declare function buildUCPProfile(input: BuildUCPProfileInput): UCPProfile;
 declare const AGENTSCORE_UCP_CAPABILITY = "sh.agentscore.identity";
+type MppNetwork = 'tempo-mainnet' | 'tempo-testnet' | 'mpp-solana-mainnet' | 'mpp-solana-devnet' | (string & {});
+interface MppNetworkEntry {
+    network: MppNetwork;
+    /** EVM-style chain id (e.g. 4217 for Tempo mainnet). Omit for non-EVM networks. */
+    chain_id?: number;
+    /** Static settlement address. Omit for per-order recipients (e.g. Stripe-derived deposits). */
+    recipient?: string;
+    [k: string]: unknown;
+}
+interface MppPaymentHandlerInput {
+    networks: MppNetworkEntry[];
+}
+type X402Network = `base-${number}` | 'solana-mainnet-beta' | 'solana-devnet' | 'stellar-pubnet' | 'stellar-testnet' | (string & {});
+interface X402NetworkEntry {
+    network: X402Network;
+    /** Static settlement address. Omit for per-order recipients. */
+    recipient?: string;
+    [k: string]: unknown;
+}
+interface X402PaymentHandlerInput {
+    networks: X402NetworkEntry[];
+}
+interface StripeSptPaymentHandlerInput {
+    /** Stripe profile id (the merchant-side network identifier the agent's SPT is scoped to). */
+    profile_id: string;
+}
+/**
+ * Build the `sh.agentscore.payment.mpp` payment handler block for a UCP profile.
+ *
+ * @example
+ * ```ts
+ * buildUCPProfile({
+ *   ...,
+ *   payment_handlers: {
+ *     ...mppPaymentHandler({ networks: [{ network: 'tempo-mainnet', chain_id: 4217 }] }),
+ *   },
+ * });
+ * ```
+ */
+declare function mppPaymentHandler(input: MppPaymentHandlerInput): Record<string, UCPPaymentHandlerBinding[]>;
+/**
+ * Build the `sh.agentscore.payment.x402` payment handler block for a UCP profile.
+ *
+ * @example
+ * ```ts
+ * buildUCPProfile({
+ *   ...,
+ *   payment_handlers: {
+ *     ...x402PaymentHandler({ networks: [{ network: 'base-8453', recipient: '0xabc...' }] }),
+ *   },
+ * });
+ * ```
+ */
+declare function x402PaymentHandler(input: X402PaymentHandlerInput): Record<string, UCPPaymentHandlerBinding[]>;
+/**
+ * Build the `sh.agentscore.payment.stripe_spt` payment handler block for a UCP profile.
+ *
+ * @example
+ * ```ts
+ * buildUCPProfile({
+ *   ...,
+ *   payment_handlers: {
+ *     ...stripeSptPaymentHandler({ profile_id: 'profile_5xKvNqM9BaH' }),
+ *   },
+ * });
+ * ```
+ */
+declare function stripeSptPaymentHandler(input: StripeSptPaymentHandlerInput): Record<string, UCPPaymentHandlerBinding[]>;
 
 /**
  * UCP profile signing helpers (JWKS + JWS).
@@ -592,4 +654,4 @@ declare function verifyUCPProfile(profile: SignedUCPProfile, jwks: JWKSResponse)
  */
 declare function buildJWKSResponse(keys: UCPSigningKey[]): JWKSResponse;
 
-export { type A2AAgentCard, type A2AAgentCardCapabilities, type A2AAgentCardExtension, type A2AAgentCardSignature, type A2AAgentInterface, type A2AAgentProvider, type A2AAgentSkill, AGENTSCORE_UCP_CAPABILITY, type AgentScoreGatePolicy, type BuildA2AAgentCardInput, type BuildUCPProfileInput, type GeneratedUCPKey, type JWKSResponse, type SignUCPProfileOptions, type SignedUCPProfile, type UCPCapabilityBinding, type UCPPaymentHandlerBinding, type UCPProfile, type UCPProfileBody, type UCPServiceBinding, UCPSigningKey, UCPVerificationError, UCP_A2A_EXTENSION_URI, buildA2AAgentCard, buildJWKSResponse, buildUCPProfile, generateUCPSigningKey, signUCPProfile, ucpA2AExtension, verifyUCPProfile };
+export { type A2AAgentCard, type A2AAgentCardCapabilities, type A2AAgentCardExtension, type A2AAgentCardSignature, type A2AAgentInterface, type A2AAgentProvider, type A2AAgentSkill, AGENTSCORE_UCP_CAPABILITY, type AgentScoreGatePolicy, type BuildA2AAgentCardInput, type BuildUCPProfileInput, type GeneratedUCPKey, type JWKSResponse, type MppNetworkEntry, type MppPaymentHandlerInput, type SignUCPProfileOptions, type SignedUCPProfile, type StripeSptPaymentHandlerInput, type UCPCapabilityBinding, type UCPPaymentHandlerBinding, type UCPProfile, type UCPProfileBody, type UCPServiceBinding, UCPSigningKey, UCPVerificationError, UCP_A2A_EXTENSION_URI, type X402NetworkEntry, type X402PaymentHandlerInput, buildA2AAgentCard, buildJWKSResponse, buildUCPProfile, generateUCPSigningKey, mppPaymentHandler, signUCPProfile, stripeSptPaymentHandler, ucpA2AExtension, verifyUCPProfile, x402PaymentHandler };

package/dist/index.js

@@ -48,14 +48,17 @@ __export(index_exports, {
   extractPaymentSignerAddress: () => extractPaymentSignerAddress,
   generateUCPSigningKey: () => generateUCPSigningKey,
   isFixableDenial: () => isFixableDenial,
+  mppPaymentHandler: () => mppPaymentHandler,
   readX402PaymentHeader: () => readX402PaymentHeader,
   runGateWithEnforcement: () => runGateWithEnforcement,
   shippingCountryAllowed: () => shippingCountryAllowed,
   shippingStateAllowed: () => shippingStateAllowed,
   signUCPProfile: () => signUCPProfile,
+  stripeSptPaymentHandler: () => stripeSptPaymentHandler,
   ucpA2AExtension: () => ucpA2AExtension,
   verificationAgentInstructions: () => verificationAgentInstructions,
-  verifyUCPProfile: () => verifyUCPProfile
+  verifyUCPProfile: () => verifyUCPProfile,
+  x402PaymentHandler: () => x402PaymentHandler
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -554,6 +557,42 @@ function buildUCPProfile(input) {
   return profile;
 }
 var AGENTSCORE_UCP_CAPABILITY = AGENTSCORE_CAPABILITY_NAME;
+var HANDLER_VERSION = "2026-04-08";
+var SPEC_BASE = "https://agentscore.sh/specification/payment-handlers";
+var SCHEMA_BASE = "https://agentscore.sh/schemas/payment-handlers";
+function mppPaymentHandler(input) {
+  return {
+    "sh.agentscore.payment.mpp": [{
+      id: "mpp",
+      version: HANDLER_VERSION,
+      spec: `${SPEC_BASE}/mpp`,
+      schema: `${SCHEMA_BASE}/mpp.json`,
+      config: { networks: input.networks }
+    }]
+  };
+}
+function x402PaymentHandler(input) {
+  return {
+    "sh.agentscore.payment.x402": [{
+      id: "x402",
+      version: HANDLER_VERSION,
+      spec: `${SPEC_BASE}/x402`,
+      schema: `${SCHEMA_BASE}/x402.json`,
+      config: { networks: input.networks }
+    }]
+  };
+}
+function stripeSptPaymentHandler(input) {
+  return {
+    "sh.agentscore.payment.stripe_spt": [{
+      id: "stripe-spt",
+      version: HANDLER_VERSION,
+      spec: `${SPEC_BASE}/stripe_spt`,
+      schema: `${SCHEMA_BASE}/stripe_spt.json`,
+      config: { rail: "stripe-spt", profile_id: input.profile_id }
+    }]
+  };
+}
 
 // src/identity/ucp-jwks.ts
 var JOSE_INSTALL_HINT = "Install the optional peer dependency: `npm install jose@^6` (or `bun add jose`). Tested against jose v6.x.";
@@ -893,13 +932,16 @@ function shippingStateAllowed(state, country, policy) {
   extractPaymentSignerAddress,
   generateUCPSigningKey,
   isFixableDenial,
+  mppPaymentHandler,
   readX402PaymentHeader,
   runGateWithEnforcement,
   shippingCountryAllowed,
   shippingStateAllowed,
   signUCPProfile,
+  stripeSptPaymentHandler,
   ucpA2AExtension,
   verificationAgentInstructions,
-  verifyUCPProfile
+  verifyUCPProfile,
+  x402PaymentHandler
 });
 //# sourceMappingURL=index.js.map