@agent-score/commerce 2.1.0 → 2.1.1

package/dist/stripe-multichain/index.js

@@ -19660,6 +19660,22 @@ __export(stripe_multichain_exports, {
 });
 module.exports = __toCommonJS(stripe_multichain_exports);
 
+// src/errors.ts
+var CheckoutValidationError = class extends Error {
+  code;
+  action;
+  status;
+  extra;
+  constructor(opts) {
+    super(opts.message);
+    this.name = "CheckoutValidationError";
+    this.code = opts.code;
+    this.action = opts.action ?? "fix_request";
+    this.status = opts.status ?? 400;
+    this.extra = opts.extra;
+  }
+};
+
 // src/stripe-multichain/payment_intent.ts
 async function createMultichainPaymentIntent({
   stripe,
@@ -19692,7 +19708,12 @@ async function createMultichainPaymentIntent({
     if (info?.address) depositAddresses[network] = info.address;
   }
   if (Object.keys(depositAddresses).length === 0) {
-    throw new Error("No deposit addresses returned from Stripe PaymentIntent");
+    throw new CheckoutValidationError({
+      code: "payment_provider_unavailable",
+      message: "Stripe returned no crypto deposit addresses for this PaymentIntent. The account may not be enrolled in the Stablecoins and Crypto preview, or the feature was revoked.",
+      action: "retry_later",
+      status: 503
+    });
   }
   return { paymentIntentId: pi.id, depositAddresses };
 }
@@ -19703,12 +19724,35 @@ async function createPayToAddressFromStripePI(opts) {
   if (authHeader) {
     const { Credential } = await Promise.resolve().then(() => (init_dist2(), dist_exports));
     if (Credential.extractPaymentScheme(authHeader)) {
-      const credential = Credential.fromRequest(opts.request);
+      let credential;
+      try {
+        credential = Credential.fromRequest(opts.request);
+      } catch {
+        throw new CheckoutValidationError({
+          code: "invalid_credential",
+          message: "The Authorization: Payment header is not a valid MPP credential.",
+          action: "retry_without_credential",
+          status: 401
+        });
+      }
       const method = credential.challenge.method;
       if (method === "tempo" || method === "solana") {
         const toAddress = credential.challenge.request.recipient;
+        if (typeof toAddress !== "string" || !toAddress) {
+          throw new CheckoutValidationError({
+            code: "invalid_credential",
+            message: "The MPP credential is missing its recipient field.",
+            action: "retry_without_credential",
+            status: 401
+          });
+        }
         if (!await opts.piCache.hasAddress(toAddress)) {
-          throw new Error("Invalid payTo address: not found in cache or expired");
+          throw new CheckoutValidationError({
+            code: "invalid_credential",
+            message: "The signed-against payTo recipient is not in this merchant's cache (unknown or expired). Retry without the Authorization: Payment header to receive a fresh 402 challenge.",
+            action: "retry_without_credential",
+            status: 401
+          });
         }
         return toAddress;
       }
@@ -19730,7 +19774,12 @@ async function createPayToAddressFromStripePI(opts) {
   const preferred = opts.preferredNetwork ?? "tempo";
   const payTo = depositAddresses[preferred] ?? depositAddresses.base ?? depositAddresses.tempo;
   if (!payTo) {
-    throw new Error("Failed to resolve pay_to address from Stripe PaymentIntent");
+    throw new CheckoutValidationError({
+      code: "payment_provider_unavailable",
+      message: "Stripe returned deposit addresses but none matched the requested network (tempo / base / solana). The account may have only a subset of multichain networks enabled.",
+      action: "retry_later",
+      status: 503
+    });
   }
   return payTo;
 }