@agent-score/commerce 2.3.0 → 2.4.0

package/dist/index.mjs

@@ -329,19 +329,19 @@ function stableStringify(value) {
     }
     if (!Number.isInteger(value)) {
       throw new Error(
-        `UCP profile canonicalization rejects non-integer Number ${value}. Use a decimal string (e.g. "9.99") for monetary or fractional fields to preserve cross-language byte-parity.`
+        `UCP profile canonicalization rejects non-integer Number ${value}. Use a decimal string (e.g. "9.99") for monetary or fractional fields so the signed canonical bytes stay stable for any verifier.`
       );
     }
     if (!Number.isSafeInteger(value)) {
       throw new Error(
-        `stableStringify: integer ${value} exceeds Number.MAX_SAFE_INTEGER. For values >2^53, use a decimal string to preserve cross-language byte parity.`
+        `stableStringify: integer ${value} exceeds Number.MAX_SAFE_INTEGER. For values >2^53, use a decimal string to keep the signed bytes stable across implementations.`
       );
     }
   }
   if (typeof value === "string") {
     if (value.includes("\u2028") || value.includes("\u2029")) {
       throw new Error(
-        "stableStringify: strings containing U+2028 (LINE SEPARATOR) or U+2029 (PARAGRAPH SEPARATOR) are not allowed; cross-language byte parity requires neither be present (Node JSON.stringify on older V8 escapes them; Python json.dumps with ensure_ascii=False does not)."
+        "stableStringify: strings containing U+2028 (LINE SEPARATOR) or U+2029 (PARAGRAPH SEPARATOR) are not allowed; stable canonical bytes require neither be present (some JSON encoders escape them, others emit them raw)."
       );
     }
     return JSON.stringify(value);
@@ -361,7 +361,7 @@ function stableStringify(value) {
   for (const k of keys) {
     if (k.includes("\u2028") || k.includes("\u2029")) {
       throw new Error(
-        "stableStringify: object keys containing U+2028 (LINE SEPARATOR) or U+2029 (PARAGRAPH SEPARATOR) are not allowed; cross-language byte parity (Node JSON.stringify on older V8 escapes them; Python json.dumps with ensure_ascii=False does not)."
+        "stableStringify: object keys containing U+2028 (LINE SEPARATOR) or U+2029 (PARAGRAPH SEPARATOR) are not allowed; stable canonical bytes require neither be present (some JSON encoders escape them, others emit them raw)."
       );
     }
   }
@@ -20328,6 +20328,53 @@ var init_networks = __esm({
   }
 });
 
+// src/payment/amounts.ts
+function usdToAtomic(usd, opts) {
+  const { decimals } = opts;
+  if (!Number.isInteger(decimals) || decimals < 0) {
+    throw new RangeError(`decimals must be a non-negative integer, got ${decimals}`);
+  }
+  if (typeof usd === "number") {
+    if (!Number.isFinite(usd)) {
+      throw new RangeError(`usd must be finite, got ${usd}`);
+    }
+    if (usd < 0) {
+      throw new RangeError(`usd must be non-negative, got ${usd}`);
+    }
+  }
+  const s = (typeof usd === "number" ? usd.toString() : usd).trim();
+  if (s.startsWith("-")) {
+    throw new RangeError(`usd must be non-negative, got ${s}`);
+  }
+  if (s === "NaN" || s === "Infinity") {
+    throw new RangeError(`usd must be finite, got ${s}`);
+  }
+  const match = /^(\d*)(?:\.(\d*))?$/.exec(s);
+  if (!match || match[1] === "" && (match[2] === void 0 || match[2] === "")) {
+    throw new SyntaxError(`invalid usd value: ${JSON.stringify(usd)}`);
+  }
+  const intPart = match[1] || "0";
+  const fracPart = match[2] ?? "";
+  if (fracPart.length <= decimals) {
+    return BigInt(intPart + fracPart.padEnd(decimals, "0"));
+  }
+  const kept = fracPart.slice(0, decimals);
+  const roundDigit = fracPart[decimals];
+  let result = BigInt(intPart + kept);
+  if (roundDigit >= "5") {
+    result += 1n;
+  }
+  return result;
+}
+function formatUsdCents(cents, decimals = 2) {
+  return (cents / 100).toFixed(decimals);
+}
+var init_amounts = __esm({
+  "src/payment/amounts.ts"() {
+    "use strict";
+  }
+});
+
 // src/payment/rails.ts
 function lookupRail(name) {
   return rails[name];
@@ -20427,8 +20474,7 @@ function buildPaymentRequestBlob({
   const decimalsResolved = decimals ?? railDef?.decimals ?? 6;
   const currencyResolved = currency ?? railDef?.currency ?? "usd";
   const chainIdResolved = chainId ?? railDef?.chainId;
-  const amountNum = typeof amountUsd === "string" ? Number(amountUsd) : amountUsd;
-  const amountRaw = BigInt(Math.round(amountNum * 10 ** decimalsResolved)).toString();
+  const amountRaw = usdToAtomic(amountUsd, { decimals: decimalsResolved }).toString();
   const blob = { amount: amountRaw, currency: currencyResolved, decimals: decimalsResolved };
   if (recipient) blob.recipient = recipient;
   const methodDetails = {};
@@ -20455,6 +20501,7 @@ function paymentDirective({
 var init_directive = __esm({
   "src/payment/directive.ts"() {
     "use strict";
+    init_amounts();
     init_rails();
   }
 });
@@ -21162,7 +21209,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint();
-  const defaultUa = `@agent-score/commerce@${"2.3.0"}`;
+  const defaultUa = `@agent-score/commerce@${"2.4.0"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();
@@ -21502,6 +21549,18 @@ async function extractSolanaSignerFromCredential(credential) {
   }
 }
 async function extractPaymentSigner(request, x402PaymentHeader) {
+  if (x402PaymentHeader) {
+    try {
+      const decoded = atob(x402PaymentHeader);
+      const parsed = JSON.parse(decoded);
+      const from9 = parsed?.payload?.authorization?.from;
+      if (typeof from9 === "string" && /^0x[0-9a-fA-F]{40}$/.test(from9)) {
+        return { address: from9.toLowerCase(), network: "evm" };
+      }
+    } catch (err) {
+      console.warn("[gate] x402 signer extraction failed:", err instanceof Error ? err.message : err);
+    }
+  }
   const authHeader = request.headers.get("authorization");
   if (authHeader) {
     try {
@@ -21521,18 +21580,6 @@ async function extractPaymentSigner(request, x402PaymentHeader) {
       console.warn("[gate] MPP signer extraction failed:", err instanceof Error ? err.message : err);
     }
   }
-  if (x402PaymentHeader) {
-    try {
-      const decoded = atob(x402PaymentHeader);
-      const parsed = JSON.parse(decoded);
-      const from9 = parsed?.payload?.authorization?.from;
-      if (typeof from9 === "string" && /^0x[0-9a-fA-F]{40}$/.test(from9)) {
-        return { address: from9.toLowerCase(), network: "evm" };
-      }
-    } catch (err) {
-      console.warn("[gate] x402 signer extraction failed:", err instanceof Error ? err.message : err);
-    }
-  }
   return null;
 }
 async function extractPaymentSignerFromAuth(authHeader, x402PaymentHeader) {
@@ -23305,10 +23352,9 @@ var Checkout = class {
       ...gate.cacheSeconds !== void 0 && { cacheSeconds: gate.cacheSeconds },
       ...gate.chain !== void 0 && { chain: gate.chain },
       // Auto-default `createSessionOnMissing` from gate config when the merchant
-      // didn't supply one. Matches python-commerce's behavior — every gated route
-      // gets the bootstrap session-mint UX out of the box. Merchants who need
-      // custom session context or onBeforeSession side effects (goods merchants
-      // pre-minting an order_id) supply their own config instead.
+      // didn't supply one, so every gated route gets the bootstrap session-mint UX
+      // out of the box. Merchants who need custom session context or onBeforeSession
+      // side effects (goods merchants pre-minting an order_id) supply their own config.
       createSessionOnMissing: gate.createSessionOnMissing ?? {
         apiKey: gate.apiKey,
         ...gate.baseUrl !== void 0 && { baseUrl: gate.baseUrl },
@@ -24045,47 +24091,8 @@ init_wwwauthenticate();
 init_directive();
 init_wwwauthenticate();
 
-// src/payment/amounts.ts
-function usdToAtomic(usd, opts) {
-  const { decimals } = opts;
-  if (!Number.isInteger(decimals) || decimals < 0) {
-    throw new RangeError(`decimals must be a non-negative integer, got ${decimals}`);
-  }
-  if (typeof usd === "number") {
-    if (!Number.isFinite(usd)) {
-      throw new RangeError(`usd must be finite, got ${usd}`);
-    }
-    if (usd < 0) {
-      throw new RangeError(`usd must be non-negative, got ${usd}`);
-    }
-  }
-  const s = (typeof usd === "number" ? usd.toString() : usd).trim();
-  if (s.startsWith("-")) {
-    throw new RangeError(`usd must be non-negative, got ${s}`);
-  }
-  if (s === "NaN" || s === "Infinity") {
-    throw new RangeError(`usd must be finite, got ${s}`);
-  }
-  const match = /^(\d*)(?:\.(\d*))?$/.exec(s);
-  if (!match || match[1] === "" && (match[2] === void 0 || match[2] === "")) {
-    throw new SyntaxError(`invalid usd value: ${JSON.stringify(usd)}`);
-  }
-  const intPart = match[1] || "0";
-  const fracPart = match[2] ?? "";
-  if (fracPart.length <= decimals) {
-    return BigInt(intPart + fracPart.padEnd(decimals, "0"));
-  }
-  const kept = fracPart.slice(0, decimals);
-  const roundDigit = fracPart[decimals];
-  let result = BigInt(intPart + kept);
-  if (roundDigit >= "5") {
-    result += 1n;
-  }
-  return result;
-}
-function formatUsdCents(cents, decimals = 2) {
-  return (cents / 100).toFixed(decimals);
-}
+// src/payment/index.ts
+init_amounts();
 
 // src/payment/solana.ts
 async function loadSolanaFeePayer(opts) {
@@ -24109,6 +24116,7 @@ async function loadSolanaFeePayer(opts) {
 }
 
 // src/payment/compose_rails.ts
+init_amounts();
 init_usdc();
 var warnedStripeBelowMinimum = false;
 function buildMppxComposeRails(opts) {
@@ -24153,7 +24161,13 @@ init_usdc();
 function buildDefaultCheckoutRails(opts) {
   const out = {};
   if (opts.tempo) {
-    out.tempo = { recipient: "", ...RAIL_SPEC_DEFAULTS.tempo, ...opts.tempo };
+    const merged = { recipient: "", ...RAIL_SPEC_DEFAULTS.tempo, ...opts.tempo };
+    if (merged.testnet) {
+      if (opts.tempo.network === void 0) merged.network = "tempo-testnet";
+      if (opts.tempo.chainId === void 0) merged.chainId = 42431;
+      if (opts.tempo.token === void 0) merged.token = USDC.tempo.testnet.address;
+    }
+    out.tempo = merged;
   }
   if (opts.x402Base) {
     const merged = { recipient: "", ...RAIL_SPEC_DEFAULTS.x402Base, ...opts.x402Base };
@@ -24208,6 +24222,9 @@ function buildSuccessNextSteps(opts) {
 // src/discovery/index.ts
 init_well_known();
 
+// src/checkout_compute_first.ts
+init_amounts();
+
 // src/quote_cache.ts
 import { createHash as createHash2 } from "crypto";
 
@@ -24810,7 +24827,9 @@ export {
   hasPaymentHeader,
   hasX402Header,
   hashOperatorToken,
+  isEvmNetwork,
   isFixableDenial,
+  isSolanaNetwork,
   loadSolanaFeePayer,
   loadUCPSigningKeyFromEnv,
   makeMppxComposeHook,