@agent-score/commerce 2.3.0 → 2.5.0

package/dist/discovery/index.mjs

@@ -1,3 +1,42 @@
+// src/payment/amounts.ts
+function usdToAtomic(usd, opts) {
+  const { decimals } = opts;
+  if (!Number.isInteger(decimals) || decimals < 0) {
+    throw new RangeError(`decimals must be a non-negative integer, got ${decimals}`);
+  }
+  if (typeof usd === "number") {
+    if (!Number.isFinite(usd)) {
+      throw new RangeError(`usd must be finite, got ${usd}`);
+    }
+    if (usd < 0) {
+      throw new RangeError(`usd must be non-negative, got ${usd}`);
+    }
+  }
+  const s = (typeof usd === "number" ? usd.toString() : usd).trim();
+  if (s.startsWith("-")) {
+    throw new RangeError(`usd must be non-negative, got ${s}`);
+  }
+  if (s === "NaN" || s === "Infinity") {
+    throw new RangeError(`usd must be finite, got ${s}`);
+  }
+  const match = /^(\d*)(?:\.(\d*))?$/.exec(s);
+  if (!match || match[1] === "" && (match[2] === void 0 || match[2] === "")) {
+    throw new SyntaxError(`invalid usd value: ${JSON.stringify(usd)}`);
+  }
+  const intPart = match[1] || "0";
+  const fracPart = match[2] ?? "";
+  if (fracPart.length <= decimals) {
+    return BigInt(intPart + fracPart.padEnd(decimals, "0"));
+  }
+  const kept = fracPart.slice(0, decimals);
+  const roundDigit = fracPart[decimals];
+  let result = BigInt(intPart + kept);
+  if (roundDigit >= "5") {
+    result += 1n;
+  }
+  return result;
+}
+
 // src/payment/networks.ts
 var networks = {
   base: {
@@ -121,8 +160,7 @@ function buildPaymentRequestBlob({
   const decimalsResolved = decimals ?? railDef?.decimals ?? 6;
   const currencyResolved = currency ?? railDef?.currency ?? "usd";
   const chainIdResolved = chainId ?? railDef?.chainId;
-  const amountNum = typeof amountUsd === "string" ? Number(amountUsd) : amountUsd;
-  const amountRaw = BigInt(Math.round(amountNum * 10 ** decimalsResolved)).toString();
+  const amountRaw = usdToAtomic(amountUsd, { decimals: decimalsResolved }).toString();
   const blob = { amount: amountRaw, currency: currencyResolved, decimals: decimalsResolved };
   if (recipient) blob.recipient = recipient;
   const methodDetails = {};
@@ -325,11 +363,13 @@ function buildWellKnownX402(input) {
 // src/discovery/llms_txt.ts
 function llmsTxtIdentitySection({
   agentscore,
-  compliance
+  compliance,
+  aip
 } = {}) {
   if (!agentscore) {
     return "";
   }
+  const aipBullet = aip ? "\n- **`Agent-Identity: <JWT>` + RFC 9421 signature** \u2014 present an Agent Identity Token (AIP) from a trusted issuer (AgentScore is always trusted). Short-lived and bound to your key; sign the request (`Signature-Input` + `Signature` over `@method @authority @path agent-identity`, tag `agent-identity`) to prove possession. No long-lived token on the wire. Mint one with `agentscore-pay identity-mint` or let `agentscore-pay pay --identity aip` attach it automatically." : "";
   const complianceNote = compliance ? `
 
 Compliance: ${[
@@ -343,7 +383,7 @@ Compliance: ${[
 AgentScore identity is reusable across every AgentScore-gated merchant \u2014 one KYC, no re-verification per site. Pick a header:
 
 - **\`X-Wallet-Address: 0x...\` or base58** \u2014 works on signing rails (Tempo, x402, Solana MPP). The wallet you claim must sign the payment.
-- **\`X-Operator-Token: opc_...\`** \u2014 works on every rail, including Stripe SPT. Reusable across AgentScore merchants until expiry.
+- **\`X-Operator-Token: opc_...\`** \u2014 works on every rail, including Stripe SPT. Reusable across AgentScore merchants until expiry.${aipBullet}
 - **Neither** \u2014 you get a 403 with \`verify_url\`. Complete the session flow once and reuse the resulting \`opc_...\` everywhere.${complianceNote}`;
 }
 function llmsTxtPaymentSection(input) {
@@ -484,6 +524,12 @@ function agentscoreSecuritySchemes() {
       name: "X-Wallet-Address",
       description: "Wallet-path identity (0x... or base58). Only works on rails that carry a wallet signature (Tempo MPP, x402 EIP-3009, x402 SPL Token). The wallet you claim MUST sign the payment."
     },
+    AgentIdentity: {
+      type: "apiKey",
+      in: "header",
+      name: "Agent-Identity",
+      description: "AIP Agent Identity Token path (a JWT from a trusted issuer; AgentScore is always trusted). Opt-in. The token is bound to the agent key via `cnf`; the request MUST also carry an RFC 9421 HTTP Message Signature (`Signature-Input` + `Signature` over `@method @authority @path agent-identity`, tag `agent-identity`) proving possession. A verified AIT is the sole identity and is evaluated against the merchant policy via its attested claims."
+    },
     siwx: siwxSecurityScheme()
   };
 }
@@ -847,14 +893,16 @@ function identitySection(input) {
   if (id.minAge) reqs.push(`age ${id.minAge}+`);
   if (id.allowedJurisdictions?.length) reqs.push(`${id.allowedJurisdictions.join("/")} only`);
   if (id.sanctionsClear) reqs.push("sanctions clear");
-  if (reqs.length === 0) return "";
+  if (reqs.length === 0 && !id.aip) return "";
   const bootstrap = input.identityBootstrapUrl ? `
 
 If you don't have a Passport, fetch \`${input.identityBootstrapUrl}\` and follow the onboarding there first. Bring back the \`opc_...\` operator token in \`X-Operator-Token\` on every gated request.` : "";
+  const reqLine = reqs.length ? `This merchant uses AgentScore identity. Required: ${reqs.join(", ")}.${bootstrap}` : `This merchant uses AgentScore identity.${bootstrap}`;
+  const aipNote = id.aip ? "\n\nThis merchant accepts AIP Agent Identity Tokens. If you hold an AIT from a trusted issuer (AgentScore is always trusted), present the JWT in an `Agent-Identity` header plus an RFC 9421 HTTP Message Signature (`Signature-Input` + `Signature` over `@method @authority @path agent-identity`, tag `agent-identity`) signed with the token-bound cnf key \u2014 it satisfies identity in one round trip, no separate AgentScore credential needed. `agentscore-pay pay --identity aip` does this automatically." : "";
   return [
     "## Identity Prerequisite",
     "",
-    `This merchant uses AgentScore identity. Required: ${reqs.join(", ")}.${bootstrap}`,
+    `${reqLine}${aipNote}`,
     "",
     "Denial bodies carry an `agent_instructions` block describing the recovery action \u2014 read the `action` field and follow it. See the identity-bootstrap skill for the canonical denial-code \u2192 action table."
   ].join("\n");
@@ -1428,19 +1476,19 @@ function stableStringify(value) {
     }
     if (!Number.isInteger(value)) {
       throw new Error(
-        `UCP profile canonicalization rejects non-integer Number ${value}. Use a decimal string (e.g. "9.99") for monetary or fractional fields to preserve cross-language byte-parity.`
+        `UCP profile canonicalization rejects non-integer Number ${value}. Use a decimal string (e.g. "9.99") for monetary or fractional fields so the signed canonical bytes stay stable for any verifier.`
       );
     }
     if (!Number.isSafeInteger(value)) {
       throw new Error(
-        `stableStringify: integer ${value} exceeds Number.MAX_SAFE_INTEGER. For values >2^53, use a decimal string to preserve cross-language byte parity.`
+        `stableStringify: integer ${value} exceeds Number.MAX_SAFE_INTEGER. For values >2^53, use a decimal string to keep the signed bytes stable across implementations.`
       );
     }
   }
   if (typeof value === "string") {
     if (value.includes("\u2028") || value.includes("\u2029")) {
       throw new Error(
-        "stableStringify: strings containing U+2028 (LINE SEPARATOR) or U+2029 (PARAGRAPH SEPARATOR) are not allowed; cross-language byte parity requires neither be present (Node JSON.stringify on older V8 escapes them; Python json.dumps with ensure_ascii=False does not)."
+        "stableStringify: strings containing U+2028 (LINE SEPARATOR) or U+2029 (PARAGRAPH SEPARATOR) are not allowed; stable canonical bytes require neither be present (some JSON encoders escape them, others emit them raw)."
       );
     }
     return JSON.stringify(value);
@@ -1460,7 +1508,7 @@ function stableStringify(value) {
   for (const k of keys) {
     if (k.includes("\u2028") || k.includes("\u2029")) {
       throw new Error(
-        "stableStringify: object keys containing U+2028 (LINE SEPARATOR) or U+2029 (PARAGRAPH SEPARATOR) are not allowed; cross-language byte parity (Node JSON.stringify on older V8 escapes them; Python json.dumps with ensure_ascii=False does not)."
+        "stableStringify: object keys containing U+2028 (LINE SEPARATOR) or U+2029 (PARAGRAPH SEPARATOR) are not allowed; stable canonical bytes require neither be present (some JSON encoders escape them, others emit them raw)."
       );
     }
   }