@agent-score/commerce 2.6.2 → 2.6.3

package/dist/index.mjs

@@ -22574,7 +22574,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint(aipTrustedIssuers);
-  const defaultUa = `@agent-score/commerce@${"2.6.2"}`;
+  const defaultUa = `@agent-score/commerce@${"2.6.3"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();
@@ -25980,21 +25980,33 @@ var Checkout = class {
     if (ctx.pricing.amountUsd !== 0) return null;
     const headers = normalizeHeadersToLowercase(ctx.request.headers);
     let zero;
+    let railKey;
     if (rail === "x402-base") {
-      const x402Header = headers["payment-signature"] ?? headers["x-payment"];
-      let payload = null;
-      if (typeof x402Header === "string" && x402Header.length > 0) {
-        try {
-          payload = JSON.parse(atob(x402Header));
-        } catch {
-          payload = null;
-        }
+      const fakeRequest = new Request(ctx.request.url, {
+        method: ctx.request.method,
+        headers: ctx.request.headers
+      });
+      const verified = await verifyX402Request({
+        request: fakeRequest,
+        isCachedAddress: (addr) => this.asyncIsCachedAddress(addr, ctx),
+        acceptedNetwork: this.x402BaseNetwork ?? ""
+      });
+      if (!verified.ok) {
+        return {
+          status: verified.status,
+          body: verified.body,
+          headers: {},
+          referenceId: ctx.referenceId,
+          settled: false,
+          settlePhase: "verify_failed"
+        };
       }
-      zero = zeroAmountCarveOut({ rail, payload });
+      zero = zeroAmountCarveOut({ rail, payload: verified.payload });
+      railKey = this.x402RailKey();
     } else {
       zero = zeroAmountCarveOut({ rail, authorizationHeader: headers["authorization"] });
+      railKey = (zero.signerNetwork !== null ? this.railsKeyForMppxMethod(zero.signerNetwork === "solana" ? "solana" : "tempo") : void 0) ?? this.mppRailKey();
     }
-    const railKey = rail === "x402-base" ? this.x402RailKey() : this.mppRailKey();
     const outcome = {
       rail: rail === "x402-base" ? "x402" : "mpp",
       paymentResponseHeader: null,