@agent-score/commerce 2.6.4 → 2.6.5

package/dist/index.mjs

@@ -22574,7 +22574,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint(aipTrustedIssuers);
-  const defaultUa = `@agent-score/commerce@${"2.6.4"}`;
+  const defaultUa = `@agent-score/commerce@${"2.6.5"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();
@@ -25221,6 +25221,22 @@ function x402SignerFromPayload(payload) {
     txHash: null
   };
 }
+function mppCredentialPayloadType(authorizationHeader) {
+  if (typeof authorizationHeader !== "string") return null;
+  if (!authorizationHeader.toLowerCase().startsWith("payment ")) return null;
+  const token = authorizationHeader.slice("payment ".length).trim();
+  if (!token) return null;
+  try {
+    const credential = JSON.parse(atob(token));
+    if (!credential || typeof credential !== "object") return null;
+    const payload = credential.payload;
+    if (!payload || typeof payload !== "object") return null;
+    const type = payload.type;
+    return typeof type === "string" ? type : null;
+  } catch {
+    return null;
+  }
+}
 function mppSignerFromAuth(authorizationHeader) {
   if (typeof authorizationHeader !== "string") return NULL_RESULT;
   if (!authorizationHeader.toLowerCase().startsWith("payment ")) return NULL_RESULT;
@@ -26060,9 +26076,12 @@ var Checkout = class {
       zero = zeroAmountCarveOut({ rail, payload: verified.payload });
       railKey = this.x402RailKey();
     } else {
-      zero = zeroAmountCarveOut({ rail, authorizationHeader: headers["authorization"] });
-      if (zero.signerNetwork !== "solana") return null;
-      railKey = this.railsKeyForMppxMethod("solana") ?? this.mppRailKey();
+      const authHeader = headers["authorization"] ?? null;
+      if (mppCredentialPayloadType(authHeader) === "proof") return null;
+      const inline = zeroAmountCarveOut({ rail, authorizationHeader: authHeader });
+      const extracted = await extractPaymentSignerFromAuth(authHeader);
+      zero = extracted !== null ? { signerAddress: extracted.address, signerNetwork: extracted.network, txHash: null } : inline;
+      railKey = (zero.signerNetwork !== null ? this.railsKeyForMppxMethod(zero.signerNetwork === "solana" ? "solana" : "tempo") : void 0) ?? this.mppRailKey();
     }
     const outcome = {
       rail: rail === "x402-base" ? "x402" : "mpp",