@agent-score/commerce 2.6.4 → 2.6.6

package/dist/payment/index.d.mts

@@ -795,23 +795,30 @@ declare function settlementOverrideHeader(overrides: SettlementOverrides): {
  *   `value=0` as `invalid_payload`, so $0 x402 orders take the carve-out. The
  *   credential is still run through `verifyX402Request` (signature shape +
  *   payTo binding) before the carve-out is honored.
- * - **Tempo (and other EVM MPP)**: NOT carved out. mppx >= 0.8 settles
+ * - **MPP `proof` credentials**: NOT carved out. mppx >= 0.8 settles
  *   zero-amount challenges natively via the wallet-bound EIP-712 proof
  *   credential (full verification, access-key authorization, replay
- *   protection), so $0 Tempo orders flow through the normal MPP settle path.
- * - **Solana MPP**: `@solana/mpp` has no proof-credential contract, so there
- *   is nothing upstream to verify a $0 credential against. The carve-out
- *   parses the credential and lifts the signer for wallet-capture
- *   attribution; that signer block is UNAUTHENTICATED (parse-only) and must
- *   not be trusted for anything beyond attribution hints. Identity is still
- *   authenticated by the merchant's gate above; redemption codes are
- *   single-use; nothing settles on-chain.
+ *   protection). An agent that saw a $0 challenge signs a `proof`, so those
+ *   delegate to the normal MPP settle path.
+ * - **Every other MPP credential at $0** (`hash` / `transaction` payloads,
+ *   token-style credentials, Solana): carved out. These arise when the agent
+ *   signed against a NONZERO quote that the merchant re-priced to $0 at
+ *   settle (no-match / full-discount flows — the authorization is simply
+ *   never exercised), or on rails with no upstream $0 contract
+ *   (`@solana/mpp` has no proof-credential surface). Upstream would reject
+ *   all of them at $0, so the carve-out lifts the signer for wallet-capture
+ *   attribution only; that signer block is UNAUTHENTICATED (parse-only) and
+ *   must not be trusted beyond attribution hints. Identity is still
+ *   authenticated by the merchant's gate above; nothing settles on-chain.
  *
  * `zeroAmountCarveOut` parses the credential, lifts the signer, and returns
  * `{ signerAddress, signerNetwork, txHash: null }`. The MPP path uses inline
  * base64+JSON parsing (no `mppx` dependency at runtime) so this module stays
- * dependency-free; it is also how `handleZeroSettle` classifies the rail
- * (Solana vs EVM did:pkh source) to decide carve-out vs delegation.
+ * dependency-free. `mppCredentialPayloadType` is the router `handleZeroSettle`
+ * uses to decide delegation (`proof`) vs carve-out (everything else); signer
+ * recovery itself prefers the full `extractPaymentSigner` (which also decodes
+ * source-less Solana credentials from the signed transaction) with this
+ * module's inline parse as the dependency-free backstop.
  */
 
 type ZeroSettleRail = 'x402-base' | 'tempo' | 'solana';
@@ -845,6 +852,13 @@ declare function zeroAmountCarveOut({ rail, payload, authorizationHeader, }: {
      *  header value. Reads the `did:pkh:*` source DID. */
     authorizationHeader?: string | null;
 }): ZeroSettleResult;
+/**
+ * Read the MPP credential's `payload.type` (`'proof'` / `'hash'` /
+ * `'transaction'`) from an `Authorization: Payment <base64>` header without
+ * any `mppx` dependency. Returns `null` for token-style values (JWTs),
+ * unparseable headers, or credentials without a typed payload.
+ */
+declare function mppCredentialPayloadType(authorizationHeader: string | null | undefined): string | null;
 
 /**
  * Lazy-init helpers for x402 + mppx servers.
@@ -887,4 +901,4 @@ declare function lazyMppxServer(opts: {
     secretKey: string;
 }): () => Promise<unknown>;
 
-export { type ClassifiedX402Error, type MppxComposeResult, type MppxRailSpec, type NetworkFamily, type PaymentHeadersRail, type PaymentHeadersResult, type ProcessX402SettleFailure, type ProcessX402SettleResult, type ProcessX402SettleSuccess, type RailDefinition, type RailName, SETTLEMENT_OVERRIDES_HEADER, type SettlementHandlers, type SettlementOverrides, type SettlementPayloadLike, SignerNetwork, SolanaMppRailSpec, StripeRailSpec, TempoRailSpec, TempoSessionRailSpec, USDC, type VerifyX402RequestResult, X402BaseRailSpec, X402Server, type X402ServerLike, X402_SUPPORTED_BASE_NETWORKS, type ZeroSettleRail, type ZeroSettleResult, buildIdempotencyKey, buildPaymentDirective, buildPaymentHeaders, buildPaymentRequestBlob, classifyOrchestrationError, classifyX402SettleResult, composeMppxRequest, createMppxServer, detectRailFromHeaders, dispatchSettlementByNetwork, lazyMppxServer, lazyX402Server, lookupRail, mppxChallengeHeaders, networkFamily, networks, paymentDirective, processX402Settle, rails, registerX402SchemesV1V2, runWithMppxFailureCapture, settlementOverrideHeader, validateX402NetworkConfig, verifyX402Request, wrapSolanaChargeWithFinalizedBlockhash, zeroAmountCarveOut };
+export { type ClassifiedX402Error, type MppxComposeResult, type MppxRailSpec, type NetworkFamily, type PaymentHeadersRail, type PaymentHeadersResult, type ProcessX402SettleFailure, type ProcessX402SettleResult, type ProcessX402SettleSuccess, type RailDefinition, type RailName, SETTLEMENT_OVERRIDES_HEADER, type SettlementHandlers, type SettlementOverrides, type SettlementPayloadLike, SignerNetwork, SolanaMppRailSpec, StripeRailSpec, TempoRailSpec, TempoSessionRailSpec, USDC, type VerifyX402RequestResult, X402BaseRailSpec, X402Server, type X402ServerLike, X402_SUPPORTED_BASE_NETWORKS, type ZeroSettleRail, type ZeroSettleResult, buildIdempotencyKey, buildPaymentDirective, buildPaymentHeaders, buildPaymentRequestBlob, classifyOrchestrationError, classifyX402SettleResult, composeMppxRequest, createMppxServer, detectRailFromHeaders, dispatchSettlementByNetwork, lazyMppxServer, lazyX402Server, lookupRail, mppCredentialPayloadType, mppxChallengeHeaders, networkFamily, networks, paymentDirective, processX402Settle, rails, registerX402SchemesV1V2, runWithMppxFailureCapture, settlementOverrideHeader, validateX402NetworkConfig, verifyX402Request, wrapSolanaChargeWithFinalizedBlockhash, zeroAmountCarveOut };

package/dist/payment/index.d.ts

@@ -795,23 +795,30 @@ declare function settlementOverrideHeader(overrides: SettlementOverrides): {
  *   `value=0` as `invalid_payload`, so $0 x402 orders take the carve-out. The
  *   credential is still run through `verifyX402Request` (signature shape +
  *   payTo binding) before the carve-out is honored.
- * - **Tempo (and other EVM MPP)**: NOT carved out. mppx >= 0.8 settles
+ * - **MPP `proof` credentials**: NOT carved out. mppx >= 0.8 settles
  *   zero-amount challenges natively via the wallet-bound EIP-712 proof
  *   credential (full verification, access-key authorization, replay
- *   protection), so $0 Tempo orders flow through the normal MPP settle path.
- * - **Solana MPP**: `@solana/mpp` has no proof-credential contract, so there
- *   is nothing upstream to verify a $0 credential against. The carve-out
- *   parses the credential and lifts the signer for wallet-capture
- *   attribution; that signer block is UNAUTHENTICATED (parse-only) and must
- *   not be trusted for anything beyond attribution hints. Identity is still
- *   authenticated by the merchant's gate above; redemption codes are
- *   single-use; nothing settles on-chain.
+ *   protection). An agent that saw a $0 challenge signs a `proof`, so those
+ *   delegate to the normal MPP settle path.
+ * - **Every other MPP credential at $0** (`hash` / `transaction` payloads,
+ *   token-style credentials, Solana): carved out. These arise when the agent
+ *   signed against a NONZERO quote that the merchant re-priced to $0 at
+ *   settle (no-match / full-discount flows — the authorization is simply
+ *   never exercised), or on rails with no upstream $0 contract
+ *   (`@solana/mpp` has no proof-credential surface). Upstream would reject
+ *   all of them at $0, so the carve-out lifts the signer for wallet-capture
+ *   attribution only; that signer block is UNAUTHENTICATED (parse-only) and
+ *   must not be trusted beyond attribution hints. Identity is still
+ *   authenticated by the merchant's gate above; nothing settles on-chain.
  *
  * `zeroAmountCarveOut` parses the credential, lifts the signer, and returns
  * `{ signerAddress, signerNetwork, txHash: null }`. The MPP path uses inline
  * base64+JSON parsing (no `mppx` dependency at runtime) so this module stays
- * dependency-free; it is also how `handleZeroSettle` classifies the rail
- * (Solana vs EVM did:pkh source) to decide carve-out vs delegation.
+ * dependency-free. `mppCredentialPayloadType` is the router `handleZeroSettle`
+ * uses to decide delegation (`proof`) vs carve-out (everything else); signer
+ * recovery itself prefers the full `extractPaymentSigner` (which also decodes
+ * source-less Solana credentials from the signed transaction) with this
+ * module's inline parse as the dependency-free backstop.
  */
 
 type ZeroSettleRail = 'x402-base' | 'tempo' | 'solana';
@@ -845,6 +852,13 @@ declare function zeroAmountCarveOut({ rail, payload, authorizationHeader, }: {
      *  header value. Reads the `did:pkh:*` source DID. */
     authorizationHeader?: string | null;
 }): ZeroSettleResult;
+/**
+ * Read the MPP credential's `payload.type` (`'proof'` / `'hash'` /
+ * `'transaction'`) from an `Authorization: Payment <base64>` header without
+ * any `mppx` dependency. Returns `null` for token-style values (JWTs),
+ * unparseable headers, or credentials without a typed payload.
+ */
+declare function mppCredentialPayloadType(authorizationHeader: string | null | undefined): string | null;
 
 /**
  * Lazy-init helpers for x402 + mppx servers.
@@ -887,4 +901,4 @@ declare function lazyMppxServer(opts: {
     secretKey: string;
 }): () => Promise<unknown>;
 
-export { type ClassifiedX402Error, type MppxComposeResult, type MppxRailSpec, type NetworkFamily, type PaymentHeadersRail, type PaymentHeadersResult, type ProcessX402SettleFailure, type ProcessX402SettleResult, type ProcessX402SettleSuccess, type RailDefinition, type RailName, SETTLEMENT_OVERRIDES_HEADER, type SettlementHandlers, type SettlementOverrides, type SettlementPayloadLike, SignerNetwork, SolanaMppRailSpec, StripeRailSpec, TempoRailSpec, TempoSessionRailSpec, USDC, type VerifyX402RequestResult, X402BaseRailSpec, X402Server, type X402ServerLike, X402_SUPPORTED_BASE_NETWORKS, type ZeroSettleRail, type ZeroSettleResult, buildIdempotencyKey, buildPaymentDirective, buildPaymentHeaders, buildPaymentRequestBlob, classifyOrchestrationError, classifyX402SettleResult, composeMppxRequest, createMppxServer, detectRailFromHeaders, dispatchSettlementByNetwork, lazyMppxServer, lazyX402Server, lookupRail, mppxChallengeHeaders, networkFamily, networks, paymentDirective, processX402Settle, rails, registerX402SchemesV1V2, runWithMppxFailureCapture, settlementOverrideHeader, validateX402NetworkConfig, verifyX402Request, wrapSolanaChargeWithFinalizedBlockhash, zeroAmountCarveOut };
+export { type ClassifiedX402Error, type MppxComposeResult, type MppxRailSpec, type NetworkFamily, type PaymentHeadersRail, type PaymentHeadersResult, type ProcessX402SettleFailure, type ProcessX402SettleResult, type ProcessX402SettleSuccess, type RailDefinition, type RailName, SETTLEMENT_OVERRIDES_HEADER, type SettlementHandlers, type SettlementOverrides, type SettlementPayloadLike, SignerNetwork, SolanaMppRailSpec, StripeRailSpec, TempoRailSpec, TempoSessionRailSpec, USDC, type VerifyX402RequestResult, X402BaseRailSpec, X402Server, type X402ServerLike, X402_SUPPORTED_BASE_NETWORKS, type ZeroSettleRail, type ZeroSettleResult, buildIdempotencyKey, buildPaymentDirective, buildPaymentHeaders, buildPaymentRequestBlob, classifyOrchestrationError, classifyX402SettleResult, composeMppxRequest, createMppxServer, detectRailFromHeaders, dispatchSettlementByNetwork, lazyMppxServer, lazyX402Server, lookupRail, mppCredentialPayloadType, mppxChallengeHeaders, networkFamily, networks, paymentDirective, processX402Settle, rails, registerX402SchemesV1V2, runWithMppxFailureCapture, settlementOverrideHeader, validateX402NetworkConfig, verifyX402Request, wrapSolanaChargeWithFinalizedBlockhash, zeroAmountCarveOut };

package/dist/payment/index.js

@@ -54,6 +54,7 @@ __export(payment_exports, {
   loadSolanaFeePayer: () => loadSolanaFeePayer,
   lookupRail: () => lookupRail,
   malformedPaymentCredential: () => malformedPaymentCredential,
+  mppCredentialPayloadType: () => mppCredentialPayloadType,
   mppxChallengeHeaders: () => mppxChallengeHeaders,
   networkFamily: () => networkFamily,
   networks: () => networks,
@@ -1220,6 +1221,22 @@ function x402SignerFromPayload(payload) {
     txHash: null
   };
 }
+function mppCredentialPayloadType(authorizationHeader) {
+  if (typeof authorizationHeader !== "string") return null;
+  if (!authorizationHeader.toLowerCase().startsWith("payment ")) return null;
+  const token = authorizationHeader.slice("payment ".length).trim();
+  if (!token) return null;
+  try {
+    const credential = JSON.parse(atob(token));
+    if (!credential || typeof credential !== "object") return null;
+    const payload = credential.payload;
+    if (!payload || typeof payload !== "object") return null;
+    const type = payload.type;
+    return typeof type === "string" ? type : null;
+  } catch {
+    return null;
+  }
+}
 function mppSignerFromAuth(authorizationHeader) {
   if (typeof authorizationHeader !== "string") return NULL_RESULT;
   if (!authorizationHeader.toLowerCase().startsWith("payment ")) return NULL_RESULT;
@@ -1513,6 +1530,7 @@ function isSolanaNetwork(input) {
   loadSolanaFeePayer,
   lookupRail,
   malformedPaymentCredential,
+  mppCredentialPayloadType,
   mppxChallengeHeaders,
   networkFamily,
   networks,