@agent-score/commerce 2.7.2 → 2.7.4

package/dist/index.mjs

@@ -22618,7 +22618,7 @@ function createAgentScoreCore(options) {
   } = options;
   const baseUrl = stripTrailingSlashes(rawBaseUrl);
   const agentMemoryHint = buildAgentMemoryHint(aipTrustedIssuers);
-  const defaultUa = `@agent-score/commerce@${"2.7.2"}`;
+  const defaultUa = `@agent-score/commerce@${"2.7.4"}`;
   const userAgentHeader = userAgent ? `${userAgent} (${defaultUa})` : defaultUa;
   const sdk = new AgentScore({ apiKey, baseUrl, userAgent: userAgentHeader });
   const sessionSdkCache = /* @__PURE__ */ new Map();
@@ -25068,6 +25068,21 @@ function classifyX402SettleResult(result) {
       };
   }
 }
+function toCanonicalX402PaymentPayload(payload) {
+  if (typeof payload !== "object" || payload === null) return payload;
+  const p = payload;
+  const accepted = typeof p.accepted === "object" && p.accepted !== null ? p.accepted : void 0;
+  const scheme = p.scheme ?? accepted?.scheme;
+  const network = p.network ?? accepted?.network;
+  const inner = p.payload;
+  if (scheme === void 0 || network === void 0 || inner === void 0) return payload;
+  return {
+    x402Version: p.x402Version ?? 2,
+    scheme,
+    network,
+    payload: inner
+  };
+}
 async function processX402Settle({
   x402Server,
   payload,
@@ -25088,6 +25103,7 @@ async function processX402Settle({
   if (!matchedRequirement) {
     return { success: false, phase: "no_requirements", reason: "x402Server.buildPaymentRequirements returned empty" };
   }
+  const canonicalPayload = toCanonicalX402PaymentPayload(payload);
   const resolvedTransportContext = transportContext ?? (() => {
     const path = new URL(resourceMeta.url).pathname;
     return { method: "POST", adapter: { getPath: () => path }, routePattern: path };
@@ -25102,7 +25118,7 @@ async function processX402Settle({
   let verifyResult;
   try {
     verifyResult = await server.verifyPayment(
-      payload,
+      canonicalPayload,
       matchedRequirement,
       enrichedExt,
       resolvedTransportContext
@@ -25117,7 +25133,7 @@ async function processX402Settle({
   }
   try {
     const settleResult = await server.settlePayment(
-      payload,
+      canonicalPayload,
       matchedRequirement,
       enrichedExt,
       resolvedTransportContext
@@ -25358,6 +25374,15 @@ function getIdentityStatus(ctx) {
   if (decision === "allow") return "verified";
   return "unverified";
 }
+function stripPaymentHeadersFromRaw(raw) {
+  if (typeof Request === "undefined" || !(raw instanceof Request)) return raw;
+  const headers = new Headers(raw.headers);
+  headers.delete("payment-signature");
+  headers.delete("x-payment");
+  const auth = headers.get("authorization");
+  if (auth !== null && auth.startsWith("Payment ")) headers.delete("authorization");
+  return new Request(raw.url, { method: raw.method, headers });
+}
 function resolveIdentityMetadata(ctx) {
   const h = normalizeHeadersToLowercase(ctx.request.headers);
   const wallet = h["x-wallet-address"];
@@ -26307,7 +26332,7 @@ var Checkout = class {
       if (lk === "authorization" && v.startsWith("Payment ")) continue;
       headers[k] = v;
     }
-    return { ...request, headers };
+    return { ...request, headers, raw: stripPaymentHeadersFromRaw(request.raw) };
   }
   async emit402(ctx, mppxHeaders = {}) {
     if (ctx.pricing === null) {