@agent-score/commerce 2.7.3 → 2.7.5

package/dist/payment/index.d.mts

@@ -402,6 +402,28 @@ declare function classifyX402SettleResult(result: ProcessX402SettleResult): Clas
  * `classifyX402SettleResult`.
  */
 declare function classifyOrchestrationError(err: unknown): ClassifiedX402Error | null;
+/**
+ * Strip the non-signed `extensions` + `resource` blocks from a decoded X-Payment payload
+ * before it is forwarded to the facilitator's verify/settle endpoints.
+ *
+ * agentscore-pay (and other x402 clients) echo the 402 challenge's `extensions` (Bazaar
+ * input schema) and `resource` blocks into the payload alongside the signed `payload` +
+ * `accepted`. Neither is part of the EIP-3009 signature (which covers only
+ * `payload.authorization`). CDP's `/x402/verify` validates the paymentPayload against its
+ * `x402V2PaymentPayload` schema, which is `{ x402Version, payload, accepted }` and admits
+ * neither `extensions` nor `resource`: their presence makes the payload match no union
+ * branch and CDP rejects it ("must match one of [x402V2PaymentPayload, x402V1PaymentPayload]").
+ * Endpoints whose echoed Bazaar schema is large fail while small ones happen to slip through,
+ * so it presents as "works on some routes, fails on others" but is one shape bug.
+ *
+ * Confirmed against the live CDP facilitator: accepted-nested WITHOUT extensions/resource
+ * passes schema and reaches signature verify; a flat `{ x402Version, scheme, network, payload }`
+ * is rejected with "x402V2PaymentPayload requires 'accepted'". So `accepted` (which
+ * `verifyX402Request` reads for network/payTo) and every other field stay intact; only the
+ * two echoed challenge blocks are dropped, and only here at the facilitator boundary.
+ * Non-object payloads, and payloads carrying neither field, pass through untouched.
+ */
+declare function stripUnsignedX402PayloadFields(payload: unknown): unknown;
 declare function processX402Settle({ x402Server, payload, resourceConfig, resourceMeta, extension, transportContext, }: {
     /** The x402 server instance from `createX402Server`. */
     x402Server: X402Server;
@@ -901,4 +923,4 @@ declare function lazyMppxServer(opts: {
     secretKey: string;
 }): () => Promise<unknown>;
 
-export { type ClassifiedX402Error, type MppxComposeResult, type MppxRailSpec, type NetworkFamily, type PaymentHeadersRail, type PaymentHeadersResult, type ProcessX402SettleFailure, type ProcessX402SettleResult, type ProcessX402SettleSuccess, type RailDefinition, type RailName, SETTLEMENT_OVERRIDES_HEADER, type SettlementHandlers, type SettlementOverrides, type SettlementPayloadLike, SignerNetwork, SolanaMppRailSpec, StripeRailSpec, TempoRailSpec, TempoSessionRailSpec, USDC, type VerifyX402RequestResult, X402BaseRailSpec, X402Server, type X402ServerLike, X402_SUPPORTED_BASE_NETWORKS, type ZeroSettleRail, type ZeroSettleResult, buildIdempotencyKey, buildPaymentDirective, buildPaymentHeaders, buildPaymentRequestBlob, classifyOrchestrationError, classifyX402SettleResult, composeMppxRequest, createMppxServer, detectRailFromHeaders, dispatchSettlementByNetwork, lazyMppxServer, lazyX402Server, lookupRail, mppCredentialPayloadType, mppxChallengeHeaders, networkFamily, networks, paymentDirective, processX402Settle, rails, registerX402SchemesV1V2, runWithMppxFailureCapture, settlementOverrideHeader, validateX402NetworkConfig, verifyX402Request, wrapSolanaChargeWithFinalizedBlockhash, zeroAmountCarveOut };
+export { type ClassifiedX402Error, type MppxComposeResult, type MppxRailSpec, type NetworkFamily, type PaymentHeadersRail, type PaymentHeadersResult, type ProcessX402SettleFailure, type ProcessX402SettleResult, type ProcessX402SettleSuccess, type RailDefinition, type RailName, SETTLEMENT_OVERRIDES_HEADER, type SettlementHandlers, type SettlementOverrides, type SettlementPayloadLike, SignerNetwork, SolanaMppRailSpec, StripeRailSpec, TempoRailSpec, TempoSessionRailSpec, USDC, type VerifyX402RequestResult, X402BaseRailSpec, X402Server, type X402ServerLike, X402_SUPPORTED_BASE_NETWORKS, type ZeroSettleRail, type ZeroSettleResult, buildIdempotencyKey, buildPaymentDirective, buildPaymentHeaders, buildPaymentRequestBlob, classifyOrchestrationError, classifyX402SettleResult, composeMppxRequest, createMppxServer, detectRailFromHeaders, dispatchSettlementByNetwork, lazyMppxServer, lazyX402Server, lookupRail, mppCredentialPayloadType, mppxChallengeHeaders, networkFamily, networks, paymentDirective, processX402Settle, rails, registerX402SchemesV1V2, runWithMppxFailureCapture, settlementOverrideHeader, stripUnsignedX402PayloadFields, validateX402NetworkConfig, verifyX402Request, wrapSolanaChargeWithFinalizedBlockhash, zeroAmountCarveOut };

package/dist/payment/index.d.ts

@@ -402,6 +402,28 @@ declare function classifyX402SettleResult(result: ProcessX402SettleResult): Clas
  * `classifyX402SettleResult`.
  */
 declare function classifyOrchestrationError(err: unknown): ClassifiedX402Error | null;
+/**
+ * Strip the non-signed `extensions` + `resource` blocks from a decoded X-Payment payload
+ * before it is forwarded to the facilitator's verify/settle endpoints.
+ *
+ * agentscore-pay (and other x402 clients) echo the 402 challenge's `extensions` (Bazaar
+ * input schema) and `resource` blocks into the payload alongside the signed `payload` +
+ * `accepted`. Neither is part of the EIP-3009 signature (which covers only
+ * `payload.authorization`). CDP's `/x402/verify` validates the paymentPayload against its
+ * `x402V2PaymentPayload` schema, which is `{ x402Version, payload, accepted }` and admits
+ * neither `extensions` nor `resource`: their presence makes the payload match no union
+ * branch and CDP rejects it ("must match one of [x402V2PaymentPayload, x402V1PaymentPayload]").
+ * Endpoints whose echoed Bazaar schema is large fail while small ones happen to slip through,
+ * so it presents as "works on some routes, fails on others" but is one shape bug.
+ *
+ * Confirmed against the live CDP facilitator: accepted-nested WITHOUT extensions/resource
+ * passes schema and reaches signature verify; a flat `{ x402Version, scheme, network, payload }`
+ * is rejected with "x402V2PaymentPayload requires 'accepted'". So `accepted` (which
+ * `verifyX402Request` reads for network/payTo) and every other field stay intact; only the
+ * two echoed challenge blocks are dropped, and only here at the facilitator boundary.
+ * Non-object payloads, and payloads carrying neither field, pass through untouched.
+ */
+declare function stripUnsignedX402PayloadFields(payload: unknown): unknown;
 declare function processX402Settle({ x402Server, payload, resourceConfig, resourceMeta, extension, transportContext, }: {
     /** The x402 server instance from `createX402Server`. */
     x402Server: X402Server;
@@ -901,4 +923,4 @@ declare function lazyMppxServer(opts: {
     secretKey: string;
 }): () => Promise<unknown>;
 
-export { type ClassifiedX402Error, type MppxComposeResult, type MppxRailSpec, type NetworkFamily, type PaymentHeadersRail, type PaymentHeadersResult, type ProcessX402SettleFailure, type ProcessX402SettleResult, type ProcessX402SettleSuccess, type RailDefinition, type RailName, SETTLEMENT_OVERRIDES_HEADER, type SettlementHandlers, type SettlementOverrides, type SettlementPayloadLike, SignerNetwork, SolanaMppRailSpec, StripeRailSpec, TempoRailSpec, TempoSessionRailSpec, USDC, type VerifyX402RequestResult, X402BaseRailSpec, X402Server, type X402ServerLike, X402_SUPPORTED_BASE_NETWORKS, type ZeroSettleRail, type ZeroSettleResult, buildIdempotencyKey, buildPaymentDirective, buildPaymentHeaders, buildPaymentRequestBlob, classifyOrchestrationError, classifyX402SettleResult, composeMppxRequest, createMppxServer, detectRailFromHeaders, dispatchSettlementByNetwork, lazyMppxServer, lazyX402Server, lookupRail, mppCredentialPayloadType, mppxChallengeHeaders, networkFamily, networks, paymentDirective, processX402Settle, rails, registerX402SchemesV1V2, runWithMppxFailureCapture, settlementOverrideHeader, validateX402NetworkConfig, verifyX402Request, wrapSolanaChargeWithFinalizedBlockhash, zeroAmountCarveOut };
+export { type ClassifiedX402Error, type MppxComposeResult, type MppxRailSpec, type NetworkFamily, type PaymentHeadersRail, type PaymentHeadersResult, type ProcessX402SettleFailure, type ProcessX402SettleResult, type ProcessX402SettleSuccess, type RailDefinition, type RailName, SETTLEMENT_OVERRIDES_HEADER, type SettlementHandlers, type SettlementOverrides, type SettlementPayloadLike, SignerNetwork, SolanaMppRailSpec, StripeRailSpec, TempoRailSpec, TempoSessionRailSpec, USDC, type VerifyX402RequestResult, X402BaseRailSpec, X402Server, type X402ServerLike, X402_SUPPORTED_BASE_NETWORKS, type ZeroSettleRail, type ZeroSettleResult, buildIdempotencyKey, buildPaymentDirective, buildPaymentHeaders, buildPaymentRequestBlob, classifyOrchestrationError, classifyX402SettleResult, composeMppxRequest, createMppxServer, detectRailFromHeaders, dispatchSettlementByNetwork, lazyMppxServer, lazyX402Server, lookupRail, mppCredentialPayloadType, mppxChallengeHeaders, networkFamily, networks, paymentDirective, processX402Settle, rails, registerX402SchemesV1V2, runWithMppxFailureCapture, settlementOverrideHeader, stripUnsignedX402PayloadFields, validateX402NetworkConfig, verifyX402Request, wrapSolanaChargeWithFinalizedBlockhash, zeroAmountCarveOut };

package/dist/payment/index.js

@@ -68,6 +68,7 @@ __export(payment_exports, {
   resolveRecipient: () => resolveRecipient,
   runWithMppxFailureCapture: () => runWithMppxFailureCapture,
   settlementOverrideHeader: () => settlementOverrideHeader,
+  stripUnsignedX402PayloadFields: () => stripUnsignedX402PayloadFields,
   usdToAtomic: () => usdToAtomic,
   validateX402NetworkConfig: () => validateX402NetworkConfig,
   verifyX402Request: () => verifyX402Request,
@@ -519,6 +520,17 @@ function classifyOrchestrationError(err) {
   }
   return null;
 }
+function stripUnsignedX402PayloadFields(payload) {
+  if (typeof payload !== "object" || payload === null) return payload;
+  const p = payload;
+  if (!("extensions" in p) && !("resource" in p)) return payload;
+  const rest = {};
+  for (const [k, v] of Object.entries(p)) {
+    if (k === "extensions" || k === "resource") continue;
+    rest[k] = v;
+  }
+  return rest;
+}
 async function processX402Settle({
   x402Server,
   payload,
@@ -539,6 +551,7 @@ async function processX402Settle({
   if (!matchedRequirement) {
     return { success: false, phase: "no_requirements", reason: "x402Server.buildPaymentRequirements returned empty" };
   }
+  const facilitatorPayload = stripUnsignedX402PayloadFields(payload);
   const resolvedTransportContext = transportContext ?? (() => {
     const path = new URL(resourceMeta.url).pathname;
     return { method: "POST", adapter: { getPath: () => path }, routePattern: path };
@@ -553,7 +566,7 @@ async function processX402Settle({
   let verifyResult;
   try {
     verifyResult = await server.verifyPayment(
-      payload,
+      facilitatorPayload,
       matchedRequirement,
       enrichedExt,
       resolvedTransportContext
@@ -568,7 +581,7 @@ async function processX402Settle({
   }
   try {
     const settleResult = await server.settlePayment(
-      payload,
+      facilitatorPayload,
       matchedRequirement,
       enrichedExt,
       resolvedTransportContext
@@ -1542,6 +1555,7 @@ function isSolanaNetwork(input) {
   resolveRecipient,
   runWithMppxFailureCapture,
   settlementOverrideHeader,
+  stripUnsignedX402PayloadFields,
   usdToAtomic,
   validateX402NetworkConfig,
   verifyX402Request,