@agentwares/agentguard 0.1.1 → 0.1.3

package/dist/fixtures/crm-server.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-// ../../packages/mcp-kit/dist/chunk-AO7AV7MI.js
+// ../../packages/mcp-kit/dist/chunk-NF4BQXVM.js
 import { completable } from "@modelcontextprotocol/sdk/server/completable.js";
 import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
 import {
@@ -12,6 +12,7 @@ import {
 import { z } from "zod";
 
 // ../../packages/x402/dist/index.js
+var DEFAULT_X402_NETWORK = "eip155:8453";
 var X402_HEADER = "X-Payment-Requirements";
 var X402_REQUIRED_HEADER = "PAYMENT-REQUIRED";
 function toAmount(priceUsd) {
@@ -21,42 +22,51 @@ function toAmount(priceUsd) {
 }
 function buildPaymentRequired(opts) {
   const amountUsd = toAmount(opts.priceUsd);
-  const accepts = [
-    {
+  const creditsPayTo = opts.creditsPayTo ?? opts.selfServe?.keysUrl;
+  const accepts = [];
+  if (opts.payTo) {
+    accepts.push({
       rail: "x402",
       amountUsd,
       resource: opts.resource,
       description: opts.description,
-      network: "eip155:8453",
+      network: opts.network ?? DEFAULT_X402_NETWORK,
       asset: "USDC",
       payTo: opts.payTo,
       maxTimeoutSeconds: 300
-    },
-    {
-      rail: "mpp",
+    });
+  }
+  if (creditsPayTo) {
+    accepts.push({
+      rail: "prepaid_credits",
       amountUsd,
       resource: opts.resource,
       description: opts.description,
       currency: "usd",
-      payTo: opts.payTo,
-      maxTimeoutSeconds: 300
-    }
-  ];
+      payTo: creditsPayTo,
+      maxTimeoutSeconds: 300,
+      // funding a balance ends at a hosted Stripe Checkout page, which an agent cannot fill in
+      humanRequired: true
+    });
+  }
   const live = opts.live === true;
+  const selfServe = opts.selfServe;
+  const liveFix = selfServe ? `Free first: retry with sample=true \u2014 no key, no payment. To pay: POST ${selfServe.keysUrl} (no auth, no signup) returns a key and a Stripe Checkout URL. Funding that key needs a person to complete the Checkout page in a browser; if you are running unattended, surface the URL to your operator rather than retrying. Once funded, send Authorization: Bearer <key>, plus Idempotency-Key so a repeated call is charged once.` : "Retry with a PAYMENT header satisfying one of `accepts`, or send an API key with credit balance.";
   const body = {
     code: "PAYMENT_REQUIRED",
     cause: live ? `This call costs $${amountUsd}. No valid payment or credit was presented.` : `This call costs $${amountUsd}. Pay-per-call (x402 / Stripe MPP) is coming soon; use an API key with prepaid credits.`,
-    fix: live ? "Retry with a PAYMENT header satisfying one of `accepts`, or send an API key with credit balance." : `Create an API key${opts.signupUrl ? ` at ${opts.signupUrl}` : ""} and retry with Authorization: Bearer <key>. Try the free sample mode first.`,
+    fix: live ? liveFix : `Create an API key${opts.signupUrl ? ` at ${opts.signupUrl}` : ""} and retry with Authorization: Bearer <key>. Try the free sample mode first.`,
     retryable: true,
     priceUsd: opts.priceUsd,
     accepts,
     comingSoon: !live,
-    alternatives: ["api_key_credits", "sample_mode"]
+    alternatives: ["api_key_credits", "sample_mode"],
+    ...selfServe ? { selfServe } : {}
   };
   const encoded = JSON.stringify({ x402Version: 2, accepts, resource: opts.resource });
   const headers = {
     "Content-Type": "application/json",
-    "WWW-Authenticate": `Payment realm="agentwares", methods="x402 mpp", price="${amountUsd} USD"`,
+    "WWW-Authenticate": `Payment realm="agentwares", methods="x402 prepaid_credits", price="${amountUsd} USD"`,
     [X402_HEADER]: encoded,
     [X402_REQUIRED_HEADER]: btoa(encoded),
     "Cache-Control": "no-store"
@@ -74,7 +84,7 @@ var StubVerifier = class {
   }
 };
 
-// ../../packages/mcp-kit/dist/chunk-AO7AV7MI.js
+// ../../packages/mcp-kit/dist/chunk-NF4BQXVM.js
 import { z as z2 } from "zod";
 import { z as z3 } from "zod";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -521,6 +531,7 @@ function withPayment(tool, opts) {
     );
   }
   const verifier = opts.verifier ?? new StubVerifier();
+  const liveRail = opts.verifier !== void 0;
   const input = tool.input.extend({
     [sampleField]: z2.boolean().default(false).describe(
       "Set true to return an example response at no charge (sample mode). Default false."
@@ -551,17 +562,35 @@ function withPayment(tool, opts) {
         live: opts.live,
         description: opts.description,
         payTo: opts.payTo,
-        signupUrl: opts.signupUrl
+        creditsPayTo: opts.creditsPayTo,
+        signupUrl: opts.signupUrl,
+        selfServe: opts.selfServe
       });
-      const requirement = required.body.accepts[0];
-      if (requirement) {
-        const verified = await verifier.verify(
-          new Request(`https://mcp.local/${tool.name}`, { headers: ctx.headers }),
-          requirement
-        );
-        if (verified.ok) return tool.handler(record, ctx);
-        reason = reason ?? verified.reason;
+      const advertised = required.body.accepts.find((a) => a.rail === "prepaid_credits") ?? required.body.accepts[0];
+      const requirement = advertised ?? {
+        rail: "prepaid_credits",
+        amountUsd: String(required.body.priceUsd),
+        resource: tool.name
+      };
+      const verified = await verifier.verify(
+        new Request(`https://mcp.local/${tool.name}`, { headers: ctx.headers }),
+        requirement
+      );
+      if (verified.ok) {
+        let result;
+        try {
+          result = await tool.handler(record, ctx);
+        } catch (error) {
+          await opts.onPaidFailure?.(ctx, verified, error);
+          throw error;
+        }
+        const settled = await verifier.settle?.(verified);
+        if (settled && !settled.ok) {
+          opts.onSettlementFailure?.(ctx, verified, settled.reason);
+        }
+        return result;
       }
+      reason = liveRail ? verified.reason ?? reason : reason ?? verified.reason;
       throw paymentRequiredError(required.body, reason);
     }
   });