@agentwares/agentguard 0.1.2 → 0.1.4

package/dist/fixtures/crm-server.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-// ../../packages/mcp-kit/dist/chunk-AO7AV7MI.js
+// ../../packages/mcp-kit/dist/chunk-7LRFDQNC.js
 import { completable } from "@modelcontextprotocol/sdk/server/completable.js";
 import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
 import {
@@ -12,6 +12,19 @@ import {
 import { z } from "zod";
 
 // ../../packages/x402/dist/index.js
+var USDC_BASE = "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913";
+var USDC_DECIMALS = 6;
+var USDC_EIP712_DOMAIN = { name: "USD Coin", version: "2" };
+function toAtomicUnits(amountUsd, decimals = USDC_DECIMALS) {
+  const trimmed = amountUsd.trim();
+  if (!/^\d+(\.\d+)?$/.test(trimmed)) throw new Error(`not a decimal amount: ${amountUsd}`);
+  const [whole = "0", fraction = ""] = trimmed.split(".");
+  if (fraction.length > decimals) {
+    throw new Error(`${amountUsd} has more than ${decimals} decimal places`);
+  }
+  return `${whole}${fraction.padEnd(decimals, "0")}`.replace(/^0+(?=\d)/, "");
+}
+var DEFAULT_X402_NETWORK = "eip155:8453";
 var X402_HEADER = "X-Payment-Requirements";
 var X402_REQUIRED_HEADER = "PAYMENT-REQUIRED";
 function toAmount(priceUsd) {
@@ -21,42 +34,69 @@ function toAmount(priceUsd) {
 }
 function buildPaymentRequired(opts) {
   const amountUsd = toAmount(opts.priceUsd);
-  const accepts = [
-    {
+  const creditsPayTo = opts.creditsPayTo ?? opts.selfServe?.keysUrl;
+  const accepts = [];
+  if (opts.payTo) {
+    accepts.push({
       rail: "x402",
+      scheme: "exact",
       amountUsd,
+      amount: toAtomicUnits(amountUsd, opts.assetDecimals),
       resource: opts.resource,
       description: opts.description,
-      network: "eip155:8453",
-      asset: "USDC",
+      mimeType: "application/json",
+      network: opts.network ?? DEFAULT_X402_NETWORK,
+      asset: opts.asset ?? USDC_BASE,
+      extra: opts.assetDomain ?? USDC_EIP712_DOMAIN,
       payTo: opts.payTo,
-      maxTimeoutSeconds: 300
-    },
-    {
-      rail: "mpp",
+      maxTimeoutSeconds: 300,
+      ...opts.bazaar ? { bazaar: opts.bazaar } : {}
+    });
+  }
+  if (creditsPayTo) {
+    accepts.push({
+      rail: "prepaid_credits",
       amountUsd,
       resource: opts.resource,
       description: opts.description,
       currency: "usd",
-      payTo: opts.payTo,
-      maxTimeoutSeconds: 300
-    }
-  ];
+      payTo: creditsPayTo,
+      maxTimeoutSeconds: 300,
+      // funding a balance ends at a hosted Stripe Checkout page, which an agent cannot fill in
+      humanRequired: true
+    });
+  }
   const live = opts.live === true;
+  const selfServe = opts.selfServe;
+  const x402Rail = accepts.find((a) => a.rail === "x402" && a.payTo);
+  const usdcFix = x402Rail ? `Pay in USDC with no account and no human: take the \`accepts\` entry with \`rail: "x402"\`, sign an EIP-3009 transferWithAuthorization for ${x402Rail.amountUsd} USDC to ${x402Rail.payTo} on ${x402Rail.network}, and retry with it base64 in the X-PAYMENT header. The facilitator submits the transfer, so you need USDC and no gas. ` : "";
+  const sampleFix = opts.sampleMode ? "Free first: retry with sample=true \u2014 no key, no payment. " : "";
+  const cardFix = selfServe ? `Or pay by card: POST ${selfServe.keysUrl} (no auth, no signup) returns a key and a Stripe Checkout URL. Funding that key needs a person at a browser; if you are running unattended, surface the URL to your operator rather than retrying, or use the USDC rail above. Once funded, send Authorization: Bearer <key>, plus Idempotency-Key so a repeated call is charged once.` : "";
+  const liveFix = usdcFix || cardFix ? `${sampleFix}${usdcFix}${cardFix}`.trim() : "Retry with a PAYMENT header satisfying one of `accepts`, or send an API key with credit balance.";
   const body = {
     code: "PAYMENT_REQUIRED",
     cause: live ? `This call costs $${amountUsd}. No valid payment or credit was presented.` : `This call costs $${amountUsd}. Pay-per-call (x402 / Stripe MPP) is coming soon; use an API key with prepaid credits.`,
-    fix: live ? "Retry with a PAYMENT header satisfying one of `accepts`, or send an API key with credit balance." : `Create an API key${opts.signupUrl ? ` at ${opts.signupUrl}` : ""} and retry with Authorization: Bearer <key>. Try the free sample mode first.`,
+    fix: live ? liveFix : `Create an API key${opts.signupUrl ? ` at ${opts.signupUrl}` : ""} and retry with Authorization: Bearer <key>. Try the free sample mode first.`,
     retryable: true,
     priceUsd: opts.priceUsd,
     accepts,
     comingSoon: !live,
-    alternatives: ["api_key_credits", "sample_mode"]
+    alternatives: [
+      ...creditsPayTo ? ["api_key_credits"] : [],
+      ...opts.sampleMode ? ["sample_mode"] : []
+    ],
+    ...selfServe ? { selfServe } : {},
+    ...opts.bazaar ? { extensions: { bazaar: opts.bazaar } } : {}
   };
-  const encoded = JSON.stringify({ x402Version: 2, accepts, resource: opts.resource });
+  const encoded = JSON.stringify({
+    x402Version: 2,
+    accepts,
+    resource: opts.resource,
+    ...opts.bazaar ? { extensions: { bazaar: opts.bazaar } } : {}
+  });
   const headers = {
     "Content-Type": "application/json",
-    "WWW-Authenticate": `Payment realm="agentwares", methods="x402 mpp", price="${amountUsd} USD"`,
+    "WWW-Authenticate": `Payment realm="agentwares", methods="x402 prepaid_credits", price="${amountUsd} USD"`,
     [X402_HEADER]: encoded,
     [X402_REQUIRED_HEADER]: btoa(encoded),
     "Cache-Control": "no-store"
@@ -74,7 +114,7 @@ var StubVerifier = class {
   }
 };
 
-// ../../packages/mcp-kit/dist/chunk-AO7AV7MI.js
+// ../../packages/mcp-kit/dist/chunk-7LRFDQNC.js
 import { z as z2 } from "zod";
 import { z as z3 } from "zod";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -521,6 +561,7 @@ function withPayment(tool, opts) {
     );
   }
   const verifier = opts.verifier ?? new StubVerifier();
+  const liveRail = opts.verifier !== void 0;
   const input = tool.input.extend({
     [sampleField]: z2.boolean().default(false).describe(
       "Set true to return an example response at no charge (sample mode). Default false."
@@ -545,23 +586,46 @@ function withPayment(tool, opts) {
         if (auth.ok) return tool.handler(record, { ...ctx, userId: auth.userId });
         reason = auth.reason;
       }
+      const resource = ctx.resourceUrl ?? tool.name;
       const required = buildPaymentRequired({
-        resource: tool.name,
+        resource,
         priceUsd: opts.priceUsd,
         live: opts.live,
         description: opts.description,
         payTo: opts.payTo,
-        signupUrl: opts.signupUrl
+        creditsPayTo: opts.creditsPayTo,
+        signupUrl: opts.signupUrl,
+        selfServe: opts.selfServe,
+        // withPayment always adds a free `sample` flag to the tool's input schema
+        sampleMode: true,
+        ...opts.bazaar ? { bazaar: opts.bazaar } : {}
       });
-      const requirement = required.body.accepts[0];
-      if (requirement) {
-        const verified = await verifier.verify(
-          new Request(`https://mcp.local/${tool.name}`, { headers: ctx.headers }),
-          requirement
-        );
-        if (verified.ok) return tool.handler(record, ctx);
-        reason = reason ?? verified.reason;
+      const advertised = required.body.accepts.find((a) => a.rail === "prepaid_credits") ?? required.body.accepts[0];
+      const requirement = advertised ?? {
+        rail: "prepaid_credits",
+        amountUsd: String(required.body.priceUsd),
+        resource,
+        ...opts.description ? { description: opts.description } : {}
+      };
+      const verified = await verifier.verify(
+        new Request(`https://mcp.local/${tool.name}`, { headers: ctx.headers }),
+        requirement
+      );
+      if (verified.ok) {
+        let result;
+        try {
+          result = await tool.handler(record, ctx);
+        } catch (error) {
+          await opts.onPaidFailure?.(ctx, verified, error);
+          throw error;
+        }
+        const settled = await verifier.settle?.(verified);
+        if (settled && !settled.ok) {
+          opts.onSettlementFailure?.(ctx, verified, settled.reason);
+        }
+        return result;
       }
+      reason = liveRail ? verified.reason ?? reason : reason ?? verified.reason;
       throw paymentRequiredError(required.body, reason);
     }
   });