@aifinpay/agent 1.8.2 → 2.0.0-rc.12

package/dist/facilitators/detect.js

@@ -3,9 +3,9 @@ import { AiFinPayFacilitator } from "./aifinpay.js";
 import { CoinbaseX402Facilitator } from "./coinbase.js";
 import { StandardX402Facilitator } from "./standard-x402.js";
 /**
- * Order matters: most-specific detector first. A response that matches
- * AiFinPay's body schema is also technically a 402, so we try AiFinPay
- * before falling back to header-based checks.
+ * Order matters: most-specific detector first. Standard x402 is checked before
+ * the historical Coinbase compatibility adapter because HTTP header names are
+ * case-insensitive and both may observe PAYMENT-REQUIRED.
  */
 export const REGISTERED = [
     AiFinPayFacilitator,
@@ -22,25 +22,6 @@ export async function detectFacilitator(resp, override = "auto") {
         }
         return new cls();
     }
-    // Checked BEFORE the loop, and that ordering is the whole point.
-    //
-    // The Coinbase facilitator detects a `PAYMENT-REQUIRED` header, and the v2
-    // standard uses `payment-required` — the same header, since HTTP header
-    // names are case-insensitive. So Coinbase claims a real v2 response, wins
-    // the loop, and then fails somewhere deep in buildAuth with an error about
-    // its own internals. Anyone debugging that goes looking at Coinbase, which
-    // has nothing to do with it.
-    //
-    // Verified against https://x402.org/protected on 2026-08-10: without this,
-    // detectFacilitator returns coinbase-x402 for an endpoint that is not
-    // Coinbase's flavour at all.
-    if (StandardX402Facilitator.isUnsupportedV2(resp)) {
-        throw new UnsupportedFacilitatorError("this endpoint speaks x402 version 2 (payment data in the " +
-            "`payment-required` header), which this SDK does not implement yet — " +
-            "its standard-x402 facilitator targets version 1, where the payment " +
-            "data is in the response body. The agent cannot pay this endpoint. " +
-            "Tracking: Obsidian/proposals/2026-08-10-x402-interop-scoping.md");
-    }
     for (const cls of REGISTERED) {
         if (await cls.detect(resp))
             return new cls();

package/dist/facilitators/detect.js.map

@@ -1 +1 @@
-{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../src/facilitators/detect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAuB;IAC5C,mBAAmB;IACnB,uBAAuB;IACvB,uBAAuB;CACxB,CAAC;AAEF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CACzC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAc,EACd,WAAmB,MAAM;IAEzB,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,2BAA2B,CACnC,kCAAkC,QAAQ,KAAK;gBAC7C,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7C,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IAGD,iEAAiE;IACjE,EAAE;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,6BAA6B;IAC7B,EAAE;IACF,2EAA2E;IAC3E,sEAAsE;IACtE,6BAA6B;IAC7B,IAAI,uBAAuB,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,2BAA2B,CACnC,2DAA2D;YACzD,sEAAsE;YACtE,qEAAqE;YACrE,oEAAoE;YACpE,iEAAiE,CACpE,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,2BAA2B,CACnC,oDAAoD;QAClD,WAAW,IAAI,CAAC,MAAM,IAAI;QAC1B,YAAY,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../src/facilitators/detect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAuB;IAC5C,mBAAmB;IACnB,uBAAuB;IACvB,uBAAuB;CACxB,CAAC;AAEF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CACzC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAc,EACd,WAAmB,MAAM;IAEzB,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,2BAA2B,CACnC,kCAAkC,QAAQ,KAAK;gBAC7C,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7C,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,2BAA2B,CACnC,oDAAoD;QAClD,WAAW,IAAI,CAAC,MAAM,IAAI;QAC1B,YAAY,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnD,CAAC;AACJ,CAAC"}

package/dist/facilitators/standard-x402.d.ts

@@ -3,15 +3,11 @@ import type { AuthPayload, Facilitator, PayOptions } from "./base.js";
 export declare class StandardX402Facilitator implements Facilitator {
     static readonly name = "x402";
     readonly name = "x402";
-    /**
-     * True when this is a v2 response — the version we do NOT support.
-     *
-     * Separate from detect() on purpose. detect() answers "can I pay this",
-     * and the honest answer for v2 is no. This answers "is this the standard I
-     * am failing to speak", so the caller can say which.
-     */
-    static isUnsupportedV2(resp: Response): boolean;
+    /** Retained for API compatibility; v2 is supported now. */
+    static isUnsupportedV2(_resp: Response): boolean;
     static detect(resp: Response): Promise<boolean>;
     buildAuth(resp: Response, agent: Agent, opts: PayOptions): Promise<AuthPayload>;
+    private buildV2Auth;
+    private buildLegacyV1Auth;
 }
 //# sourceMappingURL=standard-x402.d.ts.map

package/dist/facilitators/standard-x402.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"standard-x402.d.ts","sourceRoot":"","sources":["../../src/facilitators/standard-x402.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AA+DtE,qBAAa,uBAAwB,YAAW,WAAW;IACzD,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,QAAQ,CAAC,IAAI,UAAU;IAEvB;;;;;;OAMG;IACH,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO;WAgBlC,MAAM,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAa/C,SAAS,CACb,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,WAAW,CAAC;CA0FxB"}
+{"version":3,"file":"standard-x402.d.ts","sourceRoot":"","sources":["../../src/facilitators/standard-x402.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AA4JtE,qBAAa,uBAAwB,YAAW,WAAW;IACzD,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,QAAQ,CAAC,IAAI,UAAU;IAEvB,2DAA2D;IAC3D,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO;WAInC,MAAM,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAW/C,SAAS,CACb,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,WAAW,CAAC;YAMT,WAAW;YAoFX,iBAAiB;CA0EhC"}

package/dist/facilitators/standard-x402.js

@@ -1,41 +1,18 @@
 import { PaymentTooExpensiveError, UnsupportedFacilitatorError, } from "../errors.js";
 /**
- * Standard x402 — the `X-PAYMENT` header flow (x402 Foundation / Linux
- * Foundation standard, donated by Coinbase 2026-04).
+ * Standard x402 Foundation protocol adapter.
  *
- * ⚠ THIS DOES NOT YET INTEROPERATE WITH LIVE x402 SERVICES.
+ * Supported:
+ * - x402 v2 HTTP transport: base64 `PAYMENT-REQUIRED` response header and
+ *   base64 `PAYMENT-SIGNATURE` retry header.
+ * - v2 EVM `exact` scheme using EIP-3009 TransferWithAuthorization.
+ * - CAIP-2 EVM networks (`eip155:<chainId>`).
+ * - legacy v1 body/X-PAYMENT support for existing integrations.
  *
- * It targets x402Version 1, and the standard has moved to 2. Tested against
- * https://x402.org/protected on 2026-08-10: detect() returns false, so an agent
- * walks past a real x402 endpoint without recognising it. Four differences,
- * every one confirmed against that live response:
- *
- *   transport   we read the JSON body; v2 sends base64 in a `payment-required`
- *               response header and leaves the body as `{}`
- *   version     we expect x402Version 1; live is 2
- *   amount      we read `maxAmountRequired`; v2 calls it `amount`
- *   network     we map names like "base" via CHAIN_IDS; v2 uses CAIP-2,
- *               e.g. "eip155:84532"
- *
- * The header of this file previously claimed this made AiFinPay agents
- * interoperable with 69k+ agents. It shipped in @aifinpay/agent 1.8.1 and could
- * not complete one payment to any of them. Saying so here rather than deleting
- * the sentence, because the next person to read this file needs to know the
- * implementation is a draft ahead of its target, not behind it.
- *
- * detectV2 below exists so the failure is legible: an agent hitting a real
- * endpoint gets "this is x402 v2, unsupported" instead of "no facilitator
- * matched", which sends anyone debugging it in the wrong direction.
- *
- * Wire format IMPLEMENTED HERE (v1, superseded):
- *   - 402 body: { x402Version, accepts: [ { scheme:"exact", network,
- *       maxAmountRequired, payTo, asset, maxTimeoutSeconds, extra:{name,version} }, … ] }
- *   - Client signs an EIP-3009 TransferWithAuthorization (gasless) and retries with
- *       X-PAYMENT: base64(JSON({ x402Version, scheme, network, payload }))
- *
- * EVM `exact` only for now; Solana `exact` is a follow-up.
+ * Not supported here: v2 SVM/Solana exact, upto, batch-settlement or arbitrary
+ * non-EVM schemes. Those offers fail closed instead of being misdetected.
  */
-const CHAIN_IDS = {
+const LEGACY_CHAIN_IDS = {
     base: 8453,
     "base-sepolia": 84532,
     ethereum: 1,
@@ -47,6 +24,21 @@ const CHAIN_IDS = {
     avalanche: 43114,
     bsc: 56,
 };
+// Circle-issued USDC, independently pinned by chain and contract. A server's
+// token name or decimals are not evidence of dollar value. Source (2026-09-12):
+// https://developers.circle.com/stablecoins/usdc-contract-addresses
+// Testnet entries are protocol test units, not real dollars.
+const USDC_BY_CHAIN = Object.freeze({
+    1: "0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",
+    10: "0x0b2c639c533813f4aa9d7837caf62653d097ff85",
+    137: "0x3c499c542cef5e3811e1192ce70d8cc03d5c3359",
+    130: "0x078d782b760474a361dda0af3839290b0ef57ad6",
+    8453: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+    42161: "0xaf88d065e77c8cc2239327c5edb3a432268e5831",
+    43114: "0xb97ef9ef8734c71904d8002f8b6bc66dd9c48a6e",
+    84532: "0x036cbd53842c5426634e7929541ec2318f3dcf7e",
+    80002: "0x41e94eb019c0762f9bfcf9fb1e58725bfb0e7582",
+});
 const TRANSFER_WITH_AUTHORIZATION_TYPES = {
     TransferWithAuthorization: [
         { name: "from", type: "address" },
@@ -57,78 +49,211 @@ const TRANSFER_WITH_AUTHORIZATION_TYPES = {
         { name: "nonce", type: "bytes32" },
     ],
 };
+function decodeBase64Json(value) {
+    const text = typeof Buffer !== "undefined"
+        ? Buffer.from(value, "base64").toString("utf8")
+        : atob(value);
+    return JSON.parse(text);
+}
+function encodeBase64Json(value) {
+    const json = JSON.stringify(value);
+    return typeof Buffer !== "undefined"
+        ? Buffer.from(json, "utf8").toString("base64")
+        : btoa(json);
+}
+function asRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : null;
+}
+function readV2Requirement(resp) {
+    if (resp.status !== 402)
+        return null;
+    const header = resp.headers.get("payment-required");
+    if (!header)
+        return null;
+    try {
+        const decoded = asRecord(decodeBase64Json(header));
+        if (!decoded || Number(decoded.x402Version) !== 2 || !Array.isArray(decoded.accepts)) {
+            return null;
+        }
+        return decoded;
+    }
+    catch {
+        return null;
+    }
+}
+function parseCaip2Evm(network) {
+    if (typeof network !== "string")
+        return null;
+    const match = /^eip155:([1-9][0-9]*)$/.exec(network);
+    if (!match)
+        return null;
+    const chainId = Number(match[1]);
+    if (!Number.isSafeInteger(chainId) || chainId <= 0)
+        return null;
+    return chainId;
+}
+function address(value) {
+    if (typeof value !== "string" || !/^0x[0-9a-fA-F]{40}$/.test(value))
+        return null;
+    return value;
+}
+function positiveAtomicAmount(value) {
+    if (typeof value !== "string" || !/^[0-9]{1,78}$/.test(value))
+        return null;
+    try {
+        if (BigInt(value) <= 0n || BigInt(value) >= 2n ** 256n)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function enforceUsdCap(value, extra, opts, chainId, asset) {
+    if (opts.maxAmountUsd === undefined)
+        return;
+    if (!Number.isFinite(opts.maxAmountUsd) || opts.maxAmountUsd < 0) {
+        throw new PaymentTooExpensiveError("maxAmountUsd must be a finite non-negative number");
+    }
+    // USD caps use the independently identified asset's fixed six decimals.
+    const name = String(extra.name ?? "").trim().toLowerCase();
+    const isUsdc = name === "usdc" || name === "usd coin";
+    if (!isUsdc || USDC_BY_CHAIN[chainId] !== asset.toLowerCase()) {
+        throw new UnsupportedFacilitatorError("maxAmountUsd cannot be safely enforced for this x402 asset; a pinned USDC contract on this chain is required");
+    }
+    const decimalsRaw = extra.decimals ?? 6;
+    const decimals = Number(decimalsRaw);
+    if (decimals !== 6) {
+        throw new UnsupportedFacilitatorError("x402 USDC requirement contradicts the pinned 6 token decimals");
+    }
+    const [mantissa, exponent = "0"] = opts.maxAmountUsd.toString().split("e");
+    const [whole, fraction = ""] = mantissa.split(".");
+    const shift = 6 + Number(exponent) - fraction.length;
+    const digits = BigInt(whole + fraction);
+    const capAtomic = shift >= 0 ? digits * 10n ** BigInt(shift) : digits / 10n ** BigInt(-shift);
+    if (BigInt(value) > capAtomic) {
+        throw new PaymentTooExpensiveError(`x402 wants ${value} USDC atomic units, caller cap allows ${capAtomic}`);
+    }
+}
 export class StandardX402Facilitator {
     static name = "x402";
     name = "x402";
-    /**
-     * True when this is a v2 response — the version we do NOT support.
-     *
-     * Separate from detect() on purpose. detect() answers "can I pay this",
-     * and the honest answer for v2 is no. This answers "is this the standard I
-     * am failing to speak", so the caller can say which.
-     */
-    static isUnsupportedV2(resp) {
-        if (resp.status !== 402)
-            return false;
-        const hdr = resp.headers.get("payment-required");
-        if (!hdr)
-            return false;
-        try {
-            const decoded = JSON.parse(typeof atob === "function"
-                ? atob(hdr)
-                : Buffer.from(hdr, "base64").toString("utf8"));
-            return Number(decoded?.x402Version) >= 2;
-        }
-        catch {
-            return false;
-        }
+    /** Retained for API compatibility; v2 is supported now. */
+    static isUnsupportedV2(_resp) {
+        return false;
     }
     static async detect(resp) {
+        if (readV2Requirement(resp))
+            return true;
         if (resp.status !== 402)
             return false;
-        let body;
         try {
-            body = await resp.clone().json();
+            const body = asRecord(await resp.clone().json());
+            return !!body && "x402Version" in body && Array.isArray(body.accepts);
         }
         catch {
             return false;
         }
-        if (typeof body !== "object" || body === null)
-            return false;
-        const b = body;
-        return "x402Version" in b && Array.isArray(b.accepts);
     }
     async buildAuth(resp, agent, opts) {
+        const v2 = readV2Requirement(resp);
+        if (v2)
+            return this.buildV2Auth(v2, agent, opts);
+        return this.buildLegacyV1Auth(resp, agent, opts);
+    }
+    async buildV2Auth(required, agent, opts) {
+        const accepts = required.accepts;
+        const candidates = accepts.filter((item) => item.scheme === "exact" && parseCaip2Evm(item.network) !== null);
+        const req = candidates[0];
+        if (!req) {
+            throw new UnsupportedFacilitatorError("x402 v2 detected but no supported EVM `exact` requirement was offered " +
+                `(offered: ${accepts.map((a) => `${a.scheme}/${a.network}`).join(", ") || "none"})`);
+        }
+        const network = String(req.network);
+        const chainId = parseCaip2Evm(network);
+        const asset = address(req.asset);
+        const payTo = address(req.payTo);
+        const value = positiveAtomicAmount(req.amount);
+        if (!chainId || !asset || !payTo || !value) {
+            throw new UnsupportedFacilitatorError("x402 v2 EVM exact requirement has invalid network, asset, payTo or amount");
+        }
+        const extra = asRecord(req.extra) ?? {};
+        enforceUsdCap(value, extra, opts, chainId, asset);
+        const timeoutRaw = Number(req.maxTimeoutSeconds ?? 60);
+        if (!Number.isFinite(timeoutRaw) || timeoutRaw <= 0 || timeoutRaw > 3600) {
+            throw new UnsupportedFacilitatorError("x402 v2 maxTimeoutSeconds is invalid or exceeds the 1-hour client safety bound");
+        }
+        const timeout = Math.floor(timeoutRaw);
+        const now = Math.floor(Date.now() / 1000);
+        const validAfter = "0";
+        const validBefore = String(now + timeout);
+        const nonce = randomNonce();
+        const account = await agent.evmAccount();
+        const authorization = {
+            from: account.address,
+            to: payTo,
+            value,
+            validAfter,
+            validBefore,
+            nonce,
+        };
+        const signature = await account.signTypedData({
+            domain: {
+                name: String(extra.name ?? "USD Coin"),
+                version: String(extra.version ?? "2"),
+                chainId,
+                verifyingContract: asset,
+            },
+            types: TRANSFER_WITH_AUTHORIZATION_TYPES,
+            primaryType: "TransferWithAuthorization",
+            message: {
+                from: authorization.from,
+                to: authorization.to,
+                value: BigInt(value),
+                validAfter: 0n,
+                validBefore: BigInt(validBefore),
+                nonce,
+            },
+        });
+        // Preserve the server's exact accepted requirement fields. The v2 verifier
+        // compares authorization parameters to the selected PaymentRequirements.
+        const accepted = { ...req };
+        const paymentPayload = {
+            x402Version: 2,
+            ...(required.resource ? { resource: required.resource } : {}),
+            accepted,
+            payload: { signature, authorization },
+            extensions: {},
+        };
+        return { headers: { "PAYMENT-SIGNATURE": encodeBase64Json(paymentPayload) } };
+    }
+    async buildLegacyV1Auth(resp, agent, opts) {
         const body = (await resp.clone().json());
         const accepts = body.accepts ?? [];
-        // Pick the first `exact` requirement on an EVM chain we know how to pay.
-        const req = accepts.find((a) => a.scheme === "exact" &&
-            typeof a.network === "string" &&
-            CHAIN_IDS[a.network] !== undefined);
+        const req = accepts.find((item) => item.scheme === "exact"
+            && typeof item.network === "string"
+            && LEGACY_CHAIN_IDS[item.network] !== undefined);
         if (!req) {
-            throw new UnsupportedFacilitatorError("standard x402 detected but no payable EVM `exact` requirement " +
+            throw new UnsupportedFacilitatorError("legacy x402 detected but no payable EVM `exact` requirement " +
                 `(offered: ${accepts.map((a) => `${a.scheme}/${a.network}`).join(", ") || "none"})`);
         }
         const network = req.network;
-        const asset = String(req.asset ?? "");
-        const payTo = String(req.payTo ?? "");
-        const value = String(req.maxAmountRequired ?? "0");
-        if (!asset || !payTo) {
-            throw new UnsupportedFacilitatorError("standard x402 requirement is missing `asset` or `payTo`");
+        const asset = address(req.asset);
+        const payTo = address(req.payTo);
+        const value = positiveAtomicAmount(req.maxAmountRequired);
+        if (!asset || !payTo || !value) {
+            throw new UnsupportedFacilitatorError("legacy x402 requirement is missing/invalid asset, payTo or maxAmountRequired");
         }
-        // Best-effort USD cap (assumes 6-decimal USDC/EURC pricing).
-        if (opts.maxAmountUsd !== undefined) {
-            const approxUsd = Number(value) / 1e6;
-            if (Number.isFinite(approxUsd) && approxUsd > opts.maxAmountUsd) {
-                throw new PaymentTooExpensiveError(`x402 wants ~$${approxUsd.toFixed(4)}, caller cap is $${opts.maxAmountUsd.toFixed(4)}`);
-            }
-        }
-        const account = await agent.evmAccount();
-        const extra = (req.extra ?? {});
+        const extra = asRecord(req.extra) ?? {};
+        enforceUsdCap(value, extra, opts, LEGACY_CHAIN_IDS[network], asset);
         const timeout = Number(req.maxTimeoutSeconds ?? 600);
+        const boundedTimeout = Number.isFinite(timeout) && timeout > 0 ? Math.min(Math.floor(timeout), 3600) : 600;
         const now = Math.floor(Date.now() / 1000);
-        const validBefore = String(now + (Number.isFinite(timeout) ? timeout : 600));
+        const validBefore = String(now + boundedTimeout);
         const nonce = randomNonce();
+        const account = await agent.evmAccount();
         const authorization = {
             from: account.address,
             to: payTo,
@@ -141,7 +266,7 @@ export class StandardX402Facilitator {
             domain: {
                 name: String(extra.name ?? "USD Coin"),
                 version: String(extra.version ?? "2"),
-                chainId: CHAIN_IDS[network],
+                chainId: LEGACY_CHAIN_IDS[network],
                 verifyingContract: asset,
             },
             types: TRANSFER_WITH_AUTHORIZATION_TYPES,
@@ -161,18 +286,19 @@ export class StandardX402Facilitator {
             network,
             payload: { signature, authorization },
         };
-        const header = typeof Buffer !== "undefined"
-            ? Buffer.from(JSON.stringify(paymentPayload)).toString("base64")
-            : btoa(JSON.stringify(paymentPayload));
-        return { headers: { "X-PAYMENT": header } };
+        return { headers: { "X-PAYMENT": encodeBase64Json(paymentPayload) } };
     }
 }
 function randomNonce() {
-    const b = new Uint8Array(32);
-    (globalThis.crypto ?? crypto).getRandomValues(b);
-    let s = "0x";
-    for (const x of b)
-        s += x.toString(16).padStart(2, "0");
-    return s;
+    const random = globalThis.crypto;
+    if (!random) {
+        throw new UnsupportedFacilitatorError("secure random source unavailable; refusing to construct x402 authorization nonce");
+    }
+    const bytes = new Uint8Array(32);
+    random.getRandomValues(bytes);
+    let out = "0x";
+    for (const byte of bytes)
+        out += byte.toString(16).padStart(2, "0");
+    return out;
 }
 //# sourceMappingURL=standard-x402.js.map

package/dist/facilitators/standard-x402.js.map

@@ -1 +1 @@
-{"version":3,"file":"standard-x402.js","sourceRoot":"","sources":["../../src/facilitators/standard-x402.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AAGtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,MAAM,SAAS,GAA2B;IACxC,IAAI,EAAE,IAAI;IACV,cAAc,EAAE,KAAK;IACrB,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,GAAG;IACZ,cAAc,EAAE,KAAK;IACrB,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,EAAE;IACZ,SAAS,EAAE,KAAK;IAChB,GAAG,EAAE,EAAE;CACR,CAAC;AAEF,MAAM,iCAAiC,GAAG;IACxC,yBAAyB,EAAE;QACzB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;QACjC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;QACxC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;KACnC;CACO,CAAC;AAEX,MAAM,OAAO,uBAAuB;IAClC,MAAM,CAAU,IAAI,GAAG,MAAM,CAAC;IACrB,IAAI,GAAG,MAAM,CAAC;IAEvB;;;;;;OAMG;IACH,MAAM,CAAC,eAAe,CAAC,IAAc;QACnC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,OAAO,IAAI,KAAK,UAAU;gBACxB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBACX,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAChD,CAAC;YACF,OAAO,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAc;QAChC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC5D,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,OAAO,aAAa,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,SAAS,CACb,IAAc,EACd,KAAY,EACZ,IAAgB;QAEhB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAGtC,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QAEnC,yEAAyE;QACzE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CACtB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,OAAO;YACpB,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAC7B,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS,CACrC,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,2BAA2B,CACnC,gEAAgE;gBAC9D,aAAa,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAiB,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,IAAI,2BAA2B,CACnC,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,6DAA6D;QAC7D,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;YACtC,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;gBAChE,MAAM,IAAI,wBAAwB,CAChC,gBAAgB,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CACvF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;QAE5B,MAAM,aAAa,GAAG;YACpB,IAAI,EAAE,OAAO,CAAC,OAAO;YACrB,EAAE,EAAE,KAAsB;YAC1B,KAAK;YACL,UAAU,EAAE,GAAG;YACf,WAAW;YACX,KAAK;SACN,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;YAC5C,MAAM,EAAE;gBACN,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC;gBACtC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC;gBACrC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;gBAC3B,iBAAiB,EAAE,KAAsB;aAC1C;YACD,KAAK,EAAE,iCAAiC;YACxC,WAAW,EAAE,2BAA2B;YACxC,OAAO,EAAE;gBACP,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,EAAE,EAAE,aAAa,CAAC,EAAE;gBACpB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBACpB,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC;gBAChC,KAAK;aACN;SACF,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC;YAClC,MAAM,EAAE,OAAO;YACf,OAAO;YACP,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE;SACtC,CAAC;QAEF,MAAM,MAAM,GACV,OAAO,MAAM,KAAK,WAAW;YAC3B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAChE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;QAE3C,OAAO,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC;IAC9C,CAAC;;AAGH,SAAS,WAAW;IAClB,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,CAAkB,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"standard-x402.js","sourceRoot":"","sources":["../../src/facilitators/standard-x402.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AAGtB;;;;;;;;;;;;GAYG;AAEH,MAAM,gBAAgB,GAA2B;IAC/C,IAAI,EAAE,IAAI;IACV,cAAc,EAAE,KAAK;IACrB,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IACV,OAAO,EAAE,GAAG;IACZ,cAAc,EAAE,KAAK;IACrB,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,EAAE;IACZ,SAAS,EAAE,KAAK;IAChB,GAAG,EAAE,EAAE;CACR,CAAC;AAEF,6EAA6E;AAC7E,gFAAgF;AAChF,oEAAoE;AACpE,6DAA6D;AAC7D,MAAM,aAAa,GAAqC,MAAM,CAAC,MAAM,CAAC;IACpE,CAAC,EAAE,4CAA4C;IAC/C,EAAE,EAAE,4CAA4C;IAChD,GAAG,EAAE,4CAA4C;IACjD,GAAG,EAAE,4CAA4C;IACjD,IAAI,EAAE,4CAA4C;IAClD,KAAK,EAAE,4CAA4C;IACnD,KAAK,EAAE,4CAA4C;IACnD,KAAK,EAAE,4CAA4C;IACnD,KAAK,EAAE,4CAA4C;CACpD,CAAC,CAAC;AAEH,MAAM,iCAAiC,GAAG;IACxC,yBAAyB,EAAE;QACzB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;QACjC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;QAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;QACvC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;QACxC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;KACnC;CACO,CAAC;AAYX,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,WAAW;QACxC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC/C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO,OAAO,MAAM,KAAK,WAAW;QAClC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC9C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,KAAmB;QACrB,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAc;IACvC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAuC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB;IACrC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjF,OAAO,KAAsB,CAAC;AAChC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAiB,EAAE,IAAgB,EAAE,OAAe,EAAE,KAAa;IACvG,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO;IAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,wBAAwB,CAAC,mDAAmD,CAAC,CAAC;IAC1F,CAAC;IAED,wEAAwE;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9D,MAAM,IAAI,2BAA2B,CACnC,8GAA8G,CAC/G,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,2BAA2B,CAAC,+DAA+D,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,CAAC,QAAQ,EAAE,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3E,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9F,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,wBAAwB,CAChC,cAAc,KAAK,yCAAyC,SAAS,EAAE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,OAAO,uBAAuB;IAClC,MAAM,CAAU,IAAI,GAAG,MAAM,CAAC;IACrB,IAAI,GAAG,MAAM,CAAC;IAEvB,2DAA2D;IAC3D,MAAM,CAAC,eAAe,CAAC,KAAe;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAc;QAChC,IAAI,iBAAiB,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,IAAI,aAAa,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CACb,IAAc,EACd,KAAY,EACZ,IAAgB;QAEhB,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,QAA2B,EAC3B,KAAY,EACZ,IAAgB;QAEhB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAChE,CAAC;QACF,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,2BAA2B,CACnC,wEAAwE;gBACtE,aAAa,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,IAAI,2BAA2B,CACnC,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAElD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,UAAU,GAAG,IAAI,EAAE,CAAC;YACzE,MAAM,IAAI,2BAA2B,CAAC,gFAAgF,CAAC,CAAC;QAC1H,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,GAAG,CAAC;QACvB,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;QAEzC,MAAM,aAAa,GAAG;YACpB,IAAI,EAAE,OAAO,CAAC,OAAO;YACrB,EAAE,EAAE,KAAK;YACT,KAAK;YACL,UAAU;YACV,WAAW;YACX,KAAK;SACN,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;YAC5C,MAAM,EAAE;gBACN,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC;gBACtC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC;gBACrC,OAAO;gBACP,iBAAiB,EAAE,KAAK;aACzB;YACD,KAAK,EAAE,iCAAiC;YACxC,WAAW,EAAE,2BAA2B;YACxC,OAAO,EAAE;gBACP,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,EAAE,EAAE,aAAa,CAAC,EAAE;gBACpB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBACpB,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC;gBAChC,KAAK;aACN;SACF,CAAC,CAAC;QAEH,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,QAAQ,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG;YACrB,WAAW,EAAE,CAAC;YACd,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,QAAQ;YACR,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE;YACrC,UAAU,EAAE,EAAE;SACf,CAAC;QAEF,OAAO,EAAE,OAAO,EAAE,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;IAChF,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,IAAc,EACd,KAAY,EACZ,IAAgB;QAEhB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAGtC,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CACtB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO;eAC5B,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;eAChC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS,CAClD,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,2BAA2B,CACnC,8DAA8D;gBAC5D,aAAa,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAiB,CAAC;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,IAAI,2BAA2B,CAAC,8EAA8E,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QAEpE,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,CAAC;QACrD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3G,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,GAAG,cAAc,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;QAEzC,MAAM,aAAa,GAAG;YACpB,IAAI,EAAE,OAAO,CAAC,OAAO;YACrB,EAAE,EAAE,KAAK;YACT,KAAK;YACL,UAAU,EAAE,GAAG;YACf,WAAW;YACX,KAAK;SACN,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;YAC5C,MAAM,EAAE;gBACN,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC;gBACtC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC;gBACrC,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC;gBAClC,iBAAiB,EAAE,KAAK;aACzB;YACD,KAAK,EAAE,iCAAiC;YACxC,WAAW,EAAE,2BAA2B;YACxC,OAAO,EAAE;gBACP,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,EAAE,EAAE,aAAa,CAAC,EAAE;gBACpB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBACpB,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC;gBAChC,KAAK;aACN;SACF,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC;YAClC,MAAM,EAAE,OAAO;YACf,OAAO;YACP,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE;SACtC,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,gBAAgB,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;IACxE,CAAC;;AAGH,SAAS,WAAW;IAClB,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,2BAA2B,CAAC,kFAAkF,CAAC,CAAC;IAC5H,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO,GAAoB,CAAC;AAC9B,CAAC"}

package/dist/index.d.ts

@@ -1,28 +1,32 @@
 /**
  * AiFinPay agent SDK — Unified Agent Economy layer for AI agents.
  *
- * Recommended (Phase 1+): the chain-opaque AiFinPayAgent surface.
- *
- *   import { AiFinPayAgent } from "@aifinpay/agent";
- *
- *   const agent = await AiFinPayAgent.new();
- *   const res = await agent.call({ provider: "exa", body: { query: "..." } });
- *   const data = await res.json();
- *
- * Legacy (still supported, but @deprecated for new code): the chain-aware
- * Agent class with explicit Solana primitives.
- *
- *   import { Agent } from "@aifinpay/agent";
- *
- *   const agent = Agent.new();
- *   await agent.reserveSeatInvoice({ amountUsd: 1.0, asset: "USDC" });
- *   const res = await agent.pay("https://aifinpay.io/api/stats");
+ * Production-RC note: new value movement must use the canonical v1.3
+ * SettlementClient / executeSettlementInvoice flow. Production signing
+ * additionally requires an independently trusted deployment pin; a
+ * backend-provided address/hash alone is never sufficient authority.
  */
+export { AgentPassportError, normalizeAgentPassportIdentifier, resolveAgentPassport, generateAgentPassportHolderKeypair, signAgentPassportHolderMessage, issueAgentPassport, createAgentPassport, requestAgentPassportWalletBinding, confirmAgentPassportWalletBinding, verifyAgentPassportIssuerSignature, agentPassportWallet, } from "./agentPassport.js";
+export type { AgentPassportNetwork, AgentPassportChainFamily, AgentPassportStatus, AgentPassportWalletStatus, AgentPassportWalletBinding, AgentPassportIssuerProof, AgentPassportIdentity, AgentPassportHolderKeypair, AgentPassportWalletChallenge, } from "./agentPassport.js";
+export { SettlementClient, SettlementProtocolError, SettlementConfirmationPendingError, validateSettlementInvoice, validateTrustedSettlementRoutePin, verifySettlementRouteOnChain, executeSettlementInvoice, SETTLEMENT_CHAIN_IDS, SETTLEMENT_EXPECTED_BPS, } from "./settlement.js";
+export * from "./settlementV14.js";
+export type { SettlementRouteClass, SettlementClientOptions, SettlementEvmNetwork, SettlementRoute, TrustedSettlementRoutePin, TrustedSettlementRouteRegistry, SettlementInvoiceInput, SettlementInvoice, NativeSettlementInvoice, StableSettlementInvoice, SettlementExecution, } from "./settlement.js";
+export { SPLITTER_ROUTES, SPLITTER_GOVERNANCE, SPLITTER_REGISTRY_SOURCE, resolveSplitterRoute, resolveSettlingSplitterRoute, UnknownSplitterRouteError, SplitterRouteNotSettlingError, } from "./splitterRoutes.js";
+export type { SplitterRoute, SplitterRouteChain, SplitterRouteKey, SplitterRouteDeployment, } from "./splitterRoutes.js";
+export { botchain, xrplevm } from "./chains.js";
+export { resolveDeployment, isV14Available, DeploymentResolverError, UnsupportedDevNetworkError, VersionUnavailableError, NoDeploymentError, } from "./deploymentResolver.js";
+export type { SdkEnvironment, ProtocolVersion, RequestedVersion, ResolveDeploymentOptions, ResolvedDeployment, } from "./deploymentResolver.js";
+export { V14_DEPLOYMENTS, V14_DEPLOYMENTS_SOURCE, V14_DEV_NETWORKS, } from "./v14Deployments.generated.js";
+export type { V14Deployment, V14Splitter, V14Safe, } from "./v14Deployments.generated.js";
+export { resolveSolanaDeployment, isSolanaV14Available, UnsupportedSolanaDevNetworkError, SolanaVersionUnavailableError, SolanaV12UnavailableError, NoSolanaDeploymentError, } from "./solanaDeploymentResolver.js";
+export type { SolanaProtocolVersion, SolanaRequestedVersion, ResolveSolanaDeploymentOptions, ResolvedSolanaDeployment, } from "./solanaDeploymentResolver.js";
+export { SOLANA_V14_DEPLOYMENTS, SOLANA_V14_DEPLOYMENTS_SOURCE, SOLANA_DEV_NETWORKS, } from "./solanaV14Deployments.generated.js";
+export type { SolanaV14Deployment, SolanaNetwork, } from "./solanaV14Deployments.generated.js";
 export { AiFinPayAgent, SPLITTER_DEPLOYMENTS, paymentIdFor } from "./unifiedAgent.js";
 export type { AiFinPayAgentOptions, CallOptions, ChainId, SplitterChainName, SplitterDeployment, AnyEvmChainName, ProviderEntry, BalanceSnapshot, ReputationSnapshot, BudgetCaps, SessionHandle, SessionReceipt, NetworkAgent, } from "./unifiedAgent.js";
 export { ProviderUnknownError, WrongChainBalanceError, InsufficientFundsError, BudgetCapExceededError, SettlementError, SessionExpiredError, } from "./unifiedAgent.js";
-export { aifp1Fetch, Aifp1ReceiptCache, scopeCovers, prefixHint, parseGatewayUrl, idempotencyKeyFor, } from "./aifp1.js";
-export type { Aifp1Scope, Aifp1Challenge, Aifp1Quote, Aifp1PayResult, Aifp1CachedReceipt, Aifp1FetchOptions, Aifp1Deps, } from "./aifp1.js";
+export { aifp1Fetch, Aifp1ReceiptCache, scopeCovers, prefixHint, parseGatewayUrl, idempotencyKeyFor, paymentAuthorizationMessage, recoverAifp1Payment, describeQuote, } from "./aifp1.js";
+export type { Aifp1PaymentRecovery, Aifp1PaymentSigner, Aifp1Scope, Aifp1Challenge, Aifp1Quote, Aifp1PayResult, Aifp1CachedReceipt, Aifp1FetchOptions, Aifp1Deps, QuoteSummary, } from "./aifp1.js";
 export { Aifp1Error, Aifp1QuoteError, Aifp1PayError, Aifp1SettlementUnsupportedError, Aifp1ReceiptRejectedError, } from "./aifp1.js";
 export { bridgeQuote, bridgeExecute, bridgeWaitForArrival, EVM_CHAINS, USDC_NATIVE, USDC_BRIDGED, } from "./crossChain.js";
 export type { BridgeQuote, BridgeReceipt, BridgeQuoteOptions, EvmChainName, } from "./crossChain.js";
@@ -32,4 +36,8 @@ export { AiFinPayError, FacilitatorNotImplementedError, FundingTimeoutError, Pay
 export { AiFinPayFacilitator, CoinbaseX402Facilitator, REGISTERED, detectFacilitator, } from "./facilitators/index.js";
 export type { AuthPayload, Facilitator, FacilitatorClass, PayOptions, } from "./facilitators/index.js";
 export { type SpendLedger, MemorySpendLedger, FileSpendLedger, } from "./spendLedger.js";
+export { deriveWallet, newWallet } from "./wallet.js";
+export { getAgentHistory } from "./agentHistory.js";
+export type { AgentHistoryOptions } from "./agentHistory.js";
+export type { DerivedWallet } from "./wallet.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtF,YAAY,EACV,oBAAoB,EACpB,WAAW,EACX,OAAO,EACP,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,cAAc,EACd,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,UAAU,EACV,eAAe,EACf,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,UAAU,EACV,cAAc,EACd,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,UAAU,EACV,eAAe,EACf,aAAa,EACb,+BAA+B,EAC/B,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AAMpB,OAAO,EACL,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,UAAU,EACV,WAAW,EACX,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,YAAY,GACb,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,aAAa,EACb,8BAA8B,EAC9B,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EACjB,2BAA2B,EAC3B,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,UAAU,EACV,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,UAAU,GACX,MAAM,yBAAyB,CAAC;AAKjC,OAAO,EACL,KAAK,WAAW,EAChB,iBAAiB,EACjB,eAAe,GAChB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,kBAAkB,EAClB,gCAAgC,EAChC,oBAAoB,EACpB,kCAAkC,EAClC,8BAA8B,EAC9B,kBAAkB,EAClB,mBAAmB,EACnB,iCAAiC,EACjC,iCAAiC,EACjC,kCAAkC,EAClC,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,kCAAkC,EAClC,yBAAyB,EACzB,iCAAiC,EACjC,4BAA4B,EAC5B,wBAAwB,EACxB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,YAAY,EACV,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,EACpB,eAAe,EACf,yBAAyB,EACzB,8BAA8B,EAC9B,sBAAsB,EACtB,iBAAiB,EACjB,uBAAuB,EACvB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,4BAA4B,EAC5B,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,0BAA0B,EAC1B,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,aAAa,EACb,WAAW,EACX,OAAO,GACR,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,gCAAgC,EAChC,6BAA6B,EAC7B,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,qBAAqB,EACrB,sBAAsB,EACtB,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,mBAAmB,GACpB,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,mBAAmB,EACnB,aAAa,GACd,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtF,YAAY,EACV,oBAAoB,EACpB,WAAW,EACX,OAAO,EACP,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,cAAc,EACd,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,2BAA2B,EAC3B,mBAAmB,EACnB,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,oBAAoB,EACpB,kBAAkB,EAClB,UAAU,EACV,cAAc,EACd,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,SAAS,EACT,YAAY,GACb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,UAAU,EACV,eAAe,EACf,aAAa,EACb,+BAA+B,EAC/B,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,UAAU,EACV,WAAW,EACX,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,YAAY,GACb,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,aAAa,EACb,8BAA8B,EAC9B,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EACjB,2BAA2B,EAC3B,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,UAAU,EACV,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,UAAU,GACX,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,KAAK,WAAW,EAChB,iBAAiB,EACjB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,45 +1,37 @@
 /**
  * AiFinPay agent SDK — Unified Agent Economy layer for AI agents.
  *
- * Recommended (Phase 1+): the chain-opaque AiFinPayAgent surface.
- *
- *   import { AiFinPayAgent } from "@aifinpay/agent";
- *
- *   const agent = await AiFinPayAgent.new();
- *   const res = await agent.call({ provider: "exa", body: { query: "..." } });
- *   const data = await res.json();
- *
- * Legacy (still supported, but @deprecated for new code): the chain-aware
- * Agent class with explicit Solana primitives.
- *
- *   import { Agent } from "@aifinpay/agent";
- *
- *   const agent = Agent.new();
- *   await agent.reserveSeatInvoice({ amountUsd: 1.0, asset: "USDC" });
- *   const res = await agent.pay("https://aifinpay.io/api/stats");
+ * Production-RC note: new value movement must use the canonical v1.3
+ * SettlementClient / executeSettlementInvoice flow. Production signing
+ * additionally requires an independently trusted deployment pin; a
+ * backend-provided address/hash alone is never sufficient authority.
  */
-// ── Unified surface (Phase 1+) ───────────────────────────────────────────
+// ── AIFP-3 global Agent Passport ─────────────────────────────────────────
+export { AgentPassportError, normalizeAgentPassportIdentifier, resolveAgentPassport, generateAgentPassportHolderKeypair, signAgentPassportHolderMessage, issueAgentPassport, createAgentPassport, requestAgentPassportWalletBinding, confirmAgentPassportWalletBinding, verifyAgentPassportIssuerSignature, agentPassportWallet, } from "./agentPassport.js";
+// ── Canonical route-specific v1.3 settlement ─────────────────────────────
+export { SettlementClient, SettlementProtocolError, SettlementConfirmationPendingError, validateSettlementInvoice, validateTrustedSettlementRoutePin, verifySettlementRouteOnChain, executeSettlementInvoice, SETTLEMENT_CHAIN_IDS, SETTLEMENT_EXPECTED_BPS, } from "./settlement.js";
+export * from "./settlementV14.js";
+// ── Unified surface (Phase 1+ / legacy callers remain source-compatible) ──
+export { SPLITTER_ROUTES, SPLITTER_GOVERNANCE, SPLITTER_REGISTRY_SOURCE, resolveSplitterRoute, resolveSettlingSplitterRoute, UnknownSplitterRouteError, SplitterRouteNotSettlingError, } from "./splitterRoutes.js";
+export { botchain, xrplevm } from "./chains.js";
+// ── Environment & protocol-version resolver (AIFINP-223) ─────────────────
+export { resolveDeployment, isV14Available, DeploymentResolverError, UnsupportedDevNetworkError, VersionUnavailableError, NoDeploymentError, } from "./deploymentResolver.js";
+export { V14_DEPLOYMENTS, V14_DEPLOYMENTS_SOURCE, V14_DEV_NETWORKS, } from "./v14Deployments.generated.js";
+// ── Solana environment & protocol-version resolver (AIFINP-224) ──────────
+export { resolveSolanaDeployment, isSolanaV14Available, UnsupportedSolanaDevNetworkError, SolanaVersionUnavailableError, SolanaV12UnavailableError, NoSolanaDeploymentError, } from "./solanaDeploymentResolver.js";
+export { SOLANA_V14_DEPLOYMENTS, SOLANA_V14_DEPLOYMENTS_SOURCE, SOLANA_DEV_NETWORKS, } from "./solanaV14Deployments.generated.js";
 export { AiFinPayAgent, SPLITTER_DEPLOYMENTS, paymentIdFor } from "./unifiedAgent.js";
 export { ProviderUnknownError, WrongChainBalanceError, InsufficientFundsError, BudgetCapExceededError, SettlementError, SessionExpiredError, } from "./unifiedAgent.js";
 // ── AIFP-1 merchant paywall (gateway.aifinpay.io) ────────────────────────
-// The flow is normally reached as a method — `agent.fetchPaid(url)` — which
-// wires in the agent's own settlement and budget caps. The pieces below are
-// exported for callers who need to reason about a batch without making one:
-// inspect held receipts, ask whether a scope covers a path, or drive the
-// protocol from a wallet that is not an AiFinPayAgent.
-export { aifp1Fetch, Aifp1ReceiptCache, scopeCovers, prefixHint, parseGatewayUrl, idempotencyKeyFor, } from "./aifp1.js";
+export { aifp1Fetch, Aifp1ReceiptCache, scopeCovers, prefixHint, parseGatewayUrl, idempotencyKeyFor, paymentAuthorizationMessage, recoverAifp1Payment, describeQuote, } from "./aifp1.js";
 export { Aifp1Error, Aifp1QuoteError, Aifp1PayError, Aifp1SettlementUnsupportedError, Aifp1ReceiptRejectedError, } from "./aifp1.js";
-// ── Cross-chain orchestration (Phase 1.5a — EVM↔EVM via LiFi) ────────────
-// Standalone primitives — also exposed as methods on AiFinPayAgent.
-// Use the methods (agent.bridgeQuote / agent.bridgeExecute) unless you
-// need to orchestrate from a wallet that isn't an AiFinPayAgent instance.
+// ── Cross-chain orchestration ─────────────────────────────────────────────
 export { bridgeQuote, bridgeExecute, bridgeWaitForArrival, EVM_CHAINS, USDC_NATIVE, USDC_BRIDGED, } from "./crossChain.js";
-// ── Legacy chain-aware surface (kept for back-compat) ───────────────────
+// ── Legacy chain-aware public API (back-compat only) ─────────────────────
 export { Agent } from "./agent.js";
 export { AiFinPayError, FacilitatorNotImplementedError, FundingTimeoutError, PaymentTooExpensiveError, SeatNotFoundError, UnsupportedFacilitatorError, X402Error, } from "./errors.js";
 export { AiFinPayFacilitator, CoinbaseX402Facilitator, REGISTERED, detectFacilitator, } from "./facilitators/index.js";
-// Spend accounting for the daily cap. Exported so an agent fleet spanning more
-// than one host can supply a ledger that can answer for all of them — a lock
-// file on one machine cannot.
 export { MemorySpendLedger, FileSpendLedger, } from "./spendLedger.js";
+export { deriveWallet, newWallet } from "./wallet.js";
+export { getAgentHistory } from "./agentHistory.js";
 //# sourceMappingURL=index.js.map