@ar-agents/mercadopago 0.18.2 → 0.18.4

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.18.4
+
+### Patch Changes
+
+- [`e73be19`](https://github.com/ar-agents/ar-agents/commit/e73be1945206b3f2ebce0eed13a74ada238b6c22) Thanks [@naza00000](https://github.com/naza00000)! - Make `VercelKVRateLimiter` token acquisition atomic (DeepSec MEDIUM, `rate-limit-bypass`).
+
+  `acquire()` / `tryAcquire()` previously did a non-atomic read → refill → check → decrement → write across separate KV calls, so concurrent callers could all observe the same lone token and each succeed — bypassing the global limit. Acquisition now runs a single server-side Upstash Lua `EVAL` script, so the refill-and-consume is atomic across all serverless instances and the limit holds exactly (no over-spend window). `learnFromHeaders` uses the same atomic primitive for its adaptive clamp. Behavior and the public API are unchanged.
+
+## 0.18.3
+
+### Patch Changes
+
+- Rebuild and republish from PII-scrubbed source. Versions published before the 2026-06-17 fixture scrub shipped a real CUIT and address in their README/AGENTS/cookbook/dist; this rebuild from the now-clean source removes them. No API changes. The earlier contaminated versions are deprecated on npm.
+
 ## 0.18.2
 
 ### Patch Changes

package/cookbook/01-checkout-pro-basic.ts

@@ -21,7 +21,7 @@
  * as a Vercel Edge Function for sub-100ms global cold starts.
  */
 
-import { Experimental_Agent as Agent, stepCountIs } from "ai";
+import { Experimental_Agent as Agent, isStepCount } from "ai";
 import {
   InMemoryStateAdapter,
   MercadoPagoClient,
@@ -50,7 +50,7 @@ Cuando el cliente quiere comprar:
     backUrl: "https://yourapp.com/payment-result",
     notificationUrl: "https://yourapp.com/api/mp/webhook",
   }),
-  stopWhen: stepCountIs(5),
+  stopWhen: isStepCount(5),
 });
 
 // In a Next.js route handler:

package/cookbook/09-otel-wired.ts

@@ -51,7 +51,7 @@
  */
 
 import { trace, context as otelContext } from "@opentelemetry/api";
-import { Experimental_Agent as Agent, stepCountIs } from "ai";
+import { Experimental_Agent as Agent, isStepCount } from "ai";
 import {
   MercadoPagoClient,
   mercadoPagoTools,
@@ -108,7 +108,7 @@ export const agent = new Agent({
   model: "anthropic/claude-sonnet-4-6",
   instructions: "You are a billing assistant for a SaaS in Argentina.",
   tools,
-  stopWhen: stepCountIs(8),
+  stopWhen: isStepCount(8),
 });
 
 /**

package/cookbook/10-cross-package-billing.ts

@@ -22,7 +22,7 @@
  *   ATTESTATION_HMAC_SECRET
  */
 
-import { Experimental_Agent as Agent, stepCountIs, type ToolSet } from "ai";
+import { Experimental_Agent as Agent, isStepCount, type ToolSet } from "ai";
 
 // 1. Mercado Pago — always present, the headline package.
 import {
@@ -135,7 +135,7 @@ export async function buildBillingAgent() {
       "comprobante por WhatsApp con `send_text`. Respondé en castellano " +
       "rioplatense, breve, sin emojis.",
     tools,
-    stopWhen: stepCountIs(15), // higher than usual — multi-package flows take steps
+    stopWhen: isStepCount(15), // higher than usual — multi-package flows take steps
   });
 }
 

package/cookbook/17-usa-llc-companion.ts

@@ -59,7 +59,7 @@
  * # Sample agent loop (USA-LLC side, using Vercel AI SDK 6 + MCP client)
  */
 
-import { Experimental_Agent as Agent, stepCountIs } from "ai";
+import { Experimental_Agent as Agent, isStepCount } from "ai";
 // In a USA agent's project, you'd use the MCP client from `ai` v6 (or `@modelcontextprotocol/sdk`)
 // to connect to the locally-spawned ar-agents MCP server. The agent then sees
 // every @ar-agents/* tool in its tool list.
@@ -86,7 +86,7 @@ async function exampleAgentLoop() {
       "yourself.",
     // tools, // injected from MCP client
     tools: {} as Record<string, unknown>,
-    stopWhen: stepCountIs(10),
+    stopWhen: isStepCount(10),
   });
 
   // What the agent does behind this prompt:

package/cookbook/23-astro-arg-reference-customer.ts

@@ -125,7 +125,7 @@ export async function POST(req: Request) {
   try {
     const result = streamText({
       model: "anthropic/claude-sonnet-4-6",
-      system: SYSTEM,
+      instructions: SYSTEM,
       messages: modelMessages,
       tools,
       stopWhen: ({ steps }) => steps.length >= 8,

package/cookbook/25-sociedad-ia-quarterly-compliance.ts

@@ -503,7 +503,7 @@ export async function generateQuarterlyComplianceReport(
 // {
 //   "sociedad": {
 //     "denominacion": "Sociedad-IA Demo SAS",
-//     "operatorCuit": "20-41758101-5",
+//     "operatorCuit": "20-12345678-6",
 //     "jurisdiction": "AR",
 //     "rfcConformance": ["rfc-001-v1", "rfc-004-draft"],
 //     "auditBaseUrl": "https://ar-agents.ar"

package/dist/index.cjs

@@ -5174,7 +5174,7 @@ function buildAllTools(client, options, desc) {
       description: desc("validate_tax_id"),
       inputSchema: zod.z.object({
         tax_id: zod.z.string().min(1).describe(
-          "The tax ID to validate. Accepts any format with or without separators (20-41758101-5, 20.41758101.5, 20417581015 all work for AR CUIT)."
+          "The tax ID to validate. Accepts any format with or without separators (20-12345678-6, 20.12345678.6, 20123456786 all work for AR CUIT)."
         ),
         type: zod.z.enum([
           "DNI",