@asgcard/pay 0.1.1

package/dist/esm/adapters/stripe.js

@@ -0,0 +1,334 @@
+import { noopLogger } from '../logger';
+import { buildMppCredential, base64urlEncode, } from '../mpp';
+/**
+ * Required Stripe API version for MPP features.
+ * @see https://docs.stripe.com/payments/machine/mpp
+ */
+const STRIPE_API_VERSION = '2026-03-04.preview';
+// ─── Stripe MPP Adapter ─────────────────────────────────────────────
+/**
+ * StripePaymentAdapter — Machine Payments Protocol (MPP) settlement.
+ *
+ * Implements the full MPP flow for Stripe:
+ * 1. Receives 402 + `WWW-Authenticate: Payment` challenge
+ * 2. Creates a Shared Payment Token (SPT) via Stripe API
+ * 3. Builds MPP Credential with SPT
+ * 4. Returns credential for `Authorization: Payment` header
+ *
+ * Works in two modes:
+ * - **Autonomous** (with paymentMethodId): Creates SPTs automatically
+ * - **Delegated** (without): Requires external SPT provisioning via `setSptToken()`
+ *
+ * @example
+ * ```ts
+ * // Autonomous mode — agent has a payment method on file
+ * const adapter = new StripePaymentAdapter({
+ *   stripeSecretKey: 'sk_test_...',
+ *   networkId: 'my-network',
+ *   paymentMethodId: 'pm_card_visa', // test card
+ * });
+ *
+ * // Delegated mode — external system provides SPTs
+ * const adapter = new StripePaymentAdapter({
+ *   stripeSecretKey: 'sk_test_...',
+ * });
+ * adapter.setSptToken('spt_...');
+ * ```
+ *
+ * @see https://mpp.dev/payment-methods/stripe — MPP Stripe method spec
+ * @see https://docs.stripe.com/agentic-commerce/concepts/shared-payment-tokens
+ */
+export class StripePaymentAdapter {
+    chainName = 'Stripe MPP';
+    caip2Id;
+    secretKey;
+    networkId;
+    paymentMethodTypes;
+    paymentMethodId;
+    currency;
+    sptExpirySeconds;
+    stripeApiBase;
+    log;
+    /** Externally-provided SPT for delegated mode */
+    externalSpt = null;
+    /** Last MPP challenge processed (for credential building) */
+    lastChallenge = null;
+    constructor(options) {
+        if (!options.stripeSecretKey) {
+            throw new Error('StripePaymentAdapter requires a stripeSecretKey. ' +
+                'Get one from https://dashboard.stripe.com/apikeys');
+        }
+        this.secretKey = options.stripeSecretKey;
+        this.networkId = options.networkId ?? 'internal';
+        this.paymentMethodTypes = options.paymentMethodTypes ?? ['card'];
+        this.paymentMethodId = options.paymentMethodId ?? null;
+        this.currency = options.currency ?? 'usd';
+        this.sptExpirySeconds = options.sptExpirySeconds ?? 300;
+        this.stripeApiBase = options.stripeApiBase ?? 'https://api.stripe.com';
+        this.log = options.logger ?? noopLogger;
+        // CAIP-2-style identifier for Stripe
+        this.caip2Id = this.secretKey.startsWith('sk_live')
+            ? 'stripe:live'
+            : 'stripe:test';
+    }
+    /**
+     * Set or update an externally-provided SPT token.
+     * Used in delegated mode when an external system provides the SPT.
+     */
+    setSptToken(token) {
+        this.externalSpt = token;
+        this.log(`[Stripe/MPP] 🔑 External SPT set: ${token.slice(0, 16)}…`);
+    }
+    /**
+     * Store a parsed MPP challenge for credential building.
+     * Called by OwsClient when a 402 with `WWW-Authenticate: Payment method="stripe"` is received.
+     */
+    setMppChallenge(challenge) {
+        this.lastChallenge = challenge;
+        this.log(`[Stripe/MPP] 📋 Challenge received: id=${challenge.id}, realm=${challenge.realm}`);
+    }
+    /**
+     * Get the last built MPP credential (base64url-encoded).
+     * Used by OwsClient to populate the `Authorization: Payment` header.
+     */
+    getLastCredential() {
+        return this._lastCredential;
+    }
+    _lastCredential = null;
+    getAddress() {
+        if (this.externalSpt)
+            return `spt:${this.externalSpt.slice(0, 16)}…`;
+        if (this.paymentMethodId)
+            return `pm:${this.paymentMethodId.slice(0, 16)}…`;
+        return `stripe:${this.secretKey.slice(0, 12)}…`;
+    }
+    /**
+     * Execute a Stripe MPP payment.
+     *
+     * This method handles the full SPT lifecycle:
+     * 1. If an external SPT is set → use it directly
+     * 2. If paymentMethodId is set → create SPT autonomously via Stripe API
+     * 3. Build MPP Credential with the SPT
+     * 4. Return credential string (used as "tx hash" equivalent)
+     *
+     * @param destination - Recipient (Stripe account or payment endpoint)
+     * @param amount - Amount in smallest currency unit (e.g. cents)
+     * @param network - Network identifier (ignored for Stripe, kept for interface compat)
+     * @returns Base64url-encoded MPP credential string, or null on failure
+     */
+    async pay(destination, amount, network) {
+        const tag = '[Stripe/MPP]';
+        try {
+            const amountInt = parseInt(amount, 10);
+            if (isNaN(amountInt) || amountInt <= 0) {
+                this.log(`${tag} ❌ Invalid amount: ${amount}`);
+                return null;
+            }
+            const formatted = `$${(amountInt / 100).toFixed(2)}`;
+            this.log(`${tag} 🚀 ${formatted} (${this.currency.toUpperCase()}) → ${destination.slice(0, 20)}…`);
+            // ── Step 1: Get or create SPT ──────────────────────────────
+            let sptId;
+            if (this.externalSpt) {
+                // Delegated mode: use externally-provided SPT
+                sptId = this.externalSpt;
+                this.log(`${tag} 🔑 Using external SPT: ${sptId.slice(0, 16)}…`);
+            }
+            else if (this.paymentMethodId) {
+                // Autonomous mode: create SPT via Stripe API
+                this.log(`${tag} 🔧 Creating SPT for pm: ${this.paymentMethodId.slice(0, 16)}…`);
+                const spt = await this.createSpt(amountInt, this.currency);
+                if (!spt) {
+                    this.log(`${tag} ❌ SPT creation failed`);
+                    return null;
+                }
+                sptId = spt.id;
+                this.log(`${tag} ✅ SPT created: ${sptId.slice(0, 20)}…`);
+            }
+            else {
+                this.log(`${tag} ❌ No SPT and no paymentMethodId — cannot pay autonomously`);
+                return null;
+            }
+            // ── Step 2: Build MPP Credential ───────────────────────────
+            if (this.lastChallenge) {
+                // Full MPP flow: build proper credential with challenge echo
+                const credential = buildMppCredential(this.lastChallenge, this.getAddress(), { spt: sptId });
+                this._lastCredential = credential;
+                this.log(`${tag} 📝 Credential built (challenge: ${this.lastChallenge.id})`);
+                return credential;
+            }
+            else {
+                // Fallback: SPT-only mode (direct Stripe API, no MPP challenge)
+                // Create PaymentIntent directly
+                this.log(`${tag} 💳 No MPP challenge — creating PaymentIntent directly`);
+                const pi = await this.createPaymentIntent(sptId, amountInt, this.currency);
+                if (!pi) {
+                    this.log(`${tag} ❌ PaymentIntent creation failed`);
+                    return null;
+                }
+                this.log(`${tag} ✅ PaymentIntent: ${pi.id} (${pi.status})`);
+                return pi.id;
+            }
+        }
+        catch (error) {
+            this.log(`${tag} ❌ ${error.message}`);
+            return null;
+        }
+    }
+    // ─── Stripe API Methods ─────────────────────────────────────────
+    /**
+     * Create a Shared Payment Token (SPT) via Stripe API.
+     *
+     * Test mode: POST /v1/test_helpers/shared_payment/granted_tokens
+     * Live mode: POST /v1/shared_payment/issued_tokens (TBD by Stripe)
+     */
+    async createSpt(amount, currency) {
+        const isTest = this.secretKey.startsWith('sk_test');
+        const endpoint = isTest
+            ? '/v1/test_helpers/shared_payment/granted_tokens'
+            : '/v1/shared_payment/issued_tokens';
+        const expiresAt = Math.floor((Date.now() + this.sptExpirySeconds * 1000) / 1000);
+        const body = new URLSearchParams();
+        body.append('payment_method', this.paymentMethodId);
+        body.append('usage_limits[currency]', currency);
+        body.append('usage_limits[max_amount]', amount.toString());
+        body.append('usage_limits[expires_at]', expiresAt.toString());
+        try {
+            const response = await fetch(`${this.stripeApiBase}${endpoint}`, {
+                method: 'POST',
+                headers: {
+                    'Authorization': `Basic ${Buffer.from(`${this.secretKey}:`).toString('base64')}`,
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                    'Stripe-Version': STRIPE_API_VERSION,
+                },
+                body,
+            });
+            if (!response.ok) {
+                const error = await response.json();
+                this.log(`[Stripe/MPP] ❌ SPT API error: ${error?.error?.message || response.statusText}`);
+                return null;
+            }
+            return await response.json();
+        }
+        catch (error) {
+            this.log(`[Stripe/MPP] ❌ SPT request failed: ${error.message}`);
+            return null;
+        }
+    }
+    /**
+     * Create and confirm a PaymentIntent using an SPT.
+     * Used in fallback mode (no MPP challenge, direct Stripe API).
+     */
+    async createPaymentIntent(sptId, amount, currency) {
+        const body = new URLSearchParams();
+        body.append('amount', amount.toString());
+        body.append('currency', currency);
+        body.append('confirm', 'true');
+        body.append('automatic_payment_methods[enabled]', 'true');
+        body.append('payment_method_data[shared_payment_granted_token]', sptId);
+        body.append('metadata[protocol]', 'mpp');
+        body.append('metadata[agent]', 'asgcard-pay');
+        try {
+            const response = await fetch(`${this.stripeApiBase}/v1/payment_intents`, {
+                method: 'POST',
+                headers: {
+                    'Authorization': `Basic ${Buffer.from(`${this.secretKey}:`).toString('base64')}`,
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                    'Stripe-Version': STRIPE_API_VERSION,
+                },
+                body,
+            });
+            if (!response.ok) {
+                const error = await response.json();
+                this.log(`[Stripe/MPP] ❌ PI error: ${error?.error?.message || response.statusText}`);
+                return null;
+            }
+            return await response.json();
+        }
+        catch (error) {
+            this.log(`[Stripe/MPP] ❌ PI request failed: ${error.message}`);
+            return null;
+        }
+    }
+    /**
+     * Create a crypto deposit-mode PaymentIntent.
+     * This is the verified-working flow for MPP on Stripe.
+     * Uses Tempo network + USDC stablecoins.
+     *
+     * @param amount - Amount in cents (e.g. 100 = $1.00)
+     * @param currency - Currency code (default: 'usd')
+     * @returns PaymentIntentResult with deposit address, or null on failure
+     *
+     * @example
+     * ```ts
+     * const pi = await adapter.createCryptoPaymentIntent(100, 'usd');
+     * // pi.next_action.crypto_display_details.deposit_addresses.tempo.address
+     * ```
+     */
+    async createCryptoPaymentIntent(amount, currency = 'usd') {
+        const body = new URLSearchParams();
+        body.append('amount', amount.toString());
+        body.append('currency', currency);
+        body.append('payment_method_types[]', 'crypto');
+        body.append('payment_method_data[type]', 'crypto');
+        body.append('payment_method_options[crypto][mode]', 'deposit');
+        body.append('payment_method_options[crypto][deposit_options][networks][]', 'tempo');
+        body.append('confirm', 'true');
+        body.append('metadata[protocol]', 'mpp');
+        body.append('metadata[agent]', 'asgcard-pay');
+        try {
+            const response = await fetch(`${this.stripeApiBase}/v1/payment_intents`, {
+                method: 'POST',
+                headers: {
+                    'Authorization': `Basic ${Buffer.from(`${this.secretKey}:`).toString('base64')}`,
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                    'Stripe-Version': STRIPE_API_VERSION,
+                },
+                body,
+            });
+            if (!response.ok) {
+                const error = await response.json();
+                this.log(`[Stripe/MPP] ❌ Crypto PI error: ${error?.error?.message || response.statusText}`);
+                return null;
+            }
+            const pi = await response.json();
+            this.log(`[Stripe/MPP] ✅ Crypto PI: ${pi.id} (${pi.status})`);
+            // Extract deposit address if available
+            const depositAddr = pi.next_action?.crypto_display_details?.deposit_addresses?.tempo?.address;
+            if (depositAddr) {
+                this.log(`[Stripe/MPP] 📬 Deposit → ${depositAddr}`);
+            }
+            return pi;
+        }
+        catch (error) {
+            this.log(`[Stripe/MPP] ❌ Crypto PI request failed: ${error.message}`);
+            return null;
+        }
+    }
+    /**
+     * Build and return a fully-formed MPP Challenge for server-side use.
+     * Useful if you want to GATE your own API with MPP 402.
+     *
+     * @param amount - Amount to charge (in smallest unit)
+     * @param options - Challenge options
+     * @returns WWW-Authenticate header value
+     */
+    buildServerChallenge(amount, options = {}) {
+        const currency = options.currency ?? this.currency;
+        const expires = new Date(Date.now() + (options.expiresInSeconds ?? this.sptExpirySeconds) * 1000).toISOString();
+        // Build the request object
+        const requestObj = {
+            amount,
+            currency,
+            description: options.description,
+            methodDetails: {
+                networkId: this.networkId,
+                paymentMethodTypes: this.paymentMethodTypes,
+            },
+        };
+        const requestB64 = base64urlEncode(JSON.stringify(requestObj));
+        // Generate challenge ID (HMAC-bound in production, random for now)
+        const challengeId = `ch_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 10)}`;
+        return `Payment id="${challengeId}", realm="pay.asgcard.dev", method="stripe", intent="charge", expires="${expires}", request="${requestB64}"`;
+    }
+}
+//# sourceMappingURL=stripe.js.map

package/dist/esm/adapters/stripe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.js","sourceRoot":"","sources":["../../../src/adapters/stripe.ts"],"names":[],"mappings":"AACA,OAAO,EAAU,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAKL,kBAAkB,EAClB,eAAe,GAChB,MAAM,QAAQ,CAAC;AA6FhB;;;GAGG;AACH,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD,uEAAuE;AAEvE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,OAAO,oBAAoB;IACf,SAAS,GAAG,YAAY,CAAC;IACzB,OAAO,CAAS;IAExB,SAAS,CAAS;IAClB,SAAS,CAAS;IAClB,kBAAkB,CAAW;IAC7B,eAAe,CAAgB;IAC/B,QAAQ,CAAS;IACjB,gBAAgB,CAAS;IACzB,aAAa,CAAS;IACtB,GAAG,CAAS;IAEpB,iDAAiD;IACzC,WAAW,GAAkB,IAAI,CAAC;IAE1C,6DAA6D;IACrD,aAAa,GAAwB,IAAI,CAAC;IAElD,YAAY,OAA6B;QACvC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,mDAAmD;gBACnD,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;QACjD,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;QACvD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC;QAC1C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,GAAG,CAAC;QACxD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,wBAAwB,CAAC;QACvE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC;QAExC,qCAAqC;QACrC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;YACjD,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,aAAa,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,KAAa;QACvB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,qCAAqC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACvE,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,SAAuB;QACrC,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,0CAA0C,SAAS,CAAC,EAAE,WAAW,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED;;;OAGG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IACO,eAAe,GAAkB,IAAI,CAAC;IAE9C,UAAU;QACR,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;QACrE,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;QAC5E,OAAO,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;IAClD,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,GAAG,CACP,WAAmB,EACnB,MAAc,EACd,OAAe;QAEf,MAAM,GAAG,GAAG,cAAc,CAAC;QAE3B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,sBAAsB,MAAM,EAAE,CAAC,CAAC;gBAC/C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,OAAO,SAAS,KAAK,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YAEnG,8DAA8D;YAC9D,IAAI,KAAa,CAAC;YAElB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,8CAA8C;gBAC9C,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC;gBACzB,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,2BAA2B,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YACnE,CAAC;iBAAM,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBAChC,6CAA6C;gBAC7C,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,4BAA4B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBACjF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,wBAAwB,CAAC,CAAC;oBACzC,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC;gBACf,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,mBAAmB,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YAC3D,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,4DAA4D,CAAC,CAAC;gBAC7E,OAAO,IAAI,CAAC;YACd,CAAC;YAED,8DAA8D;YAC9D,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,6DAA6D;gBAC7D,MAAM,UAAU,GAAG,kBAAkB,CACnC,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,UAAU,EAAE,EACjB,EAAE,GAAG,EAAE,KAAK,EAAsB,CACnC,CAAC;gBACF,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC;gBAClC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,oCAAoC,IAAI,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC7E,OAAO,UAAU,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,gEAAgE;gBAChE,gCAAgC;gBAChC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,wDAAwD,CAAC,CAAC;gBACzE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC3E,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,kCAAkC,CAAC,CAAC;oBACnD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,qBAAqB,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC5D,OAAO,EAAE,CAAC,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,mEAAmE;IAEnE;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,QAAgB;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM;YACrB,CAAC,CAAC,gDAAgD;YAClD,CAAC,CAAC,kCAAkC,CAAC;QAEvC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAEjF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,eAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,0BAA0B,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,0BAA0B,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE9D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,aAAa,GAAG,QAAQ,EAAE,EAAE;gBAC/D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,eAAe,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;oBAChF,cAAc,EAAE,mCAAmC;oBACnD,gBAAgB,EAAE,kBAAkB;iBACrC;gBACD,IAAI;aACL,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;gBAC3C,IAAI,CAAC,GAAG,CAAC,iCAAiC,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC1F,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAe,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,sCAAsC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,mBAAmB,CACvB,KAAa,EACb,MAAc,EACd,QAAgB;QAEhB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,oCAAoC,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAE9C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,aAAa,qBAAqB,EAAE;gBACvE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,eAAe,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;oBAChF,cAAc,EAAE,mCAAmC;oBACnD,gBAAgB,EAAE,kBAAkB;iBACrC;gBACD,IAAI;aACL,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;gBAC3C,IAAI,CAAC,GAAG,CAAC,4BAA4B,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBACrF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAyB,CAAC;QACtD,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,qCAAqC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,yBAAyB,CAC7B,MAAc,EACd,WAAmB,KAAK;QAExB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,sCAAsC,EAAE,SAAS,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,6DAA6D,EAAE,OAAO,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAE9C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,aAAa,qBAAqB,EAAE;gBACvE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,eAAe,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;oBAChF,cAAc,EAAE,mCAAmC;oBACnD,gBAAgB,EAAE,kBAAkB;iBACrC;gBACD,IAAI;aACL,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;gBAC3C,IAAI,CAAC,GAAG,CAAC,mCAAmC,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC5F,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAyB,CAAC;YACxD,IAAI,CAAC,GAAG,CAAC,6BAA6B,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YAE9D,uCAAuC;YACvC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,CAAC;YAC9F,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,CAAC,GAAG,CAAC,6BAA6B,WAAW,EAAE,CAAC,CAAC;YACvD,CAAC;YAED,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,4CAA4C,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,oBAAoB,CAClB,MAAc,EACd,UAII,EAAE;QAEN,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,IAAI,CACtB,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,IAAI,CACxE,CAAC,WAAW,EAAE,CAAC;QAEhB,2BAA2B;QAC3B,MAAM,UAAU,GAAqB;YACnC,MAAM;YACN,QAAQ;YACR,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,aAAa,EAAE;gBACb,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;aAC5C;SACF,CAAC;QAEF,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAE/D,mEAAmE;QACnE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAE/F,OAAO,eAAe,WAAW,0EAA0E,OAAO,eAAe,UAAU,GAAG,CAAC;IACjJ,CAAC;CACF"}

package/dist/esm/adapters/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/esm/adapters/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/adapters/types.ts"],"names":[],"mappings":""}

package/dist/esm/client.js

@@ -0,0 +1,302 @@
+import axios from 'axios';
+import { PolicyEngine } from './policy';
+import { noopLogger } from './logger';
+import { detectProtocol, extractMppChallenges, decodeChallengeRequest, } from './mpp';
+/**
+ * OwsClient — Dual-protocol autonomous HTTP client for AI agents.
+ *
+ * Supports BOTH payment protocols:
+ * - **x402** (Coinbase/Cloudflare): JSON body challenges + X-PAYMENT header
+ * - **MPP** (Stripe/Tempo): WWW-Authenticate challenges + Authorization: Payment header
+ *
+ * Wraps Axios with an interceptor that automatically detects the protocol,
+ * validates spend against PolicyEngine, settles via pluggable adapter,
+ * and retries — all without human interaction.
+ *
+ * @see https://openwallet.sh — Open Wallet Standard specification
+ * @see https://x402.org — x402 payment protocol
+ * @see https://mpp.dev — Machine Payments Protocol
+ * @see https://pay.asgcard.dev — Production ASG Pay infrastructure
+ */
+export class OwsClient {
+    api;
+    policyEngine;
+    adapter;
+    log;
+    constructor(options) {
+        this.log = options.logger ?? noopLogger;
+        this.policyEngine = new PolicyEngine(options.policy, this.log);
+        this.adapter = options.adapter;
+        this.api = axios.create({
+            baseURL: options.baseURL,
+        });
+        // ── Axios Interceptor: Dual-Protocol 402 Handler ────────────────
+        this.api.interceptors.response.use((response) => response, async (error) => {
+            if (error.response && error.response.status === 402) {
+                return this.handle402(error);
+            }
+            return Promise.reject(error);
+        });
+    }
+    /**
+     * Handle a 402 Payment Required challenge.
+     * Auto-detects protocol (MPP vs x402) and routes accordingly.
+     */
+    async handle402(error) {
+        this.log('[OWS] ⚡ Received 402 Payment Required');
+        // Detect protocol from response
+        const headers = error.response.headers;
+        const body = error.response.data;
+        const protocol = detectProtocol(headers, body);
+        this.log(`[OWS] 🔍 Protocol detected: ${protocol}`);
+        switch (protocol) {
+            case 'mpp':
+                return this.handleMpp402(error, headers);
+            case 'x402':
+                return this.handleX402(error);
+            default:
+                throw new Error('Unrecognisable 402 challenge — neither x402 nor MPP.');
+        }
+    }
+    // ─── MPP Protocol Handler ─────────────────────────────────────────
+    /**
+     * Handle an MPP 402: parse WWW-Authenticate, create credential, retry.
+     */
+    async handleMpp402(error, headers) {
+        this.log('[OWS/MPP] 🏛️ Processing MPP challenge');
+        // ── Step 1: Parse challenges from WWW-Authenticate headers ────
+        const challenges = extractMppChallenges(headers);
+        if (challenges.length === 0) {
+            throw new Error('MPP 402 but no valid Payment challenges in WWW-Authenticate header.');
+        }
+        // Select the best challenge (prefer stripe if adapter is Stripe, else first)
+        const challenge = this.selectChallenge(challenges);
+        this.log(`[OWS/MPP] 📋 Challenge: method=${challenge.method}, id=${challenge.id}, realm=${challenge.realm}`);
+        // ── Step 2: Check expiration ──────────────────────────────────
+        if (challenge.expires) {
+            const expiresAt = new Date(challenge.expires).getTime();
+            if (Date.now() > expiresAt) {
+                this.log('[OWS/MPP] 🛑 Challenge expired');
+                return Promise.reject(error);
+            }
+        }
+        // ── Step 3: Decode request and extract amount ─────────────────
+        const request = decodeChallengeRequest(challenge);
+        const requestedUsdAmount = this.extractMppUsdAmount(request);
+        this.log(`[OWS/MPP] 💰 Amount: $${requestedUsdAmount} ${request.currency?.toUpperCase() || 'USD'}`);
+        // ── Step 4: Policy gate ───────────────────────────────────────
+        if (!this.policyEngine.checkPolicy(requestedUsdAmount, request.recipient)) {
+            this.log('[OWS/MPP] 🛑 REJECTED by PolicyEngine');
+            return Promise.reject(error);
+        }
+        this.log('[OWS/MPP] ✅ Policy passed — settling via adapter…');
+        // ── Step 5: Pass challenge to adapter (if Stripe) ─────────────
+        if (this.isStripeAdapter(this.adapter)) {
+            this.adapter.setMppChallenge(challenge);
+        }
+        // ── Step 6: Settle via adapter ────────────────────────────────
+        const result = await this.adapter.pay(request.recipient || challenge.realm, request.amount, challenge.method);
+        if (!result) {
+            this.log('[OWS/MPP] ❌ Settlement failed');
+            return Promise.reject(error);
+        }
+        // ── Step 7: Record spend ──────────────────────────────────────
+        this.policyEngine.recordSpend(requestedUsdAmount);
+        // ── Step 8: Build Authorization header ────────────────────────
+        // For Stripe adapter: result IS the base64url credential
+        // For others: wrap result as a generic credential
+        let authHeader;
+        if (this.isStripeAdapter(this.adapter) && this.adapter.getLastCredential()) {
+            authHeader = `Payment ${this.adapter.getLastCredential()}`;
+        }
+        else {
+            // Generic credential for non-Stripe MPP methods
+            const credentialPayload = {
+                challenge: {
+                    id: challenge.id,
+                    realm: challenge.realm,
+                    method: challenge.method,
+                    intent: challenge.intent,
+                    request: challenge.request,
+                    ...(challenge.expires ? { expires: challenge.expires } : {}),
+                },
+                source: this.adapter.getAddress(),
+                payload: { transaction: result },
+            };
+            const encoded = Buffer.from(JSON.stringify(credentialPayload))
+                .toString('base64')
+                .replace(/\+/g, '-')
+                .replace(/\//g, '_')
+                .replace(/=+$/, '');
+            authHeader = `Payment ${encoded}`;
+        }
+        this.log(`[OWS/MPP] 🔁 Retrying with Authorization: Payment …`);
+        // ── Step 9: Retry original request ────────────────────────────
+        const originalRequest = error.config;
+        if (!originalRequest) {
+            throw new Error('Cannot retry — original request config is missing.');
+        }
+        if (!originalRequest.headers) {
+            originalRequest.headers = {};
+        }
+        originalRequest.headers['Authorization'] = authHeader;
+        return this.api.request(originalRequest);
+    }
+    // ─── x402 Protocol Handler ────────────────────────────────────────
+    /**
+     * Handle an x402 402: parse JSON body, settle on-chain, retry with X-PAYMENT.
+     */
+    async handleX402(error) {
+        this.log('[OWS/x402] ⛓️ Processing x402 challenge');
+        const challenge = error.response.data;
+        // Validate x402 envelope
+        if (!challenge.x402Version && !challenge.accepts) {
+            throw new Error('Unrecognisable 402 challenge — not x402-compliant.');
+        }
+        if (!challenge.accepts || challenge.accepts.length === 0) {
+            throw new Error('402 challenge has no accepts[] entries.');
+        }
+        const acceptRules = challenge.accepts[0];
+        const { payTo, amount: atomicAmount, network } = acceptRules;
+        // ── Extract USD amount ────────────────────────────────────────
+        const requestedUsdAmount = this.extractUsdAmount(challenge, acceptRules);
+        this.log(`[OWS/x402] 💰 Amount: $${requestedUsdAmount} → ${payTo.slice(0, 10)}…`);
+        this.log(`[OWS/x402] ⛓️  Chain: ${this.adapter.chainName} (${this.adapter.caip2Id})`);
+        // ── Policy gate ───────────────────────────────────────────────
+        if (!this.policyEngine.checkPolicy(requestedUsdAmount, payTo)) {
+            this.log('[OWS/x402] 🛑 REJECTED by PolicyEngine');
+            return Promise.reject(error);
+        }
+        this.log('[OWS/x402] ✅ Policy passed — settling on-chain…');
+        // ── On-chain settlement ───────────────────────────────────────
+        const txHash = await this.adapter.pay(payTo, atomicAmount, network);
+        if (!txHash) {
+            this.log('[OWS/x402] ❌ Settlement failed');
+            return Promise.reject(error);
+        }
+        // ── Record spend ──────────────────────────────────────────────
+        this.policyEngine.recordSpend(requestedUsdAmount);
+        // ── Build X-PAYMENT proof ─────────────────────────────────────
+        const paymentPayload = {
+            x402Version: challenge.x402Version || 2,
+            accepted: {
+                scheme: acceptRules.scheme,
+                network: acceptRules.network,
+                amount: acceptRules.amount,
+                payTo: acceptRules.payTo,
+                asset: acceptRules.asset,
+            },
+            payload: {
+                transaction: txHash,
+                chain: this.adapter.caip2Id,
+            },
+        };
+        const tokenBase64 = Buffer.from(JSON.stringify(paymentPayload)).toString('base64');
+        this.log(`[OWS/x402] 🔁 Retrying with X-PAYMENT (tx: ${txHash.slice(0, 16)}…)`);
+        // ── Retry original request ────────────────────────────────────
+        const originalRequest = error.config;
+        if (!originalRequest) {
+            throw new Error('Cannot retry — original request config is missing.');
+        }
+        if (!originalRequest.headers) {
+            originalRequest.headers = {};
+        }
+        originalRequest.headers['X-PAYMENT'] = tokenBase64;
+        return this.api.request(originalRequest);
+    }
+    // ─── MPP Helpers ──────────────────────────────────────────────────
+    /**
+     * Select the best challenge when multiple are offered.
+     * Prefers the method matching the current adapter.
+     */
+    selectChallenge(challenges) {
+        if (challenges.length === 1)
+            return challenges[0];
+        // Match adapter type to challenge method
+        if (this.isStripeAdapter(this.adapter)) {
+            const stripeChallenge = challenges.find((c) => c.method === 'stripe');
+            if (stripeChallenge)
+                return stripeChallenge;
+        }
+        // Fallback: first challenge
+        return challenges[0];
+    }
+    /**
+     * Extract USD amount from MPP request object.
+     */
+    extractMppUsdAmount(request) {
+        const amount = parseFloat(request.amount);
+        if (isNaN(amount) || amount <= 0)
+            return 0.01;
+        // If currency is USD and has decimals info, convert
+        const decimals = request.decimals ?? 2;
+        return amount / Math.pow(10, decimals);
+    }
+    // ─── x402 Helpers ─────────────────────────────────────────────────
+    /**
+     * Extract USD amount from x402 challenge.
+     * Priority: resource.usdAmount → accepts[].maxAmountRequired → heuristic from description.
+     */
+    extractUsdAmount(challenge, acceptRules) {
+        // 1. Explicit USD amount field (best)
+        if (challenge.resource?.usdAmount && challenge.resource.usdAmount > 0) {
+            return challenge.resource.usdAmount;
+        }
+        // 2. maxAmountRequired in accepts (x402 v2)
+        if (acceptRules.maxAmountRequired) {
+            const parsed = parseFloat(acceptRules.maxAmountRequired);
+            if (!isNaN(parsed) && parsed > 0)
+                return parsed;
+        }
+        // 3. Fallback: parse from description text (last resort)
+        const desc = challenge.resource?.description || '';
+        const match = desc.match(/\$(\d+(?:\.\d+)?)/);
+        if (match) {
+            return parseFloat(match[1]);
+        }
+        // 4. Last resort: use atomic amount as-is
+        this.log('[OWS] ⚠️ Could not determine USD amount — using atomic fallback');
+        return parseFloat(atomicToUsd(acceptRules.amount, acceptRules.asset));
+    }
+    // ─── Type Guards ──────────────────────────────────────────────────
+    isStripeAdapter(adapter) {
+        return adapter.chainName === 'Stripe MPP';
+    }
+    // ─── Public API ───────────────────────────────────────────────────
+    /**
+     * High-level helper for AI agents.
+     * The agent simply calls performTask() — the interceptor handles
+     * everything else (payment, policy, retry) transparently.
+     */
+    async performTask(endpoint, data) {
+        this.log(`[Agent] 🧠 Sending task to ${endpoint}`);
+        const res = await this.api.post(endpoint, data);
+        this.log(`[Agent] ✅ Task completed`);
+        return res.data;
+    }
+    /**
+     * GET request with autonomous 402 handling.
+     */
+    async get(endpoint) {
+        const res = await this.api.get(endpoint);
+        return res.data;
+    }
+}
+/**
+ * Convert atomic units to approximate USD (best-effort).
+ * Used only as a last-resort fallback.
+ */
+function atomicToUsd(amount, asset) {
+    const n = BigInt(amount);
+    switch (asset.toUpperCase()) {
+        case 'USDC':
+            return (Number(n) / 1e6).toFixed(2);
+        case 'ETH':
+            return (Number(n) / 1e18 * 3000).toFixed(2);
+        case 'XLM':
+            return (Number(n) / 1e7 * 0.1).toFixed(2);
+        default:
+            return '0.01';
+    }
+}
+//# sourceMappingURL=client.js.map