@conto_finance/sdk 0.6.1 → 0.7.0

package/dist/link-wallet.mjs

@@ -0,0 +1,365 @@
+import "./chunk-TGOYFBKZ.mjs";
+
+// src/link-wallet.ts
+import { spawn } from "child_process";
+import { constants } from "fs";
+import { chmod, mkdtemp, open, rm } from "fs/promises";
+import { tmpdir } from "os";
+import path from "path";
+var LinkWalletError = class extends Error {
+  constructor(reason, message, linkCode) {
+    super(message);
+    this.name = "LinkWalletError";
+    this.reason = reason;
+    this.code = reason === "not_installed" || reason === "not_logged_in" ? "LINK_WALLET_UNAVAILABLE" : "LINK_WALLET_FAILED";
+    if (linkCode) this.linkCode = linkCode;
+  }
+};
+var LINK_REQUEST_ID = /^lsrq_[A-Za-z0-9]{1,64}$/;
+var SAFE_LINK_CODE = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;
+var KNOWN_STATUSES = /* @__PURE__ */ new Set([
+  "created",
+  "pending_approval",
+  "requires_action",
+  "approved",
+  "submitted",
+  "succeeded",
+  "denied",
+  "expired",
+  "canceled",
+  "failed"
+]);
+var MAX_OUTPUT_BYTES = 1024 * 1024;
+var COMMAND_TIMEOUT_MS = 6e4;
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function text(value) {
+  return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function httpsUrl(value) {
+  if (typeof value !== "string" || value.length > 2048) return void 0;
+  try {
+    return new URL(value).protocol === "https:" ? value : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function isLinkRequestId(value) {
+  return typeof value === "string" && LINK_REQUEST_ID.test(value);
+}
+function requireRequestId(id) {
+  if (!isLinkRequestId(id)) {
+    throw new LinkWalletError("invalid_input", "The Link request id is not valid.");
+  }
+  return id;
+}
+function flagText(value, maxLength) {
+  const cleaned = value.replace(/[\r\n\t,]+/g, " ").replace(/\s+/g, " ").trim().slice(0, maxLength).trim();
+  return cleaned || "Item";
+}
+function parseSpendRequest(value) {
+  const latest = Array.isArray(value) ? value[value.length - 1] : value;
+  const data = record(latest);
+  const id = data.id;
+  if (!isLinkRequestId(id)) {
+    throw new LinkWalletError("invalid_response", "link-cli returned an unexpected response.");
+  }
+  const status = typeof data.status === "string" && KNOWN_STATUSES.has(data.status) ? data.status : "unknown";
+  const nextAction = record(record(record(data.status_details).requires_action).next_action);
+  const amount = data.amount;
+  return {
+    id,
+    status,
+    ...Number.isSafeInteger(amount) ? { amountMinor: amount } : {},
+    ...text(data.merchant_name) ? { merchantName: text(data.merchant_name) } : {},
+    ...httpsUrl(data.merchant_url) ? { merchantUrl: httpsUrl(data.merchant_url) } : {},
+    ...httpsUrl(data.approval_url) ? { approvalUrl: httpsUrl(data.approval_url) } : {},
+    ...text(nextAction.resolution) ? { actionResolution: text(nextAction.resolution) } : {},
+    ...httpsUrl(nextAction.action_url) ? { actionUrl: httpsUrl(nextAction.action_url) } : {}
+  };
+}
+function invalidCard() {
+  return new LinkWalletError("invalid_response", "Link returned card data this SDK cannot read.");
+}
+function validUntil(value) {
+  if (typeof value === "number" && Number.isFinite(value) && value > 0) {
+    return new Date(value < 1e12 ? value * 1e3 : value).toISOString();
+  }
+  if (typeof value === "string" && !Number.isNaN(Date.parse(value))) {
+    return new Date(value).toISOString();
+  }
+  return void 0;
+}
+function parseCard(value) {
+  const card = record(value);
+  const number = typeof card.number === "string" ? card.number.replace(/[\s-]/g, "") : "";
+  const rawSecurityValue = card["cvc"];
+  const securityValue = typeof rawSecurityValue === "string" ? rawSecurityValue.trim() : "";
+  const expMonth = Number(card.exp_month);
+  let expYear = Number(card.exp_year);
+  if (Number.isInteger(expYear) && expYear >= 0 && expYear < 100) expYear += 2e3;
+  if (!/^\d{12,19}$/.test(number) || !/^\d{3,4}$/.test(securityValue) || !Number.isInteger(expMonth) || expMonth < 1 || expMonth > 12 || !Number.isInteger(expYear) || expYear < 2e3) {
+    throw invalidCard();
+  }
+  const until = validUntil(card.valid_until);
+  const brand = text(card.brand);
+  return {
+    number,
+    securityValue,
+    expMonth,
+    expYear,
+    ...until ? { validUntil: until } : {},
+    last4: number.slice(-4),
+    ...brand ? { brand } : {}
+  };
+}
+function failureFromOutput(value) {
+  const data = record(value);
+  const code = typeof data.code === "string" && SAFE_LINK_CODE.test(data.code) ? data.code : void 0;
+  const message = typeof data.message === "string" ? data.message.toLowerCase() : "";
+  if (code === "NOT_AUTHENTICATED" || message.includes("auth login") || message.includes("not authenticated")) {
+    return new LinkWalletError(
+      "not_logged_in",
+      'link-cli is not logged in. Run "link-cli auth login" on this machine.',
+      code
+    );
+  }
+  if (code === "NOT_FOUND") {
+    return new LinkWalletError("not_found", "Link has no spend request with this id.", code);
+  }
+  if (code === "POLLING_TIMEOUT") {
+    return new LinkWalletError("timed_out", "The person has not decided in Link yet.", code);
+  }
+  return new LinkWalletError("cli_failed", "link-cli could not complete the request.", code);
+}
+function linkCliWallet(options = {}) {
+  const binary = options.binary ?? "link-cli";
+  const defaultTimeoutSeconds = options.timeoutSeconds ?? 300;
+  if (!Number.isFinite(defaultTimeoutSeconds) || defaultTimeoutSeconds < 0) {
+    throw new LinkWalletError("invalid_input", "timeoutSeconds must be zero or more.");
+  }
+  if (options.paymentMethodId !== void 0 && !/^[A-Za-z0-9_]{1,128}$/.test(options.paymentMethodId)) {
+    throw new LinkWalletError(
+      "invalid_input",
+      "paymentMethodId is not a valid Link payment method id."
+    );
+  }
+  const env = {
+    ...options.env ?? process.env,
+    NO_UPDATE_NOTIFIER: "1",
+    NO_COLOR: "1"
+  };
+  function run(args, call = {}) {
+    return new Promise((resolve, reject) => {
+      if (call.signal?.aborted) {
+        reject(new LinkWalletError("aborted", "The Link request was stopped."));
+        return;
+      }
+      let child;
+      try {
+        child = spawn(binary, [...args, "--format", "json"], {
+          env,
+          shell: false,
+          stdio: ["ignore", "pipe", "pipe"],
+          windowsHide: true,
+          ...call.signal ? { signal: call.signal } : {}
+        });
+      } catch {
+        reject(new LinkWalletError("cli_failed", "link-cli could not be started."));
+        return;
+      }
+      const chunks = [];
+      let size = 0;
+      let overflow = false;
+      let timedOut = false;
+      const timer = setTimeout(() => {
+        timedOut = true;
+        child.kill("SIGTERM");
+      }, call.timeoutMs ?? COMMAND_TIMEOUT_MS);
+      child.stdout?.on("data", (chunk) => {
+        size += chunk.length;
+        if (size > MAX_OUTPUT_BYTES) {
+          overflow = true;
+          child.kill("SIGTERM");
+          return;
+        }
+        chunks.push(chunk);
+      });
+      child.stderr?.resume();
+      child.on("error", (error) => {
+        clearTimeout(timer);
+        if (error.code === "ENOENT") {
+          reject(
+            new LinkWalletError(
+              "not_installed",
+              'link-cli is not installed. Run "npm i -g @stripe/link-cli", then "link-cli auth login".'
+            )
+          );
+        } else if (error.name === "AbortError") {
+          reject(new LinkWalletError("aborted", "The Link request was stopped."));
+        } else {
+          reject(new LinkWalletError("cli_failed", "link-cli could not be started."));
+        }
+      });
+      child.on("close", (exitCode) => {
+        clearTimeout(timer);
+        if (call.signal?.aborted) {
+          reject(new LinkWalletError("aborted", "The Link request was stopped."));
+          return;
+        }
+        if (timedOut) {
+          reject(new LinkWalletError("cli_failed", "link-cli did not finish in time."));
+          return;
+        }
+        if (overflow) {
+          reject(
+            new LinkWalletError("invalid_response", "link-cli returned an unexpected response.")
+          );
+          return;
+        }
+        let value;
+        try {
+          value = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+        } catch {
+          reject(
+            exitCode === 0 ? new LinkWalletError("invalid_response", "link-cli returned an unexpected response.") : new LinkWalletError("cli_failed", "link-cli could not complete the request.")
+          );
+          return;
+        }
+        resolve({ exitCode, value });
+      });
+    });
+  }
+  async function runOrThrow(args, call) {
+    const result = await run(args, call);
+    if (result.exitCode !== 0) throw failureFromOutput(result.value);
+    return result.value;
+  }
+  async function readOnce(id, call) {
+    return parseSpendRequest(await runOrThrow(["spend-request", "retrieve", id], call));
+  }
+  return {
+    async createCardRequest(input, call) {
+      if (!Number.isSafeInteger(input.amountMinor) || input.amountMinor <= 0) {
+        throw new LinkWalletError(
+          "invalid_input",
+          "amountMinor must be a positive number of cents."
+        );
+      }
+      if (input.currency !== "USD") {
+        throw new LinkWalletError("invalid_input", "Only USD card requests are supported.");
+      }
+      if (typeof input.context !== "string" || input.context.length < 100) {
+        throw new LinkWalletError("invalid_input", "context must contain at least 100 characters.");
+      }
+      if (!/^[A-Za-z0-9_:.-]{8,255}$/.test(input.idempotencyKey)) {
+        throw new LinkWalletError("invalid_input", "idempotencyKey is not valid.");
+      }
+      if (!httpsUrl(input.merchantUrl)) {
+        throw new LinkWalletError("invalid_input", "merchantUrl must be an HTTPS URL.");
+      }
+      const args = [
+        "spend-request",
+        "create",
+        `--amount=${input.amountMinor}`,
+        "--currency=usd",
+        `--merchant-name=${input.merchantName}`,
+        `--merchant-url=${input.merchantUrl}`,
+        `--context=${input.context}`,
+        `--idempotency-key=${input.idempotencyKey}`,
+        ...input.lineItems.map(
+          (item) => `--line-item=name:${flagText(item.name, 200)},unit_amount:${item.unitAmountMinor},quantity:${item.quantity}`
+        ),
+        ...input.totals.map(
+          (total) => `--total=type:${total.type},display_text:${flagText(total.label, 120)},amount:${total.amountMinor}`
+        ),
+        ...Object.entries(input.metadata ?? {}).map(
+          ([key, value]) => `--metadata=${flagText(key, 40)}:${flagText(value, 500)}`
+        ),
+        ...options.paymentMethodId ? [`--payment-method-id=${options.paymentMethodId}`] : [],
+        ...options.test ? ["--test"] : []
+      ];
+      const result = await run(args, call);
+      if (result.exitCode !== 0) {
+        const message = record(result.value).message;
+        const existing = typeof message === "string" ? /matching spend request already exists: (lsrq_[A-Za-z0-9]{1,64})/.exec(message)?.[1] : void 0;
+        if (existing) {
+          const current = await readOnce(existing, call);
+          if (current.amountMinor === input.amountMinor && (current.merchantUrl === void 0 || new URL(current.merchantUrl).origin === new URL(input.merchantUrl).origin)) {
+            return current;
+          }
+        }
+        throw failureFromOutput(result.value);
+      }
+      return parseSpendRequest(result.value);
+    },
+    async waitForApproval(id, call = {}) {
+      requireRequestId(id);
+      const timeoutSeconds = Math.max(0, Math.floor(call.timeoutSeconds ?? defaultTimeoutSeconds));
+      if (timeoutSeconds === 0) return readOnce(id, call);
+      const result = await run(
+        ["spend-request", "retrieve", id, "--interval=2", `--timeout=${timeoutSeconds}`],
+        { signal: call.signal, timeoutMs: (timeoutSeconds + 30) * 1e3 }
+      );
+      if (result.exitCode === 0) return parseSpendRequest(result.value);
+      const failure = failureFromOutput(result.value);
+      if (failure.reason === "timed_out") return readOnce(id, call);
+      throw failure;
+    },
+    async retrieveCard(id, call) {
+      requireRequestId(id);
+      const directory = await mkdtemp(path.join(tmpdir(), "conto-link-"));
+      try {
+        await chmod(directory, 448);
+        const file = path.join(directory, "card.json");
+        const request = parseSpendRequest(
+          await runOrThrow(
+            ["spend-request", "retrieve", id, "--include=card", `--output-file=${file}`],
+            call
+          )
+        );
+        if (!["approved", "submitted", "succeeded"].includes(request.status)) {
+          throw new LinkWalletError(
+            "not_approved",
+            "The person has not approved this request in Link."
+          );
+        }
+        const handle = await open(
+          file,
+          constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0)
+        ).catch((error) => {
+          if (error.code === "ENOENT") return void 0;
+          throw new LinkWalletError("invalid_response", "The card file was not private.");
+        });
+        if (!handle) throw new LinkWalletError("invalid_response", "Link did not return a card.");
+        try {
+          const stats = await handle.stat();
+          if (!stats.isFile() || (stats.mode & 63) !== 0) {
+            throw new LinkWalletError("invalid_response", "The card file was not private.");
+          }
+          let contents;
+          try {
+            contents = JSON.parse(await handle.readFile("utf8"));
+          } catch {
+            throw invalidCard();
+          }
+          return parseCard(record(contents).card);
+        } finally {
+          await handle.close();
+        }
+      } finally {
+        await rm(directory, { recursive: true, force: true });
+      }
+    },
+    async cancel(id, call) {
+      requireRequestId(id);
+      await runOrThrow(["spend-request", "cancel", id], call);
+    }
+  };
+}
+export {
+  LinkWalletError,
+  isLinkRequestId,
+  linkCliWallet
+};

package/dist/playwright.d.mts

@@ -1,5 +1,6 @@
 import { Browser, Page } from 'playwright-core';
 import { GuardedCheckoutInput, PrivilegedBrowserCheckoutDriver, RunGuardedCheckoutResult, AgentCheckoutActionKind, CommerceCheckoutMethod, BrowserCheckoutAction } from './index.mjs';
+import './link-wallet.mjs';
 
 interface PlaywrightCheckoutTargetRegistration {
     browserSessionId: string;
@@ -255,4 +256,5 @@ declare function createGuardedPlaywrightCheckoutRuntimeHost(config: GuardedPlayw
  */
 declare function createGuardedPlaywrightCheckoutHttpHandler(config: GuardedPlaywrightCheckoutHttpHandlerConfig): GuardedPlaywrightCheckoutHttpHandler;
 
-export { type DiscoverPlaywrightCheckoutTargetInput, type DiscoveredPlaywrightCheckoutTarget, type EncryptedPlaywrightCheckoutTargetStoreConfig, type GuardedPlaywrightCheckoutClient, type GuardedPlaywrightCheckoutHttpHandler, type GuardedPlaywrightCheckoutHttpHandlerConfig, type GuardedPlaywrightCheckoutHttpRequest, type GuardedPlaywrightCheckoutRuntime, type GuardedPlaywrightCheckoutRuntimeConfig, type GuardedPlaywrightCheckoutRuntimeHost, type GuardedPlaywrightCheckoutRuntimeHostConfig, type PlaywrightCdpSessionRegistry, type PlaywrightCdpSessionRegistryConfig, type PlaywrightCheckoutAdapter, type PlaywrightCheckoutAdapterConfig, type PlaywrightCheckoutDispatchResult, type PlaywrightCheckoutTargetBlobStore, type PlaywrightCheckoutTargetRegistration, type PlaywrightCheckoutTargetStore, type PlaywrightSessionInteractiveTarget, type PlaywrightSessionObservation, type PlaywrightSessionObserver, type PlaywrightSessionObserverConfig, createEncryptedPlaywrightCheckoutTargetStore, createGuardedPlaywrightCheckoutHttpHandler, createGuardedPlaywrightCheckoutRuntime, createGuardedPlaywrightCheckoutRuntimeHost, createInMemoryPlaywrightCheckoutTargetStore, createPlaywrightCdpSessionRegistry, createPlaywrightCheckoutAdapter, createPlaywrightSessionObserver };
+export { createEncryptedPlaywrightCheckoutTargetStore, createGuardedPlaywrightCheckoutHttpHandler, createGuardedPlaywrightCheckoutRuntime, createGuardedPlaywrightCheckoutRuntimeHost, createInMemoryPlaywrightCheckoutTargetStore, createPlaywrightCdpSessionRegistry, createPlaywrightCheckoutAdapter, createPlaywrightSessionObserver };
+export type { DiscoverPlaywrightCheckoutTargetInput, DiscoveredPlaywrightCheckoutTarget, EncryptedPlaywrightCheckoutTargetStoreConfig, GuardedPlaywrightCheckoutClient, GuardedPlaywrightCheckoutHttpHandler, GuardedPlaywrightCheckoutHttpHandlerConfig, GuardedPlaywrightCheckoutHttpRequest, GuardedPlaywrightCheckoutRuntime, GuardedPlaywrightCheckoutRuntimeConfig, GuardedPlaywrightCheckoutRuntimeHost, GuardedPlaywrightCheckoutRuntimeHostConfig, PlaywrightCdpSessionRegistry, PlaywrightCdpSessionRegistryConfig, PlaywrightCheckoutAdapter, PlaywrightCheckoutAdapterConfig, PlaywrightCheckoutDispatchResult, PlaywrightCheckoutTargetBlobStore, PlaywrightCheckoutTargetRegistration, PlaywrightCheckoutTargetStore, PlaywrightSessionInteractiveTarget, PlaywrightSessionObservation, PlaywrightSessionObserver, PlaywrightSessionObserverConfig };

package/dist/playwright.d.ts

@@ -1,5 +1,6 @@
 import { Browser, Page } from 'playwright-core';
 import { GuardedCheckoutInput, PrivilegedBrowserCheckoutDriver, RunGuardedCheckoutResult, AgentCheckoutActionKind, CommerceCheckoutMethod, BrowserCheckoutAction } from './index.js';
+import './link-wallet.js';
 
 interface PlaywrightCheckoutTargetRegistration {
     browserSessionId: string;
@@ -255,4 +256,5 @@ declare function createGuardedPlaywrightCheckoutRuntimeHost(config: GuardedPlayw
  */
 declare function createGuardedPlaywrightCheckoutHttpHandler(config: GuardedPlaywrightCheckoutHttpHandlerConfig): GuardedPlaywrightCheckoutHttpHandler;
 
-export { type DiscoverPlaywrightCheckoutTargetInput, type DiscoveredPlaywrightCheckoutTarget, type EncryptedPlaywrightCheckoutTargetStoreConfig, type GuardedPlaywrightCheckoutClient, type GuardedPlaywrightCheckoutHttpHandler, type GuardedPlaywrightCheckoutHttpHandlerConfig, type GuardedPlaywrightCheckoutHttpRequest, type GuardedPlaywrightCheckoutRuntime, type GuardedPlaywrightCheckoutRuntimeConfig, type GuardedPlaywrightCheckoutRuntimeHost, type GuardedPlaywrightCheckoutRuntimeHostConfig, type PlaywrightCdpSessionRegistry, type PlaywrightCdpSessionRegistryConfig, type PlaywrightCheckoutAdapter, type PlaywrightCheckoutAdapterConfig, type PlaywrightCheckoutDispatchResult, type PlaywrightCheckoutTargetBlobStore, type PlaywrightCheckoutTargetRegistration, type PlaywrightCheckoutTargetStore, type PlaywrightSessionInteractiveTarget, type PlaywrightSessionObservation, type PlaywrightSessionObserver, type PlaywrightSessionObserverConfig, createEncryptedPlaywrightCheckoutTargetStore, createGuardedPlaywrightCheckoutHttpHandler, createGuardedPlaywrightCheckoutRuntime, createGuardedPlaywrightCheckoutRuntimeHost, createInMemoryPlaywrightCheckoutTargetStore, createPlaywrightCdpSessionRegistry, createPlaywrightCheckoutAdapter, createPlaywrightSessionObserver };
+export { createEncryptedPlaywrightCheckoutTargetStore, createGuardedPlaywrightCheckoutHttpHandler, createGuardedPlaywrightCheckoutRuntime, createGuardedPlaywrightCheckoutRuntimeHost, createInMemoryPlaywrightCheckoutTargetStore, createPlaywrightCdpSessionRegistry, createPlaywrightCheckoutAdapter, createPlaywrightSessionObserver };
+export type { DiscoverPlaywrightCheckoutTargetInput, DiscoveredPlaywrightCheckoutTarget, EncryptedPlaywrightCheckoutTargetStoreConfig, GuardedPlaywrightCheckoutClient, GuardedPlaywrightCheckoutHttpHandler, GuardedPlaywrightCheckoutHttpHandlerConfig, GuardedPlaywrightCheckoutHttpRequest, GuardedPlaywrightCheckoutRuntime, GuardedPlaywrightCheckoutRuntimeConfig, GuardedPlaywrightCheckoutRuntimeHost, GuardedPlaywrightCheckoutRuntimeHostConfig, PlaywrightCdpSessionRegistry, PlaywrightCdpSessionRegistryConfig, PlaywrightCheckoutAdapter, PlaywrightCheckoutAdapterConfig, PlaywrightCheckoutDispatchResult, PlaywrightCheckoutTargetBlobStore, PlaywrightCheckoutTargetRegistration, PlaywrightCheckoutTargetStore, PlaywrightSessionInteractiveTarget, PlaywrightSessionObservation, PlaywrightSessionObserver, PlaywrightSessionObserverConfig };

package/dist/playwright.js

@@ -322,13 +322,16 @@ function createEncryptedPlaywrightCheckoutTargetStore(config) {
         if (envelope.version !== TARGET_STORE_ENVELOPE_VERSION || typeof envelope.iv !== "string" || typeof envelope.ciphertext !== "string" || typeof envelope.tag !== "string") {
           throw new Error("invalid envelope");
         }
+        const tag = Buffer.from(envelope.tag, "base64url");
+        if (tag.length !== 16) throw new Error("invalid envelope");
         const decipher = (0, import_node_crypto2.createDecipheriv)(
           "aes-256-gcm",
           key,
-          Buffer.from(envelope.iv, "base64url")
+          Buffer.from(envelope.iv, "base64url"),
+          { authTagLength: 16 }
         );
         decipher.setAAD(Buffer.from(storageKey));
-        decipher.setAuthTag(Buffer.from(envelope.tag, "base64url"));
+        decipher.setAuthTag(tag);
         const plaintext = Buffer.concat([
           decipher.update(Buffer.from(envelope.ciphertext, "base64url")),
           decipher.final()

package/dist/playwright.mjs

@@ -7,9 +7,9 @@ import {
   createPlaywrightCdpSessionRegistry,
   createPlaywrightCheckoutAdapter,
   createPlaywrightSessionObserver
-} from "./chunk-VSIO6PYA.mjs";
+} from "./chunk-JBTJXIMI.mjs";
 import "./chunk-O5RAAB2U.mjs";
-import "./chunk-WSIKPUZJ.mjs";
+import "./chunk-TGOYFBKZ.mjs";
 export {
   createEncryptedPlaywrightCheckoutTargetStore,
   createGuardedPlaywrightCheckoutHttpHandler,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@conto_finance/sdk",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "description": "Conto SDK for AI agent payment authorization",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -25,6 +25,11 @@
       "types": "./dist/checkout-verifier.d.ts",
       "import": "./dist/checkout-verifier.mjs",
       "require": "./dist/checkout-verifier.js"
+    },
+    "./link-wallet": {
+      "types": "./dist/link-wallet.d.ts",
+      "import": "./dist/link-wallet.mjs",
+      "require": "./dist/link-wallet.js"
     }
   },
   "publishConfig": {
@@ -41,7 +46,7 @@
     "dev": "tsup --watch",
     "lint": "tsc --noEmit",
     "test": "npm run lint && npm run test:contract && npm run test:consumer",
-    "test:contract": "npm run build && node --test test/contract.test.mjs test/playwright.test.mjs test/browserbase.test.mjs test/checkout-verifier.test.mjs test/developer-experience.test.mjs test/checkout.test.mjs test/purchases.test.mjs",
+    "test:contract": "npm run build && node --test test/contract.test.mjs test/playwright.test.mjs test/browserbase.test.mjs test/checkout-verifier.test.mjs test/developer-experience.test.mjs test/checkout.test.mjs test/link-wallet.test.mjs test/purchases.test.mjs test/allowances.test.mjs test/purchase-watch-lifecycle.test.mjs ../../examples/link-wallet-agent/verify.test.mjs",
     "test:consumer": "npm run build && node --test test/consumer.test.mjs",
     "verify:release": "node scripts/verify-release.mjs",
     "prepublishOnly": "npm run verify:release && npm run lint && npm run test:contract && npm run test:consumer"
@@ -66,7 +71,7 @@
     "email": "support@conto.finance"
   },
   "dependencies": {
-    "@sentry/node": "^10.63.0"
+    "@sentry/node": "^11.8.0"
   },
   "peerDependencies": {
     "playwright-core": ">=1.50.0"
@@ -80,9 +85,9 @@
     "esbuild": "0.28.1"
   },
   "devDependencies": {
-    "@types/node": "22.19.18",
+    "@types/node": "26.6.5",
     "playwright-core": "1.61.0",
-    "tsup": "^8.5.1",
-    "typescript": "^5.9.3"
+    "tsup": "^9.0.0",
+    "typescript": "^6.0.3"
   }
 }