@conto_finance/sdk 0.6.2-beta.1 → 0.7.1

package/dist/index.mjs

@@ -1,3 +1,7 @@
+import {
+  linkTime,
+  safeLinkApprovalUrl
+} from "./chunk-PVMUL3JC.mjs";
 import {
   BrowserCheckoutTargetVerificationError,
   canonicalizeBrowserCheckoutTarget,
@@ -18,7 +22,7 @@ var require_package = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@conto_finance/sdk",
-      version: "0.6.2-beta.1",
+      version: "0.7.1",
       description: "Conto SDK for AI agent payment authorization",
       main: "./dist/index.js",
       module: "./dist/index.mjs",
@@ -51,8 +55,7 @@ var require_package = __commonJS({
         }
       },
       publishConfig: {
-        access: "public",
-        tag: "beta"
+        access: "public"
       },
       engines: {
         node: ">=20.19.0"
@@ -90,7 +93,7 @@ var require_package = __commonJS({
         email: "support@conto.finance"
       },
       dependencies: {
-        "@sentry/node": "^10.73.0"
+        "@sentry/node": "^11.8.0"
       },
       peerDependencies: {
         "playwright-core": ">=1.50.0"
@@ -104,10 +107,10 @@ var require_package = __commonJS({
         esbuild: "0.28.1"
       },
       devDependencies: {
-        "@types/node": "22.19.18",
+        "@types/node": "26.6.5",
         "playwright-core": "1.61.0",
-        tsup: "^8.5.1",
-        typescript: "^5.9.3"
+        tsup: "^9.0.0",
+        typescript: "^6.0.3"
       }
     };
   }
@@ -1229,6 +1232,25 @@ var WalletsClient = class {
       {}
     );
   }
+  /**
+   * Get a one-time message for a self-custody wallet's address to sign. It
+   * expires after 10 minutes and replaces any earlier challenge.
+   */
+  async createOwnershipChallenge(walletId) {
+    return this.client.request(
+      "POST",
+      `/api/wallets/${encodeURIComponent(walletId)}/ownership-proof/challenge`,
+      {}
+    );
+  }
+  /** Prove your organization controls a self-custody wallet's address. */
+  async proveOwnership(walletId, input) {
+    return this.client.request(
+      "POST",
+      `/api/wallets/${encodeURIComponent(walletId)}/ownership-proof`,
+      input
+    );
+  }
 };
 var PoliciesClient = class {
   constructor(client) {
@@ -1481,6 +1503,8 @@ var LinkCardError = class extends ContoError {
     this.name = "LinkCardError";
     this.checkpoint = input.checkpoint;
     if (input.linkRequestId) this.linkRequestId = input.linkRequestId;
+    const approvalUrl = safeLinkApprovalUrl(input.approvalUrl);
+    if (approvalUrl) this.approvalUrl = approvalUrl;
     this.holdReleased = input.holdReleased;
   }
 };
@@ -2788,6 +2812,11 @@ async function closeLinkRequest(wallet, id) {
     return status !== void 0 && LINK_CLOSED_STATUSES.has(status);
   }
 }
+function assertLinkApprovalCallback(callback) {
+  if (callback !== void 0 && typeof callback !== "function") {
+    throw checkoutError("onLinkApproval must be a function");
+  }
+}
 function linkCreatedNothing(error) {
   return errorCode(error) === "LINK_WALLET_UNAVAILABLE" || errorReason(error) === "invalid_input";
 }
@@ -2797,6 +2826,23 @@ var LinkFailureSignal = class extends Error {
     this.failure = failure;
   }
 };
+function linkApprovalDetails(request) {
+  const approvalUrl = safeLinkApprovalUrl(request.approvalUrl);
+  const approvalExpiresAt = linkTime(request.approvalExpiresAt);
+  return {
+    ...approvalUrl ? { approvalUrl } : {},
+    ...approvalExpiresAt ? { approvalExpiresAt } : {}
+  };
+}
+function notifyLinkApproval(callback, event) {
+  try {
+    const result = callback(Object.freeze(event));
+    if (result !== null && typeof result === "object" && "then" in result) {
+      Promise.resolve(result).catch(() => void 0);
+    }
+  } catch {
+  }
+}
 var _client4, _CheckoutClient_instances, linkCardFor_fn;
 var CheckoutClient = class {
   constructor(client) {
@@ -2982,7 +3028,9 @@ var CheckoutClient = class {
    * 1. Conto runs checkpoint 1 and holds the spend. When a rule requires the
    *    owner's approval, this waits for it.
    * 2. Only then does the wallet ask Link for a card for exactly the approved
-   *    amount at this merchant. The person approves it in their Link app.
+   *    amount at this merchant. The person approves it in Link. Pass
+   *    onLinkApproval to get Link's approval page, so they can approve on the
+   *    web without the Link app.
    * 3. The card is returned. It never reaches Conto.
    *
    * Then fill in the card, call confirm(result.checkpoint, { amountMinor,
@@ -2998,10 +3046,18 @@ var CheckoutClient = class {
    * Link request.
    */
   async getLinkCard(input) {
-    const { wallet, ownerApprovalTimeoutMs, linkApprovalTimeoutMs, signal, ...beginInput } = input;
+    const {
+      wallet,
+      ownerApprovalTimeoutMs,
+      linkApprovalTimeoutMs,
+      onLinkApproval,
+      signal,
+      ...beginInput
+    } = input;
     if (!wallet || typeof wallet.createCardRequest !== "function") {
       throw checkoutError("wallet must be a LinkWallet, such as linkCliWallet()");
     }
+    assertLinkApprovalCallback(onLinkApproval);
     let checkpoint = await this.begin({ ...beginInput, checkoutMethod: "LINK" });
     if (checkpoint.stage === "AWAITING_APPROVAL") {
       checkpoint = await this.waitForApproval(checkpoint, {
@@ -3009,7 +3065,11 @@ var CheckoutClient = class {
         ...signal ? { signal } : {}
       });
     }
-    return __privateMethod(this, _CheckoutClient_instances, linkCardFor_fn).call(this, checkpoint, wallet, linkApprovalTimeoutMs, signal);
+    return __privateMethod(this, _CheckoutClient_instances, linkCardFor_fn).call(this, checkpoint, wallet, {
+      linkApprovalTimeoutMs,
+      signal,
+      onLinkApproval
+    });
   }
   /**
    * The final total differs from the one the Link card covers. This cancels
@@ -3018,10 +3078,18 @@ var CheckoutClient = class {
    * for it. Confirm the returned checkpoint with the same total.
    */
   async replaceLinkCard(previous, input) {
-    const { wallet, amountMinor, ownerApprovalTimeoutMs, linkApprovalTimeoutMs, signal } = input;
+    const {
+      wallet,
+      amountMinor,
+      ownerApprovalTimeoutMs,
+      linkApprovalTimeoutMs,
+      onLinkApproval,
+      signal
+    } = input;
     if (!Number.isSafeInteger(amountMinor) || amountMinor <= 0) {
       throw checkoutError("amountMinor must be a positive integer number of cents");
     }
+    assertLinkApprovalCallback(onLinkApproval);
     if (amountMinor === previous.checkpoint.amountMinor) return previous;
     const old = previous.checkpoint;
     if (!await closeLinkRequest(wallet, previous.linkRequestId)) {
@@ -3060,12 +3128,17 @@ var CheckoutClient = class {
         ...signal ? { signal } : {}
       });
     }
-    return __privateMethod(this, _CheckoutClient_instances, linkCardFor_fn).call(this, checkpoint, wallet, linkApprovalTimeoutMs, signal);
+    return __privateMethod(this, _CheckoutClient_instances, linkCardFor_fn).call(this, checkpoint, wallet, {
+      linkApprovalTimeoutMs,
+      signal,
+      onLinkApproval
+    });
   }
 };
 _client4 = new WeakMap();
 _CheckoutClient_instances = new WeakSet();
-linkCardFor_fn = async function(checkpoint, wallet, linkApprovalTimeoutMs = 10 * 6e4, signal) {
+linkCardFor_fn = async function(checkpoint, wallet, options) {
+  const { linkApprovalTimeoutMs = 10 * 6e4, signal, onLinkApproval } = options;
   if (checkpoint.stage !== "APPROVED") {
     throw checkoutError(
       `Conto has not approved a card for this checkpoint (stage ${checkpoint.stage}). Do not pay.`,
@@ -3075,6 +3148,7 @@ linkCardFor_fn = async function(checkpoint, wallet, linkApprovalTimeoutMs = 10 *
   const deadline = Date.now() + linkApprovalTimeoutMs;
   const call = signal ? { signal } : {};
   let linkRequestId;
+  let approvalUrl;
   let createStarted = false;
   try {
     const cardRequest = linkCardRequest(checkpoint);
@@ -3095,6 +3169,13 @@ linkCardFor_fn = async function(checkpoint, wallet, linkApprovalTimeoutMs = 10 *
         message: "Link returned a request for a different amount."
       });
     }
+    if (LINK_WAITING_STATUSES.has(request.status)) {
+      const details = linkApprovalDetails(request);
+      approvalUrl = details.approvalUrl;
+      if (onLinkApproval) {
+        notifyLinkApproval(onLinkApproval, { checkpoint, linkRequestId: request.id, ...details });
+      }
+    }
     while (linkRequestWaiting(request)) {
       const remainingSeconds = Math.floor((deadline - Date.now()) / 1e3);
       if (remainingSeconds <= 0) {
@@ -3109,6 +3190,7 @@ linkCardFor_fn = async function(checkpoint, wallet, linkApprovalTimeoutMs = 10 *
         ...call,
         timeoutSeconds: remainingSeconds
       });
+      approvalUrl = LINK_WAITING_STATUSES.has(request.status) ? linkApprovalDetails(request).approvalUrl ?? approvalUrl : void 0;
       if (linkRequestWaiting(request) && Date.now() - started < 1e3) {
         await sleep2(1e3, signal);
       }
@@ -3140,6 +3222,7 @@ linkCardFor_fn = async function(checkpoint, wallet, linkApprovalTimeoutMs = 10 *
         code: "LINK_CARD_NOT_CANCELLED",
         checkpoint,
         linkRequestId,
+        ...approvalUrl ? { approvalUrl } : {},
         holdReleased: false,
         retryGuidance: "Retry with the same input to resume this Link request, or cancel it with wallet.cancel(error.linkRequestId) and then call checkout.cancel(error.checkpoint.id)."
       });
@@ -3153,6 +3236,7 @@ linkCardFor_fn = async function(checkpoint, wallet, linkApprovalTimeoutMs = 10 *
       code: failure.code,
       checkpoint,
       ...linkRequestId ? { linkRequestId } : {},
+      ...linkRequestId && approvalUrl ? { approvalUrl } : {},
       holdReleased
     });
   }

package/dist/link-wallet.d.mts

@@ -38,8 +38,13 @@ interface LinkSpendRequest {
     amountMinor?: number;
     merchantName?: string;
     merchantUrl?: string;
-    /** Link page where the person can review the request. */
+    /**
+     * The Stripe Link page where the person can approve the request on the web
+     * while signed in to Link. Only an HTTPS link.com address is kept.
+     */
     approvalUrl?: string;
+    /** When Link stops accepting approval for the request, as an ISO 8601 time. */
+    approvalExpiresAt?: string;
     /** Set with requires_action. `auto_resume` means Link continues once the person finishes the step. */
     actionResolution?: string;
     /** Set with requires_action when Link gives the person a page to finish the step. */
@@ -117,4 +122,5 @@ declare function isLinkRequestId(value: unknown): value is string;
  */
 declare function linkCliWallet(options?: LinkCliWalletOptions): LinkWallet;
 
-export { type LinkCallOptions, type LinkCardCredential, type LinkCardRequestInput, type LinkCliWalletOptions, type LinkSpendRequest, type LinkSpendRequestStatus, type LinkWaitOptions, type LinkWallet, LinkWalletError, type LinkWalletErrorReason, isLinkRequestId, linkCliWallet };
+export { LinkWalletError, isLinkRequestId, linkCliWallet };
+export type { LinkCallOptions, LinkCardCredential, LinkCardRequestInput, LinkCliWalletOptions, LinkSpendRequest, LinkSpendRequestStatus, LinkWaitOptions, LinkWallet, LinkWalletErrorReason };

package/dist/link-wallet.d.ts

@@ -38,8 +38,13 @@ interface LinkSpendRequest {
     amountMinor?: number;
     merchantName?: string;
     merchantUrl?: string;
-    /** Link page where the person can review the request. */
+    /**
+     * The Stripe Link page where the person can approve the request on the web
+     * while signed in to Link. Only an HTTPS link.com address is kept.
+     */
     approvalUrl?: string;
+    /** When Link stops accepting approval for the request, as an ISO 8601 time. */
+    approvalExpiresAt?: string;
     /** Set with requires_action. `auto_resume` means Link continues once the person finishes the step. */
     actionResolution?: string;
     /** Set with requires_action when Link gives the person a page to finish the step. */
@@ -117,4 +122,5 @@ declare function isLinkRequestId(value: unknown): value is string;
  */
 declare function linkCliWallet(options?: LinkCliWalletOptions): LinkWallet;
 
-export { type LinkCallOptions, type LinkCardCredential, type LinkCardRequestInput, type LinkCliWalletOptions, type LinkSpendRequest, type LinkSpendRequestStatus, type LinkWaitOptions, type LinkWallet, LinkWalletError, type LinkWalletErrorReason, isLinkRequestId, linkCliWallet };
+export { LinkWalletError, isLinkRequestId, linkCliWallet };
+export type { LinkCallOptions, LinkCardCredential, LinkCardRequestInput, LinkCliWalletOptions, LinkSpendRequest, LinkSpendRequestStatus, LinkWaitOptions, LinkWallet, LinkWalletErrorReason };

package/dist/link-wallet.js

@@ -40,6 +40,34 @@ var import_node_fs = require("fs");
 var import_promises = require("fs/promises");
 var import_node_os = require("os");
 var import_node_path = __toESM(require("path"));
+
+// src/link-approval.ts
+function safeLinkApprovalUrl(value) {
+  if (typeof value !== "string" || value.length === 0 || value.length > 2048) return void 0;
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    return void 0;
+  }
+  if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || url.port !== "" || !(url.hostname === "link.com" || url.hostname.endsWith(".link.com"))) {
+    return void 0;
+  }
+  url.hash = "";
+  return url.toString();
+}
+function linkTime(value) {
+  let ms = Number.NaN;
+  if (typeof value === "number" && Number.isFinite(value) && value > 0) {
+    ms = value < 1e12 ? value * 1e3 : value;
+  } else if (typeof value === "string" && value.length > 0 && value.length <= 64) {
+    ms = Date.parse(value);
+  }
+  const date = new Date(ms);
+  return Number.isNaN(date.getTime()) ? void 0 : date.toISOString();
+}
+
+// src/link-wallet.ts
 var LinkWalletError = class extends Error {
   constructor(reason, message, linkCode) {
     super(message);
@@ -102,13 +130,16 @@ function parseSpendRequest(value) {
   const status = typeof data.status === "string" && KNOWN_STATUSES.has(data.status) ? data.status : "unknown";
   const nextAction = record(record(record(data.status_details).requires_action).next_action);
   const amount = data.amount;
+  const approvalUrl = safeLinkApprovalUrl(data.approval_url);
+  const approvalExpiresAt = linkTime(data.approval_window_expires_at);
   return {
     id,
     status,
     ...Number.isSafeInteger(amount) ? { amountMinor: amount } : {},
     ...text(data.merchant_name) ? { merchantName: text(data.merchant_name) } : {},
     ...httpsUrl(data.merchant_url) ? { merchantUrl: httpsUrl(data.merchant_url) } : {},
-    ...httpsUrl(data.approval_url) ? { approvalUrl: httpsUrl(data.approval_url) } : {},
+    ...approvalUrl ? { approvalUrl } : {},
+    ...approvalExpiresAt ? { approvalExpiresAt } : {},
     ...text(nextAction.resolution) ? { actionResolution: text(nextAction.resolution) } : {},
     ...httpsUrl(nextAction.action_url) ? { actionUrl: httpsUrl(nextAction.action_url) } : {}
   };
@@ -116,15 +147,6 @@ function parseSpendRequest(value) {
 function invalidCard() {
   return new LinkWalletError("invalid_response", "Link returned card data this SDK cannot read.");
 }
-function validUntil(value) {
-  if (typeof value === "number" && Number.isFinite(value) && value > 0) {
-    return new Date(value < 1e12 ? value * 1e3 : value).toISOString();
-  }
-  if (typeof value === "string" && !Number.isNaN(Date.parse(value))) {
-    return new Date(value).toISOString();
-  }
-  return void 0;
-}
 function parseCard(value) {
   const card = record(value);
   const number = typeof card.number === "string" ? card.number.replace(/[\s-]/g, "") : "";
@@ -136,7 +158,7 @@ function parseCard(value) {
   if (!/^\d{12,19}$/.test(number) || !/^\d{3,4}$/.test(securityValue) || !Number.isInteger(expMonth) || expMonth < 1 || expMonth > 12 || !Number.isInteger(expYear) || expYear < 2e3) {
     throw invalidCard();
   }
-  const until = validUntil(card.valid_until);
+  const until = linkTime(card.valid_until);
   const brand = text(card.brand);
   return {
     number,

package/dist/link-wallet.mjs

@@ -1,3 +1,7 @@
+import {
+  linkTime,
+  safeLinkApprovalUrl
+} from "./chunk-PVMUL3JC.mjs";
 import "./chunk-TGOYFBKZ.mjs";
 
 // src/link-wallet.ts
@@ -68,13 +72,16 @@ function parseSpendRequest(value) {
   const status = typeof data.status === "string" && KNOWN_STATUSES.has(data.status) ? data.status : "unknown";
   const nextAction = record(record(record(data.status_details).requires_action).next_action);
   const amount = data.amount;
+  const approvalUrl = safeLinkApprovalUrl(data.approval_url);
+  const approvalExpiresAt = linkTime(data.approval_window_expires_at);
   return {
     id,
     status,
     ...Number.isSafeInteger(amount) ? { amountMinor: amount } : {},
     ...text(data.merchant_name) ? { merchantName: text(data.merchant_name) } : {},
     ...httpsUrl(data.merchant_url) ? { merchantUrl: httpsUrl(data.merchant_url) } : {},
-    ...httpsUrl(data.approval_url) ? { approvalUrl: httpsUrl(data.approval_url) } : {},
+    ...approvalUrl ? { approvalUrl } : {},
+    ...approvalExpiresAt ? { approvalExpiresAt } : {},
     ...text(nextAction.resolution) ? { actionResolution: text(nextAction.resolution) } : {},
     ...httpsUrl(nextAction.action_url) ? { actionUrl: httpsUrl(nextAction.action_url) } : {}
   };
@@ -82,15 +89,6 @@ function parseSpendRequest(value) {
 function invalidCard() {
   return new LinkWalletError("invalid_response", "Link returned card data this SDK cannot read.");
 }
-function validUntil(value) {
-  if (typeof value === "number" && Number.isFinite(value) && value > 0) {
-    return new Date(value < 1e12 ? value * 1e3 : value).toISOString();
-  }
-  if (typeof value === "string" && !Number.isNaN(Date.parse(value))) {
-    return new Date(value).toISOString();
-  }
-  return void 0;
-}
 function parseCard(value) {
   const card = record(value);
   const number = typeof card.number === "string" ? card.number.replace(/[\s-]/g, "") : "";
@@ -102,7 +100,7 @@ function parseCard(value) {
   if (!/^\d{12,19}$/.test(number) || !/^\d{3,4}$/.test(securityValue) || !Number.isInteger(expMonth) || expMonth < 1 || expMonth > 12 || !Number.isInteger(expYear) || expYear < 2e3) {
     throw invalidCard();
   }
-  const until = validUntil(card.valid_until);
+  const until = linkTime(card.valid_until);
   const brand = text(card.brand);
   return {
     number,

package/dist/playwright.d.mts

@@ -256,4 +256,5 @@ declare function createGuardedPlaywrightCheckoutRuntimeHost(config: GuardedPlayw
  */
 declare function createGuardedPlaywrightCheckoutHttpHandler(config: GuardedPlaywrightCheckoutHttpHandlerConfig): GuardedPlaywrightCheckoutHttpHandler;
 
-export { type DiscoverPlaywrightCheckoutTargetInput, type DiscoveredPlaywrightCheckoutTarget, type EncryptedPlaywrightCheckoutTargetStoreConfig, type GuardedPlaywrightCheckoutClient, type GuardedPlaywrightCheckoutHttpHandler, type GuardedPlaywrightCheckoutHttpHandlerConfig, type GuardedPlaywrightCheckoutHttpRequest, type GuardedPlaywrightCheckoutRuntime, type GuardedPlaywrightCheckoutRuntimeConfig, type GuardedPlaywrightCheckoutRuntimeHost, type GuardedPlaywrightCheckoutRuntimeHostConfig, type PlaywrightCdpSessionRegistry, type PlaywrightCdpSessionRegistryConfig, type PlaywrightCheckoutAdapter, type PlaywrightCheckoutAdapterConfig, type PlaywrightCheckoutDispatchResult, type PlaywrightCheckoutTargetBlobStore, type PlaywrightCheckoutTargetRegistration, type PlaywrightCheckoutTargetStore, type PlaywrightSessionInteractiveTarget, type PlaywrightSessionObservation, type PlaywrightSessionObserver, type PlaywrightSessionObserverConfig, createEncryptedPlaywrightCheckoutTargetStore, createGuardedPlaywrightCheckoutHttpHandler, createGuardedPlaywrightCheckoutRuntime, createGuardedPlaywrightCheckoutRuntimeHost, createInMemoryPlaywrightCheckoutTargetStore, createPlaywrightCdpSessionRegistry, createPlaywrightCheckoutAdapter, createPlaywrightSessionObserver };
+export { createEncryptedPlaywrightCheckoutTargetStore, createGuardedPlaywrightCheckoutHttpHandler, createGuardedPlaywrightCheckoutRuntime, createGuardedPlaywrightCheckoutRuntimeHost, createInMemoryPlaywrightCheckoutTargetStore, createPlaywrightCdpSessionRegistry, createPlaywrightCheckoutAdapter, createPlaywrightSessionObserver };
+export type { DiscoverPlaywrightCheckoutTargetInput, DiscoveredPlaywrightCheckoutTarget, EncryptedPlaywrightCheckoutTargetStoreConfig, GuardedPlaywrightCheckoutClient, GuardedPlaywrightCheckoutHttpHandler, GuardedPlaywrightCheckoutHttpHandlerConfig, GuardedPlaywrightCheckoutHttpRequest, GuardedPlaywrightCheckoutRuntime, GuardedPlaywrightCheckoutRuntimeConfig, GuardedPlaywrightCheckoutRuntimeHost, GuardedPlaywrightCheckoutRuntimeHostConfig, PlaywrightCdpSessionRegistry, PlaywrightCdpSessionRegistryConfig, PlaywrightCheckoutAdapter, PlaywrightCheckoutAdapterConfig, PlaywrightCheckoutDispatchResult, PlaywrightCheckoutTargetBlobStore, PlaywrightCheckoutTargetRegistration, PlaywrightCheckoutTargetStore, PlaywrightSessionInteractiveTarget, PlaywrightSessionObservation, PlaywrightSessionObserver, PlaywrightSessionObserverConfig };

package/dist/playwright.d.ts

@@ -256,4 +256,5 @@ declare function createGuardedPlaywrightCheckoutRuntimeHost(config: GuardedPlayw
  */
 declare function createGuardedPlaywrightCheckoutHttpHandler(config: GuardedPlaywrightCheckoutHttpHandlerConfig): GuardedPlaywrightCheckoutHttpHandler;
 
-export { type DiscoverPlaywrightCheckoutTargetInput, type DiscoveredPlaywrightCheckoutTarget, type EncryptedPlaywrightCheckoutTargetStoreConfig, type GuardedPlaywrightCheckoutClient, type GuardedPlaywrightCheckoutHttpHandler, type GuardedPlaywrightCheckoutHttpHandlerConfig, type GuardedPlaywrightCheckoutHttpRequest, type GuardedPlaywrightCheckoutRuntime, type GuardedPlaywrightCheckoutRuntimeConfig, type GuardedPlaywrightCheckoutRuntimeHost, type GuardedPlaywrightCheckoutRuntimeHostConfig, type PlaywrightCdpSessionRegistry, type PlaywrightCdpSessionRegistryConfig, type PlaywrightCheckoutAdapter, type PlaywrightCheckoutAdapterConfig, type PlaywrightCheckoutDispatchResult, type PlaywrightCheckoutTargetBlobStore, type PlaywrightCheckoutTargetRegistration, type PlaywrightCheckoutTargetStore, type PlaywrightSessionInteractiveTarget, type PlaywrightSessionObservation, type PlaywrightSessionObserver, type PlaywrightSessionObserverConfig, createEncryptedPlaywrightCheckoutTargetStore, createGuardedPlaywrightCheckoutHttpHandler, createGuardedPlaywrightCheckoutRuntime, createGuardedPlaywrightCheckoutRuntimeHost, createInMemoryPlaywrightCheckoutTargetStore, createPlaywrightCdpSessionRegistry, createPlaywrightCheckoutAdapter, createPlaywrightSessionObserver };
+export { createEncryptedPlaywrightCheckoutTargetStore, createGuardedPlaywrightCheckoutHttpHandler, createGuardedPlaywrightCheckoutRuntime, createGuardedPlaywrightCheckoutRuntimeHost, createInMemoryPlaywrightCheckoutTargetStore, createPlaywrightCdpSessionRegistry, createPlaywrightCheckoutAdapter, createPlaywrightSessionObserver };
+export type { DiscoverPlaywrightCheckoutTargetInput, DiscoveredPlaywrightCheckoutTarget, EncryptedPlaywrightCheckoutTargetStoreConfig, GuardedPlaywrightCheckoutClient, GuardedPlaywrightCheckoutHttpHandler, GuardedPlaywrightCheckoutHttpHandlerConfig, GuardedPlaywrightCheckoutHttpRequest, GuardedPlaywrightCheckoutRuntime, GuardedPlaywrightCheckoutRuntimeConfig, GuardedPlaywrightCheckoutRuntimeHost, GuardedPlaywrightCheckoutRuntimeHostConfig, PlaywrightCdpSessionRegistry, PlaywrightCdpSessionRegistryConfig, PlaywrightCheckoutAdapter, PlaywrightCheckoutAdapterConfig, PlaywrightCheckoutDispatchResult, PlaywrightCheckoutTargetBlobStore, PlaywrightCheckoutTargetRegistration, PlaywrightCheckoutTargetStore, PlaywrightSessionInteractiveTarget, PlaywrightSessionObservation, PlaywrightSessionObserver, PlaywrightSessionObserverConfig };

package/dist/playwright.js

@@ -322,13 +322,16 @@ function createEncryptedPlaywrightCheckoutTargetStore(config) {
         if (envelope.version !== TARGET_STORE_ENVELOPE_VERSION || typeof envelope.iv !== "string" || typeof envelope.ciphertext !== "string" || typeof envelope.tag !== "string") {
           throw new Error("invalid envelope");
         }
+        const tag = Buffer.from(envelope.tag, "base64url");
+        if (tag.length !== 16) throw new Error("invalid envelope");
         const decipher = (0, import_node_crypto2.createDecipheriv)(
           "aes-256-gcm",
           key,
-          Buffer.from(envelope.iv, "base64url")
+          Buffer.from(envelope.iv, "base64url"),
+          { authTagLength: 16 }
         );
         decipher.setAAD(Buffer.from(storageKey));
-        decipher.setAuthTag(Buffer.from(envelope.tag, "base64url"));
+        decipher.setAuthTag(tag);
         const plaintext = Buffer.concat([
           decipher.update(Buffer.from(envelope.ciphertext, "base64url")),
           decipher.final()

package/dist/playwright.mjs

@@ -7,7 +7,7 @@ import {
   createPlaywrightCdpSessionRegistry,
   createPlaywrightCheckoutAdapter,
   createPlaywrightSessionObserver
-} from "./chunk-VSIO6PYA.mjs";
+} from "./chunk-JBTJXIMI.mjs";
 import "./chunk-O5RAAB2U.mjs";
 import "./chunk-TGOYFBKZ.mjs";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@conto_finance/sdk",
-  "version": "0.6.2-beta.1",
+  "version": "0.7.1",
   "description": "Conto SDK for AI agent payment authorization",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -33,8 +33,7 @@
     }
   },
   "publishConfig": {
-    "access": "public",
-    "tag": "beta"
+    "access": "public"
   },
   "engines": {
     "node": ">=20.19.0"
@@ -72,7 +71,7 @@
     "email": "support@conto.finance"
   },
   "dependencies": {
-    "@sentry/node": "^10.73.0"
+    "@sentry/node": "^11.8.0"
   },
   "peerDependencies": {
     "playwright-core": ">=1.50.0"
@@ -86,9 +85,9 @@
     "esbuild": "0.28.1"
   },
   "devDependencies": {
-    "@types/node": "22.19.18",
+    "@types/node": "26.6.5",
     "playwright-core": "1.61.0",
-    "tsup": "^8.5.1",
-    "typescript": "^5.9.3"
+    "tsup": "^9.0.0",
+    "typescript": "^6.0.3"
   }
 }