@conto_finance/sdk 0.7.1 → 0.8.1

package/dist/link-wallet.d.mts

@@ -49,6 +49,8 @@ interface LinkSpendRequest {
     actionResolution?: string;
     /** Set with requires_action when Link gives the person a page to finish the step. */
     actionUrl?: string;
+    /** The metadata sent with the request, when Link returns it. */
+    metadata?: Record<string, string>;
 }
 /**
  * The single-use virtual card Link issued for an approved request. Live card
@@ -85,7 +87,10 @@ interface LinkWallet {
     waitForApproval(id: string, options?: LinkWaitOptions): Promise<LinkSpendRequest>;
     /** Read the card of an approved request. */
     retrieveCard(id: string, options?: LinkCallOptions): Promise<LinkCardCredential>;
-    /** Cancel a request that is created, pending approval, or approved. */
+    /**
+     * Cancel a request, or confirm Link already closed it. Throws when its card
+     * may still work or may have been used, so keep the hold.
+     */
     cancel(id: string, options?: LinkCallOptions): Promise<void>;
 }
 type LinkWalletErrorReason = 'not_installed' | 'not_logged_in' | 'not_found' | 'not_approved' | 'invalid_input' | 'invalid_response' | 'timed_out' | 'aborted' | 'cli_failed';
@@ -98,7 +103,11 @@ declare class LinkWalletError extends Error {
     readonly reason: LinkWalletErrorReason;
     /** The error code link-cli reported, when it reported a safe one. */
     readonly linkCode?: string;
-    constructor(reason: LinkWalletErrorReason, message: string, linkCode?: string);
+    /** The open Link request with the same details that blocks this one. */
+    readonly duplicateOf?: string;
+    /** The checkpoint Link has on that request, as Link reported it. */
+    readonly duplicateCheckpoint?: string;
+    constructor(reason: LinkWalletErrorReason, message: string, linkCode?: string, duplicateOf?: string, duplicateCheckpoint?: string);
 }
 interface LinkCliWalletOptions {
     /** The link-cli executable. Defaults to `link-cli` on PATH. */

package/dist/link-wallet.d.ts

@@ -49,6 +49,8 @@ interface LinkSpendRequest {
     actionResolution?: string;
     /** Set with requires_action when Link gives the person a page to finish the step. */
     actionUrl?: string;
+    /** The metadata sent with the request, when Link returns it. */
+    metadata?: Record<string, string>;
 }
 /**
  * The single-use virtual card Link issued for an approved request. Live card
@@ -85,7 +87,10 @@ interface LinkWallet {
     waitForApproval(id: string, options?: LinkWaitOptions): Promise<LinkSpendRequest>;
     /** Read the card of an approved request. */
     retrieveCard(id: string, options?: LinkCallOptions): Promise<LinkCardCredential>;
-    /** Cancel a request that is created, pending approval, or approved. */
+    /**
+     * Cancel a request, or confirm Link already closed it. Throws when its card
+     * may still work or may have been used, so keep the hold.
+     */
     cancel(id: string, options?: LinkCallOptions): Promise<void>;
 }
 type LinkWalletErrorReason = 'not_installed' | 'not_logged_in' | 'not_found' | 'not_approved' | 'invalid_input' | 'invalid_response' | 'timed_out' | 'aborted' | 'cli_failed';
@@ -98,7 +103,11 @@ declare class LinkWalletError extends Error {
     readonly reason: LinkWalletErrorReason;
     /** The error code link-cli reported, when it reported a safe one. */
     readonly linkCode?: string;
-    constructor(reason: LinkWalletErrorReason, message: string, linkCode?: string);
+    /** The open Link request with the same details that blocks this one. */
+    readonly duplicateOf?: string;
+    /** The checkpoint Link has on that request, as Link reported it. */
+    readonly duplicateCheckpoint?: string;
+    constructor(reason: LinkWalletErrorReason, message: string, linkCode?: string, duplicateOf?: string, duplicateCheckpoint?: string);
 }
 interface LinkCliWalletOptions {
     /** The link-cli executable. Defaults to `link-cli` on PATH. */

package/dist/link-wallet.js

@@ -69,12 +69,14 @@ function linkTime(value) {
 
 // src/link-wallet.ts
 var LinkWalletError = class extends Error {
-  constructor(reason, message, linkCode) {
+  constructor(reason, message, linkCode, duplicateOf, duplicateCheckpoint) {
     super(message);
     this.name = "LinkWalletError";
     this.reason = reason;
     this.code = reason === "not_installed" || reason === "not_logged_in" ? "LINK_WALLET_UNAVAILABLE" : "LINK_WALLET_FAILED";
     if (linkCode) this.linkCode = linkCode;
+    if (duplicateOf) this.duplicateOf = duplicateOf;
+    if (duplicateCheckpoint) this.duplicateCheckpoint = duplicateCheckpoint;
   }
 };
 var LINK_REQUEST_ID = /^lsrq_[A-Za-z0-9]{1,64}$/;
@@ -91,6 +93,7 @@ var KNOWN_STATUSES = /* @__PURE__ */ new Set([
   "canceled",
   "failed"
 ]);
+var CLOSED_STATUSES = /* @__PURE__ */ new Set(["denied", "expired", "canceled", "failed"]);
 var MAX_OUTPUT_BYTES = 1024 * 1024;
 var COMMAND_TIMEOUT_MS = 6e4;
 function record(value) {
@@ -132,6 +135,11 @@ function parseSpendRequest(value) {
   const amount = data.amount;
   const approvalUrl = safeLinkApprovalUrl(data.approval_url);
   const approvalExpiresAt = linkTime(data.approval_window_expires_at);
+  const metadata = Object.fromEntries(
+    Object.entries(record(data.metadata)).filter(
+      (entry) => typeof entry[1] === "string"
+    )
+  );
   return {
     id,
     status,
@@ -141,7 +149,8 @@ function parseSpendRequest(value) {
     ...approvalUrl ? { approvalUrl } : {},
     ...approvalExpiresAt ? { approvalExpiresAt } : {},
     ...text(nextAction.resolution) ? { actionResolution: text(nextAction.resolution) } : {},
-    ...httpsUrl(nextAction.action_url) ? { actionUrl: httpsUrl(nextAction.action_url) } : {}
+    ...httpsUrl(nextAction.action_url) ? { actionUrl: httpsUrl(nextAction.action_url) } : {},
+    ...Object.keys(metadata).length ? { metadata } : {}
   };
 }
 function invalidCard() {
@@ -342,9 +351,28 @@ function linkCliWallet(options = {}) {
         const existing = typeof message === "string" ? /matching spend request already exists: (lsrq_[A-Za-z0-9]{1,64})/.exec(message)?.[1] : void 0;
         if (existing) {
           const current = await readOnce(existing, call);
-          if (current.amountMinor === input.amountMinor && (current.merchantUrl === void 0 || new URL(current.merchantUrl).origin === new URL(input.merchantUrl).origin)) {
+          const owner = current.metadata?.conto_checkpoint;
+          const mine = input.metadata?.conto_checkpoint;
+          if (owner && owner !== mine) {
+            throw new LinkWalletError(
+              "invalid_input",
+              "Link has an open request for another purchase with the same details.",
+              "duplicate_for_other_purchase",
+              existing,
+              owner
+            );
+          }
+          if (owner === mine && current.amountMinor === input.amountMinor && (current.merchantUrl === void 0 || new URL(current.merchantUrl).origin === new URL(input.merchantUrl).origin)) {
             return current;
           }
+          if (!owner && mine) {
+            throw new LinkWalletError(
+              "cli_failed",
+              "Link has an open request with the same details and no checkpoint on it.",
+              "duplicate_without_checkpoint",
+              existing
+            );
+          }
         }
         throw failureFromOutput(result.value);
       }
@@ -410,7 +438,16 @@ function linkCliWallet(options = {}) {
     },
     async cancel(id, call) {
       requireRequestId(id);
-      await runOrThrow(["spend-request", "cancel", id], call);
+      try {
+        await runOrThrow(["spend-request", "cancel", id], call);
+      } catch (error) {
+        const status = await readOnce(id, call).then(
+          (request) => request.status,
+          () => void 0
+        );
+        if (status !== void 0 && CLOSED_STATUSES.has(status)) return;
+        throw error;
+      }
     }
   };
 }

package/dist/link-wallet.mjs

@@ -11,12 +11,14 @@ import { chmod, mkdtemp, open, rm } from "fs/promises";
 import { tmpdir } from "os";
 import path from "path";
 var LinkWalletError = class extends Error {
-  constructor(reason, message, linkCode) {
+  constructor(reason, message, linkCode, duplicateOf, duplicateCheckpoint) {
     super(message);
     this.name = "LinkWalletError";
     this.reason = reason;
     this.code = reason === "not_installed" || reason === "not_logged_in" ? "LINK_WALLET_UNAVAILABLE" : "LINK_WALLET_FAILED";
     if (linkCode) this.linkCode = linkCode;
+    if (duplicateOf) this.duplicateOf = duplicateOf;
+    if (duplicateCheckpoint) this.duplicateCheckpoint = duplicateCheckpoint;
   }
 };
 var LINK_REQUEST_ID = /^lsrq_[A-Za-z0-9]{1,64}$/;
@@ -33,6 +35,7 @@ var KNOWN_STATUSES = /* @__PURE__ */ new Set([
   "canceled",
   "failed"
 ]);
+var CLOSED_STATUSES = /* @__PURE__ */ new Set(["denied", "expired", "canceled", "failed"]);
 var MAX_OUTPUT_BYTES = 1024 * 1024;
 var COMMAND_TIMEOUT_MS = 6e4;
 function record(value) {
@@ -74,6 +77,11 @@ function parseSpendRequest(value) {
   const amount = data.amount;
   const approvalUrl = safeLinkApprovalUrl(data.approval_url);
   const approvalExpiresAt = linkTime(data.approval_window_expires_at);
+  const metadata = Object.fromEntries(
+    Object.entries(record(data.metadata)).filter(
+      (entry) => typeof entry[1] === "string"
+    )
+  );
   return {
     id,
     status,
@@ -83,7 +91,8 @@ function parseSpendRequest(value) {
     ...approvalUrl ? { approvalUrl } : {},
     ...approvalExpiresAt ? { approvalExpiresAt } : {},
     ...text(nextAction.resolution) ? { actionResolution: text(nextAction.resolution) } : {},
-    ...httpsUrl(nextAction.action_url) ? { actionUrl: httpsUrl(nextAction.action_url) } : {}
+    ...httpsUrl(nextAction.action_url) ? { actionUrl: httpsUrl(nextAction.action_url) } : {},
+    ...Object.keys(metadata).length ? { metadata } : {}
   };
 }
 function invalidCard() {
@@ -284,9 +293,28 @@ function linkCliWallet(options = {}) {
         const existing = typeof message === "string" ? /matching spend request already exists: (lsrq_[A-Za-z0-9]{1,64})/.exec(message)?.[1] : void 0;
         if (existing) {
           const current = await readOnce(existing, call);
-          if (current.amountMinor === input.amountMinor && (current.merchantUrl === void 0 || new URL(current.merchantUrl).origin === new URL(input.merchantUrl).origin)) {
+          const owner = current.metadata?.conto_checkpoint;
+          const mine = input.metadata?.conto_checkpoint;
+          if (owner && owner !== mine) {
+            throw new LinkWalletError(
+              "invalid_input",
+              "Link has an open request for another purchase with the same details.",
+              "duplicate_for_other_purchase",
+              existing,
+              owner
+            );
+          }
+          if (owner === mine && current.amountMinor === input.amountMinor && (current.merchantUrl === void 0 || new URL(current.merchantUrl).origin === new URL(input.merchantUrl).origin)) {
             return current;
           }
+          if (!owner && mine) {
+            throw new LinkWalletError(
+              "cli_failed",
+              "Link has an open request with the same details and no checkpoint on it.",
+              "duplicate_without_checkpoint",
+              existing
+            );
+          }
         }
         throw failureFromOutput(result.value);
       }
@@ -352,7 +380,16 @@ function linkCliWallet(options = {}) {
     },
     async cancel(id, call) {
       requireRequestId(id);
-      await runOrThrow(["spend-request", "cancel", id], call);
+      try {
+        await runOrThrow(["spend-request", "cancel", id], call);
+      } catch (error) {
+        const status = await readOnce(id, call).then(
+          (request) => request.status,
+          () => void 0
+        );
+        if (status !== void 0 && CLOSED_STATUSES.has(status)) return;
+        throw error;
+      }
     }
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@conto_finance/sdk",
-  "version": "0.7.1",
+  "version": "0.8.1",
   "description": "Conto SDK for AI agent payment authorization",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -46,7 +46,7 @@
     "dev": "tsup --watch",
     "lint": "tsc --noEmit",
     "test": "npm run lint && npm run test:contract && npm run test:consumer",
-    "test:contract": "npm run build && node --test test/contract.test.mjs test/playwright.test.mjs test/browserbase.test.mjs test/checkout-verifier.test.mjs test/developer-experience.test.mjs test/checkout.test.mjs test/link-wallet.test.mjs test/purchases.test.mjs test/allowances.test.mjs test/purchase-watch-lifecycle.test.mjs ../../examples/link-wallet-agent/verify.test.mjs",
+    "test:contract": "npm run build && node --test test/contract.test.mjs test/playwright.test.mjs test/browserbase.test.mjs test/checkout-verifier.test.mjs test/developer-experience.test.mjs test/checkout.test.mjs test/link-wallet.test.mjs test/purchases.test.mjs test/allowances.test.mjs test/purchase-watch-lifecycle.test.mjs test/spending.test.mjs ../../examples/link-wallet-agent/verify.test.mjs",
     "test:consumer": "npm run build && node --test test/consumer.test.mjs",
     "verify:release": "node scripts/verify-release.mjs",
     "prepublishOnly": "npm run verify:release && npm run lint && npm run test:contract && npm run test:consumer"