@curless/sinocare-demo 0.56.0 → 0.58.0

package/dist/checkout-card.generated.js.map

@@ -1 +1 @@
-{"version":3,"file":"checkout-card.generated.js","sourceRoot":"","sources":["../src/checkout-card.generated.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,iFAAiF;AACjF,gFAAgF;AAChF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,kBAAkB,GAAW,MAAM,CAAC,IAAI,CACnD,850dAA850d,EAC950d,QAAQ,CACT,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"checkout-card.generated.js","sourceRoot":"","sources":["../src/checkout-card.generated.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,iFAAiF;AACjF,gFAAgF;AAChF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,kBAAkB,GAAW,MAAM,CAAC,IAAI,CACnD,k44dAAk44d,EACl44d,QAAQ,CACT,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC"}

package/dist/index.js

@@ -229,11 +229,11 @@ const WALLET_FALLBACK_OK = process.env.SINOCARE_WALLET_FALLBACK === '1';
 const mintSharedPaymentToken = async (amountMinor, currency) => {
     if (!STRIPE_AGENT_KEY || !SELLER_PROFILE)
         return null;
-    // A live key here means a booking charges a REAL card for the full resort
+    // A live key here means a booking charges a REAL card for the full product
     // price (€1,280–2,900) the moment someone clicks pay in the card — with no
     // confirmation step anywhere. Refuse unless that is explicitly what you want.
     if (STRIPE_AGENT_SECRET_KEY_IS_LIVE && !WALLET_LIVE_OK) {
-        throw new Error('refusing to mint with a LIVE Stripe key — a booking would charge a real card for the full resort price. Set SINOCARE_ALLOW_LIVE_WALLET=1 if that is genuinely intended.');
+        throw new Error('refusing to mint with a LIVE Stripe key — a booking would charge a real card for the full product price. Set SINOCARE_ALLOW_LIVE_WALLET=1 if that is genuinely intended.');
     }
     const post = async (path, body, preview = false) => {
         const res = await fetch(`https://api.stripe.com/v1/${path}`, {
@@ -500,7 +500,7 @@ let agentBudget = loadBudget();
 let lastCheckout = null;
 const completedBookings = new Map();
 // Persist the card's checkout state (last pick + booking receipts) across restarts
-// and conversations, so returning to a paid resort's card shows its receipt
+// and conversations, so returning to a paid product's card shows its receipt
 // instead of resetting to the picker — and so a fresh "book it again" starts
 // clean. Keyed to the agent token so a different buyer starts empty. Override the
 // path with SINOCARE_DEMO_STATE_FILE.
@@ -556,12 +556,12 @@ if (tokenFp) {
             // It exists for one case: a card self-healing with no arguments, where
             // the server replays the last pick so the widget fills instead of
             // hanging. Restored from disk it does that to a card belonging to a
-            // DIFFERENT resort — restart the app, ask for a new hotel, and the card
+            // DIFFERENT product — restart the app, ask for a new hotel, and the card
             // renders the previous booking's receipt, which reads as having booked
             // something you did not.
             //
             // `bookings` is safe to restore because it is keyed by sku: it is only
-            // ever consulted for a resort someone actually asked about.
+            // ever consulted for a product someone actually asked about.
             for (const [k, v] of saved.bookings ?? [])
                 completedBookings.set(k, v);
         }
@@ -597,7 +597,7 @@ const finishBooking = (sku, value) => {
         }).catch(() => { });
         completedBookings.set(sku, {
             sku,
-            name: String(value.resort ?? ''),
+            name: String(value.product ?? ''),
             protocol: value.protocol,
             total: (value.total ?? value.paidUsdc ?? value.paidRlusd ?? value.priceEur),
             status: value.status,
@@ -616,7 +616,7 @@ const finishBooking = (sku, value) => {
     return text(value);
 };
 // The 'booked' card view: a receipt shown when a rehydrated checkout resolves to
-// an already-booked resort. Carries the pick fields too so the card's "再订一次"
+// an already-booked product. Carries the pick fields too so the card's "再订一次"
 // button can drop straight back into the picker without another round-trip.
 const bookedView = (pick, r) => ({
     view: 'booked',
@@ -645,9 +645,21 @@ const bookedView = (pick, r) => ({
 // corrected data and the old JS draws the old picture. Three widget changes
 // went out today without a bump, and the receipt/picker fix appeared to have
 // no effect at all because of it.
-const CHECKOUT_URI = 'ui://sinocare/card-v24.html';
+const CHECKOUT_URI = 'ui://sinocare/card-v26.html';
 const CARD_MIME = 'text/html;profile=mcp-app';
 const CHECKOUT_UI_META = { ui: { resourceUri: CHECKOUT_URI }, 'ui/resourceUri': CHECKOUT_URI };
+// WHERE THE CARD MAY LOAD IMAGES FROM.
+//
+// ⚠️ An MCP App runs in a sandboxed iframe and the spec is explicit: an empty
+// or omitted `resourceDomains` means NO network resources. Every product photo
+// is then blocked before it leaves the starting line — not by the CDN, not by
+// the markup — and the card renders a row of broken-image icons. The catalog is
+// served from a Shopify store, so its images come off Shopify's CDN.
+const IMAGE_ORIGINS = ['https://cdn.shopify.com'];
+const WIDGET_META = {
+    ui: { csp: { resourceDomains: IMAGE_ORIGINS, connectDomains: [] } },
+    'openai/widgetCSP': { connect_domains: [], resource_domains: IMAGE_ORIGINS },
+};
 const TOOLS = [
     {
         name: 'list_sinocare_products',
@@ -666,7 +678,7 @@ const TOOLS = [
     },
     {
         name: 'get_sinocare_product',
-        description: 'Get one Sinocare resort by its sku (from list_sinocare_products).',
+        description: 'Get one Sinocare product by its sku (from list_sinocare_products).',
         inputSchema: {
             type: 'object',
             required: ['sku'],
@@ -675,17 +687,17 @@ const TOOLS = [
     },
     {
         name: 'start_sinocare_checkout',
-        description: "THE DEFAULT WAY TO BOOK. Open a visual checkout card for a Sinocare resort so the user PICKS a payment method by clicking (instead of typing) — Card (ACP) / UCP / USDC (x402) / RLUSD (XRP Ledger) in-conversation, or a Payment Link hosted page. When the user wants to book, CALL THIS — do not list the payment methods as text and ask which one; the card is where the user chooses and pays. ALWAYS prefer this over buy_sinocare_product_*. YOU MUST identify the resort: pass its `sku` OR a `query` name (e.g. 'Val d'Isère', 'Saint-Moritz') — do NOT call this with no resort (the card can't render without one). If one resort matches, open its card directly rather than asking to confirm.",
+        description: "THE DEFAULT WAY TO BUY. Open a visual checkout card for a Sinocare product so the user PICKS a payment method by clicking (instead of typing) — Card (ACP) / UCP / USDC (x402) / RLUSD (XRP Ledger) in-conversation, or a Payment Link hosted page. When the user wants to buy, CALL THIS — do not list the payment methods as text and ask which one; the card is where the user chooses and pays. ALWAYS prefer this over buy_sinocare_product_*. YOU MUST identify the product: pass its `sku` OR a `query` name (e.g. 'Safe-Accu', 'Safe AQ Smart') — do NOT call this with no product (the card can't render without one). To show the whole catalog instead, call list_sinocare_products: it renders as a card too, and every row opens that product's checkout. If one product matches, open its card directly rather than asking to confirm.",
         inputSchema: {
             type: 'object',
             properties: {
                 sku: {
                     type: 'string',
-                    description: "the resort's exact sku (from list_sinocare_products)",
+                    description: "the product's exact sku (from list_sinocare_products)",
                 },
                 query: {
                     type: 'string',
-                    description: "the resort NAME (e.g. 'Val d'Isère') — used if you don't have the exact sku; resolved server-side. Pass `sku` OR `query`.",
+                    description: "the product NAME (e.g. 'Safe AQ Smart') — used if you don't have the exact sku; resolved server-side. Pass `sku` OR `query`.",
                 },
                 quantity: { type: 'integer', description: 'number of guests/weeks (default 1)' },
             },
@@ -694,7 +706,7 @@ const TOOLS = [
     },
     {
         name: 'create_sinocare_payment_link',
-        description: "Create a Payment Link for a resort — a PUBLIC hosted checkout page (like a Stripe Payment Link) the user opens in a browser to pay (test-mode card). Returns the URL. Mostly invoked by the checkout card's 'Payment Link' button; the external-link payment path.",
+        description: "Create a Payment Link for a product — a PUBLIC hosted checkout page (like a Stripe Payment Link) the user opens in a browser to pay (test-mode card). Returns the URL. Mostly invoked by the checkout card's 'Payment Link' button; the external-link payment path.",
         inputSchema: {
             type: 'object',
             required: ['sku'],
@@ -716,7 +728,7 @@ const TOOLS = [
     },
     {
         name: 'buy_sinocare_product_wallet',
-        description: "Book a Sinocare resort over ACP, paying from the buyer's own Curless wallet: the wallet mints a credential from the card THEY bound, capped by the limits THEY set, scoped to this seller and this amount for 15 minutes. If nobody is signed in, this returns a sign-in link — show it to the person; the card polls on its own and pays once they finish in the browser. Do NOT ask them for a password in the chat. If the wallet refuses because the booking is over their limit, tell the person it is their own limit and offer to raise it — do not retry with another payment method.",
+        description: "Book a Sinocare product over ACP, paying from the buyer's own Curless wallet: the wallet mints a credential from the card THEY bound, capped by the limits THEY set, scoped to this seller and this amount for 15 minutes. If nobody is signed in, this returns a sign-in link — show it to the person; the card polls on its own and pays once they finish in the browser. Do NOT ask them for a password in the chat. If the wallet refuses because the booking is over their limit, tell the person it is their own limit and offer to raise it — do not retry with another payment method.",
         inputSchema: {
             type: 'object',
             required: ['sku'],
@@ -787,7 +799,7 @@ const TOOLS = [
     },
     {
         name: 'buy_sinocare_product_acp',
-        description: 'Book a Sinocare resort over ACP (Agentic Commerce Protocol) — Sinocare prices the resort and opens a merchant-quoted checkout session; this agent completes it with a delegated card credential, settling on the card rail (test mode). One of THREE ways to pay: ACP (card) / UCP (card) / x402 (USDC). The card rail is an implementation detail, not a separate payment choice. Returns the booked order.',
+        description: 'Book a Sinocare product over ACP (Agentic Commerce Protocol) — Sinocare prices the product and opens a merchant-quoted checkout session; this agent completes it with a delegated card credential, settling on the card rail (test mode). One of THREE ways to pay: ACP (card) / UCP (card) / x402 (USDC). The card rail is an implementation detail, not a separate payment choice. Returns the booked order.',
         inputSchema: {
             type: 'object',
             required: ['sku'],
@@ -799,7 +811,7 @@ const TOOLS = [
     },
     {
         name: 'buy_sinocare_product_ucp',
-        description: 'Book a Sinocare resort over UCP (Universal Commerce Protocol, ucp.dev) — Sinocare prices it and opens a UCP checkout session. UCP "supports x402", and x402 is chain-agnostic, so the SAME UCP session settles FOUR ways (pass `pay`): `card` (default) → the agent authorizes with an AP2 PaymentMandate bound to the cart, settled on the card rail (test mode, same as ACP); `usdc` → the gateway freezes an x402 challenge and the agent pays with a signed EIP-3009 X-PAYMENT (USDC on Base/EVM); `usdc-sol` → same, on Solana — the agent partially signs an SPL transfer the facilitator co-signs + submits (USDC on Solana, buyer needs no SOL); `rlusd` → an XRPL x402 challenge, a signed XRPL Payment (Ed25519, no gas), on the XRP Ledger. The three stablecoin ways all settle on-chain over the stablecoin rail — currency + chain just pick the rail. The standing authorization (authorize_agent_budget) is attached on the card path. Returns the booked order.',
+        description: 'Book a Sinocare product over UCP (Universal Commerce Protocol, ucp.dev) — Sinocare prices it and opens a UCP checkout session. UCP "supports x402", and x402 is chain-agnostic, so the SAME UCP session settles FOUR ways (pass `pay`): `card` (default) → the agent authorizes with an AP2 PaymentMandate bound to the cart, settled on the card rail (test mode, same as ACP); `usdc` → the gateway freezes an x402 challenge and the agent pays with a signed EIP-3009 X-PAYMENT (USDC on Base/EVM); `usdc-sol` → same, on Solana — the agent partially signs an SPL transfer the facilitator co-signs + submits (USDC on Solana, buyer needs no SOL); `rlusd` → an XRPL x402 challenge, a signed XRPL Payment (Ed25519, no gas), on the XRP Ledger. The three stablecoin ways all settle on-chain over the stablecoin rail — currency + chain just pick the rail. The standing authorization (authorize_agent_budget) is attached on the card path. Returns the booked order.',
         inputSchema: {
             type: 'object',
             required: ['sku'],
@@ -844,7 +856,7 @@ const TOOLS = [
     },
     {
         name: 'buy_sinocare_product_x402',
-        description: 'Book a Sinocare resort and pay in USDC over x402. `chain` picks the USDC chain: `base` (default) → EVM, a signed EIP-3009 authorization; `solana` → an SVM transfer the buyer partially signs and the facilitator co-signs (feePayer) + submits (buyer needs no SOL). The merchant receives USDC at its address on that chain. Returns the booking + the USDC amount paid (+ the Solana tx on the solana path).',
+        description: 'Book a Sinocare product and pay in USDC over x402. `chain` picks the USDC chain: `base` (default) → EVM, a signed EIP-3009 authorization; `solana` → an SVM transfer the buyer partially signs and the facilitator co-signs (feePayer) + submits (buyer needs no SOL). The merchant receives USDC at its address on that chain. Returns the booking + the USDC amount paid (+ the Solana tx on the solana path).',
         inputSchema: {
             type: 'object',
             required: ['sku'],
@@ -866,7 +878,7 @@ const TOOLS = [
     },
     {
         name: 'buy_sinocare_product_rlusd',
-        description: "Book a Sinocare resort and pay in RLUSD (Ripple USD) over x402 on the XRP Ledger. Sinocare opens a merchant-quoted RLUSD session; this agent signs a standard XRPL Payment (Ed25519, no gas — the buyer pays the tiny XRPL fee) and Curless's self-hosted facilitator submits it on-ledger. Same x402 protocol as the USDC tool, different chain. Returns the booking + the RLUSD amount paid + the XRPL tx.",
+        description: "Book a Sinocare product and pay in RLUSD (Ripple USD) over x402 on the XRP Ledger. Sinocare opens a merchant-quoted RLUSD session; this agent signs a standard XRPL Payment (Ed25519, no gas — the buyer pays the tiny XRPL fee) and Curless's self-hosted facilitator submits it on-ledger. Same x402 protocol as the USDC tool, different chain. Returns the booking + the RLUSD amount paid + the XRPL tx.",
         inputSchema: {
             type: 'object',
             required: ['sku'],
@@ -878,7 +890,7 @@ const TOOLS = [
     },
     {
         name: 'buy_sinocare_product_skyfire',
-        description: "Book a Sinocare resort over Skyfire KYAPay (agent-native JWT payments). The buyer mints a Skyfire-SIGNED PAY token (via Skyfire, authorizing a small USDC charge to Sinocare — unlike the crypto rails the buyer can't self-sign, Skyfire signs it) and presents it to the Sinocare merchant backend, which charges it via the merchant SDK; agentbank verifies it against Skyfire's live JWKS — proving the agent's identity (Know Your Agent) AND the payment authorization — and records the USDC payment intent. PRODUCTION Skyfire (real token, real verify). Needs SKYFIRE_BUYER_API_KEY + SKYFIRE_SELLER_SERVICE_ID (to mint). Returns the verification + the recorded payment intent (agentbank verifies + records the authorization; it does not auto-capture).",
+        description: "Book a Sinocare product over Skyfire KYAPay (agent-native JWT payments). The buyer mints a Skyfire-SIGNED PAY token (via Skyfire, authorizing a small USDC charge to Sinocare — unlike the crypto rails the buyer can't self-sign, Skyfire signs it) and presents it to the Sinocare merchant backend, which charges it via the merchant SDK; agentbank verifies it against Skyfire's live JWKS — proving the agent's identity (Know Your Agent) AND the payment authorization — and records the USDC payment intent. PRODUCTION Skyfire (real token, real verify). Needs SKYFIRE_BUYER_API_KEY + SKYFIRE_SELLER_SERVICE_ID (to mint). Returns the verification + the recorded payment intent (agentbank verifies + records the authorization; it does not auto-capture).",
         inputSchema: {
             type: 'object',
             required: ['sku'],
@@ -890,7 +902,7 @@ const TOOLS = [
     },
     {
         name: 'buy_sinocare_product_mpp',
-        description: "Book a Sinocare resort over MPP (Machine Payments Protocol) settled on the Tempo payments chain. agentbank answers the unpaid request with an HTTP-402 Payment challenge whose SIGNED terms carry the on-chain payment (TIP-20 pathUSD token, merchant recipient, memo=challenge binding); the buyer's Tempo wallet pays it with transferWithMemo; the credential proves it by tx HASH and agentbank VERIFIES the on-chain transfer read-only, then captures the payment intent. Real Tempo testnet, on-chain stablecoin — no card, no gateway signing. Needs AGENTBANK_AGENT_TOKEN + TEMPO_BUYER_PRIVATE_KEY (a funded Tempo testnet key).",
+        description: "Book a Sinocare product over MPP (Machine Payments Protocol) settled on the Tempo payments chain. agentbank answers the unpaid request with an HTTP-402 Payment challenge whose SIGNED terms carry the on-chain payment (TIP-20 pathUSD token, merchant recipient, memo=challenge binding); the buyer's Tempo wallet pays it with transferWithMemo; the credential proves it by tx HASH and agentbank VERIFIES the on-chain transfer read-only, then captures the payment intent. Real Tempo testnet, on-chain stablecoin — no card, no gateway signing. Needs AGENTBANK_AGENT_TOKEN + TEMPO_BUYER_PRIVATE_KEY (a funded Tempo testnet key).",
         inputSchema: {
             type: 'object',
             required: ['sku'],
@@ -907,7 +919,7 @@ const TOOLS = [
     },
     {
         name: 'list_my_orders',
-        description: 'List my Sinocare bookings (orders) — newest first, with id, resort, amount, and status. Renders an interactive card: each settled booking has a 申请退款 (request refund) button. Use the order id with request_refund to ask for a refund.',
+        description: 'List my Sinocare bookings (orders) — newest first, with id, product, amount, and status. Renders an interactive card: each settled booking has a 申请退款 (request refund) button. Use the order id with request_refund to ask for a refund.',
         inputSchema: { type: 'object', properties: {} },
         _meta: CHECKOUT_UI_META,
     },
@@ -936,7 +948,7 @@ const text = (value) => ({
 // non-UI fallback only.
 const INSTRUCTIONS = [
     'Sinocare storefront (buyer side).',
-    'When the user wants to book a resort — any phrasing like "book …", "预订…", "reserve …" — call start_sinocare_checkout (pass the resort `sku`, or a `query` name such as "Saint-Moritz" / "Val d\'Isère") to open the visual checkout card. The user picks a payment method and pays by clicking IN THE CARD.',
+    'When the user wants to buy something — "buy", "order", "我要买…", "再来一盒试纸" — call start_sinocare_checkout (pass the product `sku`, or a `query` name such as "Safe-Accu") to open the visual checkout card. To show the whole catalog, call list_sinocare_products — it renders as a card too, and every row opens that product\'s checkout. The user picks a payment method and pays by clicking IN THE CARD.',
     'Do NOT enumerate the payment methods (ACP / UCP / x402 / RLUSD / Payment Link) as text and ask which one — that is what the card is for. Only fall back to describing options in prose if the checkout card genuinely cannot be shown (a non-UI host).',
     'If the product is ambiguous or unknown, show the catalog card with list_sinocare_products and let the person pick a row. If exactly one product matches, open its card directly rather than asking to confirm.',
     'Call the buy_sinocare_product_* tools directly only when the card is unavailable or the user explicitly asked for a specific rail in a plain-text flow.',
@@ -944,19 +956,25 @@ const INSTRUCTIONS = [
 const server = new Server({ name: 'sinocare', version: '0.5.0' }, { capabilities: { tools: {}, resources: {} }, instructions: INSTRUCTIONS });
 server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
 server.setRequestHandler(ListResourcesRequestSchema, async () => ({
-    resources: [{ uri: CHECKOUT_URI, name: 'Sinocare checkout', mimeType: CARD_MIME }],
+    resources: [
+        { uri: CHECKOUT_URI, name: 'Sinocare checkout', mimeType: CARD_MIME, _meta: WIDGET_META },
+    ],
 }));
 server.setRequestHandler(ReadResourceRequestSchema, async (req) => {
     if (req.params.uri !== CHECKOUT_URI)
         throw new Error(`unknown resource: ${req.params.uri}`);
-    return { contents: [{ uri: CHECKOUT_URI, mimeType: CARD_MIME, text: CHECKOUT_CARD_HTML }] };
+    return {
+        contents: [
+            { uri: CHECKOUT_URI, mimeType: CARD_MIME, text: CHECKOUT_CARD_HTML, _meta: WIDGET_META },
+        ],
+    };
 });
 server.setRequestHandler(CallToolRequestSchema, async (req) => {
     const args = (req.params.arguments ?? {});
     try {
         if (req.params.name === 'list_sinocare_products') {
             // `products`, and a `view` the card dispatches on. This returned
-            // `{currency, count, resorts}` — the resort storefront's shape, left
+            // `{currency, count, products}` — the product storefront's shape, left
             // behind by a rename that changed identifiers and not payloads. The card
             // reads `products`, got undefined, and drew nothing.
             const category = typeof args.category === 'string' ? args.category.trim().toLowerCase() : '';
@@ -973,23 +991,23 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
         }
         if (req.params.name === 'get_sinocare_product') {
             const sku = String(args.sku ?? '');
-            const resort = await backend(`/catalog/${encodeURIComponent(sku)}`);
-            return text(resort);
+            const product = await backend(`/catalog/${encodeURIComponent(sku)}`);
+            return text(product);
         }
-        // Visual checkout: return the MCP App card (payment picker) + the resort as
+        // Visual checkout: return the MCP App card (payment picker) + the product as
         // structuredContent. The card's buttons call the book_* /
         // create_sinocare_payment_link tools; the card renders their results.
         if (req.params.name === 'start_sinocare_checkout') {
-            // Accept a `sku` (exact) OR a `query`/`resort`/`name` (e.g. "Val d'Isère")
+            // Accept a `sku` (exact) OR a `query`/`product`/`name` (e.g. "Safe AQ Smart")
             // so the agent doesn't need the exact sku to open the card.
-            const idOrName = String(args.sku ?? args.query ?? args.resort ?? args.name ?? '').trim();
+            const idOrName = String(args.sku ?? args.query ?? args.product ?? args.name ?? '').trim();
             const quantity = Math.max(Number(args.quantity) || 1, 1);
             // The card sets __rehydrate when it re-invokes to fill itself (reload /
             // self-heal), never on a fresh agent-initiated checkout. Only on rehydrate
             // do we show a completed booking's receipt instead of the picker — so an
             // explicit "book X again" from the agent still opens the picker.
             const rehydrate = args.__rehydrate === true || args.__rehydrate === 1 || args.__rehydrate === '1';
-            // No resort given = the card self-healing (empty-arg re-invoke) — replay the
+            // No product given = the card self-healing (empty-arg re-invoke) — replay the
             // last pick so the widget fills in instead of hanging on "Loading…". If that
             // last checkout has since been booked, show its receipt on rehydrate.
             if (!idOrName) {
@@ -1009,7 +1027,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                             type: 'text',
                             text: lastCheckout
                                 ? `Checkout for ${lastCheckout.name}.`
-                                : 'Pick a resort first (list_sinocare_products), then open its checkout.',
+                                : 'Pick a product first (list_sinocare_products), then open its checkout.',
                         },
                     ],
                     structuredContent: lastCheckout ?? {
@@ -1023,20 +1041,20 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                 };
             }
             // Resolve: try exact sku first, then a name search over the catalog.
-            let resort = null;
+            let product = null;
             try {
-                resort = await backend(`/catalog/${encodeURIComponent(idOrName)}`);
+                product = await backend(`/catalog/${encodeURIComponent(idOrName)}`);
             }
             catch {
                 const { items } = await backend('/catalog');
                 const q = idOrName.toLowerCase();
-                resort =
+                product =
                     items.find((r) => r.sku.toLowerCase() === q) ??
                         items.find((r) => r.name.toLowerCase() === q) ??
                         items.find((r) => r.name.toLowerCase().includes(q)) ??
                         null;
             }
-            if (!resort) {
+            if (!product) {
                 return {
                     content: [
                         {
@@ -1047,8 +1065,8 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                     isError: true,
                 };
             }
-            const priceEur = resort.priceDisplay ?? `€${((resort.price ?? 0) / 100).toLocaleString('en-IE')}`;
-            // Rehydrating an already-BOOKED resort's card → show its receipt, not the
+            const priceEur = product.priceDisplay ?? `€${((product.price ?? 0) / 100).toLocaleString('en-IE')}`;
+            // Rehydrating an already-BOOKED product's card → show its receipt, not the
             // picker (fixes: pay, leave the conversation, come back, and the card had
             // reset to the payment selection). The card self-heals by re-invoking with
             // its ORIGINAL args (the sku) + __rehydrate. EXCEPTION: a deliberate "book
@@ -1058,30 +1076,30 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
             // receipts are kept intact (never deleted), so #6's cross-conversation
             // records — and OTHER booked cards in the same conversation — still
             // rehydrate to their receipts.
-            // Is THIS checkout paid? Not "has this resort ever been bought".
+            // Is THIS checkout paid? Not "has this product ever been bought".
             //
-            // The receipt used to be looked up by sku, which treats a resort as a
+            // The receipt used to be looked up by sku, which treats a product as a
             // purchase. It is not: opening a checkout for somewhere you booked last
-            // week is a NEW order. With 42 of 44 resorts recorded, that lookup made
+            // week is a NEW order. With 42 of 44 products recorded, that lookup made
             // almost every card render as an already-paid receipt the moment it
             // self-healed — no payment involved — and hid the payment picker behind
             // a booking that had happened days ago.
             //
             // So the question is answered by the checkout in hand: the pick we just
-            // had open, for this same resort, that was actually paid. A fresh open
+            // had open, for this same product, that was actually paid. A fresh open
             // replaces it with an unpaid one (below), which is what makes "book it
             // again" resolve to the picker.
-            const rehydratedReceipt = rehydrate && lastCheckout?.sku === resort.sku && lastCheckout.booked
-                ? completedBookings.get(resort.sku)
+            const rehydratedReceipt = rehydrate && lastCheckout?.sku === product.sku && lastCheckout.booked
+                ? completedBookings.get(product.sku)
                 : undefined;
             lastCheckout = {
                 view: 'pick',
-                sku: resort.sku,
-                name: resort.name,
+                sku: product.sku,
+                name: product.name,
                 priceEur,
                 quantity,
-                imageUrl: resort.imageUrl,
-                externalShopify: resort.source === 'shopify',
+                imageUrl: product.imageUrl,
+                externalShopify: product.source === 'shopify',
                 // Preserve booked only when rehydrating a paid pick; a fresh open is a
                 // new, unpaid order (booked stays falsy → the card shows the picker).
                 booked: rehydratedReceipt ? true : undefined,
@@ -1090,7 +1108,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
             const receipt = rehydratedReceipt;
             if (receipt) {
                 return {
-                    content: [{ type: 'text', text: `Booked ${resort.name} (${priceEur}).` }],
+                    content: [{ type: 'text', text: `Booked ${product.name} (${priceEur}).` }],
                     structuredContent: bookedView(lastCheckout, receipt),
                     _meta: CHECKOUT_UI_META,
                 };
@@ -1099,7 +1117,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                 content: [
                     {
                         type: 'text',
-                        text: `Checkout for ${resort.name} (${priceEur}). Pick a payment method in the card — Card (ACP) / UCP / USDC (x402) / RLUSD (XRP Ledger), or a Payment Link (hosted page).`,
+                        text: `Checkout for ${product.name} (${priceEur}). Pick a payment method in the card — Card (ACP) / UCP / USDC (x402) / RLUSD (XRP Ledger), or a Payment Link (hosted page).`,
                     },
                 ],
                 structuredContent: lastCheckout,
@@ -1220,7 +1238,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
             }
             const sku = String(args.sku ?? '');
             const quantity = Math.max(Number(args.quantity) || 1, 1);
-            // 1. Sinocare prices the resort + opens a merchant-quoted ACP session.
+            // 1. Sinocare prices the product + opens a merchant-quoted ACP session.
             const session = await backend('/checkout-acp', {
                 method: 'POST',
                 body: JSON.stringify({ sku, quantity, ...(BUYER ? { buyer: BUYER } : {}) }),
@@ -1290,7 +1308,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
             const order = (await completeCheckout(acp(session.merchantId), session.sessionId, token));
             return finishBooking(sku, {
                 booked: order.status === 'completed',
-                resort: session.name,
+                product: session.name,
                 quantity,
                 total: session.amountDisplay,
                 protocol: 'acp',
@@ -1327,7 +1345,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                 merchantId: session.merchantId,
                 amount,
                 currency,
-                resort: session.name,
+                product: session.name,
                 total: session.amountDisplay,
                 // Spells out the sign-in step. Without it the model calls
                 // wallet_pay_credential, gets "nobody is signed in", and has to invent
@@ -1357,7 +1375,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
             // idea it had been bought, so it rehydrated to the picker.
             return finishBooking(bought?.sku ?? '', {
                 booked,
-                resort: bought?.name,
+                product: bought?.name,
                 quantity: bought?.quantity,
                 protocol: 'acp',
                 payer: 'curless-wallet (separate connector)',
@@ -1383,10 +1401,10 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                 message: '在浏览器里打开这个链接,看清金额再批准。这里还没有扣任何款。',
                 payUrl: `${API_BASE}/buyer/pay?session=${encodeURIComponent(session.sessionId)}`,
                 sessionId: session.sessionId,
-                resort: session.name,
+                product: session.name,
                 total: session.amountDisplay,
                 // Say plainly that nothing has been paid yet. A tool that returns a
-                // link and a resort name reads like a receipt if it does not.
+                // link and a product name reads like a receipt if it does not.
                 paid: false,
                 merchantId: session.merchantId,
                 next: 'show the person this link. Nothing has been charged yet — they approve it in their browser. Then call get_sinocare_order_status with this sessionId.',
@@ -1408,7 +1426,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                 paid,
                 sessionId,
                 status: session.status,
-                resort: bought?.name,
+                product: bought?.name,
                 quantity: bought?.quantity,
                 protocol: 'acp',
                 payer: 'curless-wallet (hosted approval)',
@@ -1488,7 +1506,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                 const paidUsdc = fmtUsdc(BigInt(session.amount));
                 return finishBooking(sku, {
                     booked: paid.status === 'completed',
-                    resort: session.name,
+                    product: session.name,
                     quantity,
                     protocol: 'ucp',
                     payer: 'agent-key (UCP)',
@@ -1571,7 +1589,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                 const paidUsdc = `${(need / 1e6).toFixed(6)} USDC`;
                 return finishBooking(sku, {
                     booked: paid.status === 'completed',
-                    resort: session.name,
+                    product: session.name,
                     quantity,
                     protocol: 'ucp',
                     payer: 'agent-key (UCP)',
@@ -1652,7 +1670,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                 }
                 return finishBooking(sku, {
                     booked: paid.status === 'completed',
-                    resort: session.name,
+                    product: session.name,
                     quantity,
                     protocol: 'ucp',
                     payer: 'agent-key (UCP)',
@@ -1668,7 +1686,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                 });
             }
             // CARD path (default).
-            // 1. Sinocare prices the resort + opens a merchant-quoted UCP session,
+            // 1. Sinocare prices the product + opens a merchant-quoted UCP session,
             //    returning a merchant-signed AP2 CartMandate for it.
             const session = await backend('/checkout-ucp', {
                 method: 'POST',
@@ -1713,10 +1731,10 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                     return text({
                         booked: false,
                         blockedBy: 'standing-authorization',
-                        resort: session.name,
+                        product: session.name,
                         total: session.amountDisplay,
                         authorizedCap: `€${agentBudget?.maxAmountEur.toLocaleString('en-IE')}`,
-                        message: `Blocked: ${session.name} (${session.amountDisplay}) is over your standing authorization (cap €${agentBudget?.maxAmountEur}, or it expired). Raise it with authorize_agent_budget, or book a cheaper resort.`,
+                        message: `Blocked: ${session.name} (${session.amountDisplay}) is over your standing authorization (cap €${agentBudget?.maxAmountEur}, or it expired). Raise it with authorize_agent_budget, or book a cheaper product.`,
                     });
                 }
                 throw new Error(`ucp complete -> ${res.status}: ${errText}`);
@@ -1724,7 +1742,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
             const out = (await res.json());
             return finishBooking(sku, {
                 booked: out.status === 'completed',
-                resort: session.name,
+                product: session.name,
                 quantity,
                 total: session.amountDisplay,
                 protocol: 'ucp',
@@ -1817,7 +1835,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                 // rail — the card rehydrates to a receipt on reload instead of the picker.
                 return finishBooking(sku, {
                     booked: paid.status === 'captured',
-                    resort: session.name,
+                    product: session.name,
                     quantity,
                     protocol: 'x402',
                     payer: 'buyer chain wallet (x402)',
@@ -1890,7 +1908,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
             const paidUsdc = fmtUsdc(BigInt(session.amount));
             return finishBooking(sku, {
                 booked: paid.status === 'captured',
-                resort: session.name,
+                product: session.name,
                 quantity,
                 protocol: 'x402',
                 payer: 'buyer chain wallet (x402)',
@@ -1997,7 +2015,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
             }
             return finishBooking(sku, {
                 booked: paid.status === 'captured',
-                resort: session.name,
+                product: session.name,
                 quantity,
                 protocol: 'x402',
                 payer: 'buyer chain wallet (x402)',
@@ -2027,8 +2045,8 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
             }
             const sku = String(args.sku ?? '');
             const quantity = Math.max(Number(args.quantity) || 1, 1);
-            const resort = await backend(`/catalog/${encodeURIComponent(sku)}`).catch(() => null);
-            const resortName = resort?.name ?? sku;
+            const product = await backend(`/catalog/${encodeURIComponent(sku)}`).catch(() => null);
+            const resortName = product?.name ?? sku;
             // The BUYER mints a Skyfire-signed PAY token (Skyfire's key signs it — the
             // buyer can't self-sign), then presents it to the MERCHANT backend, which
             // charges it via the merchant SDK (checkout.chargeSkyfire → the gateway
@@ -2049,7 +2067,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                 : `Booked ${resortName} × ${quantity} via Skyfire KYAPay — ${amountStr} verified against Skyfire's live JWKS + recorded (PI ${status}). agentbank verified the agent + payment authorization and recorded it; no seller key is configured, so it did not auto-capture and no money moved.`;
             return finishBooking(sku, {
                 booked: out.agent?.verified === true,
-                resort: resortName,
+                product: resortName,
                 quantity,
                 protocol: 'skyfire',
                 payer: 'skyfire buyer token',
@@ -2077,8 +2095,8 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
             }
             const sku = String(args.sku ?? '');
             const quantity = Math.max(Number(args.quantity) || 1, 1);
-            const resort = await backend(`/catalog/${encodeURIComponent(sku)}`).catch(() => null);
-            const resortName = resort?.name ?? sku;
+            const product = await backend(`/catalog/${encodeURIComponent(sku)}`).catch(() => null);
+            const resortName = product?.name ?? sku;
             // Three-layer MPP · Tempo — the demo talks only to the MERCHANT backend,
             // which mediates the HTTP-402 dance via the merchant SDK (checkout.openMPP):
             // 1. ask the backend to open the charge → it returns the 402 challenge;
@@ -2103,7 +2121,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
             const settled = out.status === 'settled';
             return finishBooking(sku, {
                 booked: settled,
-                resort: resortName,
+                product: resortName,
                 quantity,
                 protocol: 'mpp',
                 payer: 'buyer chain wallet (MPP·Tempo)',
@@ -2160,7 +2178,7 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
                     // The card hides its button on this — an explicit flag, not a substring
                     // of the status, so the two can never drift apart.
                     refundPending: Boolean(o.refundRequest),
-                    resort: o.lineItems?.map((li) => `${li.name} ×${li.quantity}`).join(', ') ?? '',
+                    product: o.lineItems?.map((li) => `${li.name} ×${li.quantity}`).join(', ') ?? '',
                     total: fmt(o.amount, o.currency),
                     protocol: o.protocol,
                     date: o.createdAt?.slice(0, 10) ?? '',