@curless/sinocare-demo 0.65.0 → 0.67.0

package/dist/index.js

@@ -171,6 +171,33 @@ var storefrontTools = (opts) => [
       required: ["sku"]
     }
   },
+  {
+    name: "start_sinocare_uaag_handoff",
+    description: "PAY WITH A UNIONPAY CARD the person bound to their Curless wallet. Sinocare prices the order; the card comes from their wallet, not from you. Returns a URL THEY open \u2014 UnionPay authenticates the cardholder on their own page, with 3DS and a passkey, so no card number ever reaches this server. \u26A0\uFE0F This is a HANDOFF, not a completed purchase, and the distinction is subtle enough that the first person through it got it wrong: UnionPay\u2019s page is titled \u300C\u786E\u8BA4\u652F\u4ED8\u300D and shows the amount, merchant and items, so the cardholder really is approving THIS purchase. What their approval produces is a one-time token + DTVC, which the spec calls the INPUT to an authorization \u2014 a message nobody has sent yet, and the MERCHANT\u2019s acquirer is who sends it. Sinocare has no UnionPay acceptance, so nothing is charged. Returns ordered:false and paid:false always. Then call get_sinocare_uaag_status.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        sku,
+        query,
+        quantity,
+        cardId: {
+          type: "string",
+          description: "OPTIONAL, and normally omit it. The storefront reads the bound UnionPay cards from the person\u2019s own wallet and uses the one they have; pass this only to pick between several. A uaagcard_\u2026 you did not get from that list is a guess, and UnionPay answers a wrong one with a 404 that does not say what was wrong."
+        }
+      }
+    }
+  },
+  {
+    name: "get_sinocare_uaag_status",
+    description: "Has UnionPay issued the payment credential yet? Pass the paymentIntentId from start_sinocare_uaag_handoff. The cardholder authenticates in their own browser and this server is never told when they finish, so this is the only way to know. \u26A0\uFE0F `issued: true` means the cardholder confirmed and a one-time token now exists \u2014 it does NOT mean the order is paid. The MERCHANT charges that credential through their own UnionPay acceptance, which Sinocare does not have, so this demo stops there on purpose. Say both halves; never report it as paid.",
+    inputSchema: {
+      type: "object",
+      required: ["paymentIntentId"],
+      properties: {
+        paymentIntentId: { type: "string", description: "from start_sinocare_uaag_handoff" }
+      }
+    }
+  },
   {
     name: "get_sinocare_order_status",
     description: "Has this checkout been paid? Use after pay_sinocare_hosted \u2014 the approval happens in a browser and this server is never told when it does. `completed` means the money moved.",
@@ -233,6 +260,173 @@ var ordersView = (orders) => ({
   )
 });
 
+// ../../packages/internal/sinocare-storefront/src/uaag.ts
+var post = async (deps, path, body) => {
+  const res = await fetch(`${deps.apiBase}${path}`, {
+    method: "POST",
+    headers: { "content-type": "application/json", authorization: `Bearer ${deps.agentToken}` },
+    body: JSON.stringify(body)
+  });
+  const text2 = await res.text();
+  let json = {};
+  try {
+    json = JSON.parse(text2);
+  } catch {
+    json = { raw: text2.slice(0, 300) };
+  }
+  return { ok: res.ok, status: res.status, json };
+};
+var errorOf = (json, status) => {
+  const e = json.error;
+  return e?.message ?? `HTTP ${status}`;
+};
+var startUaagCheckout = async (deps, args) => {
+  if (!deps.agentToken) return { error: "this storefront has no agent token configured" };
+  if (!deps.wallet) {
+    return {
+      needsLogin: true,
+      message: "\u8981\u7528\u94F6\u8054\u5361\u4ED8\u6B3E\uFF0C\u5F97\u5148\u767B\u5F55\u4F60\u81EA\u5DF1\u7684 Curless \u94B1\u5305 \u2014\u2014 \u5361\u7ED1\u5728\u90A3\u91CC\uFF0C\u53EA\u6709\u5B83\u77E5\u9053\u4F60\u7ED1\u4E86\u54EA\u51E0\u5F20\u3002",
+      next: "show the person the sign-in link this storefront returns for the wallet, and stop."
+    };
+  }
+  const { cards } = await deps.wallet.unionPayCards();
+  if (cards.length === 0) {
+    return {
+      ordered: false,
+      paid: false,
+      blocked: "no_unionpay_card",
+      message: "\u4F60\u7684 Curless \u94B1\u5305\u91CC\u8FD8\u6CA1\u6709\u7ED1\u5B9A\u7684\u94F6\u8054\u5361\u3002\u7ED1\u5361\u5728\u94B1\u5305\u91CC\u505A\uFF0C\u4E0D\u5728\u8FD9\u4E2A\u5E97\u91CC \u2014\u2014 \u94F6\u8054\u8981\u5728\u4ED6\u4EEC\u81EA\u5DF1\u7684\u9875\u9762\u4E0A\u6536\u5361\u3002",
+      next: "tell them to bind a UnionPay card in their wallet first. Do NOT retry, and do NOT offer to take the card number here."
+    };
+  }
+  const named = typeof args.cardId === "string" ? args.cardId : "";
+  const card = named ? cards.find((c) => c.id === named) : cards[0];
+  if (!card) {
+    return {
+      ordered: false,
+      paid: false,
+      blocked: "unknown_card",
+      message: `\u4F60\u7684\u94B1\u5305\u91CC\u6CA1\u6709\u8FD9\u5F20\u5361\uFF1A${named}`,
+      cards: cards.map((c) => ({ id: c.id, last4: c.panLastFour }))
+    };
+  }
+  const quantity2 = Math.max(Number(args.quantity) || 1, 1);
+  const session = await deps.openCheckout(String(args.sku ?? args.query ?? ""), quantity2);
+  const me = await deps.wallet.me();
+  const [firstName, ...rest] = (me.name ?? "Curless Buyer").trim().split(/\s+/);
+  const unit = (session.amount / quantity2 / 100).toFixed(2);
+  const intent = await post(deps, "/v1/uaag/intents", {
+    paymentIntentId: session.sessionId,
+    cardId: card.id,
+    merchantName: "Sinocare",
+    merchantUrl: "https://www.sinocare.com",
+    items: [
+      {
+        itemName: session.name,
+        itemDescription: session.name,
+        itemUrl: `https://www.sinocare.com/products/${session.sku}`,
+        itemUnitPrice: { amount: unit, currencyCode: session.currency },
+        itemQuantity: String(quantity2)
+      }
+    ],
+    delivery: {
+      firstName: firstName || "Curless",
+      lastName: rest.join(" ") || "Buyer",
+      emailAddress: me.email,
+      // ⚠️ Required whenever anything ships, which is every item unless the
+      // whole order is DIGITAL — the field table calls it conditional and the
+      // condition is almost always true. A demo address on purpose: this shop
+      // never collected one, and a plausible-looking invented address would be
+      // worse than an obvious placeholder.
+      deliveryAddress: {
+        name: me.name ?? "Curless Buyer",
+        line1: "1 Demo Street",
+        city: "HongKong",
+        state: "HK",
+        countryCode: "HK",
+        zip: "999077"
+      }
+    }
+  });
+  if (!intent.ok) {
+    return {
+      ordered: false,
+      paid: false,
+      blocked: "uaag_intent_refused",
+      message: `\u94F6\u8054\u6CA1\u6709\u63A5\u53D7\u8FD9\u7B14\u610F\u56FE\uFF1A${errorOf(intent.json, intent.status)}`,
+      sessionId: session.sessionId,
+      next: "repeat what UnionPay said and stop. Do NOT retry, and do NOT pay another way without asking."
+    };
+  }
+  const checkout = await post(deps, "/v1/uaag/checkout", {
+    paymentIntentId: session.sessionId,
+    cardId: card.id
+  });
+  if (!checkout.ok) {
+    return {
+      ordered: false,
+      paid: false,
+      blocked: "uaag_checkout_refused",
+      message: `\u94F6\u8054\u6536\u94F6\u53F0\u6CA1\u80FD\u5F00\uFF1A${errorOf(checkout.json, checkout.status)}`,
+      sessionId: session.sessionId,
+      next: "repeat what UnionPay said and stop."
+    };
+  }
+  const upi = checkout.json.upi ?? {};
+  return {
+    // Never true on this path. UnionPay issues a credential; the merchant
+    // charges it, and Sinocare cannot.
+    ordered: false,
+    paid: false,
+    awaitingPayment: true,
+    message: "\u94F6\u8054\u6536\u94F6\u53F0\u5DF2\u5F00\u597D\u3002\u9875\u9762\u4E0A\u5199\u7684\u662F\u300C\u786E\u8BA4\u652F\u4ED8\u300D\u5E76\u663E\u793A\u91D1\u989D \u2014\u2014 \u4F60\u786E\u8BA4\u7684\u662F\u8FD9\u7B14\u8D2D\u4E70\u672C\u8EAB\uFF0C\u786E\u8BA4\u540E\u94F6\u8054\u628A\u4E00\u6B21\u6027\u652F\u4ED8\u51ED\u8BC1\u56DE\u8C03\u7ED9\u6211\u4EEC\u3002\u26A0\uFE0F \u5361\u4E0D\u4F1A\u5728\u90A3\u4E00\u523B\u88AB\u6263\u6B3E\uFF1A\u6263\u6B3E\u8981\u5546\u6237\u62FF\u8FD9\u5F20\u51ED\u8BC1\u8D70\u81EA\u5DF1\u7684\u94F6\u8054\u6536\u5355\uFF0C\u4E09\u8BFA\u6CA1\u6709\uFF0C\u6240\u4EE5\u6F14\u793A\u5230\u51ED\u8BC1\u4E3A\u6B62\u3002",
+    checkoutUrl: upi.checkoutUrl ?? null,
+    // ⚠️ The card's own field names. `payUrl` is what it renders a "go pay"
+    // button from, and `uaagPaymentIntentId` is what it polls — deliberately
+    // NOT `sessionId`/`merchantId`, which would send it to the hosted poller
+    // that asks whether the ACP session was PAID. A UnionPay checkout never
+    // makes it paid, so that poller would spin for ten minutes and then time
+    // out on a flow that had, in its own terms, succeeded.
+    payUrl: upi.checkoutUrl ?? null,
+    uaagPaymentIntentId: session.sessionId,
+    paymentIntentId: session.sessionId,
+    merchantId: session.merchantId,
+    card: { id: card.id, last4: card.panLastFour },
+    product: session.name,
+    total: session.amountDisplay,
+    settlement: {
+      settled: false,
+      by: "merchant",
+      reason: "UnionPay \u628A\u4E00\u6B21\u6027\u652F\u4ED8\u51ED\u8BC1\u4EA4\u7ED9 Agent\uFF0C\u7531\u5546\u6237\u7684\u6536\u5355\u673A\u6784\u6263\u6B3E\u3002\u4E09\u8BFA\u6CA1\u6709\u94F6\u8054\u6536\u5355\uFF0C\u6240\u4EE5\u8FD9\u7B14\u4E0D\u4F1A\u88AB\u6263\u6B3E\uFF0C\u4E5F\u4E0D\u4F1A\u751F\u6210\u8BA2\u5355\u3002"
+    },
+    next: "show the person the checkoutUrl. When they say they are done, call the UnionPay status tool with this paymentIntentId \u2014 this server is never told when they finish. Do NOT claim the order was placed."
+  };
+};
+var uaagCheckoutStatus = async (deps, paymentIntentId) => {
+  if (!deps.agentToken) return { error: "this storefront has no agent token configured" };
+  if (!paymentIntentId) return { error: "paymentIntentId is required" };
+  const res = await fetch(
+    `${deps.apiBase}/v1/payment-intents/${encodeURIComponent(paymentIntentId)}`,
+    { headers: { authorization: `Bearer ${deps.agentToken}` } }
+  );
+  const pi = await res.json().catch(() => ({}));
+  const uaag = pi.protocolContext?.uaag;
+  const issued = uaag?.credential !== void 0;
+  return {
+    issued,
+    // ⚠️ `issued` is not `paid`, and the two are one word apart in every
+    // language this will be read in.
+    ordered: false,
+    paid: false,
+    paymentIntentId,
+    credential: uaag?.credential ?? null,
+    issuedAt: uaag?.payloadAt ?? null,
+    paymentIntentStatus: pi.status ?? "unknown",
+    message: issued ? "\u6301\u5361\u4EBA\u5DF2\u5728\u94F6\u8054\u9875\u9762\u786E\u8BA4\u652F\u4ED8\uFF0C\u94F6\u8054\u5DF2\u7B7E\u53D1\u4E00\u6B21\u6027\u652F\u4ED8\u51ED\u8BC1\uFF08\u4EE4\u724C + DTVC\uFF09\u3002\u26A0\uFE0F \u4F46\u94B1\u8FD8\u6CA1\u52A8\uFF1A\u51ED\u8BC1\u662F\u4E00\u6761\u5C1A\u672A\u53D1\u51FA\u7684\u6388\u6743\u62A5\u6587\u7684\u5165\u53C2\uFF0C\u8981\u7531\u5546\u6237\u7684\u94F6\u8054\u6536\u5355\u673A\u6784\u53BB\u53D1\u3002\u4E09\u8BFA\u6CA1\u6709\u94F6\u8054\u6536\u5355\uFF0C\u6240\u4EE5\u6F14\u793A\u5230\u6B64\u4E3A\u6B62\u3002" : "\u8FD8\u6CA1\u6709\u3002\u6301\u5361\u4EBA\u8FD8\u6CA1\u5728\u94F6\u8054\u9875\u9762\u4E0A\u70B9\u300C\u786E\u8BA4\u652F\u4ED8\u300D\uFF0C\u6216\u8005\u521A\u70B9\u5B8C\u3001\u56DE\u8C03\u8FD8\u6CA1\u5230\u3002",
+    next: issued ? "Say BOTH halves, in this order: the cardholder confirmed the payment and UnionPay issued the credential \u2014 AND nothing has been charged yet, because that credential is the input to an authorization the MERCHANT\u2019s acquirer still has to send. Do not say it failed, and do not say it is paid. Both are wrong." : "tell them it is not done yet and let them finish on UnionPay\u2019s page. Do not retry in a tight loop."
+  };
+};
+
 // src/index.ts
 import {
   completeCheckout,
@@ -250,11 +444,7 @@ import {
   signSolanaX402Payment
 } from "@curless/agentbank-protocols/solana";
 import { payMppTempoChallenge } from "@curless/agentbank-protocols/tempo";
-import {
-  checkout as uaagCheckout,
-  checkoutState as uaagCheckoutState,
-  createIntent as uaagCreateIntent
-} from "@curless/agentbank-protocols/uaag";
+import "@curless/agentbank-protocols/uaag";
 import {
   cdpAccountSigner,
   encodeXPaymentHeader,
@@ -364,7 +554,7 @@ var mintSharedPaymentToken = async (amountMinor, currency) => {
       "refusing to mint with a LIVE Stripe key \u2014 a order would charge a real card for the full product price. Set SINOCARE_ALLOW_LIVE_WALLET=1 if that is genuinely intended."
     );
   }
-  const post = async (path, body, preview = false) => {
+  const post2 = async (path, body, preview = false) => {
     const res = await fetch(`https://api.stripe.com/v1/${path}`, {
       method: "POST",
       headers: {
@@ -378,8 +568,8 @@ var mintSharedPaymentToken = async (amountMinor, currency) => {
     if (!res.ok) throw new Error(`stripe ${path} -> ${res.status}: ${json.error?.message ?? ""}`);
     return json;
   };
-  const pm = AGENT_PM ?? String((await post("payment_methods", { type: "card", "card[token]": "tok_visa" })).id);
-  const spt = await post(
+  const pm = AGENT_PM ?? String((await post2("payment_methods", { type: "card", "card[token]": "tok_visa" })).id);
+  const spt = await post2(
     "shared_payment/issued_tokens",
     {
       payment_method: pm,
@@ -649,8 +839,8 @@ var SINOCARE_GROUPS = [
     rows: [
       {
         title: "\u94F6\u8054\u5361(UAAG)",
-        sub: "\u7528\u4F60\u94B1\u5305\u91CC\u7ED1\u7684\u94F6\u8054\u5361 \xB7 \u94F6\u8054\u9875\u9762\u8BA4\u8BC1 \xB7 \u6F14\u793A\u6B62\u4E8E\u51ED\u8BC1\u7B7E\u53D1,\u4E0D\u6263\u6B3E",
-        actions: [{ label: "\u5728\u804A\u5929\u91CC\u4ED8\u6B3E", tool: "start_sinocare_uaag_handoff", chat: true }]
+        sub: "\u7528\u4F60\u94B1\u5305\u91CC\u7ED1\u7684\u94F6\u8054\u5361 \xB7 \u5728\u94F6\u8054\u81EA\u5DF1\u7684\u9875\u9762\u4E0A\u786E\u8BA4",
+        actions: [{ label: "\u7528\u94F6\u8054\u4ED8\u6B3E", tool: "start_sinocare_uaag_handoff" }]
       }
     ]
   },
@@ -756,7 +946,7 @@ var pickView = (pick, r) => checkoutView({
   }
 });
 var CHECKOUT_URI_PREFIX = "ui://sinocare/";
-var CHECKOUT_URI = `${CHECKOUT_URI_PREFIX}card-v33.html`;
+var CHECKOUT_URI = `${CHECKOUT_URI_PREFIX}card-v34.html`;
 var CHECKOUT_UI_META = uiMeta(CHECKOUT_URI);
 var WIDGET_META = widgetMeta();
 var SHARED_TOOLS = storefrontTools({
@@ -775,36 +965,6 @@ var RAIL_TOOLS = [
       }
     }
   },
-  {
-    name: "start_sinocare_uaag_handoff",
-    description: "Buy a Sinocare product over UnionPay Agent Pay (UAAG). Sinocare prices it and opens a checkout session; UnionPay then authenticates the CARDHOLDER on its own page (3DS / Passkey) and issues a one-time payment token. \u26A0\uFE0F This is a HANDOFF, not a completed purchase \u2014 and the distinction is subtle enough that the first person through it got it wrong. UnionPay\u2019s page is titled \u300C\u786E\u8BA4\u652F\u4ED8\u300D and shows the amount, merchant and items, so the cardholder really is approving THIS purchase. What their approval produces is a one-time token + DTVC, which the spec describes as the INPUT to an authorization (\u201Cused in authorization\u201D, \u201Csubmitted \u2026 for payment authorization\u201D, \u201CF23 of authorization\u201D) \u2014 a message nobody has sent yet. So after they confirm: they authorised it, AND no money moved. Saying only one of those is wrong either way. UnionPay\u2019s model has the MERCHANT charge that credential \u2014 it is shaped like an ordinary UnionPay card (token as the card number, DTVC as the CVV2), so the merchant needs UnionPay acceptance. Sinocare\u2019s demo checkout has none, so nothing is charged and no order is placed. Returns ordered:false always.",
-    inputSchema: {
-      type: "object",
-      required: ["sku"],
-      properties: {
-        sku: { type: "string" },
-        quantity: { type: "integer", description: "how many, default 1" },
-        cardId: {
-          type: "string",
-          description: "OPTIONAL, and normally omit it. The storefront reads the buyer's bound UnionPay cards from their own wallet session and uses the one they have; pass this only to pick between several. A uaagcard_\u2026 you did not get from that list is a guess, and UnionPay answers a wrong one with a 404 that does not say what was wrong."
-        }
-      }
-    }
-  },
-  {
-    name: "get_sinocare_uaag_status",
-    description: "Has UnionPay issued the payment credential yet? Pass the paymentIntentId from start_sinocare_uaag_handoff. The cardholder authenticates in their own browser and this server is never told when they finish, so this is the only way to know. \u26A0\uFE0F `issued: true` means a one-time token + DTVC now exist \u2014 it does NOT mean the order is paid. The MERCHANT charges that credential through their own UnionPay acceptance, which Sinocare does not have, so this demo stops there on purpose. Never report it as paid.",
-    inputSchema: {
-      type: "object",
-      required: ["paymentIntentId"],
-      properties: {
-        paymentIntentId: {
-          type: "string",
-          description: "from start_sinocare_uaag_handoff"
-        }
-      }
-    }
-  },
   {
     name: "buy_sinocare_product_acp",
     description: "Buy a Sinocare product over ACP (Agentic Commerce Protocol) \u2014 Sinocare prices the product and opens a merchant-quoted checkout session; this agent completes it with a delegated card credential, settling on the card rail (test mode). One of THREE ways to pay: ACP (card) / UCP (card) / x402 (USDC). The card rail is an implementation detail, not a separate payment choice. Returns the ordered order.",
@@ -1232,12 +1392,11 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
       });
     }
     if (req.params.name === "start_sinocare_uaag_handoff") {
-      if (!TOKEN) {
-        return text({ error: "sinocare-demo: AGENTBANK_AGENT_TOKEN is not set" });
-      }
       if (!wallet.current()) {
         const login = await pendingLogin();
         return text({
+          ordered: false,
+          paid: false,
           needsLogin: true,
           loginUrl: login.verificationUriComplete,
           userCode: login.userCode,
@@ -1245,158 +1404,33 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
           next: "show the person this link and stop. Do not pay another way."
         });
       }
-      const { cards } = await wallet.unionPayCards();
-      if (cards.length === 0) {
-        return text({
-          ordered: false,
-          blocked: "no_unionpay_card",
-          message: "\u4F60\u7684 Curless \u94B1\u5305\u91CC\u8FD8\u6CA1\u6709\u7ED1\u5B9A\u7684\u94F6\u8054\u5361\u3002\u7ED1\u5361\u5728\u94B1\u5305\u8FDE\u63A5\u5668\u91CC\u505A(wallet_bind_unionpay_card),\u4E0D\u5728\u8FD9\u4E2A\u5E97\u91CC \u2014\u2014 \u94F6\u8054\u8981\u5728\u4ED6\u4EEC\u81EA\u5DF1\u7684\u9875\u9762\u4E0A\u6536\u5361\u3002",
-          next: "tell them to bind a UnionPay card in their wallet connector first. Do NOT retry this tool, and do NOT offer to take the card number here."
-        });
-      }
-      const named = typeof args.cardId === "string" ? args.cardId : "";
-      const card = named ? cards.find((c) => c.id === named) : cards[0];
-      if (!card) {
-        return text({
-          ordered: false,
-          blocked: "unknown_card",
-          message: `\u4F60\u7684\u94B1\u5305\u91CC\u6CA1\u6709\u8FD9\u5F20\u5361:${named}`,
-          cards: cards.map((c) => ({ id: c.id, last4: c.panLastFour }))
-        });
-      }
-      const sku2 = String(args.sku ?? "");
-      const quantity2 = Math.max(Number(args.quantity) || 1, 1);
-      const session = await backend("/checkout-acp", {
-        method: "POST",
-        body: JSON.stringify({ sku: sku2, quantity: quantity2, ...BUYER ? { buyer: BUYER } : {} })
-      });
-      const me = await wallet.me();
-      const [firstName, ...rest] = (me.name ?? "Curless Buyer").trim().split(/\s+/);
-      const uaagOpts = { baseUrl: API_BASE, token: TOKEN };
-      const unit = (session.amount / quantity2 / 100).toFixed(2);
-      try {
-        await uaagCreateIntent(uaagOpts, {
-          paymentIntentId: session.sessionId,
-          cardId: card.id,
-          merchantName: "Sinocare",
-          merchantUrl: "https://www.sinocare.com",
-          items: [
-            {
-              itemName: session.name,
-              itemDescription: session.name,
-              itemUrl: `https://www.sinocare.com/products/${session.sku}`,
-              itemUnitPrice: { amount: unit, currencyCode: session.currency },
-              itemQuantity: String(quantity2)
-            }
-          ],
-          delivery: {
-            firstName: firstName || "Curless",
-            lastName: rest.join(" ") || "Buyer",
-            emailAddress: me.email,
-            // ⚠️ Required whenever anything ships, which is every item unless
-            // the whole order is DIGITAL — the field table calls it conditional
-            // and the condition is almost always true. Demo address: this shop
-            // never collected one, and inventing a plausible-looking real
-            // address would be worse than an obvious placeholder.
-            deliveryAddress: {
-              name: me.name ?? "Curless Buyer",
-              line1: "1 Demo Street",
-              city: "HongKong",
-              state: "HK",
-              countryCode: "HK",
-              zip: "999077"
-            }
-          }
-        });
-      } catch (err) {
-        const e = err;
-        return text({
-          ordered: false,
-          blocked: "uaag_intent_refused",
-          message: `\u94F6\u8054\u6CA1\u6709\u63A5\u53D7\u8FD9\u7B14\u610F\u56FE:${e.message}`,
-          declined: e.declined ?? false,
-          sessionId: session.sessionId,
-          next: "repeat what UnionPay said and stop. Do NOT retry, and do NOT pay another way without asking."
-        });
-      }
-      let checkout;
-      try {
-        checkout = await uaagCheckout(uaagOpts, {
-          paymentIntentId: session.sessionId,
-          cardId: card.id
-        });
-      } catch (err) {
-        const e = err;
-        return text({
-          ordered: false,
-          blocked: "uaag_checkout_refused",
-          message: `\u94F6\u8054\u6536\u94F6\u53F0\u6CA1\u80FD\u5F00:${e.message}`,
-          declined: e.declined ?? false,
-          sessionId: session.sessionId,
-          next: "repeat what UnionPay said and stop."
-        });
-      }
-      return text({
-        // Never true on this path. UnionPay issues a credential; the merchant
-        // charges it, and Sinocare cannot.
-        ordered: false,
-        awaitingPayment: true,
-        // ⚠️ Tell them what the page says BEFORE they see it. It is titled
-        // 确认支付 and shows the amount — so "authenticate" undersells it and
-        // the person is left thinking they paid. They authorise; nobody charges.
-        message: "\u94F6\u8054\u6536\u94F6\u53F0\u5DF2\u5F00\u597D\u3002\u9875\u9762\u4E0A\u5199\u7684\u662F\u300C\u786E\u8BA4\u652F\u4ED8\u300D\u5E76\u663E\u793A\u91D1\u989D \u2014\u2014 \u4F60\u786E\u8BA4\u7684\u662F\u8FD9\u7B14\u8D2D\u4E70\u672C\u8EAB\uFF0C\u786E\u8BA4\u540E\u94F6\u8054\u628A\u4E00\u6B21\u6027\u652F\u4ED8\u51ED\u8BC1\u56DE\u8C03\u7ED9\u6211\u4EEC\u3002\u26A0\uFE0F \u5361\u4E0D\u4F1A\u5728\u90A3\u4E00\u523B\u88AB\u6263\u6B3E\uFF1A\u6263\u6B3E\u8981\u5546\u6237\u62FF\u8FD9\u5F20\u51ED\u8BC1\u8D70\u81EA\u5DF1\u7684\u94F6\u8054\u6536\u5355\uFF0C\u4E09\u8BFA\u6CA1\u6709\uFF0C\u6240\u4EE5\u6F14\u793A\u5230\u51ED\u8BC1\u4E3A\u6B62\u3002",
-        checkoutUrl: checkout.upi.checkoutUrl ?? null,
-        srcCorrelationId: checkout.srcCorrelationId,
-        paymentIntentId: session.sessionId,
-        sessionId: session.sessionId,
-        merchantId: session.merchantId,
-        card: { id: card.id, last4: card.panLastFour },
-        product: session.name,
-        total: session.amountDisplay,
-        // ⚠️ The honest ending, as data rather than prose — so the card and the
-        // model both get it instead of one of them inferring a sale.
-        settlement: {
-          settled: false,
-          by: "merchant",
-          reason: "UnionPay \u628A\u4E00\u6B21\u6027\u652F\u4ED8\u51ED\u8BC1\u4EA4\u7ED9 Agent,\u7531\u5546\u6237\u7684\u6536\u5355\u673A\u6784\u6263\u6B3E\u3002\u4E09\u8BFA\u6CA1\u6709\u94F6\u8054\u6536\u5355,\u6240\u4EE5\u8FD9\u7B14\u4E0D\u4F1A\u88AB\u6263\u6B3E,\u4E5F\u4E0D\u4F1A\u751F\u6210\u8BA2\u5355\u3002"
-        },
-        next: "show the person the checkoutUrl. When they say they are done, call get_sinocare_uaag_status with this paymentIntentId \u2014 this server is never told when they finish. Do NOT claim the order was placed, and do NOT fall back to another rail without asking."
-      });
+      return text(
+        await startUaagCheckout(
+          {
+            apiBase: API_BASE,
+            agentToken: TOKEN,
+            openCheckout: (sku2, quantity2) => backend("/checkout-acp", {
+              method: "POST",
+              body: JSON.stringify({ sku: sku2, quantity: quantity2, ...BUYER ? { buyer: BUYER } : {} })
+            }),
+            wallet
+          },
+          args
+        )
+      );
     }
     if (req.params.name === "get_sinocare_uaag_status") {
-      if (!TOKEN) {
-        return text({ error: "sinocare-demo: AGENTBANK_AGENT_TOKEN is not set" });
-      }
-      const paymentIntentId = String(args.paymentIntentId ?? "");
-      if (!paymentIntentId) {
-        return text({ error: "paymentIntentId is required (from start_sinocare_uaag_handoff)" });
-      }
-      const state = await uaagCheckoutState({ baseUrl: API_BASE, token: TOKEN }, paymentIntentId);
-      return text({
-        // ⚠️ `issued` is not `paid`, and the two are one word apart in every
-        // language this will be read in. A credential exists; nobody charged it.
-        issued: state.issued,
-        ordered: false,
-        paid: false,
-        paymentIntentId,
-        credential: state.credential ?? null,
-        issuedAt: state.issuedAt ?? null,
-        paymentIntentStatus: state.paymentIntentStatus,
-        // ⚠️ THE WORDING MATTERS, AND THE FIRST PERSON THROUGH THIS GOT IT
-        // WRONG — reasonably. UnionPay's page says 确认支付 and shows the amount,
-        // the merchant and the items, so the cardholder DID confirm a payment.
-        // Answering that with a bare `paid: false` reads as "it failed".
-        //
-        // What is true is narrower and stranger: they authorised it, and the
-        // ISO 8583 authorization that would actually move money has not been
-        // sent. The spec says so in the fields themselves — paymentToken "can
-        // be used in authorization", the cryptogram is "submitted along with
-        // the payment token for payment authorization", panSequenceNumber goes
-        // "in F23 of authorization". Those are inputs to a message nobody has
-        // sent yet, and the party who sends it is the merchant's acquirer.
-        message: state.issued ? "\u6301\u5361\u4EBA\u5DF2\u5728\u94F6\u8054\u9875\u9762\u786E\u8BA4\u652F\u4ED8\uFF0C\u94F6\u8054\u5DF2\u7B7E\u53D1\u4E00\u6B21\u6027\u652F\u4ED8\u51ED\u8BC1\uFF08\u4EE4\u724C + DTVC\uFF09\u3002\u26A0\uFE0F \u4F46\u94B1\u8FD8\u6CA1\u52A8\uFF1A\u51ED\u8BC1\u662F\u4E00\u6761\u5C1A\u672A\u53D1\u51FA\u7684\u6388\u6743\u62A5\u6587\u7684\u5165\u53C2\uFF0C\u8981\u7531\u5546\u6237\u7684\u94F6\u8054\u6536\u5355\u673A\u6784\u53BB\u53D1\u3002\u4E09\u8BFA\u6CA1\u6709\u94F6\u8054\u6536\u5355\uFF0C\u6240\u4EE5\u6F14\u793A\u5230\u6B64\u4E3A\u6B62\u3002" : "\u8FD8\u6CA1\u6709\u3002\u6301\u5361\u4EBA\u8FD8\u6CA1\u5728\u94F6\u8054\u9875\u9762\u4E0A\u70B9\u300C\u786E\u8BA4\u652F\u4ED8\u300D\uFF0C\u6216\u8005\u521A\u70B9\u5B8C\u3001\u56DE\u8C03\u8FD8\u6CA1\u5230\u3002",
-        next: state.issued ? "Say BOTH halves, in this order: the cardholder confirmed the payment and UnionPay issued the credential \u2014 AND nothing has been charged yet, because the credential is the input to an authorization the MERCHANT\u2019s acquirer still has to send, and Sinocare has no UnionPay acceptance. Do not say it failed, and do not say it is paid. Both are wrong." : "tell them it is not done yet and let them finish on UnionPay\u2019s page. Do not retry in a tight loop."
-      });
+      return text(
+        await uaagCheckoutStatus(
+          {
+            apiBase: API_BASE,
+            agentToken: TOKEN,
+            openCheckout: null,
+            wallet: null
+          },
+          String(args.paymentIntentId ?? "")
+        )
+      );
     }
     if (req.params.name === "start_sinocare_wallet_handoff") {
       if (!TOKEN) {