@devlab.group/agent-commerce 0.1.0-alpha.0 → 1.0.0

package/README.md

@@ -10,14 +10,8 @@
   <img alt="TypeScript" src="https://img.shields.io/badge/TypeScript-strict-3178c6">
   <img alt="MCP" src="https://img.shields.io/badge/MCP-supported-6b4fbb">
   <img alt="x402" src="https://img.shields.io/badge/x402-supported-0052ff">
-  <img alt="Status" src="https://img.shields.io/badge/status-alpha-orange">
 </p>
 
-> **Alpha.** `v0.1.0-alpha` is experimental. Do not use it with production funds
-> without an independent review. See [SECURITY.md](SECURITY.md).
-
----
-
 ## What it is, in ten seconds
 
 You already have an HTTP API. AI agents want to **discover** it, **call** it and
@@ -30,7 +24,7 @@ wallet — the gateway never holds it, and never holds your keys.
 
 ```text
 Your existing API → Agent Commerce Gateway → AI Agent
-                        MCP · x402 · receipts · doctor
+                MCP · x402 · receipts · doctor
 ```
 
 ## Demo
@@ -87,24 +81,25 @@ const gateway = await createGateway({
   paymentProviders: [],
   protocolAdapters: [],
 });
-const { url } = await gateway.listen;
+const { url } = await gateway.listen();
 ```
 
 ### Optional peers — install only the rails you use
 
 The MCP adapter and the x402 provider live on their own subpaths, because each
-needs a dependency the rest of the package does not. x402 alone pulls a browser
-wallet stack (wagmi, WalletConnect, Reown) worth ~572 MB, which a gateway
-serving a free HTTP resource has no business installing.
+needs a dependency the rest of the package does not — the x402 rail brings the
+whole EVM signing and RPC stack, which a gateway serving a free HTTP resource
+has no business installing.
 
-| You want                       | Install                        | Import                                     |
-| ------------------------------ | ------------------------------ | ------------------------------------------ |
-| gateway, config, receipts, CLI | `@devlab.group/agent-commerce` | `from '@devlab.group/agent-commerce'`      |
-| expose resources as MCP tools  | `+ @modelcontextprotocol/sdk`  | `from '@devlab.group/agent-commerce/mcp'`  |
-| accept x402 payments           | `+ x402 viem`                  | `from '@devlab.group/agent-commerce/x402'` |
+| You want                          | Install                        | Import                                     |
+| --------------------------------- | ------------------------------ | ------------------------------------------ |
+| gateway, config, receipts, CLI    | `@devlab.group/agent-commerce` | `from '@devlab.group/agent-commerce'`      |
+| expose resources as MCP tools     | `+ @modelcontextprotocol/sdk`  | `from '@devlab.group/agent-commerce/mcp'`  |
+| accept x402 payments              | `+ @x402/core @x402/evm viem`  | `from '@devlab.group/agent-commerce/x402'` |
+| authenticate to a CDP facilitator | `+ @coinbase/x402`             | (no import — loaded on demand)             |
 
 ```bash
-npm install @devlab.group/agent-commerce @modelcontextprotocol/sdk x402 viem
+npm install @devlab.group/agent-commerce @modelcontextprotocol/sdk @x402/core @x402/evm viem
 ```
 
 ```ts
@@ -112,12 +107,19 @@ import { mcp } from '@devlab.group/agent-commerce/mcp';
 import { x402 } from '@devlab.group/agent-commerce/x402';
 ```
 
-Peers are pinned exactly: x402's
-schemas and EIP-712 domains cross this boundary, so a version skew is a
-correctness problem rather than a convenience one. Import a subpath without its
+Peers are pinned exactly: x402's schemas and EIP-712 domains cross this
+boundary, so a version skew is a correctness problem rather than a convenience
+one. Import a subpath without its
 peer installed and Node fails at load naming the missing package — deliberately,
 rather than starting a gateway that silently serves nothing.
 
+`@coinbase/x402` is the odd one out: it has no import of its own and is loaded
+dynamically, only when `facilitator.auth.type: cdp` is configured. It is worth
+avoiding if you can — it brings `@coinbase/cdp-sdk` and `axios`, which carry
+high-severity advisories, while the package itself and the other three peers
+audit clean. `auth.type: bearer` covers any facilitator with a static token and
+installs nothing.
+
 ## Quickstart
 
 Requirements: **Node >= 22**, **npm 10**, **Docker**. Nothing else — no API
@@ -154,7 +156,7 @@ To stop and wipe state: `docker compose down -v`.
         ┌──────────────────────────────────────────────────────┐
         │ AI Agent │
         └──────────────┬───────────────────────────────────────┘
-                       │ MCP · HTTP + X-PAYMENT
+                       │ MCP · HTTP + PAYMENT-SIGNATURE
         ┌──────────────▼───────────────────────────────────────┐
         │ Agent Commerce Gateway (yours) │
         │ │
@@ -206,13 +208,13 @@ See [docs/configuration.md](docs/configuration.md).
 
 ## Protocol support
 
-| Protocol              | Status    | Pinned revision                    |
-| --------------------- | --------- | ---------------------------------- |
-| **MCP**               | Supported | `@modelcontextprotocol/sdk@1.30.0` |
-| **x402**              | Supported | `x402@1.2.0`, scheme `exact`, EVM  |
-| **HTTP**              | Supported | native routes                      |
-| UCP                   | Planned   | —                                  |
-| ACP · MPP · A2A · AP2 | Planned   | —                                  |
+| Protocol              | Status    | Pinned revision                                          |
+| --------------------- | --------- | -------------------------------------------------------- |
+| **MCP**               | Supported | `@modelcontextprotocol/sdk@1.30.0`                       |
+| **x402**              | Supported | x402 v2 (`@x402/core`, `@x402/evm`), scheme `exact`, EVM |
+| **HTTP**              | Supported | native routes                                            |
+| UCP                   | Planned   | —                                                        |
+| ACP · MPP · A2A · AP2 | Planned   | —                                                        |
 
 "Planned" means **no code ships for it**. Each adapter reports its own
 `supportedSpec`, `capabilities` and `unsupported` list at runtime via
@@ -235,19 +237,123 @@ checkable, not marketing. Detail: [docs/protocols.md](docs/protocols.md).
 
 Detail: [docs/payment-flow.md](docs/payment-flow.md).
 
+## Public networks
+
+Same gateway, same pipeline — a different `network` and a facilitator that is
+not this process. No code changes, and no "live mode" to switch on.
+
+### It has actually settled
+
+Not a roadmap entry. Both of these moved 0.01 USDC from a buyer to a merchant
+through a remote facilitator:
+
+| Network      | Transaction                                                                                                           |
+| ------------ | --------------------------------------------------------------------------------------------------------------------- |
+| Base Sepolia | [`0xea41b234c4…`](https://sepolia.basescan.org/tx/0xea41b234c4645a4d335589ec9753646aa7cccd1b97e9e15823b88bff7b54a247) |
+| Base         | [`0x57ec81c2a3…`](https://basescan.org/tx/0x57ec81c2a360d14d59a43cf4e24be09a6bd75cbe6185016372895bda73e42763)         |
+
+In both, the gateway held no key, signed nothing and paid no gas — the buyer
+signed an EIP-3009 authorisation offline holding no ETH, and the facilitator
+broadcast it. Each run reads the buyer and merchant balances and the
+transaction receipt back off the chain afterwards; the gateway's own report of
+success is not the proof.
+
+Reproduce with `npm run test:testnet` / `npm run test:mainnet` — both spend
+real funds, skip themselves without credentials, and never run in CI.
+
+### The facilitator model
+
+A **facilitator** verifies the buyer's authorisation and broadcasts the
+transfer. It is the only component that needs gas, and it is never this
+gateway on a public network.
+
+| `facilitator.mode` | Who signs                           | Where it is allowed      |
+| ------------------ | ----------------------------------- | ------------------------ |
+| `local`            | this process, with an Anvil dev key | the local dev chain only |
+| `remote`           | an HTTP facilitator you point at    | anywhere                 |
+
+With `remote`, the gateway holds **no signing key at all**. The buyer signs an
+EIP-3009 authorisation offline — no ETH required — and the facilitator pays the
+gas. A facilitator cannot redirect your money: the authorisation names its
+recipient, amount and chain, so it can broadcast exactly that transfer or
+nothing. What it can do is see every authorisation you handle, and stop
+answering.
+
+Three auth types: `none`, `bearer` (a static token, installs nothing) and `cdp`
+(Coinbase Developer Platform, which signs a fresh JWT per request). Anything
+else is refused at config load rather than sent nothing. You can also run your
+own — `remote` does not care who operates the endpoint.
+
+### Base Sepolia
+
+```yaml
+payments:
+  x402:
+    enabled: true
+    network: eip155:84532
+    rpcUrl: https://base-sepolia-rpc.publicnode.com # health checks only
+    asset: "0x036CbD53842c5426634e7929541eC2318f3dCF7e" # Circle USDC
+    assetName: USDC
+    assetVersion: "2"
+    assetDecimals: 6
+    payTo: ${MERCHANT_WALLET}
+    maxTimeoutSeconds: 300
+    facilitator:
+      mode: remote
+      url: https://x402.org/facilitator
+      auth: { type: none }
+```
+
+Full config in [`examples/base-sepolia/`](examples/base-sepolia/). Test USDC
+from [faucet.circle.com](https://faucet.circle.com); the buyer needs no ETH.
+`npm run test:testnet` drives the whole flow and reads the result back off the
+chain.
+
+Chain id 84532 belongs to **both** Base Sepolia and this project's local dev
+chain, deliberately. Nothing infers "public network" from it — `local`,
+`testnet` and `mainnet` are derived from the network *and* the facilitator
+together, and reported by `doctor`, `health()` and `/.well-known`.
+
+### Base mainnet
+
+Real funds, so nothing is defaulted. Every one of these is checked at config
+load, and the gateway will not start without them:
+
+| Required                                        |                                                                                                                |
+| ----------------------------------------------- | -------------------------------------------------------------------------------------------------------------- |
+| `allowMainnet: true`                            | mainnet is never a default                                                                                     |
+| `facilitator.mode: remote`                      | `local` needs a funded gas key inside this process                                                             |
+| an HTTPS `facilitator.url`                      |                                                                                                                |
+| `allowUnauthenticatedFacilitator: true`         | only if that facilitator takes no credential                                                                   |
+| a non-development `payTo`                       |                                                                                                                |
+| `asset` = USDC on Base, `assetName: "USD Coin"` | **not** `"USDC"` — that deployment predates the rename, and the buyer signs the name into their EIP-712 domain |
+
+Full config in [`examples/base-mainnet/`](examples/base-mainnet/), and
+[`examples/base-mainnet-payai/`](examples/base-mainnet-payai/) for an
+unauthenticated facilitator. `npm run test:mainnet` proves it end to end and
+spends real USDC on every run.
+
+`agent-commerce validate` reports any of the above before anything starts, and
+`doctor` prints `LIVE MAINNET MODE — REAL FUNDS`.
+
+> Neither public-network suite runs in CI — there is no workflow and there must
+> not be one. A workflow means a funded key in repository secrets, spendable by
+> anyone with write access. Both suites run from the machine that holds the
+> wallet, and skip themselves without credentials.
+
 ## Diagnostics
 
 ```console
 $ npm run agent-commerce -- doctor --config config-demo.yaml
 
-PASS Config valid — 2 resource(s), merchant "Demo Data Store"
-PASS Gateway healthy and ready at http://127.0.0.1:8080
-PASS Backend 2/2 backend host(s) reachable
-PASS Protocols http=on mcp=on (/mcp)
-PASS Payments x402 enabled — network=base-sepolia, destination=0x7099…79C8, facilitator=local
-INFO Payments (MPP) planned — not implemented in v0.1
-PASS Storage sqlite schema v1 writable; receipts=2
-PASS Protocol versions reported by gateway /.well-known/agent-commerce
+PASS  Config               valid — 2 resource(s), merchant "Demo Data Store" (using local chain manifest .deploy/local.json for X402_ASSET, X402_ASSET_NAME, X402_ASSET_VERSION, X402_ASSET_DECIMALS, MERCHANT_WALLET, X402_FACILITATOR_PRIVATE_KEY)
+PASS  Gateway              healthy and ready at http://127.0.0.1:8080
+PASS  Backend              2/2 backend host(s) reachable
+PASS  Protocols            http=on mcp=on (/mcp)
+PASS  Payments             x402 v2 (scheme=exact) enabled — LOCAL dev chain (eip155:84532, chain id shared with Base Sepolia), destination=0x7099…79C8, facilitator=local
+INFO  Payments (MPP)       planned — not implemented in this release
+PASS  Storage              sqlite schema v1 writable; receipts=2
+PASS  Protocol versions    reported by gateway /.well-known/agent-commerce
 
 Score: 7/7 checks passed
 ```
@@ -277,15 +383,6 @@ reachable by anyone else, know the split:
 
 [SECURITY.md](SECURITY.md) states plainly what this does and does not protect.
 
-## Live settlement — not in this release
-
-**v0.1.0-alpha settles only against the local deterministic chain** (Anvil +
-MockUSDC). There is no live mode, no flag to enable one, and no partial path
-toward one: `facilitator.mode: "remote"` is rejected at config load, and the
-x402 provider's health check requires an Anvil-only RPC method, so `/ready`
-returns 503 against a real network. Settling real value is **planned**, not
-shipped — see [docs/payment-flow.md](docs/payment-flow.md).
-
 ## Development
 
 ```bash
@@ -298,7 +395,8 @@ See [CONTRIBUTING.md](CONTRIBUTING.md).
 
 ## Roadmap
 
-**Now (v0.1.0-alpha)** — MCP, x402, receipts, doctor, deterministic demo.
+**Now (v1.0.0)** — MCP, x402 v2, settlement on the local chain, Base Sepolia
+and Base mainnet, receipts, doctor, deterministic demo.
 
 **Next** — OpenAPI import · a stronger conformance suite · a `doctor` GitHub
 Action · UCP · MPP · ACP · A2A · AP2 · Shopify and WooCommerce examples ·

package/dist/{chunk-CZ6ZDAYD.js → chunk-BQNE3A5H.js}

@@ -18,8 +18,9 @@ var DEFAULT_BACKEND_TIMEOUT_MS = 1e4;
 
 // src/core/domain/wire.ts
 var PAYMENT_INPUT_FIELD = "_payment";
-var PAYMENT_HEADER = "x-payment";
-var PAYMENT_RESPONSE_HEADER = "x-payment-response";
+var PAYMENT_HEADER = "payment-signature";
+var PAYMENT_RESPONSE_HEADER = "payment-response";
+var PAYMENT_REQUIRED_HEADER = "payment-required";
 var DELIVERY_SUMMARY_META_KEY = "agent-commerce/delivery";
 function toDeliverySummary(outcome) {
   const p = outcome.payment;
@@ -56,7 +57,8 @@ function toPaymentRequiredEnvelope(outcome) {
       ...r.network !== void 0 ? { network: r.network } : {},
       ...r.asset !== void 0 ? { asset: r.asset } : {},
       ...r.expiresAt !== void 0 ? { expiresAt: r.expiresAt } : {},
-      accepts: r.challenge.accepts
+      accepts: r.challenge.accepts,
+      ...r.challenge.envelope !== void 0 ? { envelope: r.challenge.envelope } : {}
     }
   };
 }
@@ -185,8 +187,8 @@ var systemClock = {
   nowIso: () => (/* @__PURE__ */ new Date()).toISOString(),
   monotonicMs: () => performance.now()
 };
-var PACKAGE_VERSION = "0.1.0-alpha.0" ;
+var PACKAGE_VERSION = "1.0.0" ;
 
-export { COMMERCE_ERROR_CODES, COMMERCE_ERROR_HTTP_STATUS, COMMERCE_EVENT_TYPES, CommerceError, DEFAULT_BACKEND_TIMEOUT_MS, DELIVERY_SUMMARY_META_KEY, NOOP_LOGGER, PACKAGE_VERSION, PAYMENT_HEADER, PAYMENT_INPUT_FIELD, PAYMENT_RESPONSE_HEADER, RETRYABLE_ERROR_CODES, isCommerceError, isHttpProtocolAdapter, isPaymentRequiredEnvelope, systemClock, toCommerceError, toDeliverySummary, toErrorEnvelope, toPaymentRequiredEnvelope };
-//# sourceMappingURL=chunk-CZ6ZDAYD.js.map
-//# sourceMappingURL=chunk-CZ6ZDAYD.js.map
+export { COMMERCE_ERROR_CODES, COMMERCE_ERROR_HTTP_STATUS, COMMERCE_EVENT_TYPES, CommerceError, DEFAULT_BACKEND_TIMEOUT_MS, DELIVERY_SUMMARY_META_KEY, NOOP_LOGGER, PACKAGE_VERSION, PAYMENT_HEADER, PAYMENT_INPUT_FIELD, PAYMENT_REQUIRED_HEADER, PAYMENT_RESPONSE_HEADER, RETRYABLE_ERROR_CODES, isCommerceError, isHttpProtocolAdapter, isPaymentRequiredEnvelope, systemClock, toCommerceError, toDeliverySummary, toErrorEnvelope, toPaymentRequiredEnvelope };
+//# sourceMappingURL=chunk-BQNE3A5H.js.map
+//# sourceMappingURL=chunk-BQNE3A5H.js.map

package/dist/chunk-BQNE3A5H.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/domain/event.ts","../src/core/domain/resource.ts","../src/core/domain/wire.ts","../src/core/errors/codes.ts","../src/core/errors/commerce-error.ts","../src/core/interfaces/logger.ts","../src/core/interfaces/protocol-adapter.ts","../src/core/interfaces/runtime.ts","../src/version.ts"],"names":[],"mappings":";;;AAQO,IAAM,oBAAA,GAAuB;AAAA,EAClC,qBAAA;AAAA,EACA,oBAAA;AAAA,EACA,kBAAA;AAAA,EACA,kBAAA;AAAA,EACA,kBAAA;AAAA,EACA,iBAAA;AAAA,EACA,gBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;;;ACUO,IAAM,0BAAA,GAA6B;;;ACVnC,IAAM,mBAAA,GAAsB;AAU5B,IAAM,cAAA,GAAiB;AAGvB,IAAM,uBAAA,GAA0B;AAShC,IAAM,uBAAA,GAA0B;AAchC,IAAM,yBAAA,GAA4B;AAmElC,SAAS,kBAAkB,OAAA,EAA4C;AAC5E,EAAA,MAAM,IAAI,OAAA,CAAQ,OAAA;AAClB,EAAA,OAAO;AAAA,IACL,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,SAAA,EAAW,QAAQ,OAAA,CAAQ,EAAA;AAAA,IAC3B,WAAA,EAAa,QAAQ,OAAA,CAAQ,WAAA;AAAA,IAC7B,GAAI,MAAM,MAAA,GACN;AAAA,MACE,OAAA,EAAS;AAAA,QACP,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,GAAI,EAAE,iBAAA,KAAsB,MAAA,GACxB,EAAE,iBAAA,EAAmB,CAAA,CAAE,iBAAA,EAAkB,GACzC,EAAC;AAAA,QACL,GAAI,EAAE,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,GAAI;AAAC;AAC1D,QAEF;AAAC,GACP;AACF;AAEO,SAAS,0BACd,OAAA,EACyB;AACzB,EAAA,MAAM,IAAI,OAAA,CAAQ,WAAA;AAClB,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,kBAAA;AAAA,IACR,IAAA,EAAM,kBAAA;AAAA,IACN,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,OAAA,EAAS,CAAA,WAAA,EAAc,CAAA,CAAE,MAAM,CAAA,CAAA,EAAI,CAAA,CAAE,QAAQ,CAAA,2BAAA,EAA8B,OAAA,CAAQ,UAAU,CAAA,gBAAA,EAAmB,CAAA,CAAE,QAAQ,CAAA,eAAA,CAAA;AAAA,IAC1H,OAAA,EAAS;AAAA,MACP,UAAU,CAAA,CAAE,QAAA;AAAA,MACZ,OAAA,EAAS,EAAE,SAAA,CAAU,OAAA;AAAA,MACrB,QAAQ,CAAA,CAAE,MAAA;AAAA,MACV,UAAU,CAAA,CAAE,QAAA;AAAA,MACZ,aAAa,CAAA,CAAE,WAAA;AAAA,MACf,GAAI,EAAE,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,GAAI,EAAC;AAAA,MACxD,GAAI,EAAE,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,GAAI,EAAC;AAAA,MAClD,GAAI,EAAE,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,CAAA,CAAE,SAAA,EAAU,GAAI,EAAC;AAAA,MAC9D,OAAA,EAAS,EAAE,SAAA,CAAU,OAAA;AAAA,MACrB,GAAI,CAAA,CAAE,SAAA,CAAU,QAAA,KAAa,MAAA,GAAY,EAAE,QAAA,EAAU,CAAA,CAAE,SAAA,CAAU,QAAA,EAAS,GAAI;AAAC;AACjF,GACF;AACF;AAEO,SAAS,gBAAgB,KAAA,EAAqC;AACnE,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,EAAO;AAC1B,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,OAAA;AAAA,IACR,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,GAAI,KAAK,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,IAAA,CAAK,SAAA,EAAU,GAAI,EAAC;AAAA,IACpE,GAAI,KAAK,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,EAAY,IAAA,CAAK,UAAA,EAAW,GAAI,EAAC;AAAA,IACvE,GAAI,KAAK,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,IAAA,CAAK,OAAA,EAAQ,GAAI;AAAC,GAChE;AACF;AAEO,SAAS,0BAA0B,KAAA,EAAkD;AAC1F,EAAA,OACE,OAAO,KAAA,KAAU,QAAA,IACjB,KAAA,KAAU,IAAA,IACT,MAAkC,MAAA,KAAW,kBAAA,IAC9C,OAAQ,KAAA,CAAkC,OAAA,KAAY,QAAA;AAE1D;;;ACvLO,IAAM,oBAAA,GAAuB;AAAA,EAClC,gBAAA;AAAA,EACA,oBAAA;AAAA,EACA,eAAA;AAAA,EACA,kBAAA;AAAA,EACA,iBAAA;AAAA,EACA,kBAAA;AAAA,EACA,8BAAA;AAAA,EACA,2BAAA;AAAA,EACA,iBAAA;AAAA,EACA,eAAA;AAAA,EACA,sBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA;AACF;AAUO,IAAM,0BAAA,GAA0E;AAAA,EACrF,cAAA,EAAgB,GAAA;AAAA,EAChB,kBAAA,EAAoB,GAAA;AAAA,EACpB,aAAA,EAAe,GAAA;AAAA,EACf,gBAAA,EAAkB,GAAA;AAAA,EAClB,eAAA,EAAiB,GAAA;AAAA,EACjB,gBAAA,EAAkB,GAAA;AAAA,EAClB,4BAAA,EAA8B,GAAA;AAAA,EAC9B,yBAAA,EAA2B,GAAA;AAAA,EAC3B,eAAA,EAAiB,GAAA;AAAA,EACjB,aAAA,EAAe,GAAA;AAAA,EACf,oBAAA,EAAsB,GAAA;AAAA,EACtB,YAAA,EAAc,GAAA;AAAA,EACd,aAAA,EAAe,GAAA;AAAA,EACf,cAAA,EAAgB;AAClB;AAGO,IAAM,qBAAA,uBAA4D,GAAA,CAAI;AAAA,EAC3E,8BAAA;AAAA,EACA,iBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA;AACF,CAAC;;;AC3BM,IAAM,aAAA,GAAN,MAAM,cAAA,SAAsB,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAyB,OAAA,EAAiB,OAAA,GAAgC,EAAC,EAAG;AACxF,IAAA,KAAA,CAAM,OAAA,EAAS,QAAQ,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM,GAAI,MAAS,CAAA;AACjF,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,OAAA,CAAQ,UAAA,IAAc,0BAAA,CAA2B,IAAI,CAAA;AACvE,IAAA,IAAA,CAAK,SAAA,GAAY,qBAAA,CAAsB,GAAA,CAAI,IAAI,CAAA;AAC/C,IAAA,IAAI,OAAA,CAAQ,OAAA,KAAY,MAAA,EAAW,IAAA,CAAK,UAAU,OAAA,CAAQ,OAAA;AAC1D,IAAA,IAAI,OAAA,CAAQ,SAAA,KAAc,MAAA,EAAW,IAAA,CAAK,YAAY,OAAA,CAAQ,SAAA;AAC9D,IAAA,IAAI,OAAA,CAAQ,UAAA,KAAe,MAAA,EAAW,IAAA,CAAK,aAAa,OAAA,CAAQ,UAAA;AAChE,IAAA,KAAA,CAAM,iBAAA,GAAoB,MAAM,cAAa,CAAA;AAAA,EAC/C;AAAA;AAAA,EAGA,MAAA,GAA4B;AAC1B,IAAA,OAAO;AAAA,MACL,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,GAAI,KAAK,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,IAAA,CAAK,SAAA,EAAU,GAAI,EAAC;AAAA,MACpE,GAAI,KAAK,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,EAAY,IAAA,CAAK,UAAA,EAAW,GAAI,EAAC;AAAA,MACvE,GAAI,KAAK,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,IAAA,CAAK,OAAA,EAAQ,GAAI;AAAC,KAChE;AAAA,EACF;AACF;AAEO,SAAS,gBAAgB,KAAA,EAAwC;AACtE,EAAA,OAAO,KAAA,YAAiB,aAAA;AAC1B;AAsBO,SAAS,eAAA,CACd,KAAA,EACA,YAAA,GAAkC,gBAAA,EAClC,kBAAkB,2BAAA,EACH;AACf,EAAA,IAAI,eAAA,CAAgB,KAAK,CAAA,EAAG,OAAO,KAAA;AACnC,EAAA,OAAO,IAAI,aAAA,CAAc,YAAA,EAAc,iBAAiB,EAAE,KAAA,EAAO,OAAO,CAAA;AAC1E;;;ACjFO,IAAM,WAAA,GAAsB;AAAA,EACjC,OAAO,MAAM;AAAA,EAAC,CAAA;AAAA,EACd,MAAM,MAAM;AAAA,EAAC,CAAA;AAAA,EACb,MAAM,MAAM;AAAA,EAAC,CAAA;AAAA,EACb,OAAO,MAAM;AAAA,EAAC,CAAA;AAAA,EACd,OAAO,MAAM;AACf;;;ACiDO,SAAS,sBAAsB,OAAA,EAA0D;AAC9F,EAAA,OAAO,OAAQ,QAAgC,UAAA,KAAe,UAAA;AAChE;;;ACtDO,IAAM,WAAA,GAAqB;AAAA,EAChC,GAAA,EAAK,sBAAM,IAAI,IAAA,EAAK;AAAA,EACpB,MAAA,EAAQ,MAAA,iBAAM,IAAI,IAAA,IAAO,WAAA,EAAY;AAAA,EACrC,WAAA,EAAa,MAAM,WAAA,CAAY,GAAA;AACjC;ACOO,IAAM,eAAA,GACmC,OAAA","file":"chunk-BQNE3A5H.js","sourcesContent":["/**\n * Canonical commerce events.\n *\n * FROZEN CONTRACT. Every event in a single flow shares one `requestId` so that\n * logs, payment attempts, backend calls and receipts are correlatable.\n */\nimport type { IsoTimestamp } from './common.js';\n\nexport const COMMERCE_EVENT_TYPES = [\n  'resource.discovered',\n  'resource.requested',\n  'payment.required',\n  'payment.rejected',\n  'payment.verified',\n  'payment.settled',\n  'backend.called',\n  'backend.failed',\n  'resource.delivered',\n] as const;\n\nexport type CommerceEventType = (typeof COMMERCE_EVENT_TYPES)[number];\n\nexport interface CommerceEvent {\n  readonly id: string;\n  readonly type: CommerceEventType;\n  readonly requestId: string;\n  readonly resourceId?: string;\n  readonly at: IsoTimestamp;\n  /** Protocol adapter that originated the request, e.g. 'mcp' or 'http'. */\n  readonly adapter?: string;\n  readonly paymentProvider?: string;\n  readonly durationMs?: number;\n  readonly status?: 'ok' | 'error';\n  /** Non-secret, structured detail. Must never contain keys, headers or proofs. */\n  readonly data?: Readonly<Record<string, unknown>>;\n}\n\n/**\n * Sink for canonical events.\n *\n * Implementations must be non-throwing from the caller's perspective: an event\n * sink failure must never fail an otherwise successful commerce flow.\n */\nexport interface EventSink {\n  emit(event: CommerceEvent): Promise<void>;\n}\n","/**\n * Canonical resource model.\n *\n * FROZEN CONTRACT.\n */\nimport type { DecimalAmount, JsonSchema, PaymentMethodName, ProtocolName } from './common.js';\n\n/** HTTP methods a backend handler may use. */\nexport type BackendMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\n\n/**\n * Describes how the gateway calls the merchant's existing backend.\n *\n * Backend URLs are administrator-controlled configuration only. User- or\n * agent-controlled backend URLs are forbidden (see docs/security.md, SSRF).\n * Secret header values must come from `${ENV_VAR}` placeholders resolved by\n * the config loader, never from plaintext configuration.\n */\nexport interface BackendHandler {\n  readonly type: 'http';\n  readonly method: BackendMethod;\n  readonly url: string;\n  readonly headers?: Readonly<Record<string, string>>;\n  /** Hard upper bound on the backend call. Defaults to DEFAULT_BACKEND_TIMEOUT_MS. */\n  readonly timeoutMs?: number;\n}\n\n/** Default backend timeout when a resource does not specify one. */\nexport const DEFAULT_BACKEND_TIMEOUT_MS = 10_000;\n\n/**\n * Canonical pricing.\n *\n * `dynamic` exists in the type system for forward compatibility but is\n * REJECTED by config validation in this release.\n */\nexport type Pricing =\n  | { readonly type: 'free' }\n  | {\n      readonly type: 'fixed';\n      readonly amount: DecimalAmount;\n      readonly currency: string;\n    }\n  | {\n      readonly type: 'dynamic';\n      readonly resolver: string;\n    };\n\n/**\n * A merchant capability exposed to agents.\n *\n * The canonical resource is the single source of truth: protocol adapters map\n * it outward, they never define their own parallel notion of a resource.\n */\nexport interface CommerceResource {\n  readonly id: string;\n  readonly name: string;\n  readonly description?: string;\n  readonly inputSchema?: JsonSchema;\n  readonly outputSchema?: JsonSchema;\n  readonly handler: BackendHandler;\n  readonly pricing: Pricing;\n  readonly exposedVia: readonly ProtocolName[];\n  readonly paymentMethods: readonly PaymentMethodName[];\n}\n\n/** Read-only view of every configured resource. */\nexport interface ResourceRegistry {\n  get(id: string): CommerceResource | undefined;\n  list(): readonly CommerceResource[];\n  /** Resources exposed through a given protocol surface. */\n  listExposedVia(protocol: ProtocolName): readonly CommerceResource[];\n  has(id: string): boolean;\n}\n","/**\n * Gateway-defined wire envelopes.\n *\n * FROZEN CONTRACT. These are the *only* representations of \"payment required\"\n * and \"error\" that leave the gateway, whichever protocol carries them. The HTTP\n * routes, the MCP adapter and the demo buyer agent all use these helpers so the\n * three can never drift apart.\n */\n\nimport type { CommerceError, CommerceErrorCode } from '../errors/index.js';\nimport type { DecimalAmount, IsoTimestamp, PaymentMethodName } from './common.js';\nimport type { DeliveredOutcome, PaymentRequiredOutcome } from './request.js';\n\n/**\n * Reserved input property carrying a payment proof on protocols that have no\n * header channel (MCP tool calls). Over HTTP the `PAYMENT-SIGNATURE` header is\n * used.\n */\nexport const PAYMENT_INPUT_FIELD = '_payment';\n\n/**\n * HTTP request header carrying the payment proof.\n *\n * x402 v2 header names, lowercased because that is how Node presents incoming\n * headers. v1's `X-PAYMENT` / `X-PAYMENT-RESPONSE` pair is not accepted: this\n * gateway speaks one protocol version, and quietly honouring both would mean\n * two verification paths for the same money.\n */\nexport const PAYMENT_HEADER = 'payment-signature';\n\n/** HTTP response header carrying the settlement result. */\nexport const PAYMENT_RESPONSE_HEADER = 'payment-response';\n\n/**\n * HTTP response header carrying the base64 payment challenge on a 402.\n *\n * The 402 body still carries {@link PaymentRequiredEnvelope} — richer, and the\n * only channel MCP has — but an x402 v2 client reads the challenge from this\n * header and ignores the body, so both are sent.\n */\nexport const PAYMENT_REQUIRED_HEADER = 'payment-required';\n\n/**\n * Key under which a protocol adapter attaches a {@link DeliverySummary} to its\n * result metadata — MCP's `CallToolResult._meta`, and anywhere else a protocol\n * offers an out-of-band metadata channel.\n *\n * Frozen deliberately. The bug this whole mechanism exists to fix was two\n * surfaces disagreeing about what a payer gets back; a key name enforced only\n * by one side's tests would reintroduce exactly that drift. Producer and\n * consumer both import this constant.\n *\n * Follows MCP's `<namespace>/<name>` convention for `_meta` keys.\n */\nexport const DELIVERY_SUMMARY_META_KEY = 'agent-commerce/delivery';\n\nexport interface PaymentRequiredEnvelope {\n  readonly status: 'payment-required';\n  readonly code: 'PAYMENT_REQUIRED';\n  readonly requestId: string;\n  readonly resourceId: string;\n  readonly message: string;\n  readonly payment: {\n    readonly provider: PaymentMethodName;\n    readonly version: string;\n    readonly amount: DecimalAmount;\n    readonly currency: string;\n    readonly destination: string;\n    readonly network?: string;\n    readonly asset?: string;\n    readonly expiresAt?: IsoTimestamp;\n    /** Provider-native requirement objects, passed through verbatim. */\n    readonly accepts: readonly Readonly<Record<string, unknown>>[];\n    /**\n     * The provider's own challenge document, verbatim — see\n     * {@link PaymentChallenge.envelope}. Present for providers that have one;\n     * a buyer's protocol client can hand this straight to its SDK.\n     */\n    readonly envelope?: Readonly<Record<string, unknown>>;\n  };\n}\n\nexport interface ErrorEnvelope {\n  readonly status: 'error';\n  readonly code: CommerceErrorCode;\n  readonly message: string;\n  readonly retryable: boolean;\n  readonly requestId?: string;\n  readonly resourceId?: string;\n  readonly details?: Readonly<Record<string, unknown>>;\n}\n\n/**\n * What a buyer learns about their own completed purchase.\n *\n * A payer is entitled to the record of their own transaction — the request it\n * belonged to, whether it settled, and the settlement reference they can check\n * on-chain. They are NOT entitled to the merchant's ledger, which is why\n * `/api/receipts` is an operator route behind `server.adminToken`.\n *\n * Before this existed the two surfaces disagreed: HTTP callers received a\n * settlement summary in the payment-response header while MCP callers received\n * nothing, so an MCP buyer's only route to their own receipt was the merchant's\n * ledger. Both surfaces now emit this same shape.\n */\nexport interface DeliverySummary {\n  readonly requestId: string;\n  readonly resourceId: string;\n  readonly receiptId: string;\n  readonly deliveredAt: IsoTimestamp;\n  readonly payment?: {\n    readonly status: 'verified' | 'settled' | 'rejected';\n    readonly amount: DecimalAmount;\n    readonly currency: string;\n    /** Settlement reference, e.g. an on-chain transaction hash. */\n    readonly externalReference?: string;\n    readonly network?: string;\n  };\n}\n\n/** Build the payer-facing summary of a delivered outcome. */\nexport function toDeliverySummary(outcome: DeliveredOutcome): DeliverySummary {\n  const p = outcome.payment;\n  return {\n    requestId: outcome.requestId,\n    resourceId: outcome.resourceId,\n    receiptId: outcome.receipt.id,\n    deliveredAt: outcome.receipt.deliveredAt,\n    ...(p !== undefined\n      ? {\n          payment: {\n            status: p.status,\n            amount: p.amount,\n            currency: p.currency,\n            ...(p.externalReference !== undefined\n              ? { externalReference: p.externalReference }\n              : {}),\n            ...(p.network !== undefined ? { network: p.network } : {}),\n          },\n        }\n      : {}),\n  };\n}\n\nexport function toPaymentRequiredEnvelope(\n  outcome: PaymentRequiredOutcome,\n): PaymentRequiredEnvelope {\n  const r = outcome.requirement;\n  return {\n    status: 'payment-required',\n    code: 'PAYMENT_REQUIRED',\n    requestId: outcome.requestId,\n    resourceId: outcome.resourceId,\n    message: `Payment of ${r.amount} ${r.currency} is required for resource \"${outcome.resourceId}\". Retry with a ${r.provider} payment proof.`,\n    payment: {\n      provider: r.provider,\n      version: r.challenge.version,\n      amount: r.amount,\n      currency: r.currency,\n      destination: r.destination,\n      ...(r.network !== undefined ? { network: r.network } : {}),\n      ...(r.asset !== undefined ? { asset: r.asset } : {}),\n      ...(r.expiresAt !== undefined ? { expiresAt: r.expiresAt } : {}),\n      accepts: r.challenge.accepts,\n      ...(r.challenge.envelope !== undefined ? { envelope: r.challenge.envelope } : {}),\n    },\n  };\n}\n\nexport function toErrorEnvelope(error: CommerceError): ErrorEnvelope {\n  const info = error.toInfo();\n  return {\n    status: 'error',\n    code: info.code,\n    message: info.message,\n    retryable: info.retryable,\n    ...(info.requestId !== undefined ? { requestId: info.requestId } : {}),\n    ...(info.resourceId !== undefined ? { resourceId: info.resourceId } : {}),\n    ...(info.details !== undefined ? { details: info.details } : {}),\n  };\n}\n\nexport function isPaymentRequiredEnvelope(value: unknown): value is PaymentRequiredEnvelope {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    (value as PaymentRequiredEnvelope).status === 'payment-required' &&\n    typeof (value as PaymentRequiredEnvelope).payment === 'object'\n  );\n}\n","/**\n * Typed domain error codes.\n *\n * FROZEN CONTRACT. Protocol adapters map these codes into their own response\n * format. Never throw a bare string or untyped Error across a package boundary.\n */\nexport const COMMERCE_ERROR_CODES = [\n  'CONFIG_INVALID',\n  'RESOURCE_NOT_FOUND',\n  'INPUT_INVALID',\n  'PAYMENT_REQUIRED',\n  'PAYMENT_INVALID',\n  'PAYMENT_REPLAYED',\n  'PAYMENT_PROVIDER_UNAVAILABLE',\n  'PAYMENT_SETTLEMENT_FAILED',\n  'BACKEND_TIMEOUT',\n  'BACKEND_ERROR',\n  'PROTOCOL_UNSUPPORTED',\n  'GATEWAY_BUSY',\n  'STORAGE_ERROR',\n  'INTERNAL_ERROR',\n] as const;\n\nexport type CommerceErrorCode = (typeof COMMERCE_ERROR_CODES)[number];\n\n/**\n * Canonical HTTP status for each error code.\n *\n * Paid resources fail closed: every payment failure maps to a 4xx/5xx status\n * and never to a successful delivery.\n */\nexport const COMMERCE_ERROR_HTTP_STATUS: Readonly<Record<CommerceErrorCode, number>> = {\n  CONFIG_INVALID: 500,\n  RESOURCE_NOT_FOUND: 404,\n  INPUT_INVALID: 400,\n  PAYMENT_REQUIRED: 402,\n  PAYMENT_INVALID: 402,\n  PAYMENT_REPLAYED: 409,\n  PAYMENT_PROVIDER_UNAVAILABLE: 503,\n  PAYMENT_SETTLEMENT_FAILED: 502,\n  BACKEND_TIMEOUT: 504,\n  BACKEND_ERROR: 502,\n  PROTOCOL_UNSUPPORTED: 501,\n  GATEWAY_BUSY: 503,\n  STORAGE_ERROR: 500,\n  INTERNAL_ERROR: 500,\n};\n\n/** Codes for which a client may reasonably retry the same request. */\nexport const RETRYABLE_ERROR_CODES: ReadonlySet<CommerceErrorCode> = new Set([\n  'PAYMENT_PROVIDER_UNAVAILABLE',\n  'BACKEND_TIMEOUT',\n  // Load shedding is transient by definition: the caller should back off and\n  // try again. Before this code existed the MCP adapter's queue-full path threw\n  // PROTOCOL_UNSUPPORTED — HTTP 501, retryable:false — so an agent framework\n  // keyed on the machine-readable flag (which exists precisely so clients need\n  // not parse prose) would read a momentary throttle as a permanent capability\n  // gap and stop calling the tool.\n  'GATEWAY_BUSY',\n]);\n","/**\n * The single error type crossing package boundaries.\n *\n * FROZEN CONTRACT.\n */\nimport {\n  COMMERCE_ERROR_HTTP_STATUS,\n  type CommerceErrorCode,\n  RETRYABLE_ERROR_CODES,\n} from './codes.js';\n\nexport interface CommerceErrorOptions {\n  /** Structured, non-secret detail safe to return to a client. */\n  readonly details?: Readonly<Record<string, unknown>>;\n  readonly cause?: unknown;\n  readonly requestId?: string;\n  readonly resourceId?: string;\n  /** Override the default HTTP status for this code. */\n  readonly httpStatus?: number;\n}\n\n/** Serialisable wire form of a CommerceError. */\nexport interface CommerceErrorInfo {\n  readonly code: CommerceErrorCode;\n  readonly message: string;\n  readonly httpStatus: number;\n  readonly retryable: boolean;\n  readonly requestId?: string;\n  readonly resourceId?: string;\n  readonly details?: Readonly<Record<string, unknown>>;\n}\n\nexport class CommerceError extends Error {\n  readonly code: CommerceErrorCode;\n  readonly httpStatus: number;\n  readonly retryable: boolean;\n  readonly details?: Readonly<Record<string, unknown>>;\n  readonly requestId?: string;\n  readonly resourceId?: string;\n\n  constructor(code: CommerceErrorCode, message: string, options: CommerceErrorOptions = {}) {\n    super(message, options.cause !== undefined ? { cause: options.cause } : undefined);\n    this.name = 'CommerceError';\n    this.code = code;\n    this.httpStatus = options.httpStatus ?? COMMERCE_ERROR_HTTP_STATUS[code];\n    this.retryable = RETRYABLE_ERROR_CODES.has(code);\n    if (options.details !== undefined) this.details = options.details;\n    if (options.requestId !== undefined) this.requestId = options.requestId;\n    if (options.resourceId !== undefined) this.resourceId = options.resourceId;\n    Error.captureStackTrace?.(this, CommerceError);\n  }\n\n  /** Non-secret, client-safe representation. */\n  toInfo(): CommerceErrorInfo {\n    return {\n      code: this.code,\n      message: this.message,\n      httpStatus: this.httpStatus,\n      retryable: this.retryable,\n      ...(this.requestId !== undefined ? { requestId: this.requestId } : {}),\n      ...(this.resourceId !== undefined ? { resourceId: this.resourceId } : {}),\n      ...(this.details !== undefined ? { details: this.details } : {}),\n    };\n  }\n}\n\nexport function isCommerceError(value: unknown): value is CommerceError {\n  return value instanceof CommerceError;\n}\n\n/**\n * Normalise any thrown value into a CommerceError.\n *\n * Used at package boundaries so an unexpected failure never escapes untyped.\n *\n * SECURITY — do not \"improve\" this by propagating `value.message`.\n * `CommerceError.message` is client-visible: it is serialised by `toInfo()`\n * and `toErrorEnvelope()` and returned over HTTP and MCP. An arbitrary thrown\n * Error's message routinely carries internal detail — database connection\n * strings, internal hostnames, filesystem paths, backend URLs. Copying it into\n * a client-facing field turns every unexpected exception into an information\n * disclosure.\n *\n * The original value is preserved on `cause`, which is never serialised, so\n * logs and diagnostics keep the full detail while clients get only the\n * caller's deliberate, reviewed `fallbackMessage`.\n *\n * A caller that *wants* a specific client-facing message passes one:\n * toCommerceError(err, 'BACKEND_ERROR', 'Backend call failed')\n */\nexport function toCommerceError(\n  value: unknown,\n  fallbackCode: CommerceErrorCode = 'INTERNAL_ERROR',\n  fallbackMessage = 'Unexpected internal error',\n): CommerceError {\n  if (isCommerceError(value)) return value;\n  return new CommerceError(fallbackCode, fallbackMessage, { cause: value });\n}\n","/**\n * Minimal structural logger interface.\n *\n * Core must not depend on pino directly; the gateway injects a pino instance\n * that satisfies this shape. Never log secrets: private keys, seed phrases,\n * Authorization headers or payment authorisation payloads.\n */\nexport interface Logger {\n  debug(obj: Record<string, unknown>, msg?: string): void;\n  info(obj: Record<string, unknown>, msg?: string): void;\n  warn(obj: Record<string, unknown>, msg?: string): void;\n  error(obj: Record<string, unknown>, msg?: string): void;\n  child(bindings: Record<string, unknown>): Logger;\n}\n\n/** A logger that discards everything. Useful in unit tests. */\nexport const NOOP_LOGGER: Logger = {\n  debug: () => {},\n  info: () => {},\n  warn: () => {},\n  error: () => {},\n  child: () => NOOP_LOGGER,\n};\n","/**\n * Protocol adapter boundary.\n *\n * FROZEN CONTRACT. An adapter translates a protocol's wire format into a\n * `CanonicalRequest`, hands it to the execution pipeline and maps the outcome\n * back. It must not call merchant backends, implement payment logic, or hold\n * its own copy of the canonical model.\n *\n * Adapter isolation: a failure while starting or serving one adapter must not\n * prevent the others from operating.\n */\nimport type { IncomingMessage, ServerResponse } from 'node:http';\nimport type { AdapterDescriptor, AdapterHealth, ProtocolName } from '../domain/common.js';\nimport type { EventSink } from '../domain/event.js';\nimport type { ExecutionPipeline } from '../domain/request.js';\nimport type { ResourceRegistry } from '../domain/resource.js';\nimport type { Logger } from './logger.js';\nimport type { Clock, IdGenerator } from './runtime.js';\n\n/** Everything an adapter is given. Nothing else is available to it. */\nexport interface ProtocolAdapterContext {\n  readonly pipeline: ExecutionPipeline;\n  readonly resources: ResourceRegistry;\n  readonly events: EventSink;\n  readonly logger: Logger;\n  readonly clock: Clock;\n  readonly ids: IdGenerator;\n  /** Externally reachable base URL of the gateway, from config. */\n  readonly publicBaseUrl: string;\n}\n\nexport interface ProtocolAdapter {\n  readonly name: ProtocolName;\n  readonly descriptor: AdapterDescriptor;\n\n  start(context: ProtocolAdapterContext): Promise<void>;\n  health(): Promise<AdapterHealth>;\n  stop(): Promise<void>;\n}\n\n/**\n * A protocol adapter served over HTTP.\n *\n * The gateway mounts `handleHttp` at `mountPath` using raw Node request and\n * response objects, so adapters stay independent of the HTTP framework.\n *\n * GUARANTEE — the request body is **unconsumed**.\n *\n * `req` is handed over with its stream unread: the gateway suppresses every\n * body parser on this mount, so an adapter whose SDK reads the body itself\n * (MCP's Streamable HTTP transport does) can do so. The adapter owns reading,\n * size-limiting beyond the gateway's own cap, and parsing.\n *\n * This is load-bearing and easy to break silently. Fastify pre-registers\n * exact-match parsers for `application/json` and `text/plain` and prefers them\n * over a `'*'` wildcard, so registering only a wildcard no-op leaves the\n * built-in JSON parser draining the body first — the adapter then reads an\n * empty stream and every request fails to parse. That exact regression shipped\n * once and no unit test caught it, because adapter conformance suites drive\n * `handleHttp` over a bare `node:http` server and never traverse the gateway.\n *\n * Any change to how adapters are mounted must be covered by a test that POSTs\n * a real JSON body through the real gateway and asserts the adapter received\n * it intact.\n */\nexport interface HttpProtocolAdapter extends ProtocolAdapter {\n  /** Path prefix the gateway mounts this adapter at, e.g. '/mcp'. */\n  readonly mountPath: string;\n  handleHttp(req: IncomingMessage, res: ServerResponse): Promise<void>;\n}\n\nexport function isHttpProtocolAdapter(adapter: ProtocolAdapter): adapter is HttpProtocolAdapter {\n  return typeof (adapter as HttpProtocolAdapter).handleHttp === 'function';\n}\n","/**\n * Injected runtime primitives.\n *\n * Everything non-deterministic (time, ids) is injected so tests can be exact.\n */\nimport type { IsoTimestamp } from '../domain/common.js';\n\nexport interface Clock {\n  now(): Date;\n  nowIso(): IsoTimestamp;\n  /** Milliseconds since an arbitrary origin; use for durations only. */\n  monotonicMs(): number;\n}\n\nexport interface IdGenerator {\n  /** Opaque, collision-resistant identifier. */\n  next(prefix?: string): string;\n}\n\nexport const systemClock: Clock = {\n  now: () => new Date(),\n  nowIso: () => new Date().toISOString(),\n  monotonicMs: () => performance.now(),\n};\n","/**\n * The package version, resolved once for the whole package.\n *\n * Two paths, deliberately:\n *\n * - **Development** reads the root manifest, so the number is always live.\n * - **The published bundle cannot.** tsup collapses `src/**` into\n * `dist/index.js` and `dist/cli/index.js`, so any `require('../../package.json')`\n * written against a source path resolves from the wrong depth once bundled —\n * which is exactly how this broke during the single-package refactor, and how\n * it earlier produced a CLI reporting `v0.0.0-unknown`. The build injects\n * `__OAC_PACKAGE_VERSION__` instead (see tsup.config.ts).\n *\n * `typeof` on an undeclared identifier is safe in JS, so the dev path is\n * unaffected by the constant not existing.\n */\nimport { createRequire } from 'node:module';\n\ndeclare const __OAC_PACKAGE_VERSION__: string | undefined;\n\nfunction readFromManifest(): string {\n  try {\n    const require = createRequire(import.meta.url);\n    // src/version.ts -> repository root\n    return (require('../package.json') as { version?: string }).version ?? '0.0.0-unknown';\n  } catch {\n    return '0.0.0-unknown';\n  }\n}\n\nexport const PACKAGE_VERSION: string =\n  typeof __OAC_PACKAGE_VERSION__ === 'string' ? __OAC_PACKAGE_VERSION__ : readFromManifest();\n"]}

package/dist/chunk-MEPETSP6.js

@@ -0,0 +1,255 @@
+import { CommerceError } from './chunk-BQNE3A5H.js';
+
+// src/payments/x402/networks.ts
+var PROFILES = [
+  {
+    id: "eip155:84532",
+    chainId: 84532,
+    displayName: "Base Sepolia",
+    kind: "testnet",
+    canonicalAsset: {
+      symbol: "USDC",
+      address: "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+      name: "USDC",
+      version: "2"
+    }
+  },
+  {
+    id: "eip155:8453",
+    chainId: 8453,
+    displayName: "Base",
+    kind: "mainnet",
+    canonicalAsset: {
+      symbol: "USDC",
+      address: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
+      name: "USD Coin",
+      version: "2"
+    }
+  }
+];
+var BY_ID = new Map(PROFILES.map((profile) => [profile.id, profile]));
+var SUPPORTED_NETWORK_IDS = PROFILES.map((p) => p.id);
+function requireNetworkProfile(id, path) {
+  const profile = BY_ID.get(id);
+  if (!profile) {
+    throw new CommerceError(
+      "CONFIG_INVALID",
+      `${path}: "${id}" is not a supported network. Supported CAIP-2 identifiers: ${SUPPORTED_NETWORK_IDS.join(", ")}`,
+      { details: { path, network: id } }
+    );
+  }
+  return profile;
+}
+function resolveDeploymentMode(profile, facilitatorMode) {
+  if (facilitatorMode === "local") return "local";
+  return profile.kind;
+}
+var LIVE_MAINNET_BANNER = "LIVE MAINNET MODE \u2014 REAL FUNDS";
+function describeDeploymentMode(mode) {
+  return mode === "mainnet" ? LIVE_MAINNET_BANNER : mode.toUpperCase();
+}
+
+// src/payments/x402/local-chain/accounts.ts
+var ANVIL_WELL_KNOWN_ACCOUNTS = [
+  {
+    address: "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266",
+    privateKey: "0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80"
+  },
+  {
+    address: "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+    privateKey: "0x59c6995e998f97a5a0044966f0945389dc9e86dae88c7a8412f4603b6b78690d"
+  },
+  {
+    address: "0x3C44CdDdB6a900fa2b585dd299e03d12FA4293BC",
+    privateKey: "0x5de4111afa1a4b94908f83103eb1f1706367c2e68ca870fc3fb9a804cdab365a"
+  }
+];
+
+// src/payments/x402/dev-key-guard.ts
+var WELL_KNOWN_DEV_KEYS = new Set(
+  ANVIL_WELL_KNOWN_ACCOUNTS.map((a) => a.privateKey.toLowerCase())
+);
+var WELL_KNOWN_DEV_ADDRESSES = new Set(
+  ANVIL_WELL_KNOWN_ACCOUNTS.map((a) => a.address.toLowerCase())
+);
+var PRIVATE_KEY_SHAPE = /^0x[0-9a-fA-F]{64}$/;
+function isWellKnownDevKey(privateKey) {
+  return WELL_KNOWN_DEV_KEYS.has(privateKey.toLowerCase());
+}
+function isWellKnownDevAddress(address) {
+  return WELL_KNOWN_DEV_ADDRESSES.has(address.toLowerCase());
+}
+function isLikelyLocalOrPrivateHost(hostname) {
+  const h = hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  if (h === "localhost" || h === "127.0.0.1" || h === "::1") return true;
+  if (/^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(h)) return true;
+  if (/^10\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(h)) return true;
+  if (/^192\.168\.\d{1,3}\.\d{1,3}$/.test(h)) return true;
+  if (/^172\.(1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3}$/.test(h)) return true;
+  if (!h.includes(".") && !h.includes(":")) return true;
+  return false;
+}
+function parseHostnameOrThrow(rpcUrl) {
+  try {
+    return new URL(rpcUrl).hostname;
+  } catch (cause) {
+    throw new CommerceError("CONFIG_INVALID", "x402 provider: rpcUrl is not a valid URL", {
+      cause
+    });
+  }
+}
+function describeRpc(rpcUrl) {
+  try {
+    return new URL(rpcUrl).origin;
+  } catch {
+    return "[unparseable rpcUrl]";
+  }
+}
+function assertDevKeyIsLocalOnly(rpcUrl, signerPrivateKey) {
+  if (!PRIVATE_KEY_SHAPE.test(signerPrivateKey)) {
+    throw new CommerceError(
+      "CONFIG_INVALID",
+      'x402 provider: facilitator.signerPrivateKey is not a well-formed private key (expected "0x" followed by exactly 64 hex characters).'
+    );
+  }
+  if (!isWellKnownDevKey(signerPrivateKey)) return;
+  const hostname = parseHostnameOrThrow(rpcUrl);
+  if (!isLikelyLocalOrPrivateHost(hostname)) {
+    throw new CommerceError(
+      "CONFIG_INVALID",
+      `x402 provider: facilitator.signerPrivateKey is a well-known Anvil development key, but rpcUrl ${describeRpc(rpcUrl)} does not look like a local/private chain. A public dev key must never sign against a public network \u2014 it is instantly drainable and can grief real settlements via nonce exhaustion. Use a real facilitator key for any non-local RPC, or point rpcUrl at your local/dev chain.`
+    );
+  }
+}
+function assertPayToIsNotDevAddress(rpcUrl, payTo) {
+  if (!isWellKnownDevAddress(payTo)) return;
+  const hostname = parseHostnameOrThrow(rpcUrl);
+  if (!isLikelyLocalOrPrivateHost(hostname)) {
+    throw new CommerceError(
+      "CONFIG_INVALID",
+      `x402 provider: "payTo" (${payTo}) is a well-known Anvil development address, but rpcUrl ${describeRpc(rpcUrl)} does not look like a local/private chain. The private key behind that address is public knowledge, so any revenue settled to it is immediately spendable by anyone. Set "payTo" to your own merchant wallet for any non-local RPC, or point rpcUrl at your local/dev chain.`
+    );
+  }
+}
+
+// src/payments/x402/guardrails.ts
+function invalid(message, path) {
+  return new CommerceError("CONFIG_INVALID", message, { details: { path } });
+}
+function resolveX402Deployment(input) {
+  const profile = requireNetworkProfile(input.network, "payments.x402.network");
+  const mode = resolveDeploymentMode(profile, input.facilitator.mode);
+  if (profile.kind === "mainnet" && input.facilitator.mode === "local") {
+    throw invalid(
+      `payments.x402: network "${profile.id}" (${profile.displayName}) is a mainnet and cannot be served by facilitator.mode "local". A mainnet deployment must settle through a remote facilitator.`,
+      "payments.x402.facilitator.mode"
+    );
+  }
+  if (mode === "mainnet" && input.allowMainnet !== true) {
+    throw invalid(
+      `payments.x402: network "${profile.id}" (${profile.displayName}) settles real funds. Set payments.x402.allowMainnet: true to acknowledge this explicitly \u2014 it is never the default.`,
+      "payments.x402.allowMainnet"
+    );
+  }
+  if (input.facilitator.mode === "remote") {
+    assertFacilitatorUrlIsSafe(input.facilitator.url, mode);
+    if (mode === "mainnet" && input.facilitator.auth.type === "none" && input.allowUnauthenticatedFacilitator !== true) {
+      throw invalid(
+        `payments.x402: facilitator ${describeOrigin(input.facilitator.url)} takes no credential, and this is a mainnet deployment. It will see every payment authorisation you handle, with no account, terms or support behind it. Set payments.x402.allowUnauthenticatedFacilitator: true to accept that, or configure facilitator.auth.`,
+        "payments.x402.allowUnauthenticatedFacilitator"
+      );
+    }
+    for (const [field, value] of credentialFields(input.facilitator.auth)) {
+      if (value.trim() === "") {
+        throw invalid(
+          `payments.x402: facilitator.auth.type is "${input.facilitator.auth.type}" but ${field} is empty. An empty credential is refused rather than sent.`,
+          `payments.x402.facilitator.auth.${field}`
+        );
+      }
+    }
+  }
+  if (/^0x0{40}$/i.test(input.payTo)) {
+    throw invalid(
+      'payments.x402: "payTo" is the zero address. Every payment settled there is destroyed.',
+      "payments.x402.payTo"
+    );
+  }
+  if (mode !== "local" && isWellKnownDevAddress(input.payTo)) {
+    throw invalid(
+      `payments.x402: "payTo" (${input.payTo}) is a well-known Anvil development address and this is a ${mode} deployment. Anyone can spend what settles there. Set payTo to your own merchant wallet.`,
+      "payments.x402.payTo"
+    );
+  }
+  const canonical = profile.canonicalAsset;
+  if (mode === "mainnet" && canonical) {
+    if (!sameAddress(input.asset, canonical.address)) {
+      throw invalid(
+        `payments.x402: asset ${input.asset} is not ${canonical.symbol} on ${profile.displayName} (expected ${canonical.address}). Settling a mainnet payment in an unintended token is refused.`,
+        "payments.x402.asset"
+      );
+    }
+    if (input.assetName !== void 0 && input.assetName !== canonical.name) {
+      throw invalid(
+        `payments.x402: assetName "${input.assetName}" is not the EIP-712 domain name ${canonical.symbol} reports on ${profile.displayName} (expected "${canonical.name}"). Every payment would be refused after the buyer signed.`,
+        "payments.x402.assetName"
+      );
+    }
+    if (input.assetVersion !== void 0 && input.assetVersion !== canonical.version) {
+      throw invalid(
+        `payments.x402: assetVersion "${input.assetVersion}" is not the EIP-712 domain version ${canonical.symbol} reports on ${profile.displayName} (expected "${canonical.version}").`,
+        "payments.x402.assetVersion"
+      );
+    }
+  }
+  return { profile, mode };
+}
+function assertFacilitatorUrlIsSafe(url, mode) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch (cause) {
+    throw new CommerceError("CONFIG_INVALID", `payments.x402: facilitator.url is not a valid URL`, {
+      cause,
+      details: { path: "payments.x402.facilitator.url" }
+    });
+  }
+  if (parsed.protocol === "https:") return;
+  if (parsed.protocol !== "http:") {
+    throw invalid(
+      `payments.x402: facilitator ${describeOrigin(url)} must be reached over https (or http on a local/private host); got "${parsed.protocol}//"`,
+      "payments.x402.facilitator.url"
+    );
+  }
+  if (mode !== "mainnet" && isLikelyLocalOrPrivateHost(parsed.hostname)) return;
+  throw invalid(
+    `payments.x402: facilitator ${describeOrigin(url)} is reached over plain HTTP. Payment authorisations and settlement results would travel unencrypted. Use https, or point at a local/private host on a non-mainnet deployment.`,
+    "payments.x402.facilitator.url"
+  );
+}
+function describeOrigin(url) {
+  try {
+    return new URL(url).origin;
+  } catch {
+    return "[unparseable facilitator.url]";
+  }
+}
+function credentialFields(auth) {
+  switch (auth.type) {
+    case "bearer":
+      return [["token", auth.token]];
+    case "cdp":
+      return [
+        ["apiKeyId", auth.apiKeyId],
+        ["apiKeySecret", auth.apiKeySecret]
+      ];
+    default:
+      return [];
+  }
+}
+function sameAddress(a, b) {
+  return a.toLowerCase() === b.toLowerCase();
+}
+
+export { SUPPORTED_NETWORK_IDS, assertDevKeyIsLocalOnly, assertPayToIsNotDevAddress, describeDeploymentMode, requireNetworkProfile, resolveDeploymentMode, resolveX402Deployment };
+//# sourceMappingURL=chunk-MEPETSP6.js.map
+//# sourceMappingURL=chunk-MEPETSP6.js.map