@devlab.group/agent-commerce 1.6.1 → 2.1.0

package/dist/{constants-Bkq04FRZ.d.ts → constants-nackLItD.d.ts}

@@ -7,6 +7,7 @@
  *
  * Importing this metadata does not load `mppx`.
  */
+
 /** Upstream specification repository the pinned drafts were read from */
 declare const MPP_SPEC_REPOSITORY = "https://github.com/tempoxyz/mpp-specs";
 /**
@@ -18,12 +19,12 @@ declare const MPP_SPEC_REPOSITORY = "https://github.com/tempoxyz/mpp-specs";
 declare const MPP_SPEC_COMMIT = "806fdb8b8c92cda5c84b8660558921b6bbeef7e0";
 /** The core HTTP authentication draft, the `charge` intent, and its EVM method */
 declare const MPP_SPEC_DRAFTS: {
-    readonly core: "draft-httpauth-payment-00";
+    readonly core: "draft-httpauth-payment-01";
     readonly intent: "draft-payment-intent-charge-00";
     readonly method: "draft-evm-charge-00";
 };
 /** Exact `mppx` release the rail is pinned to */
-declare const MPPX_VERSION = "0.10.1";
+declare const MPPX_VERSION = "0.13.1";
 /**
  * The pinned profile.
  *
@@ -40,7 +41,7 @@ declare const MPP_PROFILE: {
     readonly assetDecimals: 6;
 };
 /** Supported CAIP-2 networks; gateway config applies the x402 mainnet guardrails */
-declare const MPP_NETWORKS: readonly ["eip155:84532", "eip155:8453"];
+declare const MPP_NETWORKS: readonly ["eip155:31337", "eip155:84532", "eip155:8453"];
 type MppNetwork = (typeof MPP_NETWORKS)[number];
 /** Compact descriptor value naming the core draft, intent and method */
 declare const MPP_SUPPORTED_SPEC: string;

package/dist/{guardrails-71XwtXlT.d.ts → guardrails-CX_jYXvZ.d.ts}

@@ -1,3 +1,11 @@
+/**
+ * x402 exact-scheme flows, shared by the config loader and CLI.
+ * The default `authorization` flow settles after a successful backend call;
+ * `upfront` settles first.
+ */
+declare const X402_PAYMENT_FLOWS: readonly ["authorization", "upfront"];
+type X402PaymentFlow = (typeof X402_PAYMENT_FLOWS)[number];
+
 /**
  * How the gateway authenticates to a remote facilitator.
  *
@@ -28,4 +36,4 @@ type X402FacilitatorConfig = {
     readonly auth: FacilitatorAuth;
 };
 
-export type { FacilitatorAuth as F, X402FacilitatorConfig as X };
+export type { FacilitatorAuth as F, X402PaymentFlow as X, X402FacilitatorConfig as a };

package/dist/index.d.ts

@@ -1,12 +1,13 @@
-import { f as Ap2AuthorizationConfig } from './types-O6lg3Q5V.js';
-import { I as IsoTimestamp, D as DecimalAmount, P as PaymentMethodName, a as CommerceResource, b as PaymentSubmission, B as BackendHandler, A as AdapterDescriptor, c as AdapterHealth, R as ResourceRegistry, d as PaymentProvider, L as Logger, C as Clock, e as IdGenerator } from './runtime-CiYbgGpi.js';
-export { f as AuthorizationMethodName, g as BackendMethod, h as DEFAULT_BACKEND_TIMEOUT_MS, J as JsonSchema, N as NOOP_LOGGER, i as PAYMENT_METHOD_NAMES, j as PROTOCOL_NAMES, k as PaymentChallenge, l as PaymentContext, m as PaymentRequirement, n as PaymentResult, o as PaymentSettlementContext, p as PaymentVerificationContext, q as Pricing, r as ProtocolName, s as systemClock } from './runtime-CiYbgGpi.js';
-import { M as MppNetwork } from './constants-Bkq04FRZ.js';
-import { X as X402FacilitatorConfig } from './guardrails-71XwtXlT.js';
-import { a as AuthorizationRequirement, b as AuthorizationSubmission, A as AuthorizationProvider } from './authorization-BpbWGGrf.js';
-export { c as AuthorizationFinalizeContext, d as AuthorizationRecord, e as AuthorizationVerification, f as AuthorizationVerificationContext } from './authorization-BpbWGGrf.js';
-import { D as DeliveredOutcome, P as PaymentRequiredOutcome, C as CommerceEvent, a as PaymentAttempt, b as CommerceReceipt, E as ExecutionPipeline, c as ProtocolAdapter, H as HttpProtocolAdapter, A as AdapterHttpRoute, d as ProtocolAdapterContext } from './protocol-adapter-DTkrXTev.js';
-export { e as COMMERCE_EVENT_TYPES, f as CanonicalRequest, g as CommerceEventType, h as EventSink, i as ExecutionOutcome, j as isHttpProtocolAdapter } from './protocol-adapter-DTkrXTev.js';
+import { f as Ap2AuthorizationConfig } from './types-CVw6Sf46.js';
+import { I as IsoTimestamp, D as DecimalAmount, P as PaymentMethodName, a as CommerceResource, b as PaymentSubmission, B as BackendHandler, A as AdapterDescriptor, c as AdapterHealth, R as ResourceRegistry, d as PaymentProvider, L as Logger, C as Clock, e as IdGenerator } from './runtime-7vLNYvmU.js';
+export { f as AdapterHealthComponent, g as AuthorizationMethodName, h as BackendMethod, i as DEFAULT_BACKEND_TIMEOUT_MS, J as JsonSchema, N as NOOP_LOGGER, j as PAYMENT_METHOD_NAMES, k as PROTOCOL_NAMES, l as PaymentChallenge, m as PaymentContext, n as PaymentRequirement, o as PaymentResult, p as PaymentSettlementContext, q as PaymentVerificationContext, r as Pricing, s as ProtocolName, t as systemClock } from './runtime-7vLNYvmU.js';
+import { M as MppNetwork } from './constants-nackLItD.js';
+import { X as X402PaymentFlow, a as X402FacilitatorConfig } from './guardrails-CX_jYXvZ.js';
+import { C as CustomNetworks } from './networks-olfflCI_.js';
+import { a as AuthorizationRequirement, b as AuthorizationSubmission, A as AuthorizationProvider } from './authorization-CMkIuAkO.js';
+export { c as AuthorizationFinalizeContext, d as AuthorizationRecord, e as AuthorizationVerification, f as AuthorizationVerificationContext } from './authorization-CMkIuAkO.js';
+import { D as DeliveredOutcome, P as PaymentRequiredOutcome, C as CommerceEvent, a as PaymentAttempt, b as CommerceReceipt, E as ExecutionPipeline, c as ProtocolAdapter, H as HttpProtocolAdapter, A as AdapterHttpRoute, d as ProtocolAdapterContext } from './protocol-adapter-CfxU8Z2T.js';
+export { e as COMMERCE_EVENT_TYPES, f as CanonicalRequest, g as CommerceEventType, h as EventSink, i as ExecutionOutcome, j as isHttpProtocolAdapter } from './protocol-adapter-CfxU8Z2T.js';
 import { FastifyInstance } from 'fastify';
 import { IncomingMessage, ServerResponse } from 'node:http';
 
@@ -152,8 +153,14 @@ interface PaymentRequiredEnvelope {
         readonly version: string;
         readonly amount: DecimalAmount;
         readonly currency: string;
-        readonly destination: string;
+        /**
+         * @deprecated Read each offer's `payTo` in `accepts`. Absent when the
+         * challenge offers several destinations.
+         */
+        readonly destination?: string;
+        /** @deprecated Read each offer's `network` in `accepts` */
         readonly network?: string;
+        /** @deprecated Read each offer's `asset` in `accepts` */
         readonly asset?: string;
         readonly expiresAt?: IsoTimestamp;
         /** Provider-native requirement objects, passed through verbatim */
@@ -265,6 +272,12 @@ interface BackendRequest {
      * when absent, the executor adds none.
      */
     readonly idempotencyKey?: string;
+    /**
+     * Adapter-supplied headers for the backend. Configured and executor-set
+     * headers take precedence. The HTTP executor filters sensitive and transport
+     * headers and rejects invalid names or values with `INPUT_INVALID`.
+     */
+    readonly backendHeaders?: Readonly<Record<string, string>>;
 }
 interface BackendResponse {
     readonly status: number;
@@ -299,6 +312,12 @@ interface PaymentAttemptReservation {
     readonly currency: string;
     readonly payer?: string;
     readonly payee?: string;
+    /**
+     * Reclaim this `replayKey` if the same `provider` rejected it, which
+     * settled nothing. Set only for rails whose authorizations remain reusable
+     * until settled.
+     */
+    readonly reclaimRejected?: boolean;
 }
 interface PaymentAttemptUpdate {
     readonly replayKey: string;
@@ -315,9 +334,14 @@ interface ReceiptStore {
     /** Append a canonical event. Must not throw into the caller's flow */
     appendEvent(event: CommerceEvent): Promise<void>;
     /**
-     * Atomically claim a payment authorization before settlement: the gateway's
-     * replay defense, run for every paid request. Throws
-     * `CommerceError('PAYMENT_REPLAYED')` if `replayKey` was already reserved.
+     * Atomically reserve a payment authorization before settlement. If its
+     * `replayKey` is already reserved, throws `CommerceError('PAYMENT_REPLAYED')`
+     * with the existing attempt's `PaymentAttempt.status` in
+     * `details.attemptStatus` when available.
+     *
+     * With `reclaimRejected`, replace the same provider's `rejected` attempt,
+     * which settled nothing. Only one concurrent claim can replace it with the
+     * new reservation.
      */
     reservePaymentAttempt(reservation: PaymentAttemptReservation): Promise<PaymentAttempt>;
     updatePaymentAttempt(update: PaymentAttemptUpdate): Promise<void>;
@@ -374,25 +398,6 @@ declare const ACP_WELL_KNOWN_PATH = "/.well-known/acp.json";
 declare const ACP_CHECKOUT_OPERATIONS: readonly ["createCheckoutSession", "updateCheckoutSession", "getCheckoutSession", "completeCheckoutSession", "cancelCheckoutSession"];
 type AcpCheckoutOperation = (typeof ACP_CHECKOUT_OPERATIONS)[number];
 
-/**
- * `config.yaml` schema, validation and normalization into the canonical
- * `GatewayConfig` (docs/contracts.md).
- *
- * 1. Zod validates shape: types, required fields, unknown keys. Numeric and
- *    boolean leaves accept their native type or a string, because env
- *    substitution produces strings. Zod transforms interact badly with
- *    `.strict()` inference, so coercion happens in plain TypeScript in step 2.
- * 2. A business-rule pass coerces those leaves and checks what needs a
- *    specific message: cross-references, disabled protocols and payment
- *    methods, dynamic pricing, addresses, duplicate trust entries.
- *
- * Env substitution (`${VAR}` / `${VAR:-default}`) runs over the raw value
- * before both steps, so numeric and boolean fields can be templated. The one
- * exception is `version:`, checked before substitution: it decides whether this
- * parser understands the document at all, so it cannot depend on the
- * environment.
- */
-
 /** Optional ACP discovery metadata. Absent fields are omitted from the document */
 interface AcpDiscoveryConfig {
     readonly documentationUrl?: string;
@@ -417,12 +422,27 @@ type AcpProtocolConfig = {
     readonly idempotency: {
         readonly path: string;
         readonly retentionHours: number;
+        readonly merchantIdempotent: boolean;
     };
     readonly checkout: {
         readonly operations: Readonly<Record<AcpCheckoutOperation, string>>;
     };
     readonly discovery?: AcpDiscoveryConfig;
 };
+/** One resolved x402 option: where a payment settles and in which token */
+interface X402OptionConfig {
+    readonly network: string;
+    /** This network's RPC: `payments.x402.networks.<id>.rpcUrl`, else `payments.x402.rpcUrl` */
+    readonly rpcUrl: string;
+    readonly asset: string;
+    /** EIP-712 domain of the token; always present for EIP-3009 */
+    readonly assetName?: string;
+    readonly assetVersion?: string;
+    readonly assetDecimals: number;
+    readonly payTo: string;
+    /** Absent for EIP-3009, the default */
+    readonly assetTransferMethod?: 'permit2';
+}
 interface GatewayConfig {
     readonly version: 1;
     readonly merchant: {
@@ -464,14 +484,33 @@ interface GatewayConfig {
             readonly network: string;
             readonly rpcUrl: string;
             readonly asset: string;
-            readonly assetName: string;
-            readonly assetVersion: string;
+            /** Always present for EIP-3009; a Permit2 option may have none */
+            readonly assetName?: string;
+            readonly assetVersion?: string;
             readonly assetDecimals: number;
             readonly payTo: string;
+            /** Absent for EIP-3009, the default */
+            readonly assetTransferMethod?: 'permit2';
             readonly maxTimeoutSeconds: number;
+            /** Defaults to `authorization`, the x402 default */
+            readonly paymentFlow?: X402PaymentFlow;
+            /** Resources whose `paymentFlow` overrides the rail's, by resource id */
+            readonly resourcePaymentFlows?: Readonly<Record<string, X402PaymentFlow>>;
             readonly facilitator: X402FacilitatorConfig;
             readonly allowMainnet?: boolean;
             readonly allowUnauthenticatedFacilitator?: boolean;
+            /** EVM networks declared beside the built-in ones, by CAIP-2 id */
+            readonly networks?: CustomNetworks;
+            /**
+             * Resolved options in challenge order; fields above mirror the first.
+             * Omit for manually built single-option configs that skip `parseConfig`
+             */
+            readonly options?: readonly X402OptionConfig[];
+            /**
+             * Resource `x402.accepts` overrides by id, replacing `options`.
+             * Absent when no resource overrides its offers.
+             */
+            readonly resourceOptions?: Readonly<Record<string, readonly X402OptionConfig[]>>;
         };
         readonly mpp?: {
             readonly enabled: boolean;
@@ -484,6 +523,10 @@ interface GatewayConfig {
             readonly realm: string;
             readonly challengeSecret: string;
             readonly challengeTtlSeconds?: number;
+            /** Defaults to `upfront`: settle before the backend call */
+            readonly paymentFlow?: X402PaymentFlow;
+            /** Resources whose `paymentFlow` overrides the rail's, by resource id */
+            readonly resourcePaymentFlows?: Readonly<Record<string, X402PaymentFlow>>;
             readonly facilitator: X402FacilitatorConfig;
             readonly allowMainnet?: boolean;
             readonly allowUnauthenticatedFacilitator?: boolean;
@@ -494,6 +537,7 @@ interface GatewayConfig {
         readonly ap2: Ap2AuthorizationConfig;
     };
 }
+
 declare function parseConfig(raw: unknown, env: NodeJS.ProcessEnv): GatewayConfig;
 
 interface LoadConfigOptions {
@@ -528,18 +572,6 @@ interface GatewayInstance {
 }
 declare function createGateway(options: GatewayOptions): Promise<GatewayInstance>;
 
-/**
- * A2A (Agent2Agent) protocol adapter, experimental.
- *
- * Serves two paths: the configured mount (`/a2a`), where the JSON-RPC endpoint
- * lives, and the specification-fixed `/.well-known/agent-card.json`, declared
- * through `additionalHttpRoutes` so the gateway needs no A2A-specific routing.
- *
- * Only the synchronous `SendMessage` path is in scope; every other A2A method
- * is listed in `descriptor.unsupported` rather than half-served. This file
- * never calls a merchant backend and never inspects a payment object.
- */
-
 interface A2aAdapterOptions {
     readonly mountPath?: string;
     /** Agent name published on the card */
@@ -560,6 +592,9 @@ declare class A2aProtocolAdapter implements HttpProtocolAdapter {
     private started;
     private skillsById;
     private card;
+    private cardBody;
+    private cardEtag;
+    private pendingPayments;
     constructor(options?: A2aAdapterOptions);
     start(context: ProtocolAdapterContext): Promise<void>;
     /** `GET /.well-known/agent-card.json` */
@@ -569,7 +604,6 @@ declare class A2aProtocolAdapter implements HttpProtocolAdapter {
     private dispatch;
     private execute;
     private taskIdentity;
-    private taskResult;
     health(): Promise<AdapterHealth>;
     stop(): Promise<void>;
     private writeJson;
@@ -580,12 +614,12 @@ declare function createA2aAdapter(options?: A2aAdapterOptions): A2aProtocolAdapt
  * A2A pins, kept in one place so nothing infers one version from another.
  *
  * The specification revision and the negotiation version look alike but
- * differ: `1.0.0` names the document this adapter was written against, `1.0`
+ * differ: `1.0.1` names the document this adapter was written against, `1.0`
  * is what a client negotiates on the wire. Neither is this package's version
  * (`PACKAGE_VERSION`).
  */
 /** A2A specification revision this adapter targets */
-declare const A2A_SPEC_VERSION = "1.0.0";
+declare const A2A_SPEC_VERSION = "1.0.1";
 /** Protocol negotiation version carried on the wire */
 declare const A2A_PROTOCOL_VERSION = "1.0";
 /**
@@ -626,6 +660,11 @@ interface AcpAdapterOptions {
     readonly idempotency: {
         readonly path: string;
         readonly retentionHours: number;
+        /**
+         * Declare that the merchant deduplicates by the derived `Idempotency-Key`.
+         * Allows a fresh retry after a 5xx. Defaults to false.
+         */
+        readonly merchantIdempotent?: boolean;
     };
     readonly discovery?: AcpDiscoveryMetadata;
 }