@devlab.group/agent-commerce 2.0.0 → 2.1.0

package/dist/{constants-BSBRlKRR.d.ts → constants-nackLItD.d.ts}

@@ -7,6 +7,7 @@
  *
  * Importing this metadata does not load `mppx`.
  */
+
 /** Upstream specification repository the pinned drafts were read from */
 declare const MPP_SPEC_REPOSITORY = "https://github.com/tempoxyz/mpp-specs";
 /**
@@ -40,7 +41,7 @@ declare const MPP_PROFILE: {
     readonly assetDecimals: 6;
 };
 /** Supported CAIP-2 networks; gateway config applies the x402 mainnet guardrails */
-declare const MPP_NETWORKS: readonly ["eip155:84532", "eip155:8453"];
+declare const MPP_NETWORKS: readonly ["eip155:31337", "eip155:84532", "eip155:8453"];
 type MppNetwork = (typeof MPP_NETWORKS)[number];
 /** Compact descriptor value naming the core draft, intent and method */
 declare const MPP_SUPPORTED_SPEC: string;

package/dist/index.d.ts

@@ -1,12 +1,13 @@
 import { f as Ap2AuthorizationConfig } from './types-CVw6Sf46.js';
-import { I as IsoTimestamp, D as DecimalAmount, P as PaymentMethodName, a as CommerceResource, b as PaymentSubmission, B as BackendHandler, A as AdapterDescriptor, c as AdapterHealth, R as ResourceRegistry, d as PaymentProvider, L as Logger, C as Clock, e as IdGenerator } from './runtime-CiYbgGpi.js';
-export { f as AuthorizationMethodName, g as BackendMethod, h as DEFAULT_BACKEND_TIMEOUT_MS, J as JsonSchema, N as NOOP_LOGGER, i as PAYMENT_METHOD_NAMES, j as PROTOCOL_NAMES, k as PaymentChallenge, l as PaymentContext, m as PaymentRequirement, n as PaymentResult, o as PaymentSettlementContext, p as PaymentVerificationContext, q as Pricing, r as ProtocolName, s as systemClock } from './runtime-CiYbgGpi.js';
-import { M as MppNetwork } from './constants-BSBRlKRR.js';
-import { X as X402PaymentFlow, a as X402FacilitatorConfig } from './payment-flow-DCS882tR.js';
-import { a as AuthorizationRequirement, b as AuthorizationSubmission, A as AuthorizationProvider } from './authorization-BpbWGGrf.js';
-export { c as AuthorizationFinalizeContext, d as AuthorizationRecord, e as AuthorizationVerification, f as AuthorizationVerificationContext } from './authorization-BpbWGGrf.js';
-import { D as DeliveredOutcome, P as PaymentRequiredOutcome, C as CommerceEvent, a as PaymentAttempt, b as CommerceReceipt, E as ExecutionPipeline, c as ProtocolAdapter, H as HttpProtocolAdapter, A as AdapterHttpRoute, d as ProtocolAdapterContext } from './protocol-adapter-DonxfAwa.js';
-export { e as COMMERCE_EVENT_TYPES, f as CanonicalRequest, g as CommerceEventType, h as EventSink, i as ExecutionOutcome, j as isHttpProtocolAdapter } from './protocol-adapter-DonxfAwa.js';
+import { I as IsoTimestamp, D as DecimalAmount, P as PaymentMethodName, a as CommerceResource, b as PaymentSubmission, B as BackendHandler, A as AdapterDescriptor, c as AdapterHealth, R as ResourceRegistry, d as PaymentProvider, L as Logger, C as Clock, e as IdGenerator } from './runtime-7vLNYvmU.js';
+export { f as AdapterHealthComponent, g as AuthorizationMethodName, h as BackendMethod, i as DEFAULT_BACKEND_TIMEOUT_MS, J as JsonSchema, N as NOOP_LOGGER, j as PAYMENT_METHOD_NAMES, k as PROTOCOL_NAMES, l as PaymentChallenge, m as PaymentContext, n as PaymentRequirement, o as PaymentResult, p as PaymentSettlementContext, q as PaymentVerificationContext, r as Pricing, s as ProtocolName, t as systemClock } from './runtime-7vLNYvmU.js';
+import { M as MppNetwork } from './constants-nackLItD.js';
+import { X as X402PaymentFlow, a as X402FacilitatorConfig } from './guardrails-CX_jYXvZ.js';
+import { C as CustomNetworks } from './networks-olfflCI_.js';
+import { a as AuthorizationRequirement, b as AuthorizationSubmission, A as AuthorizationProvider } from './authorization-CMkIuAkO.js';
+export { c as AuthorizationFinalizeContext, d as AuthorizationRecord, e as AuthorizationVerification, f as AuthorizationVerificationContext } from './authorization-CMkIuAkO.js';
+import { D as DeliveredOutcome, P as PaymentRequiredOutcome, C as CommerceEvent, a as PaymentAttempt, b as CommerceReceipt, E as ExecutionPipeline, c as ProtocolAdapter, H as HttpProtocolAdapter, A as AdapterHttpRoute, d as ProtocolAdapterContext } from './protocol-adapter-CfxU8Z2T.js';
+export { e as COMMERCE_EVENT_TYPES, f as CanonicalRequest, g as CommerceEventType, h as EventSink, i as ExecutionOutcome, j as isHttpProtocolAdapter } from './protocol-adapter-CfxU8Z2T.js';
 import { FastifyInstance } from 'fastify';
 import { IncomingMessage, ServerResponse } from 'node:http';
 
@@ -152,8 +153,14 @@ interface PaymentRequiredEnvelope {
         readonly version: string;
         readonly amount: DecimalAmount;
         readonly currency: string;
-        readonly destination: string;
+        /**
+         * @deprecated Read each offer's `payTo` in `accepts`. Absent when the
+         * challenge offers several destinations.
+         */
+        readonly destination?: string;
+        /** @deprecated Read each offer's `network` in `accepts` */
         readonly network?: string;
+        /** @deprecated Read each offer's `asset` in `accepts` */
         readonly asset?: string;
         readonly expiresAt?: IsoTimestamp;
         /** Provider-native requirement objects, passed through verbatim */
@@ -305,6 +312,12 @@ interface PaymentAttemptReservation {
     readonly currency: string;
     readonly payer?: string;
     readonly payee?: string;
+    /**
+     * Reclaim this `replayKey` if the same `provider` rejected it, which
+     * settled nothing. Set only for rails whose authorizations remain reusable
+     * until settled.
+     */
+    readonly reclaimRejected?: boolean;
 }
 interface PaymentAttemptUpdate {
     readonly replayKey: string;
@@ -325,6 +338,10 @@ interface ReceiptStore {
      * `replayKey` is already reserved, throws `CommerceError('PAYMENT_REPLAYED')`
      * with the existing attempt's `PaymentAttempt.status` in
      * `details.attemptStatus` when available.
+     *
+     * With `reclaimRejected`, replace the same provider's `rejected` attempt,
+     * which settled nothing. Only one concurrent claim can replace it with the
+     * new reservation.
      */
     reservePaymentAttempt(reservation: PaymentAttemptReservation): Promise<PaymentAttempt>;
     updatePaymentAttempt(update: PaymentAttemptUpdate): Promise<void>;
@@ -381,25 +398,6 @@ declare const ACP_WELL_KNOWN_PATH = "/.well-known/acp.json";
 declare const ACP_CHECKOUT_OPERATIONS: readonly ["createCheckoutSession", "updateCheckoutSession", "getCheckoutSession", "completeCheckoutSession", "cancelCheckoutSession"];
 type AcpCheckoutOperation = (typeof ACP_CHECKOUT_OPERATIONS)[number];
 
-/**
- * `config.yaml` schema, validation and normalization into the canonical
- * `GatewayConfig` (docs/contracts.md).
- *
- * 1. Zod validates shape: types, required fields, unknown keys. Numeric and
- *    boolean leaves accept their native type or a string, because env
- *    substitution produces strings. Zod transforms interact badly with
- *    `.strict()` inference, so coercion happens in plain TypeScript in step 2.
- * 2. A business-rule pass coerces those leaves and checks what needs a
- *    specific message: cross-references, disabled protocols and payment
- *    methods, dynamic pricing, addresses, duplicate trust entries.
- *
- * Env substitution (`${VAR}` / `${VAR:-default}`) runs over the raw value
- * before both steps, so numeric and boolean fields can be templated. The one
- * exception is `version:`, checked before substitution: it decides whether this
- * parser understands the document at all, so it cannot depend on the
- * environment.
- */
-
 /** Optional ACP discovery metadata. Absent fields are omitted from the document */
 interface AcpDiscoveryConfig {
     readonly documentationUrl?: string;
@@ -431,6 +429,20 @@ type AcpProtocolConfig = {
     };
     readonly discovery?: AcpDiscoveryConfig;
 };
+/** One resolved x402 option: where a payment settles and in which token */
+interface X402OptionConfig {
+    readonly network: string;
+    /** This network's RPC: `payments.x402.networks.<id>.rpcUrl`, else `payments.x402.rpcUrl` */
+    readonly rpcUrl: string;
+    readonly asset: string;
+    /** EIP-712 domain of the token; always present for EIP-3009 */
+    readonly assetName?: string;
+    readonly assetVersion?: string;
+    readonly assetDecimals: number;
+    readonly payTo: string;
+    /** Absent for EIP-3009, the default */
+    readonly assetTransferMethod?: 'permit2';
+}
 interface GatewayConfig {
     readonly version: 1;
     readonly merchant: {
@@ -472,10 +484,13 @@ interface GatewayConfig {
             readonly network: string;
             readonly rpcUrl: string;
             readonly asset: string;
-            readonly assetName: string;
-            readonly assetVersion: string;
+            /** Always present for EIP-3009; a Permit2 option may have none */
+            readonly assetName?: string;
+            readonly assetVersion?: string;
             readonly assetDecimals: number;
             readonly payTo: string;
+            /** Absent for EIP-3009, the default */
+            readonly assetTransferMethod?: 'permit2';
             readonly maxTimeoutSeconds: number;
             /** Defaults to `authorization`, the x402 default */
             readonly paymentFlow?: X402PaymentFlow;
@@ -484,6 +499,18 @@ interface GatewayConfig {
             readonly facilitator: X402FacilitatorConfig;
             readonly allowMainnet?: boolean;
             readonly allowUnauthenticatedFacilitator?: boolean;
+            /** EVM networks declared beside the built-in ones, by CAIP-2 id */
+            readonly networks?: CustomNetworks;
+            /**
+             * Resolved options in challenge order; fields above mirror the first.
+             * Omit for manually built single-option configs that skip `parseConfig`
+             */
+            readonly options?: readonly X402OptionConfig[];
+            /**
+             * Resource `x402.accepts` overrides by id, replacing `options`.
+             * Absent when no resource overrides its offers.
+             */
+            readonly resourceOptions?: Readonly<Record<string, readonly X402OptionConfig[]>>;
         };
         readonly mpp?: {
             readonly enabled: boolean;
@@ -496,7 +523,7 @@ interface GatewayConfig {
             readonly realm: string;
             readonly challengeSecret: string;
             readonly challengeTtlSeconds?: number;
-            /** Defaults to `authorization`: settle after a successful backend call */
+            /** Defaults to `upfront`: settle before the backend call */
             readonly paymentFlow?: X402PaymentFlow;
             /** Resources whose `paymentFlow` overrides the rail's, by resource id */
             readonly resourcePaymentFlows?: Readonly<Record<string, X402PaymentFlow>>;
@@ -510,6 +537,7 @@ interface GatewayConfig {
         readonly ap2: Ap2AuthorizationConfig;
     };
 }
+
 declare function parseConfig(raw: unknown, env: NodeJS.ProcessEnv): GatewayConfig;
 
 interface LoadConfigOptions {
@@ -575,16 +603,7 @@ declare class A2aProtocolAdapter implements HttpProtocolAdapter {
     handleHttp(req: IncomingMessage, res: ServerResponse): Promise<void>;
     private dispatch;
     private execute;
-    /**
-     * A message on a task waiting for an x402 extension payment, recognized by
-     * its `taskId` whether or not the header activated the extension again. Any
-     * other task id falls through to `parseInvocation`, which answers
-     * TaskNotFoundError.
-     */
-    private resumePayment;
-    private payPending;
     private taskIdentity;
-    private taskResult;
     health(): Promise<AdapterHealth>;
     stop(): Promise<void>;
     private writeJson;