@devlab.group/agent-commerce 2.2.1 → 2.4.0

package/dist/cli/index.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
-import { createSqliteReceiptStore, A2A_SPEC_VERSION, A2A_PROTOCOL_VERSION, A2A_PROTOCOL_BINDING, A2A_AGENT_CARD_PATH, A2A_UNSUPPORTED, ACP_UNSUPPORTED } from './chunk-SNM3OVCY.js';
-import { DEFAULT_CONFIG_FILENAME, extractPathParameterNames, ACP_SPEC_VERSION, ACP_API_VERSION, ACP_WELL_KNOWN_PATH, findUnparsedBraceToken } from './chunk-2LN5PO5I.js';
+import { createSqliteReceiptStore, A2A_SPEC_VERSION, A2A_PROTOCOL_VERSION, A2A_PROTOCOL_BINDING, A2A_AGENT_CARD_PATH, A2A_UNSUPPORTED, ACP_UNSUPPORTED } from './chunk-DCMW67JM.js';
+import { DEFAULT_CONFIG_FILENAME, extractPathParameterNames, ACP_SPEC_VERSION, ACP_API_VERSION, ACP_WELL_KNOWN_PATH, findUnparsedBraceToken } from './chunk-PIMFPCNZ.js';
 import { MPP_PROFILE, MPP_SPEC_DRAFTS, MPPX_VERSION, MPP_SPEC_COMMIT, MPP_DEFAULT_PAYMENT_FLOW } from './chunk-AA3FIEAR.js';
 import { ANVIL_WELL_KNOWN_ACCOUNTS, describeDeploymentMode, X402_DEFAULT_PAYMENT_FLOW, findX402Network, isEvmAddress, LOCAL_CHAIN_ID, resolveDeploymentMode, sameAddress } from './chunk-OZ4LAWBK.js';
 import { AP2_UNSUPPORTED } from './chunk-3EQBCFZY.js';
 import './chunk-3MGAJ5FX.js';
 import { AP2_SPEC_VERSION, AP2_CHECKOUT_MANDATE_VCT, AP2_CHECKOUT_PROFILE } from './chunk-FHCFR2GS.js';
 import { MCP_TOOL_NAME_MAX_LENGTH, MCP_TOOL_NAME_CHARS } from './chunk-TPC4EJLT.js';
-import { PACKAGE_VERSION } from './chunk-QY3K6PEQ.js';
+import { PACKAGE_VERSION } from './chunk-UXB65XCS.js';
 import { PROTOCOL_NAMES, isCommerceError, CommerceError } from './chunk-QQ3WY5L3.js';
 import { isRecord } from './chunk-3M6U7ILB.js';
 import { CommanderError, Command } from 'commander';
@@ -78,7 +78,7 @@ async function execCommand(command, args) {
 // src/cli/lib/config-client.ts
 async function importConfig() {
   try {
-    return await import('./config-VYAJGZXE.js');
+    return await import('./config-UI4EDG4L.js');
   } catch (err) {
     throw new CommerceError(
       "INTERNAL_ERROR",
@@ -219,7 +219,7 @@ var package_default = {
     "ajv-formats": "3.0.1",
     "better-sqlite3": "13.0.3",
     commander: "15.0.0",
-    fastify: "5.12.5",
+    fastify: "5.12.7",
     picocolors: "1.1.1",
     pino: "10.3.1",
     yaml: "2.9.0",
@@ -337,12 +337,19 @@ async function storageChecks(config, createStore) {
       } catch {
         undeliveredCount = void 0;
       }
+      let uncertainCount;
+      try {
+        uncertainCount = await store.countUncertainPaymentAttempts();
+      } catch {
+        uncertainCount = void 0;
+      }
       const status = storeHealth.status === "pass" ? "PASS" : storeHealth.status === "warn" ? "WARN" : "FAIL";
       const receiptsSuffix = receiptCount !== void 0 ? `; receipts=${receiptCount}${undeliveredCount !== void 0 && undeliveredCount > 0 ? ` (${undeliveredCount} undelivered)` : ""}` : "";
+      const uncertainSuffix = uncertainCount !== void 0 && uncertainCount > 0 ? `; ${uncertainCount} payment(s) with unknown settlement outcome, see GET /api/payment-attempts?uncertain=true` : "";
       checks.push({
         name: "Storage",
         status,
-        detail: `${storeHealth.detail ?? "sqlite"}${receiptsSuffix}`
+        detail: `${storeHealth.detail ?? "sqlite"}${receiptsSuffix}${uncertainSuffix}`
       });
     } catch (err) {
       checks.push({
@@ -508,9 +515,9 @@ var HEADER = `# Generated by \`agent-commerce init\`.
 #
 # server.adminToken and server.allowedOrigins are left unset, so no secret
 # lands in a file you might commit. Without a token the operator routes
-# (/api/receipts, /api/events) return 404. They serve the merchant's commerce
-# ledger: payer addresses, amounts and settlement hashes. To enable them, add
-# these keys to the server block below:
+# (/api/receipts, /api/events, /api/payment-attempts) return 404. These routes
+# expose the merchant's commerce ledger: payer addresses, amounts and settlement
+# hashes. To enable them, add these keys to the server block below:
 #   server:
 #     adminToken: \${ADMIN_TOKEN}
 #     allowedOrigins:
@@ -703,7 +710,75 @@ function offerHealthCheck(live, named) {
     detail: `${problems.join("; ")}. The gateway logs each reason at debug level`
   };
 }
-function paymentChecks(config, wellKnown, gatewayUrl, chainDeploy = false) {
+function extractLiveQuote(body) {
+  const payments = body?.["payments"];
+  const x402 = isRecord(payments) ? payments["x402"] : void 0;
+  const quote = isRecord(x402) ? x402["quote"] : void 0;
+  if (quote === void 0) return void 0;
+  if (!isRecord(quote)) return "unreadable";
+  const { issuer, requestScheme, extension } = quote;
+  return typeof issuer === "string" && typeof requestScheme === "string" && typeof extension === "string" ? { issuer, requestScheme, extension } : "unreadable";
+}
+async function localQuoteIssuer(signerPrivateKey, loadAccounts) {
+  let accounts;
+  try {
+    accounts = await loadAccounts();
+  } catch {
+    return void 0;
+  }
+  try {
+    return accounts.privateKeyToAccount(signerPrivateKey).address;
+  } catch {
+    return "invalid";
+  }
+}
+function quoteCheck(enabled, local, live, body, gatewayUrl, stale) {
+  const name = "Payments (quotes)";
+  if (enabled && local === "invalid") {
+    return {
+      name,
+      status: "FAIL",
+      detail: 'quote.signerPrivateKey is not a valid private key (expected "0x" followed by 64 hex characters), so start refuses it'
+    };
+  }
+  const localIssuer = local === void 0 ? void 0 : maskMiddle(local);
+  const quote = live === void 0 || live === "disabled" ? "unreadable" : extractLiveQuote(body);
+  if (quote === "unreadable") {
+    return enabled ? {
+      name,
+      status: "INFO",
+      detail: `ERC-8409 quotes enabled (experimental)${localIssuer !== void 0 ? `, issuer=${localIssuer} from the local key` : ""}; the gateway's issuer could not be read`
+    } : void 0;
+  }
+  if (quote === void 0) {
+    return enabled ? {
+      name,
+      status: "FAIL",
+      detail: `Local config enables ERC-8409 quotes, but the gateway at ${gatewayUrl} publishes no quote issuer${stale}`
+    } : void 0;
+  }
+  const issuer = maskMiddle(quote.issuer);
+  if (!enabled) {
+    return {
+      name,
+      status: "FAIL",
+      detail: `The gateway at ${gatewayUrl} signs ERC-8409 quotes as ${issuer}, but local config does not enable them${stale}`
+    };
+  }
+  if (local !== void 0 && local.toLowerCase() !== quote.issuer.toLowerCase()) {
+    return {
+      name,
+      status: "FAIL",
+      detail: `The gateway at ${gatewayUrl} signs ERC-8409 quotes as ${issuer}, but quote.signerPrivateKey belongs to ${localIssuer}${stale}`
+    };
+  }
+  return {
+    name,
+    status: "PASS",
+    detail: `ERC-8409 quotes (experimental) - issuer=${issuer}${local === void 0 ? " as the gateway publishes it (viem could not be loaded to check it against the local key)" : ""}, requestScheme=${quote.requestScheme}, extension=${quote.extension}`
+  };
+}
+async function paymentChecks(config, wellKnown, gatewayUrl, chainDeploy = false, loadAccounts = () => import('viem/accounts')) {
   const checks = [];
   const stale = `; the gateway may be running against an older deployment - restart it${chainDeploy ? " or re-run chain:deploy" : ""}`;
   const x402 = config?.payments.x402;
@@ -758,6 +833,15 @@ function paymentChecks(config, wellKnown, gatewayUrl, chainDeploy = false) {
       const offerHealth = offerHealthCheck(live, named);
       if (offerHealth !== void 0) checks.push(offerHealth);
     }
+    const quotes = quoteCheck(
+      x402.quote !== void 0,
+      x402.quote !== void 0 ? await localQuoteIssuer(x402.quote.signerPrivateKey, loadAccounts) : void 0,
+      live,
+      wellKnown?.ok ? wellKnown.body : void 0,
+      gatewayUrl,
+      stale
+    );
+    if (quotes !== void 0) checks.push(quotes);
     if (mode === "mainnet") {
       checks.push(
         mainnetSafetyCheck("Mainnet safety", "payTo", x402.facilitator, [
@@ -1025,7 +1109,9 @@ async function runDoctor(options, deps = {}) {
   ) : void 0;
   checks.push(...protocolChecks(config, wellKnown));
   checks.push(...ap2Checks(config));
-  checks.push(...paymentChecks(config, wellKnown, gatewayUrl, chainDeploy));
+  checks.push(
+    ...await paymentChecks(config, wellKnown, gatewayUrl, chainDeploy, deps.loadViemAccounts)
+  );
   checks.push(...await storageChecks(config, createStore));
   if (wellKnown?.ok) {
     checks.push({
@@ -2450,7 +2536,7 @@ function buildProgram(io = processIo) {
     `Start the gateway from ${DEFAULT_CONFIG_FILENAME} and serve until SIGTERM or SIGINT.`
   ).option("--config <path>", `path to ${DEFAULT_CONFIG_FILENAME}`).option("--env-file <path>", ENV_FILE_HELP).action(async (opts) => {
     try {
-      const { runGateway } = await import('./run-WV44B62Y.js');
+      const { runGateway } = await import('./run-TEPYJUHG.js');
       await runGateway(opts.config !== void 0 ? { configPath: opts.config } : {});
     } catch (error) {
       io.stderr(formatConfigError(error, false, false));