@devlab.group/agent-commerce 2.4.0 → 2.5.0

package/dist/cli/index.js

@@ -1,14 +1,16 @@
 #!/usr/bin/env node
-import { createSqliteReceiptStore, A2A_SPEC_VERSION, A2A_PROTOCOL_VERSION, A2A_PROTOCOL_BINDING, A2A_AGENT_CARD_PATH, A2A_UNSUPPORTED, ACP_UNSUPPORTED } from './chunk-DCMW67JM.js';
-import { DEFAULT_CONFIG_FILENAME, extractPathParameterNames, ACP_SPEC_VERSION, ACP_API_VERSION, ACP_WELL_KNOWN_PATH, findUnparsedBraceToken } from './chunk-PIMFPCNZ.js';
-import { MPP_PROFILE, MPP_SPEC_DRAFTS, MPPX_VERSION, MPP_SPEC_COMMIT, MPP_DEFAULT_PAYMENT_FLOW } from './chunk-AA3FIEAR.js';
-import { ANVIL_WELL_KNOWN_ACCOUNTS, describeDeploymentMode, X402_DEFAULT_PAYMENT_FLOW, findX402Network, isEvmAddress, LOCAL_CHAIN_ID, resolveDeploymentMode, sameAddress } from './chunk-OZ4LAWBK.js';
 import { AP2_UNSUPPORTED } from './chunk-3EQBCFZY.js';
-import './chunk-3MGAJ5FX.js';
+import { A2A_SPEC_VERSION, A2A_PROTOCOL_VERSION, A2A_PROTOCOL_BINDING, A2A_AGENT_CARD_PATH, A2A_UNSUPPORTED, ACP_UNSUPPORTED } from './chunk-NIU5EMSB.js';
+import { createSqliteReceiptStore } from './chunk-QLUCNPRT.js';
+import './chunk-VJ4EO4LE.js';
+import { DEFAULT_CONFIG_FILENAME, extractPathParameterNames, ACP_SPEC_VERSION, ACP_API_VERSION, ACP_WELL_KNOWN_PATH, findUnparsedBraceToken } from './chunk-Z34UMZBB.js';
 import { AP2_SPEC_VERSION, AP2_CHECKOUT_MANDATE_VCT, AP2_CHECKOUT_PROFILE } from './chunk-FHCFR2GS.js';
 import { MCP_TOOL_NAME_MAX_LENGTH, MCP_TOOL_NAME_CHARS } from './chunk-TPC4EJLT.js';
-import { PACKAGE_VERSION } from './chunk-UXB65XCS.js';
-import { PROTOCOL_NAMES, isCommerceError, CommerceError } from './chunk-QQ3WY5L3.js';
+import { MPP_PROFILE, MPP_SPEC_DRAFTS, MPPX_VERSION, MPP_SPEC_COMMIT, MPP_DEFAULT_PAYMENT_FLOW } from './chunk-AA3FIEAR.js';
+import { PACKAGE_VERSION } from './chunk-M7NXVRU5.js';
+import { ANVIL_WELL_KNOWN_ACCOUNTS, describeDeploymentMode, X402_DEFAULT_PAYMENT_FLOW, findX402Network, isEvmAddress, LOCAL_CHAIN_ID, resolveDeploymentMode, sameAddress } from './chunk-5R7DM5LM.js';
+import { PROTOCOL_NAMES, systemClock, NOOP_LOGGER } from './chunk-IDY2735M.js';
+import { isCommerceError, redactedErrorText, CommerceError } from './chunk-SYQLJXIU.js';
 import { isRecord } from './chunk-3M6U7ILB.js';
 import { CommanderError, Command } from 'commander';
 import { existsSync, mkdirSync, readFileSync, accessSync, constants } from 'fs';
@@ -20,6 +22,7 @@ import { writeFile, stat, mkdir, rename, rm, open } from 'fs/promises';
 import { isDeepStrictEqual } from 'util';
 import { validate } from '@scalar/openapi-parser';
 import * as clack from '@clack/prompts';
+import { userInfo } from 'os';
 
 // src/cli/commands/demo.ts
 function defaultDemoSteps() {
@@ -78,7 +81,7 @@ async function execCommand(command, args) {
 // src/cli/lib/config-client.ts
 async function importConfig() {
   try {
-    return await import('./config-UI4EDG4L.js');
+    return await import('./config-BWFMN2ZB.js');
   } catch (err) {
     throw new CommerceError(
       "INTERNAL_ERROR",
@@ -345,7 +348,7 @@ async function storageChecks(config, createStore) {
       }
       const status = storeHealth.status === "pass" ? "PASS" : storeHealth.status === "warn" ? "WARN" : "FAIL";
       const receiptsSuffix = receiptCount !== void 0 ? `; receipts=${receiptCount}${undeliveredCount !== void 0 && undeliveredCount > 0 ? ` (${undeliveredCount} undelivered)` : ""}` : "";
-      const uncertainSuffix = uncertainCount !== void 0 && uncertainCount > 0 ? `; ${uncertainCount} payment(s) with unknown settlement outcome, see GET /api/payment-attempts?uncertain=true` : "";
+      const uncertainSuffix = uncertainCount !== void 0 && uncertainCount > 0 ? `; ${uncertainCount} payment(s) with unknown settlement outcome, see GET /api/transactions?unresolved=true or run agent-commerce reconcile` : "";
       checks.push({
         name: "Storage",
         status,
@@ -2476,6 +2479,206 @@ async function runInit(options, io, deps = {}) {
   io.stdout("  docker compose up     # or the whole local demo stack, from a repo clone");
   return 0;
 }
+var DURATION = /^(\d{1,9})(s|m|h|d)$/;
+var UNIT_MS = { s: 1e3, m: 6e4, h: 36e5, d: 864e5 };
+async function runReconcileCommand(options, io, deps = {}) {
+  const minAgeMs = options.minAge !== void 0 ? parseDuration(options.minAge) : void 0;
+  if (minAgeMs === null) {
+    io.stderr(`FAIL  --min-age must be a duration such as 30s, 15m or 2h, got "${options.minAge}"`);
+    return 1;
+  }
+  const limit = options.limit !== void 0 ? Number(options.limit) : void 0;
+  if (limit !== void 0 && (!Number.isSafeInteger(limit) || limit < 1)) {
+    io.stderr(`FAIL  --limit must be a positive integer, got "${options.limit}"`);
+    return 1;
+  }
+  const actor = options.actor ?? osUser();
+  if (actor.trim() === "") {
+    io.stderr("FAIL  --actor must not be empty");
+    return 1;
+  }
+  let config;
+  try {
+    config = await (deps.loadConfig ?? loadConfigDynamic)(
+      options.configPath !== void 0 ? { path: options.configPath } : {}
+    );
+  } catch (error) {
+    io.stderr(formatConfigError(error, false, false));
+    return 1;
+  }
+  try {
+    const logger = stderrLogger(io);
+    const { runReconcile } = await import('./reconcile-IC22MJD5.js');
+    const providers = await (await import('./payment-providers-SZL36H3Y.js')).createConfiguredPaymentProviders(config.payments, logger);
+    await withJournal(config, logger, async (store, authorizationProviders) => {
+      const report = await runReconcile({
+        store,
+        providers,
+        authorizationProviders,
+        clock: systemClock,
+        actor,
+        dryRun: options.dryRun === true,
+        ...minAgeMs !== void 0 ? { minAgeMs } : {},
+        ...limit !== void 0 ? { limit } : {},
+        logger
+      });
+      printReport(report, io, options.json === true);
+    });
+    return 0;
+  } catch (error) {
+    io.stderr(`FAIL  reconcile could not run: ${redactedErrorText(error)}`);
+    return 1;
+  }
+}
+async function withJournal(config, logger, fn) {
+  const [{ createConfiguredAuthorizationProviders }, { createSqliteReceiptStore: createSqliteReceiptStore2 }] = await Promise.all([
+    import('./payment-providers-SZL36H3Y.js'),
+    import('./receipts-ZGLJWMQG.js')
+  ]);
+  const authorizationProviders = await createConfiguredAuthorizationProviders(
+    config.authorization,
+    logger
+  );
+  try {
+    const store = createSqliteReceiptStore2({ path: config.storage.receipts.path, logger });
+    try {
+      await store.init();
+      await fn(store, authorizationProviders);
+    } finally {
+      await store.close();
+    }
+  } finally {
+    for (const provider of authorizationProviders) provider.close();
+  }
+}
+function parseDuration(value) {
+  if (value === "0") return 0;
+  const match = DURATION.exec(value);
+  return match ? Number(match[1]) * UNIT_MS[match[2]] : null;
+}
+function printReport(report, io, json) {
+  const count = (outcome) => report.entries.filter((e) => e.outcome === outcome).length;
+  const counts = {
+    candidates: report.entries.length,
+    settled: count("settled"),
+    notSettled: count("not-settled"),
+    unknown: count("unknown"),
+    resolved: report.entries.filter((e) => e.written).length,
+    holdsAligned: report.holds.filter((h) => h.written).length
+  };
+  if (json) {
+    io.stdout(
+      JSON.stringify(
+        { dryRun: report.dryRun, counts, entries: report.entries, holds: report.holds },
+        null,
+        2
+      )
+    );
+    return;
+  }
+  io.stdout(
+    `reconcile${report.dryRun ? " (dry run, no resolutions written)" : ""}: ${counts.candidates} candidates, ${counts.settled} settled, ${counts.notSettled} not settled, ${counts.unknown} unknown, ${counts.resolved} resolved` + (report.holds.length > 0 ? `, ${counts.holdsAligned} of ${report.holds.length} holds aligned` : "")
+  );
+  for (const entry of report.entries) {
+    io.stdout(
+      [
+        entry.outcome.toUpperCase().padEnd(11),
+        entry.attemptId,
+        `request=${entry.requestId}`,
+        `provider=${entry.provider}`,
+        `status=${entry.status}`,
+        `reason=${entry.reason}`,
+        ...entry.externalReference !== void 0 ? [`reference=${entry.externalReference}`] : [],
+        ...entry.retryAfter !== void 0 ? [`retryAfter=${entry.retryAfter}`] : [],
+        ...entry.error !== void 0 ? [`error=${entry.error}`] : [],
+        ...entry.written ? ["resolved"] : []
+      ].join(" ")
+    );
+  }
+  for (const hold of report.holds) {
+    io.stdout(
+      [
+        "HOLD".padEnd(11),
+        hold.transactionId,
+        `attempt=${hold.attemptId}`,
+        `method=${hold.method}`,
+        `hold=${hold.hold}`,
+        ...hold.reason !== void 0 ? [`reason=${hold.reason}`] : [],
+        ...hold.written ? ["aligned"] : []
+      ].join(" ")
+    );
+  }
+}
+function osUser() {
+  try {
+    return userInfo().username;
+  } catch {
+    return "unknown";
+  }
+}
+function stderrLogger(io) {
+  const write = (level) => (obj, msg) => io.stderr(`${level}  ${msg ?? ""} ${JSON.stringify(obj)}`.trimEnd());
+  return {
+    ...NOOP_LOGGER,
+    warn: write("WARN"),
+    error: write("ERROR"),
+    child: () => stderrLogger(io)
+  };
+}
+
+// src/cli/commands/resolve.ts
+var OPERATOR_ERRORS = /* @__PURE__ */ new Set(["INPUT_INVALID", "RESOURCE_NOT_FOUND"]);
+async function runResolveCommand(attemptId, options, io, deps = {}) {
+  let config;
+  try {
+    config = await (deps.loadConfig ?? loadConfigDynamic)(
+      options.configPath !== void 0 ? { path: options.configPath } : {}
+    );
+  } catch (error) {
+    io.stderr(formatConfigError(error, false, false));
+    return 1;
+  }
+  try {
+    const { resolveManually } = await import('./reconcile-IC22MJD5.js');
+    const logger = stderrLogger(io);
+    let code = 1;
+    await withJournal(config, logger, async (store, authorizationProviders) => {
+      const result = await resolveManually({
+        store,
+        authorizationProviders,
+        clock: systemClock,
+        logger,
+        attemptId,
+        status: options.status,
+        actor: options.actor ?? osUser(),
+        reason: options.reason,
+        ...options.reference !== void 0 ? { externalReference: options.reference } : {},
+        ...options.confirmExpired === true ? { confirmExpired: true } : {}
+      });
+      if (!result.resolved) {
+        const hint = result.refusal === "expiry_unknown" ? " (pass --confirm-expired)" : "";
+        io.stderr(
+          `FAIL  ${attemptId} not resolved: ${result.message}${hint} [${result.refusal}, status=${result.attempt.status}]`
+        );
+        return;
+      }
+      io.stdout(`RESOLVED  ${attemptId} status=${result.attempt.status}`);
+      const { hold } = result;
+      if (hold !== void 0) {
+        io.stdout(
+          hold.written ? `HOLD      ${hold.method} ${hold.hold}` : `WARN  ${hold.method} hold not ${hold.hold} (${hold.reason}); agent-commerce reconcile aligns it once the provider is available`
+        );
+      }
+      code = 0;
+    });
+    return code;
+  } catch (error) {
+    io.stderr(
+      isCommerceError(error) && OPERATOR_ERRORS.has(error.code) ? `FAIL  ${error.code}: ${error.message}` : `FAIL  resolve could not run: ${redactedErrorText(error)}`
+    );
+    return 1;
+  }
+}
 
 // src/cli/commands/version.ts
 function runVersion(io, deps = {}) {
@@ -2508,7 +2711,9 @@ var processIo = {
 var ENV_FILE_HELP = "load environment variables from this file; variables already set win";
 function buildProgram(io = processIo) {
   const program = new Command();
-  program.name("agent-commerce").description("CLI for the Agent Commerce Gateway: init, import, validate, start, doctor, demo.").version(readVersionReport().cliVersion, "-v, --version", "Print the CLI version.").exitOverride().configureOutput({
+  program.name("agent-commerce").description(
+    "CLI for the Agent Commerce Gateway: init, import, validate, start, doctor, reconcile, demo."
+  ).version(readVersionReport().cliVersion, "-v, --version", "Print the CLI version.").exitOverride().configureOutput({
     writeOut: (str) => io.stdout(str.replace(/\n+$/, "")),
     writeErr: (str) => io.stderr(str.replace(/\n+$/, ""))
   }).hook("preAction", (_program, command) => {
@@ -2536,7 +2741,7 @@ function buildProgram(io = processIo) {
     `Start the gateway from ${DEFAULT_CONFIG_FILENAME} and serve until SIGTERM or SIGINT.`
   ).option("--config <path>", `path to ${DEFAULT_CONFIG_FILENAME}`).option("--env-file <path>", ENV_FILE_HELP).action(async (opts) => {
     try {
-      const { runGateway } = await import('./run-TEPYJUHG.js');
+      const { runGateway } = await import('./run-ZTYPQI4D.js');
       await runGateway(opts.config !== void 0 ? { configPath: opts.config } : {});
     } catch (error) {
       io.stderr(formatConfigError(error, false, false));
@@ -2554,6 +2759,48 @@ function buildProgram(io = processIo) {
     printDoctorReport(report, io, opts.json === true);
     process.exitCode = report.exitCode;
   });
+  program.command("reconcile").description(
+    "Resolve uncertain payment attempts using chain evidence. Never settles or refunds."
+  ).option("--config <path>", `path to ${DEFAULT_CONFIG_FILENAME}`).option("--env-file <path>", ENV_FILE_HELP).option("--dry-run", "read evidence and report without recording resolutions", false).option("--json", "emit machine-readable JSON instead of a formatted report", false).option("--actor <name>", "who ran it, stored with each resolution (default: the OS user)").option(
+    "--min-age <duration>",
+    "skip reserved attempts younger than this, such as 30s, 15m or 2h (default: 15m)"
+  ).option("--limit <n>", "check at most this many attempts, and update at most this many holds").action(
+    async (opts) => {
+      process.exitCode = await runReconcileCommand(
+        {
+          ...opts.config !== void 0 ? { configPath: opts.config } : {},
+          dryRun: opts.dryRun,
+          json: opts.json,
+          ...opts.actor !== void 0 ? { actor: opts.actor } : {},
+          ...opts.minAge !== void 0 ? { minAge: opts.minAge } : {},
+          ...opts.limit !== void 0 ? { limit: opts.limit } : {}
+        },
+        io
+      );
+    }
+  );
+  program.command("resolve <attemptId>").description(
+    "Record a verdict on one unresolved payment attempt and align its hold. Never settles or refunds."
+  ).requiredOption("--status <status>", "settled or rejected").requiredOption("--reason <text>", "why, stored with the resolution").option("--reference <ref>", "transaction reference, stored as your unchecked claim").option("--actor <name>", "who resolved it, stored with the resolution (default: the OS user)").option(
+    "--confirm-expired",
+    "confirm that an authorization with no recorded expiry can no longer land",
+    false
+  ).option("--config <path>", `path to ${DEFAULT_CONFIG_FILENAME}`).option("--env-file <path>", ENV_FILE_HELP).action(
+    async (attemptId, opts) => {
+      process.exitCode = await runResolveCommand(
+        attemptId,
+        {
+          ...opts.config !== void 0 ? { configPath: opts.config } : {},
+          status: opts.status,
+          reason: opts.reason,
+          ...opts.reference !== void 0 ? { reference: opts.reference } : {},
+          ...opts.actor !== void 0 ? { actor: opts.actor } : {},
+          confirmExpired: opts.confirmExpired
+        },
+        io
+      );
+    }
+  );
   program.command("init").description(`Interactively generate ${DEFAULT_CONFIG_FILENAME}.`).option("--output <path>", "output path", DEFAULT_CONFIG_FILENAME).option("--force", "overwrite an existing file", false).option("--yes", "use non-interactive defaults (required for scripting/tests)", false).action(async (opts) => {
     const code = await runInit({ outputPath: opts.output, force: opts.force, yes: opts.yes }, io);
     process.exitCode = code;