@devlab.group/agent-commerce 2.4.0 → 2.5.0

package/dist/cli/{run-TEPYJUHG.js → run-ZTYPQI4D.js}

@@ -1,16 +1,20 @@
-import { createSqliteReceiptStore, A2A_DEFAULT_MOUNT_PATH, A2A_DEFAULT_AGENT_NAME, buildDescriptor, A2A_AGENT_CARD_PATH, A2A_JSON_MEDIA_TYPE, A2A_VERSION_HEADER, A2A_PROTOCOL_VERSION, A2A_EXTENSIONS_HEADER, A2A_PUSH_CONFIG_METHODS, A2A_TASK_LOOKUP_METHODS, A2A_UNSUPPORTED_METHODS, A2A_METHOD_SEND_MESSAGE, buildDescriptor2, A2A_PROTOCOL_BINDING, A2A_TASK_STATE_FAILED, A2A_TASK_STATE_COMPLETED, A2A_TASK_STATE_INPUT_REQUIRED } from './chunk-DCMW67JM.js';
-import { loadConfig } from './chunk-G2JEY7MB.js';
-import { HttpBackendExecutor, createResourceRegistry, createStoreEventSink, createExecutionPipeline, ACP_WELL_KNOWN_PATH, ACP_CHECKOUT_OPERATIONS, ACP_IN_FLIGHT_RETRY_AFTER_SECONDS, ACP_IDEMPOTENT_REPLAYED_HEADER, ACP_IDEMPOTENCY_KEY_HEADER, ACP_REQUEST_ID_HEADER, ACP_SPEC_VERSION, ACP_JSON_MEDIA_TYPE, ACP_API_VERSION, ACP_API_VERSION_HEADER, ACP_MAX_REQUEST_ID_LENGTH, ACP_OPERATION_INPUT_KEYS, ACP_OPERATION_OPTIONAL_INPUT_KEYS, ACP_SESSION_ID_INPUT_KEY, ACP_FORWARDED_HEADERS, ACP_MAX_FORWARDED_HEADER_LENGTH, BackendErrorResponse, ACP_MERCHANT_RETRY_AFTER_DEFAULT_SECONDS, ACP_MERCHANT_RETRY_AFTER_MAX_SECONDS } from './chunk-PIMFPCNZ.js';
-import { MPP_DEFAULT_PAYMENT_FLOW, MPP_PROFILE } from './chunk-AA3FIEAR.js';
-import { x402OfferName } from './chunk-WYOGIANL.js';
-import { X402_DEFAULT_PAYMENT_FLOW, resolveDeploymentMode, requireX402Network } from './chunk-OZ4LAWBK.js';
-import { openSqliteDatabase } from './chunk-3MGAJ5FX.js';
-import './chunk-FHCFR2GS.js';
+import { createConfiguredPaymentProviders, importOptionalPeer } from './chunk-JFVRG2HH.js';
 import { readCappedBody, createBearerCheck, joinUrl, settlementResponse, settlementResponseFromDetails, settlementFailure, x402ErrorCode, x402RefusalStatus } from './chunk-SPAYKVUP.js';
+import { A2A_DEFAULT_MOUNT_PATH, A2A_DEFAULT_AGENT_NAME, buildDescriptor, A2A_AGENT_CARD_PATH, A2A_JSON_MEDIA_TYPE, A2A_VERSION_HEADER, A2A_PROTOCOL_VERSION, A2A_EXTENSIONS_HEADER, A2A_PUSH_CONFIG_METHODS, A2A_TASK_LOOKUP_METHODS, A2A_UNSUPPORTED_METHODS, A2A_METHOD_SEND_MESSAGE, buildDescriptor2, A2A_PROTOCOL_BINDING, A2A_TASK_STATE_FAILED, A2A_TASK_STATE_COMPLETED, A2A_TASK_STATE_INPUT_REQUIRED } from './chunk-NIU5EMSB.js';
+import { createSqliteReceiptStore } from './chunk-QLUCNPRT.js';
+import { openSqliteDatabase } from './chunk-VJ4EO4LE.js';
+import { loadConfig } from './chunk-2J2IQQ4X.js';
+import { HttpBackendExecutor, createResourceRegistry, createStoreEventSink, createExecutionPipeline, ACP_WELL_KNOWN_PATH, ACP_CHECKOUT_OPERATIONS, ACP_IN_FLIGHT_RETRY_AFTER_SECONDS, ACP_IDEMPOTENT_REPLAYED_HEADER, ACP_IDEMPOTENCY_KEY_HEADER, ACP_REQUEST_ID_HEADER, ACP_SPEC_VERSION, ACP_JSON_MEDIA_TYPE, ACP_API_VERSION, ACP_API_VERSION_HEADER, ACP_MAX_REQUEST_ID_LENGTH, ACP_OPERATION_INPUT_KEYS, ACP_OPERATION_OPTIONAL_INPUT_KEYS, ACP_SESSION_ID_INPUT_KEY, ACP_FORWARDED_HEADERS, ACP_MAX_FORWARDED_HEADER_LENGTH, BackendErrorResponse, ACP_MERCHANT_RETRY_AFTER_DEFAULT_SECONDS, ACP_MERCHANT_RETRY_AFTER_MAX_SECONDS } from './chunk-Z34UMZBB.js';
+import './chunk-FHCFR2GS.js';
 import './chunk-TPC4EJLT.js';
+import { resolveManually, journalOf } from './chunk-2UPPX3FJ.js';
 import { contentDigest, CONTENT_DIGEST_METADATA_KEY, mppProblem, mppProblemDetail } from './chunk-5K4XEAZV.js';
-import { PACKAGE_VERSION } from './chunk-UXB65XCS.js';
-import { PAYMENT_HEADER, AUTHORIZATION_HEADER, CommerceError, isCommerceError, systemClock, toLogInfo, toCommerceError, extractReservedInputFields, isHttpProtocolAdapter, toErrorEnvelope, DELIVERY_SUMMARY_META_KEY, toDeliverySummary, toPaymentRequiredEnvelope, NOOP_LOGGER, parseAuthorizationHeader, PAYMENT_REQUIRED_HEADER, PAYMENT_RESPONSE_HEADER, PAYMENT_INPUT_FIELD, AUTHORIZATION_INPUT_FIELD, parseAuthorizationSubmission } from './chunk-QQ3WY5L3.js';
+import { MPP_DEFAULT_PAYMENT_FLOW, MPP_PROFILE } from './chunk-AA3FIEAR.js';
+import { PACKAGE_VERSION } from './chunk-M7NXVRU5.js';
+import { x402OfferName } from './chunk-4H2QLHQI.js';
+import { X402_DEFAULT_PAYMENT_FLOW, resolveDeploymentMode, requireX402Network } from './chunk-5R7DM5LM.js';
+import { PAYMENT_HEADER, AUTHORIZATION_HEADER, systemClock, extractReservedInputFields, isHttpProtocolAdapter, toErrorEnvelope, DELIVERY_SUMMARY_META_KEY, toDeliverySummary, toPaymentRequiredEnvelope, NOOP_LOGGER, parseAuthorizationHeader, PAYMENT_REQUIRED_HEADER, PAYMENT_RESPONSE_HEADER, PAYMENT_INPUT_FIELD, AUTHORIZATION_INPUT_FIELD, parseAuthorizationSubmission, TRANSACTION_STATES } from './chunk-IDY2735M.js';
+import { CommerceError, isCommerceError, toLogInfo, toCommerceError } from './chunk-SYQLJXIU.js';
 import { isRecord } from './chunk-3M6U7ILB.js';
 import { createHash, randomUUID } from 'crypto';
 import { z } from 'zod';
@@ -133,14 +137,13 @@ var A2A_CALL_SHAPE = 'one data part {"resource": "<skill id>", "input": {...}}';
 function userRoleProblem(role) {
   return role === A2A_USER_ROLE ? void 0 : `Unsupported message role "${String(role)}": only ${A2A_USER_ROLE} is accepted.`;
 }
-var UnknownRecord = z.record(z.string(), z.unknown());
 var MessageSchema = z.object({
   role: z.string(),
   messageId: z.string().optional(),
-  parts: z.array(UnknownRecord),
+  parts: z.array(z.unknown()),
   taskId: z.string().optional(),
   contextId: z.string().optional(),
-  referenceTaskIds: z.array(z.string()).optional()
+  referenceTaskIds: z.array(z.unknown()).optional()
 });
 var ParamsSchema = z.object({
   message: MessageSchema,
@@ -224,6 +227,7 @@ function parseInvocation(rawParams) {
   }
   const part = message.parts[0];
   if (part === void 0) throw invalid("Message carries no parts.");
+  if (!isRecord(part)) throw invalid("Message part must be a JSON object.");
   assertSupportedPart(part);
   const data = part["data"];
   if (!isRecord(data)) {
@@ -6149,99 +6153,6 @@ function wrapPino(instance) {
   return logger;
 }
 
-// src/gateway/optional-peer.ts
-var MISSING_PACKAGE = /Cannot find package '([^']+)'/;
-async function importOptionalPeer(feature, load) {
-  try {
-    return await load();
-  } catch (cause) {
-    if (cause?.code !== "ERR_MODULE_NOT_FOUND") throw cause;
-    const pkg = MISSING_PACKAGE.exec(cause.message)?.[1];
-    if (pkg === void 0) throw cause;
-    throw new CommerceError(
-      "CONFIG_INVALID",
-      `${feature} is enabled, but the package "${pkg}" is not installed. Install the optional peers it needs at the versions \`agent-commerce version\` lists, or disable it.`,
-      { cause }
-    );
-  }
-}
-
-// src/gateway/payment-providers.ts
-function offerOptions(option) {
-  return {
-    network: option.network,
-    rpcUrl: option.rpcUrl,
-    asset: option.asset,
-    assetDecimals: option.assetDecimals,
-    payTo: option.payTo,
-    ...option.assetName !== void 0 ? { assetName: option.assetName } : {},
-    ...option.assetVersion !== void 0 ? { assetVersion: option.assetVersion } : {},
-    ...option.assetTransferMethod !== void 0 ? { assetTransferMethod: option.assetTransferMethod } : {}
-  };
-}
-async function createConfiguredPaymentProviders(payments, logger) {
-  const providers = [];
-  const { x402, mpp } = payments;
-  if (x402?.enabled) {
-    const { createX402PaymentProvider } = await importOptionalPeer(
-      "payments.x402",
-      () => import('./x402-BMVONZKA.js')
-    );
-    providers.push(
-      createX402PaymentProvider({
-        // Support manually built single-option configs without `options`
-        offers: (x402.options ?? [x402]).map(offerOptions),
-        ...x402.resourceOptions !== void 0 ? {
-          resourceOffers: Object.fromEntries(
-            Object.entries(x402.resourceOptions).map(([id, list]) => [
-              id,
-              list.map(offerOptions)
-            ])
-          )
-        } : {},
-        maxTimeoutSeconds: x402.maxTimeoutSeconds,
-        ...x402.paymentFlow !== void 0 ? { paymentFlow: x402.paymentFlow } : {},
-        ...x402.resourcePaymentFlows !== void 0 ? { resourcePaymentFlows: x402.resourcePaymentFlows } : {},
-        ...x402.resourceMimeTypes !== void 0 ? { resourceMimeTypes: x402.resourceMimeTypes } : {},
-        facilitator: x402.facilitator,
-        ...x402.allowMainnet !== void 0 ? { allowMainnet: x402.allowMainnet } : {},
-        ...x402.allowUnauthenticatedFacilitator !== void 0 ? { allowUnauthenticatedFacilitator: x402.allowUnauthenticatedFacilitator } : {},
-        ...x402.networks !== void 0 ? { customNetworks: x402.networks } : {},
-        // Pass quote settings only to x402; MPP builds a separate settlement
-        // provider without quotes
-        ...x402.quote !== void 0 ? { quote: x402.quote } : {},
-        logger
-      })
-    );
-  }
-  if (mpp?.enabled) {
-    const { createMppPaymentProvider } = await importOptionalPeer(
-      "payments.mpp",
-      () => import('./provider-Z4OJNAYI.js')
-    );
-    providers.push(
-      createMppPaymentProvider({
-        recipient: mpp.recipient,
-        asset: mpp.asset,
-        assetName: mpp.assetName,
-        assetVersion: mpp.assetVersion,
-        network: mpp.network,
-        realm: mpp.realm,
-        challengeSecret: mpp.challengeSecret,
-        ...mpp.challengeTtlSeconds !== void 0 ? { challengeTtlSeconds: mpp.challengeTtlSeconds } : {},
-        rpcUrl: mpp.rpcUrl,
-        facilitator: mpp.facilitator,
-        ...mpp.allowMainnet !== void 0 ? { allowMainnet: mpp.allowMainnet } : {},
-        ...mpp.allowUnauthenticatedFacilitator !== void 0 ? { allowUnauthenticatedFacilitator: mpp.allowUnauthenticatedFacilitator } : {},
-        ...mpp.paymentFlow !== void 0 ? { paymentFlow: mpp.paymentFlow } : {},
-        ...mpp.resourcePaymentFlows !== void 0 ? { resourcePaymentFlows: mpp.resourcePaymentFlows } : {},
-        logger
-      })
-    );
-  }
-  return providers;
-}
-
 // src/gateway/access-control.ts
 var CORS_METHODS = "GET,POST,OPTIONS";
 var CORS_HEADERS = [
@@ -6776,6 +6687,15 @@ function buildWellKnownDocument(options) {
 
 // src/gateway/routes.ts
 var X402_V1_PAYMENT_HEADER = "x-payment";
+var RESOLVE_BODY_LIMIT_BYTES = 4096;
+var RESOLVE_FIELDS = [
+  "status",
+  "actor",
+  "reason",
+  "externalReference",
+  "confirmExpired"
+];
+var TRANSACTION_EVENT_LIMIT = 50;
 function registerRoutes(options) {
   const { server } = options;
   const readinessProbe = createReadinessProbe({
@@ -6843,6 +6763,113 @@ function registerRoutes(options) {
       )
     )
   );
+  const { store, clock } = options;
+  const journal = () => journalOf(store);
+  const withAge = (transaction) => ({
+    ...transaction,
+    ageSeconds: Math.max(
+      0,
+      Math.floor((clock.now().getTime() - Date.parse(transaction.createdAt)) / 1e3)
+    )
+  });
+  server.get(
+    "/api/transactions",
+    { onRequest: tokenHook },
+    operatorHandler(async (request) => {
+      const query = request.query;
+      const limit = parseLimit(query["limit"]);
+      const state = parseText(query["state"]);
+      if (state !== void 0 && !TRANSACTION_STATES.includes(state)) {
+        throw new CommerceError("INPUT_INVALID", `Unknown transaction state "${state}"`, {
+          details: { field: "state" }
+        });
+      }
+      const requestId = parseText(query["requestId"]);
+      const cursor = parseText(query["cursor"]);
+      const page = await journal().listTransactions({
+        ...limit !== void 0 ? { limit } : {},
+        ...parseFlag(query["unresolved"], "unresolved") ? { unresolved: true } : {},
+        ...state !== void 0 ? { state } : {},
+        ...requestId !== void 0 ? { requestId } : {},
+        ...cursor !== void 0 ? { cursor } : {}
+      });
+      return {
+        transactions: page.transactions.map(withAge),
+        ...page.nextCursor !== void 0 ? { nextCursor: page.nextCursor } : {}
+      };
+    })
+  );
+  server.get(
+    "/api/transactions/:id",
+    { onRequest: tokenHook },
+    operatorHandler(async (request) => {
+      const id = request.params.id;
+      const transaction = await journal().getTransaction(id);
+      if (transaction === void 0) {
+        throw new CommerceError("RESOURCE_NOT_FOUND", `Transaction "${id}" was not found`);
+      }
+      const [attempt, receipt, events] = await Promise.all([
+        journal().getPaymentAttempt(transaction.payment.attemptId),
+        transaction.receiptId !== void 0 ? store.getReceipt(transaction.receiptId) : void 0,
+        store.listEvents({ requestId: transaction.requestId, limit: TRANSACTION_EVENT_LIMIT })
+      ]);
+      return {
+        transaction: withAge(transaction),
+        ...attempt !== void 0 ? { attempt } : {},
+        ...receipt !== void 0 ? { receipt } : {},
+        events
+      };
+    })
+  );
+  server.post(
+    "/api/payment-attempts/:id/resolve",
+    { onRequest: tokenHook, bodyLimit: RESOLVE_BODY_LIMIT_BYTES },
+    operatorHandler(async (request) => {
+      const result = await resolveManually({
+        store,
+        authorizationProviders: options.authorizationProviders,
+        clock,
+        logger: options.logger,
+        attemptId: request.params.id,
+        ...parseResolveBody(request.body)
+      });
+      if (!result.resolved) {
+        throw new CommerceError("INPUT_INVALID", result.message, {
+          httpStatus: 409,
+          details: { reason: result.refusal, attemptStatus: result.attempt.status }
+        });
+      }
+      return {
+        attempt: result.attempt,
+        ...result.hold !== void 0 ? { hold: result.hold } : {}
+      };
+    })
+  );
+}
+function parseResolveBody(body) {
+  if (!isRecord(body)) {
+    throw new CommerceError("INPUT_INVALID", "The request body must be a JSON object");
+  }
+  const field = (name, type, required) => {
+    const value = body[name];
+    if (value === void 0 && required || value !== void 0 && typeof value !== type) {
+      throw new CommerceError("INPUT_INVALID", `Field "${name}" must be a ${type}`, {
+        details: { field: name }
+      });
+    }
+  };
+  const unknownField = Object.keys(body).find((name) => !RESOLVE_FIELDS.includes(name));
+  if (unknownField !== void 0) {
+    throw new CommerceError("INPUT_INVALID", `Unknown field "${unknownField}"`, {
+      details: { field: unknownField }
+    });
+  }
+  field("status", "string", true);
+  field("actor", "string", true);
+  field("reason", "string", true);
+  field("externalReference", "string", false);
+  field("confirmExpired", "boolean", false);
+  return body;
 }
 var bodyDigests = /* @__PURE__ */ new WeakMap();
 function digestingStream(request) {
@@ -6858,13 +6885,10 @@ function digestingStream(request) {
     }
   });
 }
-function ledgerHandler(key, list) {
+function operatorHandler(handle) {
   return async (request, reply) => {
     try {
-      const query = request.query;
-      const limit = parseLimit(query["limit"]);
-      const page = await list(limit !== void 0 ? { limit } : {}, query);
-      return { [key]: page };
+      return await handle(request, reply);
     } catch (error) {
       const commerceError = toCommerceError(error);
       reply.status(commerceError.httpStatus).send(toErrorEnvelope(commerceError));
@@ -6872,6 +6896,14 @@ function ledgerHandler(key, list) {
     }
   };
 }
+function ledgerHandler(key, list) {
+  return operatorHandler(async (request) => {
+    const query = request.query;
+    const limit = parseLimit(query["limit"]);
+    const page = await list(limit !== void 0 ? { limit } : {}, query);
+    return { [key]: page };
+  });
+}
 async function handleInvoke(request, reply, options) {
   const resourceId = request.params.id;
   let paymentMethod;
@@ -7052,6 +7084,10 @@ function parseLimit(value) {
   }
   return n;
 }
+function parseText(value) {
+  if (Array.isArray(value)) return parseText(value[0]);
+  return typeof value === "string" && value !== "" ? value : void 0;
+}
 function parseFlag(value, field) {
   if (Array.isArray(value)) return parseFlag(value[0], field);
   if (value === void 0 || value === "false") return false;
@@ -7185,9 +7221,9 @@ async function runGateway(options = {}) {
   const { core: logger } = createGatewayLogger({ name: config.merchant.id });
   const paymentProviders = await createConfiguredPaymentProviders(config.payments, logger);
   const ap2 = config.authorization?.ap2;
-  const ap2Module = ap2?.enabled ? await importOptionalPeer("authorization.ap2", () => import('./ap2-QDHPRSTF.js')) : void 0;
+  const ap2Module = ap2?.enabled ? await importOptionalPeer("authorization.ap2", () => import('./ap2-YAPLERSC.js')) : void 0;
   const mcp = config.protocols.mcp;
-  const mcpModule = mcp.enabled ? await importOptionalPeer("protocols.mcp", () => import('./mcp-26LJMN4N.js')) : void 0;
+  const mcpModule = mcp.enabled ? await importOptionalPeer("protocols.mcp", () => import('./mcp-KZEMXLHR.js')) : void 0;
   const store = createSqliteReceiptStore({
     path: config.storage.receipts.path,
     logger
@@ -7318,5 +7354,5 @@ function printStartupError(error) {
 }
 
 export { printStartupError, runGateway };
-//# sourceMappingURL=run-TEPYJUHG.js.map
-//# sourceMappingURL=run-TEPYJUHG.js.map
+//# sourceMappingURL=run-ZTYPQI4D.js.map
+//# sourceMappingURL=run-ZTYPQI4D.js.map