@devlab.group/agent-commerce 2.4.1 → 2.5.0

package/dist/cli/svm-KDSPDFJG.js

@@ -0,0 +1,48 @@
+import { LOCATOR_VERSION, computeSvmReplayKey } from './chunk-663ALDZA.js';
+import { isRecord } from './chunk-3M6U7ILB.js';
+import { getAddressEncoder, getProgramDerivedAddress, address, getCompiledTransactionMessageDecoder } from '@solana/kit';
+import { decodeTransactionFromPayload, transactionMessageHash } from '@x402/svm';
+
+var MAX_TRANSACTION_BASE64 = 1644;
+var ASSOCIATED_TOKEN_PROGRAM = "ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL";
+async function associatedTokenAccount(owner, mint, tokenProgram) {
+  const encoder = getAddressEncoder();
+  const [account] = await getProgramDerivedAddress({
+    programAddress: address(ASSOCIATED_TOKEN_PROGRAM),
+    seeds: [owner, tokenProgram, mint].map((key) => encoder.encode(address(key)))
+  });
+  return account;
+}
+function inspectSvmPayload(payload, network) {
+  if (!isRecord(payload)) return "invalid_exact_svm_payload_transaction";
+  const transaction = payload["transaction"];
+  if (typeof transaction !== "string" || transaction.length > MAX_TRANSACTION_BASE64) {
+    return "invalid_exact_svm_payload_transaction";
+  }
+  let messageHash;
+  let recentBlockhash;
+  try {
+    const decoded = decodeTransactionFromPayload({ transaction });
+    messageHash = transactionMessageHash(decoded);
+    recentBlockhash = getCompiledTransactionMessageDecoder().decode(
+      decoded.messageBytes
+    ).lifetimeToken;
+  } catch {
+    return "invalid_exact_svm_payload_transaction_could_not_be_decoded";
+  }
+  return {
+    replayKey: computeSvmReplayKey({ network, messageHash }),
+    locator: { v: LOCATOR_VERSION, network, messageHash, recentBlockhash }
+  };
+}
+function messageHashOf(transaction) {
+  try {
+    return transactionMessageHash(decodeTransactionFromPayload({ transaction }));
+  } catch {
+    return void 0;
+  }
+}
+
+export { associatedTokenAccount, inspectSvmPayload, messageHashOf };
+//# sourceMappingURL=svm-KDSPDFJG.js.map
+//# sourceMappingURL=svm-KDSPDFJG.js.map

package/dist/cli/svm-KDSPDFJG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/payments/x402/svm.ts"],"names":[],"mappings":";;;;;AAsBA,IAAM,sBAAA,GAAyB,IAAA;AAE/B,IAAM,wBAAA,GAA2B,8CAAA;AAMjC,eAAsB,sBAAA,CACpB,KAAA,EACA,IAAA,EACA,YAAA,EACiB;AACjB,EAAA,MAAM,UAAU,iBAAA,EAAkB;AAClC,EAAA,MAAM,CAAC,OAAO,CAAA,GAAI,MAAM,wBAAA,CAAyB;AAAA,IAC/C,cAAA,EAAgB,QAAQ,wBAAwB,CAAA;AAAA,IAChD,KAAA,EAAO,CAAC,KAAA,EAAO,YAAA,EAAc,IAAI,CAAA,CAAE,GAAA,CAAI,CAAC,GAAA,KAAQ,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAC,CAAC;AAAA,GAC7E,CAAA;AACD,EAAA,OAAO,OAAA;AACT;AAOO,SAAS,iBAAA,CACd,SACA,OAAA,EAC8F;AAC9F,EAAA,IAAI,CAAC,QAAA,CAAS,OAAO,CAAA,EAAG,OAAO,uCAAA;AAC/B,EAAA,MAAM,WAAA,GAAc,QAAQ,aAAa,CAAA;AACzC,EAAA,IAAI,OAAO,WAAA,KAAgB,QAAA,IAAY,WAAA,CAAY,SAAS,sBAAA,EAAwB;AAClF,IAAA,OAAO,uCAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAA;AACJ,EAAA,IAAI,eAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,4BAAA,CAA6B,EAAE,WAAA,EAAa,CAAA;AAC5D,IAAA,WAAA,GAAc,uBAAuB,OAAO,CAAA;AAC5C,IAAA,eAAA,GAAkB,sCAAqC,CAAE,MAAA;AAAA,MACvD,OAAA,CAAQ;AAAA,KACV,CAAE,aAAA;AAAA,EACJ,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,4DAAA;AAAA,EACT;AACA,EAAA,OAAO;AAAA,IACL,SAAA,EAAW,mBAAA,CAAoB,EAAE,OAAA,EAAS,aAAa,CAAA;AAAA,IACvD,SAAS,EAAE,CAAA,EAAG,eAAA,EAAiB,OAAA,EAAS,aAAa,eAAA;AAAgB,GACvE;AACF;AAMO,SAAS,cAAc,WAAA,EAAyC;AACrE,EAAA,IAAI;AACF,IAAA,OAAO,sBAAA,CAAuB,4BAAA,CAA6B,EAAE,WAAA,EAAa,CAAC,CAAA;AAAA,EAC7E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF","file":"svm-KDSPDFJG.js","sourcesContent":["/**\n * Solana `exact` payload inspection with bounded decoding, replay identity and\n * reconciliation coordinates. The provider loads this module, including its\n * `@x402/svm` and `@solana/kit` imports, when a Solana offer is configured.\n *\n * The facilitator checks the transaction itself: the fee payer, signatures,\n * instruction layout, mint, recipient token account and amount, and a\n * simulation. Its smart-wallet path accepts layouts the gateway could not\n * parse, so the gateway does not read the transfer.\n */\nimport {\n  address,\n  getAddressEncoder,\n  getCompiledTransactionMessageDecoder,\n  getProgramDerivedAddress,\n} from '@solana/kit';\nimport { decodeTransactionFromPayload, transactionMessageHash } from '@x402/svm';\nimport { isRecord } from '../../core/is-record';\nimport { LOCATOR_VERSION } from './locator';\nimport { computeSvmReplayKey } from './replay-key';\n\n// A Solana transaction fits a 1232-byte packet, which is 1644 base64 characters\nconst MAX_TRANSACTION_BASE64 = 1644;\n\nconst ASSOCIATED_TOKEN_PROGRAM = 'ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL';\n\n/**\n * The associated token account of `owner` for `mint`, where the SDK client\n * sends a Solana `exact` payment. Its transaction cannot create the account.\n */\nexport async function associatedTokenAccount(\n  owner: string,\n  mint: string,\n  tokenProgram: string,\n): Promise<string> {\n  const encoder = getAddressEncoder();\n  const [account] = await getProgramDerivedAddress({\n    programAddress: address(ASSOCIATED_TOKEN_PROGRAM),\n    seeds: [owner, tokenProgram, mint].map((key) => encoder.encode(address(key))),\n  });\n  return account;\n}\n\n/**\n * Returns the Solana `exact` replay key and locator, or an SDK refusal reason\n * for a missing, oversized or undecodable transaction. The provider adds the\n * payer from the facilitator's verdict when a usable address is available.\n */\nexport function inspectSvmPayload(\n  payload: unknown,\n  network: string,\n): { readonly replayKey: string; readonly locator: Readonly<Record<string, unknown>> } | string {\n  if (!isRecord(payload)) return 'invalid_exact_svm_payload_transaction';\n  const transaction = payload['transaction'];\n  if (typeof transaction !== 'string' || transaction.length > MAX_TRANSACTION_BASE64) {\n    return 'invalid_exact_svm_payload_transaction';\n  }\n  let messageHash: string;\n  let recentBlockhash: string;\n  try {\n    const decoded = decodeTransactionFromPayload({ transaction });\n    messageHash = transactionMessageHash(decoded);\n    recentBlockhash = getCompiledTransactionMessageDecoder().decode(\n      decoded.messageBytes,\n    ).lifetimeToken;\n  } catch {\n    return 'invalid_exact_svm_payload_transaction_could_not_be_decoded';\n  }\n  return {\n    replayKey: computeSvmReplayKey({ network, messageHash }),\n    locator: { v: LOCATOR_VERSION, network, messageHash, recentBlockhash },\n  };\n}\n\n/**\n * Returns the message hash of base64 transaction bytes using the same decoder\n * as payment inspection, or undefined if decoding or hashing fails\n */\nexport function messageHashOf(transaction: string): string | undefined {\n  try {\n    return transactionMessageHash(decodeTransactionFromPayload({ transaction }));\n  } catch {\n    return undefined;\n  }\n}\n"]}

package/dist/cli/{x402-7WBFZQXV.js → x402-WLYBLODI.js}

@@ -1,10 +1,11 @@
-import { chainIdFromCaip2 } from './chunk-TNMLDPUO.js';
-export { createX402PaymentProvider } from './chunk-TNMLDPUO.js';
-import './chunk-WYOGIANL.js';
-export { SUPPORTED_NETWORK_IDS } from './chunk-OZ4LAWBK.js';
-import './chunk-OSTCU6ZK.js';
-import './chunk-ITWNSS2B.js';
-import { CommerceError } from './chunk-QQ3WY5L3.js';
+import { chainIdFromCaip2 } from './chunk-QA2OPHBF.js';
+export { createX402PaymentProvider } from './chunk-QA2OPHBF.js';
+import './chunk-M7NXVRU5.js';
+import './chunk-4H2QLHQI.js';
+export { SUPPORTED_NETWORK_IDS } from './chunk-5R7DM5LM.js';
+import './chunk-IDY2735M.js';
+import { CommerceError } from './chunk-SYQLJXIU.js';
+import './chunk-663ALDZA.js';
 import './chunk-3M6U7ILB.js';
 import { PaymentRequirementsV2Schema } from '@x402/core/schemas';
 import { getAddress, toHex } from 'viem';
@@ -92,5 +93,5 @@ function randomNonce() {
 }
 
 export { createPaymentProof };
-//# sourceMappingURL=x402-7WBFZQXV.js.map
-//# sourceMappingURL=x402-7WBFZQXV.js.map
+//# sourceMappingURL=x402-WLYBLODI.js.map
+//# sourceMappingURL=x402-WLYBLODI.js.map

package/dist/cli/x402-WLYBLODI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/payments/x402/client.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAkCA,IAAM,YAAA,GAAe,CAAA;AAErB,IAAM,iCAAA,GAAoC;AAAA,EACxC,yBAAA,EAA2B;AAAA,IACzB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU;AAErC,CAAA;AAGA,eAAsB,mBAAmB,OAAA,EAAqD;AAC5F,EAAA,MAAM,YAAA,GAAe,2BAAA,CAA4B,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA;AACtE,EAAA,MAAM,MAAA,GAAS,YAAA,CAAa,KAAA,GAAQ,qBAAqB,CAAA;AACzD,EAAA,IAAI,MAAA,KAAW,MAAA,IAAa,MAAA,KAAW,SAAA,EAAW;AAChD,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,8DAAA,EAAiE,MAAA,CAAO,MAAM,CAAC,CAAA,oCAAA;AAAA,KACjF;AAAA,EACF;AACA,EAAA,IACE,CAAC,YAAA,CAAa,KAAA,IACd,OAAO,aAAa,KAAA,CAAM,MAAM,CAAA,KAAM,QAAA,IACtC,OAAO,YAAA,CAAa,KAAA,CAAM,SAAS,MAAM,QAAA,EACzC;AACA,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,gBAAA,CAAiB,YAAA,CAAa,OAAO,CAAA;AACrD,EAAA,IAAI,YAAY,MAAA,EAAW;AACzB,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,eAAA;AAAA,MACA,CAAA,6BAAA,EAAgC,aAAa,OAAO,CAAA,4EAAA;AAAA,KACtD;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,mBAAA,CAAoB,OAAA,CAAQ,eAAe,CAAA;AAE3D,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,SAAA,EAAW,KAAA,IAAS,WAAA,EAAY;AACtD,EAAA,MAAM,aAAa,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AAG/C,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,SAAA,EAAW,UAAA,IAAc,CAAA;AACpD,EAAA,MAAM,WAAA,GAAc,OAAA,CAAQ,SAAA,EAAW,WAAA,IAAe,aAAa,YAAA,CAAa,iBAAA;AAChF,EAAA,MAAM,KAAK,UAAA,CAAY,OAAA,CAAQ,SAAA,EAAW,KAAA,IAAS,aAAa,KAAuB,CAAA;AACvF,EAAA,MAAM,QAAQ,MAAA,CAAO,OAAA,CAAQ,SAAA,EAAW,KAAA,IAAS,aAAa,MAAM,CAAA;AAEpE,EAAA,MAAM,SAAA,GAAY,MAAM,OAAA,CAAQ,aAAA,CAAc;AAAA,IAC5C,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,YAAA,CAAa,KAAA,CAAM,MAAM,CAAA;AAAA,MAC/B,OAAA,EAAS,YAAA,CAAa,KAAA,CAAM,SAAS,CAAA;AAAA,MACrC,OAAA;AAAA,MACA,iBAAA,EAAmB,UAAA,CAAW,YAAA,CAAa,KAAsB;AAAA,KACnE;AAAA,IACA,KAAA,EAAO,iCAAA;AAAA,IACP,WAAA,EAAa,2BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACP,MAAM,OAAA,CAAQ,OAAA;AAAA,MACd,EAAA;AAAA,MACA,KAAA;AAAA,MACA,UAAA,EAAY,OAAO,UAAU,CAAA;AAAA,MAC7B,WAAA,EAAa,OAAO,WAAW,CAAA;AAAA,MAC/B;AAAA;AACF,GACD,CAAA;AAKD,EAAA,MAAM,OAAA,GAA0B;AAAA,IAC9B,WAAA,EAAa,YAAA;AAAA,IACb,QAAA,EAAU,YAAA;AAAA,IACV,OAAA,EAAS;AAAA,MACP,SAAA;AAAA,MACA,aAAA,EAAe;AAAA,QACb,MAAM,OAAA,CAAQ,OAAA;AAAA,QACd,EAAA;AAAA,QACA,KAAA,EAAO,MAAM,QAAA,EAAS;AAAA,QACtB,UAAA,EAAY,WAAW,QAAA,EAAS;AAAA,QAChC,WAAA,EAAa,YAAY,QAAA,EAAS;AAAA,QAClC;AAAA;AACF;AACF,GACF;AAEA,EAAA,OAAO,MAAA,CAAO,KAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA,EAAG,MAAM,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA;AACvE;AAEA,SAAS,WAAA,GAA6B;AACpC,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAO,MAAM,KAAK,CAAA;AACpB","file":"x402-WLYBLODI.js","sourcesContent":["/**\n * Client-side payment helper: builds and EIP-712-signs an x402 v2 `exact`/EVM\n * authorization on the buyer's side. The demo buyer agent and the test suites\n * use it, and the `/x402` entry exports it. The gateway never calls it and\n * never holds a buyer key.\n *\n * It signs directly rather than through the SDK's `x402Client` because of\n * `overrides`: negative tests need deliberately wrong authorizations that a\n * conforming client will not produce. The x402 settlement E2E suite also\n * settles a payment built by `x402Client` itself to cover interoperability.\n */\n\nimport { PaymentRequirementsV2Schema } from '@x402/core/schemas';\nimport type { PaymentPayload, PaymentRequirements } from '@x402/core/types';\nimport { getAddress, toHex } from 'viem';\nimport { privateKeyToAccount } from 'viem/accounts';\nimport { CommerceError } from '../../core';\nimport { chainIdFromCaip2 } from './chain';\n\nexport interface CreatePaymentProofOptions {\n  /** The buyer's private key. It signs locally and is never sent anywhere */\n  readonly buyerPrivateKey: `0x${string}`;\n  /** One entry from PaymentRequiredEnvelope.payment.accepts, verbatim */\n  readonly accepts: Readonly<Record<string, unknown>>;\n  /** For negative tests only: a wrong amount, recipient, nonce or validity window */\n  readonly overrides?: {\n    readonly value?: string;\n    readonly payTo?: string;\n    readonly nonce?: `0x${string}`;\n    readonly validBefore?: number;\n    readonly validAfter?: number;\n  };\n}\n\nconst X402_VERSION = 2;\n\nconst TRANSFER_WITH_AUTHORIZATION_TYPES = {\n  TransferWithAuthorization: [\n    { name: 'from', type: 'address' },\n    { name: 'to', type: 'address' },\n    { name: 'value', type: 'uint256' },\n    { name: 'validAfter', type: 'uint256' },\n    { name: 'validBefore', type: 'uint256' },\n    { name: 'nonce', type: 'bytes32' },\n  ],\n} as const;\n\n/** Returns the base64 `PAYMENT-SIGNATURE` value to send back to the gateway */\nexport async function createPaymentProof(options: CreatePaymentProofOptions): Promise<string> {\n  const requirements = PaymentRequirementsV2Schema.parse(options.accepts);\n  const method = requirements.extra?.['assetTransferMethod'];\n  if (method !== undefined && method !== 'eip3009') {\n    throw new CommerceError(\n      'INPUT_INVALID',\n      `createPaymentProof: signs EIP-3009 only, and this offer uses \"${String(method)}\"; sign it with the SDK's x402Client`,\n    );\n  }\n  if (\n    !requirements.extra ||\n    typeof requirements.extra['name'] !== 'string' ||\n    typeof requirements.extra['version'] !== 'string'\n  ) {\n    throw new CommerceError(\n      'INPUT_INVALID',\n      'createPaymentProof: payment requirement is missing extra.name/extra.version, so the EIP-712 domain cannot be built',\n    );\n  }\n\n  const chainId = chainIdFromCaip2(requirements.network);\n  if (chainId === undefined) {\n    throw new CommerceError(\n      'INPUT_INVALID',\n      `createPaymentProof: network \"${requirements.network}\" is not a CAIP-2 eip155 identifier, so there is no chain id to sign against`,\n    );\n  }\n\n  const account = privateKeyToAccount(options.buyerPrivateKey);\n\n  const nonce = options.overrides?.nonce ?? randomNonce();\n  const nowSeconds = Math.floor(Date.now() / 1000);\n  // 0, as in the SDK's own v2 client: nothing here wants the authorization\n  // delayed\n  const validAfter = options.overrides?.validAfter ?? 0;\n  const validBefore = options.overrides?.validBefore ?? nowSeconds + requirements.maxTimeoutSeconds;\n  const to = getAddress((options.overrides?.payTo ?? requirements.payTo) as `0x${string}`);\n  const value = BigInt(options.overrides?.value ?? requirements.amount);\n\n  const signature = await account.signTypedData({\n    domain: {\n      name: requirements.extra['name'],\n      version: requirements.extra['version'],\n      chainId,\n      verifyingContract: getAddress(requirements.asset as `0x${string}`),\n    },\n    types: TRANSFER_WITH_AUTHORIZATION_TYPES,\n    primaryType: 'TransferWithAuthorization',\n    message: {\n      from: account.address,\n      to,\n      value,\n      validAfter: BigInt(validAfter),\n      validBefore: BigInt(validBefore),\n      nonce,\n    },\n  });\n\n  // v2 echoes the chosen requirement back as `accepted` so a stateless\n  // facilitator knows which offer was taken. The gateway verifies against its\n  // own copy.\n  const payload: PaymentPayload = {\n    x402Version: X402_VERSION,\n    accepted: requirements as PaymentRequirements,\n    payload: {\n      signature,\n      authorization: {\n        from: account.address,\n        to,\n        value: value.toString(),\n        validAfter: validAfter.toString(),\n        validBefore: validBefore.toString(),\n        nonce,\n      },\n    },\n  };\n\n  return Buffer.from(JSON.stringify(payload), 'utf8').toString('base64');\n}\n\nfunction randomNonce(): `0x${string}` {\n  const bytes = new Uint8Array(32);\n  crypto.getRandomValues(bytes);\n  return toHex(bytes);\n}\n"]}

package/dist/index.d.ts

@@ -1,13 +1,11 @@
 import { Ap2AuthorizationConfig } from './ap2.js';
-import { I as IsoTimestamp, D as DecimalAmount, P as PaymentMethodName, a as CommerceResource, b as PaymentSubmission, B as BackendHandler, A as AdapterDescriptor, c as AdapterHealth, R as ResourceRegistry, d as PaymentProvider, L as Logger, C as Clock, e as IdGenerator } from './runtime-Cl_BLVZV.js';
-export { f as AdapterHealthComponent, g as AuthorizationMethodName, h as BackendMethod, i as DEFAULT_BACKEND_TIMEOUT_MS, J as JsonSchema, N as NOOP_LOGGER, j as PAYMENT_METHOD_NAMES, k as PROTOCOL_NAMES, l as PaymentChallenge, m as PaymentContext, n as PaymentRequirement, o as PaymentResult, p as PaymentSettlementContext, q as PaymentVerificationContext, r as Pricing, s as ProtocolName, t as systemClock } from './runtime-Cl_BLVZV.js';
+import { I as IsoTimestamp, D as DecimalAmount, P as PaymentMethodName, a as AuthorizationRequirement, b as CommerceResource, c as PaymentSubmission, d as AuthorizationSubmission, B as BackendHandler, e as ProtocolName, f as AuthorizationRecord, g as PaymentAttempt, h as CommerceReceipt, i as PaymentAttemptResolution, j as AdapterDescriptor, k as AdapterHealth, R as ResourceRegistry, l as PaymentProvider, A as AuthorizationProvider, L as Logger, C as Clock, m as IdGenerator } from './runtime-Dz2fSO-P.js';
+export { n as AdapterHealthComponent, o as AuthorizationFinalizeContext, p as AuthorizationMethodName, q as AuthorizationVerification, r as AuthorizationVerificationContext, s as BackendMethod, t as DEFAULT_BACKEND_TIMEOUT_MS, J as JsonSchema, N as NOOP_LOGGER, u as PAYMENT_METHOD_NAMES, v as PROTOCOL_NAMES, w as PaymentChallenge, x as PaymentContext, y as PaymentReconciliationContext, z as PaymentReconciliationResult, E as PaymentRequirement, F as PaymentResult, G as PaymentSettlementContext, H as PaymentVerificationContext, K as Pricing, M as RECONCILIATION_METADATA_KEY, O as systemClock } from './runtime-Dz2fSO-P.js';
 import { M as MppNetwork } from './constants-BG22tE8S.js';
 import { X402PaymentFlow, X402FacilitatorConfig } from './x402.js';
 import { C as CustomNetworks } from './networks-DDHYJLcg.js';
-import { a as AuthorizationRequirement, b as AuthorizationSubmission, A as AuthorizationProvider } from './authorization-DjAecwuW.js';
-export { c as AuthorizationFinalizeContext, d as AuthorizationRecord, e as AuthorizationVerification, f as AuthorizationVerificationContext } from './authorization-DjAecwuW.js';
-import { D as DeliveredOutcome, P as PaymentRequiredOutcome, C as CommerceEvent, a as PaymentAttempt, b as CommerceReceipt, E as ExecutionPipeline, c as ProtocolAdapter, H as HttpProtocolAdapter, A as AdapterHttpRoute, d as ProtocolAdapterContext } from './protocol-adapter-C9odYl6l.js';
-export { e as COMMERCE_EVENT_TYPES, f as CanonicalRequest, g as CommerceEventType, h as EventSink, i as ExecutionOutcome, j as isHttpProtocolAdapter } from './protocol-adapter-C9odYl6l.js';
+import { D as DeliveredOutcome, P as PaymentRequiredOutcome, C as CommerceEvent, A as AuthorizationHoldState, a as PersistenceFailure, T as Transaction, b as TransactionState, E as ExecutionPipeline, c as ProtocolAdapter, H as HttpProtocolAdapter, d as AdapterHttpRoute, e as ProtocolAdapterContext } from './protocol-adapter-DEXpdp8m.js';
+export { f as COMMERCE_EVENT_TYPES, g as CanonicalRequest, h as CommerceEventType, i as EventSink, j as ExecutionOutcome, k as TRANSACTION_STATES, l as TransactionFacts, m as isHttpProtocolAdapter, t as transactionState } from './protocol-adapter-DEXpdp8m.js';
 import { FastifyInstance } from 'fastify';
 import { IncomingMessage, ServerResponse } from 'node:http';
 
@@ -154,13 +152,19 @@ interface PaymentRequiredEnvelope {
         readonly amount: DecimalAmount;
         readonly currency: string;
         /**
-         * @deprecated Read each offer's `payTo` in `accepts`. Absent when the
-         * challenge offers several destinations.
+         * @deprecated Read `accepts`: x402 offers use `payTo`; MPP challenges use
+         * `request.recipient`. Omitted for multi-offer x402 challenges.
          */
         readonly destination?: string;
-        /** @deprecated Read each offer's `network` in `accepts` */
+        /**
+         * @deprecated Read `accepts`: x402 offers use `network`; MPP challenges use
+         * the numeric `request.methodDetails.chainId`
+         */
         readonly network?: string;
-        /** @deprecated Read each offer's `asset` in `accepts` */
+        /**
+         * @deprecated Read `accepts`: x402 offers use `asset`; MPP challenges use
+         * `request.currency`
+         */
         readonly asset?: string;
         readonly expiresAt?: IsoTimestamp;
         /** Provider-native requirement objects, passed through verbatim */
@@ -202,6 +206,8 @@ interface DeliverySummary {
     readonly requestId: string;
     readonly resourceId: string;
     readonly receiptId: string;
+    /** `false` marks a failed receipt write; do not treat `receiptId` as proof of persistence */
+    readonly receiptCommitted?: false;
     readonly deliveredAt: IsoTimestamp;
     readonly payment?: {
         readonly status: 'verified' | 'settled' | 'rejected';
@@ -318,6 +324,84 @@ interface PaymentAttemptReservation {
      * until settled.
      */
     readonly reclaimRejected?: boolean;
+    /**
+     * Journal data to write atomically with the reservation. Stores without
+     * journal support ignore it.
+     */
+    readonly transaction?: NewTransaction;
+}
+/**
+ * Data for a journal row opened with a replay reservation. Journal stores
+ * must initialize an included authorization hold as `reserved`. The reservation
+ * supplies the request, resource, provider, replay key, amount, currency and
+ * payee. Experimental: may change in a minor release.
+ */
+interface NewTransaction {
+    readonly id: string;
+    readonly protocol: ProtocolName;
+    readonly network?: string;
+    readonly asset?: string;
+    readonly locator?: Readonly<Record<string, unknown>>;
+    readonly expiresAt?: IsoTimestamp;
+    readonly authorization?: AuthorizationRecord & {
+        readonly reservationId: string;
+    };
+    readonly inputDigest?: string;
+    readonly configDigest: string;
+}
+/**
+ * A journal update after replay reservation. Experimental: may change in a
+ * minor release.
+ */
+type TransactionStep = {
+    readonly transactionId: string;
+    readonly at: IsoTimestamp;
+} & ({
+    readonly kind: 'settling';
+} | {
+    readonly kind: 'hold';
+    readonly hold: AuthorizationHoldState;
+} | {
+    readonly kind: 'backend-dispatched';
+    readonly deadlineAt: IsoTimestamp;
+} | {
+    readonly kind: 'backend-result';
+    readonly status: number;
+    readonly errorCode?: string;
+} | {
+    readonly kind: 'receipt';
+    readonly receiptId: string;
+} | {
+    readonly kind: 'completed';
+    readonly persistenceFailures?: readonly PersistenceFailure[];
+});
+/** Experimental: may change in a minor release */
+interface TransactionListOptions extends ListOptions {
+    /** Opaque cursor from a previous page's `nextCursor` */
+    readonly cursor?: string;
+    readonly state?: TransactionState;
+    /** When true, exclude `delivered` and `payment-failed` states */
+    readonly unresolved?: boolean;
+    /** When true, filter for `reserved` or `uncertain` authorization holds */
+    readonly pendingHold?: boolean;
+}
+/** Transactions in newest-first order. Experimental: may change in a minor release */
+interface TransactionPage {
+    readonly transactions: readonly Transaction[];
+    /**
+     * Continue with this cursor even when filtering returns fewer than `limit`
+     * transactions, including an empty page. Pagination ends when it is absent.
+     */
+    readonly nextCursor?: string;
+}
+/** Experimental: may change in a minor release */
+interface PaymentAttemptResolveRequest {
+    readonly attemptId: string;
+    /** Update only if the attempt still has this status and no resolution */
+    readonly expectedStatus: PaymentAttempt['status'];
+    readonly status: 'settled' | 'rejected';
+    readonly rejectionReason?: string;
+    readonly resolution: PaymentAttemptResolution;
 }
 interface PaymentAttemptUpdate {
     readonly replayKey: string;
@@ -358,6 +442,7 @@ interface ReceiptStore {
      * new reservation.
      */
     reservePaymentAttempt(reservation: PaymentAttemptReservation): Promise<PaymentAttempt>;
+    /** Must not change an attempt that has a resolution; the SQLite store throws `STORAGE_ERROR` */
     updatePaymentAttempt(update: PaymentAttemptUpdate): Promise<void>;
     saveReceipt(receipt: CommerceReceipt): Promise<void>;
     getReceipt(id: string): Promise<CommerceReceipt | undefined>;
@@ -388,6 +473,21 @@ interface ReceiptStore {
     countUncertainPaymentAttempts(): Promise<number>;
     listEvents(options?: ListOptions): Promise<readonly CommerceEvent[]>;
     listPaymentAttempts(options?: PaymentAttemptListOptions): Promise<readonly PaymentAttempt[]>;
+    /**
+     * Record a journal step. Journal methods are optional for compatibility with
+     * stores that do not support the journal. Implementations must also recompute
+     * a transaction's cached state atomically with payment-attempt updates.
+     * Experimental: may change in a minor release.
+     */
+    recordTransactionStep?(step: TransactionStep): Promise<void>;
+    getTransaction?(id: string): Promise<Transaction | undefined>;
+    listTransactions?(options?: TransactionListOptions): Promise<TransactionPage>;
+    getPaymentAttempt?(id: string): Promise<PaymentAttempt | undefined>;
+    /**
+     * Compare-and-set: return `false` without writing if the attempt's status
+     * differs from `expectedStatus` or it already has a resolution
+     */
+    resolvePaymentAttempt?(request: PaymentAttemptResolveRequest): Promise<boolean>;
     readonly descriptor: AdapterDescriptor;
     health(): Promise<AdapterHealth>;
     close(): Promise<void>;
@@ -747,5 +847,5 @@ interface SqliteReceiptStoreOptions {
 }
 declare function createSqliteReceiptStore(options: SqliteReceiptStoreOptions): ReceiptStore;
 
-export { A2A_AGENT_CARD_PATH, A2A_PROTOCOL_VERSION, A2A_SPEC_VERSION, ACP_API_VERSION, ACP_SPEC_VERSION, ACP_WELL_KNOWN_PATH, AUTHORIZATION_HEADER, AUTHORIZATION_INPUT_FIELD, AdapterDescriptor, AdapterHealth, AdapterHttpRoute, AuthorizationProvider, AuthorizationRequirement, AuthorizationSubmission, BackendHandler, COMMERCE_ERROR_CODES, COMMERCE_ERROR_HTTP_STATUS, Clock, CommerceError, CommerceEvent, CommerceReceipt, CommerceResource, DELIVERY_SUMMARY_META_KEY, DecimalAmount, DeliveredOutcome, ExecutionPipeline, HttpProtocolAdapter, IdGenerator, IsoTimestamp, Logger, MAX_AUTHORIZATION_HEADER_BYTES, PAYMENT_HEADER, PAYMENT_INPUT_FIELD, PAYMENT_REQUIRED_HEADER, PAYMENT_RESPONSE_HEADER, PaymentAttempt, PaymentMethodName, PaymentProvider, PaymentRequiredOutcome, PaymentSubmission, ProtocolAdapter, ProtocolAdapterContext, RESERVED_INPUT_FIELDS, RETRYABLE_ERROR_CODES, ResourceRegistry, createA2aAdapter, createAcpAdapter, createGateway, createSqliteReceiptStore, extractReservedInputFields, isCommerceError, isPaymentRequiredEnvelope, loadConfig, parseAuthorizationHeader, parseAuthorizationSubmission, parseConfig, createSqliteReceiptStore as receipts, toCommerceError, toDeliverySummary, toErrorEnvelope, toPaymentRequiredEnvelope };
-export type { A2aAdapterOptions, AcpAdapterOptions, BackendExecutor, BackendRequest, BackendResponse, CommerceErrorCode, CommerceErrorInfo, CommerceErrorOptions, DeliverySummary, ErrorEnvelope, GatewayConfig, GatewayInstance, GatewayOptions, ListOptions, PaymentAttemptListOptions, PaymentAttemptReservation, PaymentAttemptUpdate, PaymentRequiredEnvelope, ReceiptListOptions, ReceiptStore };
+export { A2A_AGENT_CARD_PATH, A2A_PROTOCOL_VERSION, A2A_SPEC_VERSION, ACP_API_VERSION, ACP_SPEC_VERSION, ACP_WELL_KNOWN_PATH, AUTHORIZATION_HEADER, AUTHORIZATION_INPUT_FIELD, AdapterDescriptor, AdapterHealth, AdapterHttpRoute, AuthorizationHoldState, AuthorizationProvider, AuthorizationRecord, AuthorizationRequirement, AuthorizationSubmission, BackendHandler, COMMERCE_ERROR_CODES, COMMERCE_ERROR_HTTP_STATUS, Clock, CommerceError, CommerceEvent, CommerceReceipt, CommerceResource, DELIVERY_SUMMARY_META_KEY, DecimalAmount, DeliveredOutcome, ExecutionPipeline, HttpProtocolAdapter, IdGenerator, IsoTimestamp, Logger, MAX_AUTHORIZATION_HEADER_BYTES, PAYMENT_HEADER, PAYMENT_INPUT_FIELD, PAYMENT_REQUIRED_HEADER, PAYMENT_RESPONSE_HEADER, PaymentAttempt, PaymentAttemptResolution, PaymentMethodName, PaymentProvider, PaymentRequiredOutcome, PaymentSubmission, PersistenceFailure, ProtocolAdapter, ProtocolAdapterContext, ProtocolName, RESERVED_INPUT_FIELDS, RETRYABLE_ERROR_CODES, ResourceRegistry, Transaction, TransactionState, createA2aAdapter, createAcpAdapter, createGateway, createSqliteReceiptStore, extractReservedInputFields, isCommerceError, isPaymentRequiredEnvelope, loadConfig, parseAuthorizationHeader, parseAuthorizationSubmission, parseConfig, createSqliteReceiptStore as receipts, toCommerceError, toDeliverySummary, toErrorEnvelope, toPaymentRequiredEnvelope };
+export type { A2aAdapterOptions, AcpAdapterOptions, BackendExecutor, BackendRequest, BackendResponse, CommerceErrorCode, CommerceErrorInfo, CommerceErrorOptions, DeliverySummary, ErrorEnvelope, GatewayConfig, GatewayInstance, GatewayOptions, ListOptions, NewTransaction, PaymentAttemptListOptions, PaymentAttemptReservation, PaymentAttemptResolveRequest, PaymentAttemptUpdate, PaymentRequiredEnvelope, ReceiptListOptions, ReceiptStore, TransactionListOptions, TransactionPage, TransactionStep };