@envarai/envarpay 0.2.0-alpha.19 → 0.2.0-alpha.20

package/dist/commerce/config.js

@@ -10,11 +10,6 @@ const ajv = new Ajv2020({ allErrors: true, strict: true });
 addFormats(ajv);
 const schema = (name) => JSON.parse(readFileSync(new URL(`../../schemas/${name}`, import.meta.url), 'utf8'));
 const sellerValidator = ajv.compile(schema('envarpay.config.schema.json'));
-const buyerValidator = ajv.compile(schema('buyer-policy.schema.json'));
-const USDC = {
-    'eip155:84532': '0x036cbd53842c5426634e7929541ec2318f3dcf7e',
-    'eip155:8453': '0x833589fcd6edb6e08f4c7c32d4f71b54bda02913',
-};
 export function atomic(value) {
     if (typeof value !== 'string' || !/^[1-9][0-9]{0,77}$/.test(value))
         throw new CommerceError('invalid_amount', 'Use a positive integer string in smallest currency units');
@@ -43,11 +38,7 @@ export function validateUrl(value, allowPrivate = false) {
     return url;
 }
 export function currencyOf(profile) {
-    return profile.adapter === 'x402' ? `${profile.network}/erc20:${profile.asset.toLowerCase()}` : profile.currency;
-}
-/** Stripe documents sandbox Business Profile IDs as profile_test_<opaque id>. */
-export function isStripeProfileId(value) {
-    return typeof value === 'string' && /^profile_(?:test_)?[A-Za-z0-9]{1,120}$/.test(value);
+    return profile.currency;
 }
 function assertJson(value) {
     if (typeof value === 'number' && (!Number.isFinite(value) || (Number.isInteger(value) && !Number.isSafeInteger(value))))
@@ -80,13 +71,6 @@ export function loadCommerceConfig(value) {
         throw new CommerceError('invalid_config', ajv.errorsText(sellerValidator.errors));
     const config = structuredClone(value);
     const services = new Set();
-    for (const profile of Object.values(config.paymentProfiles)) {
-        if (profile.adapter === 'x402') {
-            if (USDC[profile.network] !== profile.asset.toLowerCase() || BigInt(profile.payTo) === 0n)
-                throw new CommerceError('unsupported_payment_profile', 'MVP accepts official Base or Base Sepolia USDC and a nonzero receiving address');
-            validateUrl(profile.facilitatorUrl);
-        }
-    }
     for (const service of config.services) {
         if (services.has(service.id))
             throw new CommerceError('duplicate_service', 'Service IDs must be unique');
@@ -113,9 +97,9 @@ export function loadCommerceConfig(value) {
             const profile = config.paymentProfiles[offer.paymentProfile];
             if (!profile)
                 throw new CommerceError('missing_payment_profile', 'Offer refers to an unknown payment profile');
-            let low, high;
+            let high;
             if (offer.pricing.kind === 'fixed')
-                low = high = atomic(offer.pricing.amount);
+                high = atomic(offer.pricing.amount);
             else {
                 const q = offer.pricing.quantity;
                 if (q.min > q.max)
@@ -128,75 +112,13 @@ export function loadCommerceConfig(value) {
                 }
                 if (node.type !== 'array' || q.min < Number(node.minItems ?? 0) || q.max > Number(node.maxItems ?? 10000))
                     throw new CommerceError('invalid_quantity', 'Quantity must reference a bounded declared array');
-                low = atomic(offer.pricing.unitAmount) * BigInt(q.min);
                 high = atomic(offer.pricing.unitAmount) * BigInt(q.max);
             }
             if (high >= 2n ** 256n)
                 throw new CommerceError('invalid_amount', 'Maximum total exceeds supported integer range');
-            if (profile.adapter === 'mpp' && low < 50n)
-                throw new CommerceError('card_minimum', 'USD card orders must be at least 50 cents');
-            if (profile.adapter === 'envar_balance' && high > 2n ** 63n - 1n)
+            if (high > 2n ** 63n - 1n)
                 throw new CommerceError('balance_amount', 'Envar balance prices must fit signed micro-USD');
         }
     }
     return config;
 }
-export function loadBuyerPolicy(value) {
-    if (!buyerValidator(value))
-        throw new CommerceError('invalid_policy', ajv.errorsText(buyerValidator.errors));
-    const policy = structuredClone(value);
-    const normalizedCurrency = (currency) => {
-        if (currency === 'usd')
-            return currency;
-        const match = /^(eip155:[1-9][0-9]*)\/erc20:(0x[0-9a-fA-F]{40})$/.exec(currency);
-        if (!match || USDC[match[1]] !== match[2].toLowerCase())
-            throw new CommerceError('unsupported_currency', 'Buyer budget must use USD or an official supported USDC asset');
-        return `${match[1]}/erc20:${match[2].toLowerCase()}`;
-    };
-    const limits = new Map();
-    for (const b of policy.budgets) {
-        b.currency = normalizedCurrency(b.currency);
-        if (limits.has(b.currency))
-            throw new CommerceError('duplicate_budget', 'Only one budget per currency is allowed');
-        limits.set(b.currency, atomic(b.maxTotal));
-    }
-    const ids = new Set();
-    for (const peer of policy.peers) {
-        validateUrl(peer.cardUrl);
-        if (peer.mode === 'standard-a2a') {
-            const endpoint = validateUrl(peer.endpoint), card = validateUrl(peer.cardUrl);
-            if (endpoint.origin !== card.origin || endpoint.search || endpoint.href !== peer.endpoint || card.href !== peer.cardUrl)
-                throw new CommerceError('standard_peer_endpoint', 'Review an exact same-origin HTTPS A2A endpoint without query parameters');
-            noExternalRefs(peer.localContract.inputSchema);
-            if (JSON.stringify(peer.localContract.inputSchema).length > 512 * 1024)
-                throw new CommerceError('standard_peer_schema', 'Local input schema exceeds 512 KiB');
-            try {
-                const inputAjv = new Ajv2020({ strict: true });
-                addFormats(inputAjv);
-                inputAjv.compile(peer.localContract.inputSchema);
-            }
-            catch {
-                throw new CommerceError('standard_peer_schema', 'Local input schema must be a valid supported JSON Schema');
-            }
-            if (atomic(peer.localContract.amount) > atomic(peer.maxPerPurchase))
-                throw new CommerceError('purchase_limit', 'Locally reviewed standard-peer price exceeds the per-purchase limit');
-        }
-        if (ids.has(peer.id))
-            throw new CommerceError('duplicate_peer', 'Peer IDs must be unique');
-        ids.add(peer.id);
-        if (peer.protocol === 'free')
-            continue;
-        peer.currency = normalizedCurrency(peer.currency);
-        if (peer.protocol === 'x402') {
-            if (!/^0x[0-9a-fA-F]{40}$/.test(peer.recipient) || BigInt(peer.recipient) === 0n || peer.currency === 'usd')
-                throw new CommerceError('invalid_recipient', 'x402 peers require a nonzero EVM recipient and USDC asset');
-            peer.recipient = peer.recipient.toLowerCase();
-        }
-        else if (peer.currency !== 'usd' || !isStripeProfileId(peer.recipient))
-            throw new CommerceError('invalid_recipient', 'MPP peers require USD and a verified Stripe merchant profile');
-        const limit = limits.get(peer.currency);
-        if (limit === undefined || atomic(peer.maxPerPurchase) > limit)
-            throw new CommerceError('invalid_budget', 'Each peer needs a cumulative budget at least as large as its per-purchase limit');
-    }
-    return policy;
-}

package/dist/commerce/configure.d.ts

@@ -1,3 +1,2 @@
 export declare function refreshLauncher(directory: string): void;
 export declare function upgradeDiscovery(directory: string, home?: string): void;
-export declare function configurePayments(directory: string, file: string): Promise<void>;

package/dist/commerce/configure.js

@@ -1,10 +1,7 @@
 import { readFileSync, writeFileSync, lstatSync, existsSync, renameSync, } from "node:fs";
 import { join, resolve, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
-import { randomBytes } from "node:crypto";
-import { createInterface } from "node:readline/promises";
 import { CommerceError } from "./types.js";
-import { validateUrl, loadCommerceConfig } from "./config.js";
 function read(path) {
     const s = lstatSync(path);
     if (!s.isFile() ||
@@ -79,80 +76,3 @@ export function upgradeDiscovery(directory, home) {
     save(file, credentials);
     console.log(`Discovery enabled. Stop the original service with Ctrl+C, then restart:\n${process.execPath} ${JSON.stringify(join(root, "start.mjs"))}\nInstalled Skills will appear privately in Envar. No service is automatically enabled or published.`);
 }
-export async function configurePayments(directory, file) {
-    if (!process.stdin.isTTY)
-        throw new CommerceError("setup_terminal", "Use an interactive terminal to approve receiving configuration");
-    const root = resolve(directory), bundle = JSON.parse(readFileSync(file, "utf8"));
-    const cfg = read(join(root, "seller.json")), auth = read(join(root, "credentials.json")), sync = read(join(root, "envar.json"));
-    const assets = {
-        "eip155:8453": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
-        "eip155:84532": "0x036cbd53842c5426634e7929541ec2318f3dcf7e",
-    };
-    if (bundle.version !== 1 ||
-        bundle.agentId !== sync.policy.agentId ||
-        !assets[bundle.network] ||
-        !/^0x[0-9a-fA-F]{40}$/.test(bundle.payTo) ||
-        BigInt(bundle.payTo) === 0n)
-        throw new CommerceError("payment_setup", "Download receiving settings for this Agent");
-    const prompt = createInterface({
-        input: process.stdin,
-        output: process.stdout,
-    });
-    const ask = async (text, fallback = "") => (await prompt.question(`${text}${fallback ? ` [${fallback}]` : ""}: `)).trim() || fallback;
-    try {
-        console.log(`Receiving account: ${bundle.payTo}\nNetwork: ${bundle.network === "eip155:8453" ? "Base mainnet" : "Base Sepolia testnet"}\nAsset: official USDC. This enables receiving only; it does not send money or create a signing key.`);
-        if ((await ask("Approve this receiving account? (yes/no)", "no")) !== "yes")
-            return;
-        const facilitator = validateUrl(await ask("x402 facilitator HTTPS URL", bundle.facilitatorUrl ?? ""));
-        const rpc = validateUrl(await ask("Network RPC HTTPS URL", bundle.network === "eip155:8453"
-            ? "https://mainnet.base.org"
-            : "https://sepolia.base.org"));
-        const payer = await ask("Authorized buyer wallet address");
-        if (!/^0x[0-9a-fA-F]{40}$/.test(payer) || BigInt(payer) === 0n)
-            throw new CommerceError("payment_setup", "Use the buyer wallet address for this service access credential");
-        const caller = "buyer-" + payer.slice(2).toLowerCase(), token = randomBytes(36).toString("base64url");
-        auth.callers = { ...auth.callers, [token]: caller };
-        auth.payers = { ...auth.payers, [caller]: payer };
-        auth.rpcUrls = { ...auth.rpcUrls, [bundle.network]: rpc.href };
-        auth.vaultKeyFile ??= join(root, "vault.key");
-        if (!existsSync(auth.vaultKeyFile))
-            writeFileSync(auth.vaultKeyFile, randomBytes(32), {
-                mode: 0o600,
-                flag: "wx",
-            });
-        const profile = {
-            adapter: "x402",
-            scheme: "exact",
-            network: bundle.network,
-            asset: assets[bundle.network],
-            payTo: bundle.payTo,
-            facilitatorUrl: facilitator.href,
-        };
-        loadCommerceConfig({
-            ...cfg,
-            paymentProfiles: { ...cfg.paymentProfiles, "setup-receiving": profile },
-        });
-        auth.receivingProfiles = [
-            ...(auth.receivingProfiles ?? []).filter((p) => p.network !== bundle.network),
-            profile,
-        ];
-        sync.policy.allowedX402 = [
-            ...sync.policy.allowedX402.filter((p) => p.network !== bundle.network),
-            {
-                network: bundle.network,
-                asset: assets[bundle.network],
-                payTo: bundle.payTo.toLowerCase(),
-                facilitatorOrigin: facilitator.origin,
-            },
-        ];
-        const accessFile = join(root, caller + ".token");
-        writeFileSync(accessFile, token + "\n", { mode: 0o600 });
-        save(join(root, "credentials.json"), auth);
-        save(join(root, "envar.json"), sync);
-        refreshLauncher(root);
-        console.log(`Receiving configured for ${cfg.agent.name}. Restart the local service using start.mjs, then refresh Envar.\nBuyer service-access token: ${accessFile}\nGive this file only to the authorized buyer. Original wallets, budgets and ledgers were preserved. No payment performed.`);
-    }
-    finally {
-        prompt.close();
-    }
-}

package/dist/commerce/discovery.d.ts

@@ -16,9 +16,5 @@ export declare class SkillDiscovery {
     readonly path: string;
     constructor(settings: NativeSkillSettings, discovery: DiscoverySettings, origin: string);
     private scan;
-    sync(integration: EnvarIntegration, payments: {
-        network: string;
-        pay_to: string;
-        facilitator_url: string;
-    }[]): Promise<void>;
+    sync(integration: EnvarIntegration): Promise<void>;
 }

package/dist/commerce/discovery.js

@@ -75,7 +75,7 @@ export class SkillDiscovery {
             throw Error("inventory");
         return list;
     }
-    async sync(integration, payments) {
+    async sync(integration) {
         if (Date.now() >= this.nextScan) {
             this.nextScan = Date.now() + 15000;
             try {
@@ -121,9 +121,6 @@ export class SkillDiscovery {
             card_url: this.origin + "/.well-known/agent-card.json",
             state: this.state,
             skills: skills.slice(0, 128),
-            payments: payments
-                .filter((p, i, all) => all.findIndex((x) => JSON.stringify(x) === JSON.stringify(p)) === i)
-                .slice(0, 8),
         });
         for (const request of result) {
             const skill = this.cached.find((s) => s.name === request.name && s.digest === request.digest && s.supported);

package/dist/commerce/envar-balance.js

@@ -1,4 +1,4 @@
-/** Opt-in seller gate for a captured Envar account-balance claim. No x402 or MPP impersonation. */
+/** Seller gate for one captured Envar account-balance claim. */
 import { digest } from './config.js';
 import { CommerceError } from './types.js';
 const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;

package/dist/commerce/envar.d.ts

@@ -9,15 +9,8 @@ export interface EnvarPolicy {
     acceptUpdates: boolean;
     allowedServices: string[];
     allowedUpstreamOrigins: string[];
-    allowedX402: {
-        network: string;
-        asset: string;
-        payTo: string;
-        facilitatorOrigin: string;
-    }[];
-    allowedMppAccounts: string[];
     /** Explicit seller account references allowed to accept platform balance. */
-    allowedBalanceAccounts?: string[];
+    allowedBalanceAccounts: string[];
 }
 export interface EnvarCandidate {
     id: string;
@@ -49,20 +42,6 @@ export interface EnvarIntegrationOptions {
     responseLimitBytes?: number;
     now?: () => number;
 }
-export interface EnvarX402Evidence {
-    network: string;
-    asset: string;
-    payer: string;
-    recipient: string;
-    amount: string;
-    nonce: string;
-    transaction: string;
-}
-export interface EnvarMppEvidence {
-    reference: string;
-    amount: string;
-    currency: string;
-}
 /** Same frozen fingerprint as CommerceStore.registerCatalog; callers must read actual persisted state. */
 export declare function envarServiceProofs(config: CommerceConfig): EnvarApplicationProof["services"];
 export declare class EnvarIntegration {
@@ -110,16 +89,6 @@ export declare class EnvarIntegration {
         orderId: string;
         kind: EnvarStatusKind;
     }): string;
-    enqueueX402Payment(dedupeKey: string, report: {
-        orderId: string;
-        quote: PriceQuote;
-        payment: EnvarX402Evidence;
-    }): string;
-    enqueueMppPayment(dedupeKey: string, report: {
-        orderId: string;
-        quote: PriceQuote;
-        payment: EnvarMppEvidence;
-    }): string;
     queueStatus(): {
         pending: number;
         sent: number;

package/dist/commerce/envar.js

@@ -3,9 +3,9 @@ import { randomUUID } from "node:crypto";
 import { chmodSync, closeSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
 import { join, resolve } from "node:path";
 import { DatabaseSync } from "node:sqlite";
-import { atomic, currencyOf, digest, loadCommerceConfig } from "./config.js";
+import { digest, loadCommerceConfig } from "./config.js";
 import { CommerceError, } from "./types.js";
-const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i, HASH = /^0x[0-9a-f]{64}$/i, ADDRESS = /^0x[0-9a-f]{40}$/i, ID = /^[a-z][a-z0-9-]{0,63}$/;
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i, ID = /^[a-z][a-z0-9-]{0,63}$/;
 const STATUS_KINDS = [
     "seller_started",
     "seller_completed",
@@ -122,20 +122,6 @@ export class EnvarIntegration {
             this.policy.allowedServices.some((id) => !ID.test(id)))
             fail("envar_policy", "Configure valid local Agent and service IDs");
         this.policy.allowedUpstreamOrigins = this.policy.allowedUpstreamOrigins.map((url) => origin(url, true));
-        this.policy.allowedX402 = this.policy.allowedX402.map((entry) => {
-            if (!/^eip155:[1-9][0-9]*$/.test(entry.network) ||
-                !ADDRESS.test(entry.asset) ||
-                !ADDRESS.test(entry.payTo))
-                fail("envar_policy", "Configure explicit receiving identities");
-            return {
-                ...entry,
-                asset: entry.asset.toLowerCase(),
-                payTo: entry.payTo.toLowerCase(),
-                facilitatorOrigin: origin(entry.facilitatorOrigin),
-            };
-        });
-        if (this.policy.allowedMppAccounts.some((id) => !ID.test(id)))
-            fail("envar_policy", "Configure explicit merchant account references");
         this.policy.allowedBalanceAccounts ??= [];
         if (this.policy.allowedBalanceAccounts.some((id) => !ID.test(id)))
             fail("envar_policy", "Configure explicit balance account references");
@@ -357,16 +343,7 @@ export class EnvarIntegration {
         if (!this.policy.allowedUpstreamOrigins.includes(new URL(service.execution.cardUrl).origin))
             fail("envar_upstream_denied", "Upstream origin is outside the local update grant");
         for (const profile of Object.values(config.paymentProfiles)) {
-            if (profile.adapter === "x402") {
-                if (!this.policy.allowedX402.some((a) => a.network === profile.network &&
-                    a.asset === profile.asset.toLowerCase() &&
-                    a.payTo === profile.payTo.toLowerCase() &&
-                    a.facilitatorOrigin === new URL(profile.facilitatorUrl).origin))
-                    fail("envar_recipient_denied", "Receiving identity or facilitator is outside the local update grant");
-            }
-            else if (profile.adapter === "mpp" && !this.policy.allowedMppAccounts.includes(profile.accountRef))
-                fail("envar_merchant_denied", "Merchant account is outside the local update grant");
-            else if (profile.adapter === "envar_balance" && !this.policy.allowedBalanceAccounts.includes(profile.accountRef))
+            if (!this.policy.allowedBalanceAccounts.includes(profile.accountRef))
                 fail("envar_balance_denied", "Balance receiving account is outside the local update grant");
         }
         const prior = this.db
@@ -557,62 +534,6 @@ export class EnvarIntegration {
             payload: {},
         });
     }
-    enqueueX402Payment(dedupeKey, report) {
-        uuid(report.orderId);
-        const { quote, payment: p } = report, profile = quote.paymentProfile;
-        if (!profile ||
-            profile.adapter !== "x402" ||
-            p.network !== profile.network ||
-            p.asset.toLowerCase() !== profile.asset.toLowerCase() ||
-            p.recipient.toLowerCase() !== profile.payTo.toLowerCase() ||
-            p.amount !== quote.amount ||
-            quote.currency !== currencyOf(profile) ||
-            quote.recipient?.toLowerCase() !== profile.payTo.toLowerCase() ||
-            !ADDRESS.test(p.payer) ||
-            !HASH.test(p.nonce) ||
-            !HASH.test(p.transaction))
-            fail("envar_payment_binding", "Report the original x402 transaction matching the frozen quote");
-        atomic(p.amount);
-        return this.enqueue(`report:${dedupeKey}`, "report", {
-            order_id: report.orderId,
-            kind: "payment_observed",
-            payload: {
-                protocol: "x402",
-                payment: {
-                    network: p.network,
-                    asset: p.asset.toLowerCase(),
-                    payer: p.payer.toLowerCase(),
-                    recipient: p.recipient.toLowerCase(),
-                    amount: p.amount,
-                    nonce: p.nonce.toLowerCase(),
-                    transaction: p.transaction.toLowerCase(),
-                },
-            },
-        });
-    }
-    enqueueMppPayment(dedupeKey, report) {
-        uuid(report.orderId);
-        const { quote, payment: p } = report;
-        if (quote.paymentProfile?.adapter !== "mpp" ||
-            p.amount !== quote.amount ||
-            p.currency !== quote.currency ||
-            p.currency !== "usd" ||
-            !/^pi_[A-Za-z0-9]{1,240}$/.test(p.reference))
-            fail("envar_payment_binding", "Report the original Stripe PaymentIntent matching the frozen quote");
-        atomic(p.amount);
-        return this.enqueue(`report:${dedupeKey}`, "report", {
-            order_id: report.orderId,
-            kind: "payment_observed",
-            payload: {
-                protocol: "mpp",
-                payment: {
-                    reference: p.reference,
-                    amount: p.amount,
-                    currency: p.currency,
-                },
-            },
-        });
-    }
     queueStatus() {
         this.open();
         const count = (state) => Number(this.db

package/dist/commerce/operations.d.ts

@@ -1,8 +1,7 @@
 export { inspectLocalAlerts, type LocalAlertOptions } from './alerts.js';
 export type InspectionView = 'attention' | 'refund-review';
-/** Local owner-only diagnostics: never opens a signer, vault, provider or network. */
 export declare function inspectLedger(path: string, after?: number, limit?: number, view?: InspectionView): {
-    role: string;
+    role: "seller";
     view: InspectionView;
     total: number;
     attentionCount: number;

package/dist/commerce/operations.js

@@ -1,37 +1,34 @@
+/** Owner-only, read-only inspection of original seller orders. */
 import { DatabaseSync } from 'node:sqlite';
 import { lstatSync } from 'node:fs';
 import { CommerceError } from './types.js';
 export { inspectLocalAlerts } from './alerts.js';
-/** Local owner-only diagnostics: never opens a signer, vault, provider or network. */
+const ATTENTION = "payment_state IN ('settling','unknown') OR execution_state IN ('dispatching','unknown')";
+const REFUND_REVIEW = "payment_state='confirmed' AND execution_state='failed'";
 export function inspectLedger(path, after = 0, limit = 100, view = 'attention') {
     const stat = lstatSync(path);
     if (!stat.isFile() || stat.isSymbolicLink() || (stat.mode & 0o077) !== 0 || (process.getuid && stat.uid !== process.getuid()))
         throw new CommerceError('private_file', 'Inspect an existing ledger owned only by the current user');
     if (!Number.isSafeInteger(after) || after < 0 || !Number.isSafeInteger(limit) || limit < 1 || limit > 100)
-        throw new CommerceError('inspection_cursor', 'Use a nonnegative row cursor and a limit from1 to100');
+        throw new CommerceError('inspection_cursor', 'Use a nonnegative row cursor and a limit from 1 to 100');
     if (!['attention', 'refund-review'].includes(view))
         throw new CommerceError('inspection_view', 'Use attention or refund-review inspection');
     const db = new DatabaseSync(path, { readOnly: true });
     try {
         db.exec('PRAGMA query_only=ON; PRAGMA busy_timeout=1000');
-        const names = new Set(db.prepare("SELECT name FROM sqlite_master WHERE type='table'").all().map(row => row.name));
-        const role = names.has('buyer_purchases') ? 'buyer' : names.has('commerce_orders') ? 'seller' : null;
-        if (!role)
-            throw new CommerceError('store_version', 'Unrecognized commerce ledger');
-        const meta = role === 'buyer' ? 'buyer_meta' : 'commerce_meta', version = role === 'buyer' ? 1 : 2;
-        if (db.prepare(`SELECT version FROM ${meta}`).get()?.version !== version)
-            throw new CommerceError('store_version', 'Unsupported commerce ledger version');
-        const table = role === 'buyer' ? 'buyer_purchases' : 'commerce_orders';
-        const total = Number(db.prepare(`SELECT COUNT(*) AS n FROM ${table}`).get().n);
-        const attention = role === 'buyer' ? "json_extract(record_json,'$.state') IN ('signing','submitted','unknown') OR json_extract(record_json,'$.paymentState') IN ('reserved','unknown') OR json_extract(record_json,'$.executionState')='unknown'" : "payment_state IN ('settling','unknown') OR execution_state IN ('dispatching','unknown')";
-        const refundReview = role === 'buyer' ? "json_extract(record_json,'$.paymentState')='confirmed' AND json_extract(record_json,'$.executionState')='failed'" : "payment_state='confirmed' AND execution_state='failed'";
-        const filter = view === 'refund-review' ? refundReview : attention;
-        const selected = role === 'buyer' ? "rowid AS cursor,id,json_extract(record_json,'$.paymentState') AS payment_state,json_extract(record_json,'$.executionState') AS execution_state,json_extract(record_json,'$.task.id') AS task_id" : "rowid AS cursor,id,payment_state,execution_state,task_id";
-        const rows = db.prepare(`SELECT ${selected} FROM ${table} WHERE rowid>? AND (${filter}) ORDER BY rowid LIMIT ?`).all(after, limit + 1);
-        const page = rows.slice(0, limit).map(row => ({ cursor: Number(row.cursor), id: String(row.id), paymentState: String(row.payment_state), executionState: String(row.execution_state), taskId: typeof row.task_id === 'string' ? row.task_id : null, ...(view === 'refund-review' ? { reason: 'confirmed_payment_failed_execution' } : {}) }));
-        const attentionCount = Number(db.prepare(`SELECT COUNT(*) AS n FROM ${table} WHERE ${attention}`).get().n);
-        const refundReviewCount = Number(db.prepare(`SELECT COUNT(*) AS n FROM ${table} WHERE ${refundReview}`).get().n);
-        return { role, view, total, attentionCount, refundReviewCount, items: page, nextCursor: page.at(-1)?.cursor ?? after, hasMore: rows.length > limit, paymentPerformed: false, refundPerformed: false };
+        if (db.prepare('SELECT version FROM commerce_meta').get()?.version !== 2)
+            throw new CommerceError('store_version', 'Unsupported seller ledger version');
+        const total = Number(db.prepare('SELECT COUNT(*) AS n FROM commerce_orders').get().n);
+        const filter = view === 'refund-review' ? REFUND_REVIEW : ATTENTION;
+        const rows = db.prepare(`SELECT rowid AS cursor,id,payment_state,execution_state,task_id FROM commerce_orders WHERE rowid>? AND (${filter}) ORDER BY rowid LIMIT ?`).all(after, limit + 1);
+        const page = rows.slice(0, limit).map(row => ({
+            cursor: Number(row.cursor), id: String(row.id), paymentState: String(row.payment_state),
+            executionState: String(row.execution_state), taskId: typeof row.task_id === 'string' ? row.task_id : null,
+            ...(view === 'refund-review' ? { reason: 'confirmed_payment_failed_execution' } : {}),
+        }));
+        const attentionCount = Number(db.prepare(`SELECT COUNT(*) AS n FROM commerce_orders WHERE ${ATTENTION}`).get().n);
+        const refundReviewCount = Number(db.prepare(`SELECT COUNT(*) AS n FROM commerce_orders WHERE ${REFUND_REVIEW}`).get().n);
+        return { role: 'seller', view, total, attentionCount, refundReviewCount, items: page, nextCursor: page.at(-1)?.cursor ?? after, hasMore: rows.length > limit, paymentPerformed: false, refundPerformed: false };
     }
     finally {
         db.close();

package/dist/commerce/pricing.d.ts

@@ -7,6 +7,5 @@ export declare function buildQuote(config: CommerceConfig, args: {
     input: Input;
     now?: Date;
     ttlSeconds?: number;
-    stripeRecipient?: string;
 }): Readonly<PriceQuote>;
 export declare function assertQuoteRequest(quote: Readonly<PriceQuote>, caller: string, messageId: string, input: Input, now?: Date): void;

package/dist/commerce/pricing.js

@@ -33,9 +33,7 @@ export function buildQuote(config, args) {
     if (amount >= 2n ** 256n)
         throw new CommerceError('invalid_amount', 'Quoted amount is too large');
     const profile = offer.paymentProfile ? config.paymentProfiles[offer.paymentProfile] : null;
-    const recipient = profile?.adapter === 'x402' ? profile.payTo : profile?.adapter === 'envar_balance' ? profile.accountRef : profile ? args.stripeRecipient : null;
-    if (profile?.adapter === 'mpp' && !recipient)
-        throw new CommerceError('merchant_not_ready', 'Resolve and verify the Stripe merchant before quoting');
+    const recipient = profile?.accountRef ?? null;
     const now = args.now ?? new Date();
     const ttl = args.ttlSeconds ?? 600;
     if (!Number.isInteger(ttl) || ttl < 1 || ttl > 3600 || !Number.isFinite(now.getTime()))

package/dist/commerce/runtime.d.ts

@@ -5,8 +5,6 @@ export * from './upstream.js';
 export * from './skill-gate.js';
 export * from './native-skills.js';
 export * from './http.js';
-export * from './x402.js';
 export * from './envar-balance.js';
 export * from './vault.js';
-export * from './chain.js';
 export * from './external-agent.js';

package/dist/commerce/runtime.js

@@ -5,8 +5,6 @@ export * from './upstream.js';
 export * from './skill-gate.js';
 export * from './native-skills.js';
 export * from './http.js';
-export * from './x402.js';
 export * from './envar-balance.js';
 export * from './vault.js';
-export * from './chain.js';
 export * from './external-agent.js';

package/dist/commerce/server.d.ts

@@ -23,7 +23,6 @@ export interface CommerceServerOptions {
             headers: Record<string, string>;
         }>;
     };
-    stripeRecipientFor?: (accountRef: string) => string | undefined;
     ownershipChallenges?: Readonly<Record<string, string>>;
     onError?: (code: string, orderId?: string) => void;
 }

package/dist/commerce/server.js

@@ -233,9 +233,8 @@ export class CommerceServer {
         const frozen = this.store.catalogHistory().find(entry => entry.service.id === service.id && entry.service.revision === service.revision);
         if (!frozen)
             throw new CommerceError('unknown_revision', 'Service revision is not registered');
-        const config = { ...this.currentConfig, paymentProfiles: frozen.profiles, services: [frozen.service] }, offer = frozen.service.offers.find(o => o.id === offerId);
-        const profile = offer.paymentProfile ? frozen.profiles[offer.paymentProfile] : undefined;
-        return buildQuote(config, { serviceId: service.id, offerId, caller, messageId, input, ...(profile?.adapter === 'mpp' ? { stripeRecipient: this.options.stripeRecipientFor?.(profile.accountRef) } : {}) });
+        const config = { ...this.currentConfig, paymentProfiles: frozen.profiles, services: [frozen.service] };
+        return buildQuote(config, { serviceId: service.id, offerId, caller, messageId, input });
     }
     async handle(request) {
         const url = new URL(request.url);

package/dist/commerce/setup.js

@@ -296,9 +296,11 @@ export async function setupAgent(options) {
             services: [],
         });
         privateJson(join(staging, "seller.json"), config);
+        writeFileSync(join(staging, "vault.key"), randomBytes(32), { mode: 0o600, flag: "wx" });
         privateJson(join(staging, "credentials.json"), {
             callers: { [access]: "owner" },
             upstreams: {},
+            vaultKeyFile: join(directory, "vault.key"),
             skills: {
                 framework,
                 ...(probe.command ? { command: probe.command } : {}),
@@ -328,8 +330,7 @@ export async function setupAgent(options) {
                 acceptUpdates: true,
                 allowedServices: selected,
                 allowedUpstreamOrigins: [origin],
-                allowedX402: [],
-                allowedMppAccounts: [],
+                allowedBalanceAccounts: ["envar"],
             },
             stateDirectory: join(directory, "envar-state"),
             configDirectory: join(directory, "envar-configs"),
@@ -363,7 +364,7 @@ export async function setupAgent(options) {
         ];
         const start = join(directory, "start.mjs");
         writeFileSync(join(staging, "start.mjs"), `import {spawn} from 'node:child_process';\nconst child=spawn(${JSON.stringify(process.execPath)},${JSON.stringify(args)},{stdio:'inherit'});\nfor(const signal of ['SIGTERM','SIGINT'])process.on(signal,()=>child.kill(signal));\nchild.on('exit',code=>process.exit(code??1));\n`, { mode: 0o700, flag: "wx" });
-        writeFileSync(join(staging, "README.md"), `# ${bundle.agentName}\n\nStart: node ${JSON.stringify(start)}\n\nKeep the terminal, Hermes, and HTTPS tunnel running. Import connection.json in the Envar setup page, then check the connection. Choose a skill and save a free service. Request publication; this process applies the selected service automatically. Return to Envar and check/publish.\n\nOnly free service updates are authorized. Receiving and payment setup is separate. Platform token expires ${bundle.expiresAt}. Keep the original files and ledger when restarting.\n`, { mode: 0o600, flag: "wx" });
+        writeFileSync(join(staging, "README.md"), `# ${bundle.agentName}\n\n1. Start: node ${JSON.stringify(start)}\n2. Keep this process, your Agent and the HTTPS tunnel running.\n3. In Envar, import connection.json and select Check connection.\n4. Choose a Skill. You can publish it free immediately.\n5. For a paid Skill, request Envar balance receiving approval in Envar, then enter the USD price. This setup already allows the local receiving reference \"envar\"; there is no chain wallet or payment protocol to configure.\n6. Select Test service, then Publish after Envar confirms the live unpaid quote.\n\nThe Envar Agent token expires ${bundle.expiresAt}. Keep the original files and ledger when restarting. Never share credentials.json, envar.token or vault.key.\n`, { mode: 0o600, flag: "wx" });
         renameSync(staging, directory);
         staging = undefined;
         output(`\nReady. Start the local service:\n${process.execPath} ${JSON.stringify(start)}\n\nThen import this connection file in Envar:\n${join(directory, "connection.json")}\n\nKeep the service and HTTPS tunnel online. No task or payment was performed.`);