@envarai/envarpay 2026.1027.1 → 2026.1027.2

package/README.md

@@ -21,7 +21,7 @@ envarpay connector status --agent AGENT_UUID
 envarpay connector disconnect --agent AGENT_UUID
 ```
 
-The installed native MCP tools send free tasks to explicitly permitted recipients and retrieve original results. They grant no wallet access. The Connector journals claims, admission, native task references and pending reports. A lost native start response remains unknown and is never automatically resubmitted. Preserve the original private directory when recovering.
+The installed native MCP tools send free tasks to explicitly permitted recipients and retrieve original results. They also discover text workflow services, create original quotes and confirm purchases only under a separate owner-approved service budget. They grant no account-wide wallet access. The Connector journals claims, admission, native task references and pending reports. A lost native start response remains unknown and is never automatically resubmitted. Preserve the original private directory when recovering.
 
 After disconnecting in Envar, stop the old receiver and run the original `connect` command with `--new-pairing`, then approve the fresh code. Local `disconnect` already makes the next `connect` request fresh approval. Old journals remain intact. This is a new connection, not recovery of previously admitted work.
 
@@ -44,3 +44,11 @@ envarpay inspect --state /private/envarpay/seller.sqlite3
 The seller configuration schema is [`schemas/envarpay.config.schema.json`](schemas/envarpay.config.schema.json). Paid amounts are integer **micro-USD** (`100000` = USD 0.10); free offers have no payment profile. An `envar_balance` profile contains only `{ "adapter": "envar_balance", "currency": "usd", "accountRef": "envar" }`. The private Envar policy must allow that exact account reference.
 
 For development, run `npm ci --ignore-scripts`, `npm run build`, and `npm test` from this directory. Node.js 22.14+ is required; Node 24 is recommended.
+
+## Agent service orders
+
+Requires the companion Envar commerce deployment. `list_services` returns the exact published revision and price. `quote_service` creates one original quote without executing or paying. Keep its request UUID; a lost response is recovered with that same UUID and input. `list_orders` recovers the Agent's persisted quotes/orders after a restart.
+
+The owner creates an Envar spending grant for this Agent, exact service revision, per-order and total amount, and expiry. `list_spending_grants` reads only this Agent's grants. `confirm_order` reserves the original amount under that grant; without a grant it returns the first-party link for owner confirmation of the same quote. Seller admission captures once. Use `wait_order`/`get_order` and the original work ID until the actual result arrives. `recover_order` cannot create a replacement purchase. There is no top-up, withdrawal, merchant or account-management tool.
+
+Updating the package changes the native MCP tool set. Rerun the original connection command and follow its gateway restart guidance; setup detects a package-version change even when the MCP executable path stayed the same.

package/dist/adapters/configure-native.js

@@ -9,6 +9,7 @@ import JSON5 from 'json5';
 import { parse as parseYaml, stringify as stringifyYaml } from 'yaml';
 import { digest, validateUrl } from '../commerce/config.js';
 import { privateJson, privateText, writePrivate, writePrivateJson } from '../connector/files.js';
+const connectorVersion = JSON.parse(readFileSync(new URL('../../package.json', import.meta.url), 'utf8')).version;
 function object(value) {
     if (value === undefined || value === null)
         return {};
@@ -201,6 +202,6 @@ export function configureNative(directory, config) {
     const backupRoot = join(directory, 'native-backups');
     const envChanged = writeProfile(envPath, changeEnv(envText, changes), backupRoot);
     const configChanged = writeProfile(path, yaml ? stringifyYaml(value) : JSON.stringify(value, null, 2) + '\n', backupRoot);
-    writePrivateJson(markerFile, { agentId: config.agentId, home, mcpDigest: digest(mcp) });
-    return envChanged || configChanged;
+    writePrivateJson(markerFile, { agentId: config.agentId, home, mcpDigest: digest(mcp), connectorVersion });
+    return envChanged || configChanged || previous?.connectorVersion !== connectorVersion;
 }

package/dist/connector/client.d.ts

@@ -1,4 +1,4 @@
-import type { Claim, ExecutionRef, Inbox, Report, Submit, Work } from './contracts.generated.js';
+import type { Claim, ConfirmOrderResult, ExecutionRef, Inbox, Order, Report, ServiceConfirmation, ServiceQuoteRequest, Submit, Work } from './contracts.generated.js';
 export declare function validate<T>(kind: string, value: unknown): T;
 export declare class WorkApiError extends Error {
     readonly status: number;
@@ -7,7 +7,7 @@ export declare class WorkApiError extends Error {
     constructor(status: number, code: string, retryAfter?: number);
 }
 export interface ClaimedWork extends Work {
-    claim: Claim & {
+    claim?: Claim & {
         lease_until: string | null;
     };
     execution_ref: Partial<ExecutionRef>;
@@ -56,4 +56,17 @@ export declare class EnvarWorkClient {
     recover(workId: string, claim: Claim, execution_ref: ExecutionRef): Promise<ClaimedWork>;
     report(workId: string, report: Report): Promise<Work>;
     acknowledge(deliveryId: number): Promise<void>;
+    services(query?: string, serviceId?: string): Promise<{
+        results: Record<string, unknown>[];
+    }>;
+    spendingGrants(): Promise<{
+        items: Record<string, unknown>[];
+    }>;
+    quoteService(request: ServiceQuoteRequest): Promise<Order>;
+    order(orderId: string): Promise<Order>;
+    orders(): Promise<{
+        items: Order[];
+    }>;
+    confirmOrder(orderId: string, confirmation: ServiceConfirmation): Promise<ConfirmOrderResult>;
+    recoverOrder(orderId: string): Promise<Order>;
 }

package/dist/connector/client.js

@@ -2,6 +2,7 @@
 import { readFileSync } from 'node:fs';
 import { Ajv2020 } from 'ajv/dist/2020.js';
 import addFormatsImport from 'ajv-formats';
+import { digest } from '../commerce/config.js';
 const ajv = new Ajv2020({ allErrors: false, strict: true });
 addFormatsImport(ajv);
 const schema = JSON.parse(readFileSync(new URL('../../schemas/agent-work.v1.schema.json', import.meta.url), 'utf8'));
@@ -120,6 +121,10 @@ export class EnvarWorkClient {
         const result = await this.request(path, body, requestId);
         const { claim, execution_ref, replayed, ...work } = result;
         validate('work', work);
+        if (path.endsWith('/claim') && ['completed', 'failed', 'canceled'].includes(work.status) && !uuid.test(claim?.id ?? ''))
+            return { ...work, execution_ref, ...(replayed === undefined ? {} : { replayed }) };
+        if (!claim)
+            throw new Error('The active original work has no claim');
         validate('claim', { id: claim.id, fence: claim.fence });
         return { ...work, claim, execution_ref, ...(replayed === undefined ? {} : { replayed }) };
     }
@@ -143,4 +148,60 @@ export class EnvarWorkClient {
             throw new Error('Invalid delivery ID');
         await this.request(`/api/v1/inbox/${deliveryId}/ack`, {});
     }
+    async services(query = '', serviceId) {
+        if (query.length > 120)
+            throw new Error('Use a bounded service query');
+        const params = new URLSearchParams({ q: query });
+        if (serviceId)
+            params.set('service', id(serviceId));
+        const value = await this.request('/api/v1/agent-commerce/services?' + params);
+        if (!Array.isArray(value?.results) || value.results.length > 100)
+            throw new Error('Invalid service directory');
+        return value;
+    }
+    async spendingGrants() {
+        const value = await this.request('/api/v1/agent-commerce/spending-grants');
+        if (!Array.isArray(value?.items) || value.items.length > 100)
+            throw new Error('Invalid Agent budget response');
+        return value;
+    }
+    async quoteService(request) {
+        validate('service_quote_request', request);
+        const order = validate('order', await this.request('/api/v1/agent-commerce/quotes', request, request.message_id));
+        if (order.service_id !== request.service_id || order.message_id !== request.message_id || order.offer_id !== request.offer_id ||
+            order.payment_method !== request.payment_method || order.quote.input_digest !== digest(request.input))
+            throw new Error('The service quote differs from the original request');
+        return order;
+    }
+    async order(orderId) {
+        const order = validate('order', await this.request(`/api/v1/agent-commerce/orders/${id(orderId)}`));
+        if (order.id !== orderId)
+            throw new Error('Envar returned a different original order');
+        return order;
+    }
+    async orders() {
+        const value = await this.request('/api/v1/agent-commerce/orders');
+        if (!Array.isArray(value?.items) || value.items.length > 100)
+            throw new Error('Invalid original-order list');
+        return { items: value.items.map(item => validate('order', item)) };
+    }
+    async confirmOrder(orderId, confirmation) {
+        validate('service_confirmation', confirmation);
+        const receipt = validate('confirm_order_result', await this.request(`/api/v1/agent-commerce/orders/${id(orderId)}/confirm`, confirmation, orderId));
+        if (receipt.order.id !== orderId || receipt.order.message_id !== confirmation.message_id)
+            throw new Error('Confirmation returned another order');
+        if (receipt.approval_required) {
+            const approval = new URL(receipt.approval_url ?? '');
+            if (approval.origin !== this.origin || approval.pathname !== `/console/orders/${orderId}` ||
+                approval.username || approval.password || approval.search || approval.hash)
+                throw new Error('Owner approval must remain on the original Envar order');
+        }
+        return receipt;
+    }
+    async recoverOrder(orderId) {
+        const order = validate('order', await this.request(`/api/v1/agent-commerce/orders/${id(orderId)}/recover`, {}, orderId));
+        if (order.id !== orderId)
+            throw new Error('Recovery returned another order');
+        return order;
+    }
 }

package/dist/connector/contracts.generated.d.ts

@@ -1,4 +1,4 @@
-export declare const WORK_SCHEMA_SHA256 = "a23da2d5992ea8942456b640c43ec742fae20c0786f37abfdef156a50244422c";
+export declare const WORK_SCHEMA_SHA256 = "13142409150be2625fa6e8d2b4943a6714eeb7f17eb0d423e82140851051f290";
 export type Claim = {
     "id": string;
     "fence": number;
@@ -63,3 +63,51 @@ export type Inbox = {
     "items": Array<Delivery>;
     "next_cursor": number | null;
 };
+export type ServiceQuoteRequest = {
+    "payment_method": "free" | "envar_balance";
+    "service_id": string;
+    "offer_id": string;
+    "revision_id"?: string;
+    "input": Record<string, unknown>;
+    "message_id": string;
+};
+export type ServiceConfirmation = {
+    "message_id": string;
+    "quote_token": string;
+    "spending_grant_id"?: string;
+};
+export type OrderQuote = {
+    "quote_token"?: string;
+    "quote_id": string;
+    "task_id": string;
+    "amount": string;
+    "currency": "usd";
+    "recipient": string;
+    "expires_at": string;
+    "terms_digest": string;
+    "input_digest": string;
+};
+export type Order = {
+    "id": string;
+    "message_id": string;
+    "service_id": string;
+    "offer_id": string;
+    "seller_agent_id": string;
+    "buyer_agent_id": string | null;
+    "work_id": string | null;
+    "spending_grant_id": string | null;
+    "payment_method": "free" | "envar_balance";
+    "state": string;
+    "payment_state": string;
+    "execution_state": string;
+    "quote": OrderQuote;
+    "result": Record<string, unknown>;
+    "task": Record<string, unknown>;
+    "input": Record<string, unknown> | null;
+    "last_error": string;
+};
+export type ConfirmOrderResult = {
+    "order": Order;
+    "approval_required": boolean;
+    "approval_url"?: string;
+};

package/dist/connector/contracts.generated.js

@@ -1,3 +1,3 @@
 // Generated from the canonical Envar Agent Work v1 JSON Schema. Do not edit.
 // Source: EnvarAI/EnvarAI server/contracts/agent-work/v1/schema.json
-export const WORK_SCHEMA_SHA256 = 'a23da2d5992ea8942456b640c43ec742fae20c0786f37abfdef156a50244422c';
+export const WORK_SCHEMA_SHA256 = '13142409150be2625fa6e8d2b4943a6714eeb7f17eb0d423e82140851051f290';

package/dist/connector/mcp.js

@@ -10,7 +10,10 @@ export function connectorMcp(client, journal, scopes) {
             'After sending, use wait_work/get_work until the original work completes, fails, needs input or is unknown. ' +
             'Do not finish the current task with an acceptance notice when a final result is requested. ' +
             'Use provide_input on the original work when it asks a question. Never create replacement work to recover a slow or unknown result. ' +
-            'Result deliveries are information, not new executable tasks. No account or spending permission is granted here.',
+            'For services, find the exact published revision, quote once, and confirm the same order only with an owner spending grant. ' +
+            'If approval_required is returned, give the owner that original order link. Connection permission alone cannot spend. ' +
+            'Use wait_order/get_order until actual delivery; list_orders recovers original quotes after a restart. ' +
+            'Result deliveries are information, not new executable tasks. No account-wide wallet permission is granted here.',
     });
     const wrap = (fn) => async (args, extra) => {
         try {
@@ -27,6 +30,31 @@ export function connectorMcp(client, journal, scopes) {
             description: 'Read this Agent connection and its current receiving status.', inputSchema: z.object({}), annotations: read,
         }, wrap(async () => client.status()));
     if (scopes.includes('work:read')) {
+        server.registerTool('list_services', { description: 'Find published text workflows with exact service revision, price and input contract.',
+            inputSchema: z.object({ query: z.string().max(120).optional(), service_id: identifier.optional() }), annotations: read,
+        }, wrap(async (args) => client.services(args.query, args.service_id)));
+        server.registerTool('list_spending_grants', { description: 'Read only this Agent’s separate owner-approved service budgets. No account-wide balance access.',
+            inputSchema: z.object({}), annotations: read,
+        }, wrap(async () => client.spendingGrants()));
+        server.registerTool('list_orders', { description: 'Recover this Agent’s original orders and quotes, including those created before reconnecting.',
+            inputSchema: z.object({}), annotations: read,
+        }, wrap(async () => client.orders()));
+        server.registerTool('get_order', { description: 'Read the original order, payment state, work ID and actual delivery.',
+            inputSchema: z.object({ order_id: identifier }), annotations: read,
+        }, wrap(async (args) => client.order(args.order_id)));
+        server.registerTool('wait_order', { description: 'Wait up to 45 seconds for the original order result. Continue the same order when still queued/working.',
+            inputSchema: z.object({ order_id: identifier, seconds: z.number().int().min(1).max(45).default(30) }), annotations: read,
+        }, wrap(async (args, extra) => {
+            const deadline = Date.now() + args.seconds * 1000;
+            for (;;) {
+                if (extra.signal.aborted)
+                    throw new Error('Order wait canceled; the original order is unchanged');
+                const order = await client.order(args.order_id);
+                if (!['queued', 'dispatching', 'working'].includes(order.state) || Date.now() >= deadline)
+                    return order;
+                await sleep(1500, undefined, { signal: extra.signal });
+            }
+        }));
         server.registerTool('get_work', { description: 'Read an original work ID and its actual result.',
             inputSchema: z.object({ work_id: identifier }), annotations: read,
         }, wrap(async (args) => client.get(args.work_id)));
@@ -48,6 +76,27 @@ export function connectorMcp(client, journal, scopes) {
         }, wrap(async () => ({ items: journal.results() })));
     }
     if (scopes.includes('work:send')) {
+        server.registerTool('quote_service', { description: 'Create one original service quote without charging or starting work. Persist request_id and reuse it after a lost response.',
+            inputSchema: z.object({ request_id: identifier, service_id: identifier, revision_id: identifier.optional(),
+                offer_id: z.string().min(1).max(64), payment_method: z.enum(['free', 'envar_balance']), input: z.record(z.string(), z.unknown()) }),
+            annotations: write,
+        }, wrap(async (args) => {
+            const { request_id, ...terms } = args;
+            const body = { ...terms, message_id: request_id };
+            const previous = journal.orderRequest(request_id, body);
+            if (previous)
+                return client.order(previous);
+            const order = await client.quoteService(body);
+            journal.saveOrderRequest(request_id, order.id);
+            return order;
+        }));
+        server.registerTool('confirm_order', { description: 'Confirm the exact original quote. Paid orders reserve a separate owner-approved grant; the seller captures payment at start. Without a grant, return the owner approval link.',
+            inputSchema: z.object({ order_id: identifier, message_id: identifier, quote_token: z.string().min(1).max(256), spending_grant_id: identifier.optional() }),
+            annotations: { ...write, destructiveHint: true },
+        }, wrap(async (args) => { const { order_id, ...confirmation } = args; return client.confirmOrder(order_id, confirmation); }));
+        server.registerTool('recover_order', { description: 'Recover an original order without buying again or repeating an admitted execution.',
+            inputSchema: z.object({ order_id: identifier }), annotations: write,
+        }, wrap(async (args) => client.recoverOrder(args.order_id)));
         server.registerTool('list_peers', { description: 'Find Agents whose owners explicitly permit free tasks from this Agent.',
             inputSchema: z.object({}), annotations: read,
         }, wrap(async () => client.peers()));

package/dist/connector/state.d.ts

@@ -46,6 +46,8 @@ export declare class ConnectorJournal {
     acknowledge(id: number): void;
     outgoing(requestId: string, request: unknown): Work | undefined;
     saveOutgoing(requestId: string, work: Work): void;
+    orderRequest(requestId: string, request: unknown): string | undefined;
+    saveOrderRequest(requestId: string, orderId: string): void;
     control(deliveryId: number): LocalControl;
     saveControl(control: LocalControl): void;
     queueReport(record: LocalWork, kind: Report['kind'], text: string, afterReport: Phase, observation?: unknown, eventId?: string): void;

package/dist/connector/state.js

@@ -40,6 +40,7 @@ export class ConnectorJournal {
       CREATE TABLE IF NOT EXISTS connector_delivery (id INTEGER PRIMARY KEY,kind TEXT NOT NULL,value TEXT NOT NULL,acked INTEGER NOT NULL DEFAULT 0);
       CREATE TABLE IF NOT EXISTS connector_outgoing (id TEXT PRIMARY KEY,request TEXT NOT NULL,work TEXT);
       CREATE TABLE IF NOT EXISTS connector_control (id INTEGER PRIMARY KEY,value TEXT NOT NULL);
+      CREATE TABLE IF NOT EXISTS connector_order_request (id TEXT PRIMARY KEY,request TEXT NOT NULL,order_id TEXT);
       CREATE INDEX IF NOT EXISTS connector_work_phase ON connector_work(phase,created);`);
         const existing = this.db.prepare("SELECT value FROM connector_meta WHERE key='binding'").get();
         if (existing && existing.value !== JSON.stringify(binding)) {
@@ -134,6 +135,23 @@ export class ConnectorJournal {
     saveOutgoing(requestId, work) {
         this.db.prepare('UPDATE connector_outgoing SET work=? WHERE id=?').run(JSON.stringify(work), requestId);
     }
+    orderRequest(requestId, request) {
+        const encoded = JSON.stringify(request);
+        const row = this.db.prepare('SELECT request,order_id FROM connector_order_request WHERE id=?').get(requestId);
+        if (row) {
+            if (row.request !== encoded)
+                throw new Error('Request ID already belongs to another original service quote');
+            return row.order_id ? String(row.order_id) : undefined;
+        }
+        this.db.prepare('INSERT INTO connector_order_request(id,request) VALUES (?,?)').run(requestId, encoded);
+        return undefined;
+    }
+    saveOrderRequest(requestId, orderId) {
+        const row = this.db.prepare('SELECT order_id FROM connector_order_request WHERE id=?').get(requestId);
+        if (!row || (row.order_id && row.order_id !== orderId))
+            throw new Error('Preserve the original service quote request');
+        this.db.prepare('UPDATE connector_order_request SET order_id=? WHERE id=?').run(orderId, requestId);
+    }
     control(deliveryId) {
         const row = this.db.prepare('SELECT value FROM connector_control WHERE id=?').get(deliveryId);
         if (row)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@envarai/envarpay",
-  "version": "2026.1027.1",
+  "version": "2026.1027.2",
   "description": "A2A services with Envar account-balance payments",
   "type": "module",
   "license": "MIT",

package/schemas/agent-work.v1.schema.json

@@ -340,6 +340,253 @@
         "next_cursor"
       ],
       "additionalProperties": false
+    },
+    "service_quote_request": {
+      "type": "object",
+      "properties": {
+        "payment_method": {
+          "enum": [
+            "free",
+            "envar_balance"
+          ]
+        },
+        "service_id": {
+          "type": "string",
+          "format": "uuid"
+        },
+        "offer_id": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64
+        },
+        "revision_id": {
+          "type": "string",
+          "format": "uuid"
+        },
+        "input": {
+          "type": "object"
+        },
+        "message_id": {
+          "type": "string",
+          "format": "uuid"
+        }
+      },
+      "required": [
+        "payment_method",
+        "service_id",
+        "offer_id",
+        "input",
+        "message_id"
+      ],
+      "additionalProperties": false
+    },
+    "service_confirmation": {
+      "type": "object",
+      "properties": {
+        "message_id": {
+          "type": "string",
+          "format": "uuid"
+        },
+        "quote_token": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "spending_grant_id": {
+          "type": "string",
+          "format": "uuid"
+        }
+      },
+      "required": [
+        "message_id",
+        "quote_token"
+      ],
+      "additionalProperties": false
+    },
+    "order_quote": {
+      "type": "object",
+      "properties": {
+        "quote_token": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "quote_id": {
+          "type": "string",
+          "format": "uuid"
+        },
+        "task_id": {
+          "type": "string",
+          "format": "uuid"
+        },
+        "amount": {
+          "type": "string",
+          "pattern": "^(0|[1-9][0-9]{0,18})$"
+        },
+        "currency": {
+          "enum": [
+            "usd"
+          ]
+        },
+        "recipient": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64
+        },
+        "expires_at": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "terms_digest": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "input_digest": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        }
+      },
+      "required": [
+        "quote_id",
+        "task_id",
+        "amount",
+        "currency",
+        "recipient",
+        "expires_at",
+        "terms_digest",
+        "input_digest"
+      ],
+      "additionalProperties": true
+    },
+    "order": {
+      "type": "object",
+      "properties": {
+        "id": {
+          "type": "string",
+          "format": "uuid"
+        },
+        "message_id": {
+          "type": "string",
+          "format": "uuid"
+        },
+        "service_id": {
+          "type": "string",
+          "format": "uuid"
+        },
+        "offer_id": {
+          "type": "string"
+        },
+        "seller_agent_id": {
+          "type": "string",
+          "format": "uuid"
+        },
+        "buyer_agent_id": {
+          "anyOf": [
+            {
+              "type": "string",
+              "format": "uuid"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "work_id": {
+          "anyOf": [
+            {
+              "type": "string",
+              "format": "uuid"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "spending_grant_id": {
+          "anyOf": [
+            {
+              "type": "string",
+              "format": "uuid"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "payment_method": {
+          "enum": [
+            "free",
+            "envar_balance"
+          ]
+        },
+        "state": {
+          "type": "string"
+        },
+        "payment_state": {
+          "type": "string"
+        },
+        "execution_state": {
+          "type": "string"
+        },
+        "quote": {
+          "$ref": "#/$defs/order_quote"
+        },
+        "result": {
+          "type": "object"
+        },
+        "task": {
+          "type": "object"
+        },
+        "input": {
+          "type": [
+            "object",
+            "null"
+          ]
+        },
+        "last_error": {
+          "type": "string"
+        }
+      },
+      "required": [
+        "id",
+        "message_id",
+        "service_id",
+        "offer_id",
+        "seller_agent_id",
+        "buyer_agent_id",
+        "work_id",
+        "spending_grant_id",
+        "payment_method",
+        "state",
+        "payment_state",
+        "execution_state",
+        "quote",
+        "result",
+        "task",
+        "input",
+        "last_error"
+      ],
+      "additionalProperties": true
+    },
+    "confirm_order_result": {
+      "type": "object",
+      "properties": {
+        "order": {
+          "$ref": "#/$defs/order"
+        },
+        "approval_required": {
+          "type": "boolean"
+        },
+        "approval_url": {
+          "type": "string",
+          "format": "uri"
+        }
+      },
+      "required": [
+        "order",
+        "approval_required"
+      ],
+      "additionalProperties": false
     }
   }
 }