@itpay/cli 2.1.29 → 2.1.34

package/dist/src/client/backend.js

@@ -5,6 +5,7 @@ export class BackendClient {
     constructor(http) {
         this.http = http;
     }
+    get localSimulation() { return this.http.localSimulation; }
     // Called only through the fixed Sell operation contract, never arbitrary Agent URLs.
     sellRequest(request) {
         if (!request.path.startsWith("/v1/seller/organizations") && !request.path.startsWith("/v1/library/"))
@@ -123,8 +124,10 @@ export class BackendClient {
     advanceServiceExecution(id, input, idempotencyKey) {
         return this.http.post(`/v1/service-executions/${encodeURIComponent(id)}/advance`, { input, idempotency_key: idempotencyKey });
     }
-    getServiceExecutionResultItemPage(serviceExecutionID, resultItemID, offset, limit) {
+    getServiceExecutionResultItemPage(serviceExecutionID, resultItemID, offset, limit, view) {
         const qs = new URLSearchParams({ offset: String(offset), limit: String(limit) });
+        if (view)
+            qs.set("view", view);
         return this.http.get(`/v1/service-executions/${encodeURIComponent(serviceExecutionID)}/result-items/${encodeURIComponent(resultItemID)}?${qs}`);
     }
     invokeServiceCapability(serviceExecutionID, capabilityID, input) {

package/dist/src/client/http.js

@@ -14,6 +14,7 @@ export class HttpError extends Error {
     }
 }
 export class HttpClient {
+    localSimulation = false;
     static MAX_TRANSPORT_RETRIES = 2;
     baseURL;
     fetchImpl;
@@ -70,6 +71,7 @@ export class HttpClient {
                     ...(options.signal ? { signal: options.signal } : {}),
                 });
                 text = await response.text();
+                this.localSimulation = response.headers.get("X-ItPay-Environment") === "local_simulation";
             }
             catch (error) {
                 if (options.signal?.aborted)

package/dist/src/commands/buy.js

@@ -106,6 +106,7 @@ export async function runBuy(backend, config, options) {
     }
     // --- Build render plan (after payment if --pay) ---
     const planInput = {
+        localSimulation: backend.localSimulation,
         host: options.host,
         checkoutID,
         checkoutURL,
@@ -246,7 +247,7 @@ async function waitForPaymentSSE(backend, checkoutID, displayToken, timeoutSec)
 }
 // --- checkout QR plan ---
 export function buildCheckoutQRPlan(input) {
-    const summary = `Scan the QR or open ${input.checkoutURL} to start the human checkout flow.`;
+    const summary = input.localSimulation ? "在本机打开模拟付款入口；铁路与地图查询真实，授权、通知和交易模拟，不会扣款。" : `Scan the QR or open ${input.checkoutURL} to start the human checkout flow.`;
     const isPayment = input.paymentIntentID != null;
     const afterCommand = qualifyItPayCommand(`itpay checkout --id ${input.checkoutID} --token ${input.displayToken}${input.locale === "en" ? " --locale en" : ""} --json`, input.agentType);
     const platform = {
@@ -265,6 +266,7 @@ export function buildCheckoutQRPlan(input) {
     };
     const plan = {
         kind: isPayment ? "payment_qr" : "checkout_qr",
+        ...(input.localSimulation ? { localSimulation: true } : {}),
         host: input.host,
         summary,
         url: input.qrPayload,

package/dist/src/commands/checkout.js

@@ -57,6 +57,7 @@ export async function runCheckoutPresentation(backend, options) {
     const localizedPNGURL = localizeCardURL(qrPNGURL, locale);
     const nextCommand = `itpay checkout --id ${options.checkoutID} --token ${options.displayToken}${locale === "en" ? " --locale en" : ""} --json`;
     const plan = buildCheckoutQRPlan({
+        localSimulation: backend.localSimulation,
         host,
         checkoutID: options.checkoutID,
         checkoutURL,

package/dist/src/commands/checkout_handoff.js

@@ -30,16 +30,17 @@ function hasCompleteCheckoutTokens(url) {
     }
 }
 export function buildCheckoutHandoff(input) {
-    const handoff = { url: input.url };
+    const url = input.plan?.localSimulation && input.mobileUrl && hasCompleteCheckoutTokens(input.mobileUrl) ? input.mobileUrl : input.url;
+    const handoff = { url, ...(input.plan?.localSimulation ? { environment: "local_simulation", query: "live", transactions: "simulated" } : {}) };
     // mobile_url is only emitted when the link carries the complete token pair;
     // a display-token-only link cannot finish the same-device exchange after payment.
-    const mobileUrl = hasCompleteCheckoutTokens(input.mobileUrl) ? input.mobileUrl : undefined;
+    const mobileUrl = !input.plan?.localSimulation && hasCompleteCheckoutTokens(input.mobileUrl) ? input.mobileUrl : undefined;
     if (mobileUrl) {
         handoff.mobile_url = mobileUrl;
     }
     const workBuddyAction = isWorkBuddyPlainChat(input.agentType, input.platform);
     if (workBuddyAction) {
-        handoff.agent_action = buildWorkBuddyPresentFilesAction(input.url);
+        handoff.agent_action = buildWorkBuddyPresentFilesAction(url);
     }
     if (input.platform === "markdown") {
         if (input.localPath)
@@ -58,7 +59,9 @@ export function buildCheckoutHandoff(input) {
     }
     return {
         handoff,
-        instruction: checkoutHandoffInstruction(input.agentType, input.platform, input.amount, Boolean(mobileUrl)),
+        instruction: input.plan?.localSimulation
+            ? `本地实验：铁路与地图查询真实，授权、通知和交易模拟，不会扣款。在本机打开 handoff.url 模拟付款入口，金额 ${input.amount}；仅本机桌面可达。${workBuddyAction ? "按 handoff.agent_action 原样打开一次。" : "展示原入口。"}等待用户操作后读取同一 Checkout；不创建替代订单，用户声明不证明模拟付款已确认。`
+            : `先展示官方入口，再做非必要记忆或日志；保留必需安全检查和宿主权限。${checkoutHandoffInstruction(input.agentType, input.platform, input.amount, Boolean(mobileUrl))}`,
     };
 }
 function checkoutHandoffInstruction(agentType, platform, amount, hasMobileLink) {

package/dist/src/commands/guidance.js

@@ -16,12 +16,14 @@ export class CommandContractError extends Error {
     instruction;
     recovery;
     interaction;
-    constructor(code, message, instruction, recovery, interaction) {
+    result;
+    constructor(code, message, instruction, recovery, interaction, result) {
         super(message);
         this.code = code;
         this.instruction = instruction;
         this.recovery = recovery;
         this.interaction = interaction;
+        this.result = result;
         this.name = "CommandContractError";
     }
 }

package/dist/src/commands/install.js

@@ -12,6 +12,7 @@ export const INSTALL_AGENT_TYPES = [
     "kimi-code",
     "openclaw",
 ];
+export const CODEX_WAIT_GUIDANCE = "Codex 宿主等待：保留完整工具返回，按实际返回的会话句柄及当前宿主续读工具收取最终输出，不要只取 stdout。若使用 functions.exec 包装，可用 text(await tools.exec_command(...))；内层有 session_id 时用 write_stdin，外层返回运行 cell 时才用 wait。没有该包装时按宿主实际工具操作。先收取最终输出，再执行 CLI 业务 next；不要重复提交。";
 const INSTRUCTIONS = {
     "codex-desktop": "在 Codex Desktop 中始终传这个 Agent Type；付款时把返回的二维码和链接实际展示到当前对话。",
     "codex-cli": "在 Codex CLI 中始终传这个 Agent Type；付款交接只应显示在用户可见终端。",
@@ -48,7 +49,7 @@ export function runInstall(target, options = {}) {
             ...installDefinition(normalized),
             default_api: DEFAULT_BASE_URL,
         },
-        instruction: INSTRUCTIONS[normalized],
+        instruction: INSTRUCTIONS[normalized] + (normalized.startsWith("codex-") ? ` ${CODEX_WAIT_GUIDANCE}` : ""),
         next: {
             command: `itpay --agent-type ${normalized} readyz --json`,
             reason: "验证当前官方 ItPay API 的可用性",