@m2msentinel/sdk 1.2.0 → 1.2.2

package/README.md

@@ -40,13 +40,13 @@ Autonomous agents handling value must never rely on a single oracle or heuristic
 npm install @m2msentinel/sdk
 
 # Or unscoped package
-npm install m2m-sentinel-sdk@1.2.0
+npm install m2m-sentinel-sdk@1.2.2
 ```
 
 ### Python (PyPI)
 
 ```bash
-pip install m2m-sentinel==1.2.0
+pip install m2m-sentinel==1.2.2
 ```
 
 ### MCP Server (Model Context Protocol)

package/agent_adapter.js

@@ -67,7 +67,7 @@ class M2MSentinelActionProvider {
 
     const headers = {
       Accept: 'application/json',
-      'User-Agent': 'M2MSentinel-AgentKit/1.2.0',
+      'User-Agent': 'M2MSentinel-AgentKit/1.2.2',
       ...options.headers
     };
     if (this.apiKey && !headers['x-api-key']) {

package/mcp_server.js

@@ -8,7 +8,7 @@ const readline = require('readline');
 let BASE_URL = process.env.M2M_SENTINEL_BASE_URL || 'https://api.m2msentinel.com';
 let API_KEY = process.env.M2M_SENTINEL_API_KEY || '';
 const TIMEOUT_MS = Number(process.env.M2M_SENTINEL_TIMEOUT_MS || 30000);
-const VERSION = '1.2.0';
+const VERSION = '1.2.2';
 
 const TOOLS = [
   {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@m2msentinel/sdk",
-  "version": "1.2.0",
-  "mcpName": "io.github.m2m-sentinel/m2m-sentinel-sdk",
+  "version": "1.2.2",
+  "mcpName": "io.github.M2M-Sentinel/m2m-sentinel-sdk",
   "publishConfig": {
     "access": "public"
   },

package/typescript/package.json

@@ -1,6 +1,6 @@
 {
   "name": "m2m-sentinel-sdk",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "Source-distributed TypeScript client for M2M Sentinel Base capability intelligence API",
   "main": "index.ts",
   "types": "index.ts",

package/typescript/x402.ts

@@ -39,6 +39,9 @@ export interface X402PaymentChallenge {
 export interface X402SignedAuthorizationV2 {
   x402Version: 2;
   resource?: any;
+  /** The server's advertised extensions, echoed back. The CDP Bazaar indexes a
+   *  resource from the bazaar extension carried by the settlement. */
+  extensions?: any;
   /** The chosen offer echoed back verbatim. The server deep-equality matches
    *  this against its own requirements to learn which offer is being paid. */
   accepted: any;
@@ -271,6 +274,12 @@ export class X402SignerClient {
         x402Version: 2,
         resource: challenge.resource,
         accepted: offer,
+          // Echo the server's advertised extensions back. The canonical client
+          // merges paymentRequired.extensions into the payload; omitting the
+          // field still settles the payment, so this failed silently -- but the
+          // CDP Bazaar indexes a resource from the bazaar extension carried by
+          // the settlement, so a payment without it is invisible to discovery.
+        extensions: challenge.extensions,
         payload: {
           authorization: {
             from: fromAddress,
@@ -309,7 +318,7 @@ export class X402SignerClient {
 
   async fetchWithAutoPayment(path: string, options: any = {}): Promise<any> {
     const url = path.startsWith('http') ? path : `${this.baseUrl}/${path.replace(/^\/+/, '')}`;
-    const headers = { 'Accept': 'application/json', 'User-Agent': '@m2msentinel/sdk-ts/1.2.0', ...(options.headers || {}) };
+    const headers = { 'Accept': 'application/json', 'User-Agent': '@m2msentinel/sdk-ts/1.2.2', ...(options.headers || {}) };
 
     let res = await fetch(url, { method: options.method || 'GET', headers, body: options.body });
     if (res.status !== 402) {

package/x402_signer.js

@@ -189,6 +189,12 @@ class X402SignerClient {
         x402Version: 2,
         resource: challenge.resource,
         accepted: offer,
+          // Echo the server's advertised extensions back. The canonical client
+          // merges paymentRequired.extensions into the payload; omitting the
+          // field still settles the payment, so this failed silently -- but the
+          // CDP Bazaar indexes a resource from the bazaar extension carried by
+          // the settlement, so a payment without it is invisible to discovery.
+        extensions: challenge.extensions,
         payload: {
           authorization: {
             from: message.from,
@@ -265,7 +271,7 @@ class X402SignerClient {
         path: url.pathname + url.search,
         method: options.method || 'GET',
         headers: {
-          'User-Agent': 'M2M-Sentinel-X402Signer/1.2.0',
+          'User-Agent': 'M2M-Sentinel-X402Signer/1.2.2',
           'Accept': 'application/json',
           ...(options.headers || {})
         },