@nevermined-io/cli 1.12.0 → 1.13.0

package/dist/commands/x402token/get-x402-access-token.d.ts

@@ -12,6 +12,9 @@ export default class GetX402AccessToken extends BaseCommand {
         'spending-limit-cents': import("@oclif/core/lib/interfaces/parser.js").OptionFlag<number, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
         'delegation-duration-secs': import("@oclif/core/lib/interfaces/parser.js").OptionFlag<number, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
         'auto-resolve-scheme': import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
+        'resource-url': import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        'http-verb': import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        'token-version': import("@oclif/core/lib/interfaces/parser.js").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
         format: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
         verbose: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
@@ -21,6 +24,14 @@ export default class GetX402AccessToken extends BaseCommand {
     };
     run(): Promise<void>;
     private buildCryptoTokenOptions;
+    /**
+     * Resource/verb/version options shared by the crypto and fiat paths.
+     *
+     * Omitted rather than sent empty when the flag is absent: a field absent at
+     * mint is signed as the empty string and must stay absent from the envelope,
+     * so `--resource-url ''` and no flag at all must not produce different bodies.
+     */
+    private buildTokenBinding;
     private buildFiatTokenOptions;
 }
 //# sourceMappingURL=get-x402-access-token.d.ts.map

package/dist/commands/x402token/get-x402-access-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-x402-access-token.d.ts","sourceRoot":"","sources":["../../../src/commands/x402token/get-x402-access-token.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAInD;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,WAAW;IACzD,OAAgB,WAAW,SAAoJ;IAE/K,OAAgB,QAAQ,WAMvB;IAED,OAAgB,KAAK;;;;;;;;;;MA4BpB;IAED,OAAgB,IAAI;;MAKnB;IAEY,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IAiCjC,OAAO,CAAC,uBAAuB;YASjB,qBAAqB;CAsBpC"}
+{"version":3,"file":"get-x402-access-token.d.ts","sourceRoot":"","sources":["../../../src/commands/x402token/get-x402-access-token.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAInD;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,WAAW;IACzD,OAAgB,WAAW,SAAoJ;IAE/K,OAAgB,QAAQ,WAOvB;IAED,OAAgB,KAAK;;;;;;;;;;;;;MA0CpB;IAED,OAAgB,IAAI;;MAKnB;IAEY,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IAqCjC,OAAO,CAAC,uBAAuB;IAU/B;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;YAyBX,qBAAqB;CAuBpC"}

package/dist/commands/x402token/get-x402-access-token.js

@@ -12,6 +12,7 @@ export default class GetX402AccessToken extends BaseCommand {
         '$ nevermined x402token get-x402-access-token <planId> --payment-type fiat --payment-method-id pm_1AbCdEfGhIjKlM --spending-limit-cents 5000',
         '$ nevermined x402token get-x402-access-token <planId> --spending-limit-cents 100000 --delegation-duration-secs 604800',
         '$ nevermined x402token get-x402-access-token <planId> --auto-resolve-scheme',
+        '$ nevermined x402token get-x402-access-token <planId> --resource-url /api/v1/tasks --http-verb POST --token-version 3',
     ];
     static flags = {
         ...BaseCommand.baseFlags,
@@ -41,6 +42,20 @@ export default class GetX402AccessToken extends BaseCommand {
             default: false,
             required: false,
         }),
+        'resource-url': Flags.string({
+            description: 'Protected resource, EXACTLY as the seller advertises it in its 402 (a paymentMiddleware seller advertises a relative path such as /ask). Signed into a v3 token, which then settles only against it; a mismatch fails verification with BCK.X402.0013.',
+            required: false,
+        }),
+        'http-verb': Flags.string({
+            description: 'HTTP verb of the protected resource (e.g. POST). Signed into a v3 token alongside --resource-url.',
+            required: false,
+        }),
+        'token-version': Flags.integer({
+            description: 'EIP-712 token version to request: 2 (default, reusable) or 3 (single-use, bound to --resource-url/--http-verb). A backend without v3 support silently returns 2 — check the tokenVersion field in the output.',
+            min: 2,
+            max: 3,
+            required: false,
+        }),
     };
     static args = {
         plan: Args.string({
@@ -69,6 +84,9 @@ export default class GetX402AccessToken extends BaseCommand {
                 tokenOptions = this.buildCryptoTokenOptions(flags);
             }
             const result = await payments.x402.getX402AccessToken(args.plan, flags['agent-id'], tokenOptions);
+            // The printed tokenVersion is detected from the returned token, not echoed
+            // from --token-version: a backend that predates v3 drops the request field
+            // without an error and mints v2.
             this.formatter.output(result);
         }
         catch (error) {
@@ -81,6 +99,33 @@ export default class GetX402AccessToken extends BaseCommand {
                 spendingLimitCents: flags['spending-limit-cents'],
                 durationSecs: flags['delegation-duration-secs'],
             },
+            ...this.buildTokenBinding(flags),
+        };
+    }
+    /**
+     * Resource/verb/version options shared by the crypto and fiat paths.
+     *
+     * Omitted rather than sent empty when the flag is absent: a field absent at
+     * mint is signed as the empty string and must stay absent from the envelope,
+     * so `--resource-url ''` and no flag at all must not produce different bodies.
+     */
+    buildTokenBinding(flags) {
+        const resourceUrl = flags['resource-url'];
+        const httpVerb = flags['http-verb'];
+        const tokenVersion = flags['token-version'];
+        // The three flags are one set. A resource on a v2 token is not inert — the
+        // backend compares it with the URL the seller advertises and rejects a
+        // mismatch with BCK.X402.0013 — so binding without asking for v3 can only
+        // cost the caller a failed verification. Refuse the combination instead of
+        // minting a token that will not verify.
+        if ((resourceUrl || httpVerb) && tokenVersion !== 3) {
+            this.error('--resource-url / --http-verb bind the token to one seller endpoint, which only ' +
+                'takes effect with --token-version 3. Add --token-version 3, or drop the binding flags.', { exit: 1 });
+        }
+        return {
+            ...(resourceUrl && { resource: { url: resourceUrl } }),
+            ...(httpVerb && { httpVerb: String(httpVerb).toUpperCase() }),
+            ...(tokenVersion === 3 && { tokenVersion: 3 }),
         };
     }
     async buildFiatTokenOptions(payments, flags) {
@@ -101,6 +146,7 @@ export default class GetX402AccessToken extends BaseCommand {
                 spendingLimitCents: flags['spending-limit-cents'],
                 durationSecs: flags['delegation-duration-secs'],
             },
+            ...this.buildTokenBinding(flags),
         };
     }
 }

package/dist/commands/x402token/get-x402-access-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-x402-access-token.js","sourceRoot":"","sources":["../../../src/commands/x402token/get-x402-access-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEvD;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,WAAW;IACzD,MAAM,CAAU,WAAW,GAAG,iJAAiJ,CAAA;IAE/K,MAAM,CAAU,QAAQ,GAAG;QACzB,uDAAuD;QACvD,2EAA2E;QAC3E,6IAA6I;QAC7I,uHAAuH;QACvH,6EAA6E;KAC9E,CAAA;IAED,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7C,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC;YAC3B,WAAW,EAAE,8DAA8D;YAC3E,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;YAC3B,OAAO,EAAE,QAAQ;YACjB,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC;YAChC,WAAW,EAAE,iGAAiG;YAC9G,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,sBAAsB,EAAE,KAAK,CAAC,OAAO,CAAC;YACpC,WAAW,EAAE,6CAA6C;YAC1D,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,0BAA0B,EAAE,KAAK,CAAC,OAAO,CAAC;YACxC,WAAW,EAAE,gDAAgD;YAC7D,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,qBAAqB,EAAE,KAAK,CAAC,OAAO,CAAC;YACnC,WAAW,EAAE,0EAA0E;YACvF,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,KAAK;SAChB,CAAC;KACH,CAAA;IAED,MAAM,CAAU,IAAI,GAAG;QACrB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;YAChB,WAAW,EAAE,iBAAiB;YAC9B,QAAQ,EAAE,IAAI;SACf,CAAC;KACH,CAAA;IAEM,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAkB,CAAC,CAAA;QAEjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QAE1C,IAAI,CAAC;YACH,IAAI,YAA0C,CAAA;YAE9C,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;gBACvD,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;oBACrC,YAAY,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;gBAClE,CAAC;qBAAM,CAAC;oBACN,YAAY,GAAG,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAA;gBACpD,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC5C,YAAY,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YAClE,CAAC;iBAAM,CAAC;gBACN,YAAY,GAAG,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAA;YACpD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CACnD,IAAI,CAAC,IAAI,EACT,KAAK,CAAC,UAAU,CAAC,EACjB,YAAY,CACb,CAAA;YAED,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAEO,uBAAuB,CAAC,KAAU;QACxC,OAAO;YACL,gBAAgB,EAAE;gBAChB,kBAAkB,EAAE,KAAK,CAAC,sBAAsB,CAAC;gBACjD,YAAY,EAAE,KAAK,CAAC,0BAA0B,CAAC;aAChD;SACF,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,QAAa,EAAE,KAAU;QAC3D,IAAI,eAAe,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAA;QAEhD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAA;YAC9D,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;YACzD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,CAAC,KAAK,CAAC,oEAAoE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;YAC/F,CAAC;YACD,eAAe,GAAG,IAAI,CAAC,EAAE,CAAA;YACzB,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;QACtE,CAAC;QAED,OAAO;YACL,MAAM,EAAE,qBAAqB;YAC7B,gBAAgB,EAAE;gBAChB,uBAAuB,EAAE,eAAe;gBACxC,kBAAkB,EAAE,KAAK,CAAC,sBAAsB,CAAC;gBACjD,YAAY,EAAE,KAAK,CAAC,0BAA0B,CAAC;aAChD;SACF,CAAA;IACH,CAAC"}
+{"version":3,"file":"get-x402-access-token.js","sourceRoot":"","sources":["../../../src/commands/x402token/get-x402-access-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEvD;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,kBAAmB,SAAQ,WAAW;IACzD,MAAM,CAAU,WAAW,GAAG,iJAAiJ,CAAA;IAE/K,MAAM,CAAU,QAAQ,GAAG;QACzB,uDAAuD;QACvD,2EAA2E;QAC3E,6IAA6I;QAC7I,uHAAuH;QACvH,6EAA6E;QAC7E,uHAAuH;KACxH,CAAA;IAED,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7C,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC;YAC3B,WAAW,EAAE,8DAA8D;YAC3E,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;YAC3B,OAAO,EAAE,QAAQ;YACjB,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC;YAChC,WAAW,EAAE,iGAAiG;YAC9G,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,sBAAsB,EAAE,KAAK,CAAC,OAAO,CAAC;YACpC,WAAW,EAAE,6CAA6C;YAC1D,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,0BAA0B,EAAE,KAAK,CAAC,OAAO,CAAC;YACxC,WAAW,EAAE,gDAAgD;YAC7D,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,qBAAqB,EAAE,KAAK,CAAC,OAAO,CAAC;YACnC,WAAW,EAAE,0EAA0E;YACvF,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC;YAC3B,WAAW,EAAE,wPAAwP;YACrQ,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;YACxB,WAAW,EAAE,mGAAmG;YAChH,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC;YAC7B,WAAW,EAAE,+MAA+M;YAC5N,GAAG,EAAE,CAAC;YACN,GAAG,EAAE,CAAC;YACN,QAAQ,EAAE,KAAK;SAChB,CAAC;KACH,CAAA;IAED,MAAM,CAAU,IAAI,GAAG;QACrB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;YAChB,WAAW,EAAE,iBAAiB;YAC9B,QAAQ,EAAE,IAAI;SACf,CAAC;KACH,CAAA;IAEM,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAkB,CAAC,CAAA;QAEjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QAE1C,IAAI,CAAC;YACH,IAAI,YAA0C,CAAA;YAE9C,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;gBACvD,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;oBACrC,YAAY,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;gBAClE,CAAC;qBAAM,CAAC;oBACN,YAAY,GAAG,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAA;gBACpD,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC5C,YAAY,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YAClE,CAAC;iBAAM,CAAC;gBACN,YAAY,GAAG,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAA;YACpD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CACnD,IAAI,CAAC,IAAI,EACT,KAAK,CAAC,UAAU,CAAC,EACjB,YAAY,CACb,CAAA;YAED,2EAA2E;YAC3E,2EAA2E;YAC3E,iCAAiC;YAEjC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAEO,uBAAuB,CAAC,KAAU;QACxC,OAAO;YACL,gBAAgB,EAAE;gBAChB,kBAAkB,EAAE,KAAK,CAAC,sBAAsB,CAAC;gBACjD,YAAY,EAAE,KAAK,CAAC,0BAA0B,CAAC;aAChD;YACD,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;SACjC,CAAA;IACH,CAAC;IAED;;;;;;OAMG;IACK,iBAAiB,CAAC,KAAU;QAClC,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,CAAA;QACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,CAAA;QACnC,MAAM,YAAY,GAAG,KAAK,CAAC,eAAe,CAAC,CAAA;QAE3C,2EAA2E;QAC3E,uEAAuE;QACvE,0EAA0E;QAC1E,2EAA2E;QAC3E,wCAAwC;QACxC,IAAI,CAAC,WAAW,IAAI,QAAQ,CAAC,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,KAAK,CACR,iFAAiF;gBAC/E,wFAAwF,EAC1F,EAAE,IAAI,EAAE,CAAC,EAAE,CACZ,CAAA;QACH,CAAC;QAED,OAAO;YACL,GAAG,CAAC,WAAW,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC;YACtD,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7D,GAAG,CAAC,YAAY,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,CAAU,EAAE,CAAC;SACxD,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,QAAa,EAAE,KAAU;QAC3D,IAAI,eAAe,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAA;QAEhD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAA;YAC9D,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;YACzD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,CAAC,KAAK,CAAC,oEAAoE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;YAC/F,CAAC;YACD,eAAe,GAAG,IAAI,CAAC,EAAE,CAAA;YACzB,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;QACtE,CAAC;QAED,OAAO;YACL,MAAM,EAAE,qBAAqB;YAC7B,gBAAgB,EAAE;gBAChB,uBAAuB,EAAE,eAAe;gBACxC,kBAAkB,EAAE,KAAK,CAAC,sBAAsB,CAAC;gBACjD,YAAY,EAAE,KAAK,CAAC,0BAA0B,CAAC;aAChD;YACD,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;SACjC,CAAA;IACH,CAAC"}

package/oclif.manifest.json

@@ -993,62 +993,6 @@
         "setup.js"
       ]
     },
-    "delegation:list-payment-methods": {
-      "aliases": [],
-      "args": {},
-      "description": "List enrolled credit/debit cards available for card-delegation (fiat) payments.",
-      "examples": [
-        "$ nevermined delegation list-payment-methods",
-        "$ nevermined delegation list-payment-methods --format json"
-      ],
-      "flags": {
-        "profile": {
-          "char": "p",
-          "description": "Configuration profile to use",
-          "name": "profile",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "format": {
-          "char": "f",
-          "description": "Output format",
-          "name": "format",
-          "default": "table",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "table",
-            "json",
-            "quiet"
-          ],
-          "type": "option"
-        },
-        "verbose": {
-          "char": "v",
-          "description": "Verbose output",
-          "name": "verbose",
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "delegation:list-payment-methods",
-      "pluginAlias": "@nevermined-io/cli",
-      "pluginName": "@nevermined-io/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "delegation",
-        "list-payment-methods.js"
-      ]
-    },
     "config:init": {
       "aliases": [],
       "args": {},
@@ -1270,6 +1214,62 @@
         "show.js"
       ]
     },
+    "delegation:list-payment-methods": {
+      "aliases": [],
+      "args": {},
+      "description": "List enrolled credit/debit cards available for card-delegation (fiat) payments.",
+      "examples": [
+        "$ nevermined delegation list-payment-methods",
+        "$ nevermined delegation list-payment-methods --format json"
+      ],
+      "flags": {
+        "profile": {
+          "char": "p",
+          "description": "Configuration profile to use",
+          "name": "profile",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "format": {
+          "char": "f",
+          "description": "Output format",
+          "name": "format",
+          "default": "table",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "table",
+            "json",
+            "quiet"
+          ],
+          "type": "option"
+        },
+        "verbose": {
+          "char": "v",
+          "description": "Verbose output",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "delegation:list-payment-methods",
+      "pluginAlias": "@nevermined-io/cli",
+      "pluginName": "@nevermined-io/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "delegation",
+        "list-payment-methods.js"
+      ]
+    },
     "facilitator:settle-permissions": {
       "aliases": [],
       "args": {},
@@ -1396,6 +1396,149 @@
         "verify-permissions.js"
       ]
     },
+    "x402token:get-x402-access-token": {
+      "aliases": [],
+      "args": {
+        "plan": {
+          "description": "plan identifier",
+          "name": "plan",
+          "required": true
+        }
+      },
+      "description": "Create a delegation and get an X402 access token for the given plan. Supports both crypto (erc4337) and fiat (card-delegation) payment schemes.",
+      "examples": [
+        "$ nevermined x402token get-x402-access-token <planId>",
+        "$ nevermined x402token get-x402-access-token <planId> --payment-type fiat",
+        "$ nevermined x402token get-x402-access-token <planId> --payment-type fiat --payment-method-id pm_1AbCdEfGhIjKlM --spending-limit-cents 5000",
+        "$ nevermined x402token get-x402-access-token <planId> --spending-limit-cents 100000 --delegation-duration-secs 604800",
+        "$ nevermined x402token get-x402-access-token <planId> --auto-resolve-scheme",
+        "$ nevermined x402token get-x402-access-token <planId> --resource-url /api/v1/tasks --http-verb POST --token-version 3"
+      ],
+      "flags": {
+        "profile": {
+          "char": "p",
+          "description": "Configuration profile to use",
+          "name": "profile",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "format": {
+          "char": "f",
+          "description": "Output format",
+          "name": "format",
+          "default": "table",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "table",
+            "json",
+            "quiet"
+          ],
+          "type": "option"
+        },
+        "verbose": {
+          "char": "v",
+          "description": "Verbose output",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "agent-id": {
+          "name": "agent-id",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "payment-type": {
+          "description": "Payment type: \"crypto\" (default) or \"fiat\" (card-delegation)",
+          "name": "payment-type",
+          "required": false,
+          "default": "crypto",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "crypto",
+            "fiat"
+          ],
+          "type": "option"
+        },
+        "payment-method-id": {
+          "description": "Stripe payment method ID (pm_...). Only for fiat. If omitted, auto-selects first enrolled card.",
+          "name": "payment-method-id",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "spending-limit-cents": {
+          "description": "Max spending limit in cents (default: 1000)",
+          "name": "spending-limit-cents",
+          "required": false,
+          "default": 1000,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "delegation-duration-secs": {
+          "description": "Delegation duration in seconds (default: 3600)",
+          "name": "delegation-duration-secs",
+          "required": false,
+          "default": 3600,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "auto-resolve-scheme": {
+          "description": "Auto-detect crypto vs fiat from plan metadata (overrides --payment-type)",
+          "name": "auto-resolve-scheme",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "resource-url": {
+          "description": "Protected resource, EXACTLY as the seller advertises it in its 402 (a paymentMiddleware seller advertises a relative path such as /ask). Signed into a v3 token, which then settles only against it; a mismatch fails verification with BCK.X402.0013.",
+          "name": "resource-url",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "http-verb": {
+          "description": "HTTP verb of the protected resource (e.g. POST). Signed into a v3 token alongside --resource-url.",
+          "name": "http-verb",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "token-version": {
+          "description": "EIP-712 token version to request: 2 (default, reusable) or 3 (single-use, bound to --resource-url/--http-verb). A backend without v3 support silently returns 2 — check the tokenVersion field in the output.",
+          "name": "token-version",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "x402token:get-x402-access-token",
+      "pluginAlias": "@nevermined-io/cli",
+      "pluginName": "@nevermined-io/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "x402token",
+        "get-x402-access-token.js"
+      ]
+    },
     "organizations:connect-stripe-account": {
       "aliases": [],
       "args": {},
@@ -1808,124 +1951,6 @@
         "onboard-customer.js"
       ]
     },
-    "x402token:get-x402-access-token": {
-      "aliases": [],
-      "args": {
-        "plan": {
-          "description": "plan identifier",
-          "name": "plan",
-          "required": true
-        }
-      },
-      "description": "Create a delegation and get an X402 access token for the given plan. Supports both crypto (erc4337) and fiat (card-delegation) payment schemes.",
-      "examples": [
-        "$ nevermined x402token get-x402-access-token <planId>",
-        "$ nevermined x402token get-x402-access-token <planId> --payment-type fiat",
-        "$ nevermined x402token get-x402-access-token <planId> --payment-type fiat --payment-method-id pm_1AbCdEfGhIjKlM --spending-limit-cents 5000",
-        "$ nevermined x402token get-x402-access-token <planId> --spending-limit-cents 100000 --delegation-duration-secs 604800",
-        "$ nevermined x402token get-x402-access-token <planId> --auto-resolve-scheme"
-      ],
-      "flags": {
-        "profile": {
-          "char": "p",
-          "description": "Configuration profile to use",
-          "name": "profile",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "format": {
-          "char": "f",
-          "description": "Output format",
-          "name": "format",
-          "default": "table",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "table",
-            "json",
-            "quiet"
-          ],
-          "type": "option"
-        },
-        "verbose": {
-          "char": "v",
-          "description": "Verbose output",
-          "name": "verbose",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "agent-id": {
-          "name": "agent-id",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "payment-type": {
-          "description": "Payment type: \"crypto\" (default) or \"fiat\" (card-delegation)",
-          "name": "payment-type",
-          "required": false,
-          "default": "crypto",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "crypto",
-            "fiat"
-          ],
-          "type": "option"
-        },
-        "payment-method-id": {
-          "description": "Stripe payment method ID (pm_...). Only for fiat. If omitted, auto-selects first enrolled card.",
-          "name": "payment-method-id",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "spending-limit-cents": {
-          "description": "Max spending limit in cents (default: 1000)",
-          "name": "spending-limit-cents",
-          "required": false,
-          "default": 1000,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "delegation-duration-secs": {
-          "description": "Delegation duration in seconds (default: 3600)",
-          "name": "delegation-duration-secs",
-          "required": false,
-          "default": 3600,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "auto-resolve-scheme": {
-          "description": "Auto-detect crypto vs fiat from plan metadata (overrides --payment-type)",
-          "name": "auto-resolve-scheme",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "x402token:get-x402-access-token",
-      "pluginAlias": "@nevermined-io/cli",
-      "pluginName": "@nevermined-io/cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": false,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "x402token",
-        "get-x402-access-token.js"
-      ]
-    },
     "plans:get-agents-associated-to-a-plan": {
       "aliases": [],
       "args": {
@@ -3855,5 +3880,5 @@
       ]
     }
   },
-  "version": "1.12.0"
+  "version": "1.13.0"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nevermined-io/cli",
-  "version": "1.12.0",
+  "version": "1.13.0",
   "description": "CLI for Nevermined Payments SDK",
   "author": "Nevermined AG",
   "license": "Apache-2.0",
@@ -21,7 +21,7 @@
     "generate": "tsx src/generator/generate.ts",
     "sync-check": "tsx src/generator/sync-check.ts",
     "test": "pnpm test:unit && pnpm test:integration",
-    "test:unit": "jest test/unit/simple.test.ts test/unit/output-formatter-basic.test.ts",
+    "test:unit": "jest test/unit/simple.test.ts test/unit/output-formatter-basic.test.ts test/unit/x402.test.ts",
     "test:unit:all": "jest --testPathPattern=test/unit",
     "test:integration": "jest test/integration/cli-basic.test.ts test/integration/generated-commands.test.ts",
     "test:integration:config": "jest test/integration/config-workflow.test.ts",