@paybond/kit 0.11.11 → 0.12.1

package/dist/audit/exports.js

@@ -34,22 +34,28 @@ export class GatewayAuditExportsClient {
     async getJson(path) {
         return this.requestJSON("GET", path);
     }
+    async postJson(path, body) {
+        return this.requestJSON("POST", path, body);
+    }
     async deleteJson(path) {
         return this.requestJSON("DELETE", path);
     }
-    async requestJSON(method, path) {
+    async requestJSON(method, path, body) {
         const url = `${this.base}${path.replace(/^\//, "")}`;
         let lastErr;
         for (let attempt = 0; attempt < this.maxRetries; attempt++) {
             let res;
             try {
-                res = await fetch(url, {
-                    method,
-                    headers: {
-                        accept: "application/json",
-                        authorization: `Bearer ${this.bearerToken}`,
-                    },
-                });
+                const headers = {
+                    accept: "application/json",
+                    authorization: `Bearer ${this.bearerToken}`,
+                };
+                const init = { method, headers };
+                if (method === "POST") {
+                    headers["content-type"] = "application/json";
+                    init.body = JSON.stringify(body ?? {});
+                }
+                res = await fetch(url, init);
             }
             catch (err) {
                 lastErr = err;
@@ -80,6 +86,36 @@ export class GatewayAuditExportsClient {
         throw lastErr instanceof Error ? lastErr : new Error(String(lastErr));
     }
 }
+function buildAuditExportCreateBody(params) {
+    const filter = {};
+    const f = params.filter;
+    if (f.time_start?.trim()) {
+        filter.time_start = f.time_start.trim();
+    }
+    if (f.time_end?.trim()) {
+        filter.time_end = f.time_end.trim();
+    }
+    if (f.intent_id?.trim()) {
+        filter.intent_id = f.intent_id.trim();
+    }
+    if (f.case_id?.trim()) {
+        filter.case_id = f.case_id.trim();
+    }
+    if (f.operator_did?.trim()) {
+        filter.operator_did = f.operator_did.trim();
+    }
+    if (f.includes && f.includes.length > 0) {
+        filter.includes = [...f.includes];
+    }
+    const body = {
+        filter,
+        disclosure_tier: params.disclosureTier ?? "standard",
+    };
+    if (params.retentionHours != null && params.retentionHours > 0) {
+        body.retention_hours = params.retentionHours;
+    }
+    return body;
+}
 /**
  * SDK surface for compliance audit export jobs and local bundle verification.
  */
@@ -111,6 +147,17 @@ export class PaybondAuditExports {
         const body = await this.gateway.getJson(`/v1/compliance/audit-exports/${encodeURIComponent(jobId)}${query}`);
         return parseAuditExportJobGet(body);
     }
+    /**
+     * Create a compliance audit export job (`POST /v1/compliance/audit-exports`).
+     * Tenant scope comes from the API key — never pass a tenant id.
+     */
+    async create(params) {
+        if (!this.gateway.postJson) {
+            throw new Error("audit export create is not supported by this gateway adapter");
+        }
+        const body = await this.gateway.postJson("/v1/compliance/audit-exports", buildAuditExportCreateBody(params));
+        return parseAuditExportJobGet(body);
+    }
     async delete(jobId) {
         if (!this.gateway.deleteJson) {
             throw new Error("audit export delete is not supported by this gateway adapter");

package/dist/audit/index.d.ts

@@ -1,3 +1,3 @@
-export { GatewayAuditExportsClient, PaybondAudit, PaybondAuditExports, type AuditExportsGateway, type GatewayAuditExportsClientOptions, type PaybondAuditExportsGetParams, type PaybondAuditExportsListParams, } from "./exports.js";
+export { GatewayAuditExportsClient, PaybondAudit, PaybondAuditExports, type AuditExportsGateway, type GatewayAuditExportsClientOptions, type PaybondAuditExportsCreateParams, type PaybondAuditExportsGetParams, type PaybondAuditExportsListParams, } from "./exports.js";
 export { auditVerifyResult, buildManifestCore, manifestCoreBytes, readManifestFromBundle, verifyAuditBundleLocal, verifyAuditManifest, MANIFEST_CORE_FIELD_ORDER, } from "./verify.js";
-export { parseAuditExportJobGet, parseAuditExportList, type AuditExportJobDetail, type AuditExportJobGetResponse, type AuditExportJobSummary, type AuditExportListPage, type AuditVerifyResult, } from "./wire.js";
+export { parseAuditExportJobGet, parseAuditExportList, type AuditExportCreateFilter, type AuditExportJobDetail, type AuditExportJobGetResponse, type AuditExportJobSummary, type AuditExportListPage, type AuditVerifyResult, } from "./wire.js";

package/dist/audit/wire.d.ts

@@ -14,6 +14,14 @@ export type AuditExportListPage = Readonly<{
     jobs: ReadonlyArray<AuditExportJobSummary>;
     next_cursor?: string;
 }>;
+export type AuditExportCreateFilter = Readonly<{
+    time_start?: string;
+    time_end?: string;
+    intent_id?: string;
+    case_id?: string;
+    operator_did?: string;
+    includes?: ReadonlyArray<string>;
+}>;
 export type AuditExportJobDetail = Readonly<{
     id: string;
     status: string;
@@ -25,6 +33,10 @@ export type AuditExportJobDetail = Readonly<{
     manifest_sha256: string;
     bundle_sha256: string;
     download_token?: string;
+    /** Present on `POST /v1/compliance/audit-exports` create responses. */
+    bundle_size_bytes?: number;
+    download_token_expires?: string;
+    download_path?: string;
 }>;
 export type AuditExportJobGetResponse = Readonly<{
     job: AuditExportJobDetail;

package/dist/audit/wire.js

@@ -52,17 +52,29 @@ export function parseAuditExportJobGet(json) {
     assertJsonObject(json);
     const jobRaw = json.job ?? json;
     assertJsonObject(jobRaw);
+    const bundleSize = typeof jobRaw.bundle_size_bytes === "number" && Number.isFinite(jobRaw.bundle_size_bytes)
+        ? jobRaw.bundle_size_bytes
+        : undefined;
+    const downloadTokenExpires = typeof jobRaw.download_token_expires === "string" && jobRaw.download_token_expires
+        ? jobRaw.download_token_expires
+        : typeof jobRaw.download_token_expires_at === "string" && jobRaw.download_token_expires_at
+            ? jobRaw.download_token_expires_at
+            : undefined;
+    const downloadPath = typeof jobRaw.download_path === "string" && jobRaw.download_path ? jobRaw.download_path : undefined;
     const job = {
         id: readString(jobRaw.id ?? jobRaw.job_id, "job.id"),
         status: readString(jobRaw.status, "job.status"),
         tenant_realm_id: readString(jobRaw.tenant_realm_id, "job.tenant_realm_id"),
         disclosure_tier: readString(jobRaw.disclosure_tier, "job.disclosure_tier"),
-        created_at: readString(jobRaw.created_at, "job.created_at"),
+        created_at: typeof jobRaw.created_at === "string" ? jobRaw.created_at : "",
         expires_at: readString(jobRaw.expires_at, "job.expires_at"),
         error: typeof jobRaw.error === "string" ? jobRaw.error : "",
         manifest_sha256: typeof jobRaw.manifest_sha256 === "string" ? jobRaw.manifest_sha256 : "",
         bundle_sha256: typeof jobRaw.bundle_sha256 === "string" ? jobRaw.bundle_sha256 : "",
         download_token: typeof jobRaw.download_token === "string" && jobRaw.download_token ? jobRaw.download_token : undefined,
+        bundle_size_bytes: bundleSize,
+        download_token_expires: downloadTokenExpires,
+        download_path: downloadPath,
     };
     return { job };
 }

package/dist/cli/command-spec.js

@@ -29,6 +29,16 @@ export const COMMAND_PATHS = [
     "dev trace",
     "dev loop",
     "dev up",
+    "shopify doctor",
+    "shopify link",
+    "shopify dev",
+    "shopify webhook trigger",
+    "shopify checkout smoke",
+    "shopify order show",
+    "shopify capture ready",
+    "shopify payments doctor",
+    "shopify payments smoke",
+    "shopify payments session show",
     "version",
     "diagnose",
     "config get",
@@ -196,7 +206,8 @@ export const COMMAND_EXAMPLES = {
     ],
     "doctor": [
         "paybond doctor",
-        "paybond doctor --agent --format json"
+        "paybond doctor --agent --format json",
+        "paybond doctor --shopify"
     ],
     "dev": [
         "paybond dev smoke --offline",
@@ -216,6 +227,7 @@ export const COMMAND_EXAMPLES = {
     "dev loop": [
         "paybond dev loop",
         "paybond dev loop --offline",
+        "paybond dev loop --preset shopping --shopify",
         "paybond dev loop --format json"
     ],
     "dev up": [
@@ -223,6 +235,43 @@ export const COMMAND_EXAMPLES = {
         "paybond dev up --port 18089",
         "paybond dev up --down"
     ],
+    "shopify doctor": [
+        "paybond shopify doctor",
+        "paybond shopify doctor --format json"
+    ],
+    "shopify link": [
+        "paybond shopify link"
+    ],
+    "shopify dev": [
+        "paybond shopify dev",
+        "paybond shopify dev --tunnel https://example.ngrok-free.app"
+    ],
+    "shopify webhook trigger": [
+        "paybond shopify webhook trigger --topic orders/paid --gateway https://api.paybond.ai",
+        "paybond shopify webhook trigger --address http://127.0.0.1:8081/webhooks/sandbox/shopify --dry-run"
+    ],
+    "shopify checkout smoke": [
+        "paybond shopify checkout smoke --shop paybond-agent-commerce-dev.myshopify.com",
+        "paybond shopify checkout smoke --offline --format json"
+    ],
+    "shopify order show": [
+        "paybond shopify order show gid://shopify/Order/123 --shop paybond-agent-commerce-dev.myshopify.com"
+    ],
+    "shopify capture ready": [
+        "paybond shopify capture ready",
+        "paybond shopify capture ready --format json"
+    ],
+    "shopify payments doctor": [
+        "paybond shopify payments doctor",
+        "paybond shopify payments doctor --format json"
+    ],
+    "shopify payments smoke": [
+        "paybond shopify payments smoke --shop paybond-agent-commerce-dev.myshopify.com",
+        "paybond shopify payments smoke --offline --format json"
+    ],
+    "shopify payments session show": [
+        "paybond shopify payments session show paybond-smoke-payment-session --shop paybond-agent-commerce-dev.myshopify.com"
+    ],
     "version": [
         "paybond version",
         "paybond version --verbose --format json"
@@ -296,10 +345,12 @@ export const COMMAND_EXAMPLES = {
         "paybond signal fraud --did did:example:alice"
     ],
     "receipts get": [
-        "paybond receipts get receipt-123"
+        "paybond receipts get receipt-123",
+        "paybond receipts get sha256:abc... --kind agent --format json"
     ],
     "receipts verify": [
-        "paybond receipts verify receipt-123"
+        "paybond receipts verify receipt-123",
+        "paybond receipts verify sha256:abc... --kind agent --format json"
     ],
     "mandates verify": [
         "paybond mandates verify --body mandate.json"

package/dist/cli/commands/dev.js

@@ -11,6 +11,7 @@ import { CliError } from "../types.js";
 import { handleAgentSandboxSmoke } from "./agent.js";
 import { handleLogin } from "./setup.js";
 import { handlePolicyInit, handlePolicyValidateTools } from "./policy.js";
+import { buildShopifyNextStepsBanner } from "./shopify.js";
 import { scheduleCliCommandTelemetry } from "../telemetry.js";
 function devCliError(message, options) {
     return new CliError(message, {
@@ -229,6 +230,10 @@ export async function handleDevLoop(ctx, argv) {
     rest = offlineFlag.rest;
     const policyFlag = consumeFlag(rest, "--policy-file");
     rest = policyFlag.rest;
+    const presetFlag = consumeFlag(rest, "--preset");
+    rest = presetFlag.rest;
+    const shopifyFlag = consumeBooleanFlag(rest, "--shopify");
+    rest = shopifyFlag.rest;
     const noLoginFlag = consumeBooleanFlag(rest, "--no-login");
     rest = noLoginFlag.rest;
     if (rest.length > 0) {
@@ -237,6 +242,7 @@ export async function handleDevLoop(ctx, argv) {
             category: "usage",
         });
     }
+    const preset = presetFlag.value?.trim() || DEV_DEFAULT_PRESET;
     const policyFile = policyFlag.value?.trim() || DEV_DEFAULT_POLICY_FILE;
     const steps = [];
     const bannerLines = buildDevStartupBannerLines();
@@ -279,7 +285,7 @@ export async function handleDevLoop(ctx, argv) {
         }
         const initResult = await handlePolicyInit(activeCtx, [
             "--preset",
-            DEV_DEFAULT_PRESET,
+            preset,
             "--out",
             policyFile,
             "--force",
@@ -303,13 +309,14 @@ export async function handleDevLoop(ctx, argv) {
                 details: { steps },
             });
         }
-        const smokeResult = await runDevSmokeCore(activeCtx, DEV_DEFAULT_PRESET, offlineFlag.present);
+        const smokeResult = await runDevSmokeCore(activeCtx, preset, offlineFlag.present);
         steps.push({ name: "smoke", ok: true, data: smokeResult.data });
         const traceUrl = String(smokeResult.data.trace_url ?? devTraceUrl());
         const auditLog = String(smokeResult.data.audit_log ?? resolve(ctx.cwd, ".paybond/dev-audit.jsonl"));
         const smokeChecklist = Array.isArray(smokeResult.data.checklist_lines)
             ? smokeResult.data.checklist_lines
             : [];
+        const shopifyBanner = shopifyFlag.present ? buildShopifyNextStepsBanner() : [];
         scheduleCliCommandTelemetry(activeCtx, {
             commandPath: "dev loop",
             offline: offlineFlag.present,
@@ -321,7 +328,7 @@ export async function handleDevLoop(ctx, argv) {
                 smoke: smokeResult.data,
                 trace_url: traceUrl,
                 audit_log: auditLog,
-                banner_lines: bannerLines,
+                banner_lines: [...bannerLines, ...shopifyBanner],
                 checklist_lines: appendDevLoopTraceLine(smokeChecklist, traceUrl, ctx.globals),
             },
             warnings: smokeResult.warnings,

package/dist/cli/commands/discovery.js

@@ -7,10 +7,8 @@ import { consumeBooleanFlag, consumeFlag } from "../globals.js";
 import { CliError } from "../types.js";
 export async function handleSignal(ctx, subcommand, argv) {
     return withGateway(ctx, async (gateway) => {
-        const principal = await gateway.getJson("/v1/auth/principal");
-        const tenantId = String(principal.tenant_id ?? "");
         if (subcommand === "portfolio") {
-            const body = await gateway.getJson(`/signal/v1/tenants/${encodeURIComponent(tenantId)}/portfolio/summary`);
+            const body = await gateway.getJson("/signal/v1/portfolio/summary");
             return { data: body };
         }
         const didFlag = consumeFlag(argv, "--did");
@@ -18,11 +16,11 @@ export async function handleSignal(ctx, subcommand, argv) {
             throw new CliError(`signal ${subcommand} requires --did`, { category: "usage", code: "cli.usage.missing_did" });
         }
         if (subcommand === "reputation") {
-            const body = await gateway.getJson(`/signal/v1/tenants/${encodeURIComponent(tenantId)}/reputation/${encodeURIComponent(didFlag.value)}`);
+            const body = await gateway.getJson(`/reputation/${encodeURIComponent(didFlag.value)}`);
             return { data: body };
         }
         if (subcommand === "fraud") {
-            const body = await gateway.getJson(`/fraud/v1/tenants/${encodeURIComponent(tenantId)}/assessments/${encodeURIComponent(didFlag.value)}`);
+            const body = await gateway.getJson(`/signal/v1/operators/${encodeURIComponent(didFlag.value)}/review-status`);
             return { data: body };
         }
         throw new CliError(`unknown signal subcommand: ${subcommand}`, { category: "usage", code: "cli.usage.unknown_command" });
@@ -30,10 +28,23 @@ export async function handleSignal(ctx, subcommand, argv) {
 }
 export async function handleReceipts(ctx, subcommand, argv) {
     return withGateway(ctx, async (gateway) => {
+        const kindFlag = consumeFlag(argv, "--kind");
+        const kind = (kindFlag.value ?? "protocol").trim().toLowerCase();
         const receiptId = argv[0];
         if (!receiptId) {
             throw new CliError(`receipts ${subcommand} requires <receipt_id>`, { category: "usage", code: "cli.usage.missing_receipt_id" });
         }
+        if (kind === "agent") {
+            if (subcommand === "get") {
+                const body = await gateway.getJson(`/protocol/v2/agent-receipts/${encodeURIComponent(receiptId)}`);
+                return { data: body };
+            }
+            if (subcommand === "verify") {
+                const fetched = await gateway.getJson(`/protocol/v2/agent-receipts/${encodeURIComponent(receiptId)}`);
+                const body = await gateway.postJson("/protocol/v2/agent-receipts/verify", fetched);
+                return { data: body };
+            }
+        }
         if (subcommand === "get") {
             const body = await gateway.getJson(`/protocol/v2/receipts/${encodeURIComponent(receiptId)}`);
             return { data: body };
@@ -55,7 +66,7 @@ export async function handleMandates(ctx, subcommand, argv) {
             return { data: body };
         }
         if (subcommand === "import") {
-            const body = await gateway.postJson("/protocol/v2/mandates/import", payload);
+            const body = await gateway.postJson("/protocol/v2/mandates", payload);
             return { data: body };
         }
         throw new CliError(`unknown mandates subcommand: ${subcommand}`, { category: "usage", code: "cli.usage.unknown_command" });

package/dist/cli/commands/setup.js

@@ -22,6 +22,7 @@ import { copyTemplateToDirectory, normalizeTemplateId, templateInitUsage, } from
 import { parseArgs as parseLoginArgs, runLogin } from "../../login.js";
 import { main as runMcpServerMain } from "../../mcp-server.js";
 import { PaybondMCPServer } from "../../mcp-server.js";
+import { runShopifyDoctorChecks } from "./shopify.js";
 async function readJsonFile(filePath) {
     return readJsonBody(filePath, process.stdin);
 }
@@ -124,6 +125,19 @@ export async function handleInitWizard(ctx, argv) {
             });
             return { data: result };
         }
+        if (parsed.solution === "shopping" && parsed.framework === "shopify") {
+            const result = await copyTemplateToDirectory({
+                cwd: ctx.cwd,
+                templateId: normalizeTemplateId("shopify-shopping-agent"),
+                force: parsed.force,
+                writeStdout(line) {
+                    if (ctx.globals.format !== "json") {
+                        ctx.stdout.write(`${line}\n`);
+                    }
+                },
+            });
+            return { data: result };
+        }
         const { template: _template, ...wizardOptions } = parsed;
         const result = await runProjectInit({
             cwd: ctx.cwd,
@@ -353,7 +367,8 @@ export async function handleMcpVerifyConfig(ctx, argv) {
 }
 export async function handleDoctor(ctx, argv) {
     const agentFlag = consumeBooleanFlag(argv, "--agent");
-    const hostFlag = consumeFlag(agentFlag.rest, "--host");
+    const shopifyFlag = consumeBooleanFlag(agentFlag.rest, "--shopify");
+    const hostFlag = consumeFlag(shopifyFlag.rest, "--host");
     const checks = [];
     const defaults = resolvedDefaultsForDoctor(ctx.globals);
     checks.push({
@@ -436,6 +451,9 @@ export async function handleDoctor(ctx, argv) {
             });
         }
     }
+    if (shopifyFlag.present) {
+        checks.push(...(await runShopifyDoctorChecks(ctx)));
+    }
     const completionChecks = await runCompletionCatalogDoctorChecks({
         cwd: ctx.cwd,
         gateway: apiKey

package/dist/cli/commands/shopify.d.ts

@@ -0,0 +1,53 @@
+import type { CliContext } from "../context.js";
+import { type CommandResult } from "../types.js";
+export type ShopifyDoctorCheck = {
+    name: string;
+    ok: boolean;
+    message: string;
+    details?: Record<string, unknown>;
+};
+type ExternalCommandResult = {
+    code: number;
+    stdout: string;
+    stderr: string;
+};
+type ShopifyCommandHooks = {
+    whichExecutable?: (name: string) => Promise<string | null>;
+    runCommand?: (command: string, args: string[]) => Promise<ExternalCommandResult>;
+};
+/** Test hook: override external CLI discovery and execution. */
+export declare function setShopifyCommandHooks(hooks: ShopifyCommandHooks): void;
+export type ShopifyAppTomlInfo = {
+    exists: boolean;
+    clientId?: string;
+    path?: string;
+};
+/** Parse `client_id` from a linked `shopify.app.toml` in the working directory. */
+export declare function readShopifyAppToml(cwd: string): Promise<ShopifyAppTomlInfo>;
+export declare function formatShopifyDoctorChecklist(checks: ShopifyDoctorCheck[], useColor: boolean): string[];
+export declare function buildShopifyNextStepsBanner(shopDomain?: string): string[];
+/** Resolve a Paybond gateway origin to the Shopify sandbox webhook path. */
+export declare function resolveShopifyWebhookAddress(gatewayBase: string, tunnel?: string): string;
+export declare function buildShopifyWebhookTriggerCommand(input: {
+    topic: string;
+    address: string;
+    clientId?: string;
+}): string[];
+/** Locate a Paybond Payments `shopify.app.toml` for local dev (cwd or monorepo app path). */
+export declare function readShopifyPaymentsAppToml(cwd: string): Promise<ShopifyAppTomlInfo>;
+export declare function buildShopifyPaymentsNextStepsBanner(shopDomain?: string): string[];
+/** Readiness checks for Paybond + Shopify local development. */
+export declare function runShopifyDoctorChecks(ctx: CliContext): Promise<ShopifyDoctorCheck[]>;
+export declare function handleShopifyDoctor(ctx: CliContext, argv: string[]): Promise<CommandResult>;
+export declare function handleShopifyLink(ctx: CliContext, argv: string[]): Promise<CommandResult>;
+export declare function handleShopifyDev(ctx: CliContext, argv: string[]): Promise<CommandResult>;
+export declare function handleShopifyWebhookTrigger(ctx: CliContext, argv: string[]): Promise<CommandResult>;
+export declare function handleShopifyCheckoutSmoke(ctx: CliContext, argv: string[]): Promise<CommandResult>;
+export declare function handleShopifyOrderShow(ctx: CliContext, argv: string[]): Promise<CommandResult>;
+export declare function handleShopifyCaptureReady(ctx: CliContext, argv: string[]): Promise<CommandResult>;
+export declare function runShopifyPaymentsDoctorChecks(ctx: CliContext): Promise<ShopifyDoctorCheck[]>;
+export declare function handleShopifyPaymentsDoctor(ctx: CliContext, argv: string[]): Promise<CommandResult>;
+export declare function handleShopifyPaymentsSmoke(ctx: CliContext, argv: string[]): Promise<CommandResult>;
+export declare function handleShopifyPaymentsSessionShow(ctx: CliContext, argv: string[]): Promise<CommandResult>;
+export declare function handleShopify(ctx: CliContext, subcommand: string, third: string | undefined, fourth: string | undefined, argv: string[]): Promise<CommandResult>;
+export {};