@paybond/kit 0.11.6 → 0.11.7

package/dist/cli/http-error-message.d.ts

@@ -11,3 +11,8 @@ export declare function summarizeGatewayHttpError(statusCode: number, bodyText:
  * Build a CLI-safe message for SDK HTTP failures that embed raw bodies in `.message`.
  */
 export declare function formatSdkHttpErrorMessage(rawMessage: string, statusCode: number, bodyText: string): string;
+/**
+ * Resolve a CLI-safe gateway error message from SDK or agent middleware failures.
+ * Never echoes Cloudflare edge JSON, HTML, or raw upstream bodies.
+ */
+export declare function resolveCliGatewayErrorMessage(err: unknown): string;

package/dist/cli/http-error-message.js

@@ -91,3 +91,58 @@ export function formatSdkHttpErrorMessage(rawMessage, statusCode, bodyText) {
     }
     return `${operation} HTTP ${statusCode}: ${summary.message}`;
 }
+function isSdkHttpErrorLike(err) {
+    if (!err || typeof err !== "object") {
+        return false;
+    }
+    const candidate = err;
+    return (typeof candidate.message === "string" &&
+        typeof candidate.statusCode === "number" &&
+        typeof candidate.bodyText === "string");
+}
+function parseEmbeddedHttpErrorBody(message) {
+    const match = / HTTP (\d{3}):\s*(\{[\s\S]*\})\s*$/u.exec(message);
+    if (!match) {
+        return undefined;
+    }
+    return {
+        statusCode: Number(match[1]),
+        bodyText: match[2] ?? "",
+    };
+}
+function extractSdkHttpError(err) {
+    const chain = [];
+    let current = err;
+    while (current) {
+        chain.push(current);
+        current =
+            current instanceof Error && "cause" in current
+                ? current.cause
+                : undefined;
+    }
+    for (const item of chain) {
+        if (isSdkHttpErrorLike(item)) {
+            return item;
+        }
+    }
+    return undefined;
+}
+/**
+ * Resolve a CLI-safe gateway error message from SDK or agent middleware failures.
+ * Never echoes Cloudflare edge JSON, HTML, or raw upstream bodies.
+ */
+export function resolveCliGatewayErrorMessage(err) {
+    const sdkError = extractSdkHttpError(err);
+    if (sdkError) {
+        return formatSdkHttpErrorMessage(sdkError.message, sdkError.statusCode, sdkError.bodyText);
+    }
+    if (err instanceof Error) {
+        const embedded = parseEmbeddedHttpErrorBody(err.message);
+        if (embedded) {
+            const operation = err.message.replace(/ HTTP \d{3}:[\s\S]*$/u, "").trim() || "Gateway request";
+            return formatSdkHttpErrorMessage(operation, embedded.statusCode, embedded.bodyText);
+        }
+        return err.message;
+    }
+    return String(err);
+}

package/dist/cli/router.js

@@ -350,7 +350,10 @@ export async function runCli(argv, deps = {}) {
                 ctx.stdout.write(`${line}\n`);
             }
         }
-        else if (canonical === "agent sandbox smoke" && Array.isArray(result.data.checklist_lines)) {
+        else if ((canonical === "agent sandbox smoke" ||
+            canonical === "agent production attach smoke" ||
+            canonical === "agent harbor evidence smoke") &&
+            Array.isArray(result.data.checklist_lines)) {
             writeTableLines(ctx.stdout, result.data.checklist_lines);
             if (output.warnings.length) {
                 for (const warning of output.warnings) {

package/dist/cli.js

@@ -2,6 +2,8 @@
 import fs from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
+import { deprecatedAliasWarning } from "./cli/automation.js";
+import { mcpServeArgvMatches, runMcpServeCommandSync } from "./cli/commands/setup.js";
 import { runCli } from "./cli/router.js";
 async function invokedFromCLI() {
     const scriptPath = process.argv[1];
@@ -25,7 +27,19 @@ invokedFromCLI().then((invoked) => {
     if (!invoked) {
         return;
     }
-    runCli(process.argv.slice(2)).then((code) => {
+    const argv = process.argv.slice(2);
+    const aliasWarning = deprecatedAliasWarning(process.argv[1]);
+    if (aliasWarning) {
+        process.stderr.write(`${aliasWarning}\n`);
+    }
+    if (mcpServeArgvMatches(argv)) {
+        process.exitCode = runMcpServeCommandSync(argv, {
+            stdout: process.stdout,
+            stderr: process.stderr,
+        });
+        return;
+    }
+    runCli(argv).then((code) => {
         process.exitCode = code;
     }, (err) => {
         process.stderr.write(`${err instanceof Error ? err.message : String(err)}\n`);

package/dist/index.d.ts

@@ -1301,7 +1301,7 @@ export declare class Paybond {
 }
 export { normalizeJson, jsonValueDigest } from "./json-digest.js";
 export { buildSignedCreateIntentBody, buildSignedCreateIntentBodyWithPolicyBinding, intentCreationSignBytesRaw, intentCreationSignBytesWithPolicyBinding, type BuildSignedCreateIntentParams, type BuildSignedCreateIntentWithPolicyBindingParams, type PolicyBindingRef, type PublishedPolicyHead, type SettlementRail, } from "./principal-intent.js";
-export { artifactsDigest, signPayeeEvidenceBinding, type SignPayeeEvidenceParams } from "./payee-evidence.js";
+export { artifactsDigest, evidenceSignBytesV1, signPayeeEvidenceBinding, type SignPayeeEvidenceParams, } from "./payee-evidence.js";
 export { AGENT_RECOGNITION_GATEWAY_VERIFIER_ID, AGENT_RECOGNITION_PROOF_KIND_V1, AGENT_RECOGNITION_PURPOSE_EVIDENCE_SUBMIT, newAgentRecognitionRequestEnvelope, signAgentRecognitionProofV1, signHarborEvidenceSubmitRecognitionProof, type SignAgentRecognitionProofV1Params, type SignedAgentRecognitionProofV1, } from "./agent-recognition.js";
 export { validateCompletionEvidence, type CompletionEvidenceValidationReport, } from "./completion-validate-evidence.js";
 export { completionSchemaDigestHex, computeVendorContractDigests, verifyVendorContract, verifyCatalogVendorContracts, type VendorContract, type VendorContractDigests, } from "./completion-contract-digest.js";

package/dist/index.js

@@ -2324,7 +2324,7 @@ export class Paybond {
 }
 export { normalizeJson, jsonValueDigest } from "./json-digest.js";
 export { buildSignedCreateIntentBody, buildSignedCreateIntentBodyWithPolicyBinding, intentCreationSignBytesRaw, intentCreationSignBytesWithPolicyBinding, } from "./principal-intent.js";
-export { artifactsDigest, signPayeeEvidenceBinding } from "./payee-evidence.js";
+export { artifactsDigest, evidenceSignBytesV1, signPayeeEvidenceBinding, } from "./payee-evidence.js";
 export { AGENT_RECOGNITION_GATEWAY_VERIFIER_ID, AGENT_RECOGNITION_PROOF_KIND_V1, AGENT_RECOGNITION_PURPOSE_EVIDENCE_SUBMIT, newAgentRecognitionRequestEnvelope, signAgentRecognitionProofV1, signHarborEvidenceSubmitRecognitionProof, } from "./agent-recognition.js";
 export { validateCompletionEvidence, } from "./completion-validate-evidence.js";
 export { completionSchemaDigestHex, computeVendorContractDigests, verifyVendorContract, verifyCatalogVendorContracts, } from "./completion-contract-digest.js";

package/dist/mcp-server.js

@@ -5,7 +5,7 @@ import fs from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { requireSecureGatewayUrl } from "./gateway-url.js";
-import { runCli } from "./cli/router.js";
+import { deprecatedAliasWarning } from "./cli/automation.js";
 import { redactSensitiveFields } from "./cli/redact.js";
 import { MCP_TOOL_ALLOWLIST_ENV, MCP_TOOL_POLICY_ENV, mergeMcpToolPolicy, parseMcpToolAllowlist, parseMcpToolPolicy, resolveMcpToolPolicy, toolAllowedByPolicy, } from "./cli/mcp-policy.js";
 import { MCP_EVIDENCE_POLICY_ENV, McpEvidenceValidationGate, completionEvidenceValidationOk, extractHarborEvidenceValidationInput, extractSandboxGuardrailValidationInput, parseMcpEvidencePolicy, } from "./mcp-evidence-policy.js";
@@ -13,7 +13,7 @@ import { McpCapabilityTokenCache, mcpToolStoresCapabilityToken, parseMcpCapabili
 import { createMcpPolicyGatewayAdapter, McpPolicyReloadGate, parseMcpPolicyReloadConfig, } from "./mcp-policy-reload.js";
 import { DEFAULT_PAYBOND_GATEWAY_BASE_URL, GatewayFraudClient, GatewaySignalClient, } from "./index.js";
 const SERVER_NAME = "Paybond MCP";
-const SERVER_VERSION = "0.11.6";
+const SERVER_VERSION = "0.11.7";
 const MCP_PROTOCOL_VERSION = "2025-11-25";
 const DEFAULT_PRINCIPAL_PATH = "/v1/auth/principal";
 const DEFAULT_RECOGNITION_VERIFIER_ID = "paybond-gateway";
@@ -1697,12 +1697,11 @@ invokedFromCLI().then((invoked) => {
     if (!invoked) {
         return;
     }
-    runCli(["mcp", "serve", ...process.argv.slice(2)]).then((code) => {
-        process.exitCode = code;
-    }, (err) => {
-        process.stderr.write(`${formatError(err)}\n`);
-        process.exitCode = 1;
-    });
+    const aliasWarning = deprecatedAliasWarning(process.argv[1]);
+    if (aliasWarning) {
+        process.stderr.write(`${aliasWarning}\n`);
+    }
+    process.exitCode = main(process.argv.slice(2));
 }, (err) => {
     process.stderr.write(`${formatError(err)}\n`);
     process.exitCode = 1;

package/dist/payee-evidence.d.ts

@@ -3,6 +3,15 @@
  */
 /** BLAKE3 digest of concatenated artifact hashes (empty list matches Harbor / `paybond-evidence`). */
 export declare function artifactsDigest(artifactHashes32: Uint8Array[]): Uint8Array;
+/** Canonical EvidenceSignV1 signing bytes (matches `paybond-evidence` / gateway binwire). */
+export declare function evidenceSignBytesV1(input: {
+    tenantId: string;
+    intentId: string;
+    payeeDid: string;
+    payload: Record<string, unknown>;
+    artifactsBlake3Hex: string[];
+    submittedAtRfc3339: string;
+}): Uint8Array;
 export type SignPayeeEvidenceParams = {
     tenantId: string;
     intentId: string;

package/dist/payee-evidence.js

@@ -18,6 +18,18 @@ export function artifactsDigest(artifactHashes32) {
 function encodeEvidenceSignV1(input) {
     return concatBytes(encodeU8(EVIDENCE_SIGN_VERSION), encodeBincodeString(input.tenantId), encodeBincodeUuid(input.intentId), encodeBincodeString(input.payeeDid), encodeFixed32(input.payloadDigest), encodeFixed32(input.artifactsDigest), encodeBincodeString(input.submittedAtRfc3339));
 }
+/** Canonical EvidenceSignV1 signing bytes (matches `paybond-evidence` / gateway binwire). */
+export function evidenceSignBytesV1(input) {
+    const artifactBin = input.artifactsBlake3Hex.map((h) => hexToBytes(h));
+    return encodeEvidenceSignV1({
+        tenantId: input.tenantId,
+        intentId: input.intentId,
+        payeeDid: input.payeeDid,
+        payloadDigest: jsonValueDigest(input.payload),
+        artifactsDigest: artifactsDigest(artifactBin),
+        submittedAtRfc3339: input.submittedAtRfc3339,
+    });
+}
 function bytesToBase64(bytes) {
     let binary = "";
     for (let i = 0; i < bytes.length; i++)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paybond/kit",
-  "version": "0.11.6",
+  "version": "0.11.7",
   "mcpName": "io.github.nonameuserd/paybond",
   "description": "Paybond Kit for TypeScript: agent spend governance for paid tool calls with spend authorization, evidence receipts, refunds, disputes, hosted Gateway sessions, and settlement.",
   "license": "Apache-2.0",

package/templates/manifest.json

@@ -13,7 +13,7 @@
       "evidence_preset": "cost_and_completion",
       "smoke_result_body": { "status": "completed", "cost_cents": 18700 },
       "dependencies": {
-        "@paybond/kit": "^0.11.6",
+        "@paybond/kit": "^0.11.7",
         "@langchain/core": "^1.2.1",
         "@langchain/langgraph": "^1.4.7",
         "zod": "^4.2.0"
@@ -33,7 +33,7 @@
       "evidence_preset": "cost_and_completion",
       "smoke_result_body": { "status": "completed", "cost_cents": 4500 },
       "dependencies": {
-        "@paybond/kit": "^0.11.6",
+        "@paybond/kit": "^0.11.7",
         "ai": "^5.0.0",
         "zod": "^4.2.0"
       },
@@ -52,7 +52,7 @@
       "evidence_preset": "cost_and_completion",
       "smoke_result_body": { "status": "completed", "cost_cents": 2900 },
       "dependencies": {
-        "@paybond/kit": "^0.11.6",
+        "@paybond/kit": "^0.11.7",
         "@openai/agents": "^0.4.0",
         "zod": "^4.2.0"
       },
@@ -71,7 +71,7 @@
       "evidence_preset": "cost_and_completion",
       "smoke_result_body": { "status": "completed", "cost_cents": 4500 },
       "dependencies": {
-        "@paybond/kit": "^0.11.6",
+        "@paybond/kit": "^0.11.7",
         "@openai/agents": "^0.4.0",
         "zod": "^4.2.0"
       },
@@ -90,7 +90,7 @@
       "evidence_preset": "cost_and_completion",
       "smoke_result_body": { "status": "completed", "cost_cents": 18700 },
       "dependencies": {
-        "@paybond/kit": "^0.11.6",
+        "@paybond/kit": "^0.11.7",
         "@anthropic-ai/claude-agent-sdk": "^0.2.100",
         "zod": "^4.2.0"
       },
@@ -110,7 +110,7 @@
       "evidence_preset": "cost_and_completion",
       "smoke_result_body": { "status": "completed", "cost_cents": 500 },
       "dependencies": {
-        "@paybond/kit": "^0.11.6"
+        "@paybond/kit": "^0.11.7"
       },
       "mcp_tool_policy": "spend-write"
     },
@@ -127,7 +127,7 @@
       "evidence_preset": "cost_and_completion",
       "smoke_result_body": { "status": "completed", "cost_cents": 12000 },
       "dependencies": {
-        "@paybond/kit": "^0.11.6"
+        "@paybond/kit": "^0.11.7"
       },
       "demo_mode": "generic"
     },
@@ -143,7 +143,7 @@
       "evidence_preset": "cost_and_completion",
       "smoke_result_body": { "status": "completed", "cost_cents": 12500 },
       "dependencies": {
-        "@paybond/kit": "^0.11.6"
+        "@paybond/kit": "^0.11.7"
       },
       "demo_mode": "generic"
     },
@@ -159,7 +159,7 @@
       "evidence_preset": "cost_and_completion",
       "smoke_result_body": { "status": "completed", "cost_cents": 2900 },
       "python_dependencies": {
-        "paybond-kit": ">=0.11.6",
+        "paybond-kit": ">=0.11.7",
         "langgraph": ">=1.2.0"
       },
       "demo_import": "paybond_kit.langgraph_sandbox_demo",

package/templates/openai-shopping-agent/package-lock.json

@@ -7,7 +7,7 @@
       "name": "openai-shopping-agent",
       "dependencies": {
         "@openai/agents": "^0.4.0",
-        "@paybond/kit": "^0.11.6",
+        "@paybond/kit": "^0.11.7",
         "zod": "^4.2.0"
       },
       "devDependencies": {
@@ -169,9 +169,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.11.6",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.6.tgz",
-      "integrity": "sha512-j4MYl0iqP2XG7Y2vshOxN+tC9ZdJCjlM9burdol2z6b2r45/IpgpA2qiy0L21uLo0qaB+Q9wakoPMIlmnS1Tsg==",
+      "version": "0.11.7",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.7.tgz",
+      "integrity": "sha512-wAVwT7CklrzUKjK+qVKbrxT88hW9xvDBg2tDUl75b2xt57kf9Bv8K0z+fdA0HTgGpJGdjuQRuYbzeSIAiWUgNA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",
@@ -829,9 +829,9 @@
       }
     },
     "node_modules/iconv-lite": {
-      "version": "0.7.2",
-      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.2.tgz",
-      "integrity": "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==",
+      "version": "0.7.3",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.3.tgz",
+      "integrity": "sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==",
       "license": "MIT",
       "optional": true,
       "dependencies": {

package/templates/openai-shopping-agent/package.json

@@ -8,7 +8,7 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation commerce.checkout --requested-spend-cents 4500 --result-body '{\"status\":\"completed\",\"cost_cents\":4500}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.6",
+    "@paybond/kit": "^0.11.7",
     "@openai/agents": "^0.4.0",
     "zod": "^4.2.0"
   },

package/templates/paybond-aws-operator/package-lock.json

@@ -6,7 +6,7 @@
     "": {
       "name": "paybond-aws-operator",
       "dependencies": {
-        "@paybond/kit": "^0.11.6"
+        "@paybond/kit": "^0.11.7"
       },
       "devDependencies": {
         "@types/node": "^22.10.1",
@@ -47,9 +47,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.11.6",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.6.tgz",
-      "integrity": "sha512-j4MYl0iqP2XG7Y2vshOxN+tC9ZdJCjlM9burdol2z6b2r45/IpgpA2qiy0L21uLo0qaB+Q9wakoPMIlmnS1Tsg==",
+      "version": "0.11.7",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.7.tgz",
+      "integrity": "sha512-wAVwT7CklrzUKjK+qVKbrxT88hW9xvDBg2tDUl75b2xt57kf9Bv8K0z+fdA0HTgGpJGdjuQRuYbzeSIAiWUgNA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",

package/templates/paybond-aws-operator/package.json

@@ -8,7 +8,7 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation aws.ec2.start_instance --requested-spend-cents 12500 --result-body '{\"status\":\"completed\",\"cost_cents\":12500}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.6"
+    "@paybond/kit": "^0.11.7"
   },
   "devDependencies": {
     "@types/node": "^22.10.1",

package/templates/paybond-claude-agents-demo/package-lock.json

@@ -7,7 +7,7 @@
       "name": "paybond-claude-agents-demo",
       "dependencies": {
         "@anthropic-ai/claude-agent-sdk": "^0.2.100",
-        "@paybond/kit": "^0.11.6",
+        "@paybond/kit": "^0.11.7",
         "zod": "^4.2.0"
       },
       "devDependencies": {
@@ -260,9 +260,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.11.6",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.6.tgz",
-      "integrity": "sha512-j4MYl0iqP2XG7Y2vshOxN+tC9ZdJCjlM9burdol2z6b2r45/IpgpA2qiy0L21uLo0qaB+Q9wakoPMIlmnS1Tsg==",
+      "version": "0.11.7",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.7.tgz",
+      "integrity": "sha512-wAVwT7CklrzUKjK+qVKbrxT88hW9xvDBg2tDUl75b2xt57kf9Bv8K0z+fdA0HTgGpJGdjuQRuYbzeSIAiWUgNA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",
@@ -875,9 +875,9 @@
       }
     },
     "node_modules/iconv-lite": {
-      "version": "0.7.2",
-      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.2.tgz",
-      "integrity": "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==",
+      "version": "0.7.3",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.3.tgz",
+      "integrity": "sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==",
       "license": "MIT",
       "dependencies": {
         "safer-buffer": ">= 2.1.2 < 3.0.0"

package/templates/paybond-claude-agents-demo/package.json

@@ -8,7 +8,7 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation travel.book_hotel --requested-spend-cents 18700 --result-body '{\"status\":\"completed\",\"cost_cents\":18700}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.6",
+    "@paybond/kit": "^0.11.7",
     "@anthropic-ai/claude-agent-sdk": "^0.2.100",
     "zod": "^4.2.0"
   },

package/templates/paybond-invoice-agent/requirements.txt

@@ -1,2 +1,2 @@
-paybond-kit>=0.11.6
+paybond-kit>=0.11.7
 langgraph>=1.2.0

package/templates/paybond-mcp-coding-agent/package-lock.json

@@ -6,7 +6,7 @@
     "": {
       "name": "paybond-mcp-coding-agent",
       "dependencies": {
-        "@paybond/kit": "^0.11.6"
+        "@paybond/kit": "^0.11.7"
       },
       "devDependencies": {
         "@types/node": "^22.10.1",
@@ -47,9 +47,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.11.6",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.6.tgz",
-      "integrity": "sha512-j4MYl0iqP2XG7Y2vshOxN+tC9ZdJCjlM9burdol2z6b2r45/IpgpA2qiy0L21uLo0qaB+Q9wakoPMIlmnS1Tsg==",
+      "version": "0.11.7",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.7.tgz",
+      "integrity": "sha512-wAVwT7CklrzUKjK+qVKbrxT88hW9xvDBg2tDUl75b2xt57kf9Bv8K0z+fdA0HTgGpJGdjuQRuYbzeSIAiWUgNA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",

package/templates/paybond-mcp-coding-agent/package.json

@@ -8,7 +8,7 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation deploy.preview --requested-spend-cents 500 --result-body '{\"status\":\"completed\",\"cost_cents\":500}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.6"
+    "@paybond/kit": "^0.11.7"
   },
   "devDependencies": {
     "@types/node": "^22.10.1",

package/templates/paybond-openai-agents-demo/package-lock.json

@@ -7,7 +7,7 @@
       "name": "paybond-openai-agents-demo",
       "dependencies": {
         "@openai/agents": "^0.4.0",
-        "@paybond/kit": "^0.11.6",
+        "@paybond/kit": "^0.11.7",
         "zod": "^4.2.0"
       },
       "devDependencies": {
@@ -169,9 +169,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.11.6",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.6.tgz",
-      "integrity": "sha512-j4MYl0iqP2XG7Y2vshOxN+tC9ZdJCjlM9burdol2z6b2r45/IpgpA2qiy0L21uLo0qaB+Q9wakoPMIlmnS1Tsg==",
+      "version": "0.11.7",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.7.tgz",
+      "integrity": "sha512-wAVwT7CklrzUKjK+qVKbrxT88hW9xvDBg2tDUl75b2xt57kf9Bv8K0z+fdA0HTgGpJGdjuQRuYbzeSIAiWUgNA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",
@@ -829,9 +829,9 @@
       }
     },
     "node_modules/iconv-lite": {
-      "version": "0.7.2",
-      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.2.tgz",
-      "integrity": "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==",
+      "version": "0.7.3",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.3.tgz",
+      "integrity": "sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==",
       "license": "MIT",
       "optional": true,
       "dependencies": {

package/templates/paybond-openai-agents-demo/package.json

@@ -8,7 +8,7 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation saas.provision_seat --requested-spend-cents 2900 --result-body '{\"status\":\"completed\",\"cost_cents\":2900}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.6",
+    "@paybond/kit": "^0.11.7",
     "@openai/agents": "^0.4.0",
     "zod": "^4.2.0"
   },

package/templates/paybond-procurement-agent/package-lock.json

@@ -6,7 +6,7 @@
     "": {
       "name": "paybond-procurement-agent",
       "dependencies": {
-        "@paybond/kit": "^0.11.6"
+        "@paybond/kit": "^0.11.7"
       },
       "devDependencies": {
         "@types/node": "^22.10.1",
@@ -47,9 +47,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.11.6",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.6.tgz",
-      "integrity": "sha512-j4MYl0iqP2XG7Y2vshOxN+tC9ZdJCjlM9burdol2z6b2r45/IpgpA2qiy0L21uLo0qaB+Q9wakoPMIlmnS1Tsg==",
+      "version": "0.11.7",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.7.tgz",
+      "integrity": "sha512-wAVwT7CklrzUKjK+qVKbrxT88hW9xvDBg2tDUl75b2xt57kf9Bv8K0z+fdA0HTgGpJGdjuQRuYbzeSIAiWUgNA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",

package/templates/paybond-procurement-agent/package.json

@@ -8,7 +8,7 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation procurement.submit_po --requested-spend-cents 12000 --result-body '{\"status\":\"completed\",\"cost_cents\":12000}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.6"
+    "@paybond/kit": "^0.11.7"
   },
   "devDependencies": {
     "@types/node": "^22.10.1",

package/templates/paybond-travel-agent/package-lock.json

@@ -8,7 +8,7 @@
       "dependencies": {
         "@langchain/core": "^1.2.1",
         "@langchain/langgraph": "^1.4.7",
-        "@paybond/kit": "^0.11.6",
+        "@paybond/kit": "^0.11.7",
         "zod": "^4.2.0"
       },
       "devDependencies": {
@@ -114,9 +114,9 @@
       "license": "MIT"
     },
     "node_modules/@langchain/langgraph-sdk/node_modules/p-queue": {
-      "version": "9.3.0",
-      "resolved": "https://registry.npmjs.org/p-queue/-/p-queue-9.3.0.tgz",
-      "integrity": "sha512-7NED7xhQ74Ngp4JP/2e0VZHp7vSWfJfqeiR92jPgxsz6m0Se4P03YoTKa9dDXyZ3r6P616gUXttrB6nnHYKang==",
+      "version": "9.3.1",
+      "resolved": "https://registry.npmjs.org/p-queue/-/p-queue-9.3.1.tgz",
+      "integrity": "sha512-POWdiIPmsUPGwb4FeQ4OBg46aqmcInSWe45CKDsGHiOBiVQM9chqfQTuqhuTzcg2Vz9faTI65at0KkVyVEiCHw==",
       "license": "MIT",
       "dependencies": {
         "eventemitter3": "^5.0.4",
@@ -178,9 +178,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.11.6",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.6.tgz",
-      "integrity": "sha512-j4MYl0iqP2XG7Y2vshOxN+tC9ZdJCjlM9burdol2z6b2r45/IpgpA2qiy0L21uLo0qaB+Q9wakoPMIlmnS1Tsg==",
+      "version": "0.11.7",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.7.tgz",
+      "integrity": "sha512-wAVwT7CklrzUKjK+qVKbrxT88hW9xvDBg2tDUl75b2xt57kf9Bv8K0z+fdA0HTgGpJGdjuQRuYbzeSIAiWUgNA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",

package/templates/paybond-travel-agent/package.json

@@ -8,7 +8,7 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation travel.book_hotel --requested-spend-cents 18700 --result-body '{\"status\":\"completed\",\"cost_cents\":18700}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.6",
+    "@paybond/kit": "^0.11.7",
     "@langchain/core": "^1.2.1",
     "@langchain/langgraph": "^1.4.7",
     "zod": "^4.2.0"

package/templates/paybond-vercel-shopping-agent/package-lock.json

@@ -6,7 +6,7 @@
     "": {
       "name": "paybond-vercel-shopping-agent",
       "dependencies": {
-        "@paybond/kit": "^0.11.6",
+        "@paybond/kit": "^0.11.7",
         "ai": "^5.0.0",
         "zod": "^4.2.0"
       },
@@ -104,9 +104,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.11.6",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.6.tgz",
-      "integrity": "sha512-j4MYl0iqP2XG7Y2vshOxN+tC9ZdJCjlM9burdol2z6b2r45/IpgpA2qiy0L21uLo0qaB+Q9wakoPMIlmnS1Tsg==",
+      "version": "0.11.7",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.11.7.tgz",
+      "integrity": "sha512-wAVwT7CklrzUKjK+qVKbrxT88hW9xvDBg2tDUl75b2xt57kf9Bv8K0z+fdA0HTgGpJGdjuQRuYbzeSIAiWUgNA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",

package/templates/paybond-vercel-shopping-agent/package.json

@@ -8,7 +8,7 @@
     "smoke": "paybond agent sandbox smoke --policy-file paybond.policy.yaml --operation commerce.checkout --requested-spend-cents 4500 --result-body '{\"status\":\"completed\",\"cost_cents\":4500}' --format json"
   },
   "dependencies": {
-    "@paybond/kit": "^0.11.6",
+    "@paybond/kit": "^0.11.7",
     "ai": "^5.0.0",
     "zod": "^4.2.0"
   },