@paybond/kit 0.12.0 → 0.12.2

package/dist/stripe-commerce/evidence.js

@@ -0,0 +1,164 @@
+import { jsonValueDigest } from "../json-digest.js";
+export const STRIPE_COMMERCE_MAPPER_VERSION = "stripe_commerce_v1";
+const STRIPE_FUNDING_EVENT_TYPES = new Set([
+    "payment_intent.succeeded",
+    "payment_intent.payment_failed",
+    "payment_intent.canceled",
+    "payment_intent.processing",
+    "payment_intent.requires_action",
+    "payment_intent.amount_capturable_updated",
+    "charge.succeeded",
+    "charge.failed",
+    "charge.pending",
+    "charge.refunded",
+    "charge.updated",
+    "charge.dispute.created",
+    "charge.dispute.closed",
+]);
+const STRIPE_FUNDING_EVENT_PREFIXES = ["payment_intent.", "charge.", "payout.", "mandate."];
+function readObject(value) {
+    if (value !== null && typeof value === "object" && !Array.isArray(value)) {
+        return value;
+    }
+    return undefined;
+}
+function readString(record, ...keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === "string" && value.trim().length > 0) {
+            return value.trim();
+        }
+    }
+    return undefined;
+}
+function readNumber(record, ...keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === "number" && Number.isFinite(value)) {
+            return value;
+        }
+    }
+    return undefined;
+}
+function isStripeFundingEventType(eventType) {
+    if (STRIPE_FUNDING_EVENT_TYPES.has(eventType)) {
+        return true;
+    }
+    return STRIPE_FUNDING_EVENT_PREFIXES.some((prefix) => eventType.startsWith(prefix));
+}
+/**
+ * Rejects Stripe funding webhook envelopes — those fund Harbor intents and must not
+ * be submitted as tool-completion evidence.
+ */
+export function assertNotStripeFundingWebhook(input) {
+    const objectKind = readString(input, "object");
+    if (objectKind === "event") {
+        throw new Error("Stripe event webhooks are funding signals, not tool-completion evidence");
+    }
+    const eventType = readString(input, "type", "event_type", "eventType");
+    if (eventType && isStripeFundingEventType(eventType)) {
+        throw new Error(`${eventType} webhooks are funding signals, not tool-completion evidence`);
+    }
+    const eventId = readString(input, "id");
+    if (eventId?.startsWith("evt_") && eventType) {
+        throw new Error("Stripe event webhooks are funding signals, not tool-completion evidence");
+    }
+    const data = readObject(input.data);
+    if (data && readObject(data.object)) {
+        throw new Error("Stripe webhook data.object envelopes are funding signals, not tool-completion evidence");
+    }
+    if (Object.prototype.hasOwnProperty.call(input, "pending_webhooks") &&
+        eventType !== undefined) {
+        throw new Error("Stripe event webhooks are funding signals, not tool-completion evidence");
+    }
+}
+function resolveChargeId(record) {
+    const direct = readString(record, "charge_id", "chargeId");
+    if (direct) {
+        return direct;
+    }
+    const latestCharge = record.latest_charge;
+    if (typeof latestCharge === "string" && latestCharge.startsWith("ch_")) {
+        return latestCharge;
+    }
+    const latestChargeObject = readObject(latestCharge);
+    if (latestChargeObject) {
+        const nestedId = readString(latestChargeObject, "id");
+        if (nestedId?.startsWith("ch_")) {
+            return nestedId;
+        }
+    }
+    const topLevelId = readString(record, "id");
+    if (topLevelId?.startsWith("ch_")) {
+        return topLevelId;
+    }
+    throw new Error("Stripe tool result missing charge_id");
+}
+function resolveCostCents(record) {
+    const cost = readNumber(record, "cost_cents", "costCents", "amount_cents", "amountCents") ??
+        readNumber(record, "amount_received", "amountReceived");
+    if (cost === undefined) {
+        throw new Error("Stripe tool result missing cost_cents");
+    }
+    if (!Number.isInteger(cost) || cost < 0) {
+        throw new Error("Stripe tool result cost_cents must be a non-negative integer");
+    }
+    return cost;
+}
+function normalizeCompletionStatus(status) {
+    const normalized = status.trim().toLowerCase();
+    if (normalized === "succeeded" || normalized === "requires_capture") {
+        return "completed";
+    }
+    return normalized;
+}
+function resolveHttpStatus(record, status) {
+    const explicit = readNumber(record, "http_status", "httpStatus");
+    if (explicit !== undefined) {
+        return explicit;
+    }
+    const normalized = status.trim().toLowerCase();
+    if (normalized === "succeeded" || normalized === "requires_capture") {
+        return 200;
+    }
+    return 402;
+}
+function stripeResponseDigestHex(chargeId, costCents) {
+    const digestBytes = jsonValueDigest({ charge_id: chargeId, cost_cents: costCents });
+    return `blake3:${Buffer.from(digestBytes).toString("hex")}`;
+}
+function mapStripeChargeEvidence(record) {
+    const chargeId = resolveChargeId(record);
+    const status = readString(record, "status") ?? "succeeded";
+    const costCents = resolveCostCents(record);
+    return {
+        charge_id: chargeId,
+        http_status: resolveHttpStatus(record, status),
+        response_digest: stripeResponseDigestHex(chargeId, costCents),
+    };
+}
+function mapCostAndCompletionEvidence(record) {
+    const status = readString(record, "status");
+    if (!status) {
+        throw new Error("Stripe tool result missing status");
+    }
+    return {
+        status: normalizeCompletionStatus(status),
+        cost_cents: resolveCostCents(record),
+    };
+}
+/**
+ * Normalizes Stripe SDK tool results into completion-catalog evidence fields.
+ *
+ * Rejects webhook-shaped funding payloads before mapping.
+ */
+export function mapStripeToolResultToEvidence(toolResult, options) {
+    assertNotStripeFundingWebhook(toolResult);
+    if (options.preset === "stripe_charge") {
+        return mapStripeChargeEvidence(toolResult);
+    }
+    if (options.preset === "cost_and_completion") {
+        return mapCostAndCompletionEvidence(toolResult);
+    }
+    throw new Error(`mapStripeToolResultToEvidence: unsupported preset ${options.preset}`);
+}

package/dist/stripe-commerce/index.d.ts

@@ -0,0 +1,3 @@
+export { buildPaybondStripeMetadata, PAYBOND_STRIPE_METADATA_INTENT_ID_KEY, PAYBOND_STRIPE_METADATA_RAIL_KEY, PAYBOND_STRIPE_METADATA_TENANT_ID_KEY, } from "./metadata.js";
+export { assertNotStripeFundingWebhook, mapStripeToolResultToEvidence, STRIPE_COMMERCE_MAPPER_VERSION, } from "./evidence.js";
+export type { BuildPaybondStripeMetadataParams, CostAndCompletionEvidence, MapStripeToolResultToEvidenceOptions, PaybondStripeMetadata, PaybondStripeSettlementRail, StripeChargeVendorEvidence, StripeCommerceEvidencePreset, StripeToolResultInput, } from "./types.js";

package/dist/stripe-commerce/index.js

@@ -0,0 +1,2 @@
+export { buildPaybondStripeMetadata, PAYBOND_STRIPE_METADATA_INTENT_ID_KEY, PAYBOND_STRIPE_METADATA_RAIL_KEY, PAYBOND_STRIPE_METADATA_TENANT_ID_KEY, } from "./metadata.js";
+export { assertNotStripeFundingWebhook, mapStripeToolResultToEvidence, STRIPE_COMMERCE_MAPPER_VERSION, } from "./evidence.js";

package/dist/stripe-commerce/metadata.d.ts

@@ -0,0 +1,11 @@
+import type { BuildPaybondStripeMetadataParams } from "./types.js";
+export declare const PAYBOND_STRIPE_METADATA_TENANT_ID_KEY = "tenant_id";
+export declare const PAYBOND_STRIPE_METADATA_INTENT_ID_KEY = "paybond_intent_id";
+export declare const PAYBOND_STRIPE_METADATA_RAIL_KEY = "paybond_settlement_rail";
+/**
+ * Builds Stripe PaymentIntent metadata bound to a Harbor intent and tenant realm.
+ *
+ * Values must be sourced from authenticated Paybond session context — never from
+ * unauthenticated client input.
+ */
+export declare function buildPaybondStripeMetadata(params: BuildPaybondStripeMetadataParams): Record<string, string>;

package/dist/stripe-commerce/metadata.js

@@ -0,0 +1,34 @@
+export const PAYBOND_STRIPE_METADATA_TENANT_ID_KEY = "tenant_id";
+export const PAYBOND_STRIPE_METADATA_INTENT_ID_KEY = "paybond_intent_id";
+export const PAYBOND_STRIPE_METADATA_RAIL_KEY = "paybond_settlement_rail";
+const STRIPE_METADATA_RAILS = new Set([
+    "stripe_connect",
+    "stripe_ach_debit",
+]);
+/**
+ * Builds Stripe PaymentIntent metadata bound to a Harbor intent and tenant realm.
+ *
+ * Values must be sourced from authenticated Paybond session context — never from
+ * unauthenticated client input.
+ */
+export function buildPaybondStripeMetadata(params) {
+    const tenantId = params.tenantId.trim();
+    const intentId = params.intentId.trim();
+    if (!tenantId) {
+        throw new Error("buildPaybondStripeMetadata: tenantId is required");
+    }
+    if (!intentId) {
+        throw new Error("buildPaybondStripeMetadata: intentId is required");
+    }
+    const metadata = {
+        [PAYBOND_STRIPE_METADATA_TENANT_ID_KEY]: tenantId,
+        [PAYBOND_STRIPE_METADATA_INTENT_ID_KEY]: intentId,
+    };
+    if (params.rail !== undefined) {
+        if (!STRIPE_METADATA_RAILS.has(params.rail)) {
+            throw new Error("buildPaybondStripeMetadata: rail must be stripe_connect or stripe_ach_debit");
+        }
+        metadata[PAYBOND_STRIPE_METADATA_RAIL_KEY] = params.rail;
+    }
+    return metadata;
+}

package/dist/stripe-commerce/types.d.ts

@@ -0,0 +1,38 @@
+/** Settlement rails allowed on Stripe PaymentIntent metadata (Harbor webhook preflight). */
+export type PaybondStripeSettlementRail = "stripe_connect" | "stripe_ach_debit";
+/** Canonical Paybond metadata keys written to Stripe PaymentIntent.metadata. */
+export type PaybondStripeMetadata = {
+    tenant_id: string;
+    paybond_intent_id: string;
+    paybond_settlement_rail?: PaybondStripeSettlementRail;
+};
+/** Inputs for {@link buildPaybondStripeMetadata}. Tenant id must come from Paybond session credentials. */
+export type BuildPaybondStripeMetadataParams = {
+    tenantId: string;
+    intentId: string;
+    rail?: PaybondStripeSettlementRail;
+};
+/** Completion presets supported by {@link mapStripeToolResultToEvidence}. */
+export type StripeCommerceEvidencePreset = "stripe_charge" | "cost_and_completion";
+export type MapStripeToolResultToEvidenceOptions = {
+    preset: StripeCommerceEvidencePreset;
+};
+/** Vendor evidence shape for the `stripe_charge` completion preset. */
+export type StripeChargeVendorEvidence = {
+    charge_id: string;
+    http_status: number;
+    response_digest: string;
+};
+/** Evidence shape for the `cost_and_completion` archetype preset. */
+export type CostAndCompletionEvidence = {
+    status: string;
+    cost_cents: number;
+};
+/** Normalized Stripe SDK tool result fields accepted by the evidence mapper. */
+export type StripeToolResultInput = {
+    payment_intent_id?: string;
+    charge_id?: string;
+    cost_cents?: number;
+    status?: string;
+    http_status?: number;
+};

package/dist/stripe-commerce/types.js

@@ -0,0 +1 @@
+export {};

package/dist/template-init.d.ts

@@ -1,5 +1,5 @@
 import type { PolicyPresetId } from "./policy/presets.js";
-export type TemplateId = "travel-agent" | "mastra-travel-agent" | "vercel-shopping-agent" | "openai-agents-demo" | "openai-shopping-agent" | "claude-agents-demo" | "mcp-coding-agent" | "procurement-agent" | "invoice-agent" | "aws-operator";
+export type TemplateId = "travel-agent" | "mastra-travel-agent" | "vercel-shopping-agent" | "openai-agents-demo" | "openai-shopping-agent" | "claude-agents-demo" | "mcp-coding-agent" | "procurement-agent" | "invoice-agent" | "aws-operator" | "stripe-agent-demo" | "shopify-shopping-agent";
 export type TemplateManifestEntry = {
     id: TemplateId;
     repo: string;

package/dist/template-init.js

@@ -45,6 +45,10 @@ const TEMPLATE_ALIASES = {
     "paybond-invoice-agent": "invoice-agent",
     "aws-operator": "aws-operator",
     "paybond-aws-operator": "aws-operator",
+    "stripe-agent-demo": "stripe-agent-demo",
+    "paybond-stripe-agent-demo": "stripe-agent-demo",
+    "shopify-shopping-agent": "shopify-shopping-agent",
+    "paybond-shopify-shopping-agent": "shopify-shopping-agent",
 };
 function moduleDir() {
     return dirname(fileURLToPath(import.meta.url));
@@ -194,7 +198,8 @@ export function templateInitUsage() {
         "",
         "Templates:",
         "  travel-agent, mastra-travel-agent, vercel-shopping-agent, openai-agents-demo, openai-shopping-agent,",
-        "  claude-agents-demo, mcp-coding-agent, procurement-agent, invoice-agent, aws-operator",
+        "  claude-agents-demo, mcp-coding-agent, procurement-agent, invoice-agent, aws-operator, stripe-agent-demo,",
+        "  shopify-shopping-agent",
         "",
         "Frameworks (with --template): generic|langgraph|vercel-ai|openai|openai-agents|claude-agents|mcp|mastra",
         "",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paybond/kit",
-  "version": "0.12.0",
+  "version": "0.12.2",
   "mcpName": "io.github.nonameuserd/paybond",
   "description": "Paybond Kit for TypeScript: agent spend governance for paid tool calls with spend authorization, evidence receipts, refunds, disputes, hosted Gateway sessions, and settlement.",
   "license": "Apache-2.0",

package/policy/presets/stripe-commerce.yaml

@@ -0,0 +1,19 @@
+version: 1
+name: stripe-commerce-agent-v1
+default_deny: true
+
+tools:
+  payments.charge_customer:
+    side_effecting: true
+    max_spend_cents: 50000
+    evidence_preset: stripe_charge
+
+  payments.list_invoices:
+    side_effecting: false
+
+intent:
+  allowed_tools:
+    - payments.charge_customer
+  budget:
+    currency: usd
+    max_spend_usd: 500

package/solutions/stripe-commerce.json

@@ -0,0 +1,19 @@
+{
+  "id": "stripe-commerce",
+  "title": "Stripe commerce agent",
+  "policy_default": {
+    "domain": "stripe-commerce",
+    "guardrails": ["default_deny", "max_spend_usd_500"]
+  },
+  "primary_operation": "payments.charge_customer",
+  "completion_preset": "stripe_charge",
+  "smoke": {
+    "result_body": {
+      "payment_intent_id": "pi_smoke",
+      "charge_id": "ch_smoke",
+      "cost_cents": 2500,
+      "status": "succeeded"
+    },
+    "evidence_preset": "stripe_charge"
+  }
+}

package/templates/manifest.json

@@ -11,7 +11,10 @@
       "primary_operation": "travel.book_hotel",
       "requested_spend_cents": 18700,
       "evidence_preset": "cost_and_completion",
-      "smoke_result_body": { "status": "completed", "cost_cents": 18700 },
+      "smoke_result_body": {
+        "status": "completed",
+        "cost_cents": 18700
+      },
       "dependencies": {
         "@paybond/kit": "^0.11.11",
         "@langchain/core": "^1.2.1",
@@ -31,7 +34,10 @@
       "primary_operation": "commerce.checkout",
       "requested_spend_cents": 4500,
       "evidence_preset": "cost_and_completion",
-      "smoke_result_body": { "status": "completed", "cost_cents": 4500 },
+      "smoke_result_body": {
+        "status": "completed",
+        "cost_cents": 4500
+      },
       "dependencies": {
         "@paybond/kit": "^0.11.11",
         "ai": "^5.0.0",
@@ -50,7 +56,10 @@
       "primary_operation": "saas.provision_seat",
       "requested_spend_cents": 2900,
       "evidence_preset": "cost_and_completion",
-      "smoke_result_body": { "status": "completed", "cost_cents": 2900 },
+      "smoke_result_body": {
+        "status": "completed",
+        "cost_cents": 2900
+      },
       "dependencies": {
         "@paybond/kit": "^0.11.11",
         "@openai/agents": "^0.4.0",
@@ -69,7 +78,10 @@
       "primary_operation": "commerce.checkout",
       "requested_spend_cents": 4500,
       "evidence_preset": "cost_and_completion",
-      "smoke_result_body": { "status": "completed", "cost_cents": 4500 },
+      "smoke_result_body": {
+        "status": "completed",
+        "cost_cents": 4500
+      },
       "dependencies": {
         "@paybond/kit": "^0.11.11",
         "@openai/agents": "^0.4.0",
@@ -88,7 +100,10 @@
       "primary_operation": "travel.book_hotel",
       "requested_spend_cents": 18700,
       "evidence_preset": "cost_and_completion",
-      "smoke_result_body": { "status": "completed", "cost_cents": 18700 },
+      "smoke_result_body": {
+        "status": "completed",
+        "cost_cents": 18700
+      },
       "dependencies": {
         "@paybond/kit": "^0.11.11",
         "@anthropic-ai/claude-agent-sdk": "^0.2.100",
@@ -107,7 +122,10 @@
       "primary_operation": "travel.book_hotel",
       "requested_spend_cents": 18700,
       "evidence_preset": "cost_and_completion",
-      "smoke_result_body": { "status": "completed", "cost_cents": 18700 },
+      "smoke_result_body": {
+        "status": "completed",
+        "cost_cents": 18700
+      },
       "dependencies": {
         "@paybond/kit": "^0.11.11",
         "@mastra/core": "^1.49.0",
@@ -127,7 +145,10 @@
       "primary_operation": "deploy.preview",
       "requested_spend_cents": 500,
       "evidence_preset": "cost_and_completion",
-      "smoke_result_body": { "status": "completed", "cost_cents": 500 },
+      "smoke_result_body": {
+        "status": "completed",
+        "cost_cents": 500
+      },
       "dependencies": {
         "@paybond/kit": "^0.11.11"
       },
@@ -144,7 +165,10 @@
       "primary_operation": "procurement.submit_po",
       "requested_spend_cents": 12000,
       "evidence_preset": "cost_and_completion",
-      "smoke_result_body": { "status": "completed", "cost_cents": 12000 },
+      "smoke_result_body": {
+        "status": "completed",
+        "cost_cents": 12000
+      },
       "dependencies": {
         "@paybond/kit": "^0.11.11"
       },
@@ -160,12 +184,57 @@
       "primary_operation": "aws.ec2.start_instance",
       "requested_spend_cents": 12500,
       "evidence_preset": "cost_and_completion",
-      "smoke_result_body": { "status": "completed", "cost_cents": 12500 },
+      "smoke_result_body": {
+        "status": "completed",
+        "cost_cents": 12500
+      },
       "dependencies": {
         "@paybond/kit": "^0.11.11"
       },
       "demo_mode": "generic"
     },
+    {
+      "id": "stripe-agent-demo",
+      "repo": "paybond-stripe-agent-demo",
+      "title": "Stripe commerce agent (generic TypeScript)",
+      "language": "typescript",
+      "framework": "generic",
+      "preset": "stripe-commerce",
+      "primary_operation": "payments.charge_customer",
+      "requested_spend_cents": 2500,
+      "evidence_preset": "stripe_charge",
+      "smoke_result_body": {
+        "payment_intent_id": "pi_smoke",
+        "charge_id": "ch_smoke",
+        "cost_cents": 2500,
+        "status": "succeeded"
+      },
+      "dependencies": {
+        "@paybond/kit": "^0.12.1"
+      },
+      "demo_mode": "generic"
+    },
+    {
+      "id": "shopify-shopping-agent",
+      "repo": "paybond-shopify-shopping-agent",
+      "title": "Shopify shopping agent (UCP + Kit binding)",
+      "language": "typescript",
+      "framework": "generic",
+      "preset": "shopping",
+      "primary_operation": "commerce.checkout",
+      "requested_spend_cents": 4500,
+      "evidence_preset": "cost_and_completion",
+      "smoke_result_body": {
+        "status": "completed",
+        "cost_cents": 4500,
+        "order_id": "gid://shopify/Order/123",
+        "shop": "paybond-agent-commerce-dev.myshopify.com"
+      },
+      "dependencies": {
+        "@paybond/kit": "^0.12.1"
+      },
+      "demo_mode": "generic"
+    },
     {
       "id": "invoice-agent",
       "repo": "paybond-invoice-agent",
@@ -176,7 +245,10 @@
       "primary_operation": "saas.provision_seat",
       "requested_spend_cents": 2900,
       "evidence_preset": "cost_and_completion",
-      "smoke_result_body": { "status": "completed", "cost_cents": 2900 },
+      "smoke_result_body": {
+        "status": "completed",
+        "cost_cents": 2900
+      },
       "python_dependencies": {
         "paybond-kit": ">=0.11.11",
         "langgraph": ">=1.2.0"

package/templates/openai-shopping-agent/package-lock.json

@@ -7,7 +7,7 @@
       "name": "openai-shopping-agent",
       "dependencies": {
         "@openai/agents": "^0.4.0",
-        "@paybond/kit": "^0.12.0",
+        "@paybond/kit": "^0.12.2",
         "zod": "^4.2.0"
       },
       "devDependencies": {
@@ -169,9 +169,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.12.0",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.12.0.tgz",
-      "integrity": "sha512-iAluOkqE8aINum1GF/LkR6Oi04xH9cNCZDJRF5BBFUQMqcNUpN1g/zNQK78jIGVlwcssexnLmiet31Z0NJ5jbg==",
+      "version": "0.12.2",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.12.2.tgz",
+      "integrity": "sha512-so7XNbfEfUH2XZZ9JBHmWST2kjQXaoptyhi8p5rPllMO//8LT5lxpar0R028qAZKxU1y8cbj4kBMXy4lR0m05w==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",
@@ -229,9 +229,9 @@
       }
     },
     "node_modules/@types/node": {
-      "version": "22.20.0",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.0.tgz",
-      "integrity": "sha512-QWlFW2wf3nTjC13/DqRnBpR4ZO36VJH/JVBkA/vcnmbTBNQIlnObqyqZE1tUR7+Ni23Lda8R1BxMfbXRpCUx5g==",
+      "version": "22.20.1",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.1.tgz",
+      "integrity": "sha512-EANqOCF9QFyra+4pfxUcX9STKJpCLjMbObVzljIJomAWSnuSIEAvyzEU53GaajbXJEgdh0iEcPL+DGvpUd4k1Q==",
       "license": "MIT",
       "dependencies": {
         "undici-types": "~6.21.0"
@@ -1040,9 +1040,9 @@
       }
     },
     "node_modules/openai": {
-      "version": "6.45.0",
-      "resolved": "https://registry.npmjs.org/openai/-/openai-6.45.0.tgz",
-      "integrity": "sha512-5DQVNErssk0afNpTTHUm/qZPU4iKR9OYdNid8Ib4puq4gHNNvGWZht2zY4h9a8JMF949Ik6m8gQutllVPbjdnw==",
+      "version": "6.46.0",
+      "resolved": "https://registry.npmjs.org/openai/-/openai-6.46.0.tgz",
+      "integrity": "sha512-DFg6jEPT2RO+oAyXtddeUJU8zkGy1OQ1AjGzNIJUMQG03TTqvCpy9tBpQ+2VVVnvrl3E56F8GEin2JYtWpITtA==",
       "license": "Apache-2.0",
       "peerDependencies": {
         "@aws-sdk/credential-provider-node": ">=3.972.0 <4",

package/templates/openai-shopping-agent/src/paybond.config.ts

@@ -28,7 +28,7 @@ export async function loadPaybondEnvFile(envFile = ".env.local"): Promise<void>
     const { readFile } = await import("node:fs/promises");
     body = await readFile(envFile, "utf8");
   } catch (err) {
-    if ((err).code === "ENOENT") return;
+    if ((err as { code?: string }).code === "ENOENT") return;
     throw err;
   }
   const apiKey = readEnvValue(body, "PAYBOND_API_KEY");

package/templates/paybond-aws-operator/package-lock.json

@@ -6,7 +6,7 @@
     "": {
       "name": "paybond-aws-operator",
       "dependencies": {
-        "@paybond/kit": "^0.12.0"
+        "@paybond/kit": "^0.12.2"
       },
       "devDependencies": {
         "@types/node": "^22.10.1",
@@ -47,9 +47,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.12.0",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.12.0.tgz",
-      "integrity": "sha512-iAluOkqE8aINum1GF/LkR6Oi04xH9cNCZDJRF5BBFUQMqcNUpN1g/zNQK78jIGVlwcssexnLmiet31Z0NJ5jbg==",
+      "version": "0.12.2",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.12.2.tgz",
+      "integrity": "sha512-so7XNbfEfUH2XZZ9JBHmWST2kjQXaoptyhi8p5rPllMO//8LT5lxpar0R028qAZKxU1y8cbj4kBMXy4lR0m05w==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",
@@ -107,9 +107,9 @@
       }
     },
     "node_modules/@types/node": {
-      "version": "22.20.0",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.0.tgz",
-      "integrity": "sha512-QWlFW2wf3nTjC13/DqRnBpR4ZO36VJH/JVBkA/vcnmbTBNQIlnObqyqZE1tUR7+Ni23Lda8R1BxMfbXRpCUx5g==",
+      "version": "22.20.1",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.1.tgz",
+      "integrity": "sha512-EANqOCF9QFyra+4pfxUcX9STKJpCLjMbObVzljIJomAWSnuSIEAvyzEU53GaajbXJEgdh0iEcPL+DGvpUd4k1Q==",
       "dev": true,
       "license": "MIT",
       "dependencies": {

package/templates/paybond-aws-operator/src/paybond.config.ts

@@ -28,7 +28,7 @@ export async function loadPaybondEnvFile(envFile = ".env.local"): Promise<void>
     const { readFile } = await import("node:fs/promises");
     body = await readFile(envFile, "utf8");
   } catch (err) {
-    if ((err).code === "ENOENT") return;
+    if ((err as { code?: string }).code === "ENOENT") return;
     throw err;
   }
   const apiKey = readEnvValue(body, "PAYBOND_API_KEY");

package/templates/paybond-claude-agents-demo/package-lock.json

@@ -7,7 +7,7 @@
       "name": "paybond-claude-agents-demo",
       "dependencies": {
         "@anthropic-ai/claude-agent-sdk": "^0.2.100",
-        "@paybond/kit": "^0.12.0",
+        "@paybond/kit": "^0.12.2",
         "zod": "^4.2.0"
       },
       "devDependencies": {
@@ -260,9 +260,9 @@
       }
     },
     "node_modules/@paybond/kit": {
-      "version": "0.12.0",
-      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.12.0.tgz",
-      "integrity": "sha512-iAluOkqE8aINum1GF/LkR6Oi04xH9cNCZDJRF5BBFUQMqcNUpN1g/zNQK78jIGVlwcssexnLmiet31Z0NJ5jbg==",
+      "version": "0.12.2",
+      "resolved": "https://registry.npmjs.org/@paybond/kit/-/kit-0.12.2.tgz",
+      "integrity": "sha512-so7XNbfEfUH2XZZ9JBHmWST2kjQXaoptyhi8p5rPllMO//8LT5lxpar0R028qAZKxU1y8cbj4kBMXy4lR0m05w==",
       "license": "Apache-2.0",
       "dependencies": {
         "@noble/ed25519": "^2.2.1",
@@ -320,9 +320,9 @@
       }
     },
     "node_modules/@types/node": {
-      "version": "22.20.0",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.0.tgz",
-      "integrity": "sha512-QWlFW2wf3nTjC13/DqRnBpR4ZO36VJH/JVBkA/vcnmbTBNQIlnObqyqZE1tUR7+Ni23Lda8R1BxMfbXRpCUx5g==",
+      "version": "22.20.1",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.1.tgz",
+      "integrity": "sha512-EANqOCF9QFyra+4pfxUcX9STKJpCLjMbObVzljIJomAWSnuSIEAvyzEU53GaajbXJEgdh0iEcPL+DGvpUd4k1Q==",
       "dev": true,
       "license": "MIT",
       "dependencies": {

package/templates/paybond-claude-agents-demo/src/paybond.config.ts

@@ -28,7 +28,7 @@ export async function loadPaybondEnvFile(envFile = ".env.local"): Promise<void>
     const { readFile } = await import("node:fs/promises");
     body = await readFile(envFile, "utf8");
   } catch (err) {
-    if ((err).code === "ENOENT") return;
+    if ((err as { code?: string }).code === "ENOENT") return;
     throw err;
   }
   const apiKey = readEnvValue(body, "PAYBOND_API_KEY");