@paybond/kit 0.2.1 → 0.4.0

package/dist/principal-intent.d.ts

@@ -2,6 +2,8 @@
  * Principal intent creation signing for raw `predicate_dsl` (no managed-policy binding).
  * Matches `crates/harbor-intent-escrow/src/signing.rs` (`intent_creation_sign_bytes_raw`).
  */
+/** Tenant-configured settlement rail names. Clients may request a rail, not a destination. */
+export type SettlementRail = "stripe_connect" | "x402_usdc_base";
 export declare function intentCreationSignBytesRaw(input: {
     tenantId: string;
     intentId: string;
@@ -30,8 +32,11 @@ export type BuildSignedCreateIntentParams = {
     deadlineRfc3339: string;
     allowedTools: string[];
     predicateRef?: string;
+    /** Optional rail request for the new intent. Harbor resolves the destination server-side. */
+    settlementRail?: SettlementRail;
 };
 /**
  * Build a Harbor `POST /intents` JSON body with principal Ed25519 detached signature.
+ * `settlementRail` only requests an allowed rail; destinations remain tenant-owned server-side.
  */
 export declare function buildSignedCreateIntentBody(params: BuildSignedCreateIntentParams): Record<string, unknown>;

package/dist/principal-intent.js

@@ -5,6 +5,13 @@
 import { sign, getPublicKey } from "@noble/ed25519";
 import { parse as parseUuid } from "uuid";
 import { jsonValueDigest } from "./json-digest.js";
+const SETTLEMENT_RAIL_VALUES = new Set(["stripe_connect", "x402_usdc_base"]);
+function validateSettlementRail(value) {
+    if (!SETTLEMENT_RAIL_VALUES.has(value)) {
+        throw new Error(`settlementRail must be one of ${[...SETTLEMENT_RAIL_VALUES].join(", ")}`);
+    }
+    return value;
+}
 function concatBytes(...parts) {
     const n = parts.reduce((a, p) => a + p.length, 0);
     const out = new Uint8Array(n);
@@ -80,6 +87,7 @@ function bytesToBase64(bytes) {
 }
 /**
  * Build a Harbor `POST /intents` JSON body with principal Ed25519 detached signature.
+ * `settlementRail` only requests an allowed rail; destinations remain tenant-owned server-side.
  */
 export function buildSignedCreateIntentBody(params) {
     if (params.principalSigningSeed.length !== 32) {
@@ -88,6 +96,9 @@ export function buildSignedCreateIntentBody(params) {
     if (params.allowedTools.length === 0) {
         throw new Error("allowedTools must be non-empty");
     }
+    const settlementRail = params.settlementRail
+        ? validateSettlementRail(params.settlementRail)
+        : undefined;
     const predicateRef = params.predicateRef ?? "";
     const msg = intentCreationSignBytesRaw({
         tenantId: params.tenantId,
@@ -124,5 +135,8 @@ export function buildSignedCreateIntentBody(params) {
     if (predicateRef.trim() !== "") {
         body.predicate_ref = predicateRef;
     }
+    if (settlementRail) {
+        body.settlement_rail = settlementRail;
+    }
     return body;
 }

package/package.json

@@ -1,15 +1,22 @@
 {
   "name": "@paybond/kit",
-  "version": "0.2.1",
+  "version": "0.4.0",
   "description": "Paybond Kit for TypeScript: tenant-bound Harbor sessions, capability verification, and signed intent/evidence flows.",
   "license": "Apache-2.0",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "bin": {
+    "paybond-mcp-server": "dist/mcp-server.js"
+  },
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./mcp-server": {
+      "types": "./dist/mcp-server.d.ts",
+      "import": "./dist/mcp-server.js"
     }
   },
   "files": [
@@ -34,7 +41,8 @@
     "agents",
     "typescript",
     "escrow",
-    "capabilities"
+    "capabilities",
+    "mcp"
   ],
   "publishConfig": {
     "access": "public",