@paybond/kit 0.7.0 → 0.7.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +0 -24
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -18,7 +18,6 @@ npm install @paybond/kit
|
|
|
18
18
|
|
|
19
19
|
- Node.js 22+
|
|
20
20
|
- A `paybond_sk_sandbox_...` or `paybond_sk_live_...` service-account API key
|
|
21
|
-
- For capability verification: a funded intent id and a capability token minted for that intent
|
|
22
21
|
- For intent creation or evidence submission: 32-byte Ed25519 signing seeds owned by your application
|
|
23
22
|
|
|
24
23
|
Minimal environment for the quick start:
|
|
@@ -27,13 +26,6 @@ Minimal environment for the quick start:
|
|
|
27
26
|
export PAYBOND_API_KEY="paybond_sk_sandbox_..."
|
|
28
27
|
```
|
|
29
28
|
|
|
30
|
-
Optional, if you want the quick start to verify a capability:
|
|
31
|
-
|
|
32
|
-
```bash
|
|
33
|
-
export PAYBOND_INTENT_ID="00000000-0000-0000-0000-000000000000"
|
|
34
|
-
export PAYBOND_CAPABILITY="base64-biscuit-token"
|
|
35
|
-
```
|
|
36
|
-
|
|
37
29
|
## Tenant isolation
|
|
38
30
|
|
|
39
31
|
Every session is bound to the tenant realm echoed by gateway-authenticated service-account introspection.
|
|
@@ -62,22 +54,6 @@ const paybond = await Paybond.open({
|
|
|
62
54
|
|
|
63
55
|
try {
|
|
64
56
|
console.log("tenant realm:", paybond.harbor.tenantId);
|
|
65
|
-
|
|
66
|
-
const intentId = process.env.PAYBOND_INTENT_ID;
|
|
67
|
-
const capability = process.env.PAYBOND_CAPABILITY;
|
|
68
|
-
if (intentId && capability) {
|
|
69
|
-
const verified = await paybond.harbor.verifyCapability({
|
|
70
|
-
intentId,
|
|
71
|
-
token: capability,
|
|
72
|
-
operation: "payments.capture",
|
|
73
|
-
requestedSpendCents: 18_700,
|
|
74
|
-
});
|
|
75
|
-
|
|
76
|
-
if (!verified.allow) {
|
|
77
|
-
throw new Error(`verify denied: ${verified.code ?? "deny"} ${verified.message ?? ""}`);
|
|
78
|
-
}
|
|
79
|
-
console.log("capability verified:", verified.auditId);
|
|
80
|
-
}
|
|
81
57
|
} finally {
|
|
82
58
|
await paybond.aclose();
|
|
83
59
|
}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@paybond/kit",
|
|
3
|
-
"version": "0.7.
|
|
3
|
+
"version": "0.7.1",
|
|
4
4
|
"description": "Paybond Kit for TypeScript: hosted Gateway sessions, capability verification, signed intent/evidence flows, and Stripe Connect or x402 / USDC-on-Base settlement.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"type": "module",
|