@paybox-sh/sdk 2.0.0 → 2.2.0

package/dist/{chunk-66FQ2R7G.js → chunk-DWDC6W5P.js}

@@ -156,7 +156,7 @@ async function loginDevice(baseUrl, opts = {}) {
 Code: ${da.user_code}
 `
   );
-  openBrowser(da.verification_uri_complete);
+  if (opts.open !== false) openBrowser(da.verification_uri_complete);
   const timeoutMs = opts.timeoutMs ?? da.expires_in * 1e3;
   const deadline = Date.now() + timeoutMs;
   let intervalSec = da.interval && da.interval > 0 ? da.interval : 5;
@@ -251,6 +251,81 @@ function saveConfig(config) {
   if (process.platform !== "win32") chmodSync(configFile(), 384);
 }
 
+// src/next-action.ts
+function nextActionFor(response, capabilities) {
+  switch (response.status) {
+    case "pending_signature":
+      if (capabilities.canSignInProcess) return { kind: "sign", reason: "signer_ready" };
+      if (capabilities.canRenderSigningUi) {
+        return { kind: "await_human", reason: "signing_ui_required" };
+      }
+      return { kind: "stop", reason: "signer_unavailable" };
+    case "pending_approval":
+      if (capabilities.canOpenApprovalUi) {
+        return { kind: "await_human", reason: "approval_required" };
+      }
+      return { kind: "stop", reason: "approval_ui_unavailable" };
+    case "pending_confirmation":
+    case "pending_settlement":
+    case "pending_funding":
+      return capabilities.canPoll ? { kind: "poll", reason: response.status } : { kind: "stop", reason: "polling_unavailable" };
+    case "success":
+      return { kind: "stop", reason: "completed" };
+    case "denied":
+    case "error":
+      return response.retryable && capabilities.canReconcile ? { kind: "reconcile", reason: "retryable_terminal" } : { kind: "stop", reason: response.status };
+  }
+}
+
+// src/pending-funding.ts
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function pendingFundingResponse(value) {
+  const data = record(value);
+  const response = data?.status === "pending_funding" ? data : record(data?.response);
+  if (response?.status !== "pending_funding") {
+    return null;
+  }
+  return {
+    request_id: typeof response.request_id === "string" ? response.request_id : "",
+    status: "pending_funding",
+    output: null,
+    approval_id: null,
+    error: null
+  };
+}
+function nonSigningFundingResult(value) {
+  const response = pendingFundingResponse(value);
+  if (!response) return value;
+  return record(value)?.status === "pending_funding" ? response : { response, plan: null };
+}
+function pendingFundingToolResponse(result) {
+  const structured = pendingFundingResponse(result.structuredContent);
+  if (structured) return structured;
+  for (const item of result.content) {
+    if (item.type !== "text" || typeof item.text !== "string") continue;
+    let value;
+    try {
+      value = JSON.parse(item.text);
+    } catch {
+      continue;
+    }
+    const response = pendingFundingResponse(value);
+    if (response) return response;
+  }
+  return null;
+}
+function nonSigningFundingToolResult(result) {
+  const response = pendingFundingToolResponse(result);
+  if (!response) return result;
+  return {
+    content: [{ type: "text", text: JSON.stringify(response) }],
+    structuredContent: response,
+    isError: false
+  };
+}
+
 // node_modules/.pnpm/@paybox+mcp-app@file+..+mcp-app_@modelcontextprotocol+sdk@1.29.0_zod@4.4.3__bn.js@5.2.3_ac1e09a20c76a1143611be5dd3d4f9db/node_modules/@paybox/mcp-app/src/signing/creds.ts
 var TOKEN_PREFIX = "pbxk1.";
 function validateHex(s, label) {
@@ -404,8 +479,8 @@ function buildSwapEnvelopes(txs, binding, creds) {
     );
   }
   return txs.map((t) => {
-    const payload = t.vm === "solana" ? solanaSigningPayload(t.transaction) : eip1559SigningHash(t.transaction);
-    const { signed_body, agent_signature } = buildEnvelope(payload, binding, creds);
+    const payload2 = t.vm === "solana" ? solanaSigningPayload(t.transaction) : eip1559SigningHash(t.transaction);
+    const { signed_body, agent_signature } = buildEnvelope(payload2, binding, creds);
     return { api_pub: creds.apiPubHex, signed_body, agent_signature };
   });
 }
@@ -563,42 +638,43 @@ function credsFromToken(token) {
 function toBinding(b) {
   return { walletId: b.wallet_id, keyId: b.key_id ?? "", derivationPath: b.derivation_path ?? "" };
 }
-async function resolveBinding(post, requestId, creds) {
+async function resolveBinding(post, requestId2, creds) {
   const env = buildIssuedAtEnvelope(creds);
-  const r = await post(`/agent/requests/${requestId}/binding`, {
+  const r = await post(`/agent/requests/${requestId2}/binding`, {
     api_pub: creds.apiPubHex,
     signed_body: env.signed_body,
     agent_signature: env.agent_signature
   });
   return toBinding(r);
 }
-async function signWalletRequest(post, requestId, intent, creds, binding) {
-  const resolved = binding && binding.key_id && binding.derivation_path ? toBinding(binding) : await resolveBinding(post, requestId, creds);
-  const transport = (envelope) => post(`/agent/requests/${requestId}/moonx-sign`, {
+async function signWalletRequest(post, requestId2, intent, creds, binding) {
+  const resolved = binding && binding.key_id && binding.derivation_path ? toBinding(binding) : await resolveBinding(post, requestId2, creds);
+  const transport = (envelope) => post(`/agent/requests/${requestId2}/moonx-sign`, {
     api_pub: creds.apiPubHex,
     ...envelope
   });
   const result = await signIntent(intent, creds, resolved, transport);
   if (!result.ok) throw new Error(result.error);
-  await post(`/agent/requests/${requestId}/signature`, { artifact: result.artifact });
+  await post(`/agent/requests/${requestId2}/signature`, { artifact: result.artifact });
   return result.artifact;
 }
-function isSolanaRefreshablePlan(plan) {
+function isRefreshablePlan(plan) {
+  if (typeof plan.refresh_before_sign === "boolean") return plan.refresh_before_sign;
   const txs = plan.txs;
   const solana = txs.some((t) => t.vm === "solana");
   return solana && txs.some(
-    (t) => t.kind === "swap" || t.kind === "prediction_trade" || t.kind === "jupiter_swap"
+    (t) => t.kind === "swap" || t.kind === "prediction_trade"
   );
 }
-async function refreshPlan(post, requestId) {
-  const r = await post(`/agent/requests/${requestId}/refresh`, {});
+async function refreshPlan(post, requestId2) {
+  const r = await post(`/agent/requests/${requestId2}/refresh`, {});
   if (!r || typeof r.plan !== "object" || r.plan === null) {
     throw new Error("refresh returned no plan");
   }
   return r.plan;
 }
-async function refreshSwapPlan(post, requestId) {
-  const refreshed = await refreshPlan(post, requestId);
+async function refreshSwapPlan(post, requestId2) {
+  const refreshed = await refreshPlan(post, requestId2);
   if (!Array.isArray(refreshed.txs) || refreshed.txs.length === 0) {
     throw new Error("swap refresh returned a plan with no txs");
   }
@@ -607,42 +683,43 @@ async function refreshSwapPlan(post, requestId) {
 function isSolanaRailX402(plan) {
   return plan.x402?.rail === "solana";
 }
-async function refreshX402SolanaTx(post, requestId) {
-  const refreshed = await refreshPlan(post, requestId);
+async function refreshX402SolanaTx(post, requestId2) {
+  const refreshed = await refreshPlan(post, requestId2);
   const tx = refreshed.solana?.transaction;
   if (typeof tx !== "string" || tx.length === 0) {
     throw new Error("x402 refresh returned a plan with no Solana transaction");
   }
   return tx;
 }
-async function signSwapRequest(post, requestId, plan, creds) {
-  const signPlan = isSolanaRefreshablePlan(plan) ? await refreshSwapPlan(post, requestId) : plan;
+async function signSwapRequest(post, requestId2, plan, creds, validate) {
+  const signPlan = isRefreshablePlan(plan) ? await refreshSwapPlan(post, requestId2) : plan;
+  validate?.(signPlan);
   let binding = {
     walletId: signPlan.binding.wallet_id,
     keyId: signPlan.binding.key_id ?? "",
     derivationPath: signPlan.binding.derivation_path ?? ""
   };
   if (binding.walletId && (!binding.keyId || !binding.derivationPath)) {
-    binding = await resolveBinding(post, requestId, creds);
+    binding = await resolveBinding(post, requestId2, creds);
   }
   const envelopes = buildSwapEnvelopes(signPlan.txs, binding, creds);
-  await post(`/agent/requests/${requestId}/envelopes`, { envelopes });
+  await post(`/agent/requests/${requestId2}/envelopes`, { envelopes });
 }
-async function signX402Request(post, requestId, plan, creds) {
+async function signX402Request(post, requestId2, plan, creds) {
   let binding = {
     walletId: plan.binding.wallet_id,
     keyId: plan.binding.key_id ?? "",
     derivationPath: plan.binding.derivation_path ?? ""
   };
   if (binding.walletId && (!binding.keyId || !binding.derivationPath)) {
-    binding = await resolveBinding(post, requestId, creds);
+    binding = await resolveBinding(post, requestId2, creds);
   }
-  const envelope = isSolanaRailX402(plan) ? buildX402SolanaEnvelope(await refreshX402SolanaTx(post, requestId), binding, creds) : buildX402Envelope(
+  const envelope = isSolanaRailX402(plan) ? buildX402SolanaEnvelope(await refreshX402SolanaTx(post, requestId2), binding, creds) : buildX402Envelope(
     plan.typed_data,
     binding,
     creds
   );
-  await post(`/agent/requests/${requestId}/envelopes`, { envelopes: [envelope] });
+  await post(`/agent/requests/${requestId2}/envelopes`, { envelopes: [envelope] });
 }
 
 // src/mcp.ts
@@ -677,16 +754,16 @@ var McpTransport = class {
     this.bearer = options.bearer;
     this.fetchImpl = options.fetchImpl;
   }
-  async callTool(name, args) {
-    await this.initialize();
-    return this.rpc("tools/call", { name, arguments: args });
+  async callTool(name, args, signingSurface) {
+    await this.initialize(signingSurface);
+    return this.rpc("tools/call", { name, arguments: args }, signingSurface);
   }
-  async initialize() {
+  async initialize(signingSurface) {
     this.initialization ??= this.rpc("initialize", {
       protocolVersion: PROTOCOL_VERSION,
       capabilities: {},
       clientInfo: { name: "paybox-sdk", version: "1" }
-    }).then(() => this.notify("notifications/initialized", {}));
+    }, signingSurface).then(() => this.notify("notifications/initialized", {}, signingSurface));
     try {
       await this.initialization;
     } catch (error) {
@@ -694,16 +771,17 @@ var McpTransport = class {
       throw error;
     }
   }
-  async post(payload, method) {
+  async post(payload2, method, signingSurface) {
     const response = await this.fetchImpl(this.endpoint, {
       method: "POST",
       headers: {
         accept: "application/json, text/event-stream",
         authorization: `Bearer ${await this.bearer()}`,
         "content-type": "application/json",
-        "mcp-protocol-version": PROTOCOL_VERSION
+        "mcp-protocol-version": PROTOCOL_VERSION,
+        ...signingSurface ? { "x-paybox-signing-surface": signingSurface } : {}
       },
-      body: JSON.stringify(payload)
+      body: JSON.stringify(payload2)
     });
     const text = await response.text();
     if (!response.ok) {
@@ -713,10 +791,10 @@ var McpTransport = class {
     }
     return text;
   }
-  async notify(method, params) {
-    await this.post({ jsonrpc: "2.0", method, params }, method);
+  async notify(method, params, signingSurface) {
+    await this.post({ jsonrpc: "2.0", method, params }, method, signingSurface);
   }
-  async rpc(method, params) {
+  async rpc(method, params, signingSurface) {
     const text = await this.post(
       {
         jsonrpc: "2.0",
@@ -724,7 +802,8 @@ var McpTransport = class {
         method,
         params
       },
-      method
+      method,
+      signingSurface
     );
     const parsed = JSON.parse(responseBody(text));
     if (parsed.error) {
@@ -739,10 +818,226 @@ var McpTransport = class {
   }
 };
 
+// src/execution.ts
+import { setTimeout as delay } from "node:timers/promises";
+
+// src/plugins/signing.ts
+function supportedSigningAction(value) {
+  if (value.operation != null) {
+    const operation = value.operation;
+    const intent = operation.intent;
+    if (operation.type !== "wallet_sign" || value.next_action?.kind !== "sign" || !intent || !["transaction", "solanaTransaction"].includes(intent.op)) return null;
+    try {
+      if (intent.op === "transaction") eip1559SigningHash(intent.transaction);
+      else if (intent.op === "solanaTransaction" && typeof intent.address === "string" && intent.address) deserializeSolanaTx(intent.transactionBase64);
+      else return null;
+    } catch {
+      return null;
+    }
+    const binding = operation.wallet_id == null ? null : {
+      wallet_id: operation.wallet_id,
+      key_id: operation.key_id ?? null,
+      derivation_path: operation.derivation_path ?? null
+    };
+    if (binding && (typeof binding.wallet_id !== "string" || binding.key_id !== null && typeof binding.key_id !== "string" || binding.derivation_path !== null && typeof binding.derivation_path !== "string")) return null;
+    return { type: "wallet_sign", intent, binding };
+  }
+  const plan = supportedSigningPlan(value.plan);
+  return plan ? { type: "transactions", plan } : null;
+}
+function supportedSigningPlan(value) {
+  if (!value || typeof value !== "object") return null;
+  const plan = value;
+  if (plan.version !== void 0 || plan.schema_version !== void 0 || plan.gasless != null || typeof plan.refresh_before_sign !== "boolean") return null;
+  const binding = plan.binding;
+  if (!binding || typeof binding.wallet_id !== "string" || !binding.wallet_id || binding.key_id != null && typeof binding.key_id !== "string" || binding.derivation_path != null && typeof binding.derivation_path !== "string" || typeof plan.sender !== "string" || !plan.sender || !Array.isArray(plan.txs) || plan.txs.length === 0) return null;
+  try {
+    for (const tx of plan.txs) {
+      if (!tx || tx.vm !== plan.txs[0].vm) return null;
+      if (tx.vm === "solana" && typeof tx.transaction === "string") deserializeSolanaTx(tx.transaction);
+      else if (tx.vm === "evm" && tx.transaction && typeof tx.transaction === "object" && !Array.isArray(tx.transaction)) eip1559SigningHash(tx.transaction);
+      else return null;
+    }
+  } catch {
+    return null;
+  }
+  return value;
+}
+
+// src/execution.ts
+var UnsupportedPlanError = class extends Error {
+};
+var invocationIdMeta = "com.moonpay.paybox/invocationId";
+var requestIdMeta = "com.moonpay.paybox/requestId";
+function requestId(value) {
+  return typeof value === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(value) ? value.toLowerCase() : null;
+}
+function payload(result) {
+  const value = result.structuredContent ?? toolJson("plugin execution", { ...result, isError: false });
+  if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("invalid response");
+  return value;
+}
+var statuses = /* @__PURE__ */ new Set([
+  "pending_approval",
+  "pending_funding",
+  "pending_signature",
+  "pending_settlement",
+  "pending_confirmation",
+  "success",
+  "denied",
+  "error"
+]);
+async function executePlugin(start, options, connect) {
+  const timeoutMs = options.timeoutMs ?? 3e5;
+  const intervalMs = options.intervalMs ?? 2e3;
+  if (!Number.isInteger(timeoutMs) || timeoutMs <= 0 || timeoutMs > 2147483647 || !Number.isInteger(intervalMs) || intervalMs <= 0 || intervalMs > 3e4) {
+    throw new RangeError("timeoutMs must be 1..2147483647 and intervalMs must be 1..30000");
+  }
+  let id = typeof start === "string" ? requestId(start) : null;
+  if (typeof start === "string" && !id) throw new TypeError("requestId must be a UUID");
+  let response = null;
+  const result = (outcome, reason) => ({
+    outcome,
+    requestId: id,
+    response,
+    ...reason ? { reason } : {}
+  });
+  const controller = new AbortController();
+  let stopped = "cancelled";
+  const cancel = () => controller.abort();
+  options.signal?.addEventListener("abort", cancel, { once: true });
+  if (options.signal?.aborted) cancel();
+  const timer = setTimeout(() => {
+    if (!controller.signal.aborted) {
+      stopped = "deadline_exceeded";
+      controller.abort();
+    }
+  }, timeoutMs);
+  let onAbort;
+  const aborted = new Promise((resolve) => {
+    onAbort = () => resolve(result(stopped));
+    if (controller.signal.aborted) onAbort();
+    else controller.signal.addEventListener("abort", onAbort, { once: true });
+  });
+  const ports = connect(controller.signal);
+  const read = async () => {
+    controller.signal.throwIfAborted();
+    const next = await ports.getRequest(id);
+    controller.signal.throwIfAborted();
+    if (!next || requestId(next.request_id) !== id || !statuses.has(next.status)) {
+      throw new Error("invalid request response");
+    }
+    response = pendingFundingResponse(next) ?? next;
+    return response;
+  };
+  const terminal = (current) => {
+    if (current.status === "error" || current.status === "denied") return result("terminal");
+    if (current.status !== "success") return null;
+    const value = current.output?.value;
+    const fields = current.output?.output_type === "tx_hash" ? ["tx_hash"] : current.output?.output_type === "signature" ? ["signature", "serializedTransaction", "signedTransactionBase64"] : [];
+    return fields.some((field) => typeof value?.[field] === "string" && value[field].trim()) ? result("terminal") : result("unsupported", "success_output_not_supported");
+  };
+  const drive = async () => {
+    try {
+      controller.signal.throwIfAborted();
+      let toolError = false;
+      if (typeof start !== "string") {
+        const raw = await ports.callTool("use_plugin", {
+          plugin_id: start.pluginId,
+          tool_id: start.toolId,
+          input: start.input,
+          invocation_id: start.invocationId
+        });
+        controller.signal.throwIfAborted();
+        const funding = pendingFundingToolResponse(raw);
+        if (funding) {
+          response = funding;
+          id = requestId(funding.request_id);
+          return result("unsupported", "funding_required");
+        }
+        let data;
+        try {
+          data = payload(raw);
+        } catch {
+          return result("reconcile_required", raw.isError ? "tool_error" : "invalid_plugin_result");
+        }
+        toolError = raw.isError === true || data.status === "error";
+        const nextId = requestId(data.request_id);
+        if (!nextId) return result(toolError ? "reconcile_required" : "unsupported", toolError ? "tool_error" : "no_request_id");
+        if (requestId(start.pluginId)) {
+          const invocationId = requestId(raw._meta?.[invocationIdMeta]);
+          const expectedInvocationId = requestId(start.invocationId);
+          const boundRequestId = requestId(raw._meta?.[requestIdMeta]);
+          if (!invocationId || start.invocationId !== void 0 && invocationId !== expectedInvocationId || boundRequestId !== nextId) {
+            return result("reconcile_required", "request_id_mismatch");
+          }
+        }
+        id = nextId;
+      }
+      let current = await read();
+      let attempted = false;
+      let pauseMs = intervalMs;
+      for (; ; ) {
+        controller.signal.throwIfAborted();
+        const done = terminal(current);
+        if (done) return done;
+        if (current.status === "pending_funding") return result("unsupported", "funding_required");
+        if (toolError) return result("reconcile_required", "tool_error");
+        if (current.status === "pending_approval" && !options.waitForApproval) {
+          return result("approval_required");
+        }
+        if (current.status === "pending_signature") {
+          if (attempted) return result("reconcile_required", "submission_not_confirmed");
+          if (options.autoSign === false || !ports.sign) return result("signing_required");
+          try {
+            const raw = await ports.callTool("reopen_signing_window", { request_id: id });
+            if (raw.isError) throw new Error("reopen failed");
+            const reopened = payload(raw);
+            if (requestId(reopened.request_id) !== id) return result("unsupported", "request_id_mismatch");
+            current = await read();
+            if (current.status !== "pending_signature") continue;
+            if (reopened.status !== "pending_signature") return result("reconcile_required", "request_changed");
+            const action = supportedSigningAction(reopened);
+            if (!action) return result("unsupported", "signing_plan_not_supported");
+            attempted = true;
+            await ports.sign(id, action, (refreshed) => {
+              controller.signal.throwIfAborted();
+              if (!supportedSigningPlan(refreshed)) throw new UnsupportedPlanError();
+            });
+          } catch (error) {
+            current = await read();
+            const done2 = terminal(current);
+            if (done2) return done2;
+            if (error instanceof UnsupportedPlanError) return result("unsupported", "refreshed_plan_not_supported");
+            if (current.status === "pending_signature") return result("reconcile_required", "signing_interrupted");
+          }
+          current = await read();
+          continue;
+        }
+        await delay(pauseMs, void 0, { signal: controller.signal });
+        const previous = current.status;
+        current = await read();
+        pauseMs = current.status === previous ? Math.min(pauseMs * 2, 3e4) : intervalMs;
+      }
+    } catch {
+      return result(controller.signal.aborted ? stopped : "reconcile_required", "execution_interrupted");
+    }
+  };
+  try {
+    return await Promise.race([drive(), aborted]);
+  } finally {
+    clearTimeout(timer);
+    options.signal?.removeEventListener("abort", cancel);
+    controller.signal.removeEventListener("abort", onAbort);
+  }
+}
+
 // src/client.ts
 var DEFAULT_BASE_URL = "https://api.paybox.sh";
 var EXPIRY_SKEW_MS = 6e4;
 function signingResultForResponse(result, response) {
+  const funding = pendingFundingResponse(response);
+  if (funding) return { response: funding, plan: null };
   const exposesPlan = response.status === "pending_approval" || response.status === "pending_signature";
   return { ...result, response, plan: exposesPlan ? result.plan : null };
 }
@@ -800,6 +1095,15 @@ var PayboxClient = class _PayboxClient {
   get canSign() {
     return this.signingCreds() !== null;
   }
+  nextAction(response) {
+    return nextActionFor(response, {
+      canSignInProcess: this.canSign,
+      canRenderSigningUi: false,
+      canOpenApprovalUi: false,
+      canPoll: true,
+      canReconcile: true
+    });
+  }
   async bearer() {
     if (this.opts.token) return this.opts.token;
     if (this.opts.apiKey) return this.opts.apiKey;
@@ -819,6 +1123,7 @@ var PayboxClient = class _PayboxClient {
     );
   }
   async request(method, path, init = {}) {
+    init.signal?.throwIfAborted();
     const url = new URL(this.baseUrl + path);
     for (const [k, v] of Object.entries(init.query ?? {})) {
       if (v != null) url.searchParams.set(k, v);
@@ -829,10 +1134,12 @@ var PayboxClient = class _PayboxClient {
       headers["content-type"] = "application/json";
       body = JSON.stringify(init.body);
     }
-    const res = await this.fetchImpl(url, { method, headers, body });
+    init.signal?.throwIfAborted();
+    const res = await this.fetchImpl(url, { method, headers, body, signal: init.signal });
     const text = await res.text();
+    init.signal?.throwIfAborted();
     if (!res.ok) throw new PayboxError(res.status, text, `${method} ${path}`);
-    return text ? JSON.parse(text) : void 0;
+    return nonSigningFundingResult(text ? JSON.parse(text) : void 0);
   }
   poster = (path, body) => this.request("POST", path, { body });
   listCredentials() {
@@ -903,6 +1210,39 @@ var PayboxClient = class _PayboxClient {
       (r) => r
     );
   }
+  async completeWalletSignRequest(requestId2) {
+    const creds = this.signingCreds();
+    if (!creds) {
+      throw new Error("cannot complete wallet-sign request without a valid local signing key");
+    }
+    const result = await this.mcp.callTool(
+      "reopen_signing_window",
+      { request_id: requestId2 },
+      "in-process"
+    );
+    const parked = toolJson("reopen_signing_window", result);
+    if (parked.request_id !== requestId2) {
+      throw new Error("paybox returned a different request_id for the parked signature");
+    }
+    if (parked.status === "success") return this.getRequest(requestId2);
+    if (parked.status !== "pending_signature") {
+      throw new Error(`cannot complete wallet-sign request while it is ${parked.status ?? "unknown"}`);
+    }
+    const intent = parked.operation?.intent;
+    if (parked.next_action?.kind !== "sign" || parked.operation?.type !== "wallet_sign" || !intent || typeof intent.op !== "string") {
+      throw new Error("paybox returned no signable wallet intent for this request");
+    }
+    const binding = parked.operation && {
+      wallet_id: parked.operation.wallet_id ?? "",
+      key_id: parked.operation.key_id ?? null,
+      derivation_path: parked.operation.derivation_path ?? null
+    };
+    await this.signWithReconcile(
+      requestId2,
+      () => signWalletRequest(this.poster, requestId2, intent, creds, binding)
+    );
+    return this.getRequest(requestId2);
+  }
   async requestSwap(args, opts = {}) {
     return this.withExpiryRetry(
       async () => {
@@ -950,12 +1290,12 @@ var PayboxClient = class _PayboxClient {
       await this.requestAfterSign(response.request_id, opts.waitForApproval)
     );
   }
-  async waitWhileApproval(requestId, wait) {
+  async waitWhileApproval(requestId2, wait) {
     const o = typeof wait === "object" ? wait : {};
     const interval = o.intervalMs ?? 2e3;
     const deadline = Date.now() + (o.timeoutMs ?? 3e5);
     for (; ; ) {
-      const r = await this.getRequest(requestId);
+      const r = await this.getRequest(requestId2);
       if (r.status !== "pending_approval" || Date.now() > deadline) return r;
       await new Promise((res) => setTimeout(res, interval));
     }
@@ -968,11 +1308,11 @@ var PayboxClient = class _PayboxClient {
     }
     return first;
   }
-  async signWithReconcile(requestId, sign) {
+  async signWithReconcile(requestId2, sign) {
     try {
       await sign();
     } catch {
-      const reconciled = await this.getRequest(requestId);
+      const reconciled = await this.getRequest(requestId2);
       if (reconciled.status !== "pending_signature") return;
       await sign();
     }
@@ -1016,12 +1356,40 @@ var PayboxClient = class _PayboxClient {
       await this.mcp.callTool("get_contract", { contract_uri: contractUri })
     );
   }
-  usePlugin(args) {
-    return this.mcp.callTool("use_plugin", {
+  async usePlugin(args) {
+    return nonSigningFundingToolResult(await this.mcp.callTool("use_plugin", {
       plugin_id: args.pluginId,
       tool_id: args.toolId,
       input: args.input,
       invocation_id: args.invocationId
+    }));
+  }
+  runPlugin(args, options = {}) {
+    return this.executePlugin(args, options);
+  }
+  resumeRequest(requestId2, options = {}) {
+    return this.executePlugin(requestId2, options);
+  }
+  executePlugin(start, options) {
+    return executePlugin(start, options, (signal) => {
+      const mcp = new McpTransport({
+        baseUrl: this.baseUrl,
+        bearer: () => this.bearer(),
+        fetchImpl: (input, init) => {
+          signal.throwIfAborted();
+          return this.fetchImpl(input, { ...init, signal });
+        }
+      });
+      const post = (path, body) => this.request("POST", path, { body, signal });
+      const creds = this.signingCreds();
+      return {
+        callTool: (name, args) => mcp.callTool(name, args, name === "reopen_signing_window" ? "in-process" : void 0),
+        getRequest: (id) => this.request("GET", `/agent/requests/${id}`, { signal }),
+        sign: creds ? async (id, action, validate) => {
+          if (action.type === "transactions") await signSwapRequest(post, id, action.plan, creds, validate);
+          else await signWalletRequest(post, id, action.intent, creds, action.binding);
+        } : void 0
+      };
     });
   }
   async payX402(args, opts = {}) {
@@ -1078,8 +1446,8 @@ var PayboxClient = class _PayboxClient {
       await this.requestAfterSign(response.request_id, opts.waitForApproval)
     );
   }
-  claimPaymentCredentials(requestId) {
-    return this.request("POST", `/agent/requests/${requestId}/credentials`);
+  claimPaymentCredentials(requestId2) {
+    return this.request("POST", `/agent/requests/${requestId2}/credentials`);
   }
   requestAccountChange(note) {
     return this.request("POST", "/agent/account-change", { body: { note } });
@@ -1102,19 +1470,19 @@ var PayboxClient = class _PayboxClient {
       }
     });
   }
-  getRequest(requestId) {
-    return this.request("GET", `/agent/requests/${requestId}`);
+  getRequest(requestId2) {
+    return this.request("GET", `/agent/requests/${requestId2}`);
   }
-  requestAfterSign(requestId, wait) {
-    if (!wait) return this.getRequest(requestId);
-    return this.waitForRequest(requestId, typeof wait === "object" ? wait : {});
+  requestAfterSign(requestId2, wait) {
+    if (!wait) return this.getRequest(requestId2);
+    return this.waitForRequest(requestId2, typeof wait === "object" ? wait : {});
   }
-  async waitForRequest(requestId, opts = {}) {
+  async waitForRequest(requestId2, opts = {}) {
     const interval = opts.intervalMs ?? 2e3;
     const deadline = Date.now() + (opts.timeoutMs ?? 3e5);
     for (; ; ) {
-      const r = await this.getRequest(requestId);
-      const pending = r.status === "pending_approval" || r.status === "pending_signature" || r.status === "pending_settlement" || r.status === "pending_confirmation";
+      const r = await this.getRequest(requestId2);
+      const pending = r.status === "pending_approval" || r.status === "pending_funding" || r.status === "pending_signature" || r.status === "pending_settlement" || r.status === "pending_confirmation";
       if (!pending || Date.now() > deadline) return r;
       await new Promise((res) => setTimeout(res, interval));
     }
@@ -1132,10 +1500,13 @@ export {
   configFile,
   loadConfig,
   saveConfig,
+  nextActionFor,
+  pendingFundingResponse,
+  pendingFundingToolResponse,
   encodeToken,
   credsFromToken,
   didNotHappen,
   PayboxError,
   PayboxClient
 };
-//# sourceMappingURL=chunk-66FQ2R7G.js.map
+//# sourceMappingURL=chunk-DWDC6W5P.js.map