@payclaw/badge 0.7.0 → 0.8.0

package/dist/sampling.js

@@ -1,9 +1,8 @@
+import { getBaseUrl } from "./api/client.js";
+import { parseResponse } from "./lib/parse-outcome.js";
+import { getStoredConsentKey } from "./lib/storage.js";
 const SAMPLING_DELAY_MS = 7000; // 7 seconds after identity_presented
 const SAMPLING_TIMEOUT_MS = 15000; // 15 seconds to respond
-const FAILURE_SIGNALS = [
-    "yes", "blocked", "denied", "failed", "403", "error",
-    "rejected", "banned", "forbidden", "captcha", "stopped",
-];
 // In-memory state — max 100 active trips
 const activeTrips = new Map();
 const MAX_TRIPS = 100;
@@ -14,12 +13,16 @@ let serverRef = null;
 let samplingAvailable = false;
 export function initSampling(server) {
     serverRef = server;
-    // Detect sampling support after connection
-    // We'll check on first use since capabilities aren't available until connected
-    samplingAvailable = true; // Optimistic — will catch errors on first attempt
+    // Extended Auth: only use sampling (agent confirmation prompt) when explicitly enabled.
+    // Otherwise, agent reports outcome via payclaw_reportBadgeOutcome.
+    const useExtendedAuth = process.env.PAYCLAW_EXTENDED_AUTH === "true" ||
+        process.env.PAYCLAW_EXTENDED_AUTH === "1";
+    samplingAvailable = useExtendedAuth; // Will catch errors on first attempt if enabled
     if (!reaperStarted) {
         reaperStarted = true;
-        setInterval(() => reapStaleTrips(), REAPER_INTERVAL_MS);
+        if (process.env.VITEST !== "true") {
+            setInterval(() => reapStaleTrips(), REAPER_INTERVAL_MS);
+        }
     }
 }
 export function onTripStarted(token, merchant) {
@@ -65,9 +68,6 @@ export function onIdentityPresented(token, merchant) {
         clearTimeout(t.samplingTimer);
     t.samplingTimer = setTimeout(() => sampleAgent(token, merchant), SAMPLING_DELAY_MS);
 }
-export function reportOutcomeFromAgent(token, merchant, outcome) {
-    resolveTrip(token, outcome, "agent_reported");
-}
 async function sampleAgent(token, merchant) {
     const trip = activeTrips.get(token);
     if (!trip || trip.outcome)
@@ -130,22 +130,6 @@ async function sampleAgent(token, merchant) {
         }
     }
 }
-function parseResponse(text) {
-    if (!text || text.trim().length === 0)
-        return "inconclusive";
-    const lower = text.toLowerCase().trim();
-    // Check for denial signals
-    if (FAILURE_SIGNALS.some((s) => lower.includes(s))) {
-        // But "no" alone means "no, I was not denied" = accepted
-        if (lower === "no" || lower === "no." || lower === "no,")
-            return "accepted";
-        return "denied";
-    }
-    // "no" variants = not denied = accepted
-    if (lower.startsWith("no"))
-        return "accepted";
-    return "inconclusive";
-}
 function resolveTrip(token, outcome, detail) {
     const trip = activeTrips.get(token);
     if (!trip)
@@ -161,15 +145,15 @@ function resolveTrip(token, outcome, detail) {
     activeTrips.delete(token);
 }
 async function reportOutcome(token, outcome, merchant, detail) {
-    const apiUrl = process.env.PAYCLAW_API_URL || "https://payclaw.io";
-    const apiKey = process.env.PAYCLAW_API_KEY;
-    if (!apiKey)
+    const apiUrl = getBaseUrl();
+    const key = getStoredConsentKey();
+    if (!key)
         return;
     const eventType = outcome === "denied" ? "trip_failure" : "trip_success";
     const res = await fetch(`${apiUrl}/api/badge/report`, {
         method: "POST",
         headers: {
-            Authorization: `Bearer ${apiKey}`,
+            Authorization: `Bearer ${key}`,
             "Content-Type": "application/json",
         },
         body: JSON.stringify({
@@ -187,25 +171,82 @@ async function reportOutcome(token, outcome, merchant, detail) {
 }
 function reapStaleTrips() {
     const now = Date.now();
+    let reaped = 0;
     for (const [token, trip] of activeTrips) {
         if (now - trip.startedAt > STALE_TRIP_MS) {
+            const ageMin = Math.round((now - trip.startedAt) / 60000);
             if (trip.presented && !trip.outcome) {
+                process.stderr.write(`[PayClaw] Reaped stale trip: ${token.slice(0, 10)}** (${trip.merchant.slice(0, 64)}, age: ${ageMin}m)\n`);
                 resolveTrip(token, "inconclusive", "stale_trip_reaped");
+                reaped++;
             }
             else {
                 activeTrips.delete(token);
+                reaped++;
             }
         }
     }
+    if (activeTrips.size > 0 || reaped > 0) {
+        process.stderr.write(`[PayClaw] Active trips: ${activeTrips.size} | Reaped: ${reaped}\n`);
+    }
 }
 // Called when MCP client disconnects
 export function onServerClose() {
     for (const [token, trip] of activeTrips) {
         if (trip.presented && !trip.outcome) {
-            // Agent finished normally — assume success
-            resolveTrip(token, "accepted", "server_close_clean_exit");
+            // Agent disconnected — outcome unknown
+            resolveTrip(token, "inconclusive", "server_close");
         }
     }
     activeTrips.clear();
 }
+/** Test-only: reset state between tests. No-op when VITEST not set. */
+export function resetSamplingState() {
+    if (process.env.VITEST !== "true")
+        return;
+    for (const trip of activeTrips.values()) {
+        if (trip.samplingTimer)
+            clearTimeout(trip.samplingTimer);
+    }
+    activeTrips.clear();
+    serverRef = null;
+    samplingAvailable = true;
+    reaperStarted = false;
+}
+/** Test-only: get trip for assertions. Returns undefined when VITEST not set. */
+export function getActiveTrip(token) {
+    if (process.env.VITEST !== "true")
+        return undefined;
+    return activeTrips.get(token);
+}
+/**
+ * Report outcome from agent (payclaw_reportBadgeOutcome tool).
+ * Agent-only path — no sampling prompt. Resolves trip and POSTs to API.
+ * When token not in activeTrips (e.g. after restart), looks up by merchant or POSTs directly.
+ */
+export function reportOutcomeFromAgent(token, merchant, outcome) {
+    if (activeTrips.has(token)) {
+        resolveTrip(token, outcome, "agent_reported");
+        return;
+    }
+    // Token may be from before restart — try to find a unique trip by merchant
+    let matchToken = null;
+    let matchCount = 0;
+    for (const [t, trip] of activeTrips) {
+        if (trip.merchant === merchant && trip.presented && !trip.outcome) {
+            matchToken = t;
+            matchCount++;
+            if (matchCount > 1)
+                break;
+        }
+    }
+    if (matchCount === 1 && matchToken) {
+        resolveTrip(matchToken, outcome, "agent_reported");
+        return;
+    }
+    // No matching trip — still report to API so outcome is recorded
+    reportOutcome(token, outcome, merchant, "agent_reported").catch((err) => {
+        process.stderr.write(`[BADGE] Failed to report outcome: ${err}\n`);
+    });
+}
 //# sourceMappingURL=sampling.js.map

package/dist/sampling.js.map

@@ -1 +1 @@
-{"version":3,"file":"sampling.js","sourceRoot":"","sources":["../src/sampling.ts"],"names":[],"mappings":"AAEA,MAAM,iBAAiB,GAAG,IAAI,CAAC,CAAC,qCAAqC;AACrE,MAAM,mBAAmB,GAAG,KAAK,CAAC,CAAC,wBAAwB;AAE3D,MAAM,eAAe,GAAG;IACtB,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO;IACpD,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS;CACxD,CAAC;AAYF,yCAAyC;AACzC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;AAClD,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAEnD,IAAI,aAAa,GAAG,KAAK,CAAC;AAC1B,IAAI,SAAS,GAAkB,IAAI,CAAC;AACpC,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAE9B,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,SAAS,GAAG,MAAM,CAAC;IAEnB,2CAA2C;IAC3C,+EAA+E;IAC/E,iBAAiB,GAAG,IAAI,CAAC,CAAC,kDAAkD;IAE5E,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,aAAa,GAAG,IAAI,CAAC;QACrB,WAAW,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,QAAgB;IAC3D,gFAAgF;IAChF,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClE,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,6BAA6B,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,IAAI,WAAW,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC,CAAC,CAAC,CAAC;QACL,IAAI,MAAM,EAAE,CAAC;YACX,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE;QACrB,KAAK;QACL,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,QAAgB;IACjE,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,+DAA+D;QAC/D,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE;YACrB,KAAK;YACL,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC;IAED,gCAAgC;IAChC,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC;IAClC,IAAI,CAAC,CAAC,aAAa;QAAE,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC,CAAC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAa,EACb,QAAgB,EAChB,OAA+C;IAE/C,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAa,EAAE,QAAgB;IACxD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,mBAAmB;IAEtD,IAAI,CAAC,SAAS,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACrC,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAChC,SAAS,CAAC,aAAa,CAAC;gBACtB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE;4BACP,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,qDAAqD,QAAQ,kEAAkE;yBACtI;qBACF;iBACF;gBACD,SAAS,EAAE,EAAE;aACd,CAAC;YACF,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC9B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAC7E;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,iBAAiB;QACjB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;YAChE,IAAI,GAAI,OAA4B,CAAC,IAAI,CAAC;QAC5C,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,IAAI,GAAG,OAAO;iBACX,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;iBACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,GAAG,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE7D,IAAI,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACrC,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACzD,CAAC;aAAM,IACL,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAChC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC1B,CAAC;YACD,iBAAiB,GAAG,KAAK,CAAC;YAC1B,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC;IAE7D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAExC,2BAA2B;IAC3B,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,yDAAyD;QACzD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK;YAAE,OAAO,UAAU,CAAC;QAC5E,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,wCAAwC;IACxC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAE9C,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,OAAe,EAAE,MAAc;IACjE,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO;IAElB,IAAI,IAAI,CAAC,aAAa;QAAE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAEvB,gBAAgB;IAChB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,GAAG,IAAI,CAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,KAAa,EACb,OAAe,EACf,QAAgB,EAChB,MAAc;IAEd,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,oBAAoB,CAAC;IACnE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,SAAS,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC;IAEzE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,EAAE;QACpD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,EAAE;YACjC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,kBAAkB,EAAE,KAAK;YACzB,UAAU,EAAE,SAAS;YACrB,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC5B,OAAO;SACR,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0BAA0B,GAAG,CAAC,MAAM,MAAM,IAAI,IAAI,CACnD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QACxC,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,aAAa,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpC,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,aAAa;IAC3B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,2CAA2C;YAC3C,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,yBAAyB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC"}
+{"version":3,"file":"sampling.js","sourceRoot":"","sources":["../src/sampling.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,MAAM,iBAAiB,GAAG,IAAI,CAAC,CAAC,qCAAqC;AACrE,MAAM,mBAAmB,GAAG,KAAK,CAAC,CAAC,wBAAwB;AAY3D,yCAAyC;AACzC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;AAClD,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAEnD,IAAI,aAAa,GAAG,KAAK,CAAC;AAC1B,IAAI,SAAS,GAAkB,IAAI,CAAC;AACpC,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAE9B,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,SAAS,GAAG,MAAM,CAAC;IAEnB,wFAAwF;IACxF,mEAAmE;IACnE,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,MAAM;QAC5C,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG,CAAC;IAC5C,iBAAiB,GAAG,eAAe,CAAC,CAAC,gDAAgD;IAErF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,aAAa,GAAG,IAAI,CAAC;QACrB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClC,WAAW,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,QAAgB;IAC3D,gFAAgF;IAChF,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClE,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,6BAA6B,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,IAAI,WAAW,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAC1C,CAAC,CAAC,CAAC,CAAC;QACL,IAAI,MAAM,EAAE,CAAC;YACX,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE;QACrB,KAAK;QACL,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,QAAgB;IACjE,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,+DAA+D;QAC/D,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE;YACrB,KAAK;YACL,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC;IAED,gCAAgC;IAChC,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC;IAClC,IAAI,CAAC,CAAC,aAAa;QAAE,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC,CAAC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACtF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAa,EAAE,QAAgB;IACxD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,mBAAmB;IAEtD,IAAI,CAAC,SAAS,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACrC,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAChC,SAAS,CAAC,aAAa,CAAC;gBACtB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE;4BACP,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,qDAAqD,QAAQ,kEAAkE;yBACtI;qBACF;iBACF;gBACD,SAAS,EAAE,EAAE;aACd,CAAC;YACF,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC9B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAC7E;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,iBAAiB;QACjB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;YAChE,IAAI,GAAI,OAA4B,CAAC,IAAI,CAAC;QAC5C,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,IAAI,GAAG,OAAO;iBACX,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;iBACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,GAAG,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE7D,IAAI,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACrC,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACzD,CAAC;aAAM,IACL,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAChC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC1B,CAAC;YACD,iBAAiB,GAAG,KAAK,CAAC;YAC1B,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,OAAe,EAAE,MAAc;IACjE,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO;IAElB,IAAI,IAAI,CAAC,aAAa;QAAE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAEvB,gBAAgB;IAChB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qCAAqC,GAAG,IAAI,CAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,KAAa,EACb,OAAe,EACf,QAAgB,EAChB,MAAc;IAEd,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO;IAEjB,MAAM,SAAS,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC;IAEzE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,EAAE;QACpD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,GAAG,EAAE;YAC9B,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,kBAAkB,EAAE,KAAK;YACzB,UAAU,EAAE,SAAS;YACrB,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC5B,OAAO;SACR,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0BAA0B,GAAG,CAAC,MAAM,MAAM,IAAI,IAAI,CACnD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QACxC,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,aAAa,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC;YAC1D,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,MAAM,MAAM,CAAC,CAAC;gBAChI,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;gBACxD,MAAM,EAAE,CAAC;YACX,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1B,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,WAAW,CAAC,IAAI,cAAc,MAAM,IAAI,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,aAAa;IAC3B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,uCAAuC;YACvC,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,kBAAkB;IAChC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO;IAC1C,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,aAAa;YAAE,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3D,CAAC;IACD,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,SAAS,GAAG,IAAI,CAAC;IACjB,iBAAiB,GAAG,IAAI,CAAC;IACzB,aAAa,GAAG,KAAK,CAAC;AACxB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAa,EACb,QAAgB,EAChB,OAA+C;IAE/C,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,2EAA2E;IAC3E,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClE,UAAU,GAAG,CAAC,CAAC;YACf,UAAU,EAAE,CAAC;YACb,IAAI,UAAU,GAAG,CAAC;gBAAE,MAAM;QAC5B,CAAC;IACH,CAAC;IACD,IAAI,UAAU,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;QACnC,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IACD,gEAAgE;IAChE,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,GAAG,IAAI,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/sampling.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sampling.test.js

@@ -0,0 +1,150 @@
+import { describe, it, expect, vi, beforeEach, afterEach, } from "vitest";
+import { onTripStarted, onIdentityPresented, onServerClose, resetSamplingState, getActiveTrip, reportOutcomeFromAgent, } from "./sampling.js";
+import * as storage from "./lib/storage.js";
+vi.mock("./lib/storage.js", () => ({
+    getStoredConsentKey: vi.fn(),
+    storeConsentKey: vi.fn(),
+}));
+vi.mock("./api/client.js", () => ({
+    getBaseUrl: vi.fn().mockReturnValue("https://payclaw.io"),
+}));
+describe("sampling — multi-merchant trip lifecycle", () => {
+    let originalVitest;
+    const mockFetch = vi.fn();
+    beforeEach(() => {
+        originalVitest = process.env.VITEST;
+        process.env.VITEST = "true";
+        vi.stubGlobal("fetch", mockFetch);
+        mockFetch.mockResolvedValue({ ok: true });
+        vi.mocked(storage.getStoredConsentKey).mockReturnValue("pk_test_xxx");
+        resetSamplingState();
+    });
+    afterEach(() => {
+        vi.useRealTimers();
+        resetSamplingState();
+        vi.unstubAllGlobals();
+        if (originalVitest !== undefined) {
+            process.env.VITEST = originalVitest;
+        }
+        else {
+            delete process.env.VITEST;
+        }
+    });
+    it("starting trip B resolves presented trip A as agent_moved_to_new_merchant", () => {
+        onTripStarted("tok_a", "amazon.com");
+        onIdentityPresented("tok_a", "amazon.com");
+        // Trip A is active and presented
+        expect(getActiveTrip("tok_a")).toBeDefined();
+        expect(getActiveTrip("tok_a").presented).toBe(true);
+        // Start trip B at a different merchant
+        onTripStarted("tok_b", "target.com");
+        // Trip A should be resolved and evicted (agent moved on)
+        expect(getActiveTrip("tok_a")).toBeUndefined();
+        // Trip B should be active
+        const tripB = getActiveTrip("tok_b");
+        expect(tripB).toBeDefined();
+        expect(tripB.merchant).toBe("target.com");
+        expect(tripB.presented).toBe(false);
+    });
+    it("trip B can be presented and resolved after trip A is auto-resolved", () => {
+        onTripStarted("tok_a", "amazon.com");
+        onIdentityPresented("tok_a", "amazon.com");
+        onTripStarted("tok_b", "target.com");
+        onIdentityPresented("tok_b", "target.com");
+        const tripB = getActiveTrip("tok_b");
+        expect(tripB).toBeDefined();
+        expect(tripB.presented).toBe(true);
+        // Resolve trip B via agent report
+        reportOutcomeFromAgent("tok_b", "target.com", "accepted");
+        expect(getActiveTrip("tok_b")).toBeUndefined();
+    });
+    it("non-presented trip A is NOT resolved when trip B starts", () => {
+        onTripStarted("tok_a", "amazon.com");
+        // Never call onIdentityPresented for tok_a
+        onTripStarted("tok_b", "target.com");
+        // Trip A should still exist (not presented, so agent_moved logic skips it)
+        expect(getActiveTrip("tok_a")).toBeDefined();
+        expect(getActiveTrip("tok_b")).toBeDefined();
+    });
+    it("same-merchant trip restart does not resolve existing trip", () => {
+        onTripStarted("tok_a", "amazon.com");
+        onIdentityPresented("tok_a", "amazon.com");
+        // Start another trip at SAME merchant — should NOT resolve trip A
+        onTripStarted("tok_b", "amazon.com");
+        // Trip A still active (same merchant = not "moved to new merchant")
+        expect(getActiveTrip("tok_a")).toBeDefined();
+        expect(getActiveTrip("tok_b")).toBeDefined();
+    });
+    it("three-merchant chain resolves each previous trip correctly", () => {
+        onTripStarted("tok_1", "amazon.com");
+        onIdentityPresented("tok_1", "amazon.com");
+        onTripStarted("tok_2", "target.com");
+        expect(getActiveTrip("tok_1")).toBeUndefined(); // resolved
+        onIdentityPresented("tok_2", "target.com");
+        onTripStarted("tok_3", "walmart.com");
+        expect(getActiveTrip("tok_2")).toBeUndefined(); // resolved
+        onIdentityPresented("tok_3", "walmart.com");
+        // Only tok_3 should remain
+        expect(getActiveTrip("tok_3")).toBeDefined();
+        expect(getActiveTrip("tok_3").merchant).toBe("walmart.com");
+    });
+    it("reportOutcomeFromAgent falls back to merchant search when token unknown", () => {
+        onTripStarted("tok_a", "amazon.com");
+        onIdentityPresented("tok_a", "amazon.com");
+        // Report with a different token but matching merchant
+        reportOutcomeFromAgent("unknown_tok", "amazon.com", "accepted");
+        // Trip should be resolved via merchant search fallback
+        expect(getActiveTrip("tok_a")).toBeUndefined();
+    });
+    it("reportOutcomeFromAgent with no matching trip still POSTs to API", () => {
+        mockFetch.mockClear();
+        reportOutcomeFromAgent("orphan_tok", "orphan.com", "denied");
+        // Should have called fetch to POST directly
+        expect(mockFetch).toHaveBeenCalledTimes(1);
+        const [url, opts] = mockFetch.mock.calls[0];
+        expect(url).toContain("/api/badge/report");
+        expect(JSON.parse(opts.body)).toMatchObject({
+            verification_token: "orphan_tok",
+            merchant: "orphan.com",
+            outcome: "denied",
+        });
+    });
+    it("onServerClose resolves all presented trips as inconclusive", () => {
+        onTripStarted("tok_a", "amazon.com");
+        onIdentityPresented("tok_a", "amazon.com");
+        onTripStarted("tok_b", "amazon.com"); // Same merchant — no auto-resolve
+        onIdentityPresented("tok_b", "amazon.com");
+        onServerClose();
+        expect(getActiveTrip("tok_a")).toBeUndefined();
+        expect(getActiveTrip("tok_b")).toBeUndefined();
+    });
+    it("reportOutcomeFromAgent with ambiguous merchant match falls through to API POST", () => {
+        mockFetch.mockClear();
+        // Two trips at same merchant, both presented
+        onTripStarted("tok_a", "amazon.com");
+        onIdentityPresented("tok_a", "amazon.com");
+        onTripStarted("tok_b", "amazon.com");
+        onIdentityPresented("tok_b", "amazon.com");
+        mockFetch.mockClear();
+        reportOutcomeFromAgent("unknown_tok", "amazon.com", "accepted");
+        // Should NOT resolve either trip (ambiguous) — falls through to direct POST
+        expect(getActiveTrip("tok_a")).toBeDefined();
+        expect(getActiveTrip("tok_b")).toBeDefined();
+        expect(mockFetch).toHaveBeenCalledTimes(1);
+        expect(String(mockFetch.mock.calls[0][0])).toContain("/api/badge/report");
+    });
+    it("API report includes correct event_type for outcome", () => {
+        mockFetch.mockClear();
+        onTripStarted("tok_a", "amazon.com");
+        onIdentityPresented("tok_a", "amazon.com");
+        // Move to new merchant — resolves trip A as "accepted"
+        onTripStarted("tok_b", "target.com");
+        // Check the fetch call for trip A resolution
+        const reportCalls = mockFetch.mock.calls.filter((c) => String(c[0]).includes("/api/badge/report"));
+        expect(reportCalls.length).toBeGreaterThanOrEqual(1);
+        const body = JSON.parse(reportCalls[0][1].body);
+        expect(body.event_type).toBe("trip_success");
+        expect(body.detail).toBe("agent_moved_to_new_merchant");
+    });
+});
+//# sourceMappingURL=sampling.test.js.map

package/dist/sampling.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampling.test.js","sourceRoot":"","sources":["../src/sampling.test.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,EAAE,EACF,MAAM,EACN,EAAE,EACF,UAAU,EACV,SAAS,GACV,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAC;AAE5C,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjC,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC5B,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;CACzB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;IAChC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,oBAAoB,CAAC;CAC1D,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,IAAI,cAAkC,CAAC;IACvC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAE1B,UAAU,CAAC,GAAG,EAAE;QACd,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QAC5B,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAClC,SAAS,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QACtE,kBAAkB,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,kBAAkB,EAAE,CAAC;QACrB,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACtB,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAE3C,iCAAiC;QACjC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,CAAC,aAAa,CAAC,OAAO,CAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAErD,uCAAuC;QACvC,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAErC,yDAAyD;QACzD,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAE/C,0BAA0B;QAC1B,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC3C,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAE3C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpC,kCAAkC;QAClC,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QAC1D,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrC,2CAA2C;QAC3C,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAErC,2EAA2E;QAC3E,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAE3C,kEAAkE;QAClE,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAErC,oEAAoE;QACpE,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAE3C,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW;QAC3D,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAE3C,aAAa,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACtC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW;QAC3D,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAE5C,2BAA2B;QAC3B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,CAAC,aAAa,CAAC,OAAO,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAE3C,sDAAsD;QACtD,sBAAsB,CAAC,aAAa,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QAEhE,uDAAuD;QACvD,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,SAAS,CAAC,SAAS,EAAE,CAAC;QAEtB,sBAAsB,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;QAE7D,4CAA4C;QAC5C,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;YAC1C,kBAAkB,EAAE,YAAY;YAChC,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC3C,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,kCAAkC;QACxE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAE3C,aAAa,EAAE,CAAC;QAEhB,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/C,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,SAAS,CAAC,SAAS,EAAE,CAAC;QACtB,6CAA6C;QAC7C,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC3C,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAE3C,SAAS,CAAC,SAAS,EAAE,CAAC;QACtB,sBAAsB,CAAC,aAAa,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;QAEhE,4EAA4E;QAC5E,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,SAAS,CAAC,SAAS,EAAE,CAAC;QACtB,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAE3C,uDAAuD;QACvD,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAErC,6CAA6C;QAC7C,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACpD,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAC3C,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tools/getAgentIdentity.d.ts

@@ -12,10 +12,24 @@ export interface IdentityResult {
     merchant?: string;
     instructions?: string;
     message?: string;
+    /** Internal: activation flow — agent should display this to user */
+    activation_required?: boolean;
+    /** UCP: merchant supports io.payclaw.common.identity */
+    ucpCapable?: boolean;
+    /** UCP: merchant requires PayClaw credential */
+    requiredByMerchant?: boolean;
+    /** UCP: checkout patch to merge into checkout payload */
+    checkoutPatch?: Record<string, unknown>;
+    /** UCP: warning when version mismatch etc. */
+    ucpWarning?: string;
 }
-export declare function getAgentIdentity(merchant?: string): Promise<IdentityResult>;
+/**
+ * Get agent identity token — Badge by PayClaw.
+ * When no consent key exists: initiates device flow, returns activation instructions,
+ * polls in background. On approval, stores key. Next call uses stored key.
+ */
+export declare function getAgentIdentity(merchant?: string, merchantUrl?: string): Promise<IdentityResult>;
 /**
  * Format identity result as human-readable text for CLI/agent display.
- * Claude reads this and relays key info naturally to the user.
  */
 export declare function formatIdentityResponse(r: IdentityResult): string;

package/dist/tools/getAgentIdentity.js

@@ -1,18 +1,107 @@
+// Canonical: badge-server | Synced: PRD-3 | mcp-server syncs from here
 import * as api from "../api/client.js";
+import { getStoredConsentKey } from "../lib/storage.js";
+import { initiateDeviceAuth, pollForApproval } from "../lib/device-auth.js";
+import { fetchUCPManifest, findPayClawCapability, isVersionCompatible } from "../lib/ucp-manifest.js";
 const MOCK_TOKEN_PREFIX = "pc_v1_sand";
+/** Must match the kid in the JWKS published at payclaw.io/.well-known/ucp (BUILD 3 / PRD-1) */
+const PAYCLAW_KID = "payclaw-badge-v1";
 function getMockDisclosure(scope = "BROWSE") {
     return `This agent is using PayClaw Badge: Agent Intent for Ecommerce. The principal user token is a SHA-256 starting ${MOCK_TOKEN_PREFIX}***. Intent has been expressly user-authorized for this session for [${scope}]. For inquiries, please message agent_identity@payclaw.io`;
 }
-export async function getAgentIdentity(merchant) {
-    if (!process.env.PAYCLAW_API_KEY) {
+/** Build disclosure from OAuth token prefix (matches app disclosure format). */
+function getDisclosureFromToken(token, scope = "BROWSE") {
+    const prefix = token.slice(0, 11);
+    return `This agent is using PayClaw Badge: Agent Intent for Ecommerce. The principal user token is a SHA-256 starting ${prefix}***. Intent has been expressly user-authorized for this session for [${scope}]. For inquiries, please message agent_identity@payclaw.io`;
+}
+/** Build identity result from OAuth token (when API doesn't accept OAuth Bearer yet). */
+function identityFromOAuthToken(token, _assuranceLevel, merchant, assumeVerified = true) {
+    return {
+        product_name: "PayClaw Badge",
+        status: assumeVerified ? "active" : "pending",
+        agent_disclosure: getDisclosureFromToken(token),
+        verification_token: token,
+        trust_url: "https://payclaw.io/trust",
+        contact: "agent_identity@payclaw.io",
+        principal_verified: assumeVerified,
+        mfa_confirmed: false,
+        spend_available: false,
+        spend_cta: "For agent payments, use @payclaw/mcp-server — payclaw.io/docs",
+        merchant,
+    };
+}
+let pendingActivation = null;
+/**
+ * Get agent identity token — Badge by PayClaw.
+ * When no consent key exists: initiates device flow, returns activation instructions,
+ * polls in background. On approval, stores key. Next call uses stored key.
+ */
+export async function getAgentIdentity(merchant, merchantUrl) {
+    const consentKey = getStoredConsentKey();
+    let result;
+    // Backward compat: PAYCLAW_API_KEY set → use it, device flow never triggers
+    if (consentKey && process.env.PAYCLAW_API_KEY) {
+        result = await callWithKey(consentKey, merchant);
+    }
+    else if (!consentKey) {
+        // No key: initiate device flow (reuse pending to avoid duplicate pollers)
+        if (pendingActivation)
+            return pendingActivation;
+        const p = startActivationFlow(merchant);
+        pendingActivation = p;
+        try {
+            result = await p;
+        }
+        finally {
+            pendingActivation = null;
+        }
+    }
+    else {
+        // Key from file/memory (OAuth token from device flow)
+        result = await callWithOAuthToken(consentKey, merchant);
+    }
+    // UCP enrichment: check merchant manifest when merchantUrl provided
+    // Skip for mock/sandbox tokens — don't generate checkoutPatch for non-real credentials
+    if (merchantUrl &&
+        result.verification_token &&
+        !result.activation_required &&
+        !result.verification_token.startsWith(MOCK_TOKEN_PREFIX)) {
+        result = await enrichWithUCP(result, merchantUrl);
+    }
+    return result;
+}
+async function enrichWithUCP(result, merchantUrl) {
+    const manifest = await fetchUCPManifest(merchantUrl);
+    if (!manifest) {
+        return { ...result, ucpCapable: false };
+    }
+    const capability = findPayClawCapability(manifest);
+    if (!capability) {
+        return { ...result, ucpCapable: false };
+    }
+    if (!isVersionCompatible(capability.version)) {
         return {
-            product_name: "PayClaw Badge",
-            status: "error",
-            message: "PAYCLAW_API_KEY is not set. Get your key at payclaw.io/dashboard/badge",
+            ...result,
+            ucpCapable: false,
+            ucpWarning: `version mismatch: merchant declares ${capability.version}`,
         };
     }
+    const checkoutPatch = {
+        "io.payclaw.common.identity": {
+            token: result.verification_token,
+            kid: PAYCLAW_KID,
+        },
+    };
+    return {
+        ...result,
+        ucpCapable: true,
+        requiredByMerchant: capability.required,
+        checkoutPatch,
+        instructions: "Merge checkoutPatch into your checkout payload, then call payclaw_reportBadgePresented with the merchantUrl and token.",
+    };
+}
+async function callWithKey(apiKey, merchant) {
     if (!api.isApiMode()) {
-        // Mock mode — return sandbox identity for local testing
         return {
             product_name: "PayClaw Badge",
             status: "active",
@@ -42,25 +131,103 @@ export async function getAgentIdentity(merchant) {
         };
     }
 }
+async function callWithOAuthToken(token, merchant) {
+    if (!api.isApiMode()) {
+        return identityFromOAuthToken(token, undefined, merchant);
+    }
+    try {
+        const result = await api.getAgentIdentityWithToken(api.getBaseUrl(), token, merchant);
+        return {
+            product_name: "PayClaw Badge",
+            status: "active",
+            merchant: merchant || undefined,
+            ...result,
+        };
+    }
+    catch {
+        // API call failed — do not mark as verified when falling back to local identity
+        return identityFromOAuthToken(token, undefined, merchant, false);
+    }
+}
+async function startActivationFlow(merchant) {
+    try {
+        const deviceAuth = await initiateDeviceAuth();
+        const message = [
+            "[PayClaw MCP Server initializing...]",
+            "",
+            "🛡️  Merchants block anonymous bots. PayClaw proves your agent is authorized.",
+            "🔗  To issue your agent's Consent Key, we need your approval.",
+            "",
+            `👉  Go to: ${deviceAuth.verification_uri}`,
+            `🔑  Enter code: ${deviceAuth.user_code}`,
+            "",
+            "[⏳ Waiting for your approval...]",
+        ].join("\n");
+        // Start polling in background — do not await
+        pollForApproval(deviceAuth.device_code, deviceAuth.interval, deviceAuth.expires_in, () => {
+            process.stderr.write([
+                "",
+                "[✅ Approval received]",
+                "",
+                "🎉  Consent Key generated and stored securely.",
+                "🐾  Avatar assigned: Starter Ghost (0 trips)",
+                "🔐  Your agent is now an authorized actor.",
+                "",
+                "Ready to shop. Agents are not bots.",
+                "",
+            ].join("\n"));
+        }).catch(() => {
+            // Poll failed (expired, etc.) — user will need to retry
+        });
+        return {
+            product_name: "PayClaw Badge",
+            status: "activation_required",
+            activation_required: true,
+            message,
+            merchant: merchant || undefined,
+        };
+    }
+    catch (err) {
+        return {
+            product_name: "PayClaw Badge",
+            status: "error",
+            message: err instanceof Error ? err.message : String(err),
+        };
+    }
+}
 /**
  * Format identity result as human-readable text for CLI/agent display.
- * Claude reads this and relays key info naturally to the user.
  */
 export function formatIdentityResponse(r) {
+    if (r.activation_required && r.message) {
+        return r.message;
+    }
     if (r.status === "error") {
         return `✗ BADGE ERROR\n\n  ${r.message}`;
     }
     const lines = [
         `✓ DECLARED — Your agent is now an authorized actor`,
         ``,
-        `  Token:       ${r.verification_token ? r.verification_token.slice(0, 10) + '**' : 'N/A'}`,
-        `  Principal:   ${r.principal_verified ? 'Verified ✓' : 'Unverified'}`,
+        `  Token:       ${r.verification_token ? r.verification_token.slice(0, 10) + "**" : "N/A"}`,
+        `  Principal:   ${r.principal_verified ? "Verified ✓" : "Unverified"}`,
         `  Scope:       [BROWSE]`,
     ];
     if (r.merchant) {
         lines.push(`  Merchant:    ${r.merchant}`);
     }
-    lines.push(`  Status:      ACTIVE`, `  Trust:       ${r.trust_url || 'https://payclaw.io/trust'}`, ``, `  Disclosure (present to merchants):`, `  "${r.agent_disclosure}"`);
+    lines.push(`  Status:      ACTIVE`, `  Trust:       ${r.trust_url || "https://payclaw.io/trust"}`, ``, `  Disclosure (present to merchants):`, `  "${r.agent_disclosure}"`);
+    if (r.ucpCapable) {
+        lines.push(``, `  UCP:         Supported`, `  Required:    ${r.requiredByMerchant ? "Yes" : "No"}`);
+        if (r.instructions) {
+            lines.push(`  Action:      ${r.instructions}`);
+        }
+    }
+    else if (r.ucpCapable === false) {
+        lines.push(``, `  UCP:         Not supported`);
+        if (r.ucpWarning) {
+            lines.push(`  Warning:     ${r.ucpWarning}`);
+        }
+    }
     if (r.spend_available) {
         lines.push(``, `  💳 Spend is available — call payclaw_getCard when ready to pay.`);
     }
@@ -68,8 +235,8 @@ export function formatIdentityResponse(r) {
         lines.push(``, `  ℹ️  ${r.spend_cta}`);
     }
     else {
-        lines.push(``, `  ℹ️  Identity only. Fund your wallet at payclaw.io to enable payments.`);
+        lines.push(``, `  ℹ️  Identity only. For agent payments, use @payclaw/mcp-server — payclaw.io/docs`);
     }
-    return lines.join('\n');
+    return lines.join("\n");
 }
 //# sourceMappingURL=getAgentIdentity.js.map