agent402-client 0.6.10 → 0.6.11

package/README.md

@@ -69,6 +69,15 @@ const a = new Agent402({ fetch: payFetch });
 const article = await a.call("extract", { url: "https://example.com/article" });
 ```
 
+## Retries never double-charge
+
+Every paid call the SDK makes carries an `Idempotency-Key`, so a retry of a
+call whose response was lost replays the original result instead of paying
+again. If your x402 client attaches the standard `payment-identifier`
+extension to its payloads instead, Agent402 honours that id the same way (an
+exact retry with the same credential replays; a fresh authorization with the
+same id is a new payment).
+
 ## Workflows (skill packs)
 
 For jobs that no single tool covers — e.g. "audit a domain", "build a stock
@@ -179,6 +188,23 @@ Short names map to CAIP-2 (`base`, `solana`, `polygon`, `arbitrum`,
 without a package update. If the preference matches none of a seller's
 payment options it throws **before** any payment is signed.
 
+
+## Only pay who you meant to (`withPayeeAllowlist`)
+
+The buyer-side mirror of a spend control: bound WHO gets paid, not just how
+much. Wrap your x402 client before `wrapFetchWithPayment` and any 402 whose
+`accepts` would send funds to an address outside the list is refused before a
+signature exists (a routed or redirected seller can never collect).
+
+```js
+import { withPayeeAllowlist } from "agent402-client";
+withPayeeAllowlist(client, ["0xYourSellerPayTo", "0xAnother"]);   // 0x addresses compare case-insensitively
+const payFetch = wrapFetchWithPayment(fetch, client);
+```
+
+Pairs with `maxPerCallUsd` / `dailyLimitUsd` (how much) and
+`withNetworkPreference` (which chain).
+
 ## Legal
 
 Use of the hosted instance at agent402.tools is subject to its [Terms of Service](https://agent402.tools/terms) (acceptable-use policy included) and [Privacy Policy](https://agent402.tools/privacy). This package is MIT-licensed; the hosted server is AGPL-3.0. Both are provided as-is without warranty, and self-hosted deployments are their operator's responsibility.

package/index.js

@@ -402,4 +402,32 @@ export function withNetworkPreference(client, networks) {
   return client;
 }
 
+/**
+ * Payee allowlist: refuse to pay ANY 402 whose accepts would send funds to an
+ * address outside `payees` - the buyer-side mirror of a spend control (CDP's
+ * CdpX402Client bounds amounts and networks; this bounds WHO gets paid). Same
+ * wrapping style as withNetworkPreference: the payment-aware fetch sees a
+ * filtered `accepts`, so a quote that names an unknown payTo is never paid -
+ * it throws before any signature exists. Addresses compare case-insensitively
+ * for 0x (EVM) and exactly otherwise (base58/Stellar are case-sensitive).
+ * Works on any x402Client (createPaymentPayload) - register it before
+ * wrapFetchWithPayment.
+ */
+export function withPayeeAllowlist(client, payees) {
+  const norm = (a) => (typeof a === "string" && /^0x[0-9a-fA-F]{40}$/.test(a) ? a.toLowerCase() : String(a || "").trim());
+  const allowed = new Set((payees || []).map(norm).filter(Boolean));
+  if (!allowed.size) throw new Error("withPayeeAllowlist: at least one payee address is required");
+  const orig = client.createPaymentPayload.bind(client);
+  client.createPaymentPayload = (paymentRequired) => {
+    const list = Array.isArray(paymentRequired?.accepts) ? paymentRequired.accepts : [];
+    const picked = list.filter((a) => allowed.has(norm(a?.payTo)));
+    if (!picked.length) {
+      const offered = [...new Set(list.map((a) => a?.payTo).filter(Boolean))];
+      throw new Error(`payee allowlist refused this quote: the seller asks to be paid at [${offered.join(", ")}], none of which is allowlisted`);
+    }
+    return orig({ ...paymentRequired, accepts: picked });
+  };
+  return client;
+}
+
 export default Agent402;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent402-client",
-  "version": "0.6.10",
+  "version": "0.6.11",
   "description": "Agent402 buyer SDK: resolve a task to a tool across 500+ pay-per-call endpoints and call it with payment handled - free via proof-of-work, or over x402 or MPP (a stock mppx fetch works) with a wallet you keep; the buy side of Agentic Finance. Caching, idempotent retries (Idempotency-Key), non-custodial, zero dependencies.",
   "type": "module",
   "main": "index.js",