agentic-payments 0.1.14 → 0.1.15

package/README.md

@@ -25,7 +25,7 @@
 - **AP2 (Agent Payments Protocol)**: Cryptographic payment mandates with Ed25519 signatures
 - **ACP (Agentic Commerce Protocol)**: REST API integration with Stripe-compatible checkout
 - **Active Mandate**: Autonomous payment capsules with spend caps, time windows, and instant revocation
-- **Visa TAP (Trusted Agent Protocol)**: QUIC transport with RFC 9421 HTTP message signatures for ultra-low latency payments
+- **Visa TAP (Trusted Agent Protocol)**: RFC 9421 HTTP message signatures for agent payment requests. The QUIC transport is not functional yet and fails closed (see [Visa TAP transport](#visa-tap-quic-transport))
 
 **Key Innovation**: Multi-agent Byzantine consensus allows fleets of specialized AI agents (purchasing, finance, compliance, audit) to collaboratively authorize transactions, ensuring no single compromised agent can approve fraudulent payments.
 
@@ -40,7 +40,6 @@ Built with TypeScript for Node.js, Deno, Bun, and browsers. Production-ready wit
 - ✅ **Cart Mandates**: Pre-approve shopping carts with line-item verification
 - ✅ **Payment Tracking**: Monitor payment status from authorization to capture
 - ✅ **MCP Protocol**: Stdio and HTTP transports for AI assistant integration (Claude, Cline, etc.)
-- ✅ **Visa TAP QUIC Transport**: Ultra-low latency payment authorization with 0-RTT connection resumption
 - ✅ **RFC 9421 HTTP Signatures**: Cryptographic request signing for secure payment authentication
 - ✅ **Production Ready**: 100% TypeScript, comprehensive error handling, <200KB
 - ✅ **CLI Tools**: Command-line interface for mandate management and testing
@@ -631,72 +630,34 @@ console.log(`Authorized: ${vendorPayment.isComplete()}`);
 
 **Use case**: Automated accounts payable, expense report processing, and vendor management where AI agents categorize, approve, and execute payments based on policy rules.
 
-### Visa TAP: Ultra-Low Latency Payments with QUIC
+### Visa TAP: Signed Payment Requests
 
-Send payment authorizations over QUIC for 50-70% faster processing than HTTP/2:
+Sign payment requests with RFC 9421 HTTP message signatures and submit them to
+the merchant over HTTPS:
 
 ```typescript
-import { VisaTapQuicTransport, signHttpMessage } from 'agentic-payments';
-import { AgentIdentity } from 'agentic-payments';
-
-// 1. Create QUIC transport connection
-const transport = new VisaTapQuicTransport({
-  host: 'merchant.com',
-  port: 8443,
-  enable0RTT: true,              // 0-RTT reconnection (<1ms)
-  maxConcurrentStreams: 100      // 100+ parallel payments
-});
+import { AgentIdentity, signHttpMessage, computeContentDigest } from 'agentic-payments';
 
-await transport.connect();
-console.log('✅ Connected via QUIC');
-
-// 2. Sign payment request with RFC 9421
 const agent = await AgentIdentity.generate();
 const privateKeyHex = Buffer.from(agent.privateKey).toString('hex');
 
+const body = new TextEncoder().encode(JSON.stringify(mandate));
 const signed = await signHttpMessage(
   {
     method: 'POST',
     authority: 'merchant.com',
     path: '/api/payments',
-    contentDigest: 'sha-256=:...:',
+    contentDigest: computeContentDigest(body),
   },
   privateKeyHex,
   'did:agent:shopping-bot'
 );
 
-// 3. Send payment via QUIC
-const mandate = {
-  mandate_id: 'mandate_001',
-  agent: 'shopping-bot@example.com',
-  holder: 'user@example.com',
-  amount: 5000,
-  currency: 'USD',
-  period: 'single',
-  kind: 'intent'
-};
-
-const response = await transport.sendPayment({
-  ...mandate,
-  signature: signed.signature,
-  public_key: Buffer.from(agent.publicKey()).toString('hex')
-});
-
-console.log(`Transaction ID: ${response.transactionId}`);
-console.log(`Status: ${response.status}`);
-console.log(`Latency: ${response.processingTime}ms`);
-
-await transport.close();
+// Send with your HTTPS client, carrying signed.signature / signed.signatureInput
+// headers, and treat the payment as submitted only when the merchant confirms it.
 ```
 
-**Performance Benefits:**
-- **50-70% faster** than HTTP/2 for payment authorization
-- **0-RTT reconnection** for sub-millisecond session resumption
-- **Connection migration** for seamless mobile network handoffs
-- **100+ concurrent streams** per connection
-- **No head-of-line blocking** unlike HTTP/2
-
-**Use case**: High-frequency trading, real-time payments, mobile commerce, and latency-sensitive payment flows where every millisecond counts.
+There is no working QUIC transport: see [Visa TAP transport](#visa-tap-quic-transport).
 
 ### Agent Fleet Management
 
@@ -908,66 +869,72 @@ console.log(`Complete: ${payment.isComplete()}`);
 
 ### Visa TAP QUIC Transport
 
-Ultra-low latency payment transport with RFC 9421 HTTP message signatures:
+**Status: not functional. `connect()` always rejects with the agentic-flow
+releases published so far.**
+
+`VisaTapQuicTransport` sends through the optional peer `agentic-flow`
+(`agentic-flow/transport/quic`). No agentic-flow release ships a working QUIC
+transport: its `QuicTransport.send()` is a placeholder that sends nothing, and
+agentic-flow 3.4.4+ reports this through `getQuicStatus()`
+(`{ available: false, fallback: 'websocket' }`).
+
+What happens since 0.1.15:
+
+- `connect()` (and `VisaTapQuicTransport.create()`) asks agentic-flow whether
+  QUIC is available and rejects with `QuicTransportUnavailableError`
+  (`code: 'QUIC_UNAVAILABLE'`, with agentic-flow's reason) when it is not.
+  agentic-flow versions without the probe count as unavailable.
+- Without agentic-flow installed, `connect()` rejects with an install hint.
+- `send()` and `sendPayment()` reject with `'Not connected'` before a
+  successful `connect()`, and with `PaymentNotDeliveredError`
+  (`code: 'PAYMENT_NOT_DELIVERED'`) unless the server returns a response;
+  `sendPayment()` additionally requires a `transactionId` and a status of
+  `approved`, `declined` or `pending`. A response is never synthesised.
+
+agentic-payments 0.1.14 connected to the placeholder and `sendPayment()`
+resolved with a made-up `transactionId` and `status: 'pending'` although
+nothing was sent. Treat any `transactionId` from 0.1.14's `sendPayment()` as
+not submitted.
+
+The transport does not switch to agentic-flow's WebSocket fallback on its own.
+No Visa TAP endpoint speaks that framing, its `send()` carries no
+application-level acknowledgement, and plain `ws://` would send mandates in
+cleartext, so a silent switch could not tell a delivered payment from a lost
+one. Until a real transport exists, submit signed requests over HTTPS.
 
 ```typescript
 import {
   VisaTapQuicTransport,
-  signHttpMessage,
-  verifyHttpSignature,
-  computeContentDigest
+  QuicTransportUnavailableError,
+  getQuicTransportStatus,
 } from 'agentic-payments/visa-tap';
 
-// Create QUIC transport
-const transport = new VisaTapQuicTransport({
-  host: 'payments.merchant.com',
-  port: 8443,
-  enable0RTT: true,
-  timeout: 5000
-});
-
-await transport.connect();
-
-// Sign HTTP request per RFC 9421
-const body = new TextEncoder().encode(JSON.stringify(mandate));
-const contentDigest = computeContentDigest(body);
+const status = await getQuicTransportStatus(); // { available: false, reason: '...' }
 
-const signed = await signHttpMessage(
-  {
-    method: 'POST',
-    authority: 'payments.merchant.com',
-    path: '/v1/payments',
-    contentDigest,
-    headers: {
-      'Content-Type': 'application/json'
-    }
-  },
-  privateKeyHex,
-  'did:agent:payment-bot'
-);
-
-// Send payment
-const response = await transport.sendPayment(signedMandate);
-
-// Get connection statistics
-const stats = transport.getStats();
-console.log(`RTT: ${stats?.rtt}ms`);
-console.log(`Bytes sent: ${stats?.bytesSent}`);
-
-await transport.close();
+try {
+  const transport = await VisaTapQuicTransport.create({ host: 'payments.merchant.com', port: 8443 });
+  const response = await transport.sendPayment(signedMandate); // only a real server response
+  await transport.close();
+} catch (err) {
+  if (err instanceof QuicTransportUnavailableError) {
+    // Nothing was sent. Use HTTPS with signHttpMessage() instead.
+  }
+}
 ```
 
 **API Reference:**
 
 | Method | Description | Returns |
 |--------|-------------|---------|
-| `constructor(config)` | Create QUIC transport | `VisaTapQuicTransport` |
-| `connect()` | Establish connection | `Promise<void>` |
-| `sendPayment(mandate)` | Send signed mandate | `Promise<PaymentResponse>` |
-| `send(data)` | Send raw data | `Promise<any>` |
-| `getStats()` | Get connection stats | `QuicStats \| null` |
+| `VisaTapQuicTransport.create(config)` | Construct and `connect()` | `Promise<VisaTapQuicTransport>` |
+| `constructor(config)` | Create transport (no I/O) | `VisaTapQuicTransport` |
+| `connect()` | Rejects with `QuicTransportUnavailableError` unless agentic-flow reports QUIC available | `Promise<void>` |
+| `sendPayment(mandate)` | Send signed mandate; rejects with `PaymentNotDeliveredError` without a confirmed response | `Promise<PaymentResponse>` |
+| `send(data)` | Send raw data; rejects with `PaymentNotDeliveredError` without a response | `Promise<any>` |
+| `getStats()` | Connection stats when connected | `QuicStats \| null` |
 | `isConnected()` | Check connection status | `boolean` |
 | `close()` | Close connection | `Promise<void>` |
+| `getQuicTransportStatus()` | Whether agentic-flow has a working QUIC transport, and why not | `Promise<{ available, reason? }>` |
 
 **RFC 9421 Functions:**
 
@@ -1018,9 +985,9 @@ agentic-payments/
 │   │   ├── signing.ts        # Ed25519 signing
 │   │   ├── revocation.ts     # Revocation store
 │   │   └── i18n.ts           # Internationalization
-│   ├── visa-tap/             # Visa TAP QUIC integration
+│   ├── visa-tap/             # Visa TAP integration
 │   │   ├── types.ts          # Visa TAP TypeScript types
-│   │   ├── quic-transport.ts # QUIC transport bridge
+│   │   ├── quic-transport.ts # QUIC transport bridge (fails closed, see above)
 │   │   ├── rfc9421.ts        # RFC 9421 HTTP signatures
 │   │   └── index.ts          # Visa TAP exports
 │   ├── cli/                  # Command-line interface
@@ -1082,10 +1049,10 @@ app.post('/verify', limiter, verifyHandler);
 
 ### Network Security
 
-**QUIC Transport**:
-- TLS 1.3 encryption by default (no configuration needed)
-- Certificate pinning for merchant endpoints
-- Monitor connection statistics for anomalies
+**Payment transport**:
+- The Visa TAP QUIC transport is not functional and refuses to connect; submit payment requests over HTTPS (TLS 1.2+), signed with `signHttpMessage`
+- Pin certificates for merchant endpoints where your HTTPS client supports it
+- Record a payment as submitted only when the merchant confirms it
 
 **MCP Server**:
 - Use stdio transport for local development only
@@ -1127,23 +1094,9 @@ Optimized for low-latency payment authorization with minimal bundle impact:
 | Ed25519 Verify | ~3ms | Single verification |
 | Consensus (3 agents) | ~10ms | Byzantine fault tolerance |
 | Mandate Validation | <1ms | Schema + business rules |
-| QUIC Connection | ~100ms | First connection (vs 300ms HTTP/2) |
-| QUIC Reconnection | <1ms | 0-RTT session resumption |
 | RFC 9421 Signing | ~2ms | HTTP message signature |
 | Bundle Size | <200KB | Gzipped, tree-shakeable |
 
-### QUIC Transport Performance
-
-Comparison with HTTP/2 for payment authorization:
-
-| Metric | QUIC (Visa TAP) | HTTP/2 | Improvement |
-|--------|-----------------|--------|-------------|
-| First connection | 100ms | 300ms | **66% faster** |
-| Reconnection | <1ms (0-RTT) | 200ms | **99.5% faster** |
-| Mobile handoff | Seamless | Connection drop | **Connection migration** |
-| Concurrent streams | 100+ | 100+ | Equal |
-| Head-of-line blocking | None | Present | **Better reliability** |
-
 ## 📄 License
 
 Licensed under either of:

package/dist/index.d.ts

@@ -49,7 +49,7 @@ export type { AgentVote, VerificationResult, VerificationConfig, SystemMetrics,
 export { IntentMandate, CartMandate, PaymentMandate } from './mandate.js';
 export type { IntentMandateData, CartMandateData, PaymentMandateData, CartItem, ValidationResult, } from './mandate.js';
 export { PaymentError, PaymentErrorCode, isRecoverable, getErrorCode, formatError, AgenticPaymentError, CryptoError, ValidationError, ConsensusError, SystemError, WasmInitError, ErrorCode, } from './errors.js';
-export { VisaTapQuicTransport, createQuicTransport } from './visa-tap/index.js';
+export { VisaTapQuicTransport, createQuicTransport, getQuicTransportStatus, QuicTransportUnavailableError, PaymentNotDeliveredError, } from './visa-tap/index.js';
 export { signHttpMessage, verifyHttpSignature, computeContentDigest } from './visa-tap/index.js';
 export { TAP_VERSION, DEFAULT_QUIC_PORT, MAX_MANDATE_LIFETIME_SECS } from './visa-tap/index.js';
 export declare const VERSION = "1.0.0";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC1E,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,QAAQ,EACR,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,WAAW,EAEX,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,cAAc,EACd,WAAW,EACX,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAGhG,eAAO,MAAM,OAAO,UAAU,CAAC;AAE/B;;;;GAIG;AACH,wBAAgB,OAAO,IAAI;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAgBA;;;;;AAGD,wBAGE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC1E,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,QAAQ,EACR,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,WAAW,EAEX,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,cAAc,EACd,WAAW,EACX,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AAIrB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAGhG,eAAO,MAAM,OAAO,UAAU,CAAC;AAE/B;;;;GAIG;AACH,wBAAgB,OAAO,IAAI;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAeA;;;;;AAGD,wBAGE"}

package/dist/index.js

@@ -50,8 +50,9 @@ export { IntentMandate, CartMandate, PaymentMandate } from './mandate.js';
 export { PaymentError, PaymentErrorCode, isRecoverable, getErrorCode, formatError, 
 // Legacy aliases
 AgenticPaymentError, CryptoError, ValidationError, ConsensusError, SystemError, WasmInitError, ErrorCode, } from './errors.js';
-// Visa TAP (Trusted Agent Protocol) - QUIC transport integration
-export { VisaTapQuicTransport, createQuicTransport } from './visa-tap/index.js';
+// Visa TAP (Trusted Agent Protocol). The QUIC transport fails closed: agentic-flow
+// ships no working QUIC, so connect() rejects with QuicTransportUnavailableError.
+export { VisaTapQuicTransport, createQuicTransport, getQuicTransportStatus, QuicTransportUnavailableError, PaymentNotDeliveredError, } from './visa-tap/index.js';
 export { signHttpMessage, verifyHttpSignature, computeContentDigest } from './visa-tap/index.js';
 export { TAP_VERSION, DEFAULT_QUIC_PORT, MAX_MANDATE_LIFETIME_SECS } from './visa-tap/index.js';
 // Version information
@@ -72,7 +73,6 @@ export function getInfo() {
             'intent-mandates',
             'cart-mandates',
             'payment-mandates',
-            'visa-tap-quic-transport',
             'rfc9421-http-signatures',
             'active-mandates',
         ],

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,eAAe;AACf,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAG9C,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAS1E,gBAAgB;AAChB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,WAAW;AACX,iBAAiB;AACjB,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,cAAc,EACd,WAAW,EACX,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,iEAAiE;AACjE,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAEhG,sBAAsB;AACtB,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B;;;;GAIG;AACH,MAAM,UAAU,OAAO;IAKrB,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,cAAc,EAAE,mBAAmB;QACnC,QAAQ,EAAE;YACR,oBAAoB;YACpB,uBAAuB;YACvB,2BAA2B;YAC3B,iBAAiB;YACjB,eAAe;YACf,kBAAkB;YAClB,yBAAyB;YACzB,yBAAyB;YACzB,iBAAiB;SAClB;KACF,CAAC;AACJ,CAAC;AAED,iBAAiB;AACjB,eAAe;IACb,OAAO;IACP,OAAO;CACR,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,eAAe;AACf,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAG9C,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAS1E,gBAAgB;AAChB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,WAAW;AACX,iBAAiB;AACjB,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,cAAc,EACd,WAAW,EACX,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,mFAAmF;AACnF,kFAAkF;AAClF,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAEhG,sBAAsB;AACtB,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B;;;;GAIG;AACH,MAAM,UAAU,OAAO;IAKrB,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,cAAc,EAAE,mBAAmB;QACnC,QAAQ,EAAE;YACR,oBAAoB;YACpB,uBAAuB;YACvB,2BAA2B;YAC3B,iBAAiB;YACjB,eAAe;YACf,kBAAkB;YAClB,yBAAyB;YACzB,iBAAiB;SAClB;KACF,CAAC;AACJ,CAAC;AAED,iBAAiB;AACjB,eAAe;IACb,OAAO;IACP,OAAO;CACR,CAAC"}

package/dist/visa-tap/index.d.ts

@@ -1,28 +1,27 @@
 /**
  * Visa TAP (Trusted Agent Protocol) Integration
  *
- * High-performance payment infrastructure with QUIC transport,
- * RFC 9421 HTTP message signatures, and Active Mandates.
+ * RFC 9421 HTTP message signatures, Active Mandates, and a QUIC transport
+ * bridge. No published agentic-flow release ships a working QUIC transport, so
+ * VisaTapQuicTransport.connect() rejects with QuicTransportUnavailableError.
  *
  * @example
  * ```typescript
  * import { VisaTapQuicTransport, signHttpMessage } from 'agentic-payments/visa-tap';
  *
- * // Create QUIC transport
- * const transport = new VisaTapQuicTransport({
+ * // Throws QuicTransportUnavailableError while agentic-flow has no working QUIC
+ * const transport = await VisaTapQuicTransport.create({
  *   host: 'merchant.com',
  *   port: 8443
  * });
  *
- * await transport.connect();
- *
- * // Send payment
+ * // Resolves only with a server response carrying a transactionId;
+ * // otherwise rejects with PaymentNotDeliveredError
  * const response = await transport.sendPayment(signedMandate);
- * console.log('Payment approved:', response.transactionId);
  * ```
  */
 export { validateAndVerify, guardExecution, revoke, isRevoked, getAllRevocations, type SignedMandate, type VerificationResult, type ExecutionGuard, type RevocationRecord, } from '../active-mandate/index.js';
-export { VisaTapQuicTransport, createQuicTransport, loadQuicTransport, AGENTIC_FLOW_PEER_RANGE, } from './quic-transport.js';
+export { VisaTapQuicTransport, createQuicTransport, loadQuicTransport, getQuicTransportStatus, QuicTransportUnavailableError, PaymentNotDeliveredError, QUIC_UNAVAILABLE, PAYMENT_NOT_DELIVERED, AGENTIC_FLOW_PEER_RANGE, type QuicTransportStatus, } from './quic-transport.js';
 export { signHttpMessage, verifyHttpSignature, computeContentDigest, } from './rfc9421.js';
 export type { Period, MandateKind, ActiveMandatePayload, SignedActiveMandate, SignatureComponents, SignedHttpMessage, QuicConfig, QuicStats, PaymentResponse, } from './types.js';
 /**

package/dist/visa-tap/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/visa-tap/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,MAAM,EACN,SAAS,EACT,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,MAAM,EACN,WAAW,EACX,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,eAAO,MAAM,WAAW,QAAQ,CAAC;AAEjC;;GAEG;AACH,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC;;GAEG;AACH,eAAO,MAAM,yBAAyB,QAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/visa-tap/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,MAAM,EACN,SAAS,EACT,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,6BAA6B,EAC7B,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,MAAM,EACN,WAAW,EACX,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,eAAO,MAAM,WAAW,QAAQ,CAAC;AAEjC;;GAEG;AACH,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC;;GAEG;AACH,eAAO,MAAM,yBAAyB,QAAmB,CAAC"}

package/dist/visa-tap/index.js

@@ -1,30 +1,29 @@
 /**
  * Visa TAP (Trusted Agent Protocol) Integration
  *
- * High-performance payment infrastructure with QUIC transport,
- * RFC 9421 HTTP message signatures, and Active Mandates.
+ * RFC 9421 HTTP message signatures, Active Mandates, and a QUIC transport
+ * bridge. No published agentic-flow release ships a working QUIC transport, so
+ * VisaTapQuicTransport.connect() rejects with QuicTransportUnavailableError.
  *
  * @example
  * ```typescript
  * import { VisaTapQuicTransport, signHttpMessage } from 'agentic-payments/visa-tap';
  *
- * // Create QUIC transport
- * const transport = new VisaTapQuicTransport({
+ * // Throws QuicTransportUnavailableError while agentic-flow has no working QUIC
+ * const transport = await VisaTapQuicTransport.create({
  *   host: 'merchant.com',
  *   port: 8443
  * });
  *
- * await transport.connect();
- *
- * // Send payment
+ * // Resolves only with a server response carrying a transactionId;
+ * // otherwise rejects with PaymentNotDeliveredError
  * const response = await transport.sendPayment(signedMandate);
- * console.log('Payment approved:', response.transactionId);
  * ```
  */
 // Re-export from active-mandate (already working)
 export { validateAndVerify, guardExecution, revoke, isRevoked, getAllRevocations, } from '../active-mandate/index.js';
 // Export QUIC transport
-export { VisaTapQuicTransport, createQuicTransport, loadQuicTransport, AGENTIC_FLOW_PEER_RANGE, } from './quic-transport.js';
+export { VisaTapQuicTransport, createQuicTransport, loadQuicTransport, getQuicTransportStatus, QuicTransportUnavailableError, PaymentNotDeliveredError, QUIC_UNAVAILABLE, PAYMENT_NOT_DELIVERED, AGENTIC_FLOW_PEER_RANGE, } from './quic-transport.js';
 // Export RFC 9421
 export { signHttpMessage, verifyHttpSignature, computeContentDigest, } from './rfc9421.js';
 /**

package/dist/visa-tap/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/visa-tap/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,kDAAkD;AAClD,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,MAAM,EACN,SAAS,EACT,iBAAiB,GAKlB,MAAM,4BAA4B,CAAC;AAEpC,wBAAwB;AACxB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,kBAAkB;AAClB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAetB;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC;AAEjC;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/visa-tap/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,kDAAkD;AAClD,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,MAAM,EACN,SAAS,EACT,iBAAiB,GAKlB,MAAM,4BAA4B,CAAC;AAEpC,wBAAwB;AACxB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,6BAA6B,EAC7B,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAE7B,kBAAkB;AAClB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAetB;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC;AAEjC;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC"}

package/dist/visa-tap/quic-transport.d.ts

@@ -1,7 +1,18 @@
 /**
  * QUIC Transport Integration for Visa TAP
  *
- * Bridges agentic-payments with agentic-flow QUIC transport
+ * Bridges agentic-payments with the agentic-flow QUIC transport.
+ *
+ * No published agentic-flow release ships a working QUIC transport:
+ * `agentic-flow/transport/quic` is a placeholder whose `send()` discards the
+ * data. This transport therefore refuses to connect unless agentic-flow
+ * reports QUIC as available (`getQuicStatus()`), and never reports a payment
+ * as sent unless a real response comes back.
+ *
+ * It deliberately does not fall back to agentic-flow's WebSocket transport:
+ * no Visa TAP endpoint speaks that framing, its `send()` has no
+ * application-level acknowledgement, and plain `ws://` would carry mandates
+ * in cleartext. Failing closed is the only safe behaviour for payments.
  */
 import type { QuicConfig, QuicStats, PaymentResponse, SignedActiveMandate } from './types.js';
 /**
@@ -20,35 +31,83 @@ export declare const AGENTIC_FLOW_PEER_RANGE = "^2.0.14 || ^3.0.0";
  * @throws Error with install instructions when agentic-flow is not installed
  */
 export declare function loadQuicTransport(): Promise<any>;
+/** Error code carried by {@link QuicTransportUnavailableError}. */
+export declare const QUIC_UNAVAILABLE = "QUIC_UNAVAILABLE";
+/** Error code carried by {@link PaymentNotDeliveredError}. */
+export declare const PAYMENT_NOT_DELIVERED = "PAYMENT_NOT_DELIVERED";
+/**
+ * Thrown by {@link VisaTapQuicTransport.connect} when no working QUIC
+ * transport is available, so nothing could be delivered.
+ */
+export declare class QuicTransportUnavailableError extends Error {
+    readonly reason: string;
+    readonly code = "QUIC_UNAVAILABLE";
+    constructor(reason: string);
+}
+/**
+ * Thrown when a send did not produce a confirmed response, so the caller must
+ * treat the payment message as not delivered.
+ */
+export declare class PaymentNotDeliveredError extends Error {
+    readonly code = "PAYMENT_NOT_DELIVERED";
+    constructor(message: string);
+}
+/** Result of {@link getQuicTransportStatus}. */
+export interface QuicTransportStatus {
+    available: boolean;
+    reason?: string;
+}
+/**
+ * Ask agentic-flow whether its QUIC transport can actually move data.
+ *
+ * Fails closed: QUIC counts as available only when agentic-flow exports a
+ * probe and that probe says so. Older agentic-flow releases have no probe,
+ * and their QuicTransport is the same placeholder, so they are unavailable.
+ */
+export declare function getQuicTransportStatus(mod?: any): Promise<QuicTransportStatus>;
 /**
  * Visa TAP QUIC Transport
  *
- * Provides high-performance QUIC transport for Visa TAP payments
- * with 0-RTT connection resumption and multiplexed streams.
+ * QUIC transport for Visa TAP payments, backed by agentic-flow.
+ *
+ * `connect()` rejects with {@link QuicTransportUnavailableError} unless
+ * agentic-flow reports a working QUIC transport. With every agentic-flow
+ * release published so far it rejects. Use {@link VisaTapQuicTransport.create}
+ * to construct and check in one step.
  */
 export declare class VisaTapQuicTransport {
     private quic;
     private config;
     private connected;
+    /**
+     * Construct a transport and connect it, failing fast when QUIC is
+     * unavailable.
+     *
+     * @throws QuicTransportUnavailableError when no working QUIC transport exists
+     */
+    static create(config: QuicConfig): Promise<VisaTapQuicTransport>;
     constructor(config: QuicConfig);
     /**
-     * Connect to QUIC server
+     * Connect to the QUIC server.
      *
-     * Supports 0-RTT connection resumption for sub-millisecond reconnection
+     * @throws Error with install instructions when agentic-flow is not installed
+     * @throws QuicTransportUnavailableError when agentic-flow has no working QUIC
      */
     connect(): Promise<void>;
     /**
      * Send payment request over QUIC
      *
      * @param signedMandate - Cryptographically signed Active Mandate
-     * @returns Payment response
+     * @returns Payment response returned by the server
+     * @throws PaymentNotDeliveredError when no response with a transactionId came back
      */
     sendPayment(signedMandate: SignedActiveMandate): Promise<PaymentResponse>;
     /**
      * Send raw payment data
      *
      * @param data - Payment data object
-     * @returns Response data
+     * @returns Response data returned by the server
+     * @throws PaymentNotDeliveredError when the transport returned no response
      */
     send(data: any): Promise<any>;
     /**
@@ -68,7 +127,10 @@ export declare class VisaTapQuicTransport {
      */
     close(): Promise<void>;
     /**
-     * Parse payment response from QUIC
+     * Validate a payment response from the server.
+     *
+     * Never synthesises a response: a missing response, or one without a
+     * transactionId and a known status, means the payment was not confirmed.
      */
     private parsePaymentResponse;
 }

package/dist/visa-tap/quic-transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quic-transport.d.ts","sourceRoot":"","sources":["../../src/visa-tap/quic-transport.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAK9F;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AAEtE,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAE3D;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,CAuBtD;AAED;;;;;GAKG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,SAAS,CAAkB;gBAEvB,MAAM,EAAE,UAAU;IAS9B;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAa9B;;;;;OAKG;IACG,WAAW,CAAC,aAAa,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC;IAc/E;;;;;OAKG;IACG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAQnC;;OAEG;IACH,QAAQ,IAAI,SAAS,GAAG,IAAI;IAc5B;;OAEG;IACH,WAAW,IAAI,OAAO;IAItB;;OAEG;IACH,gBAAgB,IAAI,MAAM;IAI1B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B;;OAEG;IACH,OAAO,CAAC,oBAAoB;CAkB7B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,MAAa,GAClB,oBAAoB,CAEtB"}
+{"version":3,"file":"quic-transport.d.ts","sourceRoot":"","sources":["../../src/visa-tap/quic-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAK9F;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AAEtE,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAE3D;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,CAuBtD;AAED,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,8DAA8D;AAC9D,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D;;;GAGG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IAE1C,QAAQ,CAAC,MAAM,EAAE,MAAM;IADnC,QAAQ,CAAC,IAAI,sBAAoB;gBACZ,MAAM,EAAE,MAAM;CAMpC;AAED;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,2BAAyB;gBAC1B,OAAO,EAAE,MAAM;CAI5B;AAED,gDAAgD;AAChD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6BpF;AAED;;;;;;;;;GASG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,SAAS,CAAkB;IAEnC;;;;;OAKG;WACU,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,oBAAoB,CAAC;gBAM1D,MAAM,EAAE,UAAU;IAS9B;;;;;OAKG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB9B;;;;;;OAMG;IACG,WAAW,CAAC,aAAa,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC;IAc/E;;;;;;OAMG;IACG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAenC;;OAEG;IACH,QAAQ,IAAI,SAAS,GAAG,IAAI;IAc5B;;OAEG;IACH,WAAW,IAAI,OAAO;IAItB;;OAEG;IACH,gBAAgB,IAAI,MAAM;IAI1B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;CAe7B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,MAAa,GAClB,oBAAoB,CAEtB"}

package/dist/visa-tap/quic-transport.js

@@ -1,7 +1,18 @@
 /**
  * QUIC Transport Integration for Visa TAP
  *
- * Bridges agentic-payments with agentic-flow QUIC transport
+ * Bridges agentic-payments with the agentic-flow QUIC transport.
+ *
+ * No published agentic-flow release ships a working QUIC transport:
+ * `agentic-flow/transport/quic` is a placeholder whose `send()` discards the
+ * data. This transport therefore refuses to connect unless agentic-flow
+ * reports QUIC as available (`getQuicStatus()`), and never reports a payment
+ * as sent unless a real response comes back.
+ *
+ * It deliberately does not fall back to agentic-flow's WebSocket transport:
+ * no Visa TAP endpoint speaks that framing, its `send()` has no
+ * application-level acknowledgement, and plain `ws://` would carry mandates
+ * in cleartext. Failing closed is the only safe behaviour for payments.
  */
 // Dynamic import to handle optional dependency gracefully
 let QuicTransport = null;
@@ -38,16 +49,102 @@ export async function loadQuicTransport() {
     QuicTransport = mod.QuicTransport;
     return QuicTransport;
 }
+/** Error code carried by {@link QuicTransportUnavailableError}. */
+export const QUIC_UNAVAILABLE = 'QUIC_UNAVAILABLE';
+/** Error code carried by {@link PaymentNotDeliveredError}. */
+export const PAYMENT_NOT_DELIVERED = 'PAYMENT_NOT_DELIVERED';
+/**
+ * Thrown by {@link VisaTapQuicTransport.connect} when no working QUIC
+ * transport is available, so nothing could be delivered.
+ */
+export class QuicTransportUnavailableError extends Error {
+    reason;
+    code = QUIC_UNAVAILABLE;
+    constructor(reason) {
+        super(`Visa TAP QUIC transport is unavailable: ${reason} No payment data can be sent over it; submit the mandate over HTTPS instead.`);
+        this.reason = reason;
+        this.name = 'QuicTransportUnavailableError';
+    }
+}
+/**
+ * Thrown when a send did not produce a confirmed response, so the caller must
+ * treat the payment message as not delivered.
+ */
+export class PaymentNotDeliveredError extends Error {
+    code = PAYMENT_NOT_DELIVERED;
+    constructor(message) {
+        super(message);
+        this.name = 'PaymentNotDeliveredError';
+    }
+}
+const NO_PROBE_REASON = 'the installed agentic-flow has no getQuicStatus()/isQuicAvailable() probe, and its ' +
+    'agentic-flow/transport/quic QuicTransport is a placeholder that sends no bytes.';
+/**
+ * Ask agentic-flow whether its QUIC transport can actually move data.
+ *
+ * Fails closed: QUIC counts as available only when agentic-flow exports a
+ * probe and that probe says so. Older agentic-flow releases have no probe,
+ * and their QuicTransport is the same placeholder, so they are unavailable.
+ */
+export async function getQuicTransportStatus(mod) {
+    if (!mod) {
+        try {
+            // @ts-ignore - Dynamic import of optional peer dependency
+            mod = await import(AGENTIC_FLOW_QUIC_MODULE);
+        }
+        catch {
+            return {
+                available: false,
+                reason: `agentic-flow is not installed (npm install agentic-flow@"${AGENTIC_FLOW_PEER_RANGE}").`,
+            };
+        }
+    }
+    try {
+        if (typeof mod?.getQuicStatus === 'function') {
+            const status = await mod.getQuicStatus();
+            if (status?.available === true)
+                return { available: true };
+            return {
+                available: false,
+                reason: String(status?.reason || 'agentic-flow reports QUIC as unavailable.'),
+            };
+        }
+        if (typeof mod?.isQuicAvailable === 'function') {
+            if ((await mod.isQuicAvailable()) === true)
+                return { available: true };
+            return { available: false, reason: 'agentic-flow reports QUIC as unavailable.' };
+        }
+    }
+    catch (error) {
+        return { available: false, reason: `agentic-flow QUIC probe failed: ${String(error)}` };
+    }
+    return { available: false, reason: NO_PROBE_REASON };
+}
 /**
  * Visa TAP QUIC Transport
  *
- * Provides high-performance QUIC transport for Visa TAP payments
- * with 0-RTT connection resumption and multiplexed streams.
+ * QUIC transport for Visa TAP payments, backed by agentic-flow.
+ *
+ * `connect()` rejects with {@link QuicTransportUnavailableError} unless
+ * agentic-flow reports a working QUIC transport. With every agentic-flow
+ * release published so far it rejects. Use {@link VisaTapQuicTransport.create}
+ * to construct and check in one step.
  */
 export class VisaTapQuicTransport {
     quic = null;
     config;
     connected = false;
+    /**
+     * Construct a transport and connect it, failing fast when QUIC is
+     * unavailable.
+     *
+     * @throws QuicTransportUnavailableError when no working QUIC transport exists
+     */
+    static async create(config) {
+        const transport = new VisaTapQuicTransport(config);
+        await transport.connect();
+        return transport;
+    }
     constructor(config) {
         this.config = {
             timeout: 30000,
@@ -57,12 +154,18 @@ export class VisaTapQuicTransport {
         };
     }
     /**
-     * Connect to QUIC server
+     * Connect to the QUIC server.
      *
-     * Supports 0-RTT connection resumption for sub-millisecond reconnection
+     * @throws Error with install instructions when agentic-flow is not installed
+     * @throws QuicTransportUnavailableError when agentic-flow has no working QUIC
      */
     async connect() {
         const QuicClient = await loadQuicTransport();
+        // @ts-ignore - Dynamic import of optional peer dependency (cached by loadQuicTransport)
+        const status = await getQuicTransportStatus(await import(AGENTIC_FLOW_QUIC_MODULE));
+        if (!status.available) {
+            throw new QuicTransportUnavailableError(status.reason ?? 'unknown reason.');
+        }
         this.quic = new QuicClient({
             host: this.config.host,
             port: this.config.port,
@@ -75,7 +178,8 @@ export class VisaTapQuicTransport {
      * Send payment request over QUIC
      *
      * @param signedMandate - Cryptographically signed Active Mandate
-     * @returns Payment response
+     * @returns Payment response returned by the server
+     * @throws PaymentNotDeliveredError when no response with a transactionId came back
      */
     async sendPayment(signedMandate) {
         if (!this.connected) {
@@ -92,13 +196,19 @@ export class VisaTapQuicTransport {
      * Send raw payment data
      *
      * @param data - Payment data object
-     * @returns Response data
+     * @returns Response data returned by the server
+     * @throws PaymentNotDeliveredError when the transport returned no response
      */
     async send(data) {
         if (!this.connected) {
             throw new Error('Not connected. Call connect() first.');
         }
-        return await this.quic.send(data);
+        const response = await this.quic.send(data);
+        if (response === undefined || response === null) {
+            throw new PaymentNotDeliveredError('The QUIC transport returned no response, so delivery is unconfirmed. ' +
+                'Treat the message as not sent.');
+        }
+        return response;
     }
     /**
      * Get connection statistics
@@ -137,23 +247,21 @@ export class VisaTapQuicTransport {
         }
     }
     /**
-     * Parse payment response from QUIC
+     * Validate a payment response from the server.
+     *
+     * Never synthesises a response: a missing response, or one without a
+     * transactionId and a known status, means the payment was not confirmed.
      */
     parsePaymentResponse(raw) {
-        // agentic-flow 2.x/3.x QuicTransport.send() resolves to undefined
-        const response = raw ?? {};
-        // Handle different response formats
-        if (response.transactionId) {
-            return response;
+        const transactionId = raw?.transactionId;
+        if (raw === undefined || raw === null || typeof transactionId !== 'string' || !transactionId) {
+            throw new PaymentNotDeliveredError('The QUIC transport returned no payment response with a transactionId, so the ' +
+                'payment was not confirmed. Treat it as not sent.');
         }
-        // Default response format
-        return {
-            transactionId: response.id || crypto.randomUUID(),
-            status: response.status || 'pending',
-            amount: response.amount || 0,
-            currency: response.currency || 'USD',
-            timestamp: new Date().toISOString(),
-        };
+        if (!['approved', 'declined', 'pending'].includes(raw.status)) {
+            throw new PaymentNotDeliveredError(`The payment response has an unknown status (${String(raw.status)}); treat it as not confirmed.`);
+        }
+        return raw;
     }
 }
 /**

package/dist/visa-tap/quic-transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"quic-transport.js","sourceRoot":"","sources":["../../src/visa-tap/quic-transport.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,0DAA0D;AAC1D,IAAI,aAAa,GAAQ,IAAI,CAAC;AAE9B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,6BAA6B,CAAC;AAEtE,wEAAwE;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IAExC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,0DAA0D;QAC1D,GAAG,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,6EAA6E,uBAAuB,GAAG,EACvG,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,GAAG,EAAE,aAAa,KAAK,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,iEAAiE,wBAAwB,IAAI;YAC3F,0DAA0D,uBAAuB,GAAG,CACvF,CAAC;IACJ,CAAC;IAED,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;IAClC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IACvB,IAAI,GAAQ,IAAI,CAAC;IACjB,MAAM,CAAa;IACnB,SAAS,GAAY,KAAK,CAAC;IAEnC,YAAY,MAAkB;QAC5B,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,IAAI;YAChB,oBAAoB,EAAE,GAAG;YACzB,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,UAAU,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAE7C,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC;YACzB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;SACvD,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,aAAkC;QAClD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,IAAS;QAClB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,OAAO;YACL,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;YACnB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC;YAC/B,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,CAAC;YACvC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,CAAC;SACxC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,GAAQ;QACnC,kEAAkE;QAClE,MAAM,QAAQ,GAAG,GAAG,IAAI,EAAE,CAAC;QAE3B,oCAAoC;QACpC,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC3B,OAAO,QAA2B,CAAC;QACrC,CAAC;QAED,0BAA0B;QAC1B,OAAO;YACL,aAAa,EAAE,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE;YACjD,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,SAAS;YACpC,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,CAAC;YAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,KAAK;YACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,OAAe,IAAI;IAEnB,OAAO,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAClD,CAAC"}
+{"version":3,"file":"quic-transport.js","sourceRoot":"","sources":["../../src/visa-tap/quic-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,0DAA0D;AAC1D,IAAI,aAAa,GAAQ,IAAI,CAAC;AAE9B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,6BAA6B,CAAC;AAEtE,wEAAwE;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IAExC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,0DAA0D;QAC1D,GAAG,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,6EAA6E,uBAAuB,GAAG,EACvG,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,GAAG,EAAE,aAAa,KAAK,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,iEAAiE,wBAAwB,IAAI;YAC3F,0DAA0D,uBAAuB,GAAG,CACvF,CAAC;IACJ,CAAC;IAED,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;IAClC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAE7D;;;GAGG;AACH,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAEjC;IADZ,IAAI,GAAG,gBAAgB,CAAC;IACjC,YAAqB,MAAc;QACjC,KAAK,CACH,2CAA2C,MAAM,8EAA8E,CAChI,CAAC;QAHiB,WAAM,GAAN,MAAM,CAAQ;QAIjC,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,GAAG,qBAAqB,CAAC;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAQD,MAAM,eAAe,GACnB,qFAAqF;IACrF,iFAAiF,CAAC;AAEpF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAS;IACpD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CAAC;YACH,0DAA0D;YAC1D,GAAG,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,4DAA4D,uBAAuB,KAAK;aACjG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,EAAE,aAAa,KAAK,UAAU,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,MAAM,EAAE,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YAC3D,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,2CAA2C,CAAC;aAC9E,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,GAAG,EAAE,eAAe,KAAK,UAAU,EAAE,CAAC;YAC/C,IAAI,CAAC,MAAM,GAAG,CAAC,eAAe,EAAE,CAAC,KAAK,IAAI;gBAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YACvE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;QACnF,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,oBAAoB;IACvB,IAAI,GAAQ,IAAI,CAAC;IACjB,MAAM,CAAa;IACnB,SAAS,GAAY,KAAK,CAAC;IAEnC;;;;;OAKG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAkB;QACpC,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,YAAY,MAAkB;QAC5B,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,IAAI;YAChB,oBAAoB,EAAE,GAAG;YACzB,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,UAAU,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAE7C,wFAAwF;QACxF,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,6BAA6B,CAAC,MAAM,CAAC,MAAM,IAAI,iBAAiB,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC;YACzB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;SACvD,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,aAAkC;QAClD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,IAAS;QAClB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,IAAI,wBAAwB,CAChC,uEAAuE;gBACrE,gCAAgC,CACnC,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,OAAO;YACL,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;YACnB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC;YAC/B,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,CAAC;YACvC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,CAAC;SACxC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,oBAAoB,CAAC,GAAQ;QACnC,MAAM,aAAa,GAAG,GAAG,EAAE,aAAa,CAAC;QACzC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;YAC7F,MAAM,IAAI,wBAAwB,CAChC,+EAA+E;gBAC7E,kDAAkD,CACrD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,wBAAwB,CAChC,+CAA+C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,+BAA+B,CACjG,CAAC;QACJ,CAAC;QACD,OAAO,GAAsB,CAAC;IAChC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,OAAe,IAAI;IAEnB,OAAO,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAClD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-payments",
-  "version": "0.1.14",
+  "version": "0.1.15",
   "description": "Dual-protocol payment infrastructure for autonomous AI commerce (AP2 + ACP)",
   "type": "module",
   "main": "./dist/index.js",
@@ -135,7 +135,7 @@
     "@typescript-eslint/eslint-plugin": "^6.19.0",
     "@typescript-eslint/parser": "^6.19.0",
     "@vitest/coverage-v8": "^1.6.1",
-    "agentic-flow": "^3.4.0",
+    "agentic-flow": "^3.4.4",
     "eslint": "^8.56.0",
     "eslint-config-prettier": "^9.1.0",
     "eslint-plugin-import": "^2.29.1",