agentic-payments 0.1.14 → 0.1.16

package/README.md

@@ -25,7 +25,7 @@
 - **AP2 (Agent Payments Protocol)**: Cryptographic payment mandates with Ed25519 signatures
 - **ACP (Agentic Commerce Protocol)**: REST API integration with Stripe-compatible checkout
 - **Active Mandate**: Autonomous payment capsules with spend caps, time windows, and instant revocation
-- **Visa TAP (Trusted Agent Protocol)**: QUIC transport with RFC 9421 HTTP message signatures for ultra-low latency payments
+- **Visa TAP (Trusted Agent Protocol)**: RFC 9421 HTTP message signatures for agent payment requests. The QUIC transport is not functional yet and fails closed (see [Visa TAP transport](#visa-tap-quic-transport))
 
 **Key Innovation**: Multi-agent Byzantine consensus allows fleets of specialized AI agents (purchasing, finance, compliance, audit) to collaboratively authorize transactions, ensuring no single compromised agent can approve fraudulent payments.
 
@@ -40,7 +40,6 @@ Built with TypeScript for Node.js, Deno, Bun, and browsers. Production-ready wit
 - ✅ **Cart Mandates**: Pre-approve shopping carts with line-item verification
 - ✅ **Payment Tracking**: Monitor payment status from authorization to capture
 - ✅ **MCP Protocol**: Stdio and HTTP transports for AI assistant integration (Claude, Cline, etc.)
-- ✅ **Visa TAP QUIC Transport**: Ultra-low latency payment authorization with 0-RTT connection resumption
 - ✅ **RFC 9421 HTTP Signatures**: Cryptographic request signing for secure payment authentication
 - ✅ **Production Ready**: 100% TypeScript, comprehensive error handling, <200KB
 - ✅ **CLI Tools**: Command-line interface for mandate management and testing
@@ -631,72 +630,42 @@ console.log(`Authorized: ${vendorPayment.isComplete()}`);
 
 **Use case**: Automated accounts payable, expense report processing, and vendor management where AI agents categorize, approve, and execute payments based on policy rules.
 
-### Visa TAP: Ultra-Low Latency Payments with QUIC
+### Visa TAP: Signed Payment Requests
 
-Send payment authorizations over QUIC for 50-70% faster processing than HTTP/2:
+Sign payment requests with RFC 9421 HTTP message signatures and submit them to
+the merchant over HTTPS:
 
 ```typescript
-import { VisaTapQuicTransport, signHttpMessage } from 'agentic-payments';
-import { AgentIdentity } from 'agentic-payments';
-
-// 1. Create QUIC transport connection
-const transport = new VisaTapQuicTransport({
-  host: 'merchant.com',
-  port: 8443,
-  enable0RTT: true,              // 0-RTT reconnection (<1ms)
-  maxConcurrentStreams: 100      // 100+ parallel payments
-});
+import { AgentIdentity, signHttpMessage, computeContentDigest } from 'agentic-payments';
 
-await transport.connect();
-console.log('✅ Connected via QUIC');
-
-// 2. Sign payment request with RFC 9421
 const agent = await AgentIdentity.generate();
 const privateKeyHex = Buffer.from(agent.privateKey).toString('hex');
 
+const body = new TextEncoder().encode(JSON.stringify(mandate));
 const signed = await signHttpMessage(
   {
     method: 'POST',
     authority: 'merchant.com',
     path: '/api/payments',
-    contentDigest: 'sha-256=:...:',
+    contentDigest: computeContentDigest(body),
   },
   privateKeyHex,
   'did:agent:shopping-bot'
 );
 
-// 3. Send payment via QUIC
-const mandate = {
-  mandate_id: 'mandate_001',
-  agent: 'shopping-bot@example.com',
-  holder: 'user@example.com',
-  amount: 5000,
-  currency: 'USD',
-  period: 'single',
-  kind: 'intent'
-};
-
-const response = await transport.sendPayment({
-  ...mandate,
-  signature: signed.signature,
-  public_key: Buffer.from(agent.publicKey()).toString('hex')
-});
-
-console.log(`Transaction ID: ${response.transactionId}`);
-console.log(`Status: ${response.status}`);
-console.log(`Latency: ${response.processingTime}ms`);
-
-await transport.close();
+// Send with your HTTPS client, carrying the Content-Digest header plus
+// Signature: signed.signature and Signature-Input: signed.signatureInput, and
+// treat the payment as submitted only when the merchant confirms it.
 ```
 
-**Performance Benefits:**
-- **50-70% faster** than HTTP/2 for payment authorization
-- **0-RTT reconnection** for sub-millisecond session resumption
-- **Connection migration** for seamless mobile network handoffs
-- **100+ concurrent streams** per connection
-- **No head-of-line blocking** unlike HTTP/2
+`Signature-Input` lists every signed component in signing order (`@method`,
+`@authority`, `@path`, then `content-digest` and any `headers`) with
+`created`, `expires` (default 5 minutes), `nonce`, `keyid` and `alg="ed25519"`,
+so any RFC 9421 verifier can check it. The package is tested against the
+independent `http-message-signatures` implementation and the RFC 9421
+Appendix B.2.6 Ed25519 test vector.
 
-**Use case**: High-frequency trading, real-time payments, mobile commerce, and latency-sensitive payment flows where every millisecond counts.
+There is no working QUIC transport: see [Visa TAP transport](#visa-tap-quic-transport).
 
 ### Agent Fleet Management
 
@@ -908,66 +877,72 @@ console.log(`Complete: ${payment.isComplete()}`);
 
 ### Visa TAP QUIC Transport
 
-Ultra-low latency payment transport with RFC 9421 HTTP message signatures:
+**Status: not functional. `connect()` always rejects with the agentic-flow
+releases published so far.**
+
+`VisaTapQuicTransport` sends through the optional peer `agentic-flow`
+(`agentic-flow/transport/quic`). No agentic-flow release ships a working QUIC
+transport: its `QuicTransport.send()` is a placeholder that sends nothing, and
+agentic-flow 3.4.4+ reports this through `getQuicStatus()`
+(`{ available: false, fallback: 'websocket' }`).
+
+What happens since 0.1.15:
+
+- `connect()` (and `VisaTapQuicTransport.create()`) asks agentic-flow whether
+  QUIC is available and rejects with `QuicTransportUnavailableError`
+  (`code: 'QUIC_UNAVAILABLE'`, with agentic-flow's reason) when it is not.
+  agentic-flow versions without the probe count as unavailable.
+- Without agentic-flow installed, `connect()` rejects with an install hint.
+- `send()` and `sendPayment()` reject with `'Not connected'` before a
+  successful `connect()`, and with `PaymentNotDeliveredError`
+  (`code: 'PAYMENT_NOT_DELIVERED'`) unless the server returns a response;
+  `sendPayment()` additionally requires a `transactionId` and a status of
+  `approved`, `declined` or `pending`. A response is never synthesised.
+
+agentic-payments 0.1.14 connected to the placeholder and `sendPayment()`
+resolved with a made-up `transactionId` and `status: 'pending'` although
+nothing was sent. Treat any `transactionId` from 0.1.14's `sendPayment()` as
+not submitted.
+
+The transport does not switch to agentic-flow's WebSocket fallback on its own.
+No Visa TAP endpoint speaks that framing, its `send()` carries no
+application-level acknowledgement, and plain `ws://` would send mandates in
+cleartext, so a silent switch could not tell a delivered payment from a lost
+one. Until a real transport exists, submit signed requests over HTTPS.
 
 ```typescript
 import {
   VisaTapQuicTransport,
-  signHttpMessage,
-  verifyHttpSignature,
-  computeContentDigest
+  QuicTransportUnavailableError,
+  getQuicTransportStatus,
 } from 'agentic-payments/visa-tap';
 
-// Create QUIC transport
-const transport = new VisaTapQuicTransport({
-  host: 'payments.merchant.com',
-  port: 8443,
-  enable0RTT: true,
-  timeout: 5000
-});
-
-await transport.connect();
-
-// Sign HTTP request per RFC 9421
-const body = new TextEncoder().encode(JSON.stringify(mandate));
-const contentDigest = computeContentDigest(body);
-
-const signed = await signHttpMessage(
-  {
-    method: 'POST',
-    authority: 'payments.merchant.com',
-    path: '/v1/payments',
-    contentDigest,
-    headers: {
-      'Content-Type': 'application/json'
-    }
-  },
-  privateKeyHex,
-  'did:agent:payment-bot'
-);
-
-// Send payment
-const response = await transport.sendPayment(signedMandate);
-
-// Get connection statistics
-const stats = transport.getStats();
-console.log(`RTT: ${stats?.rtt}ms`);
-console.log(`Bytes sent: ${stats?.bytesSent}`);
+const status = await getQuicTransportStatus(); // { available: false, reason: '...' }
 
-await transport.close();
+try {
+  const transport = await VisaTapQuicTransport.create({ host: 'payments.merchant.com', port: 8443 });
+  const response = await transport.sendPayment(signedMandate); // only a real server response
+  await transport.close();
+} catch (err) {
+  if (err instanceof QuicTransportUnavailableError) {
+    // Nothing was sent. Use HTTPS with signHttpMessage() instead.
+  }
+}
 ```
 
 **API Reference:**
 
 | Method | Description | Returns |
 |--------|-------------|---------|
-| `constructor(config)` | Create QUIC transport | `VisaTapQuicTransport` |
-| `connect()` | Establish connection | `Promise<void>` |
-| `sendPayment(mandate)` | Send signed mandate | `Promise<PaymentResponse>` |
-| `send(data)` | Send raw data | `Promise<any>` |
-| `getStats()` | Get connection stats | `QuicStats \| null` |
+| `VisaTapQuicTransport.create(config)` | Construct and `connect()` | `Promise<VisaTapQuicTransport>` |
+| `constructor(config)` | Create transport (no I/O) | `VisaTapQuicTransport` |
+| `connect()` | Rejects with `QuicTransportUnavailableError` unless agentic-flow reports QUIC available | `Promise<void>` |
+| `sendPayment(mandate)` | Send signed mandate; rejects with `PaymentNotDeliveredError` without a confirmed response | `Promise<PaymentResponse>` |
+| `send(data)` | Send raw data; rejects with `PaymentNotDeliveredError` without a response | `Promise<any>` |
+| `getStats()` | Connection stats when connected | `QuicStats \| null` |
 | `isConnected()` | Check connection status | `boolean` |
 | `close()` | Close connection | `Promise<void>` |
+| `getQuicTransportStatus()` | Whether agentic-flow has a working QUIC transport, and why not | `Promise<{ available, reason? }>` |
 
 **RFC 9421 Functions:**
 
@@ -1018,9 +993,9 @@ agentic-payments/
 │   │   ├── signing.ts        # Ed25519 signing
 │   │   ├── revocation.ts     # Revocation store
 │   │   └── i18n.ts           # Internationalization
-│   ├── visa-tap/             # Visa TAP QUIC integration
+│   ├── visa-tap/             # Visa TAP integration
 │   │   ├── types.ts          # Visa TAP TypeScript types
-│   │   ├── quic-transport.ts # QUIC transport bridge
+│   │   ├── quic-transport.ts # QUIC transport bridge (fails closed, see above)
 │   │   ├── rfc9421.ts        # RFC 9421 HTTP signatures
 │   │   └── index.ts          # Visa TAP exports
 │   ├── cli/                  # Command-line interface
@@ -1055,12 +1030,25 @@ Production deployment guidelines for secure payment authorization:
 
 ### Signature Validation
 
-**RFC 9421 Timestamp Checks**:
+**RFC 9421 Verification**:
 ```typescript
-// verifyHttpSignature includes timestamp validation (default: 5 minutes)
-const isValid = await verifyHttpSignature(components, signed, publicKey, 300);
+// components: your view of the received request. Every component you pass,
+// including contentDigest and each entry of headers, must be covered by the
+// received Signature-Input or verification fails.
+const isValid = await verifyHttpSignature(
+  components,
+  { signatureInput: req.headers['signature-input'], signature: req.headers['signature'] },
+  publicKeyHex,
+  300, // max age of created, in seconds
+  { expectedKeyId: 'did:agent:shopping-bot' }
+);
 ```
 
+The signature base is rebuilt from the received `Signature-Input`, in its
+order. Verification fails when `created` is missing, older than the max age or
+in the future (30 s skew), when `expires` has passed, when `alg` is not
+`ed25519`, or when a covered component is unsupported or unavailable.
+
 **Replay Protection**:
 - Nonce-based replay prevention (16-byte cryptographic nonces)
 - Timestamp validation (configurable max age, default 300 seconds)
@@ -1082,10 +1070,10 @@ app.post('/verify', limiter, verifyHandler);
 
 ### Network Security
 
-**QUIC Transport**:
-- TLS 1.3 encryption by default (no configuration needed)
-- Certificate pinning for merchant endpoints
-- Monitor connection statistics for anomalies
+**Payment transport**:
+- The Visa TAP QUIC transport is not functional and refuses to connect; submit payment requests over HTTPS (TLS 1.2+), signed with `signHttpMessage`
+- Pin certificates for merchant endpoints where your HTTPS client supports it
+- Record a payment as submitted only when the merchant confirms it
 
 **MCP Server**:
 - Use stdio transport for local development only
@@ -1127,23 +1115,9 @@ Optimized for low-latency payment authorization with minimal bundle impact:
 | Ed25519 Verify | ~3ms | Single verification |
 | Consensus (3 agents) | ~10ms | Byzantine fault tolerance |
 | Mandate Validation | <1ms | Schema + business rules |
-| QUIC Connection | ~100ms | First connection (vs 300ms HTTP/2) |
-| QUIC Reconnection | <1ms | 0-RTT session resumption |
 | RFC 9421 Signing | ~2ms | HTTP message signature |
 | Bundle Size | <200KB | Gzipped, tree-shakeable |
 
-### QUIC Transport Performance
-
-Comparison with HTTP/2 for payment authorization:
-
-| Metric | QUIC (Visa TAP) | HTTP/2 | Improvement |
-|--------|-----------------|--------|-------------|
-| First connection | 100ms | 300ms | **66% faster** |
-| Reconnection | <1ms (0-RTT) | 200ms | **99.5% faster** |
-| Mobile handoff | Seamless | Connection drop | **Connection migration** |
-| Concurrent streams | 100+ | 100+ | Equal |
-| Head-of-line blocking | None | Present | **Better reliability** |
-
 ## 📄 License
 
 Licensed under either of:

package/dist/index.d.ts

@@ -49,8 +49,9 @@ export type { AgentVote, VerificationResult, VerificationConfig, SystemMetrics,
 export { IntentMandate, CartMandate, PaymentMandate } from './mandate.js';
 export type { IntentMandateData, CartMandateData, PaymentMandateData, CartItem, ValidationResult, } from './mandate.js';
 export { PaymentError, PaymentErrorCode, isRecoverable, getErrorCode, formatError, AgenticPaymentError, CryptoError, ValidationError, ConsensusError, SystemError, WasmInitError, ErrorCode, } from './errors.js';
-export { VisaTapQuicTransport, createQuicTransport } from './visa-tap/index.js';
+export { VisaTapQuicTransport, createQuicTransport, getQuicTransportStatus, QuicTransportUnavailableError, PaymentNotDeliveredError, } from './visa-tap/index.js';
 export { signHttpMessage, verifyHttpSignature, computeContentDigest } from './visa-tap/index.js';
+export type { SignatureComponents, SignedHttpMessage, VerifiableHttpSignature, SignHttpMessageOptions, VerifyHttpSignatureOptions, } from './visa-tap/index.js';
 export { TAP_VERSION, DEFAULT_QUIC_PORT, MAX_MANDATE_LIFETIME_SECS } from './visa-tap/index.js';
 export declare const VERSION = "1.0.0";
 /**

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC1E,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,QAAQ,EACR,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,WAAW,EAEX,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,cAAc,EACd,WAAW,EACX,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAGhG,eAAO,MAAM,OAAO,UAAU,CAAC;AAE/B;;;;GAIG;AACH,wBAAgB,OAAO,IAAI;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAgBA;;;;;AAGD,wBAGE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC1E,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,kBAAkB,EAClB,QAAQ,EACR,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,WAAW,EAEX,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,cAAc,EACd,WAAW,EACX,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AAIrB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACjG,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAGhG,eAAO,MAAM,OAAO,UAAU,CAAC;AAE/B;;;;GAIG;AACH,wBAAgB,OAAO,IAAI;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAeA;;;;;AAGD,wBAGE"}

package/dist/index.js

@@ -50,8 +50,9 @@ export { IntentMandate, CartMandate, PaymentMandate } from './mandate.js';
 export { PaymentError, PaymentErrorCode, isRecoverable, getErrorCode, formatError, 
 // Legacy aliases
 AgenticPaymentError, CryptoError, ValidationError, ConsensusError, SystemError, WasmInitError, ErrorCode, } from './errors.js';
-// Visa TAP (Trusted Agent Protocol) - QUIC transport integration
-export { VisaTapQuicTransport, createQuicTransport } from './visa-tap/index.js';
+// Visa TAP (Trusted Agent Protocol). The QUIC transport fails closed: agentic-flow
+// ships no working QUIC, so connect() rejects with QuicTransportUnavailableError.
+export { VisaTapQuicTransport, createQuicTransport, getQuicTransportStatus, QuicTransportUnavailableError, PaymentNotDeliveredError, } from './visa-tap/index.js';
 export { signHttpMessage, verifyHttpSignature, computeContentDigest } from './visa-tap/index.js';
 export { TAP_VERSION, DEFAULT_QUIC_PORT, MAX_MANDATE_LIFETIME_SECS } from './visa-tap/index.js';
 // Version information
@@ -72,7 +73,6 @@ export function getInfo() {
             'intent-mandates',
             'cart-mandates',
             'payment-mandates',
-            'visa-tap-quic-transport',
             'rfc9421-http-signatures',
             'active-mandates',
         ],

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,eAAe;AACf,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAG9C,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAS1E,gBAAgB;AAChB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,WAAW;AACX,iBAAiB;AACjB,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,cAAc,EACd,WAAW,EACX,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,iEAAiE;AACjE,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAEhG,sBAAsB;AACtB,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B;;;;GAIG;AACH,MAAM,UAAU,OAAO;IAKrB,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,cAAc,EAAE,mBAAmB;QACnC,QAAQ,EAAE;YACR,oBAAoB;YACpB,uBAAuB;YACvB,2BAA2B;YAC3B,iBAAiB;YACjB,eAAe;YACf,kBAAkB;YAClB,yBAAyB;YACzB,yBAAyB;YACzB,iBAAiB;SAClB;KACF,CAAC;AACJ,CAAC;AAED,iBAAiB;AACjB,eAAe;IACb,OAAO;IACP,OAAO;CACR,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,eAAe;AACf,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAG9C,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAS1E,gBAAgB;AAChB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,WAAW;AACX,iBAAiB;AACjB,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,cAAc,EACd,WAAW,EACX,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,mFAAmF;AACnF,kFAAkF;AAClF,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAQjG,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAEhG,sBAAsB;AACtB,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B;;;;GAIG;AACH,MAAM,UAAU,OAAO;IAKrB,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,cAAc,EAAE,mBAAmB;QACnC,QAAQ,EAAE;YACR,oBAAoB;YACpB,uBAAuB;YACvB,2BAA2B;YAC3B,iBAAiB;YACjB,eAAe;YACf,kBAAkB;YAClB,yBAAyB;YACzB,iBAAiB;SAClB;KACF,CAAC;AACJ,CAAC;AAED,iBAAiB;AACjB,eAAe;IACb,OAAO;IACP,OAAO;CACR,CAAC"}

package/dist/visa-tap/index.d.ts

@@ -1,30 +1,29 @@
 /**
  * Visa TAP (Trusted Agent Protocol) Integration
  *
- * High-performance payment infrastructure with QUIC transport,
- * RFC 9421 HTTP message signatures, and Active Mandates.
+ * RFC 9421 HTTP message signatures, Active Mandates, and a QUIC transport
+ * bridge. No published agentic-flow release ships a working QUIC transport, so
+ * VisaTapQuicTransport.connect() rejects with QuicTransportUnavailableError.
  *
  * @example
  * ```typescript
  * import { VisaTapQuicTransport, signHttpMessage } from 'agentic-payments/visa-tap';
  *
- * // Create QUIC transport
- * const transport = new VisaTapQuicTransport({
+ * // Throws QuicTransportUnavailableError while agentic-flow has no working QUIC
+ * const transport = await VisaTapQuicTransport.create({
  *   host: 'merchant.com',
  *   port: 8443
  * });
  *
- * await transport.connect();
- *
- * // Send payment
+ * // Resolves only with a server response carrying a transactionId;
+ * // otherwise rejects with PaymentNotDeliveredError
  * const response = await transport.sendPayment(signedMandate);
- * console.log('Payment approved:', response.transactionId);
  * ```
  */
 export { validateAndVerify, guardExecution, revoke, isRevoked, getAllRevocations, type SignedMandate, type VerificationResult, type ExecutionGuard, type RevocationRecord, } from '../active-mandate/index.js';
-export { VisaTapQuicTransport, createQuicTransport, loadQuicTransport, AGENTIC_FLOW_PEER_RANGE, } from './quic-transport.js';
+export { VisaTapQuicTransport, createQuicTransport, loadQuicTransport, getQuicTransportStatus, QuicTransportUnavailableError, PaymentNotDeliveredError, QUIC_UNAVAILABLE, PAYMENT_NOT_DELIVERED, AGENTIC_FLOW_PEER_RANGE, type QuicTransportStatus, } from './quic-transport.js';
 export { signHttpMessage, verifyHttpSignature, computeContentDigest, } from './rfc9421.js';
-export type { Period, MandateKind, ActiveMandatePayload, SignedActiveMandate, SignatureComponents, SignedHttpMessage, QuicConfig, QuicStats, PaymentResponse, } from './types.js';
+export type { Period, MandateKind, ActiveMandatePayload, SignedActiveMandate, SignatureComponents, SignedHttpMessage, VerifiableHttpSignature, SignHttpMessageOptions, VerifyHttpSignatureOptions, QuicConfig, QuicStats, PaymentResponse, } from './types.js';
 /**
  * Visa TAP protocol version
  */

package/dist/visa-tap/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/visa-tap/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,MAAM,EACN,SAAS,EACT,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,MAAM,EACN,WAAW,EACX,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,eAAO,MAAM,WAAW,QAAQ,CAAC;AAEjC;;GAEG;AACH,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC;;GAEG;AACH,eAAO,MAAM,yBAAyB,QAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/visa-tap/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,MAAM,EACN,SAAS,EACT,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,6BAA6B,EAC7B,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,EACvB,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,MAAM,EACN,WAAW,EACX,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,UAAU,EACV,SAAS,EACT,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,eAAO,MAAM,WAAW,QAAQ,CAAC;AAEjC;;GAEG;AACH,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC;;GAEG;AACH,eAAO,MAAM,yBAAyB,QAAmB,CAAC"}

package/dist/visa-tap/index.js

@@ -1,30 +1,29 @@
 /**
  * Visa TAP (Trusted Agent Protocol) Integration
  *
- * High-performance payment infrastructure with QUIC transport,
- * RFC 9421 HTTP message signatures, and Active Mandates.
+ * RFC 9421 HTTP message signatures, Active Mandates, and a QUIC transport
+ * bridge. No published agentic-flow release ships a working QUIC transport, so
+ * VisaTapQuicTransport.connect() rejects with QuicTransportUnavailableError.
  *
  * @example
  * ```typescript
  * import { VisaTapQuicTransport, signHttpMessage } from 'agentic-payments/visa-tap';
  *
- * // Create QUIC transport
- * const transport = new VisaTapQuicTransport({
+ * // Throws QuicTransportUnavailableError while agentic-flow has no working QUIC
+ * const transport = await VisaTapQuicTransport.create({
  *   host: 'merchant.com',
  *   port: 8443
  * });
  *
- * await transport.connect();
- *
- * // Send payment
+ * // Resolves only with a server response carrying a transactionId;
+ * // otherwise rejects with PaymentNotDeliveredError
  * const response = await transport.sendPayment(signedMandate);
- * console.log('Payment approved:', response.transactionId);
  * ```
  */
 // Re-export from active-mandate (already working)
 export { validateAndVerify, guardExecution, revoke, isRevoked, getAllRevocations, } from '../active-mandate/index.js';
 // Export QUIC transport
-export { VisaTapQuicTransport, createQuicTransport, loadQuicTransport, AGENTIC_FLOW_PEER_RANGE, } from './quic-transport.js';
+export { VisaTapQuicTransport, createQuicTransport, loadQuicTransport, getQuicTransportStatus, QuicTransportUnavailableError, PaymentNotDeliveredError, QUIC_UNAVAILABLE, PAYMENT_NOT_DELIVERED, AGENTIC_FLOW_PEER_RANGE, } from './quic-transport.js';
 // Export RFC 9421
 export { signHttpMessage, verifyHttpSignature, computeContentDigest, } from './rfc9421.js';
 /**

package/dist/visa-tap/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/visa-tap/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,kDAAkD;AAClD,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,MAAM,EACN,SAAS,EACT,iBAAiB,GAKlB,MAAM,4BAA4B,CAAC;AAEpC,wBAAwB;AACxB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,kBAAkB;AAClB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAetB;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC;AAEjC;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/visa-tap/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,kDAAkD;AAClD,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,MAAM,EACN,SAAS,EACT,iBAAiB,GAKlB,MAAM,4BAA4B,CAAC;AAEpC,wBAAwB;AACxB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,6BAA6B,EAC7B,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAE7B,kBAAkB;AAClB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAkBtB;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC;AAEjC;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC"}

package/dist/visa-tap/quic-transport.d.ts

@@ -1,7 +1,18 @@
 /**
  * QUIC Transport Integration for Visa TAP
  *
- * Bridges agentic-payments with agentic-flow QUIC transport
+ * Bridges agentic-payments with the agentic-flow QUIC transport.
+ *
+ * No published agentic-flow release ships a working QUIC transport:
+ * `agentic-flow/transport/quic` is a placeholder whose `send()` discards the
+ * data. This transport therefore refuses to connect unless agentic-flow
+ * reports QUIC as available (`getQuicStatus()`), and never reports a payment
+ * as sent unless a real response comes back.
+ *
+ * It deliberately does not fall back to agentic-flow's WebSocket transport:
+ * no Visa TAP endpoint speaks that framing, its `send()` has no
+ * application-level acknowledgement, and plain `ws://` would carry mandates
+ * in cleartext. Failing closed is the only safe behaviour for payments.
  */
 import type { QuicConfig, QuicStats, PaymentResponse, SignedActiveMandate } from './types.js';
 /**
@@ -20,35 +31,83 @@ export declare const AGENTIC_FLOW_PEER_RANGE = "^2.0.14 || ^3.0.0";
  * @throws Error with install instructions when agentic-flow is not installed
  */
 export declare function loadQuicTransport(): Promise<any>;
+/** Error code carried by {@link QuicTransportUnavailableError}. */
+export declare const QUIC_UNAVAILABLE = "QUIC_UNAVAILABLE";
+/** Error code carried by {@link PaymentNotDeliveredError}. */
+export declare const PAYMENT_NOT_DELIVERED = "PAYMENT_NOT_DELIVERED";
+/**
+ * Thrown by {@link VisaTapQuicTransport.connect} when no working QUIC
+ * transport is available, so nothing could be delivered.
+ */
+export declare class QuicTransportUnavailableError extends Error {
+    readonly reason: string;
+    readonly code = "QUIC_UNAVAILABLE";
+    constructor(reason: string);
+}
+/**
+ * Thrown when a send did not produce a confirmed response, so the caller must
+ * treat the payment message as not delivered.
+ */
+export declare class PaymentNotDeliveredError extends Error {
+    readonly code = "PAYMENT_NOT_DELIVERED";
+    constructor(message: string);
+}
+/** Result of {@link getQuicTransportStatus}. */
+export interface QuicTransportStatus {
+    available: boolean;
+    reason?: string;
+}
+/**
+ * Ask agentic-flow whether its QUIC transport can actually move data.
+ *
+ * Fails closed: QUIC counts as available only when agentic-flow exports a
+ * probe and that probe says so. Older agentic-flow releases have no probe,
+ * and their QuicTransport is the same placeholder, so they are unavailable.
+ */
+export declare function getQuicTransportStatus(mod?: any): Promise<QuicTransportStatus>;
 /**
  * Visa TAP QUIC Transport
  *
- * Provides high-performance QUIC transport for Visa TAP payments
- * with 0-RTT connection resumption and multiplexed streams.
+ * QUIC transport for Visa TAP payments, backed by agentic-flow.
+ *
+ * `connect()` rejects with {@link QuicTransportUnavailableError} unless
+ * agentic-flow reports a working QUIC transport. With every agentic-flow
+ * release published so far it rejects. Use {@link VisaTapQuicTransport.create}
+ * to construct and check in one step.
  */
 export declare class VisaTapQuicTransport {
     private quic;
     private config;
     private connected;
+    /**
+     * Construct a transport and connect it, failing fast when QUIC is
+     * unavailable.
+     *
+     * @throws QuicTransportUnavailableError when no working QUIC transport exists
+     */
+    static create(config: QuicConfig): Promise<VisaTapQuicTransport>;
     constructor(config: QuicConfig);
     /**
-     * Connect to QUIC server
+     * Connect to the QUIC server.
      *
-     * Supports 0-RTT connection resumption for sub-millisecond reconnection
+     * @throws Error with install instructions when agentic-flow is not installed
+     * @throws QuicTransportUnavailableError when agentic-flow has no working QUIC
      */
     connect(): Promise<void>;
     /**
      * Send payment request over QUIC
      *
      * @param signedMandate - Cryptographically signed Active Mandate
-     * @returns Payment response
+     * @returns Payment response returned by the server
+     * @throws PaymentNotDeliveredError when no response with a transactionId came back
      */
     sendPayment(signedMandate: SignedActiveMandate): Promise<PaymentResponse>;
     /**
      * Send raw payment data
      *
      * @param data - Payment data object
-     * @returns Response data
+     * @returns Response data returned by the server
+     * @throws PaymentNotDeliveredError when the transport returned no response
      */
     send(data: any): Promise<any>;
     /**
@@ -68,7 +127,10 @@ export declare class VisaTapQuicTransport {
      */
     close(): Promise<void>;
     /**
-     * Parse payment response from QUIC
+     * Validate a payment response from the server.
+     *
+     * Never synthesises a response: a missing response, or one without a
+     * transactionId and a known status, means the payment was not confirmed.
      */
     private parsePaymentResponse;
 }

package/dist/visa-tap/quic-transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quic-transport.d.ts","sourceRoot":"","sources":["../../src/visa-tap/quic-transport.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAK9F;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AAEtE,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAE3D;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,CAuBtD;AAED;;;;;GAKG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,SAAS,CAAkB;gBAEvB,MAAM,EAAE,UAAU;IAS9B;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAa9B;;;;;OAKG;IACG,WAAW,CAAC,aAAa,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC;IAc/E;;;;;OAKG;IACG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAQnC;;OAEG;IACH,QAAQ,IAAI,SAAS,GAAG,IAAI;IAc5B;;OAEG;IACH,WAAW,IAAI,OAAO;IAItB;;OAEG;IACH,gBAAgB,IAAI,MAAM;IAI1B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B;;OAEG;IACH,OAAO,CAAC,oBAAoB;CAkB7B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,MAAa,GAClB,oBAAoB,CAEtB"}
+{"version":3,"file":"quic-transport.d.ts","sourceRoot":"","sources":["../../src/visa-tap/quic-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAK9F;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AAEtE,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAE3D;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,CAuBtD;AAED,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,8DAA8D;AAC9D,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D;;;GAGG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;IAE1C,QAAQ,CAAC,MAAM,EAAE,MAAM;IADnC,QAAQ,CAAC,IAAI,sBAAoB;gBACZ,MAAM,EAAE,MAAM;CAMpC;AAED;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,2BAAyB;gBAC1B,OAAO,EAAE,MAAM;CAI5B;AAED,gDAAgD;AAChD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6BpF;AAED;;;;;;;;;GASG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,SAAS,CAAkB;IAEnC;;;;;OAKG;WACU,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,oBAAoB,CAAC;gBAM1D,MAAM,EAAE,UAAU;IAS9B;;;;;OAKG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB9B;;;;;;OAMG;IACG,WAAW,CAAC,aAAa,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC;IAc/E;;;;;;OAMG;IACG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAenC;;OAEG;IACH,QAAQ,IAAI,SAAS,GAAG,IAAI;IAc5B;;OAEG;IACH,WAAW,IAAI,OAAO;IAItB;;OAEG;IACH,gBAAgB,IAAI,MAAM;IAI1B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;CAe7B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,MAAa,GAClB,oBAAoB,CAEtB"}