agentmall 0.1.1 → 0.1.2

package/dist/cli.js

@@ -65,6 +65,7 @@ function createIdempotencyKey() {
 var AgentMall = class {
   baseUrl;
   apiSecret;
+  account;
   _fetch;
   products;
   purchases;
@@ -73,6 +74,7 @@ var AgentMall = class {
   constructor(config = {}) {
     this.baseUrl = (config.baseUrl ?? BASE_URL).replace(/\/$/, "");
     this.apiSecret = config.apiSecret;
+    this.account = config.account;
     this._fetch = config.fetch ?? globalThis.fetch.bind(globalThis);
     this.products = new AgentMallProducts(this);
     this.purchases = new AgentMallPurchases(this);
@@ -80,6 +82,10 @@ var AgentMall = class {
     this.refunds = new AgentMallRefunds(this);
   }
   /** @internal */
+  getAccount() {
+    return this.account;
+  }
+  /** @internal */
   async request(method, path, options) {
     const url = new URL(`${this.baseUrl}${path}`);
     if (options?.params) {
@@ -159,8 +165,28 @@ var AgentMallPurchases = class {
       }
     });
   }
-  /** Get a single purchase by ID. Requires apiSecret. */
-  async get(id) {
+  /** Get a single purchase by ID using either operator auth or the payer wallet. */
+  async get(id, options) {
+    const account = options?.account ?? this.client.getAccount();
+    if (account) {
+      const challenge = await this.client.request(
+        "POST",
+        "/api/purchases/status/challenge",
+        {
+          body: { id }
+        }
+      );
+      const signature = await account.signMessage({
+        message: challenge.message
+      });
+      return this.client.request("POST", "/api/purchases/status", {
+        body: {
+          id,
+          challenge: challenge.challenge,
+          signature
+        }
+      });
+    }
     return this.client.request("GET", "/api/purchases", {
       auth: true,
       params: { id }
@@ -516,11 +542,7 @@ async function buy(urlArg) {
 }
 async function status(purchaseId) {
   const apiSecret = process.env.AGENTMALL_API_SECRET;
-  if (!apiSecret) {
-    console.error("\x1B[31mAGENTMALL_API_SECRET is required.\x1B[0m");
-    process.exit(1);
-  }
-  const client = new AgentMall({ apiSecret });
+  const client = apiSecret ? new AgentMall({ apiSecret }) : new AgentMall({ account: await resolveAccount() });
   const result = await client.purchases.get(purchaseId);
   displayStatus(result);
 }
@@ -568,12 +590,12 @@ function printHelp() {
   Usage:
     agentmall [url]              Buy a product (interactive)
     agentmall buy <url>          Buy a product
-    agentmall status <id>        Check order status
+    agentmall status <id>        Check order status with the payer wallet
     agentmall help               Show this help
 
   Environment:
-    MPPX_PRIVATE_KEY             Wallet private key for payments
-    AGENTMALL_API_SECRET         Operator secret for read endpoints
+    MPPX_PRIVATE_KEY             Wallet private key for payments and buyer status checks
+    AGENTMALL_API_SECRET         Operator secret for internal admin read endpoints
 `);
 }
 main();

package/dist/index.cjs

@@ -108,6 +108,7 @@ function createIdempotencyKey() {
 var AgentMall = class {
   baseUrl;
   apiSecret;
+  account;
   _fetch;
   products;
   purchases;
@@ -116,6 +117,7 @@ var AgentMall = class {
   constructor(config = {}) {
     this.baseUrl = (config.baseUrl ?? BASE_URL).replace(/\/$/, "");
     this.apiSecret = config.apiSecret;
+    this.account = config.account;
     this._fetch = config.fetch ?? globalThis.fetch.bind(globalThis);
     this.products = new AgentMallProducts(this);
     this.purchases = new AgentMallPurchases(this);
@@ -123,6 +125,10 @@ var AgentMall = class {
     this.refunds = new AgentMallRefunds(this);
   }
   /** @internal */
+  getAccount() {
+    return this.account;
+  }
+  /** @internal */
   async request(method, path, options) {
     const url = new URL(`${this.baseUrl}${path}`);
     if (options?.params) {
@@ -202,8 +208,28 @@ var AgentMallPurchases = class {
       }
     });
   }
-  /** Get a single purchase by ID. Requires apiSecret. */
-  async get(id) {
+  /** Get a single purchase by ID using either operator auth or the payer wallet. */
+  async get(id, options) {
+    const account = options?.account ?? this.client.getAccount();
+    if (account) {
+      const challenge = await this.client.request(
+        "POST",
+        "/api/purchases/status/challenge",
+        {
+          body: { id }
+        }
+      );
+      const signature = await account.signMessage({
+        message: challenge.message
+      });
+      return this.client.request("POST", "/api/purchases/status", {
+        body: {
+          id,
+          challenge: challenge.challenge,
+          signature
+        }
+      });
+    }
     return this.client.request("GET", "/api/purchases", {
       auth: true,
       params: { id }

package/dist/index.d.cts

@@ -1,11 +1,19 @@
 type AgentMallConfig = {
     /** API base URL. Defaults to https://api.agentmall.sh */
     baseUrl?: string;
-    /** Operator API secret for read endpoints (Bearer auth). */
+    /** Operator API secret for admin read endpoints (Bearer auth). */
     apiSecret?: string;
+    /** Wallet account used for buyer-authenticated purchase status reads. */
+    account?: WalletAccount;
     /** Custom fetch implementation (e.g. mppx-wrapped fetch for automatic 402 handling). */
     fetch?: typeof globalThis.fetch;
 };
+type WalletAccount = {
+    address: string;
+    signMessage(args: {
+        message: string;
+    }): Promise<string>;
+};
 type ProductVariant = {
     label?: string;
     value: string;
@@ -65,6 +73,11 @@ type CreatePurchaseResponse = {
     status: PurchaseLifecycleStatus;
     deduplicated?: boolean;
 };
+type PurchaseStatusChallenge = {
+    challenge: string;
+    message: string;
+    expiresAt: number;
+};
 type PurchaseItem = {
     productRef: string;
     quantity: number;
@@ -131,6 +144,7 @@ type RefundFilters = {
 declare class AgentMall {
     private baseUrl;
     private apiSecret?;
+    private account?;
     private _fetch;
     products: AgentMallProducts;
     purchases: AgentMallPurchases;
@@ -138,6 +152,8 @@ declare class AgentMall {
     refunds: AgentMallRefunds;
     constructor(config?: AgentMallConfig);
     /** @internal */
+    getAccount(): WalletAccount | undefined;
+    /** @internal */
     request<T>(method: string, path: string, options?: {
         body?: unknown;
         auth?: boolean;
@@ -159,8 +175,10 @@ declare class AgentMallPurchases {
      * Use mppx-wrapped fetch to handle payment automatically, or catch PaymentRequiredError.
      */
     create(body: CreatePurchaseRequest): Promise<CreatePurchaseResponse>;
-    /** Get a single purchase by ID. Requires apiSecret. */
-    get(id: string): Promise<Purchase>;
+    /** Get a single purchase by ID using either operator auth or the payer wallet. */
+    get(id: string, options?: {
+        account?: WalletAccount;
+    }): Promise<Purchase>;
     /** List purchases. Requires apiSecret. */
     list(filters?: PurchaseFilters): Promise<Purchase[]>;
 }
@@ -230,4 +248,4 @@ declare const BASE_URL = "https://api.agentmall.sh";
 declare const SERVICE_FEE_CENTS = 150;
 declare const SUPPORTED_RETAILERS: readonly ["amazon.com", "walmart.com", "target.com", "bestbuy.com", "homedepot.com", "ebay.com", "lowes.com", "wayfair.com", "acehardware.com", "1800flowers.com", "pokemoncenter.com"];
 
-export { AgentMall, type AgentMallConfig, AgentMallError, BASE_URL, ConflictError, type CreatePurchaseRequest, type CreatePurchaseResponse, type DeliveryAddress, type Payment, type PaymentFilters, PaymentRequiredError, type ProductLookup, type ProductVariant, type Purchase, type PurchaseFilters, type PurchaseItem, type PurchaseItemInput, type PurchaseLifecycleStatus, RateLimitError, type Refund, type RefundFilters, SERVICE_FEE_CENTS, SUPPORTED_RETAILERS, ValidationError, type VariantSelection, purchase };
+export { AgentMall, type AgentMallConfig, AgentMallError, BASE_URL, ConflictError, type CreatePurchaseRequest, type CreatePurchaseResponse, type DeliveryAddress, type Payment, type PaymentFilters, PaymentRequiredError, type ProductLookup, type ProductVariant, type Purchase, type PurchaseFilters, type PurchaseItem, type PurchaseItemInput, type PurchaseLifecycleStatus, type PurchaseStatusChallenge, RateLimitError, type Refund, type RefundFilters, SERVICE_FEE_CENTS, SUPPORTED_RETAILERS, ValidationError, type VariantSelection, type WalletAccount, purchase };

package/dist/index.d.ts

@@ -1,11 +1,19 @@
 type AgentMallConfig = {
     /** API base URL. Defaults to https://api.agentmall.sh */
     baseUrl?: string;
-    /** Operator API secret for read endpoints (Bearer auth). */
+    /** Operator API secret for admin read endpoints (Bearer auth). */
     apiSecret?: string;
+    /** Wallet account used for buyer-authenticated purchase status reads. */
+    account?: WalletAccount;
     /** Custom fetch implementation (e.g. mppx-wrapped fetch for automatic 402 handling). */
     fetch?: typeof globalThis.fetch;
 };
+type WalletAccount = {
+    address: string;
+    signMessage(args: {
+        message: string;
+    }): Promise<string>;
+};
 type ProductVariant = {
     label?: string;
     value: string;
@@ -65,6 +73,11 @@ type CreatePurchaseResponse = {
     status: PurchaseLifecycleStatus;
     deduplicated?: boolean;
 };
+type PurchaseStatusChallenge = {
+    challenge: string;
+    message: string;
+    expiresAt: number;
+};
 type PurchaseItem = {
     productRef: string;
     quantity: number;
@@ -131,6 +144,7 @@ type RefundFilters = {
 declare class AgentMall {
     private baseUrl;
     private apiSecret?;
+    private account?;
     private _fetch;
     products: AgentMallProducts;
     purchases: AgentMallPurchases;
@@ -138,6 +152,8 @@ declare class AgentMall {
     refunds: AgentMallRefunds;
     constructor(config?: AgentMallConfig);
     /** @internal */
+    getAccount(): WalletAccount | undefined;
+    /** @internal */
     request<T>(method: string, path: string, options?: {
         body?: unknown;
         auth?: boolean;
@@ -159,8 +175,10 @@ declare class AgentMallPurchases {
      * Use mppx-wrapped fetch to handle payment automatically, or catch PaymentRequiredError.
      */
     create(body: CreatePurchaseRequest): Promise<CreatePurchaseResponse>;
-    /** Get a single purchase by ID. Requires apiSecret. */
-    get(id: string): Promise<Purchase>;
+    /** Get a single purchase by ID using either operator auth or the payer wallet. */
+    get(id: string, options?: {
+        account?: WalletAccount;
+    }): Promise<Purchase>;
     /** List purchases. Requires apiSecret. */
     list(filters?: PurchaseFilters): Promise<Purchase[]>;
 }
@@ -230,4 +248,4 @@ declare const BASE_URL = "https://api.agentmall.sh";
 declare const SERVICE_FEE_CENTS = 150;
 declare const SUPPORTED_RETAILERS: readonly ["amazon.com", "walmart.com", "target.com", "bestbuy.com", "homedepot.com", "ebay.com", "lowes.com", "wayfair.com", "acehardware.com", "1800flowers.com", "pokemoncenter.com"];
 
-export { AgentMall, type AgentMallConfig, AgentMallError, BASE_URL, ConflictError, type CreatePurchaseRequest, type CreatePurchaseResponse, type DeliveryAddress, type Payment, type PaymentFilters, PaymentRequiredError, type ProductLookup, type ProductVariant, type Purchase, type PurchaseFilters, type PurchaseItem, type PurchaseItemInput, type PurchaseLifecycleStatus, RateLimitError, type Refund, type RefundFilters, SERVICE_FEE_CENTS, SUPPORTED_RETAILERS, ValidationError, type VariantSelection, purchase };
+export { AgentMall, type AgentMallConfig, AgentMallError, BASE_URL, ConflictError, type CreatePurchaseRequest, type CreatePurchaseResponse, type DeliveryAddress, type Payment, type PaymentFilters, PaymentRequiredError, type ProductLookup, type ProductVariant, type Purchase, type PurchaseFilters, type PurchaseItem, type PurchaseItemInput, type PurchaseLifecycleStatus, type PurchaseStatusChallenge, RateLimitError, type Refund, type RefundFilters, SERVICE_FEE_CENTS, SUPPORTED_RETAILERS, ValidationError, type VariantSelection, type WalletAccount, purchase };

package/dist/index.js

@@ -63,6 +63,7 @@ function createIdempotencyKey() {
 var AgentMall = class {
   baseUrl;
   apiSecret;
+  account;
   _fetch;
   products;
   purchases;
@@ -71,6 +72,7 @@ var AgentMall = class {
   constructor(config = {}) {
     this.baseUrl = (config.baseUrl ?? BASE_URL).replace(/\/$/, "");
     this.apiSecret = config.apiSecret;
+    this.account = config.account;
     this._fetch = config.fetch ?? globalThis.fetch.bind(globalThis);
     this.products = new AgentMallProducts(this);
     this.purchases = new AgentMallPurchases(this);
@@ -78,6 +80,10 @@ var AgentMall = class {
     this.refunds = new AgentMallRefunds(this);
   }
   /** @internal */
+  getAccount() {
+    return this.account;
+  }
+  /** @internal */
   async request(method, path, options) {
     const url = new URL(`${this.baseUrl}${path}`);
     if (options?.params) {
@@ -157,8 +163,28 @@ var AgentMallPurchases = class {
       }
     });
   }
-  /** Get a single purchase by ID. Requires apiSecret. */
-  async get(id) {
+  /** Get a single purchase by ID using either operator auth or the payer wallet. */
+  async get(id, options) {
+    const account = options?.account ?? this.client.getAccount();
+    if (account) {
+      const challenge = await this.client.request(
+        "POST",
+        "/api/purchases/status/challenge",
+        {
+          body: { id }
+        }
+      );
+      const signature = await account.signMessage({
+        message: challenge.message
+      });
+      return this.client.request("POST", "/api/purchases/status", {
+        body: {
+          id,
+          challenge: challenge.challenge,
+          signature
+        }
+      });
+    }
     return this.client.request("GET", "/api/purchases", {
       auth: true,
       params: { id }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentmall",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "SDK and CLI for the AgentMall API — let AI agents buy physical products from US retailers",
   "type": "module",
   "main": "./dist/index.js",