aimeat 2.1.0 → 2.3.0

package/dist/src/commerce/__tests__/x402-registry.test.js

@@ -0,0 +1,105 @@
+/**
+ * @file src/commerce/__tests__/x402-registry.test.ts
+ * @description Unit tests for the currency-aware x402 network registry (TARGET-042). These guard THE
+ *   rule the whole EURC extension hangs on: ADVERTISE ONLY WHAT CAN SETTLE. A currency reaches a
+ *   buyer only when the configured network has a real asset for it, so the decisive case here is the
+ *   NEGATIVE one — a network whose entry lacks a currency must not offer that currency, and must not
+ *   be able to build requirements for it. Also pins each shipped asset's address, decimals and
+ *   EIP-712 domain: those four values were verified against the live contracts (by recomputing each
+ *   DOMAIN_SEPARATOR) and against the public facilitator, and a silent edit to any of them would
+ *   invalidate every buyer signature.
+ * @usage cd aimeat && pnpm exec vitest run src/commerce/__tests__/x402-registry.test.ts
+ * @version-history
+ *   v1.0.0 — 2026-07-25 — Initial registry + advertising-gate tests (TARGET-042, EURC)
+ */
+import { describe, it, expect } from 'vitest';
+import { X402_NETWORKS, getX402Network, getX402Asset, x402SettlementCurrencies, buildExactRequirements, } from '../x402-facilitator.js';
+import { microsToTokenRaw } from '../money.js';
+/** A synthetic network that can settle dollars but NOT euros — the shape the gate must refuse. */
+const USD_ONLY = {
+    id: 'usd-only-testnet',
+    assets: { USD: { address: `0x${'1'.repeat(40)}`, symbol: 'USDC', decimals: 6, extra: { name: 'USDC', version: '2' } } },
+};
+describe('the advertising gate: a currency with no asset is never offered', () => {
+    it('omits EUR from a network that has no EUR asset', () => {
+        expect(x402SettlementCurrencies(USD_ONLY)).toEqual(['USD']);
+        expect(x402SettlementCurrencies(USD_ONLY)).not.toContain('EUR');
+    });
+    it('resolves no asset for the missing pair, so nothing downstream can build requirements', () => {
+        expect(getX402Asset(USD_ONLY, 'EUR')).toBeUndefined();
+        expect(getX402Asset(USD_ONLY, 'USD')).toBeDefined();
+    });
+    it('advertises nothing at all for an unknown network (a misconfigured node promises no rail)', () => {
+        expect(getX402Network('no-such-network')).toBeUndefined();
+        expect(x402SettlementCurrencies(undefined)).toEqual([]);
+        expect(getX402Asset(undefined, 'USD')).toBeUndefined();
+    });
+    it('never resolves an asset for a non-money currency', () => {
+        expect(getX402Asset(getX402Network('base-sepolia'), 'morsel')).toBeUndefined();
+        expect(getX402Asset(getX402Network('base-sepolia'), 'GBP')).toBeUndefined();
+    });
+});
+describe('the shipped networks settle both money currencies', () => {
+    it.each(['base-sepolia', 'base'])('%s offers exactly USD and EUR', (id) => {
+        expect(x402SettlementCurrencies(getX402Network(id))).toEqual(['EUR', 'USD']);
+    });
+    /**
+     * Verified 2026-07-25 against the live contracts: addresses from Circle's documentation, then
+     * `name`/`version`/`decimals` read on-chain and PROVEN by recomputing each contract's own
+     * DOMAIN_SEPARATOR from (name, version, chainId, address). The public x402.org facilitator
+     * validated a real EIP-3009 signature against each, and rejected a deliberately wrong domain name
+     * with `invalid_exact_evm_token_name_mismatch` — so these values are load-bearing, not cosmetic.
+     */
+    it.each([
+        ['base-sepolia', 'USD', '0x036CbD53842c5426634e7929541eC2318f3dCF7e', 'USDC', 'USDC'],
+        ['base-sepolia', 'EUR', '0x808456652fdb597867f38412077A9182bf77359F', 'EURC', 'EURC'],
+        ['base', 'USD', '0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913', 'USDC', 'USD Coin'],
+        ['base', 'EUR', '0x60a3E35Cc302bFA44Cb288Bc5a4F316Fdb1adb42', 'EURC', 'EURC'],
+    ])('%s/%s pins the verified asset + EIP-712 domain', (network, currency, address, symbol, domainName) => {
+        const asset = getX402Asset(getX402Network(network), currency);
+        expect(asset.address).toBe(address);
+        expect(asset.symbol).toBe(symbol);
+        expect(asset.decimals).toBe(6);
+        expect(asset.extra).toEqual({ name: domainName, version: '2' });
+    });
+    it('gives every asset its own contract — no currency settles in another currency’s token', () => {
+        const addresses = Object.values(X402_NETWORKS).flatMap((n) => Object.values(n.assets).map((a) => a.address));
+        expect(new Set(addresses).size).toBe(addresses.length);
+    });
+});
+describe('buildExactRequirements carries the session currency’s own asset', () => {
+    const common = { payTo: `0x${'b'.repeat(40)}`, amountMicros: 1_500_000, resource: 'https://node.invalid/s/1', description: 'checkout' };
+    it('prices a EUR sale in EURC and a USD sale in USDC on the same network', () => {
+        const network = getX402Network('base-sepolia');
+        const eur = buildExactRequirements({ network, asset: getX402Asset(network, 'EUR'), ...common });
+        const usd = buildExactRequirements({ network, asset: getX402Asset(network, 'USD'), ...common });
+        expect(eur.asset).toBe('0x808456652fdb597867f38412077A9182bf77359F');
+        expect(eur.extra).toEqual({ name: 'EURC', version: '2' });
+        expect(usd.asset).toBe('0x036CbD53842c5426634e7929541eC2318f3dCF7e');
+        expect(usd.extra).toEqual({ name: 'USDC', version: '2' });
+        // Same network, same price, same payee — only the instrument differs (model 2).
+        expect(eur.network).toBe(usd.network);
+        expect(eur.maxAmountRequired).toBe(usd.maxAmountRequired);
+        expect(eur.payTo).toBe(usd.payTo);
+    });
+    it('maps 1.50 of a 6-decimal token 1:1 from micros', () => {
+        const network = getX402Network('base-sepolia');
+        const reqs = buildExactRequirements({ network, asset: getX402Asset(network, 'EUR'), ...common });
+        expect(reqs.maxAmountRequired).toBe('1500000'); // 1.50 EUR → 1.50 EURC
+    });
+});
+describe('micros → token atomic units honours the token’s own decimals', () => {
+    it('is the identity for the 6-decimal tokens actually shipped', () => {
+        expect(microsToTokenRaw(1_500_000, 6)).toBe('1500000');
+        expect(microsToTokenRaw(2000, 6)).toBe('2000'); // the sub-cent agent price survives
+    });
+    it('scales up exactly for an 18-decimal token, beyond safe-integer range', () => {
+        expect(microsToTokenRaw(1_500_000, 18)).toBe('1500000000000000000'); // 1.50 × 10^18
+        expect(Number(microsToTokenRaw(1_500_000, 18))).toBeGreaterThan(Number.MAX_SAFE_INTEGER);
+    });
+    it('rounds UP when scaling down, so the seller is never handed less than the price', () => {
+        expect(microsToTokenRaw(1_500_000, 2)).toBe('150'); // exact
+        expect(microsToTokenRaw(2000, 2)).toBe('1'); // 0.002 → 0.01, never 0
+    });
+});
+//# sourceMappingURL=x402-registry.test.js.map

package/dist/src/commerce/__tests__/x402-registry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-registry.test.js","sourceRoot":"","sources":["../../../../src/commerce/__tests__/x402-registry.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,wBAAwB,EAAE,sBAAsB,GAE9F,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,kGAAkG;AAClG,MAAM,QAAQ,GAAgB;IAC5B,EAAE,EAAE,kBAAkB;IACtB,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE;CACxH,CAAC;AAEF,QAAQ,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC/E,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACtD,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,GAAG,EAAE;QAClG,MAAM,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1D,MAAM,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/E,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,+BAA+B,EAAE,CAAC,EAAE,EAAE,EAAE;QACxE,MAAM,CAAC,wBAAwB,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH;;;;;;OAMG;IACH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,cAAc,EAAE,KAAK,EAAE,4CAA4C,EAAE,MAAM,EAAE,MAAM,CAAC;QACrF,CAAC,cAAc,EAAE,KAAK,EAAE,4CAA4C,EAAE,MAAM,EAAE,MAAM,CAAC;QACrF,CAAC,MAAM,EAAE,KAAK,EAAE,4CAA4C,EAAE,MAAM,EAAE,UAAU,CAAC;QACjF,CAAC,MAAM,EAAE,KAAK,EAAE,4CAA4C,EAAE,MAAM,EAAE,MAAM,CAAC;KAC9E,CAAC,CAAC,gDAAgD,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE;QACtG,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAE,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9G,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC/E,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,0BAA0B,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;IAExI,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,OAAO,GAAG,cAAc,CAAC,cAAc,CAAE,CAAC;QAChD,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,EAAE,KAAK,CAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACjG,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,EAAE,KAAK,CAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAEjG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,gFAAgF;QAChF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,OAAO,GAAG,cAAc,CAAC,cAAc,CAAE,CAAC;QAChD,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,EAAE,KAAK,CAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAClG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8DAA8D,EAAE,GAAG,EAAE;IAC5E,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,oCAAoC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,eAAe;QACpF,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,QAAQ;QAC7D,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAS,wBAAwB;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/commerce/evm-address.d.ts

@@ -0,0 +1,21 @@
+/** 0x + 40 hex characters. Shape only — says nothing about whether the address means anything. */
+export declare function isEvmAddressShape(value: string): boolean;
+/** The EIP-55 mixed-case form: capitalisation derived from keccak-256 of the lowercase hex body. */
+export declare function toChecksumAddress(value: string): string;
+/**
+ * True when the input carries a checksum (it is mixed case) and that checksum does not match.
+ * All-lowercase / all-uppercase input carries no checksum, so it is not "wrong" — just unverifiable.
+ */
+export declare function checksumIsWrong(value: string): boolean;
+/** The settlement token this address IS, when it is one of ours. A payout address must never be a token. */
+export declare function settlementAssetMatch(value: string): {
+    network: string;
+    currency: string;
+} | null;
+/**
+ * Ask the chain whether the address holds contract code. `true` = definitely a contract (block the
+ * save), `false` = an externally-owned account, `null` = could not tell, which must never block:
+ * an RPC outage is not a reason to stop a seller configuring their own payouts.
+ */
+export declare function probeIsContract(rpcUrl: string, address: string): Promise<boolean | null>;
+//# sourceMappingURL=evm-address.d.ts.map

package/dist/src/commerce/evm-address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-address.d.ts","sourceRoot":"","sources":["../../../src/commerce/evm-address.ts"],"names":[],"mappings":"AAiCA,kGAAkG;AAClG,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,oGAAoG;AACpG,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQvD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAItD;AAED,4GAA4G;AAC5G,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAQhG;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAiB9F"}

package/dist/src/commerce/evm-address.js

@@ -0,0 +1,94 @@
+/**
+ * @file src/commerce/evm-address.ts
+ * @description Guards for the ONE value a seller types by hand in the whole stablecoin flow: the
+ *   address their USDC settles to. Getting it wrong is not a validation nicety — an EIP-3009 transfer
+ *   to the wrong target is irreversible, and the two ways to get it wrong are both easy:
+ *
+ *     1. A TYPO. 40 hex characters carry no meaning a human can proof-read. EIP-55 encodes a checksum
+ *        in the CAPITALISATION of the hex, so a mixed-case address that fails the checksum is almost
+ *        certainly mistyped or truncated. (An all-lowercase or all-uppercase address carries no
+ *        checksum at all, so it is accepted and normalised rather than rejected.)
+ *     2. PASTING THE TOKEN CONTRACT instead of a wallet. The USDC/EURC contract addresses are the
+ *        values a seller most plausibly has on their clipboard while setting this up — they appear in
+ *        every x402 doc, and in our own network registry. Funds sent there are gone.
+ *
+ *   The optional on-chain probe answers the remaining question — is this a contract or an account the
+ *   seller can hold a key for — but only when the operator configured an RPC. It is best-effort by
+ *   design: a save must not depend on a third party being reachable, so an unreachable RPC lets the
+ *   save through while a definite "this is a contract" answer blocks it.
+ * @structure isEvmAddressShape · toChecksumAddress · checksumIsWrong · settlementAssetMatch ·
+ *   probeIsContract
+ * @usage
+ *   const bad = settlementAssetMatch(addr);            // → { network, currency } when it is a token
+ *   if (checksumIsWrong(addr)) return 400;
+ *   const stored = toChecksumAddress(addr);
+ * @version-history
+ *   v1.0.0 — 2026-07-25 — Initial guards after a real misconfiguration: the USDC Base-Sepolia contract
+ *     address was saved as a payout address, and the shape-only check accepted it silently.
+ */
+import { keccak_256 } from '@noble/hashes/sha3.js';
+import { X402_NETWORKS } from './x402-facilitator.js';
+import { safeFetch } from '../utils/url-validator.js';
+import { logger } from '../utils/logger.js';
+/** 0x + 40 hex characters. Shape only — says nothing about whether the address means anything. */
+export function isEvmAddressShape(value) {
+    return /^0x[a-fA-F0-9]{40}$/.test(value);
+}
+/** The EIP-55 mixed-case form: capitalisation derived from keccak-256 of the lowercase hex body. */
+export function toChecksumAddress(value) {
+    const body = value.slice(2).toLowerCase();
+    const hash = Buffer.from(keccak_256(new TextEncoder().encode(body))).toString('hex');
+    let out = '0x';
+    for (let i = 0; i < body.length; i++) {
+        out += parseInt(hash[i], 16) >= 8 ? body[i].toUpperCase() : body[i];
+    }
+    return out;
+}
+/**
+ * True when the input carries a checksum (it is mixed case) and that checksum does not match.
+ * All-lowercase / all-uppercase input carries no checksum, so it is not "wrong" — just unverifiable.
+ */
+export function checksumIsWrong(value) {
+    const body = value.slice(2);
+    const mixedCase = body !== body.toLowerCase() && body !== body.toUpperCase();
+    return mixedCase && toChecksumAddress(value) !== value;
+}
+/** The settlement token this address IS, when it is one of ours. A payout address must never be a token. */
+export function settlementAssetMatch(value) {
+    const needle = value.toLowerCase();
+    for (const [networkId, network] of Object.entries(X402_NETWORKS)) {
+        for (const [currency, asset] of Object.entries(network.assets)) {
+            if (asset && asset.address.toLowerCase() === needle)
+                return { network: networkId, currency };
+        }
+    }
+    return null;
+}
+/**
+ * Ask the chain whether the address holds contract code. `true` = definitely a contract (block the
+ * save), `false` = an externally-owned account, `null` = could not tell, which must never block:
+ * an RPC outage is not a reason to stop a seller configuring their own payouts.
+ */
+export async function probeIsContract(rpcUrl, address) {
+    if (!rpcUrl)
+        return null;
+    try {
+        const res = await safeFetch(rpcUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+            body: JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'eth_getCode', params: [address, 'latest'] }),
+            signal: AbortSignal.timeout(6000),
+        });
+        if (!res.ok)
+            return null;
+        const body = await res.json();
+        if (typeof body.result !== 'string')
+            return null;
+        return body.result !== '0x' && body.result !== '0x0';
+    }
+    catch (err) {
+        logger.warn('[payout] on-chain address probe unavailable; saving without it', { error: String(err) });
+        return null;
+    }
+}
+//# sourceMappingURL=evm-address.js.map

package/dist/src/commerce/evm-address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-address.js","sourceRoot":"","sources":["../../../src/commerce/evm-address.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,kGAAkG;AAClG,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrF,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAW,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,CAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7E,OAAO,SAAS,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;AACzD,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACjE,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,OAAe;IACnE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE;YAClC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACnG,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA0B,CAAC;QACtD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjD,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,gEAAgE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtG,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/src/commerce/invoice-handler.d.ts

@@ -0,0 +1,5 @@
+import type { PaymentHandler } from './types.js';
+/** Reverse-DNS id advertised in the /.well-known/ucp payment_handlers list. */
+export declare const INVOICE_HANDLER_ID = "io.aimeat.invoice";
+export declare function invoicePaymentHandler(): PaymentHandler;
+//# sourceMappingURL=invoice-handler.d.ts.map

package/dist/src/commerce/invoice-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoice-handler.d.ts","sourceRoot":"","sources":["../../../src/commerce/invoice-handler.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAIjD,+EAA+E;AAC/E,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AAEtD,wBAAgB,qBAAqB,IAAI,cAAc,CAsBtD"}

package/dist/src/commerce/invoice-handler.js

@@ -0,0 +1,41 @@
+/**
+ * @file src/commerce/invoice-handler.ts
+ * @description The manual-invoice PaymentHandler: completes a MONEY checkout without any payment
+ *   service provider by booking what the buyer owes and letting the seller collect it out of band
+ *   (invoice, bank transfer, an existing customer agreement). Nothing is captured online, so the
+ *   node holds no funds and needs no credentials — this is the rail for B2B selling and for anyone
+ *   who bills separately but wants the order, the receipt and the obligation recorded here.
+ *
+ *   collect mints a tracking code, payout books a PENDING payable entry, refund is a no-op because
+ *   nothing was ever captured.
+ * @structure INVOICE_HANDLER_ID · invoicePaymentHandler
+ * @usage registerPaymentHandler(invoicePaymentHandler());
+ * @version-history
+ *   v1.0.0 — 2026-07-28 — Promoted into core from the removed ee/ module (single edition).
+ */
+import { randomUUID } from 'node:crypto';
+import { bookPayable } from './payable-book.js';
+import { MONEY_CURRENCIES } from './money.js';
+/** Reverse-DNS id advertised in the /.well-known/ucp payment_handlers list. */
+export const INVOICE_HANDLER_ID = 'io.aimeat.invoice';
+export function invoicePaymentHandler() {
+    return {
+        id: INVOICE_HANDLER_ID,
+        title: 'Manual invoice (settle offline)',
+        currencies: [...MONEY_CURRENCIES],
+        async collect(_ctx, { reference }) {
+            // No external processing: the obligation is the settlement. The tracking code ties the order,
+            // the receipt and the payable entry together.
+            return { trackingCode: `inv_${reference}_${randomUUID().slice(0, 8)}` };
+        },
+        async payout(ctx, { toGhii, amount, currency, buyerGhii, trackingCode, reference }) {
+            await bookPayable(ctx, toGhii, trackingCode, {
+                amount, currency, buyerGhii, reference, method: 'invoice', status: 'pending',
+            });
+        },
+        async refund() {
+            // Nothing was captured externally, so there is nothing to reverse.
+        },
+    };
+}
+//# sourceMappingURL=invoice-handler.js.map

package/dist/src/commerce/invoice-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoice-handler.js","sourceRoot":"","sources":["../../../src/commerce/invoice-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,+EAA+E;AAC/E,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAEtD,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,iCAAiC;QACxC,UAAU,EAAE,CAAC,GAAG,gBAAgB,CAAC;QAEjC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE;YAC/B,8FAA8F;YAC9F,8CAA8C;YAC9C,OAAO,EAAE,YAAY,EAAE,OAAO,SAAS,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1E,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE;YAChF,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE;gBAC3C,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS;aAC7E,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM;YACV,mEAAmE;QACrE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/commerce/money.d.ts

@@ -12,14 +12,16 @@
  *   ROUNDING POLICY for both ledgers (fee always ceils, cut always floors) — they operate on one
  *   integer amount of either unit at a time, which is policy sharing, not unit mixing.
  * @structure MONEY_SCALE · MONEY_UNIT · MONEY_CURRENCIES · isMoneyCurrency ·
- *   isSupportedMoneyCurrency · microsToStripeMinor · stripeMinorToMicros · microsToUsdcRaw ·
- *   usdcRawToMicros · integerMicros · percentFee · percentCut · roundToMoneyScale ·
- *   formatMoneyMajor
+ *   isSupportedMoneyCurrency · microsToStripeMinor · stripeMinorToMicros · microsToTokenRaw ·
+ *   microsToUsdcRaw · usdcRawToMicros · integerMicros · percentFee · percentCut ·
+ *   roundToMoneyScale · formatMoneyMajor
  * @usage
  *   import { isMoneyCurrency, microsToStripeMinor, percentFee } from './money.js';
  *   if (isMoneyCurrency(session.currency)) stripeAmount = microsToStripeMinor(micros); // → cents
  *   const fee = percentFee(gross, commerceFeePercent(config));
  * @version-history
+ *   v1.2.0 — 2026-07-25 — microsToTokenRaw: decimals-aware micros → token atomic units, so a second
+ *     settlement asset (EURC) crosses the chokepoint on its own precision (TARGET-042)
  *   v1.1.0 — 2026-07-14 — Chokepoint completion: currency allowlist, Stripe-minor + USDC-raw
  *     round-trips, percent fee/cut rounding policy, major-unit scale rounding (TARGET-033 phase 7c)
  *   v1.0.0 — 2026-07-14 — Initial 6-decimal micro-unit money representation (TARGET-033 phase 7b)
@@ -45,8 +47,19 @@ export declare function microsToStripeMinor(micros: number): number;
 /** Convert a Stripe minor-unit (cent) amount back to micro-units. Exact for integer cents. */
 export declare function stripeMinorToMicros(minor: number): number;
 /**
- * Convert micro-units to USDC raw units (the x402 stablecoin rail). USDC also carries 6 decimals,
- * so the conversion is the identity on integers — the function exists so the settlement rail still
+ * Convert micro-units to a settlement token's ATOMIC units, honouring that token's own decimals
+ * (the x402 stablecoin rail). Returns a decimal STRING because an 18-decimal token overflows the
+ * safe-integer range — x402 carries `maxAmountRequired` as a string for exactly this reason.
+ *
+ * Every asset AIMEAT settles today (USDC and EURC, on both Base networks) carries 6 decimals, so
+ * this is the identity in practice; the branches exist so a token with a different precision is
+ * CONVERTED rather than mispriced by orders of magnitude. Scaling DOWN (a sub-6-decimal token)
+ * rounds up, the only direction that never hands the seller less than the price.
+ */
+export declare function microsToTokenRaw(micros: number, decimals: number): string;
+/**
+ * Convert micro-units to USDC raw units (the 6-decimal special case of {@link microsToTokenRaw}).
+ * The conversion is the identity on integers — the function exists so the settlement rail still
  * crosses the chokepoint (and keeps working if MONEY_SCALE ever diverges from the rail's).
  */
 export declare function microsToUsdcRaw(micros: number): number;

package/dist/src/commerce/money.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"money.d.ts","sourceRoot":"","sources":["../../../src/commerce/money.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,8DAA8D;AAC9D,eAAO,MAAM,WAAW,IAAI,CAAC;AAC7B,0DAA0D;AAC1D,eAAO,MAAM,UAAU,UAAY,CAAC;AAEpC,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,yBAA0B,CAAC;AACxD,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,oGAAoG;AACpG,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,aAAa,CAE5E;AAKD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIvD"}
+{"version":3,"file":"money.d.ts","sourceRoot":"","sources":["../../../src/commerce/money.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,8DAA8D;AAC9D,eAAO,MAAM,WAAW,IAAI,CAAC;AAC7B,0DAA0D;AAC1D,eAAO,MAAM,UAAU,UAAY,CAAC;AAEpC,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,yBAA0B,CAAC;AACxD,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,oGAAoG;AACpG,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,aAAa,CAE5E;AAKD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMzE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAIvD"}

package/dist/src/commerce/money.js

@@ -12,14 +12,16 @@
  *   ROUNDING POLICY for both ledgers (fee always ceils, cut always floors) — they operate on one
  *   integer amount of either unit at a time, which is policy sharing, not unit mixing.
  * @structure MONEY_SCALE · MONEY_UNIT · MONEY_CURRENCIES · isMoneyCurrency ·
- *   isSupportedMoneyCurrency · microsToStripeMinor · stripeMinorToMicros · microsToUsdcRaw ·
- *   usdcRawToMicros · integerMicros · percentFee · percentCut · roundToMoneyScale ·
- *   formatMoneyMajor
+ *   isSupportedMoneyCurrency · microsToStripeMinor · stripeMinorToMicros · microsToTokenRaw ·
+ *   microsToUsdcRaw · usdcRawToMicros · integerMicros · percentFee · percentCut ·
+ *   roundToMoneyScale · formatMoneyMajor
  * @usage
  *   import { isMoneyCurrency, microsToStripeMinor, percentFee } from './money.js';
  *   if (isMoneyCurrency(session.currency)) stripeAmount = microsToStripeMinor(micros); // → cents
  *   const fee = percentFee(gross, commerceFeePercent(config));
  * @version-history
+ *   v1.2.0 — 2026-07-25 — microsToTokenRaw: decimals-aware micros → token atomic units, so a second
+ *     settlement asset (EURC) crosses the chokepoint on its own precision (TARGET-042)
  *   v1.1.0 — 2026-07-14 — Chokepoint completion: currency allowlist, Stripe-minor + USDC-raw
  *     round-trips, percent fee/cut rounding policy, major-unit scale rounding (TARGET-033 phase 7c)
  *   v1.0.0 — 2026-07-14 — Initial 6-decimal micro-unit money representation (TARGET-033 phase 7b)
@@ -54,12 +56,31 @@ export function stripeMinorToMicros(minor) {
     return minor * MICROS_PER_STRIPE_MINOR;
 }
 /**
- * Convert micro-units to USDC raw units (the x402 stablecoin rail). USDC also carries 6 decimals,
- * so the conversion is the identity on integers — the function exists so the settlement rail still
+ * Convert micro-units to a settlement token's ATOMIC units, honouring that token's own decimals
+ * (the x402 stablecoin rail). Returns a decimal STRING because an 18-decimal token overflows the
+ * safe-integer range — x402 carries `maxAmountRequired` as a string for exactly this reason.
+ *
+ * Every asset AIMEAT settles today (USDC and EURC, on both Base networks) carries 6 decimals, so
+ * this is the identity in practice; the branches exist so a token with a different precision is
+ * CONVERTED rather than mispriced by orders of magnitude. Scaling DOWN (a sub-6-decimal token)
+ * rounds up, the only direction that never hands the seller less than the price.
+ */
+export function microsToTokenRaw(micros, decimals) {
+    const amount = BigInt(Math.trunc(micros));
+    if (decimals === MONEY_SCALE)
+        return amount.toString();
+    if (decimals > MONEY_SCALE)
+        return (amount * 10n ** BigInt(decimals - MONEY_SCALE)).toString();
+    const divisor = 10n ** BigInt(MONEY_SCALE - decimals);
+    return ((amount + divisor - 1n) / divisor).toString(); // ceil — never under-charge the buyer
+}
+/**
+ * Convert micro-units to USDC raw units (the 6-decimal special case of {@link microsToTokenRaw}).
+ * The conversion is the identity on integers — the function exists so the settlement rail still
  * crosses the chokepoint (and keeps working if MONEY_SCALE ever diverges from the rail's).
  */
 export function microsToUsdcRaw(micros) {
-    return Math.trunc(micros);
+    return Number(microsToTokenRaw(micros, MONEY_SCALE));
 }
 /** Convert USDC raw units (6 decimals) back to micro-units. Identity on integers. */
 export function usdcRawToMicros(raw) {

package/dist/src/commerce/money.js.map

@@ -1 +1 @@
-{"version":3,"file":"money.js","sourceRoot":"","sources":["../../../src/commerce/money.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAC7B,0DAA0D;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAC;AAEpC,8FAA8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,KAAK,CAAU,CAAC;AAGxD,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,QAAQ,KAAK,QAAQ,CAAC;AAC/B,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,OAAQ,gBAAsC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,+FAA+F;AAC/F,MAAM,uBAAuB,GAAG,UAAU,GAAG,GAAG,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,uBAAuB,CAAC,CAAC;AACtD,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,KAAK,GAAG,uBAAuB,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAAe;IACxD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAAe;IACxD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,UAAU,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACrD,sDAAsD;IACtD,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"money.js","sourceRoot":"","sources":["../../../src/commerce/money.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAC7B,0DAA0D;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAC;AAEpC,8FAA8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,KAAK,CAAU,CAAC;AAGxD,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,QAAQ,KAAK,QAAQ,CAAC;AAC/B,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,OAAQ,gBAAsC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,+FAA+F;AAC/F,MAAM,uBAAuB,GAAG,UAAU,GAAG,GAAG,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,uBAAuB,CAAC,CAAC;AACtD,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,KAAK,GAAG,uBAAuB,CAAC;AACzC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,QAAgB;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,QAAQ,GAAG,WAAW;QAAE,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/F,MAAM,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC,MAAM,GAAG,OAAO,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,sCAAsC;AAC/F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAAe;IACxD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAAe;IACxD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,UAAU,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACrD,sDAAsD;IACtD,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC"}

package/dist/src/commerce/payable-book.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @file src/commerce/payable-book.ts
+ * @description The seller's payable book: one memory record per settled money sale
+ *   (`commerce.payable.{trackingCode}` under the seller's GHII) listing what they are owed or have
+ *   received and on which rail. AIMEAT never holds the money — this is bookkeeping the receipt and
+ *   the Wallet tab read, shared by every money handler so one sale is booked one way.
+ * @structure PayableEntry · bookPayable · listPayables
+ * @usage await bookPayable(ctx, sellerGhii, trackingCode, { amount, currency, method: 'stripe', status: 'settled' });
+ * @version-history
+ *   v1.0.0 — 2026-07-28 — Extracted into core when the ee/ module was removed; both money handlers
+ *     (Stripe, invoice) and the Wallet tab now read one shape.
+ */
+import type { Storage } from '../storage/interface.js';
+import type { PaymentContext } from './types.js';
+/** One line in a seller's payable book. `settled` = the money already reached them. */
+export interface PayableEntry {
+    amount: number;
+    currency: string;
+    reference?: string;
+    buyerGhii?: string;
+    method: string;
+    status: 'settled' | 'pending';
+    at: string;
+}
+/** Append one entry to the seller's payable book, creating the record on first use. */
+export declare function bookPayable(ctx: PaymentContext, toGhii: string, trackingCode: string, entry: Omit<PayableEntry, 'at'>): Promise<void>;
+/** Every payable entry booked for a seller, newest record first. */
+export declare function listPayables(storage: Storage, sellerGhii: string, limit?: number): Promise<Array<PayableEntry & {
+    trackingCode: string;
+}>>;
+//# sourceMappingURL=payable-book.d.ts.map

package/dist/src/commerce/payable-book.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payable-book.d.ts","sourceRoot":"","sources":["../../../src/commerce/payable-book.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,uFAAuF;AACvF,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,EAAE,EAAE,MAAM,CAAC;CACZ;AAID,uFAAuF;AACvF,wBAAsB,WAAW,CAC/B,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GACzF,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,oEAAoE;AACpE,wBAAsB,YAAY,CAChC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,SAAM,GAChD,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CASzD"}

package/dist/src/commerce/payable-book.js

@@ -0,0 +1,27 @@
+const payableKey = (trackingCode) => `commerce.payable.${trackingCode}`;
+/** Append one entry to the seller's payable book, creating the record on first use. */
+export async function bookPayable(ctx, toGhii, trackingCode, entry) {
+    const key = payableKey(trackingCode);
+    const existing = await ctx.storage.getMemory(toGhii, key);
+    const value = existing?.value ?? {};
+    const items = Array.isArray(value.items) ? value.items : [];
+    items.push({ ...entry, at: new Date().toISOString() });
+    const now = new Date().toISOString();
+    await ctx.storage.setMemory({
+        key, ownerGaii: toGhii, value: { ...value, items }, visibility: 'owner', tags: ['commerce'],
+        ttlHours: null, version: (existing?.version ?? 0) + 1, createdAt: existing?.createdAt ?? now, updatedAt: now,
+    });
+}
+/** Every payable entry booked for a seller, newest record first. */
+export async function listPayables(storage, sellerGhii, limit = 200) {
+    const { items } = await storage.listAllMemory({ prefix: 'commerce.payable.', ownerPrefix: sellerGhii, limit });
+    const out = [];
+    for (const rec of items) {
+        const trackingCode = rec.key.slice('commerce.payable.'.length);
+        const entries = rec.value?.items ?? [];
+        for (const e of entries)
+            out.push({ ...e, trackingCode });
+    }
+    return out.sort((a, b) => (b.at ?? '').localeCompare(a.at ?? ''));
+}
+//# sourceMappingURL=payable-book.js.map

package/dist/src/commerce/payable-book.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payable-book.js","sourceRoot":"","sources":["../../../src/commerce/payable-book.ts"],"names":[],"mappings":"AA0BA,MAAM,UAAU,GAAG,CAAC,YAAoB,EAAU,EAAE,CAAC,oBAAoB,YAAY,EAAE,CAAC;AAExF,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAmB,EAAE,MAAc,EAAE,YAAoB,EAAE,KAA+B;IAE1F,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAI,QAAQ,EAAE,KAA2C,IAAI,EAAE,CAAC;IAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1B,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC;QAC3F,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG,EAAE,SAAS,EAAE,GAAG;KAC7G,CAAC,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAgB,EAAE,UAAkB,EAAE,KAAK,GAAG,GAAG;IAEjD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/G,MAAM,GAAG,GAAmD,EAAE,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAI,GAAG,CAAC,KAAgD,EAAE,KAAK,IAAI,EAAE,CAAC;QACnF,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC"}

package/dist/src/commerce/payment-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payment-handlers.d.ts","sourceRoot":"","sources":["../../../src/commerce/payment-handlers.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,YAAY,CAAC;AAIjE,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAEpE;AAED,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAExE;AAED,wBAAgB,mBAAmB,IAAI,cAAc,EAAE,CAEtD;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED,2EAA2E;AAC3E,qBAAa,YAAa,SAAQ,KAAK;IAClB,IAAI,EAAE,MAAM;IAAS,UAAU,EAAE,MAAM;gBAAvC,IAAI,EAAE,MAAM,EAAS,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAG5E;AAED,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,cAAc,CAwCrD"}
+{"version":3,"file":"payment-handlers.d.ts","sourceRoot":"","sources":["../../../src/commerce/payment-handlers.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,YAAY,CAAC;AAKjE,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAEpE;AAED,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAExE;AAED,wBAAgB,mBAAmB,IAAI,cAAc,EAAE,CAEtD;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED,2EAA2E;AAC3E,qBAAa,YAAa,SAAQ,KAAK;IAClB,IAAI,EAAE,MAAM;IAAS,UAAU,EAAE,MAAM;gBAAvC,IAAI,EAAE,MAAM,EAAS,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAG5E;AAED,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,cAAc,CAwCrD"}

package/dist/src/commerce/payment-handlers.js

@@ -1,9 +1,10 @@
 /**
  * @file src/commerce/payment-handlers.ts
  * @description Payment-handler registry for the commerce core (TARGET-033) + the built-in morsel
- *   handler. Core registers `io.aimeat.morsels` at mount; the EE module's handlers (real money)
- *   arrive through `EnterpriseProvider.getPaymentHandlers()` and land in the same registry, so the
- *   checkout flow and the /.well-known/ucp profile treat every payment method uniformly. Handlers
+ *   handler. Core registers every handler at mount: `io.aimeat.morsels` (this node's ledger),
+ *   `com.stripe.spt` (cards on the SELLER's own account), `io.aimeat.invoice` (settled offline) and,
+ *   when enabled, `com.coinbase.x402` (stablecoin). One registry, so the checkout flow and the
+ *   /.well-known/ucp profile treat every payment method uniformly. Handlers
  *   implement collect / payout / refund — the session service orchestrates the legs (including
  *   commission splits and the operator-or-burn fee leg).
  * @structure registerPaymentHandler · getPaymentHandler · listPaymentHandlers ·
@@ -16,6 +17,7 @@
  *   v1.0.0 — 2026-07-13 — Initial registry + morsel handler (TARGET-033 phase 1)
  */
 import { randomBytes, randomUUID } from 'node:crypto';
+import { logger } from '../utils/logger.js';
 const registry = new Map();
 export function registerPaymentHandler(handler) {
     registry.set(handler.id, handler);
@@ -82,7 +84,9 @@ export function morselPaymentHandler() {
                     trackingCode, timestamp: new Date().toISOString(),
                 });
             }
-            catch { /* refund must never throw — the caller already carries the primary error */ }
+            catch (err) {
+                logger.warn('refund: refund must never throw — the caller already carries the primary error', { error: String(err) });
+            }
         },
     };
 }

package/dist/src/commerce/payment-handlers.js.map

@@ -1 +1 @@
-{"version":3,"file":"payment-handlers.js","sourceRoot":"","sources":["../../../src/commerce/payment-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEnD,MAAM,UAAU,sBAAsB,CAAC,OAAuB;IAC5D,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,OAAO,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB;IAClC,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,2EAA2E;AAC3E,MAAM,OAAO,YAAa,SAAQ,KAAK;IAClB;IAAqB;IAAxC,YAAmB,IAAY,EAAS,UAAkB,EAAE,OAAe;QACzE,KAAK,CAAC,OAAO,CAAC,CAAC;QADE,SAAI,GAAJ,IAAI,CAAQ;QAAS,eAAU,GAAV,UAAU,CAAQ;IAE1D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAErD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,gBAAgB;QACvB,UAAU,EAAE,CAAC,QAAQ,CAAC;QAEtB,KAAK,CAAC,OAAO,CAAC,GAAmB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;YACjE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,GAAG,EAAE,uBAAuB,MAAM,4CAA4C,CAAC,CAAC;YACjI,CAAC;YACD,MAAM,YAAY,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7E,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC3B,EAAE,EAAE,MAAM,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,MAAM;gBAClF,YAAY,EAAE,GAAG,YAAY,IAAI,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAClF,CAAC,CAAC;YACH,OAAO,EAAE,YAAY,EAAE,CAAC;QAC1B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE;YACtF,IAAI,MAAM,IAAI,CAAC;gBAAE,OAAO;YACxB,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;YACxB,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC3B,EAAE,EAAE,MAAM,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM;gBACrE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,YAAY,IAAI,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC/G,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE;YACnE,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBACnD,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;oBAC/B,EAAE,EAAE,MAAM,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM;oBAC1E,YAAY,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBAClD,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC,CAAC,4EAA4E,CAAC,CAAC;QAC1F,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"payment-handlers.js","sourceRoot":"","sources":["../../../src/commerce/payment-handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEnD,MAAM,UAAU,sBAAsB,CAAC,OAAuB;IAC5D,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,OAAO,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB;IAClC,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,2EAA2E;AAC3E,MAAM,OAAO,YAAa,SAAQ,KAAK;IAClB;IAAqB;IAAxC,YAAmB,IAAY,EAAS,UAAkB,EAAE,OAAe;QACzE,KAAK,CAAC,OAAO,CAAC,CAAC;QADE,SAAI,GAAJ,IAAI,CAAQ;QAAS,eAAU,GAAV,UAAU,CAAQ;IAE1D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAErD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,gBAAgB;QACvB,UAAU,EAAE,CAAC,QAAQ,CAAC;QAEtB,KAAK,CAAC,OAAO,CAAC,GAAmB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;YACjE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,GAAG,EAAE,uBAAuB,MAAM,4CAA4C,CAAC,CAAC;YACjI,CAAC;YACD,MAAM,YAAY,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7E,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC3B,EAAE,EAAE,MAAM,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,MAAM;gBAClF,YAAY,EAAE,GAAG,YAAY,IAAI,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAClF,CAAC,CAAC;YACH,OAAO,EAAE,YAAY,EAAE,CAAC;QAC1B,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE;YACtF,IAAI,MAAM,IAAI,CAAC;gBAAE,OAAO;YACxB,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;YACxB,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC3B,EAAE,EAAE,MAAM,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM;gBACrE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,YAAY,IAAI,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC/G,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAmB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE;YACnE,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBACnD,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;oBAC/B,EAAE,EAAE,MAAM,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM;oBAC1E,YAAY,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBAClD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,gFAAgF,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QAC1I,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/commerce/sellable-resolvers.d.ts

@@ -2,10 +2,9 @@
  * @file src/commerce/sellable-resolvers.ts
  * @description Sellable-resolver registry (TARGET-033 phase 4): pluggable sources of "things for
  *   sale" the checkout core can price and fulfill. Core registers the `offer` resolver (agent
- *   offers, the phase-1 behavior); the EE module registers `org-offering` (company catalogs with
- *   commission splits) via `EnterpriseProvider.getSellableResolvers()`. A resolver returns a
- *   Sellable — optionally with a custom `distribute` callback that replaces the default
- *   seller payout (e.g. member cut + org-wallet cut).
+ *   offers), `app-tool` (priced tools on a published app) and `ext-call` (priced raw extension
+ *   calls). A resolver returns a Sellable — optionally with a custom `distribute` callback that
+ *   replaces the default single-seller payout when a sale has to be split several ways.
  * @structure SellableResolver · registerSellableResolver · getSellableResolver ·
  *   resetSellableResolvers · offerSellableResolver (core 'offer' kind) ·
  *   appToolSellableResolver (core 'app-tool' kind, TARGET-034 phase A) ·
@@ -15,6 +14,9 @@
  *   registerSellableResolver(appToolSellableResolver());
  *   const sellable = await getSellableResolver(ref.kind).resolve(storage, config, ref, buyerOwner);
  * @version-history
+ *   v1.3.0 — 2026-07-27 — app-tool: fulfillment carries the internal pass (the checkout IS the payment,
+ *     so the raw paywall must not charge it again — or refuse it outright), and a buyer the provider has
+ *     GRANTED resolves at price 0 like a self-purchase.
  *   v1.2.0 — 2026-07-14 — Task path (phase B): tools without an action_id binding fulfill as an
  *     agent TASK (manifest `agent`, else the owner GHII) instead of being rejected
  *   v1.1.0 — 2026-07-14 — app-tool resolver: priced tool calls on agent-faced apps, manifest at
@@ -33,8 +35,6 @@ export interface SellableRef {
     offer_id?: string;
     /** app-tool alias for offer_id: the tool name from the app's manifest. */
     tool?: string;
-    /** org-offering: "creatorOwner/slug" — resolved by the EE resolver. */
-    org?: string;
     /** app-tool: "ownerName/appId" — locates the apps.{appId}.tools manifest. */
     app?: string;
     /** app-tool: the buyer's tool input, forwarded to the capability invoke at fulfillment. */

package/dist/src/commerce/sellable-resolvers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sellable-resolvers.d.ts","sourceRoot":"","sources":["../../../src/commerce/sellable-resolvers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAK3C,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2FAA2F;IAC3F,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC1G;AAID,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAEzE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAE9E;AAED,sDAAsD;AACtD,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,gBAAgB,CAqDxD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,IAAI,gBAAgB,CA+E1D;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,IAAI,gBAAgB,CA4C1D"}
+{"version":3,"file":"sellable-resolvers.d.ts","sourceRoot":"","sources":["../../../src/commerce/sellable-resolvers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAK3C,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2FAA2F;IAC3F,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC1G;AAID,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAEzE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAE9E;AAED,sDAAsD;AACtD,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,gBAAgB,CAqDxD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,IAAI,gBAAgB,CAkG1D;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,IAAI,gBAAgB,CA4C1D"}