mppx 0.9.2 → 0.10.0

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # mppx
 
+## 0.10.0
+
+### Minor Changes
+
+- c0ce0fe: Enforced recipient allowlists for both primary and split recipients, including zero-amount proofs.
+
+  Migration: include the primary recipient address as well as every split recipient in `expectedRecipients`. Configurations containing only split recipients are now rejected.
+
+### Patch Changes
+
+- 3c14a65: Enforced charge and session chain policies and rejected clients on conflicting payment chains. Preserved configured payment methods, challenge preferences, session retries, incremental SSE output, and follow-up vouchers in the CLI. Updated validation to use configured methods and advertised payment metadata, avoid unrelated wallet preflights, and settle session attempts after responses or transport failures.
+- eda059a: Added a non-blocking `suggested` validation category and used it for missing, empty, or non-text `/llms.txt` documentation.
+- d71ad79: Added request-aware payment preparation with safe redirect handling and pinned credential delivery.
+
+## 0.9.3
+
+### Patch Changes
+
+- 43ec92c: Bound subscription key authorizations to their server-issued payment challenge.
+- 175d709: Allowed EVM and x402 payments to be prepared without an account and signed using an account supplied during credential creation.
+- 5932b08: Added non-mutating EVM credential validation with facilitator checks and revalidation before settlement through the existing broadcast lifecycle.
+- 1fd8746: Expanded Tempo session close rollback and expiring-nonce transaction coverage.
+- 459b517: Added challenge context to payment-success hooks, standardized Stripe PaymentIntent analytics
+  metadata, and added a shared SDK version identifier.
+- 203bad2: Added typed multi-offer composition for MCP SDK and JSON-RPC transports while preserving selected-payment dispatch and receipt metadata.
+- a5451d0: Updated `fast-uri` and `qs` to patched versions, resolving their latest security advisories.
+- a802ce9: Added method-agnostic CLI payment extensions that can enforce policy or prepare funds before credential creation.
+- baa0fd5: Added a fee-payer policy option to reject sponsored key authorizations while allowing them by default.
+- f494ffd: Added request-scoped PaymentIntent option resolvers that run before terminal Stripe payments.
+- 7949db6: Fixed server-side session transactions to use expiring nonces across independent processes.
+- 26f9840: Removed the Stripe SPT runtime dependency on viem.
+
 ## 0.9.2
 
 ### Patch Changes

package/README.md

@@ -138,6 +138,25 @@ that do not support custom escrows should leave it unset. See the
 Pass `mpp` or `x402` to require one protocol. x402 payments use the same EVM account as EVM
 charges, so `MPPX_PRIVATE_KEY` or a stored account works for both.
 
+Payment extensions can enforce policy or prepare funds after challenge selection and confirmation,
+immediately before credential creation:
+
+```ts
+import { defineConfig, Extension } from 'mppx/cli'
+
+export default defineConfig({
+  extensions: [
+    Extension.from({
+      async preparePayment({ challenge }) {
+        await prepareFunds(challenge)
+      },
+    }),
+  ],
+})
+```
+
+Extensions run in configuration order. Throwing rejects the payment before Mppx signs it.
+
 You can also install globally to use the `mppx` CLI from anywhere:
 
 ```bash

package/dist/Method.d.ts

@@ -185,6 +185,8 @@ export type CanOfferFn<method extends Method> = (parameters: {
  * like recording the payment in an external system.
  */
 export type OnPaymentSuccessFn<method extends Method> = (parameters: {
+    /** Challenge associated with the successful payment. */
+    challenge?: DeepReadonly<Challenge.Challenge<z.output<method['schema']['request']>, method['intent'], method['name']>> | undefined;
     input?: globalThis.Request;
     receipt: DeepReadonly<Receipt.Receipt>;
     /** Canonical payment request included in the challenge. */

package/dist/cli/Extension.d.ts

@@ -0,0 +1,20 @@
+import type * as Challenge from '../Challenge.js';
+/** Context supplied before the CLI creates a payment credential. */
+export type Context = Readonly<{
+    challenge: Challenge.Challenge;
+    /** Method-specific context that will be supplied to credential creation. */
+    credentialContext?: unknown;
+}>;
+/** Result of preparing a selected payment. */
+export type Result = Readonly<{
+    /** Replaces the method-specific context supplied to credential creation. */
+    credentialContext?: unknown;
+}>;
+/** Method-agnostic CLI lifecycle hooks. */
+export type Extension = Readonly<{
+    /** Runs after challenge selection and confirmation, immediately before credential creation. */
+    preparePayment?(context: Context): Result | void | Promise<Result | void>;
+}>;
+/** Defines an Mppx CLI extension. */
+export declare function from(extension: Extension): Extension;
+//# sourceMappingURL=Extension.d.ts.map

package/dist/cli/Extension.js

@@ -0,0 +1,5 @@
+/** Defines an Mppx CLI extension. */
+export function from(extension) {
+    return extension;
+}
+//# sourceMappingURL=Extension.js.map