mtok-bridge 0.4.0 → 0.4.1

package/README.md

@@ -53,8 +53,11 @@ the verifier's payment timestamp, so a store migrating old claims can refuse amb
 pre-cutover payments. Existing stores may ignore these additional arguments. The core still
 verifies the payment before reading a completion, and known claims never run upstream again.
 
-The counted-input change is not ready to publish. The reference HTTP relay and SDK
-quote flow are integrated; the house seller's provider counters and rollout are still pending.
+Set `replayOnly: true` when retiring a payment domain. The core still verifies the
+payment before replaying a saved completion or returning its pending status. An
+unrecorded payment returns 503 before fee evaluation, input counting, claiming or
+inference. Quotes also return 503. Keep the legacy payment verifier and store
+available for these retries; this mode never admits new paid work.
 
 The new core requires `countInputTokens(safeRequest)`, returning a nonnegative safe integer
 or a promise for one. The host must count its actual provider prompt, including its chat

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mtok-bridge",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Serve any model as an OpenAI-compatible API with a key. No payment, no market, runs anywhere node runs. The transport core behind mtok.market's seller relay.",
   "type": "module",
   "bin": {

package/src/serve-core.mjs

@@ -223,6 +223,9 @@ export function createServeCore({
   offerId, sellerAgentId, sellerWallet,
   dripContractAddress, feeRecipient, feeBps,
   screenPayer,
+  // A retired payment domain may honor verified receipts without admitting
+  // quotes or another inference attempt for an unrecorded payment.
+  replayOnly = false,
   // The host counts its actual sanitized provider input. Missing or failed
   // accounting refuses a fresh claim; saved completions do not need recounting.
   countInputTokens,
@@ -235,6 +238,7 @@ export function createServeCore({
   maxOutputTokens = DEFAULT_MAX_OUTPUT_TOKENS,
 }) {
   const quote = async (request) => {
+    if (replayOnly) return { status: 503, body: { error: 'redemption_unavailable', detail: 'this relay only replays saved completions' } };
     const checked = validateRequest(request, model);
     if (checked.error) return { status: 400, body: { error: 'bad_request', detail: checked.error } };
     try {
@@ -353,6 +357,9 @@ export function createServeCore({
     if (redemptionState === 'pending') {
       return { status: 409, body: { error: 'draw_pending', detail: 'this paid draw was already claimed; refusing to run upstream again', _bookingId: bookingId } };
     }
+    if (replayOnly) {
+      return { status: 503, body: { error: 'redemption_unavailable', detail: 'this payment has no saved completion; retry this same paid draw after reconciliation', _bookingId: bookingId } };
+    }
     // Completed/pending claims already crossed the fee gate and cannot spend
     // again. New claims use the policy at the verified payment time.
     let currentFeeBps;