warpmetal 0.7.7 → 0.7.8

package/README.md

@@ -34,7 +34,7 @@ published wallet CLI with the exact version WarpMetal reports:
 npm install --global warpmetal
 warpmetal --help
 
-npm install --global @x402api/agent-wallet-cli@0.2.7
+npm install --global @x402api/agent-wallet-cli@0.2.8
 x402api help --json
 ```
 
@@ -58,7 +58,7 @@ integration.
 
 The repository also contains a skills-only WarpMetal plugin for the public
 Plugins Directory shared by Codex and ChatGPT. The plugin remains a separate
-artifact from the npm CLI and requires `warpmetal` CLI version 0.7.7 or newer.
+artifact from the npm CLI and requires `warpmetal` CLI version 0.7.8 or newer.
 
 To test the repository marketplace after the plugin lands on `main`:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "warpmetal",
-  "version": "0.7.7",
+  "version": "0.7.8",
   "description": "Agent-safe CLI and skill for purchasing, renewing, and managing WarpMetal VPS servers",
   "type": "module",
   "bin": {

package/skills/warpmetal/SKILL.md

@@ -11,7 +11,7 @@ with ad hoc HTTP commands.
 
 ## Start safely
 
-1. Run `warpmetal --version` and require version `0.7.7` or newer for this
+1. Run `warpmetal --version` and require version `0.7.8` or newer for this
    plugin. If it is missing or older, explain the compatibility requirement,
    ask before installing or upgrading software, and use only the official npm
    package from `https://www.npmjs.com/package/warpmetal`.

package/skills/warpmetal/references/cli-reference.md

@@ -64,12 +64,15 @@ suggested artifact paths live under the
 private WarpMetal state directory. An explicit output path must not already
 contain different content. `challengeHandle` is intentionally absent from the
 wallet envelope: it is neither a buyer payment identifier nor signing input.
+`paymentChallengeDigest` is the distinct authoritative signing input forwarded
+from x402api; the CLI fails closed instead of deriving it from
+`PAYMENT-REQUIRED`.
 If a previously issued unsigned sponsorship reservation expired, WarpMetal may
 retire that attempt and return a new `paymentAttemptId`. The CLI replaces the
 saved challenge and stale wallet-attempt metadata; use only the newly returned
 workflow.
 
-The current integration targets `@x402api/agent-wallet-cli@0.2.7`. A compatible
+The current integration targets `@x402api/agent-wallet-cli@0.2.8`. A compatible
 live term is marked `agentWalletSupported: true` and must use the sponsored
 Base USDC or Solana USDC/USDT launch profile with buyer native fees disabled.
 For the current declaration, x402api pays actual gas from its platform treasury

package/skills/warpmetal/references/payments.md

@@ -25,7 +25,7 @@ contract.
 WarpMetal runs on Node.js 20 or 22. The x402api Agent Wallet currently requires
 Node.js 22. Use the exact published package reported by
 `paymentWorkflow.signerPackage.spec`; the current contract is
-`@x402api/agent-wallet-cli@0.2.7`. Do not add it as a WarpMetal dependency,
+`@x402api/agent-wallet-cli@0.2.8`. Do not add it as a WarpMetal dependency,
 install executable wallet code from an unpinned repository URL, or substitute
 a similarly named package.
 
@@ -140,6 +140,9 @@ also contains `challengeHandle`, an opaque value retained by WarpMetal for
 merchant reconciliation. It is deliberately excluded from the x402api V1
 request envelope and must not be confused with the wallet-created buyer payment
 identifier.
+The wallet nonce is bound to the authoritative `paymentChallengeDigest` that
+WarpMetal forwards from x402api's charge response. Never derive or replace that
+digest with a hash of `PAYMENT-REQUIRED`.
 
 Choose only a term marked `agentWalletSupported: true`,
 `sponsoredNetworkFee: true`, and `buyerNativeFeeRequired: false`. The supported
@@ -149,7 +152,7 @@ reservation or any buyer-funded, unsupported, or unbound alternative.
 
 x402api pays actual gas from its platform treasury. The merchant tenant's
 active sponsorship allowance controls admission, but actual gas is not a
-tenant debit. During the coordinated rollout, accept only the exact 0.2.7
+tenant debit. During the coordinated rollout, accept only the exact 0.2.8
 platform-treasury declaration or the matched legacy tenant-credit declaration;
 never accept a mixed billing and final-charge policy.
 

package/src/cli.js

@@ -389,6 +389,19 @@ function challengeResult(
   const rejected = response.status === 402 && status === "payment_rejected";
   const paymentRequired = response.headers["payment-required"];
   const challengeHandle = response.headers["x-x402api-challenge-handle"];
+  const headerChallengeDigest =
+    response.headers["x-x402api-challenge-digest"];
+  const bodyChallengeDigest = response.data?.challengeDigest;
+  if (
+    headerChallengeDigest &&
+    bodyChallengeDigest &&
+    headerChallengeDigest !== bodyChallengeDigest
+  ) {
+    throw new CliError(
+      "WarpMetal returned conflicting x402 challenge digests.",
+    );
+  }
+  const challengeDigest = bodyChallengeDigest || headerChallengeDigest;
   if (requireChallenge && response.status === 402 && !paymentRequired) {
     throw new CliError("WarpMetal returned HTTP 402 without PAYMENT-REQUIRED.");
   }
@@ -397,6 +410,11 @@ function challengeResult(
       "WarpMetal returned HTTP 402 without X-X402API-Challenge-Handle.",
     );
   }
+  if (paymentRequired && !challengeDigest) {
+    throw new CliError(
+      "WarpMetal returned PAYMENT-REQUIRED without X-X402API-Challenge-Digest.",
+    );
+  }
   return {
     status,
     taskId,
@@ -405,6 +423,7 @@ function challengeResult(
       response.headers["x-warpmetal-payment-attempt"],
     paymentRequired,
     challengeHandle,
+    challengeDigest,
     checkoutBodySha256: createHash("sha256").update(checkoutBody).digest("hex"),
     ...(rejected
       ? {
@@ -430,6 +449,7 @@ async function attachPaymentWorkflow(
     checkoutPath: order.checkoutPath,
     checkoutBody: order.checkoutBody,
     paymentRequired: safe.paymentRequired,
+    challengeDigest: safe.challengeDigest,
     merchantReference: taskId,
   });
   const defaults = defaultPaymentPaths(
@@ -727,6 +747,7 @@ async function handleCheckoutSubmit(client, store, options, context) {
       checkoutPath: order.checkoutPath,
       checkoutBody: order.checkoutBody,
       paymentRequired: order.paymentRequired,
+      challengeDigest: order.paymentChallengeDigest,
       merchantReference: taskId,
     });
     walletPayment = await readPaymentArtifact(artifactFile, expected);
@@ -1043,6 +1064,7 @@ async function attachRenewalPaymentWorkflow(
     checkoutPath,
     checkoutBody: bodyText,
     paymentRequired: safe.paymentRequired,
+    challengeDigest: safe.challengeDigest,
     merchantReference: `renew:${serverId}:${server.termEndsAt || "unset"}`,
   });
   const matchingTerms = request.terms.filter(
@@ -1317,6 +1339,7 @@ async function handleRenewalSubmit(client, store, options, context) {
     checkoutPath: renewal.checkoutPath,
     checkoutBody: renewal.checkoutBody,
     paymentRequired: renewal.paymentRequired,
+    challengeDigest: renewal.paymentChallengeDigest,
     merchantReference: `renew:${serverId}:${renewal.termEndsAt || "unset"}`,
   });
   const walletPayment = await readPaymentArtifact(artifactFile, expected);

package/src/payment.js

@@ -15,7 +15,7 @@ const MAX_ARTIFACT_BYTES = 1024 * 1024;
 const MAX_SIGNATURE_BYTES = 512 * 1024;
 
 export const AGENT_WALLET_PACKAGE = "@x402api/agent-wallet-cli";
-export const AGENT_WALLET_VERSION = "0.2.7";
+export const AGENT_WALLET_VERSION = "0.2.8";
 const AGENT_WALLET_SPEC = `${AGENT_WALLET_PACKAGE}@${AGENT_WALLET_VERSION}`;
 const GAS_SPONSORSHIP_EXTENSION = "com.x402api.gas-sponsorship";
 const BASE_NETWORK = "eip155:8453";
@@ -399,7 +399,7 @@ export function parsePaymentRequired(value, expectedUrl) {
   const sponsorship = extensions[GAS_SPONSORSHIP_EXTENSION]?.info;
   return {
     challenge: parsed,
-    challengeDigest: digestJson(parsed),
+    paymentRequiredDigest: digestJson(parsed),
     accepts,
     sponsorshipExpiresAt: sponsorship?.expiresAt,
     terms: accepts.map((requirement) => {
@@ -434,6 +434,7 @@ export function createPaymentRequestEnvelope({
   checkoutPath,
   checkoutBody,
   paymentRequired,
+  challengeDigest,
   merchantReference,
 }) {
   const url = new URL(
@@ -441,6 +442,14 @@ export function createPaymentRequestEnvelope({
     `${baseUrl.replace(/\/$/, "")}/`,
   ).toString();
   const parsed = parsePaymentRequired(paymentRequired, url);
+  if (typeof challengeDigest !== "string" || !SHA256.test(challengeDigest)) {
+    throw invalid("The authoritative x402 challenge digest is malformed.");
+  }
+  if (challengeDigest === parsed.paymentRequiredDigest) {
+    throw invalid(
+      "The x402 challenge digest was derived from PAYMENT-REQUIRED instead of the authoritative charge response.",
+    );
+  }
   const supportedTerms = parsed.terms.filter(
     (term) => term.agentWalletSupported,
   );
@@ -466,13 +475,13 @@ export function createPaymentRequestEnvelope({
     contentType: "application/json",
     bodyBase64: Buffer.from(checkoutBody, "utf8").toString("base64"),
     paymentRequired,
-    challengeDigest: parsed.challengeDigest,
+    challengeDigest,
     merchantReference,
   };
   return {
     envelope,
     requestDigest: digestJson(envelope),
-    challengeDigest: parsed.challengeDigest,
+    challengeDigest,
     challenge: parsed.challenge,
     sponsorshipExpiresAt: parsed.sponsorshipExpiresAt,
     requirementDigests: new Set(