warpmetal 0.7.8 → 0.7.9

package/README.md

@@ -124,6 +124,12 @@ treasury; the merchant tenant's active allowance controls sponsorship
 admission but is not charged actual gas. Payment authority depends on execution
 context:
 
+WarpMetal can advertise any currently executable subset of those rails, from a
+single alternative through all three. Agent Kit requires the sponsorship and
+external-recipient extension bindings to match the advertised alternatives
+exactly, then preserves the chosen authorization artifact byte-for-byte for
+every pending or ambiguous retry.
+
 - When a human is actively chatting with the agent, show the exact live terms
   and ask for confirmation immediately before authorizing and submitting.
 - In an unattended run, a pre-funded dedicated wallet is standing spend

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "warpmetal",
-  "version": "0.7.8",
+  "version": "0.7.9",
   "description": "Agent-safe CLI and skill for purchasing, renewing, and managing WarpMetal VPS servers",
   "type": "module",
   "bin": {

package/src/payment.js

@@ -338,6 +338,47 @@ function externalRecipientBinds(requirement, extensions) {
   return matches.length === 1;
 }
 
+function exactExtensionBindings(accepts, sponsorship, extensions) {
+  if (!sponsorship) return;
+  const sponsoredAccepts = new Set(
+    accepts.map(
+      (requirement) =>
+        `${requirement.network}|${requirement.asset.toLowerCase()}|${requirement.extra.payloadProfile}`,
+    ),
+  );
+  const sponsorshipBindings = new Set(
+    sponsorship.requirements.map(
+      (binding) =>
+        `${binding.network}|${binding.asset.toLowerCase()}|${binding.payloadProfile}`,
+    ),
+  );
+  const recipients = extensions["com.k1hub.external-recipient"]?.info?.recipients;
+  const acceptedRecipients = new Set(
+    accepts.map(
+      (requirement) =>
+        `${requirement.network}|${requirement.asset}|${requirement.payTo}`,
+    ),
+  );
+  const recipientBindings = new Set(
+    Array.isArray(recipients)
+      ? recipients.map(
+          (recipient) =>
+            `${recipient.network}|${recipient.asset}|${recipient.payTo}`,
+        )
+      : [],
+  );
+  if (
+    sponsoredAccepts.size !== sponsorshipBindings.size ||
+    [...sponsoredAccepts].some((identity) => !sponsorshipBindings.has(identity)) ||
+    acceptedRecipients.size !== recipientBindings.size ||
+    [...acceptedRecipients].some((identity) => !recipientBindings.has(identity))
+  ) {
+    throw invalid(
+      "The x402 sponsorship and recipient bindings do not exactly match PAYMENT-REQUIRED.",
+    );
+  }
+}
+
 function agentWalletSupports(requirement, sponsorship, extensions) {
   const profile = requirement.extra.payloadProfile;
   const baseExtra = Object.keys(requirement.extra).sort().join(",");
@@ -397,6 +438,7 @@ export function parsePaymentRequired(value, expectedUrl) {
     "The x402 challenge extension",
   );
   const sponsorship = extensions[GAS_SPONSORSHIP_EXTENSION]?.info;
+  exactExtensionBindings(accepts, sponsorship, extensions);
   return {
     challenge: parsed,
     paymentRequiredDigest: digestJson(parsed),