xytara 3.1.0 → 3.1.2

package/lib/command_flow.js

@@ -1,406 +1,411 @@
-"use strict";
-
-const {
-  createCommandResult,
-  createQuote,
-  hydrateQuoteStates
-} = require("./commerce_runtime");
-const { consumeAccountCredits, buildUsageMeterPreview, previewCreditSpend } = require("./commerce_economics");
-const { resolveSpendCredential, evaluateAuthorityBindingAction } = require("./account_auth");
-const { validateIntegrationSelection } = require("../integrations/dispatch");
-const { markPaymentAccepted, verifyPaymentAcceptance } = require("./payment_verification");
-const { executeExternalTarget, resolveExecutionTarget } = require("./external_execution_runtime");
-
-function hasPaymentHeaders(headers, requiredHeaders) {
-  return requiredHeaders.every((headerName) => headers[headerName]);
-}
-
-function parseBearerToken(headers) {
-  const authorization = headers && typeof headers.authorization === "string"
-    ? headers.authorization.trim()
-    : "";
-  const match = authorization.match(/^Bearer\s+(.+)$/i);
-  return match ? match[1].trim() : null;
-}
-
-function buildCreditCommitPayload(payload, quote, requiredUnits) {
-  return {
-    account_id: quote.account_id,
-    agent_id: payload.agent_id || null,
-    budget_id: payload.budget_id || null,
-    pack_id: payload.pack_id || null,
-    entitlement_id: payload.entitlement_id || null,
-    quote_id: quote.quote_id,
-    task_ref: payload.task_ref || null,
-    workflow_ref: payload.workflow_ref || null,
-    units: requiredUnits,
-    reason: "credit_first_execution"
-  };
-}
-
-function buildCreditRejectionResponse(creditDecision, quote) {
-  const failureReason = creditDecision && creditDecision.credit_spend_preview
-    ? creditDecision.credit_spend_preview.failure_reason
-    : null;
-  const reason = failureReason
-    || (creditDecision && creditDecision.policy_guard && creditDecision.policy_guard.reason)
-    || (creditDecision && creditDecision.entitlement_guard && creditDecision.entitlement_guard.reason)
-    || (creditDecision && creditDecision.reason)
-    || "credit_spend_not_allowed";
-
-  if (reason === "insufficient_credits") {
-    const preview = creditDecision && creditDecision.credit_spend_preview ? creditDecision.credit_spend_preview : {};
-    return {
-      status: 402,
-      payload: {
-        ok: false,
-        reason: "insufficient_credits",
-        insufficient_credits: {
-          account_id: quote.account_id,
-          required_units: preview.required_units,
-          available_units: preview.available_units,
-          recommended_next_surfaces: {
-            credits_topup: "/v1/checkout/purchase-intents",
-            direct_payment: "/v1/payment-quotes"
-          }
-        },
-        quote
-      }
-    };
-  }
-
-  return {
-    status: 403,
-    payload: {
-      ok: false,
-      reason,
-      account_id: quote.account_id,
-      policy_guard: creditDecision && creditDecision.policy_guard ? creditDecision.policy_guard : null,
-      entitlement_guard: creditDecision && creditDecision.entitlement_guard ? creditDecision.entitlement_guard : null,
-      quote
-    }
-  };
-}
-
-async function buildExternalExecutionOptions(payload, quote, authorizationContext) {
-  const executionTarget = resolveExecutionTarget(payload, quote);
-  if (!executionTarget) return {};
-  const execution = await executeExternalTarget(executionTarget, payload, quote, authorizationContext);
-  if (!execution || !execution.ok) {
-    return {
-      error: execution || {
-        ok: false,
-        status: 502,
-        reason: "external_execution_failed"
-      }
-    };
-  }
-  return {
-    externalExecution: execution
-  };
-}
-
-async function executeCommandRequest(state, payload, headers, options) {
-  const opts = options || {};
-  const requiredHeaders = Array.isArray(opts.requiredHeaders) && opts.requiredHeaders.length > 0
-    ? opts.requiredHeaders
-    : ["x-wallet-id", "x-payment", "x-payment-signature"];
-  const challengePayload = typeof opts.challengePayload === "function"
-    ? opts.challengePayload
-    : (quote) => ({ ok: false, quote });
-
-  hydrateQuoteStates(state);
-  const validation = validateIntegrationSelection(payload);
-  if (!validation.ok) {
-    return {
-      status: 400,
-      payload: {
-        ok: false,
-        reason: validation.reason,
-        errors: validation.errors,
-        selection: validation.selection
-      }
-    };
-  }
-  const prefersCredits = payload && payload.payment_preference === "credits_first";
-  if (!hasPaymentHeaders(headers || {}, requiredHeaders)) {
-    const bearerToken = parseBearerToken(headers);
-    const delegatedSpendRequested = typeof bearerToken === "string" && bearerToken.startsWith("xytara_spend_");
-    const delegatedSpend = delegatedSpendRequested
-      ? resolveSpendCredential(state, bearerToken)
-      : { ok: false, reason: "spend_credential_not_requested" };
-    if (delegatedSpendRequested && !delegatedSpend.ok) {
-      return {
-        status: 403,
-        payload: {
-          ok: false,
-          reason: delegatedSpend.reason
-        }
-      };
-    }
-    if (delegatedSpend.ok) {
-      payload = {
-        ...payload,
-        account_id: payload && payload.account_id ? payload.account_id : delegatedSpend.credential.account_id,
-        agent_id: payload && payload.agent_id ? payload.agent_id : delegatedSpend.credential.agent_id,
-        budget_id: payload && payload.budget_id ? payload.budget_id : delegatedSpend.credential.budget_id,
-        pack_id: delegatedSpend.credential.pack_id || (payload && payload.pack_id) || null,
-        entitlement_id: delegatedSpend.credential.entitlement_id || (payload && payload.entitlement_id) || null
-      };
-    }
-    const quote = createQuote(state, payload);
-    if (prefersCredits) {
-      const creditPayload = {
-        ...payload,
-        account_id: quote.account_id,
-        quoted_units: Number.isFinite(Number(payload.quoted_units)) ? Number(payload.quoted_units) : undefined
-      };
-      const meteringPreview = buildUsageMeterPreview(state, creditPayload);
-      const requiredUnits = meteringPreview.usage_units;
-      if (delegatedSpend.ok && delegatedSpend.binding) {
-        const authorityDecision = evaluateAuthorityBindingAction(delegatedSpend.binding, "delegated_credit_spend", requiredUnits);
-        if (!authorityDecision.ok) {
-          return {
-            status: 403,
-            payload: {
-              ok: false,
-              reason: authorityDecision.reason,
-              binding_id: authorityDecision.binding_id || null,
-              required_scope: authorityDecision.required_scope || null,
-              authority_scope: authorityDecision.authority_scope || [],
-              required_consequence_family: authorityDecision.required_consequence_family || null,
-              allowed_consequence_families: authorityDecision.allowed_consequence_families || [],
-              max_units: authorityDecision.max_units || null,
-              attempted_units: authorityDecision.attempted_units || requiredUnits
-            }
-          };
-        }
-      }
-
-      const creditDecision = previewCreditSpend(state, creditPayload);
-      if (!creditDecision.ok || !creditDecision.credit_spend_preview || creditDecision.credit_spend_preview.executable_now !== true) {
-        return buildCreditRejectionResponse(creditDecision, quote);
-      }
-
-      const preCommitAuthorizationContext = delegatedSpend.ok
-        ? delegatedSpend.authorization_context
-        : {
-            ok: true,
-            verification_mode: "account_credits",
-            wallet_id: quote.account_id,
-            age_seconds: 0,
-            payment_payload: {
-              credit_spend_status: "precommit"
-            }
-          };
-      const externalExecutionOptions = await buildExternalExecutionOptions(payload, quote, preCommitAuthorizationContext);
-      if (externalExecutionOptions.error) {
-        return {
-          status: externalExecutionOptions.error.status || 502,
-          payload: {
-            ok: false,
-            reason: externalExecutionOptions.error.reason || "external_execution_failed",
-            details: externalExecutionOptions.error.details || null,
-            credit_spend_status: "not_committed",
-            credit_spend_preview: creditDecision.credit_spend_preview,
-            quote
-          }
-        };
-      }
-
-      const creditSpend = consumeAccountCredits(state, buildCreditCommitPayload(payload, quote, requiredUnits));
-      if (creditSpend.ok) {
-        const paymentVerification = {
-          ...(delegatedSpend.ok
-            ? delegatedSpend.authorization_context
-            : {
-                ok: true,
-                verification_mode: "account_credits",
-                wallet_id: quote.account_id,
-                age_seconds: 0,
-                payment_payload: {}
-              }),
-          payment_payload: {
-            ...((delegatedSpend.ok && delegatedSpend.authorization_context && delegatedSpend.authorization_context.payment_payload) || {}),
-            credit_spend_id: creditSpend.credit_spend.credit_spend_id
-          }
-        };
-        return {
-          status: 200,
-          payload: createCommandResult(state, {
-            ...payload,
-            payment_preference: "credits_first"
-          }, quote, {
-            paymentVerification,
-            creditSpend: creditSpend.credit_spend,
-            skipPaymentLedger: true,
-            externalExecution: externalExecutionOptions.externalExecution || null
-          })
-        };
-      }
-      if (creditSpend.reason !== "insufficient_credits") {
-        return {
-          status: 403,
-          payload: {
-            ok: false,
-            reason: creditSpend.reason,
-            account_id: quote.account_id,
-            provider_execution_completed_but_credit_commit_failed: Boolean(externalExecutionOptions.externalExecution),
-            policy_guard: {
-              agent_id: creditSpend.agent_id || null,
-              budget_id: creditSpend.budget_id || null,
-              task_domain: creditSpend.task_domain || null,
-              policy_ref: creditSpend.policy_ref || null,
-              max_reserve_units: creditSpend.max_reserve_units || null,
-              allowed_job_domains: creditSpend.allowed_job_domains || null,
-              budget_status: creditSpend.budget_status || null,
-              agent_status: creditSpend.agent_status || null
-            },
-            quote
-          }
-        };
-      }
-      return {
-        status: 402,
-        payload: {
-          ok: false,
-          reason: "insufficient_credits",
-          provider_execution_completed_but_credit_commit_failed: Boolean(externalExecutionOptions.externalExecution),
-          insufficient_credits: {
-            account_id: quote.account_id,
-            required_units: creditSpend.required_units,
-            available_units: creditSpend.available_units,
-            recommended_next_surfaces: {
-              credits_topup: "/v1/checkout/purchase-intents",
-              direct_payment: "/v1/payment-quotes"
-            }
-          },
-          quote
-        }
-      };
-    }
-    return {
-      status: 402,
-      payload: challengePayload(quote)
-    };
-  }
-
-  const quote = payload.quote_id && state.quotes.get(payload.quote_id)
-    ? state.quotes.get(payload.quote_id)
-    : createQuote(state, payload);
-
-  if (quote && quote.status === "expired") {
-    return {
-      status: 409,
-      payload: {
-        ok: false,
-        reason: "quote_expired",
-        quote
-      }
-    };
-  }
-
-  if (quote && (quote.status === "executed" || quote.status === "accepted")) {
-    return {
-      status: 409,
-      payload: {
-        ok: false,
-        reason: "quote_already_used",
-        quote
-      }
-    };
-  }
-
-  const paymentVerification = verifyPaymentAcceptance(state, headers || {}, requiredHeaders, quote, {
-    payment_protocol: opts.paymentProtocol || (payload && payload.payment_protocol) || null,
-    authorization_scheme: opts.authorizationScheme || null
-  });
-  if (!paymentVerification.ok) {
-    return {
-      status: paymentVerification.status || 403,
-      payload: {
-        ok: false,
-        reason: paymentVerification.reason,
-        quote
-      }
-    };
-  }
-
-  markPaymentAccepted(state, paymentVerification);
-  const externalExecutionOptions = await buildExternalExecutionOptions(payload, quote, paymentVerification);
-  if (externalExecutionOptions.error) {
-    return {
-      status: externalExecutionOptions.error.status || 502,
-      payload: {
-        ok: false,
-        reason: externalExecutionOptions.error.reason || "external_execution_failed",
-        details: externalExecutionOptions.error.details || null,
-        quote
-      }
-    };
-  }
-
-  return {
-    status: 200,
-    payload: createCommandResult(state, payload, quote, {
-      paymentVerification,
-      externalExecution: externalExecutionOptions.externalExecution || null
-    })
-  };
-}
-
-async function executeAuthorizedCommandRequest(state, payload, authorizationContext) {
-  const validation = validateIntegrationSelection(payload);
-  if (!validation.ok) {
-    return {
-      status: 400,
-      payload: {
-        ok: false,
-        reason: validation.reason,
-        errors: validation.errors,
-        selection: validation.selection
-      }
-    };
-  }
-
-  hydrateQuoteStates(state);
-
-  const quote = createQuote(state, payload);
-  const paymentVerification = {
-    ok: true,
-    verification_mode: authorizationContext && authorizationContext.verification_mode
-      ? authorizationContext.verification_mode
-      : "hosted_checkout",
-    wallet_id: authorizationContext && authorizationContext.wallet_id
-      ? authorizationContext.wallet_id
-      : "hosted_checkout",
-    age_seconds: 0,
-    payment_payload: authorizationContext && authorizationContext.payment_payload
-      ? authorizationContext.payment_payload
-      : null
-  };
-  const externalExecutionOptions = await buildExternalExecutionOptions(payload, quote, paymentVerification);
-  if (externalExecutionOptions.error) {
-    return {
-      status: externalExecutionOptions.error.status || 502,
-      payload: {
-        ok: false,
-        reason: externalExecutionOptions.error.reason || "external_execution_failed",
-        details: externalExecutionOptions.error.details || null
-      }
-    };
-  }
-
-  return {
-    status: 200,
-    payload: createCommandResult(state, payload, quote, {
-      paymentVerification,
-      externalExecution: externalExecutionOptions.externalExecution || null
-    })
-  };
-}
-
-module.exports = {
-  executeAuthorizedCommandRequest,
-  executeCommandRequest
-};
+"use strict";
+
+const {
+  createCommandResult,
+  createQuote,
+  hydrateQuoteStates
+} = require("./commerce_runtime");
+const { consumeAccountCredits, buildUsageMeterPreview, previewCreditSpend } = require("./commerce_economics");
+const { resolveSpendCredential, evaluateAuthorityBindingAction } = require("./account_auth");
+const { validateIntegrationSelection } = require("../integrations/dispatch");
+const { markPaymentAccepted, verifyPaymentAcceptance } = require("./payment_verification");
+const { executeExternalTarget, resolveExecutionTarget } = require("./external_execution_runtime");
+
+function hasPaymentHeaders(headers, requiredHeaders) {
+  return requiredHeaders.every((headerName) => headers[headerName]);
+}
+
+function parseBearerToken(headers) {
+  const authorization = headers && typeof headers.authorization === "string"
+    ? headers.authorization.trim()
+    : "";
+  const match = authorization.match(/^Bearer\s+(.+)$/i);
+  return match ? match[1].trim() : null;
+}
+
+function buildCreditCommitPayload(payload, quote, requiredUnits) {
+  return {
+    account_id: quote.account_id,
+    agent_id: payload.agent_id || null,
+    budget_id: payload.budget_id || null,
+    pack_id: payload.pack_id || null,
+    entitlement_id: payload.entitlement_id || null,
+    quote_id: quote.quote_id,
+    task_ref: payload.task_ref || null,
+    workflow_ref: payload.workflow_ref || null,
+    units: requiredUnits,
+    reason: "credit_first_execution"
+  };
+}
+
+function buildCreditRejectionResponse(creditDecision, quote) {
+  const failureReason = creditDecision && creditDecision.credit_spend_preview
+    ? creditDecision.credit_spend_preview.failure_reason
+    : null;
+  const reason = failureReason
+    || (creditDecision && creditDecision.policy_guard && creditDecision.policy_guard.reason)
+    || (creditDecision && creditDecision.entitlement_guard && creditDecision.entitlement_guard.reason)
+    || (creditDecision && creditDecision.reason)
+    || "credit_spend_not_allowed";
+
+  if (reason === "insufficient_credits") {
+    const preview = creditDecision && creditDecision.credit_spend_preview ? creditDecision.credit_spend_preview : {};
+    return {
+      status: 402,
+      payload: {
+        ok: false,
+        reason: "insufficient_credits",
+        insufficient_credits: {
+          account_id: quote.account_id,
+          required_units: preview.required_units,
+          available_units: preview.available_units,
+          recommended_next_surfaces: {
+            credits_topup: "/v1/checkout/purchase-intents",
+            direct_payment: "/v1/payment-quotes"
+          }
+        },
+        quote
+      }
+    };
+  }
+
+  return {
+    status: 403,
+    payload: {
+      ok: false,
+      reason,
+      account_id: quote.account_id,
+      policy_guard: creditDecision && creditDecision.policy_guard ? creditDecision.policy_guard : null,
+      entitlement_guard: creditDecision && creditDecision.entitlement_guard ? creditDecision.entitlement_guard : null,
+      quote
+    }
+  };
+}
+
+async function buildExternalExecutionOptions(payload, quote, authorizationContext) {
+  const executionTarget = resolveExecutionTarget(payload, quote);
+  if (!executionTarget) return {};
+  const execution = await executeExternalTarget(executionTarget, payload, quote, authorizationContext);
+  if (!execution || !execution.ok) {
+    return {
+      error: execution || {
+        ok: false,
+        status: 502,
+        reason: "external_execution_failed"
+      }
+    };
+  }
+  return {
+    externalExecution: execution
+  };
+}
+
+async function executeCommandRequest(state, payload, headers, options) {
+  const opts = options || {};
+  const requiredHeaders = Array.isArray(opts.requiredHeaders) && opts.requiredHeaders.length > 0
+    ? opts.requiredHeaders
+    : ["x-wallet-id", "x-payment", "x-payment-signature"];
+  const challengePayload = typeof opts.challengePayload === "function"
+    ? opts.challengePayload
+    : (quote) => ({ ok: false, quote });
+
+  hydrateQuoteStates(state);
+  const validation = validateIntegrationSelection(payload);
+  if (!validation.ok) {
+    return {
+      status: 400,
+      payload: {
+        ok: false,
+        reason: validation.reason,
+        errors: validation.errors,
+        selection: validation.selection
+      }
+    };
+  }
+  const prefersCredits = payload && payload.payment_preference === "credits_first";
+  if (!hasPaymentHeaders(headers || {}, requiredHeaders)) {
+    const bearerToken = parseBearerToken(headers);
+    const delegatedSpendRequested = typeof bearerToken === "string" && bearerToken.startsWith("xytara_spend_");
+    const delegatedSpend = delegatedSpendRequested
+      ? resolveSpendCredential(state, bearerToken)
+      : { ok: false, reason: "spend_credential_not_requested" };
+    if (delegatedSpendRequested && !delegatedSpend.ok) {
+      return {
+        status: 403,
+        payload: {
+          ok: false,
+          reason: delegatedSpend.reason
+        }
+      };
+    }
+    if (delegatedSpend.ok) {
+      payload = {
+        ...payload,
+        account_id: payload && payload.account_id ? payload.account_id : delegatedSpend.credential.account_id,
+        agent_id: payload && payload.agent_id ? payload.agent_id : delegatedSpend.credential.agent_id,
+        budget_id: payload && payload.budget_id ? payload.budget_id : delegatedSpend.credential.budget_id,
+        pack_id: delegatedSpend.credential.pack_id || (payload && payload.pack_id) || null,
+        entitlement_id: delegatedSpend.credential.entitlement_id || (payload && payload.entitlement_id) || null
+      };
+    }
+    const quote = createQuote(state, payload);
+    if (prefersCredits) {
+      const creditPayload = {
+        ...payload,
+        account_id: quote.account_id,
+        quoted_units: Number.isFinite(Number(payload.quoted_units)) ? Number(payload.quoted_units) : undefined
+      };
+      const meteringPreview = buildUsageMeterPreview(state, creditPayload);
+      const requiredUnits = meteringPreview.usage_units;
+      if (delegatedSpend.ok && delegatedSpend.binding) {
+        const authorityDecision = evaluateAuthorityBindingAction(delegatedSpend.binding, "delegated_credit_spend", requiredUnits);
+        if (!authorityDecision.ok) {
+          return {
+            status: 403,
+            payload: {
+              ok: false,
+              reason: authorityDecision.reason,
+              binding_id: authorityDecision.binding_id || null,
+              required_scope: authorityDecision.required_scope || null,
+              authority_scope: authorityDecision.authority_scope || [],
+              required_consequence_family: authorityDecision.required_consequence_family || null,
+              allowed_consequence_families: authorityDecision.allowed_consequence_families || [],
+              max_units: authorityDecision.max_units || null,
+              attempted_units: authorityDecision.attempted_units || requiredUnits
+            }
+          };
+        }
+      }
+
+      const creditDecision = previewCreditSpend(state, creditPayload);
+      if (!creditDecision.ok || !creditDecision.credit_spend_preview || creditDecision.credit_spend_preview.executable_now !== true) {
+        return buildCreditRejectionResponse(creditDecision, quote);
+      }
+
+      const preCommitAuthorizationContext = delegatedSpend.ok
+        ? delegatedSpend.authorization_context
+        : {
+            ok: true,
+            verification_mode: "account_credits",
+            wallet_id: quote.account_id,
+            age_seconds: 0,
+            payment_payload: {
+              credit_spend_status: "precommit"
+            }
+          };
+      const externalExecutionOptions = await buildExternalExecutionOptions(payload, quote, preCommitAuthorizationContext);
+      if (externalExecutionOptions.error) {
+        return {
+          status: externalExecutionOptions.error.status || 502,
+          payload: {
+            ok: false,
+            reason: externalExecutionOptions.error.reason || "external_execution_failed",
+            details: externalExecutionOptions.error.details || null,
+            credit_spend_status: "not_committed",
+            credit_spend_preview: creditDecision.credit_spend_preview,
+            quote
+          }
+        };
+      }
+
+      const creditSpend = consumeAccountCredits(state, buildCreditCommitPayload(payload, quote, requiredUnits));
+      if (creditSpend.ok) {
+        const paymentVerification = {
+          ...(delegatedSpend.ok
+            ? delegatedSpend.authorization_context
+            : {
+                ok: true,
+                verification_mode: "account_credits",
+                wallet_id: quote.account_id,
+                age_seconds: 0,
+                payment_payload: {}
+              }),
+          payment_payload: {
+            ...((delegatedSpend.ok && delegatedSpend.authorization_context && delegatedSpend.authorization_context.payment_payload) || {}),
+            credit_spend_id: creditSpend.credit_spend.credit_spend_id
+          }
+        };
+        return {
+          status: 200,
+          payload: createCommandResult(state, {
+            ...payload,
+            payment_preference: "credits_first"
+          }, quote, {
+            paymentVerification,
+            creditSpend: creditSpend.credit_spend,
+            skipPaymentLedger: true,
+            externalExecution: externalExecutionOptions.externalExecution || null
+          })
+        };
+      }
+      if (creditSpend.reason !== "insufficient_credits") {
+        return {
+          status: 403,
+          payload: {
+            ok: false,
+            reason: creditSpend.reason,
+            account_id: quote.account_id,
+            provider_execution_completed_but_credit_commit_failed: Boolean(externalExecutionOptions.externalExecution),
+            policy_guard: {
+              agent_id: creditSpend.agent_id || null,
+              budget_id: creditSpend.budget_id || null,
+              task_domain: creditSpend.task_domain || null,
+              policy_ref: creditSpend.policy_ref || null,
+              max_reserve_units: creditSpend.max_reserve_units || null,
+              allowed_job_domains: creditSpend.allowed_job_domains || null,
+              budget_status: creditSpend.budget_status || null,
+              agent_status: creditSpend.agent_status || null
+            },
+            quote
+          }
+        };
+      }
+      return {
+        status: 402,
+        payload: {
+          ok: false,
+          reason: "insufficient_credits",
+          provider_execution_completed_but_credit_commit_failed: Boolean(externalExecutionOptions.externalExecution),
+          insufficient_credits: {
+            account_id: quote.account_id,
+            required_units: creditSpend.required_units,
+            available_units: creditSpend.available_units,
+            recommended_next_surfaces: {
+              credits_topup: "/v1/checkout/purchase-intents",
+              direct_payment: "/v1/payment-quotes"
+            }
+          },
+          quote
+        }
+      };
+    }
+    return {
+      status: 402,
+      payload: challengePayload(quote)
+    };
+  }
+
+  const quote = payload.quote_id && state.quotes.get(payload.quote_id)
+    ? state.quotes.get(payload.quote_id)
+    : createQuote(state, payload);
+
+  if (quote && quote.status === "expired") {
+    return {
+      status: 409,
+      payload: {
+        ok: false,
+        reason: "quote_expired",
+        quote
+      }
+    };
+  }
+
+  if (quote && (quote.status === "executed" || quote.status === "accepted")) {
+    return {
+      status: 409,
+      payload: {
+        ok: false,
+        reason: "quote_already_used",
+        quote
+      }
+    };
+  }
+
+  const paymentVerification = await verifyPaymentAcceptance(state, headers || {}, requiredHeaders, quote, {
+    payment_protocol: opts.paymentProtocol || (payload && payload.payment_protocol) || null,
+    authorization_scheme: opts.authorizationScheme || null,
+    resource_url: opts.resourceUrl || null
+  });
+  if (!paymentVerification.ok) {
+    return {
+      status: paymentVerification.status || 403,
+      payload: {
+        ok: false,
+        reason: paymentVerification.reason,
+        ...(paymentVerification.detail ? { detail: paymentVerification.detail } : {}),
+        quote
+      }
+    };
+  }
+
+  markPaymentAccepted(state, paymentVerification);
+  const externalExecutionOptions = await buildExternalExecutionOptions(payload, quote, paymentVerification);
+  if (externalExecutionOptions.error) {
+    return {
+      status: externalExecutionOptions.error.status || 502,
+      payload: {
+        ok: false,
+        reason: externalExecutionOptions.error.reason || "external_execution_failed",
+        details: externalExecutionOptions.error.details || null,
+        quote
+      }
+    };
+  }
+
+  return {
+    status: 200,
+    payload: createCommandResult(state, payload, quote, {
+      paymentVerification,
+      externalExecution: externalExecutionOptions.externalExecution || null
+    }),
+    ...(paymentVerification.payment_response_base64
+      ? { paymentResponse: paymentVerification.payment_response_base64 }
+      : {})
+  };
+}
+
+async function executeAuthorizedCommandRequest(state, payload, authorizationContext) {
+  const validation = validateIntegrationSelection(payload);
+  if (!validation.ok) {
+    return {
+      status: 400,
+      payload: {
+        ok: false,
+        reason: validation.reason,
+        errors: validation.errors,
+        selection: validation.selection
+      }
+    };
+  }
+
+  hydrateQuoteStates(state);
+
+  const quote = createQuote(state, payload);
+  const paymentVerification = {
+    ok: true,
+    verification_mode: authorizationContext && authorizationContext.verification_mode
+      ? authorizationContext.verification_mode
+      : "hosted_checkout",
+    wallet_id: authorizationContext && authorizationContext.wallet_id
+      ? authorizationContext.wallet_id
+      : "hosted_checkout",
+    age_seconds: 0,
+    payment_payload: authorizationContext && authorizationContext.payment_payload
+      ? authorizationContext.payment_payload
+      : null
+  };
+  const externalExecutionOptions = await buildExternalExecutionOptions(payload, quote, paymentVerification);
+  if (externalExecutionOptions.error) {
+    return {
+      status: externalExecutionOptions.error.status || 502,
+      payload: {
+        ok: false,
+        reason: externalExecutionOptions.error.reason || "external_execution_failed",
+        details: externalExecutionOptions.error.details || null
+      }
+    };
+  }
+
+  return {
+    status: 200,
+    payload: createCommandResult(state, payload, quote, {
+      paymentVerification,
+      externalExecution: externalExecutionOptions.externalExecution || null
+    })
+  };
+}
+
+module.exports = {
+  executeAuthorizedCommandRequest,
+  executeCommandRequest
+};