Source Verify a receipt Console

Project

Changelog

All notable changes to this project are documented here. The format is based on Keep a Changelog, and the packages follow Semantic Versioning.

Unreleased

Added

  • Console: Payments, Receipts and Audit ledger views on AG Grid Community (sort, filter, quick filter, CSV export, row detail drawer). Receipts are re-verified in the browser; each audit row's hash-chain link is recomputed client-side.
  • Channel3 product search for agents: search_products (MCP), POST /v1/agent/products/search, owner POST /v1/products/search and a console view. Results are capped at the mandate's currency and remaining budget; every search is audited (catalog.search).
  • Catalog reference price: PayPal order items with a channel3:<id> sku that cost more than 10% above Channel3's cheapest new in-stock offer are held for the user (catalog_price_above_market).
  • APIMatic project (apimatic/): OpenAPI spec with SDK-friendly operation ids and typed responses, portal config and guides; npm run apimatic:* and a CI workflow.

Changed

  • CSP img-src allows https: images (product photos in the console). Scripts and connections stay same-origin.

0.1.2 - 2026-11-03

Security and compatibility release, prompted by the M8ven MCP scan. Republished from CI with npm provenance.

Security

  • @agentguard-dev/paypal-toolkit: upgraded zod to 4.x, fixing a high-severity resource-exhaustion advisory in zod 3.25.76.

Changed

  • MCP tools (create_order, pay_order, get_payment_status) now declare all four tool annotations (readOnlyHint, destructiveHint, idempotentHint, openWorldHint), as required by OpenAI's MCP directory.
  • The toolkit supports Vercel AI SDK 4 and 5. The MCP server reports version 0.1.2.

0.1.1 - 2026-10-28

Packages republished from CI with npm provenance (signed build attestations). Package READMEs updated (badges, install commands, fixed MCP npx command). The MCP server reports version 0.1.1. No API changes.

Added

  • Documentation site at /docs (concepts, guides, API, CLI, package reference, security, FAQ) with search.
  • OpenAPI 3.1 spec at /openapi.json, tested against the server's route table.
  • Snippet tests: documented commands are executed in CI.
  • Project hygiene: SECURITY.md, CONTRIBUTING.md, CODE_OF_CONDUCT.md, issue and PR templates, CODEOWNERS, CI, CodeQL, Dependabot, tag-driven npm release with provenance.

Fixed

  • @agentguard-dev/paypal-toolkit README: the MCP npx command now installs the peer dependencies (-p … agentguard-paypal-mcp).
  • README: AGENTGUARD_PUBLIC_URL (was PUBLIC_URL); verifier README library example uses issuerKeys and an array expectedPayee.

0.1.0 - 2026-10-28

First public release of @agentguard-dev/intent-verifier and @agentguard-dev/paypal-toolkit.

Added

  • Gateway: deterministic policy engine over passkey-signed spending mandates; PayPal Orders v2 authorize-then-capture against the user's vaulted wallet; void on mismatch or revocation; idempotency, rate limits, crash recovery, operator kill-switch.
  • Merchant PayPal order as source of truth: order-id proposals, SKU allowlists, require_merchant_order.
  • WebAuthn passkeys for mandate signing, revocation and approvals of held payments; enrollment tokens; time-locked passkey recovery and re-enrollment.
  • Proof-of-Intent receipts (agentguard.proof-of-intent/v1): Ed25519-signed, RFC 3161 timestamped, with audit-anchor inclusion and cumulative spend proofs; issuer key rotation and compromise handling.
  • AP2 views (open checkout, open payment, checkout, payment mandates) derived from every receipt.
  • @agentguard-dev/intent-verifier: zero-dependency offline verifier, intent-verify CLI, AP2 checks, PayPal dispute evidence (type chosen from the dispute).
  • @agentguard-dev/paypal-toolkit: guard for PayPal's Agent Toolkit (Vercel AI SDK, OpenAI, MCP); money moves only through AgentGuard.
  • Supabase Postgres backend and Vercel deployment; owner console, receipt viewer and brand kit.

Edit this page on GitHub