0.9.13.2

Bridge Bootstrap (Local Dev Sidecar)

• Use the release notes we prepared (wire v0.9.13, endpoints, headers, metrics, CLI, security, performance)

Adds Hono-based local sidecar on 127.0.0.1:31415 with:

• /enforce, /verify, /health, /ready
• /metrics on :31416

Features

• Wire Protocol v0.9.13: Enforces headers and media types:

• Success: application/peac+json

• Errors: application/problem+json

• PEAC-Receipt on allow, no-store cache on sensitive responses

• Retry-After on 402 from payment extensions

• Health Check: HEAD /health, Prometheus metrics with correct content-type & quantiles, peac-version on metrics

• CLI: peac bridge install|start|stop|status, discovery via require.resolve

• Verify: Returns proper 4xx/5xx Problem+JSON on error, dynamic import safety checked in readiness (api_verifier_loaded)

• Security Hardening: Loopback-only, nosniff, same-origin CORP, no legacy x-peac headers

• Node ≥18.18, tsup target node18

• SSRF tests aligned to built artifacts

Acceptance Gates (Local)

• /enforce p95 < 5ms, adapters can discover sidecar, CPU idle < 5% @ 100 rps
• All endpoints emit peac-version: 0.9.13, correct content-types
• 402→pay→200 flow validated, verify errors return 4xx/5xx

PEAC Protocol is an open-source project stewarded by Originary