jup.sh 0.1.0-alpha.7

v0.1.0-alpha.7 improves the review handoff path for agents.

When policy returns review_required, pay --json now includes both a full
Risk Review URL and a local CLI handoff command:

{
  "nextAction": "open_review",
  "reviewUrl": "https://www.jup.sh/pay/intent_xxx#intent=...",
  "reviewCommand": "npx jup-sh@alpha review intent_xxx"
}

What This Release Adds

• reviewCommand in pay --json output.
• Full reviewUrl payload in review_required pay --json output.
• reviewCommand in review --json output.
• Updated CLI JSON contract docs.
• Updated Agent Integration docs.
• Updated npm README.
• Smoke test coverage for the review handoff fields.

Why This Matters

Agents should not need to reconstruct review URLs by hand. They can create a
payment intent, branch on nextAction, and hand off the exact review path when
policy requires human review.

Current Boundary

This release is still a developer alpha. It improves handoff metadata only.
It does not call wallets, sign transactions, execute swaps, or move funds.

Not Included

• No wallet signing.
• No swap execution.
• No Solana Pay transaction request generation.
• No custody.
• No remote backend persistence.
• No authentication.
• No published SDK package.

Verification

Run the full release gate:

npm run release:check