@aastar/sdk 0.23.0 → 0.24.0

package/dist/{chunk-TM2LH4ZE.js.map → chunk-WVJ4LQVB.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../../x402/src/eip3009.ts","../../x402/src/payment-header.ts","../../x402/src/facilitator.ts","../../x402/src/X402Client.ts"],"names":[],"mappings":";;;AAEO,IAAM,aAAA,GAAgB;AAAA,EACzB,yBAAA,EAA2B;AAAA,IACvB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU,GACrC;AAAA;AAAA;AAAA,EAGA,wBAAA,EAA0B;AAAA,IACtB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU,GACrC;AAAA,EACA,mBAAA,EAAqB;AAAA,IACjB,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU;AAEzC;AAEO,SAAS,gBAAA,CAAiB,SAAA,EAAmB,YAAA,EAAsB,OAAA,EAAiB,iBAAA,EAA4B;AACnH,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,SAAA;AAAA,IACN,OAAA,EAAS,YAAA;AAAA,IACT,OAAA;AAAA,IACA;AAAA,GACJ;AACJ;AAEO,SAAS,aAAA,GAAqB;AACjC,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,KAAK,CAAA;AACvC,EAAA,OAAO,MAAM,KAAK,CAAA;AACtB;AAGO,IAAM,oBAAA,GAAuB,EAAE,IAAA,EAAM,QAAA,EAAU,SAAS,GAAA;AAE/D,eAAsB,6BAAA,CAClB,cACA,MAAA,EAYY;AACZ,EAAA,MAAM,MAAA,GAAS,gBAAA;AAAA,IACX,MAAA,CAAO,SAAA;AAAA,IACP,MAAA,CAAO,YAAA;AAAA,IACP,MAAA,CAAO,OAAA;AAAA,IACP,MAAA,CAAO;AAAA,GACX;AAEA,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AAEA,EAAA,OAAO,aAAa,aAAA,CAAc;AAAA,IAC9B,OAAA;AAAA,IACA,MAAA;AAAA,IACA,KAAA,EAAO,aAAA;AAAA,IACP,WAAA,EAAa,2BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,OAAO,MAAA,CAAO;AAAA;AAClB,GACH,CAAA;AACL;AAQA,eAAsB,mCAAA,CAClB,cACA,MAAA,EAYY;AACZ,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,QAAQ,OAAA,CAAQ,WAAA,OAAkB,MAAA,CAAO,IAAA,CAAK,aAAY,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,CAAA,OAAA,EAAU,OAAA,CAAQ,OAAO,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAI,CAAA,CAAE,CAAA;AAAA,EAClF;AAEA,EAAA,IAAI,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACzC,IAAA,MAAM,IAAI,MAAM,6CAA6C,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAA,GAAa,IAAA,EAAM;AAC/C,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,qBAAA,EAAwB,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAU,CAAA,kCAAA;AAAA,KAClE;AAAA,EACJ;AACA,EAAA,OAAO,6BAAA,CAA8B,cAAc,MAAM,CAAA;AAC7D;AAOA,eAAsB,4BAAA,CAClB,cACA,MAAA,EAYY;AACZ,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,QAAQ,OAAA,CAAQ,WAAA,OAAkB,MAAA,CAAO,IAAA,CAAK,aAAY,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,CAAA,OAAA,EAAU,OAAA,CAAQ,OAAO,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAI,CAAA,CAAE,CAAA;AAAA,EAClF;AAEA,EAAA,IAAI,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACzC,IAAA,MAAM,IAAI,MAAM,6CAA6C,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAA,GAAa,IAAA,EAAM;AAC/C,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,qBAAA,EAAwB,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAU,CAAA,kCAAA;AAAA,KAClE;AAAA,EACJ;AAEA,EAAA,OAAO,aAAa,aAAA,CAAc;AAAA,IAC9B,OAAA;AAAA,IACA,MAAA,EAAQ,iBAAiB,MAAA,CAAO,SAAA,EAAW,OAAO,YAAA,EAAc,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,iBAAiB,CAAA;AAAA,IACxG,KAAA,EAAO,aAAA;AAAA,IACP,WAAA,EAAa,0BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,OAAO,MAAA,CAAO;AAAA;AAClB,GACH,CAAA;AACL;AAMA,eAAsB,uBAAA,CAClB,cACA,MAAA,EAQY;AACZ,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,QAAQ,OAAA,CAAQ,WAAA,OAAkB,MAAA,CAAO,UAAA,CAAW,aAAY,EAAG;AACnE,IAAA,MAAM,IAAI,MAAM,CAAA,OAAA,EAAU,OAAA,CAAQ,OAAO,CAAA,2BAAA,EAA8B,MAAA,CAAO,UAAU,CAAA,CAAE,CAAA;AAAA,EAC9F;AAEA,EAAA,OAAO,aAAa,aAAA,CAAc;AAAA,IAC9B,OAAA;AAAA,IACA,MAAA,EAAQ,iBAAiB,MAAA,CAAO,SAAA,EAAW,OAAO,YAAA,EAAc,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,iBAAiB,CAAA;AAAA,IACxG,KAAA,EAAO,aAAA;AAAA,IACP,WAAA,EAAa,qBAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACL,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,OAAO,MAAA,CAAO;AAAA;AAClB,GACH,CAAA;AACL;;;AC9MO,IAAM,uBAAA,GAA0B;AAChC,IAAM,wBAAA,GAA2B;AACjC,IAAM,uBAAA,GAA0B;AAGhC,IAAM,iBAAA,GAAoB;AAC1B,IAAM,0BAAA,GAA6B;AAM1C,SAAS,SAAS,IAAA,EAAuB;AACrC,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAChC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAC/B,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EAC9C;AACA,EAAA,OAAO,KAAK,IAAI,CAAA;AACpB;AAEA,SAAS,WAAc,OAAA,EAAoB;AACvC,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAC/B,IAAA,IAAA,GAAO,OAAO,IAAA,CAAK,OAAA,EAAS,QAAQ,CAAA,CAAE,SAAS,OAAO,CAAA;AAAA,EAC1D,CAAA,MAAO;AACH,IAAA,IAAA,GAAO,KAAK,OAAO,CAAA;AAAA,EACvB;AACA,EAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAC1B;AAIO,SAAS,sBAAsB,GAAA,EAA8B;AAChE,EAAA,OAAO,SAAS,GAAG,CAAA;AACvB;AAEO,SAAS,sBAAsB,OAAA,EAAkC;AACpE,EAAA,OAAO,WAA4B,OAAO,CAAA;AAC9C;AAIO,SAAS,qBAAqB,OAAA,EAAiC;AAClE,EAAA,OAAO,SAAS,OAAO,CAAA;AAC3B;AAEO,SAAS,qBAAqB,OAAA,EAAiC;AAClE,EAAA,OAAO,WAA2B,OAAO,CAAA;AAC7C;AAIO,SAAS,qBAAqB,IAAA,EAA8B;AAC/D,EAAA,OAAO,SAAS,IAAI,CAAA;AACxB;AAEO,SAAS,qBAAqB,OAAA,EAAiC;AAClE,EAAA,OAAO,WAA2B,OAAO,CAAA;AAC7C;AAUO,SAAS,uBAAuB,QAAA,EAA4C;AAC/E,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA;AACvD,EAAA,IAAI,EAAA,EAAI,OAAO,qBAAA,CAAsB,EAAE,CAAA;AAGvC,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,oBAAoB,CAAA;AACpD,EAAA,IAAI,EAAA,EAAI,OAAO,qBAAA,CAAsB,EAAE,CAAA;AAEvC,EAAA,OAAO,IAAA;AACX;AAKO,SAAS,sBAAsB,QAAA,EAA2C;AAC7E,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA;AACvD,EAAA,IAAI,EAAA,EAAI,OAAO,oBAAA,CAAqB,EAAE,CAAA;AAEtC,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,0BAA0B,CAAA;AAC1D,EAAA,IAAI,EAAA,EAAI,OAAO,oBAAA,CAAqB,EAAE,CAAA;AAEtC,EAAA,OAAO,IAAA;AACX;;;ACnFO,IAAM,oBAAN,MAAwB;AAAA,EACV,GAAA;AAAA,EACA,iBAAA;AAAA,EAEjB,YAAY,MAAA,EAA2B;AACnC,IAAA,IAAA,CAAK,GAAA,GAAM,MAAA,CAAO,GAAA,CAAI,OAAA,CAAQ,OAAO,EAAE,CAAA;AACvC,IAAA,IAAA,CAAK,oBAAoB,MAAA,CAAO,iBAAA;AAAA,EACpC;AAAA,EAEA,MAAc,WAAW,QAAA,EAA8E;AACnG,IAAA,MAAM,IAAA,GAA+B,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAC1E,IAAA,IAAI,CAAC,IAAA,CAAK,iBAAA,EAAmB,OAAO,IAAA;AACpC,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,iBAAA,EAAkB;AAC1C,IAAA,OAAO,EAAE,GAAG,IAAA,EAAM,GAAG,IAAA,CAAK,QAAQ,CAAA,EAAE;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACF,cAAA,EACA,mBAAA,EACuB;AACvB,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,OAAA,CAAA,EAAW;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,MAAM,IAAA,CAAK,UAAA,CAAW,QAAQ,CAAA;AAAA,MACvC,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,QACjB,WAAA,EAAa,CAAA;AAAA,QACb,cAAA;AAAA,QACA;AAAA,OACH;AAAA,KACJ,CAAA;AACD,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,IAAA,CAAK,MAAM,IAAI,MAAM,IAAA,CAAK,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,IACrF;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACF,cAAA,EACA,mBAAA,EACuB;AACvB,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,OAAA,CAAA,EAAW;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,MAAM,IAAA,CAAK,UAAA,CAAW,QAAQ,CAAA;AAAA,MACvC,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,QACjB,WAAA,EAAa,CAAA;AAAA,QACb,cAAA;AAAA,QACA;AAAA,OACH;AAAA,KACJ,CAAA;AACD,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,IAAA,CAAK,MAAM,IAAI,MAAM,IAAA,CAAK,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,IACrF;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAA,GAA2C;AAC7C,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,UAAA,CAAA,EAAc;AAAA,MAC9C,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,MAAM,IAAA,CAAK,UAAA,CAAW,WAAW;AAAA,KAC7C,CAAA;AACD,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,IAAA,CAAK,MAAM,IAAI,MAAM,IAAA,CAAK,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,IACxF;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACrB;AACJ;;;ACrDA,SAAS,YAAY,OAAA,EAAqC;AACtD,EAAA,OAAO,UAAU,OAAO,CAAA,CAAA;AAC5B;AAEO,IAAM,aAAN,MAAiB;AAAA,EACH,OAAA;AAAA,EACA,MAAA;AAAA,EACA,iBAAA;AAAA,EAEjB,YAAY,MAAA,EAA0B;AAClC,IAAA,IAAI,CAAC,MAAA,CAAO,YAAA,CAAa,OAAA,EAAS;AAC9B,MAAA,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAAA,IAClE;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAEd,IAAA,IAAA,CAAK,UAAU,WAAA,CAAY,MAAA,CAAO,qBAAqB,CAAA,CAAE,OAAO,YAAY,CAAA;AAC5E,IAAA,IAAI,OAAO,WAAA,EAAa;AACpB,MAAA,IAAA,CAAK,iBAAA,GAAoB,IAAI,iBAAA,CAAkB,MAAA,CAAO,WAAW,CAAA;AAAA,IACrE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,cAAc,MAAA,EAIjB;AACC,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,IAAS,aAAA,EAAc;AAC5C,IAAA,MAAM,GAAA,GAAM,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,GAAA,EAAI,GAAI,GAAI,CAAC,CAAA;AAChD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAe,GAAA,GAAM,IAAA;AAC/C,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,WAAA,IAAgB,GAAA,GAAM,KAAA;AACjD,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,SAAA,IAAa,MAAA;AAC3C,IAAA,MAAM,YAAA,GAAe,IAAA,CAAK,MAAA,CAAO,YAAA,IAAgB,GAAA;AAEjD,IAAA,MAAM,SAAA,GAAY,MAAM,6BAAA,CAA8B,IAAA,CAAK,OAAO,YAAA,EAAc;AAAA,MAC5E,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,MAAA;AAAA,MACd,UAAA;AAAA,MACA,WAAA;AAAA,MACA,KAAA;AAAA,MACA,SAAA;AAAA,MACA,YAAA;AAAA,MACA,OAAA,EAAS,KAAK,MAAA,CAAO,OAAA;AAAA,MACrB,mBAAmB,MAAA,CAAO;AAAA,KAC7B,CAAA;AAED,IAAA,MAAM,OAAA,GAA0B;AAAA,MAC5B,WAAA,EAAa,CAAA;AAAA,MACb,QAAA,EAAU;AAAA,QACN,MAAA,EAAQ,OAAA;AAAA,QACR,OAAA,EAAS,WAAA,CAAY,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA;AAAA,QACxC,OAAO,MAAA,CAAO,KAAA;AAAA,QACd,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,QAAA,EAAS;AAAA,QAC/B,OAAO,MAAA,CAAO,EAAA;AAAA,QACd,iBAAA,EAAmB,IAAA;AAAA,QACnB,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAW,SAAS,YAAA;AAAa,OACpD;AAAA,MACA,OAAA,EAAS;AAAA,QACL,SAAA;AAAA,QACA,aAAA,EAAe;AAAA,UACX,MAAM,MAAA,CAAO,IAAA;AAAA,UACb,IAAI,MAAA,CAAO,EAAA;AAAA,UACX,KAAA,EAAO,MAAA,CAAO,MAAA,CAAO,QAAA,EAAS;AAAA,UAC9B,UAAA,EAAY,WAAW,QAAA,EAAS;AAAA,UAChC,WAAA,EAAa,YAAY,QAAA,EAAS;AAAA,UAClC;AAAA;AACJ;AACJ,KACJ;AAEA,IAAA,OAAO;AAAA,MACH,OAAA;AAAA,MACA,OAAA,EAAS,qBAAqB,OAAO,CAAA;AAAA,MACrC;AAAA,KACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,cAAc,MAAA,EAGH;AACb,IAAA,OAAO,IAAA,CAAK,QAAQ,iBAAA,CAAkB;AAAA,MAClC,GAAG,MAAA;AAAA,MACH,OAAA,EAAS,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa;AAAA,KACrC,CAAA;AAAA,EACL;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,oBAAoB,MAAA,EAET;AACb,IAAA,OAAO,IAAA,CAAK,QAAQ,uBAAA,CAAwB;AAAA,MACxC,GAAG,MAAA;AAAA,MACH,OAAA,EAAS,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa;AAAA,KACrC,CAAA;AAAA,EACL;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAA,GAAwC;AAC1C,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,OAAA,CAAQ,iBAAA,EAAkB;AACpD,IAAA,OAAO,EAAE,MAAA,EAAO;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,WAAW,KAAA,EAA8B;AAC3C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,oBAAA,CAAqB,EAAE,OAAO,CAAA;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBAAA,CAAqB,OAAA,EAAyB,YAAA,EAA4D;AAC5G,IAAA,IAAI,CAAC,KAAK,iBAAA,EAAmB;AACzB,MAAA,MAAM,IAAI,MAAM,+EAA+E,CAAA;AAAA,IACnG;AACA,IAAA,OAAO,IAAA,CAAK,iBAAA,CAAkB,MAAA,CAAO,OAAA,EAAS,YAAY,CAAA;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,SAAA,CAAU,GAAA,EAAa,IAAA,EAAuC;AAChE,IAAA,MAAM,aAAA,GAAgB,MAAM,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAE3C,IAAA,IAAI,aAAA,CAAc,WAAW,GAAA,EAAK;AAC9B,MAAA,OAAO,aAAA;AAAA,IACX;AAIA,IAAA,MAAM,eAAA,GAAkB,uBAAuB,aAAa,CAAA;AAC5D,IAAA,IAAI,CAAC,eAAA,IAAmB,CAAC,eAAA,CAAgB,SAAS,MAAA,EAAQ;AACtD,MAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,IACnF;AAGA,IAAA,MAAM,SAAA,GAAY,WAAA,CAAY,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA;AACjD,IAAA,IAAI,QAAA,GAAW,gBAAgB,OAAA,CAAQ,IAAA;AAAA,MACnC,CAAC,CAAA,KAAM,CAAA,CAAE,OAAA,KAAY,SAAA,IAAa,EAAE,MAAA,KAAW;AAAA,KACnD;AACA,IAAA,IAAI,CAAC,QAAA,EAAU;AAEX,MAAA,QAAA,GAAW,eAAA,CAAgB,QAAQ,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,OAAA,CAAQ,UAAA,CAAW,SAAS,CAAC,CAAA;AAAA,IAClF;AACA,IAAA,IAAI,CAAC,QAAA,EAAU;AACX,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yCAAA,EAA4C,SAAS,CAAA,CAAE,CAAA;AAAA,IAC3E;AAGA,IAAA,IAAI,IAAA,CAAK,OAAO,mBAAA,IAAuB,MAAA,CAAO,SAAS,MAAM,CAAA,GAAI,IAAA,CAAK,MAAA,CAAO,mBAAA,EAAqB;AAC9F,MAAA,MAAM,IAAI,KAAA;AAAA,QACN,kBAAkB,QAAA,CAAS,MAAM,CAAA,aAAA,EAAgB,IAAA,CAAK,OAAO,mBAAmB,CAAA;AAAA,OACpF;AAAA,IACJ;AAEA,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa,OAAA;AACzC,IAAA,IAAI,CAAC,OAAA,EAAS;AACV,MAAA,MAAM,IAAI,MAAM,yDAAyD,CAAA;AAAA,IAC7E;AAGA,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,MAAM,KAAK,aAAA,CAAc;AAAA,MACzC,MAAM,OAAA,CAAQ,OAAA;AAAA,MACd,IAAI,QAAA,CAAS,KAAA;AAAA,MACb,OAAO,QAAA,CAAS,KAAA;AAAA,MAChB,MAAA,EAAQ,MAAA,CAAO,QAAA,CAAS,MAAM;AAAA,KACjC,CAAA;AAGD,IAAA,MAAM,YAAA,GAAe,IAAI,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAC9C,IAAA,YAAA,CAAa,GAAA,CAAI,0BAA0B,OAAO,CAAA;AAElD,IAAA,OAAO,MAAM,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,OAAA,EAAS,cAAc,CAAA;AAAA,EACxD;AACJ","file":"chunk-TM2LH4ZE.js","sourcesContent":["import { type Address, type Hex, type WalletClient, toHex } from 'viem';\n\nexport const EIP3009_TYPES = {\n    TransferWithAuthorization: [\n        { name: 'from', type: 'address' },\n        { name: 'to', type: 'address' },\n        { name: 'value', type: 'uint256' },\n        { name: 'validAfter', type: 'uint256' },\n        { name: 'validBefore', type: 'uint256' },\n        { name: 'nonce', type: 'bytes32' },\n    ],\n    // Distinct typehash from TransferWithAuthorization — prevents replay across variants.\n    // msg.sender must equal `to` on-chain (CallerMustBeRecipient error if violated).\n    ReceiveWithAuthorization: [\n        { name: 'from', type: 'address' },\n        { name: 'to', type: 'address' },\n        { name: 'value', type: 'uint256' },\n        { name: 'validAfter', type: 'uint256' },\n        { name: 'validBefore', type: 'uint256' },\n        { name: 'nonce', type: 'bytes32' },\n    ],\n    CancelAuthorization: [\n        { name: 'authorizer', type: 'address' },\n        { name: 'nonce', type: 'bytes32' },\n    ],\n} as const;\n\nexport function getEIP3009Domain(tokenName: string, tokenVersion: string, chainId: number, verifyingContract: Address) {\n    return {\n        name: tokenName,\n        version: tokenVersion,\n        chainId,\n        verifyingContract,\n    };\n}\n\nexport function generateNonce(): Hex {\n    const bytes = new Uint8Array(32);\n    globalThis.crypto.getRandomValues(bytes);\n    return toHex(bytes);\n}\n\n// GToken EIP-712 domain constants (GTokenAuthorization v2.2.0)\nexport const GTOKEN_EIP712_DOMAIN = { name: 'GToken', version: '1' } as const;\n\nexport async function signTransferWithAuthorization(\n    walletClient: WalletClient,\n    params: {\n        from: Address;\n        to: Address;\n        value: bigint;\n        validAfter: bigint;\n        validBefore: bigint;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const domain = getEIP3009Domain(\n        params.tokenName,\n        params.tokenVersion,\n        params.chainId,\n        params.verifyingContract\n    );\n\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n\n    return walletClient.signTypedData({\n        account,\n        domain,\n        types: EIP3009_TYPES,\n        primaryType: 'TransferWithAuthorization',\n        message: {\n            from: params.from,\n            to: params.to,\n            value: params.value,\n            validAfter: params.validAfter,\n            validBefore: params.validBefore,\n            nonce: params.nonce,\n        },\n    });\n}\n\n/**\n * Sign a TransferWithAuthorization for GTokenAuthorization (EIP-3009).\n * GToken-specific wrapper: enforces MAX_AUTH_VALIDITY = 300s before signing.\n * Use this instead of the generic signTransferWithAuthorization when the\n * verifying contract is GTokenAuthorization.\n */\nexport async function signGTokenTransferWithAuthorization(\n    walletClient: WalletClient,\n    params: {\n        from: Address;\n        to: Address;\n        value: bigint;\n        validAfter: bigint;\n        validBefore: bigint;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n    if (account.address.toLowerCase() !== params.from.toLowerCase()) {\n        throw new Error(`Signer ${account.address} does not match from ${params.from}`);\n    }\n    // GTokenAuthorization enforces MAX_AUTH_VALIDITY = 300s on-chain.\n    if (params.validBefore <= params.validAfter) {\n        throw new Error('validBefore must be greater than validAfter');\n    }\n    if (params.validBefore - params.validAfter > 300n) {\n        throw new Error(\n            `Authorization window ${params.validBefore - params.validAfter}s exceeds MAX_AUTH_VALIDITY (300s)`\n        );\n    }\n    return signTransferWithAuthorization(walletClient, params);\n}\n\n/**\n * Sign a ReceiveWithAuthorization for GTokenAuthorization (EIP-3009).\n * The signed `to` address must be the one submitting the transaction on-chain.\n * Note: `xPNTsToken` is NOT included in the signature (it's a relay-supplied hint for RC-2).\n */\nexport async function signReceiveWithAuthorization(\n    walletClient: WalletClient,\n    params: {\n        from: Address;\n        to: Address;\n        value: bigint;\n        validAfter: bigint;\n        validBefore: bigint;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n    if (account.address.toLowerCase() !== params.from.toLowerCase()) {\n        throw new Error(`Signer ${account.address} does not match from ${params.from}`);\n    }\n    // GTokenAuthorization enforces MAX_AUTH_VALIDITY = 300s on-chain (RC-1).\n    if (params.validBefore <= params.validAfter) {\n        throw new Error('validBefore must be greater than validAfter');\n    }\n    if (params.validBefore - params.validAfter > 300n) {\n        throw new Error(\n            `Authorization window ${params.validBefore - params.validAfter}s exceeds MAX_AUTH_VALIDITY (300s)`\n        );\n    }\n\n    return walletClient.signTypedData({\n        account,\n        domain: getEIP3009Domain(params.tokenName, params.tokenVersion, params.chainId, params.verifyingContract),\n        types: EIP3009_TYPES,\n        primaryType: 'ReceiveWithAuthorization',\n        message: {\n            from: params.from,\n            to: params.to,\n            value: params.value,\n            validAfter: params.validAfter,\n            validBefore: params.validBefore,\n            nonce: params.nonce,\n        },\n    });\n}\n\n/**\n * Sign a CancelAuthorization for GTokenAuthorization (EIP-3009).\n * Must be signed by the original `authorizer` address.\n */\nexport async function signCancelAuthorization(\n    walletClient: WalletClient,\n    params: {\n        authorizer: Address;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n    if (account.address.toLowerCase() !== params.authorizer.toLowerCase()) {\n        throw new Error(`Signer ${account.address} does not match authorizer ${params.authorizer}`);\n    }\n\n    return walletClient.signTypedData({\n        account,\n        domain: getEIP3009Domain(params.tokenName, params.tokenVersion, params.chainId, params.verifyingContract),\n        types: EIP3009_TYPES,\n        primaryType: 'CancelAuthorization',\n        message: {\n            authorizer: params.authorizer,\n            nonce: params.nonce,\n        },\n    });\n}\n","import type { PaymentRequired, PaymentPayload, SettleResponse } from './types.js';\n\n// ============================================================\n// x402 v2 HTTP Header Names\n// Ref: github.com/coinbase/x402/blob/main/specs/x402-specification-v2.md\n// ============================================================\n\n/** v2 header names (standard) */\nexport const HEADER_PAYMENT_REQUIRED = 'PAYMENT-REQUIRED';\nexport const HEADER_PAYMENT_SIGNATURE = 'PAYMENT-SIGNATURE';\nexport const HEADER_PAYMENT_RESPONSE = 'PAYMENT-RESPONSE';\n\n/** v1 header names (backward compat) */\nexport const HEADER_V1_PAYMENT = 'X-PAYMENT';\nexport const HEADER_V1_PAYMENT_RESPONSE = 'X-PAYMENT-RESPONSE';\n\n// ============================================================\n// Encoding / Decoding (Base64 JSON — per x402 spec)\n// ============================================================\n\nfunction toBase64(data: unknown): string {\n    const json = JSON.stringify(data);\n    if (typeof Buffer !== 'undefined') {\n        return Buffer.from(json).toString('base64');\n    }\n    return btoa(json);\n}\n\nfunction fromBase64<T>(encoded: string): T {\n    let json: string;\n    if (typeof Buffer !== 'undefined') {\n        json = Buffer.from(encoded, 'base64').toString('utf-8');\n    } else {\n        json = atob(encoded);\n    }\n    return JSON.parse(json) as T;\n}\n\n// --- PaymentRequired (402 response) ---\n\nexport function encodePaymentRequired(req: PaymentRequired): string {\n    return toBase64(req);\n}\n\nexport function decodePaymentRequired(encoded: string): PaymentRequired {\n    return fromBase64<PaymentRequired>(encoded);\n}\n\n// --- PaymentPayload (client → server) ---\n\nexport function encodePaymentPayload(payload: PaymentPayload): string {\n    return toBase64(payload);\n}\n\nexport function decodePaymentPayload(encoded: string): PaymentPayload {\n    return fromBase64<PaymentPayload>(encoded);\n}\n\n// --- SettleResponse (server → client) ---\n\nexport function encodeSettleResponse(resp: SettleResponse): string {\n    return toBase64(resp);\n}\n\nexport function decodeSettleResponse(encoded: string): SettleResponse {\n    return fromBase64<SettleResponse>(encoded);\n}\n\n// ============================================================\n// Header Extraction Helpers\n// ============================================================\n\n/**\n * Extract PaymentRequired from a 402 Response.\n * Tries v2 header first, falls back to v1.\n */\nexport function extractPaymentRequired(response: Response): PaymentRequired | null {\n    const v2 = response.headers.get(HEADER_PAYMENT_REQUIRED);\n    if (v2) return decodePaymentRequired(v2);\n\n    // v1 fallback: check body or X-PAYMENT-REQUIRED\n    const v1 = response.headers.get('X-PAYMENT-REQUIRED');\n    if (v1) return decodePaymentRequired(v1);\n\n    return null;\n}\n\n/**\n * Extract SettleResponse from a successful response.\n */\nexport function extractSettleResponse(response: Response): SettleResponse | null {\n    const v2 = response.headers.get(HEADER_PAYMENT_RESPONSE);\n    if (v2) return decodeSettleResponse(v2);\n\n    const v1 = response.headers.get(HEADER_V1_PAYMENT_RESPONSE);\n    if (v1) return decodeSettleResponse(v1);\n\n    return null;\n}\n","import type {\n    PaymentPayload,\n    PaymentRequirements,\n    VerifyResponse,\n    SettleResponse,\n    FacilitatorSupported,\n    FacilitatorConfig,\n} from './types.js';\n\n/**\n * HTTP Facilitator Client — standard x402 v2 facilitator API.\n * Compatible with Coinbase hosted facilitator and self-hosted instances.\n *\n * Ref: coinbase/x402 HTTPFacilitatorClient pattern\n */\nexport class FacilitatorClient {\n    private readonly url: string;\n    private readonly createAuthHeaders: FacilitatorConfig['createAuthHeaders'];\n\n    constructor(config: FacilitatorConfig) {\n        this.url = config.url.replace(/\\/$/, '');\n        this.createAuthHeaders = config.createAuthHeaders;\n    }\n\n    private async getHeaders(endpoint: 'verify' | 'settle' | 'supported'): Promise<Record<string, string>> {\n        const base: Record<string, string> = { 'Content-Type': 'application/json' };\n        if (!this.createAuthHeaders) return base;\n        const auth = await this.createAuthHeaders();\n        return { ...base, ...auth[endpoint] };\n    }\n\n    /**\n     * POST /verify — validate payment signature off-chain (~100ms).\n     */\n    async verify(\n        paymentPayload: PaymentPayload,\n        paymentRequirements: PaymentRequirements,\n    ): Promise<VerifyResponse> {\n        const resp = await fetch(`${this.url}/verify`, {\n            method: 'POST',\n            headers: await this.getHeaders('verify'),\n            body: JSON.stringify({\n                x402Version: 2,\n                paymentPayload,\n                paymentRequirements,\n            }),\n        });\n        if (!resp.ok) {\n            throw new Error(`Facilitator /verify failed: ${resp.status} ${await resp.text()}`);\n        }\n        return resp.json() as Promise<VerifyResponse>;\n    }\n\n    /**\n     * POST /settle — execute on-chain settlement (~2s on Base).\n     */\n    async settle(\n        paymentPayload: PaymentPayload,\n        paymentRequirements: PaymentRequirements,\n    ): Promise<SettleResponse> {\n        const resp = await fetch(`${this.url}/settle`, {\n            method: 'POST',\n            headers: await this.getHeaders('settle'),\n            body: JSON.stringify({\n                x402Version: 2,\n                paymentPayload,\n                paymentRequirements,\n            }),\n        });\n        if (!resp.ok) {\n            throw new Error(`Facilitator /settle failed: ${resp.status} ${await resp.text()}`);\n        }\n        return resp.json() as Promise<SettleResponse>;\n    }\n\n    /**\n     * GET /supported — query facilitator capabilities.\n     */\n    async supported(): Promise<FacilitatorSupported> {\n        const resp = await fetch(`${this.url}/supported`, {\n            method: 'GET',\n            headers: await this.getHeaders('supported'),\n        });\n        if (!resp.ok) {\n            throw new Error(`Facilitator /supported failed: ${resp.status} ${await resp.text()}`);\n        }\n        return resp.json() as Promise<FacilitatorSupported>;\n    }\n}\n","import { type Address, type Hex, type Hash, type PublicClient, type WalletClient } from 'viem';\nimport { x402Actions } from '@aastar/core';\nimport type {\n    X402PaymentParams, PaymentRequired, PaymentPayload,\n    PaymentRequirements, SettleResponse, FacilitatorConfig,\n} from './types.js';\nimport { signTransferWithAuthorization, generateNonce } from './eip3009.js';\nimport {\n    encodePaymentPayload,\n    extractPaymentRequired,\n    extractSettleResponse,\n    HEADER_PAYMENT_SIGNATURE,\n} from './payment-header.js';\nimport { FacilitatorClient } from './facilitator.js';\n\n// ============================================================\n// x402 Client — aligned with @x402/fetch + @x402/core patterns\n// Ref: coinbase/x402, Cloudflare Workers x402, MPP mppx\n// ============================================================\n\nexport type X402ClientConfig = {\n    publicClient: PublicClient;\n    walletClient: WalletClient;\n    superPaymasterAddress: Address;\n    chainId: number;\n    /** Facilitator endpoint (default: self-facilitated via SuperPaymaster) */\n    facilitator?: FacilitatorConfig;\n    /** EIP-712 domain for asset token (defaults: USDC / version \"2\") */\n    tokenName?: string;\n    tokenVersion?: string;\n    /** Payment policy: max amount per request (in atomic units) */\n    maxAmountPerRequest?: bigint;\n};\n\n/** CAIP-2 network identifier from chainId */\nfunction toNetworkId(chainId: number): `eip155:${number}` {\n    return `eip155:${chainId}`;\n}\n\nexport class X402Client {\n    private readonly actions;\n    private readonly config: X402ClientConfig;\n    private readonly facilitatorClient?: FacilitatorClient;\n\n    constructor(config: X402ClientConfig) {\n        if (!config.walletClient.account) {\n            throw new Error('WalletClient must have an account configured');\n        }\n        this.config = config;\n        // walletClient supports both readContract and writeContract — single instance suffices\n        this.actions = x402Actions(config.superPaymasterAddress)(config.walletClient);\n        if (config.facilitator) {\n            this.facilitatorClient = new FacilitatorClient(config.facilitator);\n        }\n    }\n\n    /**\n     * Create a signed payment payload (EIP-3009 TransferWithAuthorization).\n     * Returns a base64-encoded PaymentPayload ready for PAYMENT-SIGNATURE header.\n     */\n    async createPayment(params: X402PaymentParams): Promise<{\n        payload: PaymentPayload;\n        encoded: string;\n        nonce: Hex;\n    }> {\n        const nonce = params.nonce || generateNonce();\n        const now = BigInt(Math.floor(Date.now() / 1000));\n        const validAfter = params.validAfter ?? (now - 600n); // 10 min grace (per x402 spec)\n        const validBefore = params.validBefore ?? (now + 3600n);\n        const tokenName = this.config.tokenName || 'USDC';\n        const tokenVersion = this.config.tokenVersion || '2';\n\n        const signature = await signTransferWithAuthorization(this.config.walletClient, {\n            from: params.from,\n            to: params.to,\n            value: params.amount,\n            validAfter,\n            validBefore,\n            nonce,\n            tokenName,\n            tokenVersion,\n            chainId: this.config.chainId,\n            verifyingContract: params.asset,\n        });\n\n        const payload: PaymentPayload = {\n            x402Version: 2,\n            accepted: {\n                scheme: 'exact',\n                network: toNetworkId(this.config.chainId),\n                asset: params.asset,\n                amount: params.amount.toString(),\n                payTo: params.to,\n                maxTimeoutSeconds: 3600,\n                extra: { name: tokenName, version: tokenVersion },\n            },\n            payload: {\n                signature,\n                authorization: {\n                    from: params.from,\n                    to: params.to,\n                    value: params.amount.toString(),\n                    validAfter: validAfter.toString(),\n                    validBefore: validBefore.toString(),\n                    nonce,\n                },\n            },\n        };\n\n        return {\n            payload,\n            encoded: encodePaymentPayload(payload),\n            nonce,\n        };\n    }\n\n    /**\n     * Settle payment on-chain via SuperPaymaster (self-facilitated).\n     * Uses EIP-3009 transferWithAuthorization path.\n     */\n    async settleOnChain(params: {\n        from: Address; to: Address; asset: Address; amount: bigint;\n        validAfter: bigint; validBefore: bigint; nonce: Hex; signature: Hex;\n    }): Promise<Hex> {\n        return this.actions.settleX402Payment({\n            ...params,\n            account: this.config.walletClient.account!,\n        });\n    }\n\n    /**\n     * Settle payment on-chain via direct transfer (for xPNTs and pre-approved tokens).\n     */\n    async settleDirectOnChain(params: {\n        from: Address; to: Address; asset: Address; amount: bigint; nonce: Hex;\n    }): Promise<Hex> {\n        return this.actions.settleX402PaymentDirect({\n            ...params,\n            account: this.config.walletClient.account!,\n        });\n    }\n\n    /**\n     * Get facilitator fee quote from on-chain contract.\n     */\n    async getQuote(): Promise<{ feeBPS: bigint }> {\n        const feeBPS = await this.actions.facilitatorFeeBPS();\n        return { feeBPS };\n    }\n\n    /**\n     * Check if a nonce has been used.\n     */\n    async checkNonce(nonce: Hex): Promise<boolean> {\n        return this.actions.x402SettlementNonces({ nonce });\n    }\n\n    /**\n     * Settle via external facilitator (Coinbase, self-hosted, etc.).\n     * Requires facilitator config in constructor.\n     */\n    async settleViaFacilitator(payload: PaymentPayload, requirements: PaymentRequirements): Promise<SettleResponse> {\n        if (!this.facilitatorClient) {\n            throw new Error('No facilitator configured. Pass facilitator config to X402Client constructor.');\n        }\n        return this.facilitatorClient.settle(payload, requirements);\n    }\n\n    /**\n     * x402-aware fetch wrapper.\n     * Automatically handles 402 → sign → retry flow per x402 v2 spec.\n     *\n     * Pattern from: @x402/fetch wrapFetchWithPayment\n     *\n     * Flow:\n     * 1. Make initial request\n     * 2. If 402, extract PaymentRequired from PAYMENT-REQUIRED header\n     * 3. Select best payment option (applies policy: max amount check)\n     * 4. Sign EIP-3009 authorization\n     * 5. Retry with PAYMENT-SIGNATURE header\n     */\n    async x402Fetch(url: string, init?: RequestInit): Promise<Response> {\n        const firstResponse = await fetch(url, init);\n\n        if (firstResponse.status !== 402) {\n            return firstResponse;\n        }\n\n        // Step 2: Extract payment requirements\n        // TODO: some server implementations put PaymentRequired in the response body instead of headers\n        const paymentRequired = extractPaymentRequired(firstResponse);\n        if (!paymentRequired || !paymentRequired.accepts?.length) {\n            throw new Error('402 response missing PAYMENT-REQUIRED header or empty accepts');\n        }\n\n        // Step 3: Select payment option (filter by network + policy)\n        const myNetwork = toNetworkId(this.config.chainId);\n        let selected = paymentRequired.accepts.find(\n            (a) => a.network === myNetwork && a.scheme === 'exact'\n        );\n        if (!selected) {\n            // Fallback: any EVM option\n            selected = paymentRequired.accepts.find((a) => a.network.startsWith('eip155:'));\n        }\n        if (!selected) {\n            throw new Error(`No compatible payment option for network ${myNetwork}`);\n        }\n\n        // Policy check: max amount\n        if (this.config.maxAmountPerRequest && BigInt(selected.amount) > this.config.maxAmountPerRequest) {\n            throw new Error(\n                `Payment amount ${selected.amount} exceeds max ${this.config.maxAmountPerRequest}`\n            );\n        }\n\n        const account = this.config.walletClient.account;\n        if (!account) {\n            throw new Error('WalletClient must have an account for automatic payment');\n        }\n\n        // Step 4: Sign\n        const { encoded } = await this.createPayment({\n            from: account.address,\n            to: selected.payTo,\n            asset: selected.asset as Address,\n            amount: BigInt(selected.amount),\n        });\n\n        // Step 5: Retry with payment signature\n        const retryHeaders = new Headers(init?.headers);\n        retryHeaders.set(HEADER_PAYMENT_SIGNATURE, encoded);\n\n        return fetch(url, { ...init, headers: retryHeaders });\n    }\n}\n"]}
+{"version":3,"sources":["../../x402/src/eip3009.ts","../../x402/src/payment-header.ts","../../x402/src/facilitator.ts","../../x402/src/X402Client.ts"],"names":[],"mappings":";;;AAEO,IAAM,aAAA,GAAgB;AAAA,EACzB,yBAAA,EAA2B;AAAA,IACvB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU,GACrC;AAAA;AAAA;AAAA,EAGA,wBAAA,EAA0B;AAAA,IACtB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU,GACrC;AAAA,EACA,mBAAA,EAAqB;AAAA,IACjB,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU;AAEzC;AAEO,SAAS,gBAAA,CAAiB,SAAA,EAAmB,YAAA,EAAsB,OAAA,EAAiB,iBAAA,EAA4B;AACnH,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,SAAA;AAAA,IACN,OAAA,EAAS,YAAA;AAAA,IACT,OAAA;AAAA,IACA;AAAA,GACJ;AACJ;AAEO,SAAS,aAAA,GAAqB;AACjC,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,KAAK,CAAA;AACvC,EAAA,OAAO,MAAM,KAAK,CAAA;AACtB;AAGO,IAAM,oBAAA,GAAuB,EAAE,IAAA,EAAM,QAAA,EAAU,SAAS,GAAA;AAE/D,eAAsB,6BAAA,CAClB,cACA,MAAA,EAYY;AACZ,EAAA,MAAM,MAAA,GAAS,gBAAA;AAAA,IACX,MAAA,CAAO,SAAA;AAAA,IACP,MAAA,CAAO,YAAA;AAAA,IACP,MAAA,CAAO,OAAA;AAAA,IACP,MAAA,CAAO;AAAA,GACX;AAEA,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AAEA,EAAA,OAAO,aAAa,aAAA,CAAc;AAAA,IAC9B,OAAA;AAAA,IACA,MAAA;AAAA,IACA,KAAA,EAAO,aAAA;AAAA,IACP,WAAA,EAAa,2BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,OAAO,MAAA,CAAO;AAAA;AAClB,GACH,CAAA;AACL;AAQA,eAAsB,mCAAA,CAClB,cACA,MAAA,EAYY;AACZ,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,QAAQ,OAAA,CAAQ,WAAA,OAAkB,MAAA,CAAO,IAAA,CAAK,aAAY,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,CAAA,OAAA,EAAU,OAAA,CAAQ,OAAO,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAI,CAAA,CAAE,CAAA;AAAA,EAClF;AAEA,EAAA,IAAI,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACzC,IAAA,MAAM,IAAI,MAAM,6CAA6C,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAA,GAAa,IAAA,EAAM;AAC/C,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,qBAAA,EAAwB,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAU,CAAA,kCAAA;AAAA,KAClE;AAAA,EACJ;AACA,EAAA,OAAO,6BAAA,CAA8B,cAAc,MAAM,CAAA;AAC7D;AAOA,eAAsB,4BAAA,CAClB,cACA,MAAA,EAYY;AACZ,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,QAAQ,OAAA,CAAQ,WAAA,OAAkB,MAAA,CAAO,IAAA,CAAK,aAAY,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,CAAA,OAAA,EAAU,OAAA,CAAQ,OAAO,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAI,CAAA,CAAE,CAAA;AAAA,EAClF;AAEA,EAAA,IAAI,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACzC,IAAA,MAAM,IAAI,MAAM,6CAA6C,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAA,GAAa,IAAA,EAAM;AAC/C,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,qBAAA,EAAwB,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAU,CAAA,kCAAA;AAAA,KAClE;AAAA,EACJ;AAEA,EAAA,OAAO,aAAa,aAAA,CAAc;AAAA,IAC9B,OAAA;AAAA,IACA,MAAA,EAAQ,iBAAiB,MAAA,CAAO,SAAA,EAAW,OAAO,YAAA,EAAc,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,iBAAiB,CAAA;AAAA,IACxG,KAAA,EAAO,aAAA;AAAA,IACP,WAAA,EAAa,0BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,OAAO,MAAA,CAAO;AAAA;AAClB,GACH,CAAA;AACL;AAMA,eAAsB,uBAAA,CAClB,cACA,MAAA,EAQY;AACZ,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,QAAQ,OAAA,CAAQ,WAAA,OAAkB,MAAA,CAAO,UAAA,CAAW,aAAY,EAAG;AACnE,IAAA,MAAM,IAAI,MAAM,CAAA,OAAA,EAAU,OAAA,CAAQ,OAAO,CAAA,2BAAA,EAA8B,MAAA,CAAO,UAAU,CAAA,CAAE,CAAA;AAAA,EAC9F;AAEA,EAAA,OAAO,aAAa,aAAA,CAAc;AAAA,IAC9B,OAAA;AAAA,IACA,MAAA,EAAQ,iBAAiB,MAAA,CAAO,SAAA,EAAW,OAAO,YAAA,EAAc,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,iBAAiB,CAAA;AAAA,IACxG,KAAA,EAAO,aAAA;AAAA,IACP,WAAA,EAAa,qBAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACL,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,OAAO,MAAA,CAAO;AAAA;AAClB,GACH,CAAA;AACL;;;AC9MO,IAAM,uBAAA,GAA0B;AAChC,IAAM,wBAAA,GAA2B;AACjC,IAAM,uBAAA,GAA0B;AAGhC,IAAM,iBAAA,GAAoB;AAC1B,IAAM,0BAAA,GAA6B;AAM1C,SAAS,SAAS,IAAA,EAAuB;AACrC,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAChC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAC/B,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EAC9C;AACA,EAAA,OAAO,KAAK,IAAI,CAAA;AACpB;AAEA,SAAS,WAAc,OAAA,EAAoB;AACvC,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAC/B,IAAA,IAAA,GAAO,OAAO,IAAA,CAAK,OAAA,EAAS,QAAQ,CAAA,CAAE,SAAS,OAAO,CAAA;AAAA,EAC1D,CAAA,MAAO;AACH,IAAA,IAAA,GAAO,KAAK,OAAO,CAAA;AAAA,EACvB;AACA,EAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAC1B;AAIO,SAAS,sBAAsB,GAAA,EAA8B;AAChE,EAAA,OAAO,SAAS,GAAG,CAAA;AACvB;AAEO,SAAS,sBAAsB,OAAA,EAAkC;AACpE,EAAA,OAAO,WAA4B,OAAO,CAAA;AAC9C;AAIO,SAAS,qBAAqB,OAAA,EAAiC;AAClE,EAAA,OAAO,SAAS,OAAO,CAAA;AAC3B;AAEO,SAAS,qBAAqB,OAAA,EAAiC;AAClE,EAAA,OAAO,WAA2B,OAAO,CAAA;AAC7C;AAIO,SAAS,qBAAqB,IAAA,EAA8B;AAC/D,EAAA,OAAO,SAAS,IAAI,CAAA;AACxB;AAEO,SAAS,qBAAqB,OAAA,EAAiC;AAClE,EAAA,OAAO,WAA2B,OAAO,CAAA;AAC7C;AAUO,SAAS,uBAAuB,QAAA,EAA4C;AAC/E,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA;AACvD,EAAA,IAAI,EAAA,EAAI,OAAO,qBAAA,CAAsB,EAAE,CAAA;AAGvC,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,oBAAoB,CAAA;AACpD,EAAA,IAAI,EAAA,EAAI,OAAO,qBAAA,CAAsB,EAAE,CAAA;AAEvC,EAAA,OAAO,IAAA;AACX;AAKO,SAAS,sBAAsB,QAAA,EAA2C;AAC7E,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA;AACvD,EAAA,IAAI,EAAA,EAAI,OAAO,oBAAA,CAAqB,EAAE,CAAA;AAEtC,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,0BAA0B,CAAA;AAC1D,EAAA,IAAI,EAAA,EAAI,OAAO,oBAAA,CAAqB,EAAE,CAAA;AAEtC,EAAA,OAAO,IAAA;AACX;;;ACnFO,IAAM,oBAAN,MAAwB;AAAA,EACV,GAAA;AAAA,EACA,iBAAA;AAAA,EAEjB,YAAY,MAAA,EAA2B;AACnC,IAAA,IAAA,CAAK,GAAA,GAAM,MAAA,CAAO,GAAA,CAAI,OAAA,CAAQ,OAAO,EAAE,CAAA;AACvC,IAAA,IAAA,CAAK,oBAAoB,MAAA,CAAO,iBAAA;AAAA,EACpC;AAAA,EAEA,MAAc,WAAW,QAAA,EAA8E;AACnG,IAAA,MAAM,IAAA,GAA+B,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAC1E,IAAA,IAAI,CAAC,IAAA,CAAK,iBAAA,EAAmB,OAAO,IAAA;AACpC,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,iBAAA,EAAkB;AAC1C,IAAA,OAAO,EAAE,GAAG,IAAA,EAAM,GAAG,IAAA,CAAK,QAAQ,CAAA,EAAE;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACF,cAAA,EACA,mBAAA,EACuB;AACvB,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,OAAA,CAAA,EAAW;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,MAAM,IAAA,CAAK,UAAA,CAAW,QAAQ,CAAA;AAAA,MACvC,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,QACjB,WAAA,EAAa,CAAA;AAAA,QACb,cAAA;AAAA,QACA;AAAA,OACH;AAAA,KACJ,CAAA;AACD,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,IAAA,CAAK,MAAM,IAAI,MAAM,IAAA,CAAK,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,IACrF;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACF,cAAA,EACA,mBAAA,EACuB;AACvB,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,OAAA,CAAA,EAAW;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,MAAM,IAAA,CAAK,UAAA,CAAW,QAAQ,CAAA;AAAA,MACvC,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,QACjB,WAAA,EAAa,CAAA;AAAA,QACb,cAAA;AAAA,QACA;AAAA,OACH;AAAA,KACJ,CAAA;AACD,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,IAAA,CAAK,MAAM,IAAI,MAAM,IAAA,CAAK,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,IACrF;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAA,GAA2C;AAC7C,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,UAAA,CAAA,EAAc;AAAA,MAC9C,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,MAAM,IAAA,CAAK,UAAA,CAAW,WAAW;AAAA,KAC7C,CAAA;AACD,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,IAAA,CAAK,MAAM,IAAI,MAAM,IAAA,CAAK,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,IACxF;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACrB;AACJ;;;ACrDA,SAAS,YAAY,OAAA,EAAqC;AACtD,EAAA,OAAO,UAAU,OAAO,CAAA,CAAA;AAC5B;AAEO,IAAM,aAAN,MAAiB;AAAA,EACH,OAAA;AAAA,EACA,MAAA;AAAA,EACA,iBAAA;AAAA,EAEjB,YAAY,MAAA,EAA0B;AAClC,IAAA,IAAI,CAAC,MAAA,CAAO,YAAA,CAAa,OAAA,EAAS;AAC9B,MAAA,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAAA,IAClE;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAEd,IAAA,IAAA,CAAK,UAAU,WAAA,CAAY,MAAA,CAAO,qBAAqB,CAAA,CAAE,OAAO,YAAY,CAAA;AAC5E,IAAA,IAAI,OAAO,WAAA,EAAa;AACpB,MAAA,IAAA,CAAK,iBAAA,GAAoB,IAAI,iBAAA,CAAkB,MAAA,CAAO,WAAW,CAAA;AAAA,IACrE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,cAAc,MAAA,EAIjB;AACC,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,IAAS,aAAA,EAAc;AAC5C,IAAA,MAAM,GAAA,GAAM,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,GAAA,EAAI,GAAI,GAAI,CAAC,CAAA;AAChD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAe,GAAA,GAAM,IAAA;AAC/C,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,WAAA,IAAgB,GAAA,GAAM,KAAA;AACjD,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,SAAA,IAAa,MAAA;AAC3C,IAAA,MAAM,YAAA,GAAe,IAAA,CAAK,MAAA,CAAO,YAAA,IAAgB,GAAA;AAEjD,IAAA,MAAM,SAAA,GAAY,MAAM,6BAAA,CAA8B,IAAA,CAAK,OAAO,YAAA,EAAc;AAAA,MAC5E,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,MAAA;AAAA,MACd,UAAA;AAAA,MACA,WAAA;AAAA,MACA,KAAA;AAAA,MACA,SAAA;AAAA,MACA,YAAA;AAAA,MACA,OAAA,EAAS,KAAK,MAAA,CAAO,OAAA;AAAA,MACrB,mBAAmB,MAAA,CAAO;AAAA,KAC7B,CAAA;AAED,IAAA,MAAM,OAAA,GAA0B;AAAA,MAC5B,WAAA,EAAa,CAAA;AAAA,MACb,QAAA,EAAU;AAAA,QACN,MAAA,EAAQ,OAAA;AAAA,QACR,OAAA,EAAS,WAAA,CAAY,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA;AAAA,QACxC,OAAO,MAAA,CAAO,KAAA;AAAA,QACd,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,QAAA,EAAS;AAAA,QAC/B,OAAO,MAAA,CAAO,EAAA;AAAA,QACd,iBAAA,EAAmB,IAAA;AAAA,QACnB,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAW,SAAS,YAAA;AAAa,OACpD;AAAA,MACA,OAAA,EAAS;AAAA,QACL,SAAA;AAAA,QACA,aAAA,EAAe;AAAA,UACX,MAAM,MAAA,CAAO,IAAA;AAAA,UACb,IAAI,MAAA,CAAO,EAAA;AAAA,UACX,KAAA,EAAO,MAAA,CAAO,MAAA,CAAO,QAAA,EAAS;AAAA,UAC9B,UAAA,EAAY,WAAW,QAAA,EAAS;AAAA,UAChC,WAAA,EAAa,YAAY,QAAA,EAAS;AAAA,UAClC;AAAA;AACJ;AACJ,KACJ;AAEA,IAAA,OAAO;AAAA,MACH,OAAA;AAAA,MACA,OAAA,EAAS,qBAAqB,OAAO,CAAA;AAAA,MACrC;AAAA,KACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,cAAc,MAAA,EAGH;AACb,IAAA,OAAO,IAAA,CAAK,QAAQ,iBAAA,CAAkB;AAAA,MAClC,GAAG,MAAA;AAAA,MACH,OAAA,EAAS,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa;AAAA,KACrC,CAAA;AAAA,EACL;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,oBAAoB,MAAA,EAET;AACb,IAAA,OAAO,IAAA,CAAK,QAAQ,uBAAA,CAAwB;AAAA,MACxC,GAAG,MAAA;AAAA,MACH,OAAA,EAAS,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa;AAAA,KACrC,CAAA;AAAA,EACL;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAA,GAAwC;AAC1C,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,OAAA,CAAQ,iBAAA,EAAkB;AACpD,IAAA,OAAO,EAAE,MAAA,EAAO;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,WAAW,KAAA,EAA8B;AAC3C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,oBAAA,CAAqB,EAAE,OAAO,CAAA;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBAAA,CAAqB,OAAA,EAAyB,YAAA,EAA4D;AAC5G,IAAA,IAAI,CAAC,KAAK,iBAAA,EAAmB;AACzB,MAAA,MAAM,IAAI,MAAM,+EAA+E,CAAA;AAAA,IACnG;AACA,IAAA,OAAO,IAAA,CAAK,iBAAA,CAAkB,MAAA,CAAO,OAAA,EAAS,YAAY,CAAA;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,SAAA,CAAU,GAAA,EAAa,IAAA,EAAuC;AAChE,IAAA,MAAM,aAAA,GAAgB,MAAM,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAE3C,IAAA,IAAI,aAAA,CAAc,WAAW,GAAA,EAAK;AAC9B,MAAA,OAAO,aAAA;AAAA,IACX;AAIA,IAAA,MAAM,eAAA,GAAkB,uBAAuB,aAAa,CAAA;AAC5D,IAAA,IAAI,CAAC,eAAA,IAAmB,CAAC,eAAA,CAAgB,SAAS,MAAA,EAAQ;AACtD,MAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,IACnF;AAGA,IAAA,MAAM,SAAA,GAAY,WAAA,CAAY,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA;AACjD,IAAA,IAAI,QAAA,GAAW,gBAAgB,OAAA,CAAQ,IAAA;AAAA,MACnC,CAAC,CAAA,KAAM,CAAA,CAAE,OAAA,KAAY,SAAA,IAAa,EAAE,MAAA,KAAW;AAAA,KACnD;AACA,IAAA,IAAI,CAAC,QAAA,EAAU;AAEX,MAAA,QAAA,GAAW,eAAA,CAAgB,QAAQ,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,OAAA,CAAQ,UAAA,CAAW,SAAS,CAAC,CAAA;AAAA,IAClF;AACA,IAAA,IAAI,CAAC,QAAA,EAAU;AACX,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yCAAA,EAA4C,SAAS,CAAA,CAAE,CAAA;AAAA,IAC3E;AAGA,IAAA,IAAI,IAAA,CAAK,OAAO,mBAAA,IAAuB,MAAA,CAAO,SAAS,MAAM,CAAA,GAAI,IAAA,CAAK,MAAA,CAAO,mBAAA,EAAqB;AAC9F,MAAA,MAAM,IAAI,KAAA;AAAA,QACN,kBAAkB,QAAA,CAAS,MAAM,CAAA,aAAA,EAAgB,IAAA,CAAK,OAAO,mBAAmB,CAAA;AAAA,OACpF;AAAA,IACJ;AAEA,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa,OAAA;AACzC,IAAA,IAAI,CAAC,OAAA,EAAS;AACV,MAAA,MAAM,IAAI,MAAM,yDAAyD,CAAA;AAAA,IAC7E;AAGA,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,MAAM,KAAK,aAAA,CAAc;AAAA,MACzC,MAAM,OAAA,CAAQ,OAAA;AAAA,MACd,IAAI,QAAA,CAAS,KAAA;AAAA,MACb,OAAO,QAAA,CAAS,KAAA;AAAA,MAChB,MAAA,EAAQ,MAAA,CAAO,QAAA,CAAS,MAAM;AAAA,KACjC,CAAA;AAGD,IAAA,MAAM,YAAA,GAAe,IAAI,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAC9C,IAAA,YAAA,CAAa,GAAA,CAAI,0BAA0B,OAAO,CAAA;AAElD,IAAA,OAAO,MAAM,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,OAAA,EAAS,cAAc,CAAA;AAAA,EACxD;AACJ","file":"chunk-WVJ4LQVB.js","sourcesContent":["import { type Address, type Hex, type WalletClient, toHex } from 'viem';\n\nexport const EIP3009_TYPES = {\n    TransferWithAuthorization: [\n        { name: 'from', type: 'address' },\n        { name: 'to', type: 'address' },\n        { name: 'value', type: 'uint256' },\n        { name: 'validAfter', type: 'uint256' },\n        { name: 'validBefore', type: 'uint256' },\n        { name: 'nonce', type: 'bytes32' },\n    ],\n    // Distinct typehash from TransferWithAuthorization — prevents replay across variants.\n    // msg.sender must equal `to` on-chain (CallerMustBeRecipient error if violated).\n    ReceiveWithAuthorization: [\n        { name: 'from', type: 'address' },\n        { name: 'to', type: 'address' },\n        { name: 'value', type: 'uint256' },\n        { name: 'validAfter', type: 'uint256' },\n        { name: 'validBefore', type: 'uint256' },\n        { name: 'nonce', type: 'bytes32' },\n    ],\n    CancelAuthorization: [\n        { name: 'authorizer', type: 'address' },\n        { name: 'nonce', type: 'bytes32' },\n    ],\n} as const;\n\nexport function getEIP3009Domain(tokenName: string, tokenVersion: string, chainId: number, verifyingContract: Address) {\n    return {\n        name: tokenName,\n        version: tokenVersion,\n        chainId,\n        verifyingContract,\n    };\n}\n\nexport function generateNonce(): Hex {\n    const bytes = new Uint8Array(32);\n    globalThis.crypto.getRandomValues(bytes);\n    return toHex(bytes);\n}\n\n// GToken EIP-712 domain constants (GTokenAuthorization v2.2.0)\nexport const GTOKEN_EIP712_DOMAIN = { name: 'GToken', version: '1' } as const;\n\nexport async function signTransferWithAuthorization(\n    walletClient: WalletClient,\n    params: {\n        from: Address;\n        to: Address;\n        value: bigint;\n        validAfter: bigint;\n        validBefore: bigint;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const domain = getEIP3009Domain(\n        params.tokenName,\n        params.tokenVersion,\n        params.chainId,\n        params.verifyingContract\n    );\n\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n\n    return walletClient.signTypedData({\n        account,\n        domain,\n        types: EIP3009_TYPES,\n        primaryType: 'TransferWithAuthorization',\n        message: {\n            from: params.from,\n            to: params.to,\n            value: params.value,\n            validAfter: params.validAfter,\n            validBefore: params.validBefore,\n            nonce: params.nonce,\n        },\n    });\n}\n\n/**\n * Sign a TransferWithAuthorization for GTokenAuthorization (EIP-3009).\n * GToken-specific wrapper: enforces MAX_AUTH_VALIDITY = 300s before signing.\n * Use this instead of the generic signTransferWithAuthorization when the\n * verifying contract is GTokenAuthorization.\n */\nexport async function signGTokenTransferWithAuthorization(\n    walletClient: WalletClient,\n    params: {\n        from: Address;\n        to: Address;\n        value: bigint;\n        validAfter: bigint;\n        validBefore: bigint;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n    if (account.address.toLowerCase() !== params.from.toLowerCase()) {\n        throw new Error(`Signer ${account.address} does not match from ${params.from}`);\n    }\n    // GTokenAuthorization enforces MAX_AUTH_VALIDITY = 300s on-chain.\n    if (params.validBefore <= params.validAfter) {\n        throw new Error('validBefore must be greater than validAfter');\n    }\n    if (params.validBefore - params.validAfter > 300n) {\n        throw new Error(\n            `Authorization window ${params.validBefore - params.validAfter}s exceeds MAX_AUTH_VALIDITY (300s)`\n        );\n    }\n    return signTransferWithAuthorization(walletClient, params);\n}\n\n/**\n * Sign a ReceiveWithAuthorization for GTokenAuthorization (EIP-3009).\n * The signed `to` address must be the one submitting the transaction on-chain.\n * Note: `xPNTsToken` is NOT included in the signature (it's a relay-supplied hint for RC-2).\n */\nexport async function signReceiveWithAuthorization(\n    walletClient: WalletClient,\n    params: {\n        from: Address;\n        to: Address;\n        value: bigint;\n        validAfter: bigint;\n        validBefore: bigint;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n    if (account.address.toLowerCase() !== params.from.toLowerCase()) {\n        throw new Error(`Signer ${account.address} does not match from ${params.from}`);\n    }\n    // GTokenAuthorization enforces MAX_AUTH_VALIDITY = 300s on-chain (RC-1).\n    if (params.validBefore <= params.validAfter) {\n        throw new Error('validBefore must be greater than validAfter');\n    }\n    if (params.validBefore - params.validAfter > 300n) {\n        throw new Error(\n            `Authorization window ${params.validBefore - params.validAfter}s exceeds MAX_AUTH_VALIDITY (300s)`\n        );\n    }\n\n    return walletClient.signTypedData({\n        account,\n        domain: getEIP3009Domain(params.tokenName, params.tokenVersion, params.chainId, params.verifyingContract),\n        types: EIP3009_TYPES,\n        primaryType: 'ReceiveWithAuthorization',\n        message: {\n            from: params.from,\n            to: params.to,\n            value: params.value,\n            validAfter: params.validAfter,\n            validBefore: params.validBefore,\n            nonce: params.nonce,\n        },\n    });\n}\n\n/**\n * Sign a CancelAuthorization for GTokenAuthorization (EIP-3009).\n * Must be signed by the original `authorizer` address.\n */\nexport async function signCancelAuthorization(\n    walletClient: WalletClient,\n    params: {\n        authorizer: Address;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n    if (account.address.toLowerCase() !== params.authorizer.toLowerCase()) {\n        throw new Error(`Signer ${account.address} does not match authorizer ${params.authorizer}`);\n    }\n\n    return walletClient.signTypedData({\n        account,\n        domain: getEIP3009Domain(params.tokenName, params.tokenVersion, params.chainId, params.verifyingContract),\n        types: EIP3009_TYPES,\n        primaryType: 'CancelAuthorization',\n        message: {\n            authorizer: params.authorizer,\n            nonce: params.nonce,\n        },\n    });\n}\n","import type { PaymentRequired, PaymentPayload, SettleResponse } from './types.js';\n\n// ============================================================\n// x402 v2 HTTP Header Names\n// Ref: github.com/coinbase/x402/blob/main/specs/x402-specification-v2.md\n// ============================================================\n\n/** v2 header names (standard) */\nexport const HEADER_PAYMENT_REQUIRED = 'PAYMENT-REQUIRED';\nexport const HEADER_PAYMENT_SIGNATURE = 'PAYMENT-SIGNATURE';\nexport const HEADER_PAYMENT_RESPONSE = 'PAYMENT-RESPONSE';\n\n/** v1 header names (backward compat) */\nexport const HEADER_V1_PAYMENT = 'X-PAYMENT';\nexport const HEADER_V1_PAYMENT_RESPONSE = 'X-PAYMENT-RESPONSE';\n\n// ============================================================\n// Encoding / Decoding (Base64 JSON — per x402 spec)\n// ============================================================\n\nfunction toBase64(data: unknown): string {\n    const json = JSON.stringify(data);\n    if (typeof Buffer !== 'undefined') {\n        return Buffer.from(json).toString('base64');\n    }\n    return btoa(json);\n}\n\nfunction fromBase64<T>(encoded: string): T {\n    let json: string;\n    if (typeof Buffer !== 'undefined') {\n        json = Buffer.from(encoded, 'base64').toString('utf-8');\n    } else {\n        json = atob(encoded);\n    }\n    return JSON.parse(json) as T;\n}\n\n// --- PaymentRequired (402 response) ---\n\nexport function encodePaymentRequired(req: PaymentRequired): string {\n    return toBase64(req);\n}\n\nexport function decodePaymentRequired(encoded: string): PaymentRequired {\n    return fromBase64<PaymentRequired>(encoded);\n}\n\n// --- PaymentPayload (client → server) ---\n\nexport function encodePaymentPayload(payload: PaymentPayload): string {\n    return toBase64(payload);\n}\n\nexport function decodePaymentPayload(encoded: string): PaymentPayload {\n    return fromBase64<PaymentPayload>(encoded);\n}\n\n// --- SettleResponse (server → client) ---\n\nexport function encodeSettleResponse(resp: SettleResponse): string {\n    return toBase64(resp);\n}\n\nexport function decodeSettleResponse(encoded: string): SettleResponse {\n    return fromBase64<SettleResponse>(encoded);\n}\n\n// ============================================================\n// Header Extraction Helpers\n// ============================================================\n\n/**\n * Extract PaymentRequired from a 402 Response.\n * Tries v2 header first, falls back to v1.\n */\nexport function extractPaymentRequired(response: Response): PaymentRequired | null {\n    const v2 = response.headers.get(HEADER_PAYMENT_REQUIRED);\n    if (v2) return decodePaymentRequired(v2);\n\n    // v1 fallback: check body or X-PAYMENT-REQUIRED\n    const v1 = response.headers.get('X-PAYMENT-REQUIRED');\n    if (v1) return decodePaymentRequired(v1);\n\n    return null;\n}\n\n/**\n * Extract SettleResponse from a successful response.\n */\nexport function extractSettleResponse(response: Response): SettleResponse | null {\n    const v2 = response.headers.get(HEADER_PAYMENT_RESPONSE);\n    if (v2) return decodeSettleResponse(v2);\n\n    const v1 = response.headers.get(HEADER_V1_PAYMENT_RESPONSE);\n    if (v1) return decodeSettleResponse(v1);\n\n    return null;\n}\n","import type {\n    PaymentPayload,\n    PaymentRequirements,\n    VerifyResponse,\n    SettleResponse,\n    FacilitatorSupported,\n    FacilitatorConfig,\n} from './types.js';\n\n/**\n * HTTP Facilitator Client — standard x402 v2 facilitator API.\n * Compatible with Coinbase hosted facilitator and self-hosted instances.\n *\n * Ref: coinbase/x402 HTTPFacilitatorClient pattern\n */\nexport class FacilitatorClient {\n    private readonly url: string;\n    private readonly createAuthHeaders: FacilitatorConfig['createAuthHeaders'];\n\n    constructor(config: FacilitatorConfig) {\n        this.url = config.url.replace(/\\/$/, '');\n        this.createAuthHeaders = config.createAuthHeaders;\n    }\n\n    private async getHeaders(endpoint: 'verify' | 'settle' | 'supported'): Promise<Record<string, string>> {\n        const base: Record<string, string> = { 'Content-Type': 'application/json' };\n        if (!this.createAuthHeaders) return base;\n        const auth = await this.createAuthHeaders();\n        return { ...base, ...auth[endpoint] };\n    }\n\n    /**\n     * POST /verify — validate payment signature off-chain (~100ms).\n     */\n    async verify(\n        paymentPayload: PaymentPayload,\n        paymentRequirements: PaymentRequirements,\n    ): Promise<VerifyResponse> {\n        const resp = await fetch(`${this.url}/verify`, {\n            method: 'POST',\n            headers: await this.getHeaders('verify'),\n            body: JSON.stringify({\n                x402Version: 2,\n                paymentPayload,\n                paymentRequirements,\n            }),\n        });\n        if (!resp.ok) {\n            throw new Error(`Facilitator /verify failed: ${resp.status} ${await resp.text()}`);\n        }\n        return resp.json() as Promise<VerifyResponse>;\n    }\n\n    /**\n     * POST /settle — execute on-chain settlement (~2s on Base).\n     */\n    async settle(\n        paymentPayload: PaymentPayload,\n        paymentRequirements: PaymentRequirements,\n    ): Promise<SettleResponse> {\n        const resp = await fetch(`${this.url}/settle`, {\n            method: 'POST',\n            headers: await this.getHeaders('settle'),\n            body: JSON.stringify({\n                x402Version: 2,\n                paymentPayload,\n                paymentRequirements,\n            }),\n        });\n        if (!resp.ok) {\n            throw new Error(`Facilitator /settle failed: ${resp.status} ${await resp.text()}`);\n        }\n        return resp.json() as Promise<SettleResponse>;\n    }\n\n    /**\n     * GET /supported — query facilitator capabilities.\n     */\n    async supported(): Promise<FacilitatorSupported> {\n        const resp = await fetch(`${this.url}/supported`, {\n            method: 'GET',\n            headers: await this.getHeaders('supported'),\n        });\n        if (!resp.ok) {\n            throw new Error(`Facilitator /supported failed: ${resp.status} ${await resp.text()}`);\n        }\n        return resp.json() as Promise<FacilitatorSupported>;\n    }\n}\n","import { type Address, type Hex, type Hash, type PublicClient, type WalletClient } from 'viem';\nimport { x402Actions } from '@aastar/core';\nimport type {\n    X402PaymentParams, PaymentRequired, PaymentPayload,\n    PaymentRequirements, SettleResponse, FacilitatorConfig,\n} from './types.js';\nimport { signTransferWithAuthorization, generateNonce } from './eip3009.js';\nimport {\n    encodePaymentPayload,\n    extractPaymentRequired,\n    extractSettleResponse,\n    HEADER_PAYMENT_SIGNATURE,\n} from './payment-header.js';\nimport { FacilitatorClient } from './facilitator.js';\n\n// ============================================================\n// x402 Client — aligned with @x402/fetch + @x402/core patterns\n// Ref: coinbase/x402, Cloudflare Workers x402, MPP mppx\n// ============================================================\n\nexport type X402ClientConfig = {\n    publicClient: PublicClient;\n    walletClient: WalletClient;\n    superPaymasterAddress: Address;\n    chainId: number;\n    /** Facilitator endpoint (default: self-facilitated via SuperPaymaster) */\n    facilitator?: FacilitatorConfig;\n    /** EIP-712 domain for asset token (defaults: USDC / version \"2\") */\n    tokenName?: string;\n    tokenVersion?: string;\n    /** Payment policy: max amount per request (in atomic units) */\n    maxAmountPerRequest?: bigint;\n};\n\n/** CAIP-2 network identifier from chainId */\nfunction toNetworkId(chainId: number): `eip155:${number}` {\n    return `eip155:${chainId}`;\n}\n\nexport class X402Client {\n    private readonly actions;\n    private readonly config: X402ClientConfig;\n    private readonly facilitatorClient?: FacilitatorClient;\n\n    constructor(config: X402ClientConfig) {\n        if (!config.walletClient.account) {\n            throw new Error('WalletClient must have an account configured');\n        }\n        this.config = config;\n        // walletClient supports both readContract and writeContract — single instance suffices\n        this.actions = x402Actions(config.superPaymasterAddress)(config.walletClient);\n        if (config.facilitator) {\n            this.facilitatorClient = new FacilitatorClient(config.facilitator);\n        }\n    }\n\n    /**\n     * Create a signed payment payload (EIP-3009 TransferWithAuthorization).\n     * Returns a base64-encoded PaymentPayload ready for PAYMENT-SIGNATURE header.\n     */\n    async createPayment(params: X402PaymentParams): Promise<{\n        payload: PaymentPayload;\n        encoded: string;\n        nonce: Hex;\n    }> {\n        const nonce = params.nonce || generateNonce();\n        const now = BigInt(Math.floor(Date.now() / 1000));\n        const validAfter = params.validAfter ?? (now - 600n); // 10 min grace (per x402 spec)\n        const validBefore = params.validBefore ?? (now + 3600n);\n        const tokenName = this.config.tokenName || 'USDC';\n        const tokenVersion = this.config.tokenVersion || '2';\n\n        const signature = await signTransferWithAuthorization(this.config.walletClient, {\n            from: params.from,\n            to: params.to,\n            value: params.amount,\n            validAfter,\n            validBefore,\n            nonce,\n            tokenName,\n            tokenVersion,\n            chainId: this.config.chainId,\n            verifyingContract: params.asset,\n        });\n\n        const payload: PaymentPayload = {\n            x402Version: 2,\n            accepted: {\n                scheme: 'exact',\n                network: toNetworkId(this.config.chainId),\n                asset: params.asset,\n                amount: params.amount.toString(),\n                payTo: params.to,\n                maxTimeoutSeconds: 3600,\n                extra: { name: tokenName, version: tokenVersion },\n            },\n            payload: {\n                signature,\n                authorization: {\n                    from: params.from,\n                    to: params.to,\n                    value: params.amount.toString(),\n                    validAfter: validAfter.toString(),\n                    validBefore: validBefore.toString(),\n                    nonce,\n                },\n            },\n        };\n\n        return {\n            payload,\n            encoded: encodePaymentPayload(payload),\n            nonce,\n        };\n    }\n\n    /**\n     * Settle payment on-chain via SuperPaymaster (self-facilitated).\n     * Uses EIP-3009 transferWithAuthorization path.\n     */\n    async settleOnChain(params: {\n        from: Address; to: Address; asset: Address; amount: bigint;\n        validAfter: bigint; validBefore: bigint; nonce: Hex; signature: Hex;\n    }): Promise<Hex> {\n        return this.actions.settleX402Payment({\n            ...params,\n            account: this.config.walletClient.account!,\n        });\n    }\n\n    /**\n     * Settle payment on-chain via direct transfer (for xPNTs and pre-approved tokens).\n     */\n    async settleDirectOnChain(params: {\n        from: Address; to: Address; asset: Address; amount: bigint; nonce: Hex;\n    }): Promise<Hex> {\n        return this.actions.settleX402PaymentDirect({\n            ...params,\n            account: this.config.walletClient.account!,\n        });\n    }\n\n    /**\n     * Get facilitator fee quote from on-chain contract.\n     */\n    async getQuote(): Promise<{ feeBPS: bigint }> {\n        const feeBPS = await this.actions.facilitatorFeeBPS();\n        return { feeBPS };\n    }\n\n    /**\n     * Check if a nonce has been used.\n     */\n    async checkNonce(nonce: Hex): Promise<boolean> {\n        return this.actions.x402SettlementNonces({ nonce });\n    }\n\n    /**\n     * Settle via external facilitator (Coinbase, self-hosted, etc.).\n     * Requires facilitator config in constructor.\n     */\n    async settleViaFacilitator(payload: PaymentPayload, requirements: PaymentRequirements): Promise<SettleResponse> {\n        if (!this.facilitatorClient) {\n            throw new Error('No facilitator configured. Pass facilitator config to X402Client constructor.');\n        }\n        return this.facilitatorClient.settle(payload, requirements);\n    }\n\n    /**\n     * x402-aware fetch wrapper.\n     * Automatically handles 402 → sign → retry flow per x402 v2 spec.\n     *\n     * Pattern from: @x402/fetch wrapFetchWithPayment\n     *\n     * Flow:\n     * 1. Make initial request\n     * 2. If 402, extract PaymentRequired from PAYMENT-REQUIRED header\n     * 3. Select best payment option (applies policy: max amount check)\n     * 4. Sign EIP-3009 authorization\n     * 5. Retry with PAYMENT-SIGNATURE header\n     */\n    async x402Fetch(url: string, init?: RequestInit): Promise<Response> {\n        const firstResponse = await fetch(url, init);\n\n        if (firstResponse.status !== 402) {\n            return firstResponse;\n        }\n\n        // Step 2: Extract payment requirements\n        // TODO: some server implementations put PaymentRequired in the response body instead of headers\n        const paymentRequired = extractPaymentRequired(firstResponse);\n        if (!paymentRequired || !paymentRequired.accepts?.length) {\n            throw new Error('402 response missing PAYMENT-REQUIRED header or empty accepts');\n        }\n\n        // Step 3: Select payment option (filter by network + policy)\n        const myNetwork = toNetworkId(this.config.chainId);\n        let selected = paymentRequired.accepts.find(\n            (a) => a.network === myNetwork && a.scheme === 'exact'\n        );\n        if (!selected) {\n            // Fallback: any EVM option\n            selected = paymentRequired.accepts.find((a) => a.network.startsWith('eip155:'));\n        }\n        if (!selected) {\n            throw new Error(`No compatible payment option for network ${myNetwork}`);\n        }\n\n        // Policy check: max amount\n        if (this.config.maxAmountPerRequest && BigInt(selected.amount) > this.config.maxAmountPerRequest) {\n            throw new Error(\n                `Payment amount ${selected.amount} exceeds max ${this.config.maxAmountPerRequest}`\n            );\n        }\n\n        const account = this.config.walletClient.account;\n        if (!account) {\n            throw new Error('WalletClient must have an account for automatic payment');\n        }\n\n        // Step 4: Sign\n        const { encoded } = await this.createPayment({\n            from: account.address,\n            to: selected.payTo,\n            asset: selected.asset as Address,\n            amount: BigInt(selected.amount),\n        });\n\n        // Step 5: Retry with payment signature\n        const retryHeaders = new Headers(init?.headers);\n        retryHeaders.set(HEADER_PAYMENT_SIGNATURE, encoded);\n\n        return fetch(url, { ...init, headers: retryHeaders });\n    }\n}\n"]}

package/dist/{chunk-UQMMEDHO.cjs → chunk-WVOJV4Q5.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkMFBTMF5U_cjs = require('./chunk-MFBTMF5U.cjs');
+var chunkMOJJ7QF6_cjs = require('./chunk-MOJJ7QF6.cjs');
 var viem = require('viem');
 
 var EIP3009_TYPES = {
@@ -269,7 +269,7 @@ var X402Client = class {
       throw new Error("WalletClient must have an account configured");
     }
     this.config = config;
-    this.actions = chunkMFBTMF5U_cjs.x402Actions(config.superPaymasterAddress)(config.walletClient);
+    this.actions = chunkMOJJ7QF6_cjs.x402Actions(config.superPaymasterAddress)(config.walletClient);
     if (config.facilitator) {
       this.facilitatorClient = new FacilitatorClient(config.facilitator);
     }
@@ -444,5 +444,5 @@ exports.signCancelAuthorization = signCancelAuthorization;
 exports.signGTokenTransferWithAuthorization = signGTokenTransferWithAuthorization;
 exports.signReceiveWithAuthorization = signReceiveWithAuthorization;
 exports.signTransferWithAuthorization = signTransferWithAuthorization;
-//# sourceMappingURL=chunk-UQMMEDHO.cjs.map
-//# sourceMappingURL=chunk-UQMMEDHO.cjs.map
+//# sourceMappingURL=chunk-WVOJV4Q5.cjs.map
+//# sourceMappingURL=chunk-WVOJV4Q5.cjs.map

package/dist/{chunk-UQMMEDHO.cjs.map → chunk-WVOJV4Q5.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../../x402/src/eip3009.ts","../../x402/src/payment-header.ts","../../x402/src/facilitator.ts","../../x402/src/X402Client.ts"],"names":["toHex","x402Actions"],"mappings":";;;;;AAEO,IAAM,aAAA,GAAgB;AAAA,EACzB,yBAAA,EAA2B;AAAA,IACvB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU,GACrC;AAAA;AAAA;AAAA,EAGA,wBAAA,EAA0B;AAAA,IACtB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU,GACrC;AAAA,EACA,mBAAA,EAAqB;AAAA,IACjB,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU;AAEzC;AAEO,SAAS,gBAAA,CAAiB,SAAA,EAAmB,YAAA,EAAsB,OAAA,EAAiB,iBAAA,EAA4B;AACnH,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,SAAA;AAAA,IACN,OAAA,EAAS,YAAA;AAAA,IACT,OAAA;AAAA,IACA;AAAA,GACJ;AACJ;AAEO,SAAS,aAAA,GAAqB;AACjC,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,KAAK,CAAA;AACvC,EAAA,OAAOA,WAAM,KAAK,CAAA;AACtB;AAGO,IAAM,oBAAA,GAAuB,EAAE,IAAA,EAAM,QAAA,EAAU,SAAS,GAAA;AAE/D,eAAsB,6BAAA,CAClB,cACA,MAAA,EAYY;AACZ,EAAA,MAAM,MAAA,GAAS,gBAAA;AAAA,IACX,MAAA,CAAO,SAAA;AAAA,IACP,MAAA,CAAO,YAAA;AAAA,IACP,MAAA,CAAO,OAAA;AAAA,IACP,MAAA,CAAO;AAAA,GACX;AAEA,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AAEA,EAAA,OAAO,aAAa,aAAA,CAAc;AAAA,IAC9B,OAAA;AAAA,IACA,MAAA;AAAA,IACA,KAAA,EAAO,aAAA;AAAA,IACP,WAAA,EAAa,2BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,OAAO,MAAA,CAAO;AAAA;AAClB,GACH,CAAA;AACL;AAQA,eAAsB,mCAAA,CAClB,cACA,MAAA,EAYY;AACZ,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,QAAQ,OAAA,CAAQ,WAAA,OAAkB,MAAA,CAAO,IAAA,CAAK,aAAY,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,CAAA,OAAA,EAAU,OAAA,CAAQ,OAAO,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAI,CAAA,CAAE,CAAA;AAAA,EAClF;AAEA,EAAA,IAAI,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACzC,IAAA,MAAM,IAAI,MAAM,6CAA6C,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAA,GAAa,IAAA,EAAM;AAC/C,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,qBAAA,EAAwB,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAU,CAAA,kCAAA;AAAA,KAClE;AAAA,EACJ;AACA,EAAA,OAAO,6BAAA,CAA8B,cAAc,MAAM,CAAA;AAC7D;AAOA,eAAsB,4BAAA,CAClB,cACA,MAAA,EAYY;AACZ,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,QAAQ,OAAA,CAAQ,WAAA,OAAkB,MAAA,CAAO,IAAA,CAAK,aAAY,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,CAAA,OAAA,EAAU,OAAA,CAAQ,OAAO,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAI,CAAA,CAAE,CAAA;AAAA,EAClF;AAEA,EAAA,IAAI,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACzC,IAAA,MAAM,IAAI,MAAM,6CAA6C,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAA,GAAa,IAAA,EAAM;AAC/C,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,qBAAA,EAAwB,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAU,CAAA,kCAAA;AAAA,KAClE;AAAA,EACJ;AAEA,EAAA,OAAO,aAAa,aAAA,CAAc;AAAA,IAC9B,OAAA;AAAA,IACA,MAAA,EAAQ,iBAAiB,MAAA,CAAO,SAAA,EAAW,OAAO,YAAA,EAAc,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,iBAAiB,CAAA;AAAA,IACxG,KAAA,EAAO,aAAA;AAAA,IACP,WAAA,EAAa,0BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,OAAO,MAAA,CAAO;AAAA;AAClB,GACH,CAAA;AACL;AAMA,eAAsB,uBAAA,CAClB,cACA,MAAA,EAQY;AACZ,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,QAAQ,OAAA,CAAQ,WAAA,OAAkB,MAAA,CAAO,UAAA,CAAW,aAAY,EAAG;AACnE,IAAA,MAAM,IAAI,MAAM,CAAA,OAAA,EAAU,OAAA,CAAQ,OAAO,CAAA,2BAAA,EAA8B,MAAA,CAAO,UAAU,CAAA,CAAE,CAAA;AAAA,EAC9F;AAEA,EAAA,OAAO,aAAa,aAAA,CAAc;AAAA,IAC9B,OAAA;AAAA,IACA,MAAA,EAAQ,iBAAiB,MAAA,CAAO,SAAA,EAAW,OAAO,YAAA,EAAc,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,iBAAiB,CAAA;AAAA,IACxG,KAAA,EAAO,aAAA;AAAA,IACP,WAAA,EAAa,qBAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACL,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,OAAO,MAAA,CAAO;AAAA;AAClB,GACH,CAAA;AACL;;;AC9MO,IAAM,uBAAA,GAA0B;AAChC,IAAM,wBAAA,GAA2B;AACjC,IAAM,uBAAA,GAA0B;AAGhC,IAAM,iBAAA,GAAoB;AAC1B,IAAM,0BAAA,GAA6B;AAM1C,SAAS,SAAS,IAAA,EAAuB;AACrC,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAChC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAC/B,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EAC9C;AACA,EAAA,OAAO,KAAK,IAAI,CAAA;AACpB;AAEA,SAAS,WAAc,OAAA,EAAoB;AACvC,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAC/B,IAAA,IAAA,GAAO,OAAO,IAAA,CAAK,OAAA,EAAS,QAAQ,CAAA,CAAE,SAAS,OAAO,CAAA;AAAA,EAC1D,CAAA,MAAO;AACH,IAAA,IAAA,GAAO,KAAK,OAAO,CAAA;AAAA,EACvB;AACA,EAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAC1B;AAIO,SAAS,sBAAsB,GAAA,EAA8B;AAChE,EAAA,OAAO,SAAS,GAAG,CAAA;AACvB;AAEO,SAAS,sBAAsB,OAAA,EAAkC;AACpE,EAAA,OAAO,WAA4B,OAAO,CAAA;AAC9C;AAIO,SAAS,qBAAqB,OAAA,EAAiC;AAClE,EAAA,OAAO,SAAS,OAAO,CAAA;AAC3B;AAEO,SAAS,qBAAqB,OAAA,EAAiC;AAClE,EAAA,OAAO,WAA2B,OAAO,CAAA;AAC7C;AAIO,SAAS,qBAAqB,IAAA,EAA8B;AAC/D,EAAA,OAAO,SAAS,IAAI,CAAA;AACxB;AAEO,SAAS,qBAAqB,OAAA,EAAiC;AAClE,EAAA,OAAO,WAA2B,OAAO,CAAA;AAC7C;AAUO,SAAS,uBAAuB,QAAA,EAA4C;AAC/E,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA;AACvD,EAAA,IAAI,EAAA,EAAI,OAAO,qBAAA,CAAsB,EAAE,CAAA;AAGvC,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,oBAAoB,CAAA;AACpD,EAAA,IAAI,EAAA,EAAI,OAAO,qBAAA,CAAsB,EAAE,CAAA;AAEvC,EAAA,OAAO,IAAA;AACX;AAKO,SAAS,sBAAsB,QAAA,EAA2C;AAC7E,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA;AACvD,EAAA,IAAI,EAAA,EAAI,OAAO,oBAAA,CAAqB,EAAE,CAAA;AAEtC,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,0BAA0B,CAAA;AAC1D,EAAA,IAAI,EAAA,EAAI,OAAO,oBAAA,CAAqB,EAAE,CAAA;AAEtC,EAAA,OAAO,IAAA;AACX;;;ACnFO,IAAM,oBAAN,MAAwB;AAAA,EACV,GAAA;AAAA,EACA,iBAAA;AAAA,EAEjB,YAAY,MAAA,EAA2B;AACnC,IAAA,IAAA,CAAK,GAAA,GAAM,MAAA,CAAO,GAAA,CAAI,OAAA,CAAQ,OAAO,EAAE,CAAA;AACvC,IAAA,IAAA,CAAK,oBAAoB,MAAA,CAAO,iBAAA;AAAA,EACpC;AAAA,EAEA,MAAc,WAAW,QAAA,EAA8E;AACnG,IAAA,MAAM,IAAA,GAA+B,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAC1E,IAAA,IAAI,CAAC,IAAA,CAAK,iBAAA,EAAmB,OAAO,IAAA;AACpC,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,iBAAA,EAAkB;AAC1C,IAAA,OAAO,EAAE,GAAG,IAAA,EAAM,GAAG,IAAA,CAAK,QAAQ,CAAA,EAAE;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACF,cAAA,EACA,mBAAA,EACuB;AACvB,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,OAAA,CAAA,EAAW;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,MAAM,IAAA,CAAK,UAAA,CAAW,QAAQ,CAAA;AAAA,MACvC,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,QACjB,WAAA,EAAa,CAAA;AAAA,QACb,cAAA;AAAA,QACA;AAAA,OACH;AAAA,KACJ,CAAA;AACD,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,IAAA,CAAK,MAAM,IAAI,MAAM,IAAA,CAAK,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,IACrF;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACF,cAAA,EACA,mBAAA,EACuB;AACvB,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,OAAA,CAAA,EAAW;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,MAAM,IAAA,CAAK,UAAA,CAAW,QAAQ,CAAA;AAAA,MACvC,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,QACjB,WAAA,EAAa,CAAA;AAAA,QACb,cAAA;AAAA,QACA;AAAA,OACH;AAAA,KACJ,CAAA;AACD,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,IAAA,CAAK,MAAM,IAAI,MAAM,IAAA,CAAK,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,IACrF;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAA,GAA2C;AAC7C,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,UAAA,CAAA,EAAc;AAAA,MAC9C,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,MAAM,IAAA,CAAK,UAAA,CAAW,WAAW;AAAA,KAC7C,CAAA;AACD,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,IAAA,CAAK,MAAM,IAAI,MAAM,IAAA,CAAK,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,IACxF;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACrB;AACJ;;;ACrDA,SAAS,YAAY,OAAA,EAAqC;AACtD,EAAA,OAAO,UAAU,OAAO,CAAA,CAAA;AAC5B;AAEO,IAAM,aAAN,MAAiB;AAAA,EACH,OAAA;AAAA,EACA,MAAA;AAAA,EACA,iBAAA;AAAA,EAEjB,YAAY,MAAA,EAA0B;AAClC,IAAA,IAAI,CAAC,MAAA,CAAO,YAAA,CAAa,OAAA,EAAS;AAC9B,MAAA,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAAA,IAClE;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAEd,IAAA,IAAA,CAAK,UAAUC,6BAAA,CAAY,MAAA,CAAO,qBAAqB,CAAA,CAAE,OAAO,YAAY,CAAA;AAC5E,IAAA,IAAI,OAAO,WAAA,EAAa;AACpB,MAAA,IAAA,CAAK,iBAAA,GAAoB,IAAI,iBAAA,CAAkB,MAAA,CAAO,WAAW,CAAA;AAAA,IACrE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,cAAc,MAAA,EAIjB;AACC,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,IAAS,aAAA,EAAc;AAC5C,IAAA,MAAM,GAAA,GAAM,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,GAAA,EAAI,GAAI,GAAI,CAAC,CAAA;AAChD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAe,GAAA,GAAM,IAAA;AAC/C,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,WAAA,IAAgB,GAAA,GAAM,KAAA;AACjD,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,SAAA,IAAa,MAAA;AAC3C,IAAA,MAAM,YAAA,GAAe,IAAA,CAAK,MAAA,CAAO,YAAA,IAAgB,GAAA;AAEjD,IAAA,MAAM,SAAA,GAAY,MAAM,6BAAA,CAA8B,IAAA,CAAK,OAAO,YAAA,EAAc;AAAA,MAC5E,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,MAAA;AAAA,MACd,UAAA;AAAA,MACA,WAAA;AAAA,MACA,KAAA;AAAA,MACA,SAAA;AAAA,MACA,YAAA;AAAA,MACA,OAAA,EAAS,KAAK,MAAA,CAAO,OAAA;AAAA,MACrB,mBAAmB,MAAA,CAAO;AAAA,KAC7B,CAAA;AAED,IAAA,MAAM,OAAA,GAA0B;AAAA,MAC5B,WAAA,EAAa,CAAA;AAAA,MACb,QAAA,EAAU;AAAA,QACN,MAAA,EAAQ,OAAA;AAAA,QACR,OAAA,EAAS,WAAA,CAAY,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA;AAAA,QACxC,OAAO,MAAA,CAAO,KAAA;AAAA,QACd,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,QAAA,EAAS;AAAA,QAC/B,OAAO,MAAA,CAAO,EAAA;AAAA,QACd,iBAAA,EAAmB,IAAA;AAAA,QACnB,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAW,SAAS,YAAA;AAAa,OACpD;AAAA,MACA,OAAA,EAAS;AAAA,QACL,SAAA;AAAA,QACA,aAAA,EAAe;AAAA,UACX,MAAM,MAAA,CAAO,IAAA;AAAA,UACb,IAAI,MAAA,CAAO,EAAA;AAAA,UACX,KAAA,EAAO,MAAA,CAAO,MAAA,CAAO,QAAA,EAAS;AAAA,UAC9B,UAAA,EAAY,WAAW,QAAA,EAAS;AAAA,UAChC,WAAA,EAAa,YAAY,QAAA,EAAS;AAAA,UAClC;AAAA;AACJ;AACJ,KACJ;AAEA,IAAA,OAAO;AAAA,MACH,OAAA;AAAA,MACA,OAAA,EAAS,qBAAqB,OAAO,CAAA;AAAA,MACrC;AAAA,KACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,cAAc,MAAA,EAGH;AACb,IAAA,OAAO,IAAA,CAAK,QAAQ,iBAAA,CAAkB;AAAA,MAClC,GAAG,MAAA;AAAA,MACH,OAAA,EAAS,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa;AAAA,KACrC,CAAA;AAAA,EACL;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,oBAAoB,MAAA,EAET;AACb,IAAA,OAAO,IAAA,CAAK,QAAQ,uBAAA,CAAwB;AAAA,MACxC,GAAG,MAAA;AAAA,MACH,OAAA,EAAS,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa;AAAA,KACrC,CAAA;AAAA,EACL;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAA,GAAwC;AAC1C,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,OAAA,CAAQ,iBAAA,EAAkB;AACpD,IAAA,OAAO,EAAE,MAAA,EAAO;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,WAAW,KAAA,EAA8B;AAC3C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,oBAAA,CAAqB,EAAE,OAAO,CAAA;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBAAA,CAAqB,OAAA,EAAyB,YAAA,EAA4D;AAC5G,IAAA,IAAI,CAAC,KAAK,iBAAA,EAAmB;AACzB,MAAA,MAAM,IAAI,MAAM,+EAA+E,CAAA;AAAA,IACnG;AACA,IAAA,OAAO,IAAA,CAAK,iBAAA,CAAkB,MAAA,CAAO,OAAA,EAAS,YAAY,CAAA;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,SAAA,CAAU,GAAA,EAAa,IAAA,EAAuC;AAChE,IAAA,MAAM,aAAA,GAAgB,MAAM,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAE3C,IAAA,IAAI,aAAA,CAAc,WAAW,GAAA,EAAK;AAC9B,MAAA,OAAO,aAAA;AAAA,IACX;AAIA,IAAA,MAAM,eAAA,GAAkB,uBAAuB,aAAa,CAAA;AAC5D,IAAA,IAAI,CAAC,eAAA,IAAmB,CAAC,eAAA,CAAgB,SAAS,MAAA,EAAQ;AACtD,MAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,IACnF;AAGA,IAAA,MAAM,SAAA,GAAY,WAAA,CAAY,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA;AACjD,IAAA,IAAI,QAAA,GAAW,gBAAgB,OAAA,CAAQ,IAAA;AAAA,MACnC,CAAC,CAAA,KAAM,CAAA,CAAE,OAAA,KAAY,SAAA,IAAa,EAAE,MAAA,KAAW;AAAA,KACnD;AACA,IAAA,IAAI,CAAC,QAAA,EAAU;AAEX,MAAA,QAAA,GAAW,eAAA,CAAgB,QAAQ,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,OAAA,CAAQ,UAAA,CAAW,SAAS,CAAC,CAAA;AAAA,IAClF;AACA,IAAA,IAAI,CAAC,QAAA,EAAU;AACX,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yCAAA,EAA4C,SAAS,CAAA,CAAE,CAAA;AAAA,IAC3E;AAGA,IAAA,IAAI,IAAA,CAAK,OAAO,mBAAA,IAAuB,MAAA,CAAO,SAAS,MAAM,CAAA,GAAI,IAAA,CAAK,MAAA,CAAO,mBAAA,EAAqB;AAC9F,MAAA,MAAM,IAAI,KAAA;AAAA,QACN,kBAAkB,QAAA,CAAS,MAAM,CAAA,aAAA,EAAgB,IAAA,CAAK,OAAO,mBAAmB,CAAA;AAAA,OACpF;AAAA,IACJ;AAEA,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa,OAAA;AACzC,IAAA,IAAI,CAAC,OAAA,EAAS;AACV,MAAA,MAAM,IAAI,MAAM,yDAAyD,CAAA;AAAA,IAC7E;AAGA,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,MAAM,KAAK,aAAA,CAAc;AAAA,MACzC,MAAM,OAAA,CAAQ,OAAA;AAAA,MACd,IAAI,QAAA,CAAS,KAAA;AAAA,MACb,OAAO,QAAA,CAAS,KAAA;AAAA,MAChB,MAAA,EAAQ,MAAA,CAAO,QAAA,CAAS,MAAM;AAAA,KACjC,CAAA;AAGD,IAAA,MAAM,YAAA,GAAe,IAAI,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAC9C,IAAA,YAAA,CAAa,GAAA,CAAI,0BAA0B,OAAO,CAAA;AAElD,IAAA,OAAO,MAAM,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,OAAA,EAAS,cAAc,CAAA;AAAA,EACxD;AACJ","file":"chunk-UQMMEDHO.cjs","sourcesContent":["import { type Address, type Hex, type WalletClient, toHex } from 'viem';\n\nexport const EIP3009_TYPES = {\n    TransferWithAuthorization: [\n        { name: 'from', type: 'address' },\n        { name: 'to', type: 'address' },\n        { name: 'value', type: 'uint256' },\n        { name: 'validAfter', type: 'uint256' },\n        { name: 'validBefore', type: 'uint256' },\n        { name: 'nonce', type: 'bytes32' },\n    ],\n    // Distinct typehash from TransferWithAuthorization — prevents replay across variants.\n    // msg.sender must equal `to` on-chain (CallerMustBeRecipient error if violated).\n    ReceiveWithAuthorization: [\n        { name: 'from', type: 'address' },\n        { name: 'to', type: 'address' },\n        { name: 'value', type: 'uint256' },\n        { name: 'validAfter', type: 'uint256' },\n        { name: 'validBefore', type: 'uint256' },\n        { name: 'nonce', type: 'bytes32' },\n    ],\n    CancelAuthorization: [\n        { name: 'authorizer', type: 'address' },\n        { name: 'nonce', type: 'bytes32' },\n    ],\n} as const;\n\nexport function getEIP3009Domain(tokenName: string, tokenVersion: string, chainId: number, verifyingContract: Address) {\n    return {\n        name: tokenName,\n        version: tokenVersion,\n        chainId,\n        verifyingContract,\n    };\n}\n\nexport function generateNonce(): Hex {\n    const bytes = new Uint8Array(32);\n    globalThis.crypto.getRandomValues(bytes);\n    return toHex(bytes);\n}\n\n// GToken EIP-712 domain constants (GTokenAuthorization v2.2.0)\nexport const GTOKEN_EIP712_DOMAIN = { name: 'GToken', version: '1' } as const;\n\nexport async function signTransferWithAuthorization(\n    walletClient: WalletClient,\n    params: {\n        from: Address;\n        to: Address;\n        value: bigint;\n        validAfter: bigint;\n        validBefore: bigint;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const domain = getEIP3009Domain(\n        params.tokenName,\n        params.tokenVersion,\n        params.chainId,\n        params.verifyingContract\n    );\n\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n\n    return walletClient.signTypedData({\n        account,\n        domain,\n        types: EIP3009_TYPES,\n        primaryType: 'TransferWithAuthorization',\n        message: {\n            from: params.from,\n            to: params.to,\n            value: params.value,\n            validAfter: params.validAfter,\n            validBefore: params.validBefore,\n            nonce: params.nonce,\n        },\n    });\n}\n\n/**\n * Sign a TransferWithAuthorization for GTokenAuthorization (EIP-3009).\n * GToken-specific wrapper: enforces MAX_AUTH_VALIDITY = 300s before signing.\n * Use this instead of the generic signTransferWithAuthorization when the\n * verifying contract is GTokenAuthorization.\n */\nexport async function signGTokenTransferWithAuthorization(\n    walletClient: WalletClient,\n    params: {\n        from: Address;\n        to: Address;\n        value: bigint;\n        validAfter: bigint;\n        validBefore: bigint;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n    if (account.address.toLowerCase() !== params.from.toLowerCase()) {\n        throw new Error(`Signer ${account.address} does not match from ${params.from}`);\n    }\n    // GTokenAuthorization enforces MAX_AUTH_VALIDITY = 300s on-chain.\n    if (params.validBefore <= params.validAfter) {\n        throw new Error('validBefore must be greater than validAfter');\n    }\n    if (params.validBefore - params.validAfter > 300n) {\n        throw new Error(\n            `Authorization window ${params.validBefore - params.validAfter}s exceeds MAX_AUTH_VALIDITY (300s)`\n        );\n    }\n    return signTransferWithAuthorization(walletClient, params);\n}\n\n/**\n * Sign a ReceiveWithAuthorization for GTokenAuthorization (EIP-3009).\n * The signed `to` address must be the one submitting the transaction on-chain.\n * Note: `xPNTsToken` is NOT included in the signature (it's a relay-supplied hint for RC-2).\n */\nexport async function signReceiveWithAuthorization(\n    walletClient: WalletClient,\n    params: {\n        from: Address;\n        to: Address;\n        value: bigint;\n        validAfter: bigint;\n        validBefore: bigint;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n    if (account.address.toLowerCase() !== params.from.toLowerCase()) {\n        throw new Error(`Signer ${account.address} does not match from ${params.from}`);\n    }\n    // GTokenAuthorization enforces MAX_AUTH_VALIDITY = 300s on-chain (RC-1).\n    if (params.validBefore <= params.validAfter) {\n        throw new Error('validBefore must be greater than validAfter');\n    }\n    if (params.validBefore - params.validAfter > 300n) {\n        throw new Error(\n            `Authorization window ${params.validBefore - params.validAfter}s exceeds MAX_AUTH_VALIDITY (300s)`\n        );\n    }\n\n    return walletClient.signTypedData({\n        account,\n        domain: getEIP3009Domain(params.tokenName, params.tokenVersion, params.chainId, params.verifyingContract),\n        types: EIP3009_TYPES,\n        primaryType: 'ReceiveWithAuthorization',\n        message: {\n            from: params.from,\n            to: params.to,\n            value: params.value,\n            validAfter: params.validAfter,\n            validBefore: params.validBefore,\n            nonce: params.nonce,\n        },\n    });\n}\n\n/**\n * Sign a CancelAuthorization for GTokenAuthorization (EIP-3009).\n * Must be signed by the original `authorizer` address.\n */\nexport async function signCancelAuthorization(\n    walletClient: WalletClient,\n    params: {\n        authorizer: Address;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n    if (account.address.toLowerCase() !== params.authorizer.toLowerCase()) {\n        throw new Error(`Signer ${account.address} does not match authorizer ${params.authorizer}`);\n    }\n\n    return walletClient.signTypedData({\n        account,\n        domain: getEIP3009Domain(params.tokenName, params.tokenVersion, params.chainId, params.verifyingContract),\n        types: EIP3009_TYPES,\n        primaryType: 'CancelAuthorization',\n        message: {\n            authorizer: params.authorizer,\n            nonce: params.nonce,\n        },\n    });\n}\n","import type { PaymentRequired, PaymentPayload, SettleResponse } from './types.js';\n\n// ============================================================\n// x402 v2 HTTP Header Names\n// Ref: github.com/coinbase/x402/blob/main/specs/x402-specification-v2.md\n// ============================================================\n\n/** v2 header names (standard) */\nexport const HEADER_PAYMENT_REQUIRED = 'PAYMENT-REQUIRED';\nexport const HEADER_PAYMENT_SIGNATURE = 'PAYMENT-SIGNATURE';\nexport const HEADER_PAYMENT_RESPONSE = 'PAYMENT-RESPONSE';\n\n/** v1 header names (backward compat) */\nexport const HEADER_V1_PAYMENT = 'X-PAYMENT';\nexport const HEADER_V1_PAYMENT_RESPONSE = 'X-PAYMENT-RESPONSE';\n\n// ============================================================\n// Encoding / Decoding (Base64 JSON — per x402 spec)\n// ============================================================\n\nfunction toBase64(data: unknown): string {\n    const json = JSON.stringify(data);\n    if (typeof Buffer !== 'undefined') {\n        return Buffer.from(json).toString('base64');\n    }\n    return btoa(json);\n}\n\nfunction fromBase64<T>(encoded: string): T {\n    let json: string;\n    if (typeof Buffer !== 'undefined') {\n        json = Buffer.from(encoded, 'base64').toString('utf-8');\n    } else {\n        json = atob(encoded);\n    }\n    return JSON.parse(json) as T;\n}\n\n// --- PaymentRequired (402 response) ---\n\nexport function encodePaymentRequired(req: PaymentRequired): string {\n    return toBase64(req);\n}\n\nexport function decodePaymentRequired(encoded: string): PaymentRequired {\n    return fromBase64<PaymentRequired>(encoded);\n}\n\n// --- PaymentPayload (client → server) ---\n\nexport function encodePaymentPayload(payload: PaymentPayload): string {\n    return toBase64(payload);\n}\n\nexport function decodePaymentPayload(encoded: string): PaymentPayload {\n    return fromBase64<PaymentPayload>(encoded);\n}\n\n// --- SettleResponse (server → client) ---\n\nexport function encodeSettleResponse(resp: SettleResponse): string {\n    return toBase64(resp);\n}\n\nexport function decodeSettleResponse(encoded: string): SettleResponse {\n    return fromBase64<SettleResponse>(encoded);\n}\n\n// ============================================================\n// Header Extraction Helpers\n// ============================================================\n\n/**\n * Extract PaymentRequired from a 402 Response.\n * Tries v2 header first, falls back to v1.\n */\nexport function extractPaymentRequired(response: Response): PaymentRequired | null {\n    const v2 = response.headers.get(HEADER_PAYMENT_REQUIRED);\n    if (v2) return decodePaymentRequired(v2);\n\n    // v1 fallback: check body or X-PAYMENT-REQUIRED\n    const v1 = response.headers.get('X-PAYMENT-REQUIRED');\n    if (v1) return decodePaymentRequired(v1);\n\n    return null;\n}\n\n/**\n * Extract SettleResponse from a successful response.\n */\nexport function extractSettleResponse(response: Response): SettleResponse | null {\n    const v2 = response.headers.get(HEADER_PAYMENT_RESPONSE);\n    if (v2) return decodeSettleResponse(v2);\n\n    const v1 = response.headers.get(HEADER_V1_PAYMENT_RESPONSE);\n    if (v1) return decodeSettleResponse(v1);\n\n    return null;\n}\n","import type {\n    PaymentPayload,\n    PaymentRequirements,\n    VerifyResponse,\n    SettleResponse,\n    FacilitatorSupported,\n    FacilitatorConfig,\n} from './types.js';\n\n/**\n * HTTP Facilitator Client — standard x402 v2 facilitator API.\n * Compatible with Coinbase hosted facilitator and self-hosted instances.\n *\n * Ref: coinbase/x402 HTTPFacilitatorClient pattern\n */\nexport class FacilitatorClient {\n    private readonly url: string;\n    private readonly createAuthHeaders: FacilitatorConfig['createAuthHeaders'];\n\n    constructor(config: FacilitatorConfig) {\n        this.url = config.url.replace(/\\/$/, '');\n        this.createAuthHeaders = config.createAuthHeaders;\n    }\n\n    private async getHeaders(endpoint: 'verify' | 'settle' | 'supported'): Promise<Record<string, string>> {\n        const base: Record<string, string> = { 'Content-Type': 'application/json' };\n        if (!this.createAuthHeaders) return base;\n        const auth = await this.createAuthHeaders();\n        return { ...base, ...auth[endpoint] };\n    }\n\n    /**\n     * POST /verify — validate payment signature off-chain (~100ms).\n     */\n    async verify(\n        paymentPayload: PaymentPayload,\n        paymentRequirements: PaymentRequirements,\n    ): Promise<VerifyResponse> {\n        const resp = await fetch(`${this.url}/verify`, {\n            method: 'POST',\n            headers: await this.getHeaders('verify'),\n            body: JSON.stringify({\n                x402Version: 2,\n                paymentPayload,\n                paymentRequirements,\n            }),\n        });\n        if (!resp.ok) {\n            throw new Error(`Facilitator /verify failed: ${resp.status} ${await resp.text()}`);\n        }\n        return resp.json() as Promise<VerifyResponse>;\n    }\n\n    /**\n     * POST /settle — execute on-chain settlement (~2s on Base).\n     */\n    async settle(\n        paymentPayload: PaymentPayload,\n        paymentRequirements: PaymentRequirements,\n    ): Promise<SettleResponse> {\n        const resp = await fetch(`${this.url}/settle`, {\n            method: 'POST',\n            headers: await this.getHeaders('settle'),\n            body: JSON.stringify({\n                x402Version: 2,\n                paymentPayload,\n                paymentRequirements,\n            }),\n        });\n        if (!resp.ok) {\n            throw new Error(`Facilitator /settle failed: ${resp.status} ${await resp.text()}`);\n        }\n        return resp.json() as Promise<SettleResponse>;\n    }\n\n    /**\n     * GET /supported — query facilitator capabilities.\n     */\n    async supported(): Promise<FacilitatorSupported> {\n        const resp = await fetch(`${this.url}/supported`, {\n            method: 'GET',\n            headers: await this.getHeaders('supported'),\n        });\n        if (!resp.ok) {\n            throw new Error(`Facilitator /supported failed: ${resp.status} ${await resp.text()}`);\n        }\n        return resp.json() as Promise<FacilitatorSupported>;\n    }\n}\n","import { type Address, type Hex, type Hash, type PublicClient, type WalletClient } from 'viem';\nimport { x402Actions } from '@aastar/core';\nimport type {\n    X402PaymentParams, PaymentRequired, PaymentPayload,\n    PaymentRequirements, SettleResponse, FacilitatorConfig,\n} from './types.js';\nimport { signTransferWithAuthorization, generateNonce } from './eip3009.js';\nimport {\n    encodePaymentPayload,\n    extractPaymentRequired,\n    extractSettleResponse,\n    HEADER_PAYMENT_SIGNATURE,\n} from './payment-header.js';\nimport { FacilitatorClient } from './facilitator.js';\n\n// ============================================================\n// x402 Client — aligned with @x402/fetch + @x402/core patterns\n// Ref: coinbase/x402, Cloudflare Workers x402, MPP mppx\n// ============================================================\n\nexport type X402ClientConfig = {\n    publicClient: PublicClient;\n    walletClient: WalletClient;\n    superPaymasterAddress: Address;\n    chainId: number;\n    /** Facilitator endpoint (default: self-facilitated via SuperPaymaster) */\n    facilitator?: FacilitatorConfig;\n    /** EIP-712 domain for asset token (defaults: USDC / version \"2\") */\n    tokenName?: string;\n    tokenVersion?: string;\n    /** Payment policy: max amount per request (in atomic units) */\n    maxAmountPerRequest?: bigint;\n};\n\n/** CAIP-2 network identifier from chainId */\nfunction toNetworkId(chainId: number): `eip155:${number}` {\n    return `eip155:${chainId}`;\n}\n\nexport class X402Client {\n    private readonly actions;\n    private readonly config: X402ClientConfig;\n    private readonly facilitatorClient?: FacilitatorClient;\n\n    constructor(config: X402ClientConfig) {\n        if (!config.walletClient.account) {\n            throw new Error('WalletClient must have an account configured');\n        }\n        this.config = config;\n        // walletClient supports both readContract and writeContract — single instance suffices\n        this.actions = x402Actions(config.superPaymasterAddress)(config.walletClient);\n        if (config.facilitator) {\n            this.facilitatorClient = new FacilitatorClient(config.facilitator);\n        }\n    }\n\n    /**\n     * Create a signed payment payload (EIP-3009 TransferWithAuthorization).\n     * Returns a base64-encoded PaymentPayload ready for PAYMENT-SIGNATURE header.\n     */\n    async createPayment(params: X402PaymentParams): Promise<{\n        payload: PaymentPayload;\n        encoded: string;\n        nonce: Hex;\n    }> {\n        const nonce = params.nonce || generateNonce();\n        const now = BigInt(Math.floor(Date.now() / 1000));\n        const validAfter = params.validAfter ?? (now - 600n); // 10 min grace (per x402 spec)\n        const validBefore = params.validBefore ?? (now + 3600n);\n        const tokenName = this.config.tokenName || 'USDC';\n        const tokenVersion = this.config.tokenVersion || '2';\n\n        const signature = await signTransferWithAuthorization(this.config.walletClient, {\n            from: params.from,\n            to: params.to,\n            value: params.amount,\n            validAfter,\n            validBefore,\n            nonce,\n            tokenName,\n            tokenVersion,\n            chainId: this.config.chainId,\n            verifyingContract: params.asset,\n        });\n\n        const payload: PaymentPayload = {\n            x402Version: 2,\n            accepted: {\n                scheme: 'exact',\n                network: toNetworkId(this.config.chainId),\n                asset: params.asset,\n                amount: params.amount.toString(),\n                payTo: params.to,\n                maxTimeoutSeconds: 3600,\n                extra: { name: tokenName, version: tokenVersion },\n            },\n            payload: {\n                signature,\n                authorization: {\n                    from: params.from,\n                    to: params.to,\n                    value: params.amount.toString(),\n                    validAfter: validAfter.toString(),\n                    validBefore: validBefore.toString(),\n                    nonce,\n                },\n            },\n        };\n\n        return {\n            payload,\n            encoded: encodePaymentPayload(payload),\n            nonce,\n        };\n    }\n\n    /**\n     * Settle payment on-chain via SuperPaymaster (self-facilitated).\n     * Uses EIP-3009 transferWithAuthorization path.\n     */\n    async settleOnChain(params: {\n        from: Address; to: Address; asset: Address; amount: bigint;\n        validAfter: bigint; validBefore: bigint; nonce: Hex; signature: Hex;\n    }): Promise<Hex> {\n        return this.actions.settleX402Payment({\n            ...params,\n            account: this.config.walletClient.account!,\n        });\n    }\n\n    /**\n     * Settle payment on-chain via direct transfer (for xPNTs and pre-approved tokens).\n     */\n    async settleDirectOnChain(params: {\n        from: Address; to: Address; asset: Address; amount: bigint; nonce: Hex;\n    }): Promise<Hex> {\n        return this.actions.settleX402PaymentDirect({\n            ...params,\n            account: this.config.walletClient.account!,\n        });\n    }\n\n    /**\n     * Get facilitator fee quote from on-chain contract.\n     */\n    async getQuote(): Promise<{ feeBPS: bigint }> {\n        const feeBPS = await this.actions.facilitatorFeeBPS();\n        return { feeBPS };\n    }\n\n    /**\n     * Check if a nonce has been used.\n     */\n    async checkNonce(nonce: Hex): Promise<boolean> {\n        return this.actions.x402SettlementNonces({ nonce });\n    }\n\n    /**\n     * Settle via external facilitator (Coinbase, self-hosted, etc.).\n     * Requires facilitator config in constructor.\n     */\n    async settleViaFacilitator(payload: PaymentPayload, requirements: PaymentRequirements): Promise<SettleResponse> {\n        if (!this.facilitatorClient) {\n            throw new Error('No facilitator configured. Pass facilitator config to X402Client constructor.');\n        }\n        return this.facilitatorClient.settle(payload, requirements);\n    }\n\n    /**\n     * x402-aware fetch wrapper.\n     * Automatically handles 402 → sign → retry flow per x402 v2 spec.\n     *\n     * Pattern from: @x402/fetch wrapFetchWithPayment\n     *\n     * Flow:\n     * 1. Make initial request\n     * 2. If 402, extract PaymentRequired from PAYMENT-REQUIRED header\n     * 3. Select best payment option (applies policy: max amount check)\n     * 4. Sign EIP-3009 authorization\n     * 5. Retry with PAYMENT-SIGNATURE header\n     */\n    async x402Fetch(url: string, init?: RequestInit): Promise<Response> {\n        const firstResponse = await fetch(url, init);\n\n        if (firstResponse.status !== 402) {\n            return firstResponse;\n        }\n\n        // Step 2: Extract payment requirements\n        // TODO: some server implementations put PaymentRequired in the response body instead of headers\n        const paymentRequired = extractPaymentRequired(firstResponse);\n        if (!paymentRequired || !paymentRequired.accepts?.length) {\n            throw new Error('402 response missing PAYMENT-REQUIRED header or empty accepts');\n        }\n\n        // Step 3: Select payment option (filter by network + policy)\n        const myNetwork = toNetworkId(this.config.chainId);\n        let selected = paymentRequired.accepts.find(\n            (a) => a.network === myNetwork && a.scheme === 'exact'\n        );\n        if (!selected) {\n            // Fallback: any EVM option\n            selected = paymentRequired.accepts.find((a) => a.network.startsWith('eip155:'));\n        }\n        if (!selected) {\n            throw new Error(`No compatible payment option for network ${myNetwork}`);\n        }\n\n        // Policy check: max amount\n        if (this.config.maxAmountPerRequest && BigInt(selected.amount) > this.config.maxAmountPerRequest) {\n            throw new Error(\n                `Payment amount ${selected.amount} exceeds max ${this.config.maxAmountPerRequest}`\n            );\n        }\n\n        const account = this.config.walletClient.account;\n        if (!account) {\n            throw new Error('WalletClient must have an account for automatic payment');\n        }\n\n        // Step 4: Sign\n        const { encoded } = await this.createPayment({\n            from: account.address,\n            to: selected.payTo,\n            asset: selected.asset as Address,\n            amount: BigInt(selected.amount),\n        });\n\n        // Step 5: Retry with payment signature\n        const retryHeaders = new Headers(init?.headers);\n        retryHeaders.set(HEADER_PAYMENT_SIGNATURE, encoded);\n\n        return fetch(url, { ...init, headers: retryHeaders });\n    }\n}\n"]}
+{"version":3,"sources":["../../x402/src/eip3009.ts","../../x402/src/payment-header.ts","../../x402/src/facilitator.ts","../../x402/src/X402Client.ts"],"names":["toHex","x402Actions"],"mappings":";;;;;AAEO,IAAM,aAAA,GAAgB;AAAA,EACzB,yBAAA,EAA2B;AAAA,IACvB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU,GACrC;AAAA;AAAA;AAAA,EAGA,wBAAA,EAA0B;AAAA,IACtB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,EAAM,SAAA,EAAU;AAAA,IAC9B,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU,GACrC;AAAA,EACA,mBAAA,EAAqB;AAAA,IACjB,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAU;AAAA,IACtC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA;AAAU;AAEzC;AAEO,SAAS,gBAAA,CAAiB,SAAA,EAAmB,YAAA,EAAsB,OAAA,EAAiB,iBAAA,EAA4B;AACnH,EAAA,OAAO;AAAA,IACH,IAAA,EAAM,SAAA;AAAA,IACN,OAAA,EAAS,YAAA;AAAA,IACT,OAAA;AAAA,IACA;AAAA,GACJ;AACJ;AAEO,SAAS,aAAA,GAAqB;AACjC,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,KAAK,CAAA;AACvC,EAAA,OAAOA,WAAM,KAAK,CAAA;AACtB;AAGO,IAAM,oBAAA,GAAuB,EAAE,IAAA,EAAM,QAAA,EAAU,SAAS,GAAA;AAE/D,eAAsB,6BAAA,CAClB,cACA,MAAA,EAYY;AACZ,EAAA,MAAM,MAAA,GAAS,gBAAA;AAAA,IACX,MAAA,CAAO,SAAA;AAAA,IACP,MAAA,CAAO,YAAA;AAAA,IACP,MAAA,CAAO,OAAA;AAAA,IACP,MAAA,CAAO;AAAA,GACX;AAEA,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AAEA,EAAA,OAAO,aAAa,aAAA,CAAc;AAAA,IAC9B,OAAA;AAAA,IACA,MAAA;AAAA,IACA,KAAA,EAAO,aAAA;AAAA,IACP,WAAA,EAAa,2BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,OAAO,MAAA,CAAO;AAAA;AAClB,GACH,CAAA;AACL;AAQA,eAAsB,mCAAA,CAClB,cACA,MAAA,EAYY;AACZ,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,QAAQ,OAAA,CAAQ,WAAA,OAAkB,MAAA,CAAO,IAAA,CAAK,aAAY,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,CAAA,OAAA,EAAU,OAAA,CAAQ,OAAO,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAI,CAAA,CAAE,CAAA;AAAA,EAClF;AAEA,EAAA,IAAI,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACzC,IAAA,MAAM,IAAI,MAAM,6CAA6C,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAA,GAAa,IAAA,EAAM;AAC/C,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,qBAAA,EAAwB,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAU,CAAA,kCAAA;AAAA,KAClE;AAAA,EACJ;AACA,EAAA,OAAO,6BAAA,CAA8B,cAAc,MAAM,CAAA;AAC7D;AAOA,eAAsB,4BAAA,CAClB,cACA,MAAA,EAYY;AACZ,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,QAAQ,OAAA,CAAQ,WAAA,OAAkB,MAAA,CAAO,IAAA,CAAK,aAAY,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,CAAA,OAAA,EAAU,OAAA,CAAQ,OAAO,CAAA,qBAAA,EAAwB,MAAA,CAAO,IAAI,CAAA,CAAE,CAAA;AAAA,EAClF;AAEA,EAAA,IAAI,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACzC,IAAA,MAAM,IAAI,MAAM,6CAA6C,CAAA;AAAA,EACjE;AACA,EAAA,IAAI,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAA,GAAa,IAAA,EAAM;AAC/C,IAAA,MAAM,IAAI,KAAA;AAAA,MACN,CAAA,qBAAA,EAAwB,MAAA,CAAO,WAAA,GAAc,MAAA,CAAO,UAAU,CAAA,kCAAA;AAAA,KAClE;AAAA,EACJ;AAEA,EAAA,OAAO,aAAa,aAAA,CAAc;AAAA,IAC9B,OAAA;AAAA,IACA,MAAA,EAAQ,iBAAiB,MAAA,CAAO,SAAA,EAAW,OAAO,YAAA,EAAc,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,iBAAiB,CAAA;AAAA,IACxG,KAAA,EAAO,aAAA;AAAA,IACP,WAAA,EAAa,0BAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,OAAO,MAAA,CAAO;AAAA;AAClB,GACH,CAAA;AACL;AAMA,eAAsB,uBAAA,CAClB,cACA,MAAA,EAQY;AACZ,EAAA,MAAM,UAAU,YAAA,CAAa,OAAA;AAC7B,EAAA,IAAI,CAAC,OAAA,EAAS;AACV,IAAA,MAAM,IAAI,MAAM,mCAAmC,CAAA;AAAA,EACvD;AACA,EAAA,IAAI,QAAQ,OAAA,CAAQ,WAAA,OAAkB,MAAA,CAAO,UAAA,CAAW,aAAY,EAAG;AACnE,IAAA,MAAM,IAAI,MAAM,CAAA,OAAA,EAAU,OAAA,CAAQ,OAAO,CAAA,2BAAA,EAA8B,MAAA,CAAO,UAAU,CAAA,CAAE,CAAA;AAAA,EAC9F;AAEA,EAAA,OAAO,aAAa,aAAA,CAAc;AAAA,IAC9B,OAAA;AAAA,IACA,MAAA,EAAQ,iBAAiB,MAAA,CAAO,SAAA,EAAW,OAAO,YAAA,EAAc,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,iBAAiB,CAAA;AAAA,IACxG,KAAA,EAAO,aAAA;AAAA,IACP,WAAA,EAAa,qBAAA;AAAA,IACb,OAAA,EAAS;AAAA,MACL,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,OAAO,MAAA,CAAO;AAAA;AAClB,GACH,CAAA;AACL;;;AC9MO,IAAM,uBAAA,GAA0B;AAChC,IAAM,wBAAA,GAA2B;AACjC,IAAM,uBAAA,GAA0B;AAGhC,IAAM,iBAAA,GAAoB;AAC1B,IAAM,0BAAA,GAA6B;AAM1C,SAAS,SAAS,IAAA,EAAuB;AACrC,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAChC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAC/B,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EAC9C;AACA,EAAA,OAAO,KAAK,IAAI,CAAA;AACpB;AAEA,SAAS,WAAc,OAAA,EAAoB;AACvC,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AAC/B,IAAA,IAAA,GAAO,OAAO,IAAA,CAAK,OAAA,EAAS,QAAQ,CAAA,CAAE,SAAS,OAAO,CAAA;AAAA,EAC1D,CAAA,MAAO;AACH,IAAA,IAAA,GAAO,KAAK,OAAO,CAAA;AAAA,EACvB;AACA,EAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAC1B;AAIO,SAAS,sBAAsB,GAAA,EAA8B;AAChE,EAAA,OAAO,SAAS,GAAG,CAAA;AACvB;AAEO,SAAS,sBAAsB,OAAA,EAAkC;AACpE,EAAA,OAAO,WAA4B,OAAO,CAAA;AAC9C;AAIO,SAAS,qBAAqB,OAAA,EAAiC;AAClE,EAAA,OAAO,SAAS,OAAO,CAAA;AAC3B;AAEO,SAAS,qBAAqB,OAAA,EAAiC;AAClE,EAAA,OAAO,WAA2B,OAAO,CAAA;AAC7C;AAIO,SAAS,qBAAqB,IAAA,EAA8B;AAC/D,EAAA,OAAO,SAAS,IAAI,CAAA;AACxB;AAEO,SAAS,qBAAqB,OAAA,EAAiC;AAClE,EAAA,OAAO,WAA2B,OAAO,CAAA;AAC7C;AAUO,SAAS,uBAAuB,QAAA,EAA4C;AAC/E,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA;AACvD,EAAA,IAAI,EAAA,EAAI,OAAO,qBAAA,CAAsB,EAAE,CAAA;AAGvC,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,oBAAoB,CAAA;AACpD,EAAA,IAAI,EAAA,EAAI,OAAO,qBAAA,CAAsB,EAAE,CAAA;AAEvC,EAAA,OAAO,IAAA;AACX;AAKO,SAAS,sBAAsB,QAAA,EAA2C;AAC7E,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA;AACvD,EAAA,IAAI,EAAA,EAAI,OAAO,oBAAA,CAAqB,EAAE,CAAA;AAEtC,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,0BAA0B,CAAA;AAC1D,EAAA,IAAI,EAAA,EAAI,OAAO,oBAAA,CAAqB,EAAE,CAAA;AAEtC,EAAA,OAAO,IAAA;AACX;;;ACnFO,IAAM,oBAAN,MAAwB;AAAA,EACV,GAAA;AAAA,EACA,iBAAA;AAAA,EAEjB,YAAY,MAAA,EAA2B;AACnC,IAAA,IAAA,CAAK,GAAA,GAAM,MAAA,CAAO,GAAA,CAAI,OAAA,CAAQ,OAAO,EAAE,CAAA;AACvC,IAAA,IAAA,CAAK,oBAAoB,MAAA,CAAO,iBAAA;AAAA,EACpC;AAAA,EAEA,MAAc,WAAW,QAAA,EAA8E;AACnG,IAAA,MAAM,IAAA,GAA+B,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAC1E,IAAA,IAAI,CAAC,IAAA,CAAK,iBAAA,EAAmB,OAAO,IAAA;AACpC,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,iBAAA,EAAkB;AAC1C,IAAA,OAAO,EAAE,GAAG,IAAA,EAAM,GAAG,IAAA,CAAK,QAAQ,CAAA,EAAE;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACF,cAAA,EACA,mBAAA,EACuB;AACvB,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,OAAA,CAAA,EAAW;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,MAAM,IAAA,CAAK,UAAA,CAAW,QAAQ,CAAA;AAAA,MACvC,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,QACjB,WAAA,EAAa,CAAA;AAAA,QACb,cAAA;AAAA,QACA;AAAA,OACH;AAAA,KACJ,CAAA;AACD,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,IAAA,CAAK,MAAM,IAAI,MAAM,IAAA,CAAK,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,IACrF;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAA,CACF,cAAA,EACA,mBAAA,EACuB;AACvB,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,OAAA,CAAA,EAAW;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,MAAM,IAAA,CAAK,UAAA,CAAW,QAAQ,CAAA;AAAA,MACvC,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,QACjB,WAAA,EAAa,CAAA;AAAA,QACb,cAAA;AAAA,QACA;AAAA,OACH;AAAA,KACJ,CAAA;AACD,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,IAAA,CAAK,MAAM,IAAI,MAAM,IAAA,CAAK,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,IACrF;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAA,GAA2C;AAC7C,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAG,CAAA,UAAA,CAAA,EAAc;AAAA,MAC9C,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,MAAM,IAAA,CAAK,UAAA,CAAW,WAAW;AAAA,KAC7C,CAAA;AACD,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACV,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,+BAAA,EAAkC,IAAA,CAAK,MAAM,IAAI,MAAM,IAAA,CAAK,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,IACxF;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACrB;AACJ;;;ACrDA,SAAS,YAAY,OAAA,EAAqC;AACtD,EAAA,OAAO,UAAU,OAAO,CAAA,CAAA;AAC5B;AAEO,IAAM,aAAN,MAAiB;AAAA,EACH,OAAA;AAAA,EACA,MAAA;AAAA,EACA,iBAAA;AAAA,EAEjB,YAAY,MAAA,EAA0B;AAClC,IAAA,IAAI,CAAC,MAAA,CAAO,YAAA,CAAa,OAAA,EAAS;AAC9B,MAAA,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAAA,IAClE;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAEd,IAAA,IAAA,CAAK,UAAUC,6BAAA,CAAY,MAAA,CAAO,qBAAqB,CAAA,CAAE,OAAO,YAAY,CAAA;AAC5E,IAAA,IAAI,OAAO,WAAA,EAAa;AACpB,MAAA,IAAA,CAAK,iBAAA,GAAoB,IAAI,iBAAA,CAAkB,MAAA,CAAO,WAAW,CAAA;AAAA,IACrE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,cAAc,MAAA,EAIjB;AACC,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,IAAS,aAAA,EAAc;AAC5C,IAAA,MAAM,GAAA,GAAM,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,GAAA,EAAI,GAAI,GAAI,CAAC,CAAA;AAChD,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,IAAe,GAAA,GAAM,IAAA;AAC/C,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,WAAA,IAAgB,GAAA,GAAM,KAAA;AACjD,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,SAAA,IAAa,MAAA;AAC3C,IAAA,MAAM,YAAA,GAAe,IAAA,CAAK,MAAA,CAAO,YAAA,IAAgB,GAAA;AAEjD,IAAA,MAAM,SAAA,GAAY,MAAM,6BAAA,CAA8B,IAAA,CAAK,OAAO,YAAA,EAAc;AAAA,MAC5E,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,IAAI,MAAA,CAAO,EAAA;AAAA,MACX,OAAO,MAAA,CAAO,MAAA;AAAA,MACd,UAAA;AAAA,MACA,WAAA;AAAA,MACA,KAAA;AAAA,MACA,SAAA;AAAA,MACA,YAAA;AAAA,MACA,OAAA,EAAS,KAAK,MAAA,CAAO,OAAA;AAAA,MACrB,mBAAmB,MAAA,CAAO;AAAA,KAC7B,CAAA;AAED,IAAA,MAAM,OAAA,GAA0B;AAAA,MAC5B,WAAA,EAAa,CAAA;AAAA,MACb,QAAA,EAAU;AAAA,QACN,MAAA,EAAQ,OAAA;AAAA,QACR,OAAA,EAAS,WAAA,CAAY,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA;AAAA,QACxC,OAAO,MAAA,CAAO,KAAA;AAAA,QACd,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,QAAA,EAAS;AAAA,QAC/B,OAAO,MAAA,CAAO,EAAA;AAAA,QACd,iBAAA,EAAmB,IAAA;AAAA,QACnB,KAAA,EAAO,EAAE,IAAA,EAAM,SAAA,EAAW,SAAS,YAAA;AAAa,OACpD;AAAA,MACA,OAAA,EAAS;AAAA,QACL,SAAA;AAAA,QACA,aAAA,EAAe;AAAA,UACX,MAAM,MAAA,CAAO,IAAA;AAAA,UACb,IAAI,MAAA,CAAO,EAAA;AAAA,UACX,KAAA,EAAO,MAAA,CAAO,MAAA,CAAO,QAAA,EAAS;AAAA,UAC9B,UAAA,EAAY,WAAW,QAAA,EAAS;AAAA,UAChC,WAAA,EAAa,YAAY,QAAA,EAAS;AAAA,UAClC;AAAA;AACJ;AACJ,KACJ;AAEA,IAAA,OAAO;AAAA,MACH,OAAA;AAAA,MACA,OAAA,EAAS,qBAAqB,OAAO,CAAA;AAAA,MACrC;AAAA,KACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,cAAc,MAAA,EAGH;AACb,IAAA,OAAO,IAAA,CAAK,QAAQ,iBAAA,CAAkB;AAAA,MAClC,GAAG,MAAA;AAAA,MACH,OAAA,EAAS,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa;AAAA,KACrC,CAAA;AAAA,EACL;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,oBAAoB,MAAA,EAET;AACb,IAAA,OAAO,IAAA,CAAK,QAAQ,uBAAA,CAAwB;AAAA,MACxC,GAAG,MAAA;AAAA,MACH,OAAA,EAAS,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa;AAAA,KACrC,CAAA;AAAA,EACL;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAA,GAAwC;AAC1C,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,OAAA,CAAQ,iBAAA,EAAkB;AACpD,IAAA,OAAO,EAAE,MAAA,EAAO;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,WAAW,KAAA,EAA8B;AAC3C,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,oBAAA,CAAqB,EAAE,OAAO,CAAA;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBAAA,CAAqB,OAAA,EAAyB,YAAA,EAA4D;AAC5G,IAAA,IAAI,CAAC,KAAK,iBAAA,EAAmB;AACzB,MAAA,MAAM,IAAI,MAAM,+EAA+E,CAAA;AAAA,IACnG;AACA,IAAA,OAAO,IAAA,CAAK,iBAAA,CAAkB,MAAA,CAAO,OAAA,EAAS,YAAY,CAAA;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,SAAA,CAAU,GAAA,EAAa,IAAA,EAAuC;AAChE,IAAA,MAAM,aAAA,GAAgB,MAAM,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AAE3C,IAAA,IAAI,aAAA,CAAc,WAAW,GAAA,EAAK;AAC9B,MAAA,OAAO,aAAA;AAAA,IACX;AAIA,IAAA,MAAM,eAAA,GAAkB,uBAAuB,aAAa,CAAA;AAC5D,IAAA,IAAI,CAAC,eAAA,IAAmB,CAAC,eAAA,CAAgB,SAAS,MAAA,EAAQ;AACtD,MAAA,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAAA,IACnF;AAGA,IAAA,MAAM,SAAA,GAAY,WAAA,CAAY,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA;AACjD,IAAA,IAAI,QAAA,GAAW,gBAAgB,OAAA,CAAQ,IAAA;AAAA,MACnC,CAAC,CAAA,KAAM,CAAA,CAAE,OAAA,KAAY,SAAA,IAAa,EAAE,MAAA,KAAW;AAAA,KACnD;AACA,IAAA,IAAI,CAAC,QAAA,EAAU;AAEX,MAAA,QAAA,GAAW,eAAA,CAAgB,QAAQ,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,OAAA,CAAQ,UAAA,CAAW,SAAS,CAAC,CAAA;AAAA,IAClF;AACA,IAAA,IAAI,CAAC,QAAA,EAAU;AACX,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,yCAAA,EAA4C,SAAS,CAAA,CAAE,CAAA;AAAA,IAC3E;AAGA,IAAA,IAAI,IAAA,CAAK,OAAO,mBAAA,IAAuB,MAAA,CAAO,SAAS,MAAM,CAAA,GAAI,IAAA,CAAK,MAAA,CAAO,mBAAA,EAAqB;AAC9F,MAAA,MAAM,IAAI,KAAA;AAAA,QACN,kBAAkB,QAAA,CAAS,MAAM,CAAA,aAAA,EAAgB,IAAA,CAAK,OAAO,mBAAmB,CAAA;AAAA,OACpF;AAAA,IACJ;AAEA,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,MAAA,CAAO,YAAA,CAAa,OAAA;AACzC,IAAA,IAAI,CAAC,OAAA,EAAS;AACV,MAAA,MAAM,IAAI,MAAM,yDAAyD,CAAA;AAAA,IAC7E;AAGA,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,MAAM,KAAK,aAAA,CAAc;AAAA,MACzC,MAAM,OAAA,CAAQ,OAAA;AAAA,MACd,IAAI,QAAA,CAAS,KAAA;AAAA,MACb,OAAO,QAAA,CAAS,KAAA;AAAA,MAChB,MAAA,EAAQ,MAAA,CAAO,QAAA,CAAS,MAAM;AAAA,KACjC,CAAA;AAGD,IAAA,MAAM,YAAA,GAAe,IAAI,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAC9C,IAAA,YAAA,CAAa,GAAA,CAAI,0BAA0B,OAAO,CAAA;AAElD,IAAA,OAAO,MAAM,GAAA,EAAK,EAAE,GAAG,IAAA,EAAM,OAAA,EAAS,cAAc,CAAA;AAAA,EACxD;AACJ","file":"chunk-WVOJV4Q5.cjs","sourcesContent":["import { type Address, type Hex, type WalletClient, toHex } from 'viem';\n\nexport const EIP3009_TYPES = {\n    TransferWithAuthorization: [\n        { name: 'from', type: 'address' },\n        { name: 'to', type: 'address' },\n        { name: 'value', type: 'uint256' },\n        { name: 'validAfter', type: 'uint256' },\n        { name: 'validBefore', type: 'uint256' },\n        { name: 'nonce', type: 'bytes32' },\n    ],\n    // Distinct typehash from TransferWithAuthorization — prevents replay across variants.\n    // msg.sender must equal `to` on-chain (CallerMustBeRecipient error if violated).\n    ReceiveWithAuthorization: [\n        { name: 'from', type: 'address' },\n        { name: 'to', type: 'address' },\n        { name: 'value', type: 'uint256' },\n        { name: 'validAfter', type: 'uint256' },\n        { name: 'validBefore', type: 'uint256' },\n        { name: 'nonce', type: 'bytes32' },\n    ],\n    CancelAuthorization: [\n        { name: 'authorizer', type: 'address' },\n        { name: 'nonce', type: 'bytes32' },\n    ],\n} as const;\n\nexport function getEIP3009Domain(tokenName: string, tokenVersion: string, chainId: number, verifyingContract: Address) {\n    return {\n        name: tokenName,\n        version: tokenVersion,\n        chainId,\n        verifyingContract,\n    };\n}\n\nexport function generateNonce(): Hex {\n    const bytes = new Uint8Array(32);\n    globalThis.crypto.getRandomValues(bytes);\n    return toHex(bytes);\n}\n\n// GToken EIP-712 domain constants (GTokenAuthorization v2.2.0)\nexport const GTOKEN_EIP712_DOMAIN = { name: 'GToken', version: '1' } as const;\n\nexport async function signTransferWithAuthorization(\n    walletClient: WalletClient,\n    params: {\n        from: Address;\n        to: Address;\n        value: bigint;\n        validAfter: bigint;\n        validBefore: bigint;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const domain = getEIP3009Domain(\n        params.tokenName,\n        params.tokenVersion,\n        params.chainId,\n        params.verifyingContract\n    );\n\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n\n    return walletClient.signTypedData({\n        account,\n        domain,\n        types: EIP3009_TYPES,\n        primaryType: 'TransferWithAuthorization',\n        message: {\n            from: params.from,\n            to: params.to,\n            value: params.value,\n            validAfter: params.validAfter,\n            validBefore: params.validBefore,\n            nonce: params.nonce,\n        },\n    });\n}\n\n/**\n * Sign a TransferWithAuthorization for GTokenAuthorization (EIP-3009).\n * GToken-specific wrapper: enforces MAX_AUTH_VALIDITY = 300s before signing.\n * Use this instead of the generic signTransferWithAuthorization when the\n * verifying contract is GTokenAuthorization.\n */\nexport async function signGTokenTransferWithAuthorization(\n    walletClient: WalletClient,\n    params: {\n        from: Address;\n        to: Address;\n        value: bigint;\n        validAfter: bigint;\n        validBefore: bigint;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n    if (account.address.toLowerCase() !== params.from.toLowerCase()) {\n        throw new Error(`Signer ${account.address} does not match from ${params.from}`);\n    }\n    // GTokenAuthorization enforces MAX_AUTH_VALIDITY = 300s on-chain.\n    if (params.validBefore <= params.validAfter) {\n        throw new Error('validBefore must be greater than validAfter');\n    }\n    if (params.validBefore - params.validAfter > 300n) {\n        throw new Error(\n            `Authorization window ${params.validBefore - params.validAfter}s exceeds MAX_AUTH_VALIDITY (300s)`\n        );\n    }\n    return signTransferWithAuthorization(walletClient, params);\n}\n\n/**\n * Sign a ReceiveWithAuthorization for GTokenAuthorization (EIP-3009).\n * The signed `to` address must be the one submitting the transaction on-chain.\n * Note: `xPNTsToken` is NOT included in the signature (it's a relay-supplied hint for RC-2).\n */\nexport async function signReceiveWithAuthorization(\n    walletClient: WalletClient,\n    params: {\n        from: Address;\n        to: Address;\n        value: bigint;\n        validAfter: bigint;\n        validBefore: bigint;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n    if (account.address.toLowerCase() !== params.from.toLowerCase()) {\n        throw new Error(`Signer ${account.address} does not match from ${params.from}`);\n    }\n    // GTokenAuthorization enforces MAX_AUTH_VALIDITY = 300s on-chain (RC-1).\n    if (params.validBefore <= params.validAfter) {\n        throw new Error('validBefore must be greater than validAfter');\n    }\n    if (params.validBefore - params.validAfter > 300n) {\n        throw new Error(\n            `Authorization window ${params.validBefore - params.validAfter}s exceeds MAX_AUTH_VALIDITY (300s)`\n        );\n    }\n\n    return walletClient.signTypedData({\n        account,\n        domain: getEIP3009Domain(params.tokenName, params.tokenVersion, params.chainId, params.verifyingContract),\n        types: EIP3009_TYPES,\n        primaryType: 'ReceiveWithAuthorization',\n        message: {\n            from: params.from,\n            to: params.to,\n            value: params.value,\n            validAfter: params.validAfter,\n            validBefore: params.validBefore,\n            nonce: params.nonce,\n        },\n    });\n}\n\n/**\n * Sign a CancelAuthorization for GTokenAuthorization (EIP-3009).\n * Must be signed by the original `authorizer` address.\n */\nexport async function signCancelAuthorization(\n    walletClient: WalletClient,\n    params: {\n        authorizer: Address;\n        nonce: Hex;\n        tokenName: string;\n        tokenVersion: string;\n        chainId: number;\n        verifyingContract: Address;\n    }\n): Promise<Hex> {\n    const account = walletClient.account;\n    if (!account) {\n        throw new Error('WalletClient must have an account');\n    }\n    if (account.address.toLowerCase() !== params.authorizer.toLowerCase()) {\n        throw new Error(`Signer ${account.address} does not match authorizer ${params.authorizer}`);\n    }\n\n    return walletClient.signTypedData({\n        account,\n        domain: getEIP3009Domain(params.tokenName, params.tokenVersion, params.chainId, params.verifyingContract),\n        types: EIP3009_TYPES,\n        primaryType: 'CancelAuthorization',\n        message: {\n            authorizer: params.authorizer,\n            nonce: params.nonce,\n        },\n    });\n}\n","import type { PaymentRequired, PaymentPayload, SettleResponse } from './types.js';\n\n// ============================================================\n// x402 v2 HTTP Header Names\n// Ref: github.com/coinbase/x402/blob/main/specs/x402-specification-v2.md\n// ============================================================\n\n/** v2 header names (standard) */\nexport const HEADER_PAYMENT_REQUIRED = 'PAYMENT-REQUIRED';\nexport const HEADER_PAYMENT_SIGNATURE = 'PAYMENT-SIGNATURE';\nexport const HEADER_PAYMENT_RESPONSE = 'PAYMENT-RESPONSE';\n\n/** v1 header names (backward compat) */\nexport const HEADER_V1_PAYMENT = 'X-PAYMENT';\nexport const HEADER_V1_PAYMENT_RESPONSE = 'X-PAYMENT-RESPONSE';\n\n// ============================================================\n// Encoding / Decoding (Base64 JSON — per x402 spec)\n// ============================================================\n\nfunction toBase64(data: unknown): string {\n    const json = JSON.stringify(data);\n    if (typeof Buffer !== 'undefined') {\n        return Buffer.from(json).toString('base64');\n    }\n    return btoa(json);\n}\n\nfunction fromBase64<T>(encoded: string): T {\n    let json: string;\n    if (typeof Buffer !== 'undefined') {\n        json = Buffer.from(encoded, 'base64').toString('utf-8');\n    } else {\n        json = atob(encoded);\n    }\n    return JSON.parse(json) as T;\n}\n\n// --- PaymentRequired (402 response) ---\n\nexport function encodePaymentRequired(req: PaymentRequired): string {\n    return toBase64(req);\n}\n\nexport function decodePaymentRequired(encoded: string): PaymentRequired {\n    return fromBase64<PaymentRequired>(encoded);\n}\n\n// --- PaymentPayload (client → server) ---\n\nexport function encodePaymentPayload(payload: PaymentPayload): string {\n    return toBase64(payload);\n}\n\nexport function decodePaymentPayload(encoded: string): PaymentPayload {\n    return fromBase64<PaymentPayload>(encoded);\n}\n\n// --- SettleResponse (server → client) ---\n\nexport function encodeSettleResponse(resp: SettleResponse): string {\n    return toBase64(resp);\n}\n\nexport function decodeSettleResponse(encoded: string): SettleResponse {\n    return fromBase64<SettleResponse>(encoded);\n}\n\n// ============================================================\n// Header Extraction Helpers\n// ============================================================\n\n/**\n * Extract PaymentRequired from a 402 Response.\n * Tries v2 header first, falls back to v1.\n */\nexport function extractPaymentRequired(response: Response): PaymentRequired | null {\n    const v2 = response.headers.get(HEADER_PAYMENT_REQUIRED);\n    if (v2) return decodePaymentRequired(v2);\n\n    // v1 fallback: check body or X-PAYMENT-REQUIRED\n    const v1 = response.headers.get('X-PAYMENT-REQUIRED');\n    if (v1) return decodePaymentRequired(v1);\n\n    return null;\n}\n\n/**\n * Extract SettleResponse from a successful response.\n */\nexport function extractSettleResponse(response: Response): SettleResponse | null {\n    const v2 = response.headers.get(HEADER_PAYMENT_RESPONSE);\n    if (v2) return decodeSettleResponse(v2);\n\n    const v1 = response.headers.get(HEADER_V1_PAYMENT_RESPONSE);\n    if (v1) return decodeSettleResponse(v1);\n\n    return null;\n}\n","import type {\n    PaymentPayload,\n    PaymentRequirements,\n    VerifyResponse,\n    SettleResponse,\n    FacilitatorSupported,\n    FacilitatorConfig,\n} from './types.js';\n\n/**\n * HTTP Facilitator Client — standard x402 v2 facilitator API.\n * Compatible with Coinbase hosted facilitator and self-hosted instances.\n *\n * Ref: coinbase/x402 HTTPFacilitatorClient pattern\n */\nexport class FacilitatorClient {\n    private readonly url: string;\n    private readonly createAuthHeaders: FacilitatorConfig['createAuthHeaders'];\n\n    constructor(config: FacilitatorConfig) {\n        this.url = config.url.replace(/\\/$/, '');\n        this.createAuthHeaders = config.createAuthHeaders;\n    }\n\n    private async getHeaders(endpoint: 'verify' | 'settle' | 'supported'): Promise<Record<string, string>> {\n        const base: Record<string, string> = { 'Content-Type': 'application/json' };\n        if (!this.createAuthHeaders) return base;\n        const auth = await this.createAuthHeaders();\n        return { ...base, ...auth[endpoint] };\n    }\n\n    /**\n     * POST /verify — validate payment signature off-chain (~100ms).\n     */\n    async verify(\n        paymentPayload: PaymentPayload,\n        paymentRequirements: PaymentRequirements,\n    ): Promise<VerifyResponse> {\n        const resp = await fetch(`${this.url}/verify`, {\n            method: 'POST',\n            headers: await this.getHeaders('verify'),\n            body: JSON.stringify({\n                x402Version: 2,\n                paymentPayload,\n                paymentRequirements,\n            }),\n        });\n        if (!resp.ok) {\n            throw new Error(`Facilitator /verify failed: ${resp.status} ${await resp.text()}`);\n        }\n        return resp.json() as Promise<VerifyResponse>;\n    }\n\n    /**\n     * POST /settle — execute on-chain settlement (~2s on Base).\n     */\n    async settle(\n        paymentPayload: PaymentPayload,\n        paymentRequirements: PaymentRequirements,\n    ): Promise<SettleResponse> {\n        const resp = await fetch(`${this.url}/settle`, {\n            method: 'POST',\n            headers: await this.getHeaders('settle'),\n            body: JSON.stringify({\n                x402Version: 2,\n                paymentPayload,\n                paymentRequirements,\n            }),\n        });\n        if (!resp.ok) {\n            throw new Error(`Facilitator /settle failed: ${resp.status} ${await resp.text()}`);\n        }\n        return resp.json() as Promise<SettleResponse>;\n    }\n\n    /**\n     * GET /supported — query facilitator capabilities.\n     */\n    async supported(): Promise<FacilitatorSupported> {\n        const resp = await fetch(`${this.url}/supported`, {\n            method: 'GET',\n            headers: await this.getHeaders('supported'),\n        });\n        if (!resp.ok) {\n            throw new Error(`Facilitator /supported failed: ${resp.status} ${await resp.text()}`);\n        }\n        return resp.json() as Promise<FacilitatorSupported>;\n    }\n}\n","import { type Address, type Hex, type Hash, type PublicClient, type WalletClient } from 'viem';\nimport { x402Actions } from '@aastar/core';\nimport type {\n    X402PaymentParams, PaymentRequired, PaymentPayload,\n    PaymentRequirements, SettleResponse, FacilitatorConfig,\n} from './types.js';\nimport { signTransferWithAuthorization, generateNonce } from './eip3009.js';\nimport {\n    encodePaymentPayload,\n    extractPaymentRequired,\n    extractSettleResponse,\n    HEADER_PAYMENT_SIGNATURE,\n} from './payment-header.js';\nimport { FacilitatorClient } from './facilitator.js';\n\n// ============================================================\n// x402 Client — aligned with @x402/fetch + @x402/core patterns\n// Ref: coinbase/x402, Cloudflare Workers x402, MPP mppx\n// ============================================================\n\nexport type X402ClientConfig = {\n    publicClient: PublicClient;\n    walletClient: WalletClient;\n    superPaymasterAddress: Address;\n    chainId: number;\n    /** Facilitator endpoint (default: self-facilitated via SuperPaymaster) */\n    facilitator?: FacilitatorConfig;\n    /** EIP-712 domain for asset token (defaults: USDC / version \"2\") */\n    tokenName?: string;\n    tokenVersion?: string;\n    /** Payment policy: max amount per request (in atomic units) */\n    maxAmountPerRequest?: bigint;\n};\n\n/** CAIP-2 network identifier from chainId */\nfunction toNetworkId(chainId: number): `eip155:${number}` {\n    return `eip155:${chainId}`;\n}\n\nexport class X402Client {\n    private readonly actions;\n    private readonly config: X402ClientConfig;\n    private readonly facilitatorClient?: FacilitatorClient;\n\n    constructor(config: X402ClientConfig) {\n        if (!config.walletClient.account) {\n            throw new Error('WalletClient must have an account configured');\n        }\n        this.config = config;\n        // walletClient supports both readContract and writeContract — single instance suffices\n        this.actions = x402Actions(config.superPaymasterAddress)(config.walletClient);\n        if (config.facilitator) {\n            this.facilitatorClient = new FacilitatorClient(config.facilitator);\n        }\n    }\n\n    /**\n     * Create a signed payment payload (EIP-3009 TransferWithAuthorization).\n     * Returns a base64-encoded PaymentPayload ready for PAYMENT-SIGNATURE header.\n     */\n    async createPayment(params: X402PaymentParams): Promise<{\n        payload: PaymentPayload;\n        encoded: string;\n        nonce: Hex;\n    }> {\n        const nonce = params.nonce || generateNonce();\n        const now = BigInt(Math.floor(Date.now() / 1000));\n        const validAfter = params.validAfter ?? (now - 600n); // 10 min grace (per x402 spec)\n        const validBefore = params.validBefore ?? (now + 3600n);\n        const tokenName = this.config.tokenName || 'USDC';\n        const tokenVersion = this.config.tokenVersion || '2';\n\n        const signature = await signTransferWithAuthorization(this.config.walletClient, {\n            from: params.from,\n            to: params.to,\n            value: params.amount,\n            validAfter,\n            validBefore,\n            nonce,\n            tokenName,\n            tokenVersion,\n            chainId: this.config.chainId,\n            verifyingContract: params.asset,\n        });\n\n        const payload: PaymentPayload = {\n            x402Version: 2,\n            accepted: {\n                scheme: 'exact',\n                network: toNetworkId(this.config.chainId),\n                asset: params.asset,\n                amount: params.amount.toString(),\n                payTo: params.to,\n                maxTimeoutSeconds: 3600,\n                extra: { name: tokenName, version: tokenVersion },\n            },\n            payload: {\n                signature,\n                authorization: {\n                    from: params.from,\n                    to: params.to,\n                    value: params.amount.toString(),\n                    validAfter: validAfter.toString(),\n                    validBefore: validBefore.toString(),\n                    nonce,\n                },\n            },\n        };\n\n        return {\n            payload,\n            encoded: encodePaymentPayload(payload),\n            nonce,\n        };\n    }\n\n    /**\n     * Settle payment on-chain via SuperPaymaster (self-facilitated).\n     * Uses EIP-3009 transferWithAuthorization path.\n     */\n    async settleOnChain(params: {\n        from: Address; to: Address; asset: Address; amount: bigint;\n        validAfter: bigint; validBefore: bigint; nonce: Hex; signature: Hex;\n    }): Promise<Hex> {\n        return this.actions.settleX402Payment({\n            ...params,\n            account: this.config.walletClient.account!,\n        });\n    }\n\n    /**\n     * Settle payment on-chain via direct transfer (for xPNTs and pre-approved tokens).\n     */\n    async settleDirectOnChain(params: {\n        from: Address; to: Address; asset: Address; amount: bigint; nonce: Hex;\n    }): Promise<Hex> {\n        return this.actions.settleX402PaymentDirect({\n            ...params,\n            account: this.config.walletClient.account!,\n        });\n    }\n\n    /**\n     * Get facilitator fee quote from on-chain contract.\n     */\n    async getQuote(): Promise<{ feeBPS: bigint }> {\n        const feeBPS = await this.actions.facilitatorFeeBPS();\n        return { feeBPS };\n    }\n\n    /**\n     * Check if a nonce has been used.\n     */\n    async checkNonce(nonce: Hex): Promise<boolean> {\n        return this.actions.x402SettlementNonces({ nonce });\n    }\n\n    /**\n     * Settle via external facilitator (Coinbase, self-hosted, etc.).\n     * Requires facilitator config in constructor.\n     */\n    async settleViaFacilitator(payload: PaymentPayload, requirements: PaymentRequirements): Promise<SettleResponse> {\n        if (!this.facilitatorClient) {\n            throw new Error('No facilitator configured. Pass facilitator config to X402Client constructor.');\n        }\n        return this.facilitatorClient.settle(payload, requirements);\n    }\n\n    /**\n     * x402-aware fetch wrapper.\n     * Automatically handles 402 → sign → retry flow per x402 v2 spec.\n     *\n     * Pattern from: @x402/fetch wrapFetchWithPayment\n     *\n     * Flow:\n     * 1. Make initial request\n     * 2. If 402, extract PaymentRequired from PAYMENT-REQUIRED header\n     * 3. Select best payment option (applies policy: max amount check)\n     * 4. Sign EIP-3009 authorization\n     * 5. Retry with PAYMENT-SIGNATURE header\n     */\n    async x402Fetch(url: string, init?: RequestInit): Promise<Response> {\n        const firstResponse = await fetch(url, init);\n\n        if (firstResponse.status !== 402) {\n            return firstResponse;\n        }\n\n        // Step 2: Extract payment requirements\n        // TODO: some server implementations put PaymentRequired in the response body instead of headers\n        const paymentRequired = extractPaymentRequired(firstResponse);\n        if (!paymentRequired || !paymentRequired.accepts?.length) {\n            throw new Error('402 response missing PAYMENT-REQUIRED header or empty accepts');\n        }\n\n        // Step 3: Select payment option (filter by network + policy)\n        const myNetwork = toNetworkId(this.config.chainId);\n        let selected = paymentRequired.accepts.find(\n            (a) => a.network === myNetwork && a.scheme === 'exact'\n        );\n        if (!selected) {\n            // Fallback: any EVM option\n            selected = paymentRequired.accepts.find((a) => a.network.startsWith('eip155:'));\n        }\n        if (!selected) {\n            throw new Error(`No compatible payment option for network ${myNetwork}`);\n        }\n\n        // Policy check: max amount\n        if (this.config.maxAmountPerRequest && BigInt(selected.amount) > this.config.maxAmountPerRequest) {\n            throw new Error(\n                `Payment amount ${selected.amount} exceeds max ${this.config.maxAmountPerRequest}`\n            );\n        }\n\n        const account = this.config.walletClient.account;\n        if (!account) {\n            throw new Error('WalletClient must have an account for automatic payment');\n        }\n\n        // Step 4: Sign\n        const { encoded } = await this.createPayment({\n            from: account.address,\n            to: selected.payTo,\n            asset: selected.asset as Address,\n            amount: BigInt(selected.amount),\n        });\n\n        // Step 5: Retry with payment signature\n        const retryHeaders = new Headers(init?.headers);\n        retryHeaders.set(HEADER_PAYMENT_SIGNATURE, encoded);\n\n        return fetch(url, { ...init, headers: retryHeaders });\n    }\n}\n"]}

package/dist/{chunk-LAZA3JD7.cjs → chunk-Y5U7URNZ.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkXQROKLZI_cjs = require('./chunk-XQROKLZI.cjs');
-var chunkMFBTMF5U_cjs = require('./chunk-MFBTMF5U.cjs');
+var chunkMOJJ7QF6_cjs = require('./chunk-MOJJ7QF6.cjs');
 var chunkMXJEULSE_cjs = require('./chunk-MXJEULSE.cjs');
 var viem = require('viem');
 var axios = require('axios');
@@ -471,6 +471,10 @@ var EthereumProvider = class {
   getBundlerProvider() {
     return this.bundlerProvider;
   }
+  /** EVM chain id from the validated ServerConfig (deterministic — no RPC round-trip). */
+  getChainId() {
+    return this.config.chainId;
+  }
   /**
    * Raw bundler JSON-RPC call. The bundler exposes non-standard methods
    * (eth_sendUserOperation, pimlico_getUserOperationGasPrice, ...) that are not in
@@ -724,7 +728,7 @@ function toGuardianSpecs(p) {
   return specs;
 }
 function buildFullInitConfig(p) {
-  return chunkMFBTMF5U_cjs.buildInitConfig({
+  return chunkMOJJ7QF6_cjs.buildInitConfig({
     guardians: toGuardianSpecs(p),
     dailyLimit: p.dailyLimit,
     ...p.approvedAlgIds ? { approvedAlgIds: p.approvedAlgIds } : {},
@@ -757,7 +761,7 @@ function initConfigFromRecord(record) {
   const guardians = record.guardianSpecs.map(
     (s) => "p256" in s ? { p256: { x: s.p256.x, y: s.p256.y } } : { ecdsa: s.ecdsa }
   );
-  return chunkMFBTMF5U_cjs.buildInitConfig({
+  return chunkMOJJ7QF6_cjs.buildInitConfig({
     guardians,
     dailyLimit: record.dailyLimit ? BigInt(record.dailyLimit) : 0n,
     ...record.approvedAlgIds ? { approvedAlgIds: record.approvedAlgIds } : {},
@@ -1105,8 +1109,82 @@ var AccountManager = class {
     this.logger.log(
       `[AccountManager] account created with ${params.p256Guardians.length} P-256 guardian(s): ${accountAddress}`
     );
+    if (chunkMOJJ7QF6_cjs.needsValidatorRouter(config.approvedAlgIds)) {
+      this.logger.log(
+        `[AccountManager] account ${accountAddress} approved a router-delegated algorithm (approvedAlgIds=[${config.approvedAlgIds.join(", ")}]); call ensureValidatorRouter(userId) AFTER the account is deployed to wire setValidator(router) \u2014 required for those algIds to validate.`
+      );
+    }
     return account;
   }
+  /**
+   * Gap B — wire the validator router for an account that approved a ROUTER-DELEGATED signature
+   * algorithm (BLS 0x01, cumulative T2 0x04, T3 0x05, weighted 0x07, session 0x08, ...). Such an
+   * account's `_validateTripleSignature` / `_callBLSValidator` return `1` (FAIL) while
+   * `validator() == address(0)`, so the algorithm is non-functional until the owner calls
+   * `setValidator(router)` (onlyOwner, SET-ONCE). Inline algIds (ECDSA 0x02, P256 0x03, COMBINED_T1
+   * 0x06) need no router and are a no-op here.
+   *
+   * MUST be called AFTER the account is deployed (setValidator is onlyOwner and needs code) — the
+   * lazy/counterfactual deploy path cannot setValidator at predict-time. Idempotent: re-running after
+   * the validator is set is a no-op (`reason: 'validator already set'`).
+   *
+   * On-chain access matches the rest of this package: reads via the EthereumProvider's PublicClient
+   * (`getAccountContract(...).read.validator()` and `getProvider().getCode()`); the state-changing
+   * `setValidator` is sent through a caller-supplied `WalletClient` whose account is the owner —
+   * the same convention used by `PaymasterManager.updatePrice` / `ForceExitService` (this manager's
+   * narrow `ISignerAdapter` only EIP-191 personal-signs and cannot send transactions).
+   *
+   * @param userId  the account owner's user id (storage key)
+   * @param opts.router        override the router address (defaults to the chain's canonical
+   *                           `aaStarValidator`); pass to target a non-canonical router
+   * @param opts.walletClient  viem WalletClient signing as the account OWNER — REQUIRED to send the tx
+   */
+  async ensureValidatorRouter(userId, opts) {
+    const account = await this.storage.findAccountByUserId(userId);
+    if (!account) throw new Error("Account not found");
+    const approvedAlgIds = account.approvedAlgIds;
+    if (!approvedAlgIds || approvedAlgIds.length === 0) {
+      return { set: false, reason: "no approvedAlgIds / not router-delegated" };
+    }
+    if (!chunkMOJJ7QF6_cjs.needsValidatorRouter(approvedAlgIds)) {
+      return { set: false, reason: "no router-delegated algorithm" };
+    }
+    const chainId = this.ethereum.getChainId();
+    const canonicalRouter = chunkMXJEULSE_cjs.getCanonicalAddresses(chainId)?.aaStarValidator;
+    const router = opts?.router ?? canonicalRouter;
+    if (!router || router.toLowerCase() === viem.zeroAddress) {
+      return { set: false, reason: `no canonical validator router for chain ${chainId}` };
+    }
+    let deployed = false;
+    try {
+      const code = await this.ethereum.getProvider().getCode({ address: account.address });
+      deployed = !!code && code !== "0x";
+    } catch {
+    }
+    if (!deployed) {
+      return { set: false, reason: "account not deployed yet \u2014 call after deploy" };
+    }
+    const current = await this.ethereum.getAccountContract(account.address).read.validator([]);
+    if (current && current.toLowerCase() !== viem.zeroAddress) {
+      return { set: false, reason: "validator already set" };
+    }
+    const walletClient = opts?.walletClient;
+    if (!walletClient || !walletClient.account) {
+      return {
+        set: false,
+        reason: "walletClient (account owner) required to send setValidator",
+        router
+      };
+    }
+    const tx = await chunkMOJJ7QF6_cjs.airAccountActions(account.address)(walletClient).setValidator({
+      validator: router,
+      account: walletClient.account
+    });
+    this.logger.log(
+      `[AccountManager] setValidator(${router}) sent for account ${account.address} (tx ${tx})`
+    );
+    return { set: true, tx, router };
+  }
 };
 var EXECUTE_USER_OP_SELECTOR = chunkXQROKLZI_cjs.selectorFromId(
   "executeUserOp((address,uint256,bytes,bytes,bytes32,uint256,bytes32,bytes,bytes),bytes32)"
@@ -4969,5 +5047,5 @@ exports.serializeGuardianSpecs = serializeGuardianSpecs;
 exports.toGuardianSpecs = toGuardianSpecs;
 exports.validateConfig = validateConfig;
 exports.wrapExecuteUserOp = wrapExecuteUserOp;
-//# sourceMappingURL=chunk-LAZA3JD7.cjs.map
-//# sourceMappingURL=chunk-LAZA3JD7.cjs.map
+//# sourceMappingURL=chunk-Y5U7URNZ.cjs.map
+//# sourceMappingURL=chunk-Y5U7URNZ.cjs.map