@absol-labs/agent 0.11.0 → 0.12.0-rc.1

package/dist/mcp/x402-tools.d.ts

@@ -0,0 +1,104 @@
+import type { MetrikNetwork } from "@absol-labs/sdk";
+import type { RefundClient, X402PayerSigner } from "@absol-labs/sdk/x402";
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type SignedSpendMandate } from "../mandates/mandate.js";
+import { type LookupFn } from "../x402-buyer/guarded-fetch.js";
+import type { PayX402WithMandateInput, PayX402WithMandateResult } from "../x402-buyer/pay.js";
+/**
+ * The MCP surface for x402 (metrik-agent#121 item 4): `x402_pay`,
+ * `refund_status`, `refund`. Registered only when the server is given an
+ * {@link McpX402Options}; every existing tool is unchanged.
+ *
+ * `x402_pay` is gated exactly like `hire_verified_service`: the SAME server
+ * mandate, the SAME per-owner serialization, the SAME cumulative spend
+ * (`getSpentSoFarUsdc`, which counts the stream this payment opens once it is
+ * recorded), and `checkMandate()` on the payment's opener terms before the SDK
+ * signs anything (see `../x402-buyer/pay.ts`).
+ */
+export declare const X402_PAY_TOOL_DESCRIPTION = "Pay an x402 endpoint (HTTP 402 Payment Required, x402 v2 'exact') and return its response. A Metrik x402 seller quotes a payment that opens an escrow STREAM with deposit = price; the seller earns ratePerSecond x VERIFIED seconds, capped at the deposit, and the unearned remainder stays recoverable by this server's wallet. Subject to the agent's spend mandate (price vs per-stream and total caps, rate, duration, operator), checked BEFORE anything is signed. Refunds are NOT automatic: use refund_status and refund with the returned streamId.";
+export declare const REFUND_STATUS_TOOL_DESCRIPTION = "Read the refund state of a stream this server paid for over x402, from the seller's gasless refund relay: whether it is running, what is reclaimable, and the next step (close / wait / reclaim). Moves no funds.";
+export declare const REFUND_TOOL_DESCRIPTION = "Recover the unearned part of an x402 payment through the seller's gasless refund relay: close=true stops the stream (this wallet signs the opener's Close; the relay pays the gas), reclaim=true sends the permissionless reclaim (the refund always goes to the payer). Nothing is refunded automatically; reclaim waits for the settlement window and may say when to retry.";
+export interface McpX402Options {
+    /** The payer: this server's own wallet (must own the server mandate). */
+    readonly signer: X402PayerSigner;
+    readonly network: MetrikNetwork;
+    /** Mandate-gated payer. Default: `payX402WithMandate` (lazily loaded). */
+    readonly pay?: (input: PayX402WithMandateInput) => Promise<PayX402WithMandateResult>;
+    /** Refund relay client factory. Default: the SDK's `refundClient`. */
+    readonly refundClient?: (target: {
+        readonly refundUrl: string;
+        readonly streamId: `0x${string}`;
+        readonly opener?: `0x${string}`;
+        /** The guarded fetch the relay client must use. */
+        readonly fetch?: typeof fetch;
+    }) => Promise<RefundClient>;
+    /** Passed to the SDK payer (e.g. a transport for the on-chain checks). */
+    readonly sdkOptions?: PayX402WithMandateInput["sdkOptions"];
+    /** Chain reads after a post-signature failure (see `payX402WithMandate`). */
+    readonly chainReader?: PayX402WithMandateInput["chainReader"];
+    /**
+     * `METRIK_AGENT_X402_ALLOWED_HOSTS`: the only hosts x402_pay / refund /
+     * refund_status may contact (exact, or `*.domain`). Unset = any PUBLIC host.
+     */
+    readonly allowedHosts?: readonly string[];
+    /** Base fetch under the outbound guard (tests). Default `globalThis.fetch`. */
+    readonly fetch?: typeof fetch;
+    /** DNS resolution for the outbound guard (tests). */
+    readonly lookup?: LookupFn;
+    /**
+     * Local development / fork tests ONLY: let the outbound guard reach
+     * loopback and private addresses (and plain http). Never set from env.
+     */
+    readonly allowPrivateNetworks?: boolean;
+}
+/** What the server shares with these tools (its mandate state and registry). */
+export interface McpX402Context {
+    readonly x402: McpX402Options;
+    readonly resolveMandate: () => SignedSpendMandate | Promise<SignedSpendMandate>;
+    readonly getSpentSoFarUsdc: (owner: `0x${string}`) => Promise<bigint>;
+    readonly getRevokedMandateIds: (owner: `0x${string}`) => Promise<readonly `0x${string}`[]>;
+    readonly serialize: <T>(owner: `0x${string}`, task: () => Promise<T>) => Promise<T>;
+    readonly recordStream: (record: {
+        readonly streamId: `0x${string}`;
+        readonly buyer: `0x${string}`;
+        readonly operator: `0x${string}`;
+        readonly serviceRef: `0x${string}`;
+        readonly budgetUsdc: bigint;
+        readonly ratePerSecondUsdc: bigint;
+        readonly maxDurationSeconds: number;
+        readonly openedAtSeconds: number;
+        readonly mandateId: `0x${string}`;
+        readonly refundUrl?: string;
+        readonly opener?: `0x${string}`;
+        readonly x402Reservation?: boolean;
+    }) => Promise<void>;
+    /** Drop a record (a released reservation). Absent = reservations are kept. */
+    readonly removeStream?: (streamId: `0x${string}`) => Promise<void>;
+    readonly findStream: (streamId: `0x${string}`) => Promise<{
+        readonly refundUrl?: string;
+        readonly opener?: `0x${string}`;
+    } | null>;
+    readonly now: () => number;
+    readonly ok: (text: string, structured?: Record<string, unknown>) => {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+    };
+    readonly fail: (text: string) => {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    };
+    readonly unexpected: (error: unknown) => {
+        content: {
+            type: "text";
+            text: string;
+        }[];
+        isError: boolean;
+    };
+}
+export declare function registerX402Tools(mcpServer: McpServer, ctx: McpX402Context): void;
+//# sourceMappingURL=x402-tools.d.ts.map

package/dist/mcp/x402-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-tools.d.ts","sourceRoot":"","sources":["../../src/mcp/x402-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EACV,YAAY,EAGZ,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGzE,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAIL,KAAK,QAAQ,EACd,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EAEzB,MAAM,sBAAsB,CAAC;AAE9B;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,yBAAyB,miBAC4f,CAAC;AACniB,eAAO,MAAM,8BAA8B,sNAC0K,CAAC;AACtN,eAAO,MAAM,uBAAuB,mXAC8U,CAAC;AAEnX,MAAM,WAAW,cAAc;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,0EAA0E;IAC1E,QAAQ,CAAC,GAAG,CAAC,EAAE,CACb,KAAK,EAAE,uBAAuB,KAC3B,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACvC,sEAAsE;IACtE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE;QAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;QACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;QAChC,mDAAmD;QACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;KAC/B,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,uBAAuB,CAAC,YAAY,CAAC,CAAC;IAC5D,6EAA6E;IAC7E,QAAQ,CAAC,WAAW,CAAC,EAAE,uBAAuB,CAAC,aAAa,CAAC,CAAC;IAC9D;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MACrB,kBAAkB,GAClB,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtE,QAAQ,CAAC,oBAAoB,EAAE,CAC7B,KAAK,EAAE,KAAK,MAAM,EAAE,KACjB,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,EAAE,CAAC,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,EACpB,KAAK,EAAE,KAAK,MAAM,EAAE,EACpB,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KACnB,OAAO,CAAC,CAAC,CAAC,CAAC;IAChB,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE;QAC9B,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;QACjC,QAAQ,CAAC,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;QAC9B,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;QACjC,QAAQ,CAAC,UAAU,EAAE,KAAK,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;QAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;QAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;KACpC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,QAAQ,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,CAAC;QACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;KACjC,GAAG,IAAI,CAAC,CAAC;IACV,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,CACX,IAAI,EAAE,MAAM,EACZ,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KACjC;QAAE,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAC/B,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;IACF,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK;QACvC,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH;AAkED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,cAAc,GAClB,IAAI,CAgUN"}

package/dist/mcp/x402-tools.js

@@ -0,0 +1,434 @@
+import { z } from "zod";
+import { verifyMandateOwnerSignature, } from "../mandates/mandate.js";
+import { keccak256, toHex } from "viem";
+import { assertOutboundUrlAllowed, createGuardedFetch, OutboundRequestRefusedError, } from "../x402-buyer/guarded-fetch.js";
+/**
+ * The MCP surface for x402 (metrik-agent#121 item 4): `x402_pay`,
+ * `refund_status`, `refund`. Registered only when the server is given an
+ * {@link McpX402Options}; every existing tool is unchanged.
+ *
+ * `x402_pay` is gated exactly like `hire_verified_service`: the SAME server
+ * mandate, the SAME per-owner serialization, the SAME cumulative spend
+ * (`getSpentSoFarUsdc`, which counts the stream this payment opens once it is
+ * recorded), and `checkMandate()` on the payment's opener terms before the SDK
+ * signs anything (see `../x402-buyer/pay.ts`).
+ */
+export const X402_PAY_TOOL_DESCRIPTION = "Pay an x402 endpoint (HTTP 402 Payment Required, x402 v2 'exact') and return its response. A Metrik x402 seller quotes a payment that opens an escrow STREAM with deposit = price; the seller earns ratePerSecond x VERIFIED seconds, capped at the deposit, and the unearned remainder stays recoverable by this server's wallet. Subject to the agent's spend mandate (price vs per-stream and total caps, rate, duration, operator), checked BEFORE anything is signed. Refunds are NOT automatic: use refund_status and refund with the returned streamId.";
+export const REFUND_STATUS_TOOL_DESCRIPTION = "Read the refund state of a stream this server paid for over x402, from the seller's gasless refund relay: whether it is running, what is reclaimable, and the next step (close / wait / reclaim). Moves no funds.";
+export const REFUND_TOOL_DESCRIPTION = "Recover the unearned part of an x402 payment through the seller's gasless refund relay: close=true stops the stream (this wallet signs the opener's Close; the relay pays the gas), reclaim=true sends the permissionless reclaim (the refund always goes to the payer). Nothing is refunded automatically; reclaim waits for the settlement window and may say when to retry.";
+/** Longest response body returned to the model. */
+const MAX_BODY_CHARS = 32 * 1024;
+const atomicSchema = z
+    .string()
+    .regex(/^[1-9]\d*$/, "a positive integer of USDC base units (6 decimals)");
+const bytes32Schema = z
+    .string()
+    .regex(/^0x[0-9a-fA-F]{64}$/, "a 0x-prefixed 32-byte hex value");
+const x402PaySchema = {
+    url: z
+        .string()
+        .url()
+        .describe("The x402 endpoint. https only (http only for localhost)."),
+    method: z
+        .enum(["GET", "POST", "PUT", "PATCH", "DELETE"])
+        .optional()
+        .describe("HTTP method. Default POST with a body, otherwise GET."),
+    headers: z.record(z.string()).optional(),
+    body: z.string().max(1_000_000).optional().describe("Request body."),
+    maxAmountUsdc: atomicSchema
+        .optional()
+        .describe("Optional price ceiling, base units. Can only TIGHTEN the server mandate's per-stream cap."),
+    maxRatePerSecondUsdc: atomicSchema
+        .optional()
+        .describe("Optional rate ceiling, base units/second. Tightens only."),
+    minDurationSeconds: z
+        .number()
+        .int()
+        .positive()
+        .optional()
+        .describe("Refuse a quote the seller can fully earn in fewer verified seconds."),
+};
+const refundSchema = {
+    streamId: bytes32Schema,
+    refundUrl: z
+        .string()
+        .url()
+        .optional()
+        .describe("The seller's refund relay URL. Optional for a stream this server paid for (it was recorded)."),
+};
+const refundActionSchema = {
+    ...refundSchema,
+    close: z
+        .boolean()
+        .optional()
+        .describe("Stop the stream first (this wallet signs Close)."),
+    reclaim: z
+        .boolean()
+        .optional()
+        .describe("Send the permissionless reclaim. Default true."),
+};
+const PAYMENT_HEADERS = new Set(["payment-signature", "x-payment"]);
+export function registerX402Tools(mcpServer, ctx) {
+    const pay = ctx.x402.pay ??
+        (async (input) => {
+            const { payX402WithMandate } = await import("../x402-buyer/pay.js");
+            return await payX402WithMandate(input);
+        });
+    // Every outbound request these tools make — the seller, and the refund
+    // relay — goes through the guard: https only, public addresses only, the
+    // optional host allowlist, and never a redirect.
+    const guard = {
+        ...(ctx.x402.allowedHosts === undefined
+            ? {}
+            : { allowedHosts: ctx.x402.allowedHosts }),
+        ...(ctx.x402.allowPrivateNetworks === true
+            ? { allowPrivateNetworks: true }
+            : {}),
+        ...(ctx.x402.fetch === undefined ? {} : { fetch: ctx.x402.fetch }),
+        ...(ctx.x402.lookup === undefined ? {} : { lookup: ctx.x402.lookup }),
+    };
+    const guardedFetch = createGuardedFetch(guard);
+    const openRefunds = ctx.x402.refundClient ??
+        (async (target) => {
+            const { refundClient } = await import("@absol-labs/sdk/x402");
+            return refundClient(target.refundUrl, {
+                streamId: target.streamId,
+                ...(target.opener === undefined ? {} : { opener: target.opener }),
+                ...(target.fetch === undefined ? {} : { fetch: target.fetch }),
+                expectedChainId: ctx.x402.network.chain.id,
+            });
+        });
+    mcpServer.registerTool("x402_pay", {
+        description: X402_PAY_TOOL_DESCRIPTION,
+        inputSchema: x402PaySchema,
+        annotations: {
+            destructiveHint: true,
+            idempotentHint: false,
+            openWorldHint: true,
+            readOnlyHint: false,
+            title: "Pay x402 Endpoint",
+        },
+    }, async (args) => {
+        const headers = {};
+        for (const [name, value] of Object.entries(args.headers ?? {})) {
+            if (PAYMENT_HEADERS.has(name.toLowerCase())) {
+                return ctx.fail(`do not set the ${name} header: this server signs the payment itself, after the quote passes the spend mandate.`);
+            }
+            headers[name.toLowerCase()] = value;
+        }
+        if (args.body !== undefined && headers["content-type"] === undefined) {
+            headers["content-type"] = "application/json";
+        }
+        try {
+            // Refuse a forbidden target before the mandate, the registry or the
+            // seller is touched.
+            await assertOutboundUrlAllowed(args.url, guard);
+            const signedMandate = await ctx.resolveMandate();
+            const owner = signedMandate.owner;
+            return await ctx.serialize(owner, async () => {
+                const spentSoFarUsdc = await ctx.getSpentSoFarUsdc(owner);
+                const revokedMandateIds = await ctx.getRevokedMandateIds(owner);
+                const nowSeconds = ctx.now();
+                // The reservation: written BEFORE the SDK signs (onApproved), inside
+                // this owner's serialized queue, under a key of its own. It is
+                // released only when the authorization provably never moved money,
+                // and replaced by the real stream record once the stream is known.
+                let reservation = null;
+                const release = async () => {
+                    if (reservation !== null)
+                        await ctx.removeStream?.(reservation);
+                };
+                let result;
+                try {
+                    result = await pay({
+                        url: args.url,
+                        init: {
+                            method: args.method ?? (args.body === undefined ? "GET" : "POST"),
+                            headers,
+                            ...(args.body === undefined ? {} : { body: args.body }),
+                        },
+                        signer: ctx.x402.signer,
+                        network: ctx.x402.network,
+                        signedMandate,
+                        spentSoFarUsdc,
+                        nowSeconds,
+                        revokedMandateIds,
+                        ...(args.maxAmountUsdc === undefined
+                            ? {}
+                            : { maxAmount: BigInt(args.maxAmountUsdc) }),
+                        ...(args.maxRatePerSecondUsdc === undefined
+                            ? {}
+                            : { maxRatePerSecond: BigInt(args.maxRatePerSecondUsdc) }),
+                        ...(args.minDurationSeconds === undefined
+                            ? {}
+                            : { minDurationSeconds: args.minDurationSeconds }),
+                        sdkOptions: { ...ctx.x402.sdkOptions, fetch: guardedFetch },
+                        ...(ctx.x402.chainReader === undefined
+                            ? {}
+                            : { chainReader: ctx.x402.chainReader }),
+                        onApproved: async ({ request, quote }) => {
+                            reservation = keccak256(toHex(`x402-reservation:${owner}:${quote.payTo}:${nowSeconds}:${crypto.randomUUID()}`));
+                            await ctx.recordStream({
+                                streamId: reservation,
+                                buyer: owner,
+                                operator: request.operator,
+                                serviceRef: quote.serviceRef ?? `0x${"00".repeat(32)}`,
+                                budgetUsdc: request.budgetUsdc,
+                                ratePerSecondUsdc: request.ratePerSecondUsdc,
+                                maxDurationSeconds: request.maxDurationSeconds,
+                                openedAtSeconds: nowSeconds,
+                                mandateId: signedMandate.mandateId,
+                                opener: quote.payTo,
+                                x402Reservation: true,
+                            });
+                        },
+                    });
+                }
+                catch (error) {
+                    return await settleFailure(ctx, error, {
+                        release,
+                        reservation,
+                        owner,
+                        mandateId: signedMandate.mandateId,
+                        nowSeconds,
+                    });
+                }
+                const opener = result.metrikStreamOpener;
+                if (result.paid && opener !== null && result.approved !== null) {
+                    // Replace the reservation with the real stream (same amount).
+                    await ctx.recordStream({
+                        streamId: opener.streamId,
+                        buyer: owner,
+                        operator: result.approved.operator,
+                        serviceRef: result.quote?.serviceRef ?? `0x${"00".repeat(32)}`,
+                        budgetUsdc: result.approved.budgetUsdc,
+                        ratePerSecondUsdc: result.approved.ratePerSecondUsdc,
+                        maxDurationSeconds: result.approved.maxDurationSeconds,
+                        openedAtSeconds: nowSeconds,
+                        mandateId: signedMandate.mandateId,
+                        ...(opener.refundUrl === null
+                            ? {}
+                            : { refundUrl: opener.refundUrl }),
+                        opener: opener.opener,
+                    });
+                    await release();
+                }
+                else if (!result.paid) {
+                    // No 402 was answered, so nothing was approved or signed.
+                    await release();
+                }
+                if (!result.paid) {
+                    // Not a payment: do not relay a body this server fetched on the
+                    // model's behalf (it would make the tool a general-purpose
+                    // fetcher of whatever the URL serves).
+                    return ctx.fail(`the endpoint answered HTTP ${result.response.status} without asking for an x402 payment; nothing was signed or paid, and its body is not returned.`);
+                }
+                const body = await result.response.text();
+                const truncated = body.length > MAX_BODY_CHARS;
+                const structured = {
+                    paid: result.paid,
+                    httpStatus: result.response.status,
+                    contentType: result.response.headers.get("content-type"),
+                    body: truncated ? body.slice(0, MAX_BODY_CHARS) : body,
+                    bodyTruncated: truncated,
+                    streamId: opener?.streamId ?? null,
+                    opener: opener?.opener ?? null,
+                    refundUrl: opener?.refundUrl ?? null,
+                    depositUsdc: opener?.deposit?.toString() ?? null,
+                    ratePerSecondUsdc: opener?.ratePerSecond?.toString() ?? null,
+                    expiresAt: opener?.expiresAt ?? null,
+                    minEarnSeconds: result.quote?.minEarnSeconds?.toString() ?? null,
+                    refundIsAutomatic: false,
+                };
+                return ctx.ok(`paid ${opener?.deposit?.toString() ?? "?"} USDC base units into stream ${opener?.streamId ?? "?"}; HTTP ${result.response.status}. The seller earns only for VERIFIED seconds; the unearned remainder is NOT refunded automatically — call refund (or refund_status) with this streamId.`, structured);
+            });
+        }
+        catch (error) {
+            if (error instanceof OutboundRequestRefusedError) {
+                return ctx.fail(error.message);
+            }
+            return ctx.unexpected(error);
+        }
+    });
+    const bind = async (args) => {
+        const streamId = args.streamId.toLowerCase();
+        const record = await ctx.findStream(streamId);
+        const refundUrl = args.refundUrl ?? record?.refundUrl;
+        if (refundUrl === undefined) {
+            return {
+                error: `no refund relay is known for stream ${streamId}: pass refundUrl (x402_pay returned it).`,
+            };
+        }
+        try {
+            await assertOutboundUrlAllowed(refundUrl.replace("{streamId}", streamId), guard);
+        }
+        catch (error) {
+            if (error instanceof OutboundRequestRefusedError) {
+                return { error: error.message };
+            }
+            throw error;
+        }
+        return await openRefunds({
+            refundUrl,
+            streamId,
+            ...(record?.opener === undefined ? {} : { opener: record.opener }),
+            fetch: guardedFetch,
+        });
+    };
+    mcpServer.registerTool("refund_status", {
+        description: REFUND_STATUS_TOOL_DESCRIPTION,
+        inputSchema: refundSchema,
+        annotations: {
+            idempotentHint: true,
+            openWorldHint: true,
+            readOnlyHint: true,
+            title: "x402 Refund Status",
+        },
+    }, async (args) => {
+        try {
+            const refunds = await bind(args);
+            if ("error" in refunds)
+                return ctx.fail(refunds.error);
+            const status = await refunds.status();
+            return ctx.ok(describeStatus(status), serializeStatus(status));
+        }
+        catch (error) {
+            return explainRefundError(ctx, error);
+        }
+    });
+    mcpServer.registerTool("refund", {
+        description: REFUND_TOOL_DESCRIPTION,
+        inputSchema: refundActionSchema,
+        annotations: {
+            destructiveHint: true,
+            idempotentHint: false,
+            openWorldHint: true,
+            readOnlyHint: false,
+            title: "x402 Refund",
+        },
+    }, async (args) => {
+        try {
+            const refunds = await bind(args);
+            if ("error" in refunds)
+                return ctx.fail(refunds.error);
+            let closeResult = null;
+            if (args.close === true) {
+                // Buyer recovery, authorized on the mandate owner's signature alone
+                // (never on caps or expiry, so a lapsed mandate cannot strand the
+                // payer's own money) — the same rule as reclaim_unspent.
+                const signedMandate = await ctx.resolveMandate();
+                const decision = await verifyMandateOwnerSignature(signedMandate);
+                if (!decision.allowed) {
+                    return ctx.fail(`mandate denied: ${decision.reason ?? "unknown"}`);
+                }
+                closeResult = await refunds.close({ signer: ctx.x402.signer });
+            }
+            let reclaimResult = null;
+            if (args.reclaim !== false) {
+                reclaimResult = await refunds.reclaim();
+            }
+            const status = await refunds.status();
+            return ctx.ok(`${closeResult === null ? "" : `closed (${closeResult.transaction}). `}${reclaimResult === null ? "" : `reclaimed ${reclaimResult.amount?.toString() ?? "?"} USDC base units to the payer (${reclaimResult.transaction}). `}${describeStatus(status)}`, {
+                ...serializeStatus(status),
+                close: closeResult === null
+                    ? null
+                    : {
+                        transaction: closeResult.transaction,
+                        verified: closeResult.verified,
+                    },
+                reclaim: reclaimResult === null
+                    ? null
+                    : {
+                        transaction: reclaimResult.transaction,
+                        amountUsdc: reclaimResult.amount?.toString() ?? null,
+                        verified: reclaimResult.verified,
+                    },
+            });
+        }
+        catch (error) {
+            return explainRefundError(ctx, error);
+        }
+    });
+}
+function serializeStatus(status) {
+    return {
+        streamId: status.streamId,
+        opener: status.opener,
+        payer: status.payer,
+        status: status.status,
+        reclaimed: status.reclaimed,
+        reclaimableUsdc: status.reclaimable?.toString() ?? null,
+        next: status.next,
+        refundIsAutomatic: false,
+    };
+}
+function describeStatus(status) {
+    if (status.reclaimed) {
+        return `stream ${status.streamId} is reclaimed: the unearned remainder went back to ${status.payer}.`;
+    }
+    return `stream ${status.streamId} is ${status.status}; next step: ${status.next.action}${status.next.retryAt === undefined ? "" : ` (from ${status.next.retryAt})`}. Nothing is refunded automatically.`;
+}
+/**
+ * A failed x402_pay. Before the signature was handed out (mandate or SDK
+ * refusal) the reservation is released. After it, the reservation is KEPT
+ * unless the authorization provably can never move funds, the real stream is
+ * recorded when it can be identified on-chain, and the model is never told
+ * "not settled" when the money may have moved.
+ */
+async function settleFailure(ctx, error, state) {
+    if (error instanceof Error && error.name === "X402PostSignatureError") {
+        const post = error;
+        if (post.releasable) {
+            await state.release();
+        }
+        else if (post.streamId !== null) {
+            await ctx.recordStream({
+                streamId: post.streamId,
+                buyer: state.owner,
+                operator: post.approved.operator,
+                serviceRef: post.quote.serviceRef ?? `0x${"00".repeat(32)}`,
+                budgetUsdc: post.approved.budgetUsdc,
+                ratePerSecondUsdc: post.approved.ratePerSecondUsdc,
+                maxDurationSeconds: post.approved.maxDurationSeconds,
+                openedAtSeconds: state.nowSeconds,
+                mandateId: state.mandateId,
+                opener: post.opener,
+            });
+            await state.release();
+        }
+        return ctx.fail(`${post.message} ${post.releasable ? "The spend reservation was released." : `The ${post.approved.budgetUsdc.toString()} USDC base units stay COUNTED against the spend mandate.`}${post.streamId === null ? "" : ` streamId: ${post.streamId} (opener ${post.opener}); recover the unearned part with refund / refund_status.`} Do not retry this payment blindly.`);
+    }
+    // Anything else was raised before a signature existed: nothing moved.
+    await state.release();
+    if (error instanceof OutboundRequestRefusedError)
+        return ctx.fail(error.message);
+    return explainPayError(ctx, error);
+}
+function explainPayError(ctx, error) {
+    if (error instanceof Error) {
+        switch (error.name) {
+            case "X402MandateDeniedError":
+                return ctx.fail(`${error.message} Raise the server's METRIK_AGENT_MANDATE_* caps only if that payment is intended.`);
+            case "X402PaymentRefusedError":
+                return ctx.fail(error.message);
+        }
+    }
+    return ctx.unexpected(error);
+}
+function explainRefundError(ctx, error) {
+    if (error instanceof Error) {
+        switch (error.name) {
+            case "RefundNotReadyError": {
+                const retryAt = error.retryAt;
+                return ctx.fail(`${error.message}${retryAt === null || retryAt === undefined ? "" : ` Retry at ${retryAt} (unix seconds).`} Nothing is refunded automatically.`);
+            }
+            case "OutboundRequestRefusedError":
+            case "RefundRelayError":
+            case "NotStreamPayerError":
+            case "InvalidInputError":
+                return ctx.fail(error.message);
+        }
+    }
+    return ctx.unexpected(error);
+}
+//# sourceMappingURL=x402-tools.js.map

package/dist/mcp/x402-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x402-tools.js","sourceRoot":"","sources":["../../src/mcp/x402-tools.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,2BAA2B,GAE5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAExC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,2BAA2B,GAE5B,MAAM,gCAAgC,CAAC;AAOxC;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,yBAAyB,GACpC,giBAAgiB,CAAC;AACniB,MAAM,CAAC,MAAM,8BAA8B,GACzC,mNAAmN,CAAC;AACtN,MAAM,CAAC,MAAM,uBAAuB,GAClC,gXAAgX,CAAC;AAuFnX,mDAAmD;AACnD,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjC,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,EAAE;KACR,KAAK,CAAC,YAAY,EAAE,oDAAoD,CAAC,CAAC;AAC7E,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,KAAK,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;AAEnE,MAAM,aAAa,GAAG;IACpB,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,CAAC,0DAA0D,CAAC;IACvE,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;SAC/C,QAAQ,EAAE;SACV,QAAQ,CAAC,uDAAuD,CAAC;IACpE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;IACpE,aAAa,EAAE,YAAY;SACxB,QAAQ,EAAE;SACV,QAAQ,CACP,2FAA2F,CAC5F;IACH,oBAAoB,EAAE,YAAY;SAC/B,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;IACvE,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,qEAAqE,CACtE;CACK,CAAC;AAEX,MAAM,YAAY,GAAG;IACnB,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,8FAA8F,CAC/F;CACK,CAAC;AAEX,MAAM,kBAAkB,GAAG;IACzB,GAAG,YAAY;IACf,KAAK,EAAE,CAAC;SACL,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,kDAAkD,CAAC;IAC/D,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,gDAAgD,CAAC;CACrD,CAAC;AAEX,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC,CAAC;AAEpE,MAAM,UAAU,iBAAiB,CAC/B,SAAoB,EACpB,GAAmB;IAEnB,MAAM,GAAG,GACP,GAAG,CAAC,IAAI,CAAC,GAAG;QACZ,CAAC,KAAK,EAAE,KAA8B,EAAE,EAAE;YACxC,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACpE,OAAO,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,uEAAuE;IACvE,yEAAyE;IACzE,iDAAiD;IACjD,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,KAAK,IAAI;YACxC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE;YAChC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;KACtE,CAAC;IACF,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,WAAW,GACf,GAAG,CAAC,IAAI,CAAC,YAAY;QACrB,CAAC,KAAK,EAAE,MAKP,EAAE,EAAE;YACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC9D,OAAO,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE;gBACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC9D,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IAEL,SAAS,CAAC,YAAY,CACpB,UAAU,EACV;QACE,WAAW,EAAE,yBAAyB;QACtC,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE;YACX,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,KAAK;YACnB,KAAK,EAAE,mBAAmB;SAC3B;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/D,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC5C,OAAO,GAAG,CAAC,IAAI,CACb,kBAAkB,IAAI,0FAA0F,CACjH,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;QACtC,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,CAAC,KAAK,SAAS,EAAE,CAAC;YACrE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC;YACH,oEAAoE;YACpE,qBAAqB;YACrB,MAAM,wBAAwB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAsB,CAAC;YACnD,OAAO,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;gBAC3C,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBAC1D,MAAM,iBAAiB,GAAG,MAAM,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBAChE,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;gBAC7B,qEAAqE;gBACrE,+DAA+D;gBAC/D,mEAAmE;gBACnE,mEAAmE;gBACnE,IAAI,WAAW,GAAyB,IAAI,CAAC;gBAC7C,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;oBACzB,IAAI,WAAW,KAAK,IAAI;wBAAE,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC,WAAW,CAAC,CAAC;gBAClE,CAAC,CAAC;gBACF,IAAI,MAAgC,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,GAAG,CAAC;wBACjB,GAAG,EAAE,IAAI,CAAC,GAAG;wBACb,IAAI,EAAE;4BACJ,MAAM,EACJ,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;4BAC3D,OAAO;4BACP,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;yBACxD;wBACD,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;wBACvB,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO;wBACzB,aAAa;wBACb,cAAc;wBACd,UAAU;wBACV,iBAAiB;wBACjB,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS;4BAClC,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;wBAC9C,GAAG,CAAC,IAAI,CAAC,oBAAoB,KAAK,SAAS;4BACzC,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;wBAC5D,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;4BACvC,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;wBACpD,UAAU,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE;wBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS;4BACpC,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;wBAC1C,UAAU,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;4BACvC,WAAW,GAAG,SAAS,CACrB,KAAK,CACH,oBAAoB,KAAK,IAAI,KAAK,CAAC,KAAK,IAAI,UAAU,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE,CAChF,CACF,CAAC;4BACF,MAAM,GAAG,CAAC,YAAY,CAAC;gCACrB,QAAQ,EAAE,WAAW;gCACrB,KAAK,EAAE,KAAK;gCACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,UAAU,EACR,KAAK,CAAC,UAAU,IAAK,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAY;gCACvD,UAAU,EAAE,OAAO,CAAC,UAAU;gCAC9B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gCAC5C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;gCAC9C,eAAe,EAAE,UAAU;gCAC3B,SAAS,EAAE,aAAa,CAAC,SAA0B;gCACnD,MAAM,EAAE,KAAK,CAAC,KAAK;gCACnB,eAAe,EAAE,IAAI;6BACtB,CAAC,CAAC;wBACL,CAAC;qBACF,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE;wBACrC,OAAO;wBACP,WAAW;wBACX,KAAK;wBACL,SAAS,EAAE,aAAa,CAAC,SAA0B;wBACnD,UAAU;qBACX,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,kBAAkB,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;oBAC/D,8DAA8D;oBAC9D,MAAM,GAAG,CAAC,YAAY,CAAC;wBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,KAAK,EAAE,KAAK;wBACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;wBAClC,UAAU,EACR,MAAM,CAAC,KAAK,EAAE,UAAU,IAAK,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAY;wBAC/D,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;wBACtC,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB;wBACpD,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB;wBACtD,eAAe,EAAE,UAAU;wBAC3B,SAAS,EAAE,aAAa,CAAC,SAA0B;wBACnD,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI;4BAC3B,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;wBACpC,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CAAC;oBACH,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;qBAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACxB,0DAA0D;oBAC1D,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjB,gEAAgE;oBAChE,2DAA2D;oBAC3D,uCAAuC;oBACvC,OAAO,GAAG,CAAC,IAAI,CACb,8BAA8B,MAAM,CAAC,QAAQ,CAAC,MAAM,gGAAgG,CACrJ,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC;gBAC/C,MAAM,UAAU,GAAG;oBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;oBAClC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;oBACxD,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;oBACtD,aAAa,EAAE,SAAS;oBACxB,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI;oBAClC,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI;oBAC9B,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI;oBACpC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI;oBAChD,iBAAiB,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,IAAI;oBAC5D,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI;oBACpC,cAAc,EAAE,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,IAAI;oBAChE,iBAAiB,EAAE,KAAK;iBACzB,CAAC;gBACF,OAAO,GAAG,CAAC,EAAE,CACX,QAAQ,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,gCAAgC,MAAM,EAAE,QAAQ,IAAI,GAAG,UAAU,MAAM,CAAC,QAAQ,CAAC,MAAM,yJAAyJ,EAC1R,UAAU,CACX,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,2BAA2B,EAAE,CAAC;gBACjD,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;YACD,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAE,IAGnB,EAAsD,EAAE;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAmB,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,EAAE,SAAS,CAAC;QACtD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO;gBACL,KAAK,EAAE,uCAAuC,QAAQ,0CAA0C;aACjG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,wBAAwB,CAC5B,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,EACzC,KAAK,CACN,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,2BAA2B,EAAE,CAAC;gBACjD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,MAAM,WAAW,CAAC;YACvB,SAAS;YACT,QAAQ;YACR,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAClE,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,SAAS,CAAC,YAAY,CACpB,eAAe,EACf;QACE,WAAW,EAAE,8BAA8B;QAC3C,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE;YACX,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,oBAAoB;SAC5B;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,OAAO,IAAI,OAAO;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;YACtC,OAAO,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CACF,CAAC;IAEF,SAAS,CAAC,YAAY,CACpB,QAAQ,EACR;QACE,WAAW,EAAE,uBAAuB;QACpC,WAAW,EAAE,kBAAkB;QAC/B,WAAW,EAAE;YACX,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,KAAK;YACnB,KAAK,EAAE,aAAa;SACrB;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,OAAO,IAAI,OAAO;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvD,IAAI,WAAW,GAA6B,IAAI,CAAC;YACjD,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBACxB,oEAAoE;gBACpE,kEAAkE;gBAClE,yDAAyD;gBACzD,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,cAAc,EAAE,CAAC;gBACjD,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,aAAa,CAAC,CAAC;gBAClE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACtB,OAAO,GAAG,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,WAAW,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,aAAa,GAA6B,IAAI,CAAC;YACnD,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC3B,aAAa,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAC1C,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;YACtC,OAAO,GAAG,CAAC,EAAE,CACX,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,WAAW,CAAC,WAAW,KAAK,GAAG,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,kCAAkC,aAAa,CAAC,WAAW,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,EACtP;gBACE,GAAG,eAAe,CAAC,MAAM,CAAC;gBAC1B,KAAK,EACH,WAAW,KAAK,IAAI;oBAClB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC;wBACE,WAAW,EAAE,WAAW,CAAC,WAAW;wBACpC,QAAQ,EAAE,WAAW,CAAC,QAAQ;qBAC/B;gBACP,OAAO,EACL,aAAa,KAAK,IAAI;oBACpB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC;wBACE,WAAW,EAAE,aAAa,CAAC,WAAW;wBACtC,UAAU,EAAE,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,IAAI;wBACpD,QAAQ,EAAE,aAAa,CAAC,QAAQ;qBACjC;aACR,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAoB;IAC3C,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,eAAe,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,IAAI;QACvD,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,iBAAiB,EAAE,KAAK;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAAoB;IAC1C,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO,UAAU,MAAM,CAAC,QAAQ,sDAAsD,MAAM,CAAC,KAAK,GAAG,CAAC;IACxG,CAAC;IACD,OAAO,UAAU,MAAM,CAAC,QAAQ,OAAO,MAAM,CAAC,MAAM,gBAAgB,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,OAAO,GAAG,sCAAsC,CAAC;AAC3M,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAC1B,GAAmB,EACnB,KAAc,EACd,KAMC;IAED,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;QACtE,MAAM,IAAI,GAAG,KAA+B,CAAC;QAC7C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAClC,MAAM,GAAG,CAAC,YAAY,CAAC;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBAChC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,IAAK,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAY;gBACtE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;gBACpC,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB;gBAClD,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB;gBACpD,eAAe,EAAE,KAAK,CAAC,UAAU;gBACjC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACxB,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CACb,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,0DAA0D,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,QAAQ,YAAY,IAAI,CAAC,MAAM,2DAA2D,qCAAqC,CACrW,CAAC;IACJ,CAAC;IACD,sEAAsE;IACtE,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;IACtB,IAAI,KAAK,YAAY,2BAA2B;QAC9C,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,eAAe,CAAC,GAAmB,EAAE,KAAc;IAC1D,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,wBAAwB;gBAC3B,OAAO,GAAG,CAAC,IAAI,CACb,GAAG,KAAK,CAAC,OAAO,mFAAmF,CACpG,CAAC;YACJ,KAAK,yBAAyB;gBAC5B,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAmB,EAAE,KAAc;IAC7D,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,qBAAqB,CAAC,CAAC,CAAC;gBAC3B,MAAM,OAAO,GAAI,KAAqC,CAAC,OAAO,CAAC;gBAC/D,OAAO,GAAG,CAAC,IAAI,CACb,GAAG,KAAK,CAAC,OAAO,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,OAAO,kBAAkB,qCAAqC,CAChJ,CAAC;YACJ,CAAC;YACD,KAAK,6BAA6B,CAAC;YACnC,KAAK,kBAAkB,CAAC;YACxB,KAAK,qBAAqB,CAAC;YAC3B,KAAK,mBAAmB;gBACtB,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}