@absol-labs/agent 0.11.0 → 0.12.0-rc.1

package/dist/x402-buyer/pay.d.ts

@@ -0,0 +1,135 @@
+import type { MetrikNetwork } from "@absol-labs/sdk";
+import { payWithX402, type PayWithX402Options, type PayWithX402Result, type SignedTransferAuthorization, type X402PayerSigner, type X402QuoteSummary } from "@absol-labs/sdk/x402";
+import { type PublicClient } from "viem";
+import { type HireRequest, type MandateDecision, type SignedSpendMandate } from "../mandates/mandate.js";
+/**
+ * Buyer-side x402 payments under a spend mandate (metrik-agent#121).
+ *
+ * The golden rule of this package — no spend without a mandate — applies to an
+ * x402 payment exactly as it applies to `metrik open`, because a Metrik x402
+ * payment IS a stream open: the opener facilitator settles the payer's EIP-3009
+ * authorization with `factory.deployAndSettle`, which opens a `StreamEscrowV2`
+ * stream with `deposit = price`. So the payment is mapped onto the SAME
+ * {@link HireRequest} a stream open is checked as, from the quote's opener terms
+ * (which the SDK has already proven on-chain: `payTo == factory.predict(terms)`):
+ *
+ * | Mandate field          | x402 quote field                                 |
+ * | ---------------------- | ------------------------------------------------ |
+ * | `maxPerStreamUsdc`     | `amount` (the deposit; the price of the call)    |
+ * | `maxTotalUsdc`         | `spentSoFar + amount`                            |
+ * | `maxRatePerSecondUsdc` | `ratePerSecond` (how fast the seller can earn)   |
+ * | `maxDurationSeconds`   | `maxDuration` (the stream's window)              |
+ * | `allowedOperators`     | `operator` (who the stream pays)                 |
+ *
+ * The check runs inside the SDK's `onQuote` hook — after every SDK protection
+ * (scheme, network, USDC domain, EIP-3009 only, registered factory, on-chain
+ * `predict`, authorization lifetime) and BEFORE anything is signed — so a
+ * denied payment never produces a signature. It is enforced twice: the mandate's
+ * caps are also handed to the SDK as `maxAmount` / `maxRatePerSecond`. A quote
+ * that is not a Metrik opener payment (no operator/rate/duration terms) is
+ * refused: there would be no stream to bound and nothing to recover.
+ *
+ * The mandate itself (signature, expiry, revocation) is verified FIRST, before
+ * any request reaches the seller.
+ */
+/** A payment refused by the spend mandate. Nothing was signed. */
+export declare class X402MandateDeniedError extends Error {
+    readonly reason: NonNullable<MandateDecision["reason"]> | "not-an-opener-quote";
+    readonly quote: X402QuoteSummary | null;
+    constructor(reason: X402MandateDeniedError["reason"], quote: X402QuoteSummary | null, detail?: string);
+}
+/**
+ * The stream-open request an x402 quote would create, or a refusal reason when
+ * the quote does not carry Metrik opener terms.
+ */
+export declare function x402QuoteToHireRequest(quote: X402QuoteSummary): HireRequest | {
+    readonly refused: string;
+};
+export interface PayX402WithMandateInput {
+    readonly url: string | URL;
+    readonly init?: RequestInit;
+    /** The payer: signs the EIP-3009 authorization. Needs USDC, no gas. */
+    readonly signer: X402PayerSigner;
+    readonly network: MetrikNetwork;
+    readonly signedMandate: SignedSpendMandate;
+    /** USDC already spent under this mandate (the cumulative-cap input). */
+    readonly spentSoFarUsdc: bigint;
+    readonly nowSeconds: number;
+    readonly revokedMandateIds?: Iterable<`0x${string}`>;
+    /** An explicit price ceiling, tighter than the mandate (never looser). */
+    readonly maxAmount?: bigint;
+    /** An explicit rate ceiling, tighter than the mandate (never looser). */
+    readonly maxRatePerSecond?: bigint;
+    /** Refuse a quote the seller can fully earn in fewer verified seconds. */
+    readonly minDurationSeconds?: number;
+    /** Passed through to the SDK (transport, fetch, publicClient, ...). */
+    readonly sdkOptions?: Pick<PayWithX402Options, "publicClient" | "transport" | "fetch" | "allowInsecureHttp" | "maxAuthorizationSeconds" | "allowLegacyFactory">;
+    /** Test seam: the SDK payer. Default `payWithX402`. */
+    readonly payImpl?: typeof payWithX402;
+    /**
+     * Called once the mandate APPROVES a quote, BEFORE the SDK signs it. A
+     * caller that tracks cumulative spend reserves the payment here, so a
+     * failure after the signature is handed out can never leave it uncounted.
+     * Throwing refuses the quote (nothing is signed).
+     */
+    readonly onApproved?: (approval: {
+        readonly request: HireRequest;
+        readonly quote: X402QuoteSummary;
+    }) => void | Promise<void>;
+    /**
+     * Chain reads used after a post-signature failure (USDC
+     * `authorizationState`, the opener's `StreamOpenedFor` log). Default: the
+     * SDK options' `publicClient`, else a client over their `transport`, else
+     * the network's first RPC.
+     */
+    readonly chainReader?: Pick<PublicClient, "readContract" | "getLogs" | "getBlockNumber">;
+}
+/** What is known about a payment whose signature was handed out but that did not complete cleanly. */
+export type X402PostSignatureState = 
+/** The authorization was used: the money left the payer. */
+"used"
+/** It could not be established either way. Treat as used. */
+ | "possibly-used"
+/** Not used yet, but still valid until `validBefore`: a holder can still submit it. */
+ | "unused-but-valid"
+/** Not used and past `validBefore`: it can never move funds. */
+ | "unused-expired";
+/**
+ * The payment was APPROVED and its authorization signed and handed to the
+ * seller, then something failed (a malformed or missing PAYMENT-RESPONSE, a
+ * settlement the SDK could not confirm, a dropped connection). The money may
+ * have moved: {@link X402PostSignatureError.state} says what is known, and
+ * {@link X402PostSignatureError.releasable} is `true` only when the
+ * authorization provably can never be used. A spend reservation must be kept
+ * otherwise.
+ */
+export declare class X402PostSignatureError extends Error {
+    readonly state: X402PostSignatureState;
+    readonly approved: HireRequest;
+    readonly quote: X402QuoteSummary;
+    readonly authorization: SignedTransferAuthorization | null;
+    /** The stream the payment opened, when it could be identified. */
+    readonly streamId: `0x${string}` | null;
+    readonly opener: `0x${string}`;
+    constructor(context: {
+        readonly state: X402PostSignatureState;
+        readonly approved: HireRequest;
+        readonly quote: X402QuoteSummary;
+        readonly authorization: SignedTransferAuthorization | null;
+        readonly streamId: `0x${string}` | null;
+        readonly cause: unknown;
+    });
+    /** Only an authorization that provably can never move funds frees its reservation. */
+    get releasable(): boolean;
+}
+export interface PayX402WithMandateResult extends PayWithX402Result {
+    /** The stream-open request the mandate approved (null if nothing was paid). */
+    readonly approved: HireRequest | null;
+}
+/**
+ * Pay an x402 v2 endpoint through the SDK's `payWithX402`, gated by
+ * `checkMandate()`. Fail closed: a mandate that does not verify, a quote it
+ * denies, or a quote without opener terms is a hard stop with nothing signed.
+ */
+export declare function payX402WithMandate(input: PayX402WithMandateInput): Promise<PayX402WithMandateResult>;
+//# sourceMappingURL=pay.d.ts.map

package/dist/x402-buyer/pay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pay.d.ts","sourceRoot":"","sources":["../../src/x402-buyer/pay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAEL,WAAW,EAEX,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,2BAA2B,EAChC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAwC,KAAK,YAAY,EAAE,MAAM,MAAM,CAAC;AAE/E,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,kEAAkE;AAClE,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,MAAM,EACX,WAAW,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,GACtC,qBAAqB,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAC;gBAGtC,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EACxC,KAAK,EAAE,gBAAgB,GAAG,IAAI,EAC9B,MAAM,CAAC,EAAE,MAAM;CASlB;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,gBAAgB,GACtB,WAAW,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAoB5C;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C,wEAAwE;IACxE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,QAAQ,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IACrD,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,0EAA0E;IAC1E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CACxB,kBAAkB,EAChB,cAAc,GACd,WAAW,GACX,OAAO,GACP,mBAAmB,GACnB,yBAAyB,GACzB,oBAAoB,CACvB,CAAC;IACF,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,WAAW,CAAC;IACtC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;QAC9B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;KAClC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CACzB,YAAY,EACZ,cAAc,GAAG,SAAS,GAAG,gBAAgB,CAC9C,CAAC;CACH;AAED,sGAAsG;AACtG,MAAM,MAAM,sBAAsB;AAChC,4DAA4D;AAC1D,MAAM;AACR,6DAA6D;GAC3D,eAAe;AACjB,uFAAuF;GACrF,kBAAkB;AACpB,gEAAgE;GAC9D,gBAAgB,CAAC;AAErB;;;;;;;;GAQG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,2BAA2B,GAAG,IAAI,CAAC;IAC3D,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,MAAM,EAAE,CAAC;gBAEnB,OAAO,EAAE;QACnB,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;QACvC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;QAC/B,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;QACjC,QAAQ,CAAC,aAAa,EAAE,2BAA2B,GAAG,IAAI,CAAC;QAC3D,QAAQ,CAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,GAAG,IAAI,CAAC;QACxC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;KACzB;IAsBD,sFAAsF;IACtF,IAAI,UAAU,IAAI,OAAO,CAExB;CACF;AA2CD,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;CACvC;AAMD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,wBAAwB,CAAC,CA6InC"}

package/dist/x402-buyer/pay.js

@@ -0,0 +1,336 @@
+import { findStreamForAuthorization, payWithX402, X402PaymentRefusedError, } from "@absol-labs/sdk/x402";
+import { decodePaymentSignatureHeader } from "@x402/core/http";
+import { createPublicClient, getAddress, http } from "viem";
+import { checkMandate, verifySignedMandate, } from "../mandates/mandate.js";
+/**
+ * Buyer-side x402 payments under a spend mandate (metrik-agent#121).
+ *
+ * The golden rule of this package — no spend without a mandate — applies to an
+ * x402 payment exactly as it applies to `metrik open`, because a Metrik x402
+ * payment IS a stream open: the opener facilitator settles the payer's EIP-3009
+ * authorization with `factory.deployAndSettle`, which opens a `StreamEscrowV2`
+ * stream with `deposit = price`. So the payment is mapped onto the SAME
+ * {@link HireRequest} a stream open is checked as, from the quote's opener terms
+ * (which the SDK has already proven on-chain: `payTo == factory.predict(terms)`):
+ *
+ * | Mandate field          | x402 quote field                                 |
+ * | ---------------------- | ------------------------------------------------ |
+ * | `maxPerStreamUsdc`     | `amount` (the deposit; the price of the call)    |
+ * | `maxTotalUsdc`         | `spentSoFar + amount`                            |
+ * | `maxRatePerSecondUsdc` | `ratePerSecond` (how fast the seller can earn)   |
+ * | `maxDurationSeconds`   | `maxDuration` (the stream's window)              |
+ * | `allowedOperators`     | `operator` (who the stream pays)                 |
+ *
+ * The check runs inside the SDK's `onQuote` hook — after every SDK protection
+ * (scheme, network, USDC domain, EIP-3009 only, registered factory, on-chain
+ * `predict`, authorization lifetime) and BEFORE anything is signed — so a
+ * denied payment never produces a signature. It is enforced twice: the mandate's
+ * caps are also handed to the SDK as `maxAmount` / `maxRatePerSecond`. A quote
+ * that is not a Metrik opener payment (no operator/rate/duration terms) is
+ * refused: there would be no stream to bound and nothing to recover.
+ *
+ * The mandate itself (signature, expiry, revocation) is verified FIRST, before
+ * any request reaches the seller.
+ */
+/** A payment refused by the spend mandate. Nothing was signed. */
+export class X402MandateDeniedError extends Error {
+    reason;
+    quote;
+    constructor(reason, quote, detail) {
+        super(`x402 payment refused by the spend mandate: ${reason}${detail === undefined ? "" : ` (${detail})`}. Nothing was signed.`);
+        this.name = "X402MandateDeniedError";
+        this.reason = reason;
+        this.quote = quote;
+    }
+}
+/**
+ * The stream-open request an x402 quote would create, or a refusal reason when
+ * the quote does not carry Metrik opener terms.
+ */
+export function x402QuoteToHireRequest(quote) {
+    if (quote.operator === null ||
+        quote.ratePerSecond === null ||
+        quote.maxDuration === null) {
+        return {
+            refused: "the quote carries no Metrik opener terms (operator, ratePerSecond, maxDuration), so it would not open a recoverable stream",
+        };
+    }
+    if (quote.maxDuration > BigInt(Number.MAX_SAFE_INTEGER)) {
+        return { refused: `maxDuration ${quote.maxDuration} is out of range` };
+    }
+    return {
+        operator: quote.operator,
+        budgetUsdc: quote.amount,
+        ratePerSecondUsdc: quote.ratePerSecond,
+        maxDurationSeconds: Number(quote.maxDuration),
+    };
+}
+/**
+ * The payment was APPROVED and its authorization signed and handed to the
+ * seller, then something failed (a malformed or missing PAYMENT-RESPONSE, a
+ * settlement the SDK could not confirm, a dropped connection). The money may
+ * have moved: {@link X402PostSignatureError.state} says what is known, and
+ * {@link X402PostSignatureError.releasable} is `true` only when the
+ * authorization provably can never be used. A spend reservation must be kept
+ * otherwise.
+ */
+export class X402PostSignatureError extends Error {
+    state;
+    approved;
+    quote;
+    authorization;
+    /** The stream the payment opened, when it could be identified. */
+    streamId;
+    opener;
+    constructor(context) {
+        const what = context.state === "used"
+            ? `the payment SETTLED (the authorization was used)${context.streamId === null ? ", but its stream could not be identified" : ` into stream ${context.streamId}`}`
+            : context.state === "possibly-used"
+                ? "the payment MAY HAVE SETTLED: whether the authorization was used could not be established, so treat it as spent"
+                : context.state === "unused-but-valid"
+                    ? `the authorization has not been used, but it stays valid until ${context.authorization?.validBefore.toString() ?? "its validBefore"} and the seller still holds it — treat it as spent until then, or cancel it on USDC (cancelAuthorization)`
+                    : "the authorization was never used and has expired: nothing moved";
+        super(`x402 payment of ${context.approved.budgetUsdc.toString()} USDC base units to ${context.quote.payTo} did not complete cleanly: ${what}. Cause: ${context.cause instanceof Error ? context.cause.message : String(context.cause)}`, { cause: context.cause });
+        this.name = "X402PostSignatureError";
+        this.state = context.state;
+        this.approved = context.approved;
+        this.quote = context.quote;
+        this.authorization = context.authorization;
+        this.streamId = context.streamId;
+        this.opener = getAddress(context.quote.payTo);
+    }
+    /** Only an authorization that provably can never move funds frees its reservation. */
+    get releasable() {
+        return this.state === "unused-expired";
+    }
+}
+function headerValue(headers, name) {
+    if (headers === undefined)
+        return null;
+    if (headers instanceof Headers)
+        return headers.get(name);
+    if (Array.isArray(headers)) {
+        const hit = headers.find((pair) => pair[0]?.toLowerCase() === name);
+        return hit?.[1] ?? null;
+    }
+    for (const [key, value] of Object.entries(headers)) {
+        if (key.toLowerCase() === name) {
+            return typeof value === "string" ? value : (value[0] ?? null);
+        }
+    }
+    return null;
+}
+/** The EIP-3009 authorization inside an x402 v2 PAYMENT-SIGNATURE header, if decodable. */
+function authorizationFromHeader(header) {
+    try {
+        const payload = decodePaymentSignatureHeader(header);
+        const auth = payload.payload?.authorization;
+        if (auth === undefined)
+            return null;
+        return {
+            from: getAddress(auth.from),
+            to: getAddress(auth.to),
+            value: BigInt(auth.value),
+            validAfter: BigInt(auth.validAfter),
+            validBefore: BigInt(auth.validBefore),
+            nonce: auth.nonce,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+function smaller(a, b) {
+    return b !== undefined && b < a ? b : a;
+}
+/**
+ * Pay an x402 v2 endpoint through the SDK's `payWithX402`, gated by
+ * `checkMandate()`. Fail closed: a mandate that does not verify, a quote it
+ * denies, or a quote without opener terms is a hard stop with nothing signed.
+ */
+export async function payX402WithMandate(input) {
+    const mandate = input.signedMandate.mandate;
+    // 1. The mandate itself, before the seller is even contacted.
+    const verdict = await verifySignedMandate(input.signedMandate, {
+        nowSeconds: input.nowSeconds,
+        ...(input.revokedMandateIds === undefined
+            ? {}
+            : { revokedMandateIds: input.revokedMandateIds }),
+    });
+    if (!verdict.allowed) {
+        throw new X402MandateDeniedError(verdict.reason ?? "invalid-signature", null);
+    }
+    if (input.signedMandate.owner.toLowerCase() !==
+        input.signer.address.toLowerCase()) {
+        throw new X402MandateDeniedError("invalid-signature", null, `the mandate is owned by ${input.signedMandate.owner}, not the payer ${input.signer.address}`);
+    }
+    if (input.signedMandate.chainId !== input.network.chain.id) {
+        throw new X402MandateDeniedError("invalid-signature", null, `the mandate is for chain ${input.signedMandate.chainId}, not ${input.network.name} (${input.network.chain.id})`);
+    }
+    // 2. The SDK's own ceilings, never looser than the mandate.
+    const remaining = mandate.maxTotalUsdc - input.spentSoFarUsdc;
+    if (remaining <= 0n) {
+        throw new X402MandateDeniedError("exceeds-total-cap", null, "the mandate's total cap is already spent");
+    }
+    const maxAmount = smaller(smaller(mandate.maxPerStreamUsdc, remaining), input.maxAmount);
+    const maxRatePerSecond = smaller(mandate.maxRatePerSecondUsdc, input.maxRatePerSecond);
+    // 3. The per-quote mandate check, before signing.
+    let denial = null;
+    let approved = null;
+    let approvedQuote = null;
+    // The authorization exactly as it left this process, read from the
+    // PAYMENT-SIGNATURE header on the way out — so a post-signature failure can
+    // still be traced on-chain even when the SDK error does not carry it.
+    let sentAuthorization = null;
+    const baseFetch = input.sdkOptions?.fetch ?? globalThis.fetch.bind(globalThis);
+    const capturingFetch = (async (resource, init) => {
+        const header = headerValue(init?.headers, "payment-signature") ??
+            (resource instanceof Request
+                ? resource.headers.get("payment-signature")
+                : null);
+        if (header !== null) {
+            sentAuthorization = authorizationFromHeader(header) ?? sentAuthorization;
+        }
+        return await baseFetch(resource, init);
+    });
+    const pay = input.payImpl ?? payWithX402;
+    let result;
+    try {
+        result = await pay(input.url, input.init, {
+            ...input.sdkOptions,
+            fetch: capturingFetch,
+            signer: input.signer,
+            network: input.network,
+            maxAmount,
+            maxRatePerSecond,
+            ...(input.minDurationSeconds === undefined
+                ? {}
+                : { minDurationSeconds: input.minDurationSeconds }),
+            onQuote: async (quote) => {
+                const request = x402QuoteToHireRequest(quote);
+                if ("refused" in request) {
+                    denial = new X402MandateDeniedError("not-an-opener-quote", quote, request.refused);
+                    return false;
+                }
+                const decision = await checkMandate(input.signedMandate, request, input.spentSoFarUsdc, {
+                    nowSeconds: input.nowSeconds,
+                    ...(input.revokedMandateIds === undefined
+                        ? {}
+                        : { revokedMandateIds: input.revokedMandateIds }),
+                });
+                if (!decision.allowed) {
+                    denial = new X402MandateDeniedError(decision.reason ?? "invalid-signature", quote);
+                    return false;
+                }
+                // Reserve BEFORE the SDK signs: from here on the money can move.
+                // A reservation hook that fails refuses the quote.
+                await input.onApproved?.({ request, quote });
+                approved = request;
+                approvedQuote = quote;
+                denial = null;
+                return true;
+            },
+        });
+    }
+    catch (error) {
+        if (error instanceof X402PaymentRefusedError) {
+            // The SDK's own statement: nothing was signed or sent. A reservation
+            // made in onApproved can be released by the caller.
+            if (denial !== null)
+                throw denial;
+            throw error;
+        }
+        if (approved === null || approvedQuote === null)
+            throw error;
+        throw await classifyPostSignatureFailure(input, {
+            error,
+            approved,
+            quote: approvedQuote,
+            sentAuthorization,
+        });
+    }
+    return { ...result, approved: result.paid ? approved : null };
+}
+/**
+ * After a failure past the point of signing, establish what happened from the
+ * CHAIN, never from the seller: USDC `authorizationState(from, nonce)` and the
+ * opener's `StreamOpenedFor(streamId, payer, authorizationNonce, …)` log.
+ */
+async function classifyPostSignatureFailure(input, context) {
+    const sdkError = context.error;
+    const authorization = sdkError.authorization ?? context.sentAuthorization ?? null;
+    let used = typeof sdkError.authorizationUsed === "boolean"
+        ? sdkError.authorizationUsed
+        : null;
+    let streamId = typeof sdkError.streamId === "string" &&
+        /^0x[0-9a-fA-F]{64}$/.test(sdkError.streamId)
+        ? sdkError.streamId
+        : null;
+    const reader = input.chainReader ??
+        input.sdkOptions?.publicClient ??
+        createPublicClient({
+            transport: input.sdkOptions?.transport ?? http(input.network.rpcUrls[0]),
+        });
+    if (authorization !== null) {
+        if (used === null) {
+            try {
+                used = await reader.readContract({
+                    address: input.network.usdc.address,
+                    abi: authorizationStateAbi,
+                    functionName: "authorizationState",
+                    args: [authorization.from, authorization.nonce],
+                });
+            }
+            catch {
+                used = null;
+            }
+        }
+        if (streamId === null && used !== false) {
+            // The SDK's recovery: only a registered factory's opener
+            // (factory.isOpener read on-chain) can prove a stream for this nonce.
+            try {
+                const recovery = await findStreamForAuthorization({
+                    authorization,
+                    network: input.network,
+                    factory: context.quote.factory ?? null,
+                    publicClient: reader,
+                });
+                streamId = recovery.streamId;
+            }
+            catch {
+                streamId = null;
+            }
+            if (streamId !== null)
+                used = true;
+        }
+    }
+    const nowSeconds = BigInt(Math.floor(Date.now() / 1000));
+    const state = streamId !== null || used === true
+        ? "used"
+        : used === false && authorization !== null
+            ? authorization.validBefore <= nowSeconds
+                ? "unused-expired"
+                : "unused-but-valid"
+            : "possibly-used";
+    return new X402PostSignatureError({
+        state,
+        approved: context.approved,
+        quote: context.quote,
+        authorization,
+        streamId,
+        cause: context.error,
+    });
+}
+const authorizationStateAbi = [
+    {
+        type: "function",
+        name: "authorizationState",
+        stateMutability: "view",
+        inputs: [
+            { name: "authorizer", type: "address" },
+            { name: "nonce", type: "bytes32" },
+        ],
+        outputs: [{ name: "", type: "bool" }],
+    },
+];
+//# sourceMappingURL=pay.js.map

package/dist/x402-buyer/pay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pay.js","sourceRoot":"","sources":["../../src/x402-buyer/pay.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,EAC1B,WAAW,EACX,uBAAuB,GAMxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,IAAI,EAAqB,MAAM,MAAM,CAAC;AAE/E,OAAO,EACL,YAAY,EACZ,mBAAmB,GAIpB,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,kEAAkE;AAClE,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,MAAM,CAEW;IACjB,KAAK,CAA0B;IAExC,YACE,MAAwC,EACxC,KAA8B,EAC9B,MAAe;QAEf,KAAK,CACH,8CAA8C,MAAM,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,uBAAuB,CACzH,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAuB;IAEvB,IACE,KAAK,CAAC,QAAQ,KAAK,IAAI;QACvB,KAAK,CAAC,aAAa,KAAK,IAAI;QAC5B,KAAK,CAAC,WAAW,KAAK,IAAI,EAC1B,CAAC;QACD,OAAO;YACL,OAAO,EACL,4HAA4H;SAC/H,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,eAAe,KAAK,CAAC,WAAW,kBAAkB,EAAE,CAAC;IACzE,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,iBAAiB,EAAE,KAAK,CAAC,aAAa;QACtC,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;KAC9C,CAAC;AACJ,CAAC;AAgED;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,KAAK,CAAyB;IAC9B,QAAQ,CAAc;IACtB,KAAK,CAAmB;IACxB,aAAa,CAAqC;IAC3D,kEAAkE;IACzD,QAAQ,CAAuB;IAC/B,MAAM,CAAgB;IAE/B,YAAY,OAOX;QACC,MAAM,IAAI,GACR,OAAO,CAAC,KAAK,KAAK,MAAM;YACtB,CAAC,CAAC,mDAAmD,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,gBAAgB,OAAO,CAAC,QAAQ,EAAE,EAAE;YAClK,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,eAAe;gBACjC,CAAC,CAAC,iHAAiH;gBACnH,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,kBAAkB;oBACpC,CAAC,CAAC,iEAAiE,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,QAAQ,EAAE,IAAI,iBAAiB,2GAA2G;oBAChP,CAAC,CAAC,iEAAiE,CAAC;QAC5E,KAAK,CACH,mBAAmB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,uBAAuB,OAAO,CAAC,KAAK,CAAC,KAAK,8BAA8B,IAAI,YAAY,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EACjO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CACzB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,sFAAsF;IACtF,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,KAAK,KAAK,gBAAgB,CAAC;IACzC,CAAC;CACF;AAED,SAAS,WAAW,CAClB,OAA2C,EAC3C,IAAY;IAEZ,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,OAAO,YAAY,OAAO;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC;QACpE,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2FAA2F;AAC3F,SAAS,uBAAuB,CAC9B,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,CAElD,CAAC;QACF,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC;QAC5C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACpC,OAAO;YACL,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAc,CAAC;YACrC,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,EAAY,CAAC;YACjC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC;YACnC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAoB,CAAC;YAC7C,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAqB,CAAC;YAC/C,KAAK,EAAE,IAAI,CAAC,KAAsB;SACnC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAOD,SAAS,OAAO,CAAC,CAAS,EAAE,CAAqB;IAC/C,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA8B;IAE9B,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC;IAC5C,8DAA8D;IAC9D,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,aAAa,EAAE;QAC7D,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,MAAM,IAAI,mBAAmB,EACrC,IAAI,CACL,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE;QACvC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAClC,CAAC;QACD,MAAM,IAAI,sBAAsB,CAC9B,mBAAmB,EACnB,IAAI,EACJ,2BAA2B,KAAK,CAAC,aAAa,CAAC,KAAK,mBAAmB,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAC9F,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC3D,MAAM,IAAI,sBAAsB,CAC9B,mBAAmB,EACnB,IAAI,EACJ,4BAA4B,KAAK,CAAC,aAAa,CAAC,OAAO,SAAS,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CACjH,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,cAAc,CAAC;IAC9D,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,sBAAsB,CAC9B,mBAAmB,EACnB,IAAI,EACJ,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CACvB,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,SAAS,CAAC,EAC5C,KAAK,CAAC,SAAS,CAChB,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAC9B,OAAO,CAAC,oBAAoB,EAC5B,KAAK,CAAC,gBAAgB,CACvB,CAAC;IAEF,kDAAkD;IAClD,IAAI,MAAM,GAAkC,IAAI,CAAC;IACjD,IAAI,QAAQ,GAAuB,IAAI,CAAC;IACxC,IAAI,aAAa,GAA4B,IAAI,CAAC;IAClD,mEAAmE;IACnE,4EAA4E;IAC5E,sEAAsE;IACtE,IAAI,iBAAiB,GAAuC,IAAI,CAAC;IACjE,MAAM,SAAS,GACb,KAAK,CAAC,UAAU,EAAE,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAG,CAAC,KAAK,EAC3B,QAAgC,EAChC,IAAkB,EAClB,EAAE;QACF,MAAM,MAAM,GACV,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC;YAC/C,CAAC,QAAQ,YAAY,OAAO;gBAC1B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;gBAC3C,CAAC,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,iBAAiB,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC;QAC3E,CAAC;QACD,OAAO,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC,CAAiB,CAAC;IACnB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,WAAW,CAAC;IACzC,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE;YACxC,GAAG,KAAK,CAAC,UAAU;YACnB,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS;YACT,gBAAgB;YAChB,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC;YACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACvB,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;oBACzB,MAAM,GAAG,IAAI,sBAAsB,CACjC,qBAAqB,EACrB,KAAK,EACL,OAAO,CAAC,OAAO,CAChB,CAAC;oBACF,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,YAAY,CACjC,KAAK,CAAC,aAAa,EACnB,OAAO,EACP,KAAK,CAAC,cAAc,EACpB;oBACE,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;wBACvC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC;iBACpD,CACF,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACtB,MAAM,GAAG,IAAI,sBAAsB,CACjC,QAAQ,CAAC,MAAM,IAAI,mBAAmB,EACtC,KAAK,CACN,CAAC;oBACF,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,iEAAiE;gBACjE,mDAAmD;gBACnD,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7C,QAAQ,GAAG,OAAO,CAAC;gBACnB,aAAa,GAAG,KAAK,CAAC;gBACtB,MAAM,GAAG,IAAI,CAAC;gBACd,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,qEAAqE;YACrE,oDAAoD;YACpD,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,MAAM,CAAC;YAClC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,IAAI,aAAa,KAAK,IAAI;YAAE,MAAM,KAAK,CAAC;QAC7D,MAAM,MAAM,4BAA4B,CAAC,KAAK,EAAE;YAC9C,KAAK;YACL,QAAQ;YACR,KAAK,EAAE,aAAa;YACpB,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,4BAA4B,CACzC,KAA8B,EAC9B,OAKC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,KAIxB,CAAC;IACF,MAAM,aAAa,GACjB,QAAQ,CAAC,aAAa,IAAI,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAC9D,IAAI,IAAI,GACN,OAAO,QAAQ,CAAC,iBAAiB,KAAK,SAAS;QAC7C,CAAC,CAAC,QAAQ,CAAC,iBAAiB;QAC5B,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,QAAQ,GACV,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ;QACrC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,CAAC,CAAE,QAAQ,CAAC,QAA0B;QACtC,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,MAAM,GACV,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,UAAU,EAAE,YAAY;QAC7B,kBAAkB,CAAC;YAClB,SAAS,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SACzE,CAA6B,CAAC;IAEjC,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;oBAC/B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO;oBACnC,GAAG,EAAE,qBAAqB;oBAC1B,YAAY,EAAE,oBAAoB;oBAClC,IAAI,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC;iBAChD,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACxC,yDAAyD;YACzD,sEAAsE;YACtE,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC;oBAChD,aAAa;oBACb,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI;oBACtC,YAAY,EAAE,MAAsB;iBACrC,CAAC,CAAC;gBACH,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;YACD,IAAI,QAAQ,KAAK,IAAI;gBAAE,IAAI,GAAG,IAAI,CAAC;QACrC,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,KAAK,GACT,QAAQ,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAChC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,aAAa,KAAK,IAAI;YACxC,CAAC,CAAC,aAAa,CAAC,WAAW,IAAI,UAAU;gBACvC,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,kBAAkB;YACtB,CAAC,CAAC,eAAe,CAAC;IACxB,OAAO,IAAI,sBAAsB,CAAC;QAChC,KAAK;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa;QACb,QAAQ;QACR,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,qBAAqB,GAAG;IAC5B;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,oBAAoB;QAC1B,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;YACvC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;SACnC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KACtC;CACO,CAAC"}