@agenticprimitives/payments 0.0.0-alpha.10

package/dist/rails/recurring.js

@@ -0,0 +1,58 @@
+/**
+ * Recurring profile (spec 243 §5.5 / PMT-10) — NOT a rail, a mandate pattern.
+ *
+ * The payer authorizes ONCE (an open payment delegation whose caveats carry the per-charge
+ * cap + the frequency window + the aggregate cap); each period derives a CLOSED per-charge
+ * mandate settled via the wallet rail. The `PaymentEnforcer`'s on-chain frequency window +
+ * aggregate cap do the real enforcement — `recurringCaveatParams` returns the values the app
+ * feeds to `delegation.buildPaymentMandateCaveats` (payments doesn't runtime-import delegation).
+ */
+import { keccak256, encodeAbiParameters } from 'viem';
+import { buildClosedMandate } from '../mandate.js';
+import { buildWalletTransferPlan } from './wallet.js';
+export function buildRecurringTemplate(input) {
+    if (input.amountPerPeriod <= 0n)
+        throw new Error('[recurring] amountPerPeriod must be > 0');
+    if (input.totalCap < input.amountPerPeriod)
+        throw new Error('[recurring] totalCap must be >= amountPerPeriod');
+    if (input.windowSeconds <= 0)
+        throw new Error('[recurring] windowSeconds must be > 0');
+    const templateId = keccak256(encodeAbiParameters([{ type: 'address' }, { type: 'address' }, { type: 'uint256' }, { type: 'uint256' }, { type: 'uint256' }], [input.payer, input.payee, input.amountPerPeriod, BigInt(input.windowSeconds), input.startNonce]));
+    return { ...input, templateId, periods: Number(input.totalCap / input.amountPerPeriod) };
+}
+/** The values the app feeds to `delegation.buildPaymentMandateCaveats` for the one-time authorization. */
+export function recurringCaveatParams(t) {
+    return {
+        maxAmountPerCharge: t.amountPerPeriod,
+        maxAggregate: t.totalCap,
+        maxRedemptionsPerWindow: 1, // one charge per window
+        windowSeconds: t.windowSeconds,
+        validUntil: t.validUntil,
+    };
+}
+/** The time window in which period N may be charged (the enforcer rejects an early re-charge). */
+export function periodWindow(t, period) {
+    const start = t.validFrom + period * t.windowSeconds;
+    return { start, end: start + t.windowSeconds };
+}
+/** Derive the closed per-charge mandate + transfer plan for period N. Sign the mandate, then settle. */
+export function deriveScheduledCharge(t, period) {
+    if (period < 0 || period >= t.periods)
+        throw new Error(`[recurring] period out of range [0, ${t.periods})`);
+    const window = periodWindow(t, period);
+    const mandate = buildClosedMandate({
+        rail: 'wallet',
+        payer: t.payer,
+        payee: t.payee,
+        asset: t.asset,
+        amount: t.amountPerPeriod,
+        chain: t.chain,
+        nonce: t.startNonce + BigInt(period),
+        validFrom: window.start,
+        expiresAt: window.end,
+        orderHash: t.templateId,
+        legId: ('0x' + period.toString(16).padStart(64, '0')),
+    });
+    return { mandate, plan: buildWalletTransferPlan(mandate), window };
+}
+//# sourceMappingURL=recurring.js.map

package/dist/rails/recurring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recurring.js","sourceRoot":"","sources":["../../src/rails/recurring.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAyBtD,MAAM,UAAU,sBAAsB,CAAC,KAAqB;IAC1D,IAAI,KAAK,CAAC,eAAe,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC5F,IAAI,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC/G,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACvF,MAAM,UAAU,GAAG,SAAS,CAC1B,mBAAmB,CACjB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACzG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CACjG,CACO,CAAC;IACX,OAAO,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;AAC3F,CAAC;AAUD,0GAA0G;AAC1G,MAAM,UAAU,qBAAqB,CAAC,CAAoB;IACxD,OAAO;QACL,kBAAkB,EAAE,CAAC,CAAC,eAAe;QACrC,YAAY,EAAE,CAAC,CAAC,QAAQ;QACxB,uBAAuB,EAAE,CAAC,EAAE,wBAAwB;QACpD,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,YAAY,CAAC,CAAoB,EAAE,MAAc;IAC/D,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,GAAG,MAAM,GAAG,CAAC,CAAC,aAAa,CAAC;IACrD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC;AACjD,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,qBAAqB,CAAC,CAAoB,EAAE,MAAc;IACxE,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,kBAAkB,CAAC;QACjC,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,CAAC,CAAC,eAAe;QACzB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC,KAAK;QACvB,SAAS,EAAE,MAAM,CAAC,GAAG;QACrB,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,KAAK,EAAG,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAW;KACjE,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;AACrE,CAAC"}

package/dist/rails/wallet.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Wallet rail (spec 243 §5.3/§5.5) — direct SA→SA transfer of a CLOSED mandate.
+ *
+ * Plain "checkout" pay: no budget delegation, no 402 round-trip. The payer SA executes a
+ * single ERC-20 transfer to the payee. Nullifier + receipt are identical to x402 (EXC-D3
+ * evidence symmetry). Ports the smart-agent `PledgeRegistry` cryptographic-rail pattern.
+ */
+import { type ClosedMandateInput } from '../mandate.js';
+import { type TransferPlan } from '../transfer.js';
+import type { PaymentMandate } from '../index.js';
+export declare const WALLET_RAIL: "wallet";
+/** Build an unsigned closed wallet-rail mandate (sign with `signPaymentMandate`). */
+export declare function buildWalletMandate(input: Omit<ClosedMandateInput, 'rail'>): PaymentMandate;
+/** The settlement plan for a closed wallet mandate: a direct transfer payer → payee. */
+export declare function buildWalletTransferPlan(mandate: PaymentMandate): TransferPlan;
+//# sourceMappingURL=wallet.d.ts.map

package/dist/rails/wallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../../src/rails/wallet.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAsB,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,eAAO,MAAM,WAAW,EAAG,QAAiB,CAAC;AAE7C,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,GAAG,cAAc,CAE1F;AAED,wFAAwF;AACxF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,cAAc,GAAG,YAAY,CAE7E"}

package/dist/rails/wallet.js

@@ -0,0 +1,20 @@
+/**
+ * Wallet rail (spec 243 §5.3/§5.5) — direct SA→SA transfer of a CLOSED mandate.
+ *
+ * Plain "checkout" pay: no budget delegation, no 402 round-trip. The payer SA executes a
+ * single ERC-20 transfer to the payee. Nullifier + receipt are identical to x402 (EXC-D3
+ * evidence symmetry). Ports the smart-agent `PledgeRegistry` cryptographic-rail pattern.
+ */
+import { mandateAmount } from '../mandate-sign.js';
+import { buildClosedMandate } from '../mandate.js';
+import { buildErc20Transfer } from '../transfer.js';
+export const WALLET_RAIL = 'wallet';
+/** Build an unsigned closed wallet-rail mandate (sign with `signPaymentMandate`). */
+export function buildWalletMandate(input) {
+    return buildClosedMandate({ ...input, rail: 'wallet' });
+}
+/** The settlement plan for a closed wallet mandate: a direct transfer payer → payee. */
+export function buildWalletTransferPlan(mandate) {
+    return buildErc20Transfer(mandate.amountPolicy.asset.id, mandate.payee, mandateAmount(mandate));
+}
+//# sourceMappingURL=wallet.js.map

package/dist/rails/wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../src/rails/wallet.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAA2B,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAqB,MAAM,gBAAgB,CAAC;AAGvE,MAAM,CAAC,MAAM,WAAW,GAAG,QAAiB,CAAC;AAE7C,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,KAAuC;IACxE,OAAO,kBAAkB,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,uBAAuB,CAAC,OAAuB;IAC7D,OAAO,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAAa,EAAE,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7G,CAAC"}

package/dist/rails/x402/executor.d.ts

@@ -0,0 +1,118 @@
+import { type Address, type Hex } from 'viem';
+import type { Delegation } from '@agenticprimitives/delegation';
+import { type PaymentMandate } from '../../index.js';
+import type { Hex32 } from './resource.js';
+import type { PaymentQuote } from './quote.js';
+import type { NonceReservationStore } from './nonce-store.js';
+/** x402-specific bits the mandate carries (PaymentMandate.railConfig). Binds the mandate to its quote. */
+export interface X402RailConfig {
+    quoteId: Hex32;
+    resourceHash: Hex32;
+}
+/** PAY-RAIL-4 — the rail-scoped replay nullifier. */
+export declare function computeNullifier(args: {
+    rail: string;
+    chainId: number;
+    payer: Address;
+    payee: Address;
+    asset: Address;
+    mandateId: Hex32;
+    nonce: bigint;
+    resourceHash: Hex32;
+}): Hex32;
+/**
+ * PAY-RAIL-1 — synchronous mandate verification against its persisted quote. Returns the first failure
+ * reason (or null). The async checks (revocation, nonce-unused) run in the rail's settle() flow.
+ */
+export declare function verifyMandate(mandate: PaymentMandate, quote: PaymentQuote, opts: {
+    now: number;
+}): {
+    valid: true;
+} | {
+    valid: false;
+    reason: string;
+};
+/**
+ * PAY-RAIL-2 — build the redemption plan: DelegationManager.redeemDelegation(paymentDelegation,
+ * USDC.transfer(treasury, amount)) with the PaymentEnforcer caveat's `args` filled with the mandate's
+ * (mandateId, nonce, resourceHash) at REDEMPTION time. The caller submits `{to, value, data}` from the
+ * service relayer as a sponsored UserOp.
+ */
+export declare function buildRedemptionCalldata(args: {
+    mandate: PaymentMandate;
+    delegation: Delegation;
+    delegationManager: Address;
+    paymentEnforcer: Address;
+    asset: Address;
+    resourceHash: Hex32;
+}): {
+    to: Address;
+    value: bigint;
+    data: Hex;
+};
+export interface X402RailDeps {
+    chainId: number;
+    delegationManager: Address;
+    paymentEnforcer: Address;
+    asset: Address;
+    nonceStore: NonceReservationStore;
+    /** Off-chain revocation read (the app wires `delegation.isRevoked`). Checked BEFORE settling; the DM
+     *  also enforces revocation on-chain (PAY-DEL-3). */
+    isRevoked: (delegationHash: Hex32) => Promise<boolean>;
+    /** Submit the redemption (a sponsored UserOp from the service relayer, X402-D4). Injected by the app /
+     *  agent-account layer; returns the settlement tx hash. */
+    submitRedemption: (plan: {
+        to: Address;
+        value: bigint;
+        data: Hex;
+    }) => Promise<{
+        settlementHash: Hex32;
+    }>;
+    /** PAY-RAIL-6 — dry-run the redemption (eth_call / estimateGas) BEFORE the nonce is burned, so a
+     *  reverting or griefing settlement is rejected without consuming the one-shot mandate. Injected by
+     *  the app; omit to skip simulation. Returns ok + optional gas estimate. */
+    simulate?: (plan: {
+        to: Address;
+        value: bigint;
+        data: Hex;
+    }) => Promise<{
+        ok: boolean;
+        reason?: string;
+        gas?: bigint;
+    }>;
+    /** Anti-griefing: reject a settlement whose simulated gas exceeds this cap. */
+    maxGasPerSettlement?: bigint;
+    /** Anti-griefing: abort `submitRedemption` if it doesn't resolve within this many ms (settlement timeout). */
+    settlementTimeoutMs?: number;
+    /** EXT-PMT-2: verify the payer's per-charge mandate signature (PMT-INV-12) BEFORE settling. The app
+     *  wires this as `(m) => verifyPaymentMandateSignature(m, domainOpts, read1271)` (ERC-1271 via the payer
+     *  SA). REQUIRED by default — settle refuses unless this is supplied OR `allowUnsignedMandate` is set. */
+    verifyMandateSignature?: (mandate: PaymentMandate) => Promise<boolean>;
+    /** EXT-PMT-2 opt-out: settle an UNSIGNED per-charge mandate. Use ONLY when the mandate is authored
+     *  in-process and the on-chain authority is the signed DELEGATION + PaymentEnforcer caps (the demo
+     *  model — the per-charge mandate is a redundant artifact there). A relayer settling a payer-supplied
+     *  mandate MUST supply `verifyMandateSignature` instead (ADR-0013 safe-by-default). */
+    allowUnsignedMandate?: boolean;
+    now?: () => number;
+}
+export type SettleResult = {
+    ok: true;
+    settlementHash: Hex32;
+    mandateId: Hex32;
+    idempotent: boolean;
+} | {
+    ok: false;
+    reason: string;
+};
+/** The staged x402 rail. `settle` runs verify → revoke → reserve(nullifier) → simulate → submit →
+ *  receipt; a safe retry of an already-settled request returns the original receipt (idempotent). */
+export declare function createX402Rail(deps: X402RailDeps): {
+    rail: "x402";
+    verifyMandate: typeof verifyMandate;
+    settle: (input: {
+        mandate: PaymentMandate;
+        delegation: Delegation;
+        quote: PaymentQuote;
+    }) => Promise<SettleResult>;
+};
+//# sourceMappingURL=executor.d.ts.map

package/dist/rails/x402/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/rails/x402/executor.ts"],"names":[],"mappings":"AAMA,OAAO,EAA6D,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AACzG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAA4D,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC/G,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,KAAK,EAAE,qBAAqB,EAAkB,MAAM,kBAAkB,CAAC;AAE9E,0GAA0G;AAC1G,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,YAAY,EAAE,KAAK,CAAC;CACrB;AAmDD,qDAAqD;AACrD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,KAAK,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,KAAK,CAAC;CACrB,GAAG,KAAK,CAgBR;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAwBpD;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,KAAK,CAAC;CACrB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,GAAG,CAAA;CAAE,CA6C5C;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,qBAAqB,CAAC;IAClC;yDACqD;IACrD,SAAS,EAAE,CAAC,cAAc,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD;+DAC2D;IAC3D,gBAAgB,EAAE,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,GAAG,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,cAAc,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;IAC1G;;gFAE4E;IAC5E,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,GAAG,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxH,+EAA+E;IAC/E,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,8GAA8G;IAC9G,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;8GAE0G;IAC1G,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvE;;;2FAGuF;IACvF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,cAAc,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAC1E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AASlC;qGACqG;AACrG,wBAAgB,cAAc,CAAC,IAAI,EAAE,YAAY;;;oBAGlB;QAAE,OAAO,EAAE,cAAc,CAAC;QAAC,UAAU,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,YAAY,CAAA;KAAE,KAAG,OAAO,CAAC,YAAY,CAAC;EAiF9H"}

package/dist/rails/x402/executor.js

@@ -0,0 +1,243 @@
+// Spec 272 PAY-RAIL-1..6 — the staged x402 rail executor (verify → revoke-check → reserve → prepare →
+// submit → receipt). Delegation-native settlement (X402-D2): the redemption is
+// DelegationManager.redeemDelegation(paymentDelegation, USDC.transfer(treasury, amount)) gated by the
+// on-chain PaymentEnforcer. This package owns the LOGIC; on-chain submission (a sponsored UserOp,
+// X402-D4) + the revocation read are INJECTED (payments is type-only on delegation, forbids agent-account).
+import { encodeAbiParameters, encodeFunctionData, keccak256, toHex } from 'viem';
+import { assertContextBindingValid, assertClosedMandateInvariants } from '../../index.js';
+import { fromCaip2 } from './quote.js';
+const TRANSFER_ABI = [
+    {
+        type: 'function',
+        name: 'transfer',
+        stateMutability: 'nonpayable',
+        inputs: [
+            { name: 'to', type: 'address' },
+            { name: 'amount', type: 'uint256' },
+        ],
+        outputs: [{ type: 'bool' }],
+    },
+];
+const DELEGATION_TUPLE = {
+    name: 'delegations',
+    type: 'tuple[]',
+    components: [
+        { name: 'delegator', type: 'address' },
+        { name: 'delegate', type: 'address' },
+        { name: 'authority', type: 'bytes32' },
+        {
+            name: 'caveats',
+            type: 'tuple[]',
+            components: [
+                { name: 'enforcer', type: 'address' },
+                { name: 'terms', type: 'bytes' },
+                { name: 'args', type: 'bytes' },
+            ],
+        },
+        { name: 'salt', type: 'uint256' },
+        { name: 'signature', type: 'bytes' },
+    ],
+};
+const REDEEM_ABI = [
+    {
+        type: 'function',
+        name: 'redeemDelegation',
+        stateMutability: 'nonpayable',
+        inputs: [
+            DELEGATION_TUPLE,
+            { name: 'target', type: 'address' },
+            { name: 'value', type: 'uint256' },
+            { name: 'data', type: 'bytes' },
+        ],
+        outputs: [],
+    },
+];
+/** PAY-RAIL-4 — the rail-scoped replay nullifier. */
+export function computeNullifier(args) {
+    return keccak256(encodeAbiParameters([
+        { type: 'string' },
+        { type: 'uint256' },
+        { type: 'address' },
+        { type: 'address' },
+        { type: 'address' },
+        { type: 'bytes32' },
+        { type: 'uint256' },
+        { type: 'bytes32' },
+    ], [args.rail, BigInt(args.chainId), args.payer, args.payee, args.asset, args.mandateId, args.nonce, args.resourceHash]));
+}
+/**
+ * PAY-RAIL-1 — synchronous mandate verification against its persisted quote. Returns the first failure
+ * reason (or null). The async checks (revocation, nonce-unused) run in the rail's settle() flow.
+ */
+export function verifyMandate(mandate, quote, opts) {
+    try {
+        assertContextBindingValid(mandate.contextBinding);
+        assertClosedMandateInvariants(mandate);
+    }
+    catch (e) {
+        return { valid: false, reason: e instanceof Error ? e.message : 'invariant' };
+    }
+    if (mandate.mode !== 'closed')
+        return { valid: false, reason: 'final charge requires a closed mandate' };
+    if (mandate.maxRedemptions !== 1)
+        return { valid: false, reason: 'closed mandate must be one-shot' };
+    if (mandate.rail !== 'x402')
+        return { valid: false, reason: `wrong rail ${mandate.rail}` };
+    const rc = mandate.railConfig;
+    if (!rc?.quoteId || rc.quoteId !== quote.quoteId)
+        return { valid: false, reason: 'quote mismatch (quoteId)' };
+    if (rc.resourceHash !== quote.resourceHash)
+        return { valid: false, reason: 'quote mismatch (resourceHash)' };
+    if (mandate.payee.toLowerCase() !== quote.payTo.toLowerCase())
+        return { valid: false, reason: 'payee != treasury' };
+    if (mandate.amountPolicy.kind !== 'exact')
+        return { valid: false, reason: 'flat per-call requires exact amountPolicy' };
+    if (mandate.amountPolicy.amount !== quote.amount)
+        return { valid: false, reason: 'amount mismatch' };
+    if (mandate.amountPolicy.asset.id.toLowerCase() !== quote.asset.toLowerCase())
+        return { valid: false, reason: 'asset mismatch' };
+    if (mandate.amountPolicy.chain !== fromCaip2(quote.network))
+        return { valid: false, reason: 'chain mismatch' };
+    if (mandate.nonce !== quote.nonce)
+        return { valid: false, reason: 'nonce mismatch' };
+    if (mandate.expiresAt <= opts.now)
+        return { valid: false, reason: 'mandate expired' };
+    if (mandate.validFrom > opts.now)
+        return { valid: false, reason: 'mandate not yet valid' };
+    return { valid: true };
+}
+/**
+ * PAY-RAIL-2 — build the redemption plan: DelegationManager.redeemDelegation(paymentDelegation,
+ * USDC.transfer(treasury, amount)) with the PaymentEnforcer caveat's `args` filled with the mandate's
+ * (mandateId, nonce, resourceHash) at REDEMPTION time. The caller submits `{to, value, data}` from the
+ * service relayer as a sponsored UserOp.
+ */
+export function buildRedemptionCalldata(args) {
+    const amount = args.mandate.amountPolicy.amount;
+    const transferData = encodeFunctionData({
+        abi: TRANSFER_ABI,
+        functionName: 'transfer',
+        args: [args.mandate.payee, amount],
+    });
+    // Fill the PaymentEnforcer caveat's redeem-time args = abi.encode(mandateId, nonce, resourceHash).
+    const enforcerArgs = encodeAbiParameters([{ type: 'bytes32' }, { type: 'bytes32' }, { type: 'bytes32' }], [args.mandate.mandateId, toHex(args.mandate.nonce, { size: 32 }), args.resourceHash]);
+    const pe = args.paymentEnforcer.toLowerCase();
+    // EXT-PMT-2: the delegation MUST carry the PaymentEnforcer caveat — otherwise this would encode a
+    // redemption that moves USDC with NO on-chain spend/frequency/nonce enforcement attached.
+    if (!args.delegation.caveats.some((c) => c.enforcer.toLowerCase() === pe)) {
+        throw new Error('buildRedemptionCalldata: delegation has no PaymentEnforcer caveat — refusing to encode an unenforced payment (EXT-PMT-2)');
+    }
+    const caveats = args.delegation.caveats.map((c) => c.enforcer.toLowerCase() === pe
+        ? { enforcer: c.enforcer, terms: c.terms, args: enforcerArgs }
+        : { enforcer: c.enforcer, terms: c.terms, args: c.args ?? '0x' });
+    const data = encodeFunctionData({
+        abi: REDEEM_ABI,
+        functionName: 'redeemDelegation',
+        args: [
+            [
+                {
+                    delegator: args.delegation.delegator,
+                    delegate: args.delegation.delegate,
+                    authority: args.delegation.authority,
+                    caveats,
+                    salt: args.delegation.salt,
+                    signature: args.delegation.signature,
+                },
+            ],
+            args.asset,
+            0n,
+            transferData,
+        ],
+    });
+    return { to: args.delegationManager, value: 0n, data };
+}
+function withTimeout(p, ms) {
+    return new Promise((resolve, reject) => {
+        const t = setTimeout(() => reject(new Error(`settlement timed out after ${ms}ms`)), ms);
+        p.then((v) => { clearTimeout(t); resolve(v); }, (e) => { clearTimeout(t); reject(e); });
+    });
+}
+/** The staged x402 rail. `settle` runs verify → revoke → reserve(nullifier) → simulate → submit →
+ *  receipt; a safe retry of an already-settled request returns the original receipt (idempotent). */
+export function createX402Rail(deps) {
+    const now = deps.now ?? (() => Math.floor(Date.now() / 1000));
+    async function settle(input) {
+        const { mandate, delegation, quote } = input;
+        const v = verifyMandate(mandate, quote, { now: now() });
+        if (!v.valid)
+            return { ok: false, reason: v.reason };
+        // PAY-H2 (seam audit): verifyMandate binds mandate.asset === quote.asset, but settlement transfers
+        // against the RAIL's configured `deps.asset` (computeNullifier + buildRedemptionCalldata). If the rail
+        // is wired for a different asset than the quote (e.g. USDC 6-dec vs an 18-dec token), it would move
+        // `quote.amount` atomic units of the WRONG asset — over/under-charging by decimals/asset divergence.
+        // Assert quote.asset === deps.asset BEFORE reserving the nonce or building calldata (fail-closed).
+        if (quote.asset.toLowerCase() !== deps.asset.toLowerCase()) {
+            return { ok: false, reason: 'rail asset does not match the quoted asset' };
+        }
+        // EXT-PMT-2: enforce the payer's per-charge mandate signature (fail-closed by default).
+        if (deps.verifyMandateSignature) {
+            if (!(await deps.verifyMandateSignature(mandate)))
+                return { ok: false, reason: 'mandate signature invalid' };
+        }
+        else if (!deps.allowUnsignedMandate) {
+            return { ok: false, reason: 'no mandate-signature verifier and allowUnsignedMandate not set (EXT-PMT-2)' };
+        }
+        const delegationHash = mandate.delegationRef;
+        if (delegationHash && (await deps.isRevoked(delegationHash)))
+            return { ok: false, reason: 'payment delegation revoked' };
+        const nullifier = computeNullifier({
+            rail: 'x402',
+            chainId: deps.chainId,
+            payer: mandate.payer,
+            payee: mandate.payee,
+            asset: deps.asset,
+            mandateId: mandate.mandateId,
+            nonce: mandate.nonce,
+            resourceHash: quote.resourceHash,
+        });
+        const reserved = await deps.nonceStore.reserve(nullifier);
+        if (!reserved.ok) {
+            if (reserved.state === 'settled' && reserved.receipt) {
+                return { ok: true, settlementHash: reserved.receipt.settlementHash, mandateId: reserved.receipt.mandateId, idempotent: true };
+            }
+            return { ok: false, reason: `duplicate settlement (${reserved.state})` };
+        }
+        const plan = buildRedemptionCalldata({
+            mandate,
+            delegation,
+            delegationManager: deps.delegationManager,
+            paymentEnforcer: deps.paymentEnforcer,
+            asset: deps.asset,
+            resourceHash: quote.resourceHash,
+        });
+        // PAY-RAIL-6 — simulate before burning the nonce: a reverting or over-gas settlement is
+        // rejected as RETRYABLE so the one-shot mandate survives for a corrected resubmit.
+        if (deps.simulate) {
+            const sim = await deps.simulate(plan);
+            if (!sim.ok) {
+                await deps.nonceStore.markFailed(nullifier, true);
+                return { ok: false, reason: `simulation reverted${sim.reason ? `: ${sim.reason}` : ''}` };
+            }
+            if (deps.maxGasPerSettlement !== undefined && sim.gas !== undefined && sim.gas > deps.maxGasPerSettlement) {
+                await deps.nonceStore.markFailed(nullifier, true);
+                return { ok: false, reason: `settlement gas ${sim.gas} exceeds cap ${deps.maxGasPerSettlement}` };
+            }
+        }
+        await deps.nonceStore.markSettling(nullifier);
+        try {
+            const submit = deps.submitRedemption(plan);
+            const { settlementHash } = deps.settlementTimeoutMs
+                ? await withTimeout(submit, deps.settlementTimeoutMs)
+                : await submit;
+            const receipt = { settlementHash, mandateId: mandate.mandateId };
+            await deps.nonceStore.markSettled(nullifier, receipt);
+            return { ok: true, settlementHash, mandateId: mandate.mandateId, idempotent: false };
+        }
+        catch (e) {
+            await deps.nonceStore.markFailed(nullifier, true);
+            return { ok: false, reason: e instanceof Error ? e.message : 'settlement failed' };
+        }
+    }
+    return { rail: 'x402', verifyMandate, settle };
+}
+//# sourceMappingURL=executor.js.map

package/dist/rails/x402/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../src/rails/x402/executor.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,+EAA+E;AAC/E,sGAAsG;AACtG,kGAAkG;AAClG,4GAA4G;AAE5G,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,EAA0B,MAAM,MAAM,CAAC;AAEzG,OAAO,EAAE,yBAAyB,EAAE,6BAA6B,EAAuB,MAAM,gBAAgB,CAAC;AAG/G,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AASvC,MAAM,YAAY,GAAG;IACnB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,UAAU;QAChB,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;YAC/B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;SACpC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;KAC5B;CACO,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,SAAS;IACf,UAAU,EAAE;QACV,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,SAAS;YACf,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;gBACrC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE;gBAChC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;aAChC;SACF;QACD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;QACjC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;KACrC;CACO,CAAC;AAEX,MAAM,UAAU,GAAG;IACjB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,kBAAkB;QACxB,eAAe,EAAE,YAAY;QAC7B,MAAM,EAAE;YACN,gBAAgB;YAChB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;YACnC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;YAClC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;SAChC;QACD,OAAO,EAAE,EAAE;KACZ;CACO,CAAC;AAEX,qDAAqD;AACrD,MAAM,UAAU,gBAAgB,CAAC,IAShC;IACC,OAAO,SAAS,CACd,mBAAmB,CACjB;QACE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;KACpB,EACD,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,CACrH,CACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAuB,EACvB,KAAmB,EACnB,IAAqB;IAErB,IAAI,CAAC;QACH,yBAAyB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAClD,6BAA6B,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IACzG,IAAI,OAAO,CAAC,cAAc,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACrG,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IAE3F,MAAM,EAAE,GAAG,OAAO,CAAC,UAAwC,CAAC;IAC5D,IAAI,CAAC,EAAE,EAAE,OAAO,IAAI,EAAE,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC9G,IAAI,EAAE,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAE7G,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpH,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IACxH,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACrG,IAAI,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjI,IAAI,OAAO,CAAC,YAAY,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC/G,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACrF,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACtF,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC3F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAOvC;IACC,MAAM,MAAM,GAAI,IAAI,CAAC,OAAO,CAAC,YAAmC,CAAC,MAAM,CAAC;IACxE,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,GAAG,EAAE,YAAY;QACjB,YAAY,EAAE,UAAU;QACxB,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;KACnC,CAAC,CAAC;IAEH,mGAAmG;IACnG,MAAM,YAAY,GAAG,mBAAmB,CACtC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAC/D,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CACrF,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;IAC9C,kGAAkG;IAClG,0FAA0F;IAC1F,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,0HAA0H,CAAC,CAAC;IAC9I,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChD,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE;QAC7B,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE;QAC9D,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CACnE,CAAC;IAEF,MAAM,IAAI,GAAG,kBAAkB,CAAC;QAC9B,GAAG,EAAE,UAAU;QACf,YAAY,EAAE,kBAAkB;QAChC,IAAI,EAAE;YACJ;gBACE;oBACE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;oBACpC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ;oBAClC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;oBACpC,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;oBAC1B,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;iBACrC;aACF;YACD,IAAI,CAAC,KAAK;YACV,EAAE;YACF,YAAY;SACb;KACF,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACzD,CAAC;AAsCD,SAAS,WAAW,CAAI,CAAa,EAAE,EAAU;IAC/C,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC;AAED;qGACqG;AACrG,MAAM,UAAU,cAAc,CAAC,IAAkB;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAE9D,KAAK,UAAU,MAAM,CAAC,KAA+E;QACnG,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QAC7C,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAErD,mGAAmG;QACnG,uGAAuG;QACvG,oGAAoG;QACpG,qGAAqG;QACrG,mGAAmG;QACnG,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QAC7E,CAAC;QAED,wFAAwF;QACxF,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAChC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QAC/G,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4EAA4E,EAAE,CAAC;QAC7G,CAAC;QAED,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;QAC7C,IAAI,cAAc,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QAEzH,MAAM,SAAS,GAAG,gBAAgB,CAAC;YACjC,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAChI,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,IAAI,GAAG,uBAAuB,CAAC;YACnC,OAAO;YACP,UAAU;YACV,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;QAEH,wFAAwF;QACxF,mFAAmF;QACnF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;YAC5F,CAAC;YACD,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC1G,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,GAAG,CAAC,GAAG,gBAAgB,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YACpG,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,mBAAmB;gBACjD,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,mBAAmB,CAAC;gBACrD,CAAC,CAAC,MAAM,MAAM,CAAC;YACjB,MAAM,OAAO,GAAmB,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;YACjF,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACvF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAe,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AAC1D,CAAC"}

package/dist/rails/x402/index.d.ts

@@ -0,0 +1,11 @@
+export type { PaymentResource, Hex32 } from './resource.js';
+export { ZERO_HASH, canonicalizePaymentResource, hashRequestBody, redactPaymentMetadata } from './resource.js';
+export type { PaymentQuote } from './quote.js';
+export { computeQuoteId, buildPaymentQuote, quoteMismatch, toCaip2, fromCaip2 } from './quote.js';
+export type { PaymentRequirements, PaymentRequiredBody, SettlementResponse, PaymentSignaturePayload } from './wire.js';
+export { X402_VERSION, HEADER_PAYMENT_REQUIRED, HEADER_PAYMENT_SIGNATURE, HEADER_PAYMENT_RESPONSE, ASSET_TRANSFER_METHOD, buildPaymentRequired, parsePaymentRequired, buildPaymentSignature, parsePaymentSignature, buildPaymentResponse, parsePaymentResponse, serializeMandate, deserializeMandate, } from './wire.js';
+export type { NonceReservationStore, NonceState, SettledReceipt, ReserveResult } from './nonce-store.js';
+export { createMemoryNonceStore } from './nonce-store.js';
+export type { X402RailConfig, X402RailDeps, SettleResult } from './executor.js';
+export { computeNullifier, verifyMandate, buildRedemptionCalldata, createX402Rail } from './executor.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/rails/x402/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/rails/x402/index.ts"],"names":[],"mappings":"AAGA,YAAY,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE/G,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAElG,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACvH,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAEnB,YAAY,EAAE,qBAAqB,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACzG,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC"}

package/dist/rails/x402/index.js

@@ -0,0 +1,8 @@
+// @agenticprimitives/payments — x402 rail (spec 272). HTTP-native pay-per-use over the spec-243
+// PaymentMandate. Consumed as `import { x402 } from '@agenticprimitives/payments'`.
+export { ZERO_HASH, canonicalizePaymentResource, hashRequestBody, redactPaymentMetadata } from './resource.js';
+export { computeQuoteId, buildPaymentQuote, quoteMismatch, toCaip2, fromCaip2 } from './quote.js';
+export { X402_VERSION, HEADER_PAYMENT_REQUIRED, HEADER_PAYMENT_SIGNATURE, HEADER_PAYMENT_RESPONSE, ASSET_TRANSFER_METHOD, buildPaymentRequired, parsePaymentRequired, buildPaymentSignature, parsePaymentSignature, buildPaymentResponse, parsePaymentResponse, serializeMandate, deserializeMandate, } from './wire.js';
+export { createMemoryNonceStore } from './nonce-store.js';
+export { computeNullifier, verifyMandate, buildRedemptionCalldata, createX402Rail } from './executor.js';
+//# sourceMappingURL=index.js.map

package/dist/rails/x402/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/rails/x402/index.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,oFAAoF;AAGpF,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAG/G,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGlG,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC"}

package/dist/rails/x402/nonce-store.d.ts

@@ -0,0 +1,30 @@
+import type { Hex32 } from './resource.js';
+export type NonceState = 'unseen' | 'reserved' | 'settling' | 'settled' | 'failed_retryable' | 'failed_terminal';
+export interface SettledReceipt {
+    settlementHash: Hex32;
+    mandateId: Hex32;
+}
+export type ReserveResult = {
+    ok: true;
+} | {
+    ok: false;
+    state: Exclude<NonceState, 'unseen'>;
+    receipt?: SettledReceipt;
+};
+export interface NonceReservationStore {
+    /** Atomically claim the nullifier. `unseen`/`failed_retryable` → reserved (ok). `settled` → not-ok
+     *  WITH the original receipt (safe-retry returns it). `reserved`/`settling`/`failed_terminal` →
+     *  not-ok (concurrent duplicate / permanently failed). */
+    reserve(nullifier: Hex32): Promise<ReserveResult>;
+    markSettling(nullifier: Hex32): Promise<void>;
+    markSettled(nullifier: Hex32, receipt: SettledReceipt): Promise<void>;
+    markFailed(nullifier: Hex32, retryable: boolean): Promise<void>;
+    get(nullifier: Hex32): Promise<{
+        state: NonceState;
+        receipt?: SettledReceipt;
+    } | undefined>;
+}
+/** In-memory store (single-worker / tests). A durable adapter (KV / D1) implements the same interface;
+ *  the reserve() must be ATOMIC there (compare-and-set) to actually block concurrent duplicates. */
+export declare function createMemoryNonceStore(): NonceReservationStore;
+//# sourceMappingURL=nonce-store.d.ts.map

package/dist/rails/x402/nonce-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce-store.d.ts","sourceRoot":"","sources":["../../../src/rails/x402/nonce-store.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAE3C,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,kBAAkB,GAAG,iBAAiB,CAAC;AAEjH,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,KAAK,CAAC;IACtB,SAAS,EAAE,KAAK,CAAC;CAClB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,cAAc,CAAA;CAAE,CAAC;AAElF,MAAM,WAAW,qBAAqB;IACpC;;8DAE0D;IAC1D,OAAO,CAAC,SAAS,EAAE,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAClD,YAAY,CAAC,SAAS,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,GAAG,CAAC,SAAS,EAAE,KAAK,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,OAAO,CAAC,EAAE,cAAc,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;CAC7F;AAOD;oGACoG;AACpG,wBAAgB,sBAAsB,IAAI,qBAAqB,CA0B9D"}

package/dist/rails/x402/nonce-store.js

@@ -0,0 +1,35 @@
+// Spec 272 PAY-RAIL-4/5 — the off-chain nullifier reservation store. A redeemed mandate/nonce cannot
+// settle twice (the on-chain nonce is the durable guard; this blocks concurrent duplicates + caches the
+// original receipt for safe retries). State machine: unseen → reserved → settling → settled |
+// failed_retryable | failed_terminal.
+/** In-memory store (single-worker / tests). A durable adapter (KV / D1) implements the same interface;
+ *  the reserve() must be ATOMIC there (compare-and-set) to actually block concurrent duplicates. */
+export function createMemoryNonceStore() {
+    const rows = new Map();
+    return {
+        async reserve(nullifier) {
+            const row = rows.get(nullifier);
+            if (!row || row.state === 'unseen' || row.state === 'failed_retryable') {
+                rows.set(nullifier, { state: 'reserved' });
+                return { ok: true };
+            }
+            if (row.state === 'settled')
+                return { ok: false, state: 'settled', receipt: row.receipt };
+            return { ok: false, state: row.state };
+        },
+        async markSettling(nullifier) {
+            const row = rows.get(nullifier) ?? { state: 'unseen' };
+            rows.set(nullifier, { ...row, state: 'settling' });
+        },
+        async markSettled(nullifier, receipt) {
+            rows.set(nullifier, { state: 'settled', receipt });
+        },
+        async markFailed(nullifier, retryable) {
+            rows.set(nullifier, { state: retryable ? 'failed_retryable' : 'failed_terminal' });
+        },
+        async get(nullifier) {
+            return rows.get(nullifier);
+        },
+    };
+}
+//# sourceMappingURL=nonce-store.js.map

package/dist/rails/x402/nonce-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce-store.js","sourceRoot":"","sources":["../../../src/rails/x402/nonce-store.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,wGAAwG;AACxG,8FAA8F;AAC9F,sCAAsC;AA+BtC;oGACoG;AACpG,MAAM,UAAU,sBAAsB;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAe,CAAC;IACpC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,SAAS;YACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;gBACvE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC3C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,SAAS;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACvD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO;YAClC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS;YACnC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,SAAS;YACjB,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC"}