npm - @bosonprotocol/x402-client - Versions diffs - 0.2.0 → 0.3.0-alpha-0 - Mend

@bosonprotocol/x402-client 0.2.0 → 0.3.0-alpha-0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (6) hide show

package/dist/cjs/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../../src/errors.ts","../../src/action.ts","../../src/fulfillment.ts","../../src/internal/web3lib-adapter.ts","../../src/core-sdk-factory.ts","../../src/response.ts","../../src/payload.ts","../../src/utils/crypto.ts","../../src/pre-commit.ts","../../src/post-commit.ts","../../src/withdraw.ts","../../src/token-auth/deadline.ts","../../src/token-auth/erc3009.ts","../../src/token-auth/permit.ts","../../src/token-auth/permit2.ts","../../src/token-auth/index.ts","../../src/client.ts","../../src/signer-from-adapter.ts"],"names":["Ajv","coreSdk","CoreSDK","parseEscrowPaymentPayload","encodeSignedPayload","DECIMAL_UINT","encodeFunctionData","decodeFunctionResult","PERMIT2_ADDRESS","parseEscrowPaymentRequirements","getAddress","serializeTypedData"],"mappings":";;;;;;;;;;;;;;AAIO,IAAM,sBAAA,GAAN,cAAqC,KAAA,CAAM;AAAA,EAChD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AAAA,EACd;AACF;AAEO,IAAM,yBAAA,GAAN,cAAwC,KAAA,CAAM;AAAA,EACnD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,2BAAA;AAAA,EACd;AACF;AAEO,IAAM,uBAAA,GAAN,cAAsC,KAAA,CAAM;AAAA,EACjD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AAAA,EACd;AACF;AAEO,IAAM,0BAAA,GAAN,cAAyC,KAAA,CAAM;AAAA,EACpD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,4BAAA;AAAA,EACd;AACF;AAEO,IAAM,sBAAA,GAAN,cAAqC,KAAA,CAAM;AAAA,EAChD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AAAA,EACd;AACF;;;ACZA,IAAM,MAAA,GAA8B,4BAAA;AACpC,IAAM,MAAA,GAA8B,kCAAA;AAO7B,SAAS,UAAA,CACd,cACA,MAAA,EACqB;AACrB,EAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,MAAA;AAEzC,EAAA,MAAM,YAAA,GAAe,YAAA,CAAa,OAAA,CAAQ,IAAA,CAAK,IAAA;AAAA,IAC7C,CAAC,MAAM,CAAA,CAAE,EAAA,KAAO,UAAU,CAAA,CAAE,QAAA,CAAS,SAAS,QAAQ;AAAA,GACxD;AACA,EAAA,MAAM,YAAA,GAAe,YAAA,CAAa,OAAA,CAAQ,IAAA,CAAK,IAAA;AAAA,IAC7C,CAAC,MAAM,CAAA,CAAE,EAAA,KAAO,UAAU,CAAA,CAAE,QAAA,CAAS,SAAS,QAAQ;AAAA,GACxD;AAEA,EAAA,IAAI,eAAe,mBAAA,EAAqB;AACtC,IAAA,IAAI,cAAc,OAAO,MAAA;AACzB,IAAA,MAAM,IAAI,uBAAA;AAAA,MACR,CAAA,gDAAA,EAAmD,MAAM,CAAA,sDAAA,EAAyD,YAAA,CAAa,QAAQ,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KACzK;AAAA,EACF;AAEA,EAAA,IAAI,eAAe,aAAA,EAAe;AAChC,IAAA,IAAI,cAAc,OAAO,MAAA;AACzB,IAAA,MAAM,IAAI,uBAAA;AAAA,MACR,CAAA,0CAAA,EAA6C,MAAM,CAAA,sDAAA,EAAyD,YAAA,CAAa,QAAQ,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KACnK;AAAA,EACF;AAGA,EAAA,IAAI,cAAc,OAAO,MAAA;AACzB,EAAA,IAAI,cAAc,OAAO,MAAA;AAEzB,EAAA,MAAM,IAAI,uBAAA;AAAA,IACR,CAAA,wBAAA,EAA2B,MAAM,CAAA,MAAA,EAAS,MAAM,CAAA,2DAAA;AAAA,GAClD;AACF;AC1BO,SAAS,kBAAA,CACd,cACA,MAAA,EACiC;AACjC,EAAA,MAAM,QAAA,GAAW,YAAA,CAAa,WAAA,EAAa,QAAA,IAAY,KAAA;AACvD,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,MAAM,oBAAmD,MAAA,CAAO,WAAA;AAChE,EAAA,IAAI,CAAC,iBAAA,EAAmB;AACtB,IAAA,MAAM,IAAI,0BAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,YAAA,CAAa,WAAA,EAAa,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,iBAAA,CAAkB,MAAM,CAAA;AAC9F,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,UAAA,GAAa,YAAA,CAAa,WAAA,EAAa,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA,IAAK,QAAA;AACpF,IAAA,MAAM,IAAI,0BAAA;AAAA,MACR,CAAA,oBAAA,EAAuB,iBAAA,CAAkB,MAAM,CAAA,8CAAA,EAAiD,UAAU,CAAA,CAAA;AAAA,KAC5G;AAAA,EACF;AAEA,EAAA,IAAI,MAAA,CAAO,WAAW,IAAA,EAAM;AAC1B,IAAA,IAAI,iBAAA,CAAkB,SAAS,IAAA,EAAM;AACnC,MAAA,MAAM,IAAI,0BAAA;AAAA,QACR,CAAA,oBAAA,EAAuB,OAAO,EAAE,CAAA,iCAAA;AAAA,OAClC;AAAA,IACF;AAAA,EACF,CAAA,MAAO;AACL,IAAA,MAAM,GAAA,GAAM,IAAIA,oBAAA,CAAI,EAAE,WAAW,IAAA,EAAM,MAAA,EAAQ,OAAO,CAAA;AACtD,IAAA,MAAM,QAAA,GAAW,GAAA,CAAI,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA;AAC1C,IAAA,MAAM,EAAA,GAAK,QAAA,CAAS,iBAAA,CAAkB,IAAI,CAAA;AAC1C,IAAA,IAAI,CAAC,EAAA,EAAI;AACP,MAAA,MAAM,IAAI,0BAAA;AAAA,QACR,CAAA,wCAAA,EAA2C,OAAO,EAAE,CAAA,UAAA,EAAa,IAAI,UAAA,CAAW,QAAA,CAAS,MAAM,CAAC,CAAA;AAAA,OAClG;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,iBAAA,CAAkB,MAAA,EAAQ,IAAA,EAAM,kBAAkB,IAAA,EAAK;AAC1E;;;ACtDO,SAAS,sBAAA,CACd,MAAA,EACA,OAAA,EACA,YAAA,EACgB;AAChB,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,4BAAA;AAAA,IACN,gBAAA,EAAkB,MAAM,MAAA,CAAO,UAAA,EAAW;AAAA,IAC1C,kBAAkB,YAAY,KAAA;AAAA,IAC9B,YAAY,YAAY,OAAA;AAAA,IACxB,IAAA,EAAM,OAAO,MAAA,EAAQ,MAAA,KAAW;AAC9B,MAAA,IAAI,WAAW,sBAAA,EAAwB;AACrC,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,4DAA4D,MAAM,CAAA,2CAAA;AAAA,SACpE;AAAA,MACF;AACA,MAAA,MAAM,GAAA,GAAO,OAAqB,CAAC,CAAA;AACnC,MAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC3B,QAAA,MAAM,IAAI,KAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAMhC,MAAA,OAAO,MAAA,CAAO,cAAc,SAAS,CAAA;AAAA,IACvC,CAAA;AAAA,IACA,IAAA,EAAM,OAAO,GAAA,KAAQ;AACnB,MAAA,IAAI,CAAC,YAAA,EAAc;AACjB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR;AAAA,SAEF;AAAA,MACF;AACA,MAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,IAAA,CAAK;AAAA,QACrC,IAAI,GAAA,CAAI,EAAA;AAAA,QACR,MAAM,GAAA,CAAI;AAAA,OACX,CAAA;AACD,MAAA,OAAO,OAAO,IAAA,IAAQ,IAAA;AAAA,IACxB,CAAA;AAAA,IACA,YAAY,MAAM,OAAA,CAAQ,MAAA,CAAO,WAAA,CAAY,YAAY,CAAC,CAAA;AAAA,IAC1D,aAAa,MAAM,OAAA,CAAQ,MAAA,CAAO,WAAA,CAAY,aAAa,CAAC,CAAA;AAAA,IAC5D,iBAAiB,MAAM,OAAA,CAAQ,MAAA,CAAO,WAAA,CAAY,iBAAiB,CAAC,CAAA;AAAA,IACpE,uBAAuB,MAAM,OAAA,CAAQ,MAAA,CAAO,WAAA,CAAY,uBAAuB,CAAC,CAAA;AAAA,IAChF,kBAAkB,MAAM,OAAA,CAAQ,MAAA,CAAO,WAAA,CAAY,kBAAkB,CAAC;AAAA,GACxE;AACF;AAEA,SAAS,YAAY,MAAA,EAAuB;AAC1C,EAAA,OAAO,IAAI,KAAA;AAAA,IACT,oCAAoC,MAAM,CAAA,kEAAA;AAAA,GAC5C;AACF;;;ACnEA,IAAM,wBAAA,GAA2B,kDAAA;AAW1B,SAAS,aAAa,OAAA,EAAyB;AACpD,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,KAAA,CAAM,gBAAgB,CAAA;AAC5C,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,qCAAqC,OAAO,CAAA,sCAAA;AAAA,KAC9C;AAAA,EACF;AACA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC/B,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA,IAAK,WAAW,CAAA,EAAG;AAClD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,qCAAqC,OAAO,CAAA,2CAAA;AAAA,KAC9C;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT;AAeO,SAAS,oBAAA,CACd,QACA,MAAA,EACA;AACA,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAqB;AAEvC,EAAA,OAAO,SAAS,YAAA,CAAa,OAAA,EAAiB,aAAA,EAAwC;AACpF,IAAA,MAAM,OAAA,GAAU,aAAa,OAAO,CAAA;AACpC,IAAA,MAAM,WAAW,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,aAAA,CAAc,aAAa,CAAA,CAAA;AAC1D,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,GAAA,CAAI,QAAQ,CAAA;AACjC,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,OAAO,EAAE,OAAA,EAAS,MAAA,EAAQ,OAAA,EAAQ;AAAA,IACpC;AAEA,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,YAAA,GAAe,OAAO,CAAA,IAAK,wBAAA;AACtD,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,aAAA,GAAgB,OAAO,CAAA;AACnD,IAAA,MAAM,OAAA,GAAU,sBAAA,CAAuB,MAAA,EAAQ,OAAA,EAAS,YAAY,CAAA;AAEpE,IAAA,MAAMC,SAAA,GAAU,IAAIC,eAAA,CAAQ;AAAA,MAC1B,OAAA;AAAA,MACA,WAAA;AAAA,MACA,eAAA,EAAiB,aAAA;AAAA,MACjB;AAAA,KACD,CAAA;AAED,IAAA,KAAA,CAAM,GAAA,CAAI,UAAUD,SAAO,CAAA;AAC3B,IAAA,OAAO,WAAEA,WAAS,OAAA,EAAQ;AAAA,EAC5B,CAAA;AACF;;;AC1EA,IAAM,WAAA,GAAc,oBAAA;AAeb,SAAS,qBAAqB,QAAA,EAAqD;AACxF,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AAC5C,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,MAAM,IAAA,GAAO,aAAa,GAAG,CAAA;AAC7B,EAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACvC,EAAA,MAAM,OAAA,GAA2B,EAAE,GAAA,EAAK,MAAA,EAAO;AAK/C,EAAA,IAAI,OAAO,WAAW,QAAA,IAAY,MAAA,KAAW,QAAQ,CAAC,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG;AAC3E,IAAA,MAAM,GAAA,GAAM,MAAA;AAEZ,IAAA,MAAM,aAAa,UAAA,CAAW,GAAA,EAAK,CAAC,YAAA,EAAc,aAAa,CAAC,CAAA;AAChE,IAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,MAAA,OAAA,CAAQ,UAAA,GAAa,UAAA;AAAA,IACvB;AAEA,IAAA,IAAI,kBAAA,CAAmB,GAAA,CAAI,KAAK,CAAA,EAAG;AACjC,MAAA,OAAA,CAAQ,QAAQ,GAAA,CAAI,KAAA;AAAA,IACtB;AAOA,IAAA,IACE,OAAA,CAAQ,KAAA,KAAU,MAAA,IAClB,OAAO,IAAI,WAAA,KAAgB,QAAA,IAC3B,GAAA,CAAI,WAAA,KAAgB,QACpB,CAAC,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,EAC9B;AACA,MAAA,MAAM,KAAK,GAAA,CAAI,WAAA;AACf,MAAA,MAAM,QAAA,GAAW,UAAA,CAAW,EAAA,EAAI,CAAC,eAAe,CAAC,CAAA;AACjD,MAAA,MAAM,OAAA,GAAU,UAAA,CAAW,EAAA,EAAI,CAAC,cAAc,CAAC,CAAA;AAC/C,MAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,QAAA,IAAI,SAAA;AACJ,QAAA,IAAI,aAAa,UAAA,EAAY;AAC3B,UAAA,SAAA,GAAY,OAAA,KAAY,MAAA,GAAY,EAAE,QAAA,EAAU,SAAQ,GAAI,MAAA;AAAA,QAC9D,CAAA,MAAO;AACL,UAAA,SAAA,GAAY,EAAE,QAAA,EAAS;AAAA,QACzB;AACA,QAAA,IAAI,kBAAA,CAAmB,SAAS,CAAA,EAAG;AACjC,UAAA,OAAA,CAAQ,KAAA,GAAQ,SAAA;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,OAAA;AACT;AAYA,SAAS,mBAAmB,CAAA,EAAwD;AAClF,EAAA,IAAI,OAAO,CAAA,KAAM,QAAA,EAAU,OAAO,EAAE,MAAA,GAAS,CAAA;AAC7C,EAAA,IAAI,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG,OAAO,KAAA;AACpE,EAAA,MAAM,GAAA,GAAM,CAAA;AACZ,EAAA,IAAI,OAAO,IAAI,QAAA,KAAa,QAAA,IAAY,IAAI,QAAA,CAAS,MAAA,KAAW,GAAG,OAAO,KAAA;AAC1E,EAAA,IAAI,SAAA,IAAa,OAAO,GAAA,CAAI,OAAA,KAAY,UAAa,OAAO,GAAA,CAAI,YAAY,QAAA,EAAU;AACpF,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,aAAa,KAAA,EAAuB;AAC3C,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,OAAO,IAAA,CAAK,KAAA,EAAO,QAAQ,CAAA,CAAE,SAAS,MAAM,CAAA;AAAA,EACrD;AACA,EAAA,MAAM,MAAA,GAAS,KAAK,KAAK,CAAA;AACzB,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA;AAC1C,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,QAAQ,CAAA,EAAA,EAAK;AACtC,IAAA,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA,CAAO,UAAA,CAAW,CAAC,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAK,CAAA;AACvC;AAEA,SAAS,UAAA,CAAW,KAA8B,IAAA,EAAoC;AACpF,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,MAAM,CAAA,GAAI,IAAI,GAAG,CAAA;AACjB,IAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,CAAE,SAAS,CAAA,EAAG;AACzC,MAAA,OAAO,CAAA;AAAA,IACT;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;ACtGO,IAAM,YAAA,GAAe,CAAA;AAarB,SAAS,eAAA,CAAgB;AAAA,EAC9B,YAAA;AAAA,EACA,MAAA;AAAA,EACA,iBAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAA,EAAuC;AAKrC,EAAA,MAAM,kBACJ,WAAA,KAAgB,MAAA,GACZ,MAAA,GACA,MAAA,KAAW,qCACT,EAAE,MAAA,EAAQ,WAAA,CAAY,MAAA,EAAQ,MAAM,WAAA,CAAY,IAAA,KAChD,EAAE,MAAA,EAAQ,YAAY,MAAA,EAAO;AAErC,EAAA,MAAM,OAAA,GAAgC;AAAA,IACpC,WAAA,EAAa,YAAA;AAAA,IACb,MAAA,EAAQ,QAAA;AAAA,IACR,SAAS,YAAA,CAAa,OAAA;AAAA,IACtB,OAAA,EAAS;AAAA,MACP,MAAA;AAAA,MACA,iBAAA;AAAA,MACA,QAAA,EAAU;AAAA,QACR,SAAA,EAAW,aAAa,KAAA,CAAM,SAAA;AAAA,QAC9B,SAAA,EAAW,aAAa,KAAA,CAAM;AAAA,OAChC;AAAA,MACA,KAAA;AAAA,MACA,MAAA;AAAA,MACA,GAAI,SAAA,GAAY,EAAE,SAAA,KAAc;AAAC,KACnC;AAAA,IACA,GAAI,eAAA,GAAkB,EAAE,WAAA,EAAa,eAAA,KAAoB;AAAC,GAC5D;AAIA,EAAAE,gCAAA,CAA0B,OAAO,CAAA;AACjC,EAAA,OAAO,OAAA;AACT;AAGO,SAAS,yBAAyB,IAAA,EAA4B;AACnE,EAAA,MAAM,OAAA,GAAU,gBAAgB,IAAI,CAAA;AACpC,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AACnC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,OAAO,IAAA,CAAK,IAAA,EAAM,MAAM,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EACpD;AAQA,EAAA,MAAM,KAAA,GAAQ,IAAI,WAAA,EAAY,CAAE,OAAO,IAAI,CAAA;AAC3C,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,MAAW,KAAK,KAAA,EAAO;AACrB,IAAA,MAAA,IAAU,MAAA,CAAO,aAAa,CAAC,CAAA;AAAA,EACjC;AACA,EAAA,OAAO,KAAK,MAAM,CAAA;AACpB;;;AChFO,SAAS,YAAY,IAAA,EAA0B;AACpD,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,IAAI,CAAA;AACjC,EAAA,IAAI,OAAO,UAAA,CAAW,MAAA,EAAQ,eAAA,KAAoB,UAAA,EAAY;AAC5D,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACA,EAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,KAAK,CAAA;AACvC,EAAA,OAAO,KAAA;AACT;AAaO,SAAS,aAAA,GAAwB;AACtC,EAAA,MAAM,KAAA,GAAQ,YAAY,EAAE,CAAA;AAC5B,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,CAAA,GAAK,CAAA,IAAK,EAAA,GAAM,MAAA,CAAO,IAAI,CAAA;AAAA,EAC7B;AACA,EAAA,OAAO,CAAA;AACT;;;ACFA,eAAsB,wBAAA,CAAyB;AAAA,EAC7C,YAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF,CAAA,EAAuD;AACrD,EAAA,MAAM,QAAQ,aAAA,EAAc;AAE5B,EAAA,MAAM,wBAAA,GAA2B,6BAAA,CAA8B,YAAA,EAAc,KAAK,CAAA;AAElF,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,8BAAA,CAA+B;AAAA,IAC1D,KAAA,EAAO,MAAM,QAAA,EAAS;AAAA,IACtB;AAAA,GACD,CAAA;AAED,EAAA,OAAO,OAAA,CAAQ,MAAA,EAAQ,KAAA,EAAO,KAAK,CAAA;AACrC;AASA,eAAsB,8BAAA,CAA+B;AAAA,EACnD,YAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF,CAAA,EAAuD;AACrD,EAAA,MAAM,QAAQ,aAAA,EAAc;AAE5B,EAAA,MAAM,wBAAA,GAA2B,6BAAA,CAA8B,YAAA,EAAc,KAAK,CAAA;AAElF,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,oCAAA,CAAqC;AAAA,IAChE,KAAA,EAAO,MAAM,QAAA,EAAS;AAAA,IACtB;AAAA,GACD,CAAA;AAED,EAAA,OAAO,OAAA,CAAQ,MAAA,EAAQ,KAAA,EAAO,KAAK,CAAA;AACrC;AAEA,SAAS,6BAAA,CACP,cACA,KAAA,EACe;AACf,EAAA,OAAO;AAAA,IACL,GAAI,aAAa,KAAA,CAAM,SAAA;AAAA,IACvB,SAAA,EAAW,aAAa,KAAA,CAAM,SAAA;AAAA,IAC9B,SAAA,EAAW;AAAA,GACb;AACF;AAEA,SAAS,OAAA,CACP,MAAA,EAOA,KAAA,EACA,KAAA,EACa;AACb,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,MAAM,QAAA,EAAS;AAAA,IACtB,cAAc,MAAA,CAAO,YAAA;AAAA,IACrB,mBAAmB,MAAA,CAAO,iBAAA;AAAA,IAC1B,GAAA,EAAK;AAAA,MACH,CAAA,EAAG,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA;AAAA,MAClB,GAAG,MAAA,CAAO,CAAA;AAAA,MACV,GAAG,MAAA,CAAO;AAAA;AACZ,GACF;AACF;ACXA,eAAsB,oBAAA,CACpB,MACA,IAAA,EACiC;AACjC,EAAA,MAAM,QAAQ,aAAA,EAAc;AAC5B,EAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,eAAA,EAAgB;AACzC,EAAA,MAAM,EAAE,SAAQ,GAAI,IAAA,CAAK,aAAa,IAAA,CAAK,OAAA,EAAS,KAAK,aAAa,CAAA;AAEtE,EAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,OAAA,EAAS,MAAM,KAAK,CAAA;AAExD,EAAA,MAAM,MAAA,GAAsB;AAAA,IAC1B,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,MAAM,QAAA,EAAS;AAAA,IACtB,cAAc,MAAA,CAAO,YAAA;AAAA,IACrB,mBAAmB,MAAA,CAAO,iBAAA;AAAA,IAC1B,GAAA,EAAK;AAAA,MACH,CAAA,EAAG,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA;AAAA,MAClB,GAAG,MAAA,CAAO,CAAA;AAAA,MACV,GAAG,MAAA,CAAO;AAAA;AACZ,GACF;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,aAAA,EAAeC,yBAAA,CAAoB,MAAM,CAAA,EAAE;AAC9D;AAUA,eAAe,cAAA,CACb,OAAA,EACA,IAAA,EACA,KAAA,EAC4B;AAC5B,EAAA,MAAM,QAAA,GAAW,MAAM,QAAA,EAAS;AAChC,EAAA,MAAM,aAAa,IAAA,CAAK,UAAA;AAExB,EAAA,QAAQ,KAAK,QAAA;AAAU,IACrB,KAAK,cAAA;AACH,MAAA,OAAO,QAAQ,uBAAA,CAAwB,EAAE,KAAA,EAAO,QAAA,EAAU,YAAY,CAAA;AAAA,IACxE,KAAK,qBAAA;AACH,MAAA,OAAO,QAAQ,uBAAA,CAAwB,EAAE,KAAA,EAAO,QAAA,EAAU,YAAY,CAAA;AAAA,IACxE,KAAK,wBAAA;AACH,MAAA,OAAO,QAAQ,0BAAA,CAA2B,EAAE,KAAA,EAAO,QAAA,EAAU,YAAY,CAAA;AAAA,IAC3E,KAAK,oBAAA;AACH,MAAA,OAAO,QAAQ,sBAAA,CAAuB,EAAE,KAAA,EAAO,QAAA,EAAU,YAAY,CAAA;AAAA,IACvE,KAAK,sBAAA;AACH,MAAA,OAAO,QAAQ,wBAAA,CAAyB,EAAE,KAAA,EAAO,QAAA,EAAU,YAAY,CAAA;AAAA,IACzE,KAAK,uBAAA;AACH,MAAA,OAAO,QAAQ,yBAAA,CAA0B,EAAE,KAAA,EAAO,QAAA,EAAU,YAAY,CAAA;AAAA,IAC1E,KAAK,sBAAA;AACH,MAAA,OAAO,QAAQ,wBAAA,CAAyB;AAAA,QACtC,KAAA,EAAO,QAAA;AAAA,QACP,UAAA;AAAA,QACA,cAAc,IAAA,CAAK,YAAA;AAAA,QACnB,iBAAiB,IAAA,CAAK;AAAA,OACvB,CAAA;AAAA,IACH,SAAS;AAKP,MAAA,MAAM,WAAA,GAAqB,IAAA;AAC3B,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,6CAAA,EAAiD,YAAqC,QAAQ,CAAA,CAAA;AAAA,OAChG;AAAA,IACF;AAAA;AAEJ;AC5IA,SAAS,kBAAkB,KAAA,EAA6B;AACtD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,IAAI,KAAA,GAAQ,IAAI,MAAM,IAAI,MAAM,CAAA,mCAAA,EAAsC,KAAA,CAAM,QAAA,EAAU,CAAA,CAAE,CAAA;AACxF,IAAA,OAAO,MAAM,QAAA,EAAS;AAAA,EACxB;AACA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,IAAK,CAAC,MAAA,CAAO,SAAA,CAAU,KAAK,CAAA,IAAK,KAAA,GAAQ,CAAA,EAAG;AACpE,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6CAAA,EAAgD,MAAA,CAAO,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,IACjF;AACA,IAAA,OAAO,MAAM,QAAA,EAAS;AAAA,EACxB;AAEA,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,EAAA,IAAI,QAAQ,MAAA,KAAW,CAAA,IAAK,CAACC,mBAAA,CAAa,IAAA,CAAK,OAAO,CAAA,EAAG;AACvD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6DAAA,EAAgE,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,EAC1F;AACA,EAAA,OAAO,OAAA;AACT;AAmFA,eAAsB,iBAAA,CACpB,MACA,IAAA,EAC8B;AAC9B,EAAA,MAAM,UAAA,GAAoC;AAAA,IACxC,GAAG,IAAA;AAAA,IACH,QAAA,EAAU,iBAAA,CAAkB,IAAA,CAAK,QAAQ;AAAA,GAC3C;AACA,EAAA,MAAM,EAAE,SAAQ,GAAI,IAAA,CAAK,aAAa,UAAA,CAAW,OAAA,EAAS,WAAW,aAAa,CAAA;AAClF,EAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,gBAAA,EAAiB;AACzC,EAAA,OAAO,yBAAA,CAA0B,UAAA,EAAY,OAAA,EAA2C,IAAI,CAAA;AAC9F;AAQA,eAAsB,6BAAA,CACpB,MACA,IAAA,EAC8B;AAC9B,EAAA,MAAM,EAAE,SAAQ,GAAI,IAAA,CAAK,aAAa,IAAA,CAAK,OAAA,EAAS,KAAK,aAAa,CAAA;AACtE,EAAA,MAAM,GAAA,GAAM,OAAA;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,gBAAA,EAAiB;AACzC,EAAA,MAAM,QAAA,GAAW,MAAM,yBAAA,CAA0B,GAAA,EAAK,IAAI,CAAA;AAC1D,EAAA,MAAM,KAAA,GAAQ,MAAM,GAAA,CAAI,QAAA,CAAS,EAAE,aAAa,EAAE,SAAA,EAAW,QAAA,EAAS,EAAG,CAAA;AACzE,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,eAAA,KAAoB,GAAA,IAAO,MAAA,CAAO,CAAA,CAAE,eAAe,CAAA,GAAI,EAAE,CAAA;AAC/F,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,yCAAyC,QAAQ,CAAA,mCAAA;AAAA,KACnD;AAAA,EACF;AACA,EAAA,OAAO,yBAAA;AAAA,IACL;AAAA,MACE,QAAA;AAAA,MACA,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,eAAe,IAAA,CAAK,aAAA;AAAA,MACpB,WAAW,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,MAAM,OAAkB,CAAA;AAAA,MACxD,cAAc,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,eAAe;AAAA,KACpD;AAAA,IACA,GAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,eAAe,yBAAA,CACb,IAAA,EACA,OAAA,EACA,IAAA,EAC8B;AAC9B,EAAA,IAAI,IAAA,CAAK,SAAA,CAAU,MAAA,KAAW,IAAA,CAAK,aAAa,MAAA,EAAQ;AACtD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,iCAAiC,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA,oBAAA,EAAuB,IAAA,CAAK,aAAa,MAAM,CAAA,yBAAA;AAAA,KACvG;AAAA,EACF;AACA,EAAA,MAAM,QAAQ,aAAA,EAAc;AAC5B,EAAA,MAAM,QAAA,GAAW,MAAM,QAAA,EAAS;AAChC,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,uBAAA,CAAwB;AAAA,IACnD,KAAA,EAAO,QAAA;AAAA,IACP,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,WAAW,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAC,MAAM,CAAC,CAAA;AAAA,IACtC,cAAc,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,CAAC,MAAM,CAAC;AAAA,GAC7C,CAAA;AAED,EAAA,MAAM,MAAA,GAAsB;AAAA,IAC1B,IAAA;AAAA,IACA,KAAA,EAAO,QAAA;AAAA,IACP,cAAc,MAAA,CAAO,YAAA;AAAA,IACrB,mBAAmB,MAAA,CAAO,iBAAA;AAAA,IAC1B,GAAA,EAAK;AAAA,MACH,CAAA,EAAG,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA;AAAA,MAClB,GAAG,MAAA,CAAO,CAAA;AAAA,MACV,GAAG,MAAA,CAAO;AAAA;AACZ,GACF;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,aAAA,EAAeD,0BAAoB,MAAM,CAAA;AAAA,IACzC,QAAA,EAAU,iBAAA,CAAkB,IAAA,CAAK,QAAQ,CAAA;AAAA,IACzC,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,YAAA,EAAc,KAAK,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAC;AAAA,GACtD;AACF;AAEA,eAAe,yBAAA,CACb,SACA,QAAA,EACiB;AACjB,EAAA,IAAI,UAAA,IAAc,QAAA,EAAU,OAAO,iBAAA,CAAkB,SAAS,QAAQ,CAAA;AACtE,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,OAAA,CAAQ,WAAA,EAAY;AAC7C,EAAA,MAAM,OAAO,QAAA,CAAS,IAAA;AACtB,EAAA,MAAM,CAAC,OAAA,EAAS,MAAM,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,IAC1C,IAAA,KAAS,UACL,OAAA,CAAQ,OAAA,CAA+B,EAAE,CAAA,GACzC,OAAA,CAAQ,mBAAA,CAAoB,OAAO,CAAA;AAAA,IACvC,IAAA,KAAS,QAAA,GACL,OAAA,CAAQ,OAAA,CAA+B,EAAE,CAAA,GACzC,OAAA,CAAQ,SAAA,CAAU,EAAE,YAAA,EAAc,EAAE,MAAA,EAAQ,OAAA,IAAW;AAAA,GAC5D,CAAA;AACD,EAAA,MAAM,YAAY,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,EAAE,CAAA;AACzC,EAAA,MAAM,WAAW,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,EAAE,CAAA;AAEvC,EAAA,IAAI,SAAS,QAAA,EAAU;AACrB,IAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC1B,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,qEAAqE,OAAO,CAAA;AAAA,OAC9E;AAAA,IACF;AACA,IAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACxB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,0CAA0C,OAAO,CAAA,2CAAA,EAA8C,SAAA,CAAU,IAAA,CAAK,IAAI,CAAC,CAAA,gCAAA;AAAA,OACrH;AAAA,IACF;AACA,IAAA,OAAO,UAAU,CAAC,CAAA;AAAA,EACpB;AACA,EAAA,IAAI,SAAS,OAAA,EAAS;AACpB,IAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,oEAAoE,OAAO,CAAA;AAAA,OAC7E;AAAA,IACF;AACA,IAAA,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AACvB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,0CAA0C,OAAO,CAAA,0CAAA,EAA6C,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,gCAAA;AAAA,OACnH;AAAA,IACF;AACA,IAAA,OAAO,SAAS,CAAC,CAAA;AAAA,EACnB;AAOA,EAAA,MAAM,YAAA,GAAe,SAAA,CAAU,MAAA,GAAS,QAAA,CAAS,MAAA;AACjD,EAAA,IAAI,iBAAiB,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,8EAA8E,OAAO,CAAA;AAAA,KACvF;AAAA,EACF;AACA,EAAA,IAAI,eAAe,CAAA,EAAG;AACpB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,0CAA0C,OAAO,CAAA,aAAA,EAAgB,qBAAA,CAAsB,SAAA,EAAW,QAAQ,CAAC,CAAA,2CAAA;AAAA,KAC7G;AAAA,EACF;AACA,EAAA,IAAI,SAAA,CAAU,MAAA,KAAW,CAAA,EAAG,OAAO,UAAU,CAAC,CAAA;AAC9C,EAAA,OAAO,SAAS,CAAC,CAAA;AACnB;AAEA,SAAS,qBAAA,CAAsB,WAAqB,QAAA,EAA4B;AAC9E,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACxB,IAAA,KAAA,CAAM,IAAA;AAAA,MACJ,SAAA,CAAU,MAAA,KAAW,CAAA,GACjB,CAAA,WAAA,EAAc,UAAU,CAAC,CAAC,CAAA,CAAA,CAAA,GAC1B,CAAA,EAAG,UAAU,MAAM,CAAA,cAAA,EAAiB,SAAA,CAAU,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9D;AAAA,EACF;AACA,EAAA,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AACvB,IAAA,KAAA,CAAM,IAAA;AAAA,MACJ,QAAA,CAAS,MAAA,KAAW,CAAA,GAChB,CAAA,UAAA,EAAa,SAAS,CAAC,CAAC,CAAA,CAAA,CAAA,GACxB,CAAA,EAAG,SAAS,MAAM,CAAA,aAAA,EAAgB,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC3D;AAAA,EACF;AACA,EAAA,OAAO,KAAA,CAAM,KAAK,OAAO,CAAA;AAC3B;;;ACrSO,IAAM,yCAAA,GAA4C,EAAA;AAElD,SAAS,wBAAA,CACd,iBAAA,EACA,GAAA,GAAoB,IAAA,CAAK,GAAA,EACjB;AAIR,EAAA,MAAM,iBAAiB,IAAA,CAAK,GAAA,CAAI,GAAG,IAAA,CAAK,KAAA,CAAM,iBAAiB,CAAC,CAAA;AAChE,EAAA,MAAM,sBAAsB,IAAA,CAAK,GAAA;AAAA,IAC/B,yCAAA;AAAA,IACA,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,cAAA,GAAiB,CAAC;AAAA,GAChC;AACA,EAAA,OAAO,KAAK,KAAA,CAAM,GAAA,EAAI,GAAI,GAAI,IAAI,cAAA,GAAiB,mBAAA;AACrD;;;ACIA,eAAsB,WAAA,CAAY;AAAA,EAChC,YAAA;AAAA,EACA,KAAA;AAAA,EACA,OAAA;AAAA,EACA,mBAAA;AAAA,EACA,MAAM,IAAA,CAAK;AACb,CAAA,EAA8C;AAC5C,EAAA,MAAM,OAAA,GAAU,YAAA,CAAa,YAAA,CAAa,OAAO,CAAA;AACjD,EAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,CAAoB,YAAA,CAAa,OAAkB,OAAO,CAAA;AAE/E,EAAA,MAAM,UAAA,GAAa,CAAA;AACnB,EAAA,MAAM,WAAA,GAAc,wBAAA,CAAyB,YAAA,CAAa,iBAAA,EAAmB,GAAG,CAAA;AAEhF,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,mCAAA;AAAA,IAC3B,YAAA,CAAa,KAAA;AAAA,IACb,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA,EAAM,OAAA,EAAS,OAAO,OAAA,EAAQ;AAAA,IAC7C,YAAA,CAAa,MAAA;AAAA,IACb,UAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,OAAA,EAAS,YAAA,CAAa,aAAA;AAA+B,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,KAAA;AAAA,IACN,IAAI,YAAA,CAAa,aAAA;AAAA,IACjB,OAAO,YAAA,CAAa,MAAA;AAAA,IACpB,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAAA,IACzC,WAAA,EAAa,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA;AAAA,IAC3C,KAAA,EAAO,OAAO,IAAA,CAAK,KAAA;AAAA,IACnB,GAAG,MAAA,CAAO,CAAA;AAAA,IACV,GAAG,MAAA,CAAO,CAAA;AAAA,IACV,GAAG,MAAA,CAAO;AAAA,GACZ;AACF;AC7BA,IAAM,UAAA,GAAa;AAAA,EACjB;AAAA,IACE,IAAA,EAAM,UAAA;AAAA,IACN,IAAA,EAAM,QAAA;AAAA,IACN,eAAA,EAAiB,MAAA;AAAA,IACjB,QAAQ,CAAC,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,WAAW,CAAA;AAAA,IAC3C,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,WAAW;AAAA;AAEjC,CAAA;AAkBA,eAAsB,UAAA,CAAW;AAAA,EAC/B,YAAA;AAAA,EACA,KAAA;AAAA,EACA,OAAA;AAAA,EACA,mBAAA;AAAA,EACA,YAAA;AAAA,EACA,MAAM,IAAA,CAAK;AACb,CAAA,EAA4C;AAC1C,EAAA,MAAM,OAAA,GAAU,YAAA,CAAa,YAAA,CAAa,OAAO,CAAA;AACjD,EAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,CAAoB,YAAA,CAAa,OAAkB,OAAO,CAAA;AAE/E,EAAA,MAAM,eAAe,MAAM,SAAA,CAAU,YAAA,EAAc,YAAA,CAAa,OAAkB,KAAK,CAAA;AACvF,EAAA,MAAM,QAAA,GAAW,wBAAA,CAAyB,YAAA,CAAa,iBAAA,EAAmB,GAAG,CAAA;AAE7E,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,4BAAA;AAAA,IAC3B,YAAA,CAAa,KAAA;AAAA,IACb,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA,EAAM,OAAA,EAAS,OAAO,OAAA,EAAQ;AAAA,IAC7C,YAAA,CAAa,MAAA;AAAA,IACb,QAAA;AAAA,IACA,EAAE,OAAA,EAAS,YAAA,CAAa,aAAA;AAA+B,GACzD;AAEA,EAAA,MAAM,gBAAgB,MAAM,SAAA,CAAU,YAAA,EAAc,YAAA,CAAa,OAAkB,KAAK,CAAA;AACxF,EAAA,IAAI,iBAAiB,aAAA,EAAe;AAIlC,IAAA,MAAM,IAAI,yBAAA;AAAA,MACR,CAAA,4DAAA,EAA+D,YAAY,CAAA,MAAA,EAAS,aAAa,CAAA,QAAA;AAAA,KACnG;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,KAAA;AAAA,IACP,SAAS,YAAA,CAAa,aAAA;AAAA,IACtB,OAAO,YAAA,CAAa,MAAA;AAAA,IACpB,QAAA;AAAA,IACA,KAAA,EAAO,aAAa,QAAA,EAAS;AAAA,IAC7B,GAAG,MAAA,CAAO,CAAA;AAAA,IACV,GAAG,MAAA,CAAO,CAAA;AAAA,IACV,GAAG,MAAA,CAAO;AAAA,GACZ;AACF;AAEA,eAAe,SAAA,CACb,YAAA,EACA,KAAA,EACA,KAAA,EACiB;AACjB,EAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,IAAA,CAAK;AAAA,IACrC,EAAA,EAAI,KAAA;AAAA,IACJ,MAAME,uBAAA,CAAmB;AAAA,MACvB,GAAA,EAAK,UAAA;AAAA,MACL,YAAA,EAAc,QAAA;AAAA,MACd,IAAA,EAAM,CAAC,KAAsB;AAAA,KAC9B;AAAA,GACF,CAAA;AACD,EAAA,IAAI,CAAC,OAAO,IAAA,EAAM;AAChB,IAAA,MAAM,IAAI,yBAAA;AAAA,MACR,CAAA,mBAAA,EAAsB,KAAK,CAAA,gCAAA,EAAmC,KAAK,CAAA,oCAAA;AAAA,KACrE;AAAA,EACF;AACA,EAAA,OAAOC,yBAAA,CAAqB;AAAA,IAC1B,GAAA,EAAK,UAAA;AAAA,IACL,YAAA,EAAc,QAAA;AAAA,IACd,MAAM,MAAA,CAAO;AAAA,GACd,CAAA;AACH;AC5FA,eAAsB,WAAA,CAAY;AAAA,EAChC,YAAA;AAAA,EACA,KAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAM,IAAA,CAAK;AACb,CAAA,EAA8C;AAC5C,EAAA,MAAM,QAAA,GAAW,wBAAA,CAAyB,YAAA,CAAa,iBAAA,EAAmB,GAAG,CAAA;AAC7E,EAAA,MAAM,eAAe,aAAA,EAAc;AASnC,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,sBAAA;AAAA,IAC3B,YAAA,CAAa,KAAA;AAAA,IACb,YAAA,CAAa,MAAA;AAAA,IACb,QAAA;AAAA,IACA;AAAA,MACE,SAAS,YAAA,CAAa,aAAA;AAAA,MACtB,cAAA,EAAgBC,yBAAA;AAAA,MAChB;AAAA;AACF,GACF;AAEA,EAAA,OAAO;AAAA,IACL,WAAW,EAAE,KAAA,EAAO,aAAa,KAAA,EAAO,MAAA,EAAQ,aAAa,MAAA,EAAO;AAAA,IACpE,SAAS,YAAA,CAAa,aAAA;AAAA,IACtB,KAAA,EAAO,aAAa,QAAA,EAAS;AAAA,IAC7B,QAAA;AAAA,IACA,WAAW,MAAA,CAAO;AAAA,GACpB;AACF;;;AC5BA,IAAM,mBAAA,GAAoD,CAAC,SAAA,EAAW,SAAA,EAAW,QAAQ,CAAA;AAEzF,SAAS,mBAAA,CAAoB,GAAsB,IAAA,EAAmC;AACpF,EAAA,QAAQ,CAAA;AAAG,IACT,KAAK,SAAA;AACH,MAAA,OAAO,KAAK,mBAAA,KAAwB,MAAA;AAAA,IACtC,KAAK,QAAA;AACH,MAAA,OAAO,IAAA,CAAK,mBAAA,KAAwB,MAAA,IAAa,IAAA,CAAK,YAAA,KAAiB,MAAA;AAAA,IACzE,KAAK,SAAA;AACH,MAAA,OAAO,IAAA;AAAA,IACT,KAAK,MAAA;AACH,MAAA,OAAO,KAAA;AAAA,IACT,SAAS;AAGP,MAAA,OAAO,KAAA;AAAA,IACT;AAAA;AAEJ;AAaA,eAAsB,sBAAsB,IAAA,EAAmD;AAC7F,EAAA,MAAM,UAAA,GAAa,KAAK,YAAA,CAAa,mBAAA;AACrC,EAAA,MAAM,SAAS,mBAAA,CAAoB,IAAA;AAAA,IACjC,CAAC,MAAM,UAAA,CAAW,QAAA,CAAS,CAAC,CAAA,IAAK,mBAAA,CAAoB,GAAG,IAAI;AAAA,GAC9D;AACA,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,yBAAA;AAAA,MACR,CAAA,uCAAA,EAA0C,WAAW,IAAA,CAAK,IAAI,CAAC,CAAA,oBAAA,EACzC,mBAAA,CAAoB,IAAA,CAAK,IAAI,CAAC,CAAA,6LAAA;AAAA,KAItD;AAAA,EACF;AAEA,EAAA,QAAQ,MAAA;AAAQ,IACd,KAAK,SAAA,EAAW;AACd,MAAA,IAAI,CAAC,KAAK,mBAAA,EAAqB;AAC7B,QAAA,MAAM,IAAI,yBAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,MAAM,IAAA,GAAO,MAAM,WAAA,CAAY;AAAA,QAC7B,GAAG,IAAA;AAAA,QACH,qBAAqB,IAAA,CAAK;AAAA,OAC3B,CAAA;AACD,MAAA,OAAO,EAAE,UAAU,SAAA,EAAW,SAAA,EAAW,EAAE,IAAA,EAAM,SAAA,EAAW,MAAK,EAAE;AAAA,IACrE;AAAA,IACA,KAAK,QAAA,EAAU;AACb,MAAA,IAAI,CAAC,KAAK,mBAAA,EAAqB;AAC7B,QAAA,MAAM,IAAI,yBAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,IAAI,CAAC,KAAK,YAAA,EAAc;AACtB,QAAA,MAAM,IAAI,yBAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,MAAM,IAAA,GAAO,MAAM,UAAA,CAAW;AAAA,QAC5B,GAAG,IAAA;AAAA,QACH,qBAAqB,IAAA,CAAK,mBAAA;AAAA,QAC1B,cAAc,IAAA,CAAK;AAAA,OACpB,CAAA;AACD,MAAA,OAAO,EAAE,UAAU,QAAA,EAAU,SAAA,EAAW,EAAE,IAAA,EAAM,QAAA,EAAU,MAAK,EAAE;AAAA,IACnE;AAAA,IACA,KAAK,SAAA,EAAW;AACd,MAAA,MAAM,IAAA,GAAO,MAAM,WAAA,CAAY,IAAI,CAAA;AACnC,MAAA,OAAO,EAAE,UAAU,SAAA,EAAW,SAAA,EAAW,EAAE,IAAA,EAAM,SAAA,EAAW,MAAK,EAAE;AAAA,IACrE;AAAA,IACA,KAAK,MAAA,EAAQ;AAKX,MAAA,MAAM,IAAI,yBAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAAA,IACA,SAAS;AACP,MAAA,MAAM,WAAA,GAAqB,MAAA;AAC3B,MAAA,MAAM,IAAI,yBAAA;AAAA,QACR,CAAA,gCAAA,EAAoC,WAAA,CAAuC,QAAA,EAAU,CAAA,CAAA;AAAA,OACvF;AAAA,IACF;AAAA;AAEJ;;;AC9CO,SAAS,kBAAkB,MAAA,EAAwC;AACxE,EAAA,MAAM,YAAA,GAAe,oBAAA,CAAqB,MAAA,CAAO,MAAA,EAAQ,MAAM,CAAA;AAE/D,EAAA,MAAM,eAAA,GAAkB,YAAa,MAAM,MAAA,CAAO,OAAO,UAAA,EAAW;AAEpE,EAAA,OAAO;AAAA,IACL,MAAM,UAAU,eAAA,EAAiB;AAC/B,MAAA,MAAM,YAAA,GACJC,sCAA+B,eAAe,CAAA;AAEhD,MAAA,MAAM,MAAA,GAAS,UAAA,CAAW,YAAA,EAAc,MAAA,CAAO,MAAM,CAAA;AACrD,MAAA,MAAM,WAAA,GAAc,kBAAA,CAAmB,YAAA,EAAc,MAAM,CAAA;AAC3D,MAAA,gBAAA,CAAiB,YAAA,CAAa,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,SAAS,CAAA;AAC9D,MAAA,MAAM,KAAA,GAAQ,MAAM,eAAA,EAAgB;AAEpC,MAAA,MAAM,EAAE,OAAA,EAAS,OAAA,EAAQ,GAAI,YAAA;AAAA,QAC3B,YAAA,CAAa,OAAA;AAAA,QACb,YAAA,CAAa;AAAA,OACf;AAWA,MAAA,IAAI,SAAA;AACJ,MAAA,IAAI,QAAA;AACJ,MAAA,MAAM,cAAA,GAAiB,OAAO,MAAA,EAAQ,iBAAA;AACtC,MAAA,IAAI,mBAAmB,MAAA,EAAW;AAChC,QAAA,IAAI,CAAC,YAAA,CAAa,mBAAA,CAAoB,QAAA,CAAS,cAAc,CAAA,EAAG;AAC9D,UAAA,MAAM,IAAI,yBAAA;AAAA,YACR,6BAA6B,cAAc,CAAA,8CAAA,EAAiD,aAAa,mBAAA,CAAoB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,WACzI;AAAA,QACF;AACA,QAAA,IAAI,mBAAmB,MAAA,EAAQ;AAC7B,UAAA,QAAA,GAAW,MAAA;AACX,UAAA,SAAA,GAAY,MAAA;AAAA,QACd,CAAA,MAAO;AACL,UAAA,MAAM,KAAA,GAAQ,MAAM,qBAAA,CAAsB;AAAA,YACxC,cAAc,EAAE,GAAG,cAAc,mBAAA,EAAqB,CAAC,cAAc,CAAA,EAAE;AAAA,YACvE,KAAA;AAAA,YACA,OAAA;AAAA,YACA,qBAAqB,MAAA,CAAO,mBAAA;AAAA,YAC5B,YAAA,EAAc,MAAA,CAAO,aAAA,GAAgB,OAAO;AAAA,WAC7C,CAAA;AACD,UAAA,QAAA,GAAW,KAAA,CAAM,QAAA;AACjB,UAAA,SAAA,GAAY,KAAA,CAAM,SAAA;AAAA,QACpB;AAAA,MACF,CAAA,MAAO;AACL,QAAA,MAAM,KAAA,GAAQ,MAAM,qBAAA,CAAsB;AAAA,UACxC,YAAA;AAAA,UACA,KAAA;AAAA,UACA,OAAA;AAAA,UACA,qBAAqB,MAAA,CAAO,mBAAA;AAAA,UAC5B,YAAA,EAAc,MAAA,CAAO,aAAA,GAAgB,OAAO;AAAA,SAC7C,CAAA;AACD,QAAA,QAAA,GAAW,KAAA,CAAM,QAAA;AACjB,QAAA,SAAA,GAAY,KAAA,CAAM,SAAA;AAAA,MACpB;AAOA,MAAA,MAAM,UAAA,GACJ,MAAA,KAAW,kCAAA,GACP,8BAAA,GACA,wBAAA;AACN,MAAA,MAAM,SAAS,MAAM,UAAA,CAAW,EAAE,YAAA,EAAc,OAAA,EAAS,OAAO,CAAA;AAEhE,MAAA,OAAO,wBAAA,CAAyB;AAAA,QAC9B,YAAA;AAAA,QACA,MAAA;AAAA,QACA,iBAAA,EAAmB,QAAA;AAAA,QACnB,MAAA;AAAA,QACA,SAAA;AAAA,QACA,WAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,WAAW,IAAA,EAAM;AACf,MAAA,OAAO,oBAAA,CAAqB,IAAA,EAAM,EAAE,YAAA,EAAc,iBAAiB,CAAA;AAAA,IACrE,CAAA;AAAA,IAEA,kBAAkB,IAAA,EAAM;AACtB,MAAA,OAAO,kBAAkB,IAAA,EAAM,EAAE,YAAA,EAAc,gBAAA,EAAkB,iBAAiB,CAAA;AAAA,IACpF,CAAA;AAAA,IAEA,8BAA8B,IAAA,EAAM;AAClC,MAAA,OAAO,8BAA8B,IAAA,EAAM;AAAA,QACzC,YAAA;AAAA,QACA,gBAAA,EAAkB;AAAA,OACnB,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,qBAAqB,QAAA,EAAU;AAC7B,MAAA,OAAO,qBAAqB,QAAQ,CAAA;AAAA,IACtC;AAAA,GACF;AACF;AAEA,SAAS,gBAAA,CAAiB,QAAgB,SAAA,EAA0B;AAClE,EAAA,IAAI,cAAc,MAAA,EAAW;AAC3B,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GAAe,OAAO,MAAM,CAAA;AAClC,EAAA,MAAM,eAAA,GAAkB,OAAO,SAAS,CAAA;AACxC,EAAA,IAAI,eAAe,eAAA,EAAiB;AAClC,IAAA,MAAM,IAAI,sBAAA;AAAA,MACR,CAAA,iCAAA,EAAoC,MAAM,CAAA,0BAAA,EAA6B,SAAS,CAAA;AAAA,KAClF;AAAA,EACF;AACF;ACzKO,SAAS,wBAAwB,OAAA,EAAqC;AAC3E,EAAA,MAAM,iBAAiB,YAA8BC,eAAA,CAAW,MAAM,OAAA,CAAQ,kBAAkB,CAAA;AAChG,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,cAAA;AAAA,IACZ,eAAe,OAAO,EAAE,QAAQ,KAAA,EAAO,WAAA,EAAa,SAAQ,KAAM;AAChE,MAAA,MAAM,IAAA,GAAO,MAAM,cAAA,EAAe;AAClC,MAAA,MAAM,SAAA,GAAY;AAAA,QAChB,MAAA;AAAA,QACA,OAAO,EAAE,GAAG,OAAO,YAAA,EAAc,sBAAA,CAAuB,MAAM,CAAA,EAAE;AAAA,QAChE,WAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,MAAM,IAAA,GAAOC,wBAAmB,SAA2C,CAAA;AAC3E,MAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,IAAA,CAAK,wBAAwB,CAAC,IAAA,EAAM,IAAI,CAAC,CAAA;AACnE,MAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,CAAC,kBAAA,CAAmB,IAAA,CAAK,GAAG,CAAA,EAAG;AAC5D,QAAA,MAAM,IAAI,KAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO,GAAA;AAAA,IACT;AAAA,GACF;AACF;AAQA,SAAS,uBAAuB,MAAA,EAAwD;AACtF,EAAA,MAAM,SAA+B,EAAC;AACtC,EAAA,IAAI,MAAA,CAAO,IAAA,KAAS,MAAA,EAAW,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,QAAA,EAAU,CAAA;AAC3E,EAAA,IAAI,MAAA,CAAO,OAAA,KAAY,MAAA,EAAW,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,QAAA,EAAU,CAAA;AACjF,EAAA,IAAI,MAAA,CAAO,OAAA,KAAY,MAAA,EAAW,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,CAAA;AAClF,EAAA,IAAI,OAAO,iBAAA,KAAsB,MAAA;AAC/B,IAAA,MAAA,CAAO,KAAK,EAAE,IAAA,EAAM,mBAAA,EAAqB,IAAA,EAAM,WAAW,CAAA;AAC5D,EAAA,IAAI,MAAA,CAAO,IAAA,KAAS,MAAA,EAAW,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAW,CAAA;AAC5E,EAAA,OAAO,MAAA;AACT","file":"index.js","sourcesContent":["// Typed error classes for the x402-client. Each is a leaf `Error` subclass\n// with a stable `name` so callers can branch on `instanceof` or string-match\n// without parsing messages.\n\nexport class UnsupportedSchemeError extends Error {\n constructor(message: string) {\n super(message);\n this.name = \"UnsupportedSchemeError\";\n }\n}\n\nexport class UnsupportedTokenAuthError extends Error {\n constructor(message: string) {\n super(message);\n this.name = \"UnsupportedTokenAuthError\";\n }\n}\n\nexport class NoCompatibleActionError extends Error {\n constructor(message: string) {\n super(message);\n this.name = \"NoCompatibleActionError\";\n }\n}\n\nexport class FulfillmentValidationError extends Error {\n constructor(message: string) {\n super(message);\n this.name = \"FulfillmentValidationError\";\n }\n}\n\nexport class MaxAmountExceededError extends Error {\n constructor(message: string) {\n super(message);\n this.name = \"MaxAmountExceededError\";\n }\n}\n","// Pick the on-chain Boson action to invoke from a parsed PaymentRequirements.\n//\n// Two commit-time actions are supported:\n// - `boson-createOfferAndCommit` (Flow A, deferred redeem)\n// - `boson-createOfferCommitAndRedeem` (Flow B, atomic commit+redeem)\n//\n// Selection rules:\n// - `policy.redeemMode = \"commit-only\"`: require Flow A.\n// - `policy.redeemMode = \"auto\"` (or unset): prefer Flow A, fall back to Flow B.\n// - `policy.redeemMode = \"commit-and-redeem\"`: require Flow B; throw\n// `NoCompatibleActionError` if the server hasn't advertised it.\n//\n// In \"auto\" mode we keep MVP behaviour (prefer Flow A whenever advertised)\n// so existing callers don't silently switch flows on the SDK upgrade. A\n// future policy could promote Flow B when both are offered, but that's a\n// separate change.\n\nimport type {\n BosonCommitActionId,\n EscrowPaymentRequirements,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\n\nimport { NoCompatibleActionError } from \"./errors.js\";\nimport type { Policy } from \"./types.js\";\n\nconst FLOW_A: BosonCommitActionId = \"boson-createOfferAndCommit\";\nconst FLOW_B: BosonCommitActionId = \"boson-createOfferCommitAndRedeem\";\n\n/*\n Resolve the Boson commit-time action the client will sign. Throws\n * `NoCompatibleActionError` when the server hasn't advertised any action\n * compatible with the requested policy.\n /\nexport function pickAction(\n requirements: EscrowPaymentRequirements,\n policy?: Policy,\n): BosonCommitActionId {\n const redeemMode = policy?.redeemMode ?? \"auto\";\n\n const flowAOffered = requirements.actions.next.some(\n (a) => a.id === FLOW_A && a.channels.includes(\"server\"),\n );\n const flowBOffered = requirements.actions.next.some(\n (a) => a.id === FLOW_B && a.channels.includes(\"server\"),\n );\n\n if (redeemMode === \"commit-and-redeem\") {\n if (flowBOffered) return FLOW_B;\n throw new NoCompatibleActionError(\n `policy.redeemMode='commit-and-redeem' requires '${FLOW_B}' on the server channel; requirements only advertise [${requirements.actions.next.map((a) => a.id).join(\", \")}]`,\n );\n }\n\n if (redeemMode === \"commit-only\") {\n if (flowAOffered) return FLOW_A;\n throw new NoCompatibleActionError(\n `policy.redeemMode='commit-only' requires '${FLOW_A}' on the server channel; requirements only advertise [${requirements.actions.next.map((a) => a.id).join(\", \")}]`,\n );\n }\n\n // \"auto\": prefer Flow A when present, but fall back to Flow B.\n if (flowAOffered) return FLOW_A;\n if (flowBOffered) return FLOW_B;\n\n throw new NoCompatibleActionError(\n `no commit-time action ('${FLOW_A}' or '${FLOW_B}') with 'server' channel found in requirements.actions.next`,\n );\n}\n","// Resolve the `fulfillment` slot the client will attach to the commit-time\n// payment payload. The buyer's chosen `option` always flows (capability\n// negotiation against the server's advertised set); the `data` field is\n// validated locally against the option's JSON Schema either way so the\n// client fails fast before signing — but whether it travels with the\n// commit-time payload depends on the action the client is signing:\n//\n// - Atomic Flow B (`boson-createOfferCommitAndRedeem`): the commit and\n// on-chain redeem happen in one transaction, so the X-PAYMENT header\n// is the only round trip the buyer makes. `data` MUST be present.\n// - Two-step Flow A (`boson-createOfferAndCommit`): the buyer redeems\n// later via `boson-redeem`'s POST body — `data` is omitted at commit\n// and attached at redeem.\n//\n// The conditional emission lives in the payload assembler (`payload.ts`);\n// this module returns both `option` and `data` and lets the caller decide.\n\nimport Ajv from \"ajv\";\nimport type { EscrowPaymentRequirements } from \"@bosonprotocol/x402-core/schemes/escrow\";\n\nimport { FulfillmentValidationError } from \"./errors.js\";\nimport type { FulfillmentConfig, X402bClientConfig } from \"./types.js\";\n\nexport interface ResolvedFulfillment {\n option: string;\n /\n Buyer-supplied delivery data, validated locally against the option's\n * JSON Schema. The payload assembler decides whether to include this\n * field in the commit-time payload (Flow B yes, Flow A no).\n /\n data: Record<string, unknown> \| null;\n}\n\n/\n Returns the resolved `{ option, data }` pair the assembler will attach\n * to the commit-time fulfillment slot (Flow B) or carry forward for the\n * redeem-time POST body (Flow A). Throws when the requirements demand a\n * fulfillment but the client config doesn't supply one, when the option\n * id isn't advertised by the server, or when the buyer data doesn't\n * validate against the option's schema.\n /\nexport function resolveFulfillment(\n requirements: EscrowPaymentRequirements,\n config: Pick<X402bClientConfig, \"fulfillment\">,\n): ResolvedFulfillment \| undefined {\n const required = requirements.fulfillment?.required ?? false;\n if (!required) {\n return undefined;\n }\n\n const fulfillmentConfig: FulfillmentConfig \| undefined = config.fulfillment;\n if (!fulfillmentConfig) {\n throw new FulfillmentValidationError(\n \"requirements.fulfillment.required is true but client config did not supply a fulfillment selection\",\n );\n }\n\n const option = requirements.fulfillment?.options.find((o) => o.id === fulfillmentConfig.option);\n if (!option) {\n const advertised = requirements.fulfillment?.options.map((o) => o.id).join(\", \") ?? \"<none>\";\n throw new FulfillmentValidationError(\n `fulfillment option '${fulfillmentConfig.option}' not advertised by requirements (advertised: ${advertised})`,\n );\n }\n\n if (option.schema === null) {\n if (fulfillmentConfig.data !== null) {\n throw new FulfillmentValidationError(\n `fulfillment option '${option.id}' accepts no buyer data; use null`,\n );\n }\n } else {\n const ajv = new Ajv({ allErrors: true, strict: false });\n const validate = ajv.compile(option.schema);\n const ok = validate(fulfillmentConfig.data);\n if (!ok) {\n throw new FulfillmentValidationError(\n `fulfillment data does not match option '${option.id}' schema: ${ajv.errorsText(validate.errors)}`,\n );\n }\n }\n\n return { option: fulfillmentConfig.option, data: fulfillmentConfig.data };\n}\n","// Translator that wraps a `Signer` (plus an optional viem `PublicClient`\n// for read-only RPC calls) into a `Web3LibAdapter` that `CoreSDK` can be\n// constructed against.\n//\n// Two RPC methods are forwarded:\n//\n// - `send(\"eth_signTypedData_v4\", ...)` — buyer signs via `signer.signTypedData`.\n// - `call({ to, data })` — read-only `eth_call`, forwarded to the\n// `PublicClient` when one is configured. Required by the EIP-2612\n// Permit token-auth path, which fetches the token's `nonces(owner)`\n// before signing. Throws a clear error when invoked without a\n// PublicClient so the configuration mistake surfaces fast.\n//\n// Transaction-flavour methods (`sendTransaction`, `estimateGas`,\n// `getBalance`, `getTransactionReceipt`, `getCurrentTimeMs`) reject — the\n// buyer never goes on-chain in MVP.\n\nimport type { Web3LibAdapter } from \"@bosonprotocol/common\";\nimport type { PublicClient, TypedDataDomain, TypedDataParameter } from \"viem\";\n\nimport type { Signer } from \"../types.js\";\n\n/\n Build the `Web3LibAdapter` that `@bosonprotocol/core-sdk`'s `CoreSDK`\n * accepts. `send(\"eth_signTypedData_v4\", [address, jsonString])` delegates\n * to `signer.signTypedData(...)`. `call({ to, data })` is forwarded to\n * `publicClient.call(...)` when one is provided; otherwise it throws (the\n * Permit strategy is the only path that exercises `call`).\n /\nexport function signerToWeb3LibAdapter(\n signer: Signer,\n chainId: number,\n publicClient?: PublicClient,\n): Web3LibAdapter {\n return {\n uuid: \"x402-client:signer-adapter\",\n getSignerAddress: () => signer.getAddress(),\n isSignerContract: async () => false,\n getChainId: async () => chainId,\n send: async (method, params) => {\n if (method !== \"eth_signTypedData_v4\") {\n throw new Error(\n `x402-client: signer adapter does not support RPC method '${method}'; only eth_signTypedData_v4 is implemented`,\n );\n }\n const raw = (params as unknown[])[1];\n if (typeof raw !== \"string\") {\n throw new Error(\n \"x402-client: eth_signTypedData_v4 payload[1] is not a JSON string — core-sdk internals may have changed\",\n );\n }\n const typedData = JSON.parse(raw) as {\n domain: TypedDataDomain;\n types: Record<string, readonly TypedDataParameter[]>;\n primaryType: string;\n message: Record<string, unknown>;\n };\n return signer.signTypedData(typedData);\n },\n call: async (req) => {\n if (!publicClient) {\n throw new Error(\n \"x402-client: signer adapter has no PublicClient configured; eth_call cannot be forwarded. \" +\n \"Pass `publicClients` in X402bClientConfig to enable the Permit token-auth strategy.\",\n );\n }\n const result = await publicClient.call({\n to: req.to as `0x${string}`,\n data: req.data as `0x${string}` \| undefined,\n });\n return result.data ?? \"0x\";\n },\n getBalance: () => Promise.reject(unreachable(\"getBalance\")),\n estimateGas: () => Promise.reject(unreachable(\"estimateGas\")),\n sendTransaction: () => Promise.reject(unreachable(\"sendTransaction\")),\n getTransactionReceipt: () => Promise.reject(unreachable(\"getTransactionReceipt\")),\n getCurrentTimeMs: () => Promise.reject(unreachable(\"getCurrentTimeMs\")),\n };\n}\n\nfunction unreachable(method: string): Error {\n return new Error(\n `x402-client: stub Web3LibAdapter.${method}() is not implemented — the client never goes on-chain in MVP`,\n );\n}\n","// Construct (and cache) the `CoreSDK` instance the client signs through.\n//\n// The buyer never queries Boson's subgraph in MVP — only the EIP-712 meta-tx\n// signing path is invoked — but `CoreSDK`'s base constructor requires a\n// `subgraphUrl` string. Callers can configure real URLs per chain via\n// `subgraphUrls`, or omit it and rely on the placeholder sentinel below;\n// either way no HTTP call to that URL is made during signing.\n\nimport { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport type { Address } from \"viem\";\n\nimport { signerToWeb3LibAdapter } from \"./internal/web3lib-adapter.js\";\nimport type { Signer, X402bClientConfig } from \"./types.js\";\n\n// Sentinel used when the caller did not configure a real subgraph URL for\n// the chain. The signing path never reads from it; the value just needs to\n// be a non-empty string the constructor accepts.\nconst PLACEHOLDER_SUBGRAPH_URL = \"https://x402-client.placeholder.invalid/subgraph\";\n\nexport interface CoreSdkContext {\n coreSdk: CoreSDK;\n chainId: number;\n}\n\n/\n Parse a CAIP-2 EVM network identifier (e.g. `\"eip155:8453\"`) into its\n * numeric chain id. Throws if the network is not a well-formed `eip155:<N>`.\n /\nexport function parseChainId(network: string): number {\n const match = network.match(/^eip155:(\\d+)$/);\n if (!match) {\n throw new Error(\n `x402-client: unsupported network '${network}' (expected CAIP-2 'eip155:<chainId>')`,\n );\n }\n const chainId = Number(match[1]);\n if (!Number.isSafeInteger(chainId) \|\| chainId <= 0) {\n throw new Error(\n `x402-client: unsupported network '${network}' (chainId must be a positive safe integer)`,\n );\n }\n return chainId;\n}\n\n/\n Lazy factory that returns a `CoreSDK` instance configured against the\n * escrow contract advertised in the network. Instances are cached per\n * `(chainId, escrowAddress)` so repeated calls on the same network — for\n * commit and subsequent post-commit actions on the same exchange — reuse a\n * single SDK.\n \n The SDK's `web3Lib.call(...)` is wired through `config.publicClients[chainId]`\n * when one is configured; this enables read-only RPC reads (e.g. the EIP-2612\n * Permit strategy's `nonces(owner)` lookup). Chains without a PublicClient\n * configured can still sign meta-transactions and ERC-3009 / Permit2\n * token-auths.\n /\nexport function createCoreSdkFactory(\n signer: Signer,\n config: Pick<X402bClientConfig, \"subgraphUrls\" \| \"publicClients\">,\n) {\n const cache = new Map<string, CoreSDK>();\n\n return function buildCoreSdk(network: string, escrowAddress: Address): CoreSdkContext {\n const chainId = parseChainId(network);\n const cacheKey = `${chainId}:${escrowAddress.toLowerCase()}`;\n const cached = cache.get(cacheKey);\n if (cached) {\n return { coreSdk: cached, chainId };\n }\n\n const subgraphUrl = config.subgraphUrls?.[chainId] ?? PLACEHOLDER_SUBGRAPH_URL;\n const publicClient = config.publicClients?.[chainId];\n const web3Lib = signerToWeb3LibAdapter(signer, chainId, publicClient);\n\n const coreSdk = new CoreSDK({\n web3Lib,\n subgraphUrl,\n protocolDiamond: escrowAddress,\n chainId,\n });\n\n cache.set(cacheKey, coreSdk);\n return { coreSdk, chainId };\n };\n}\n","// Parse the optional `X-PAYMENT-RESPONSE` header the server may emit after\n// settling.\n//\n// The escrow-scheme spec doesn't pin a strict contract for this header yet,\n// so the parser is permissive: base64-decode the value, JSON-parse it, and\n// return `{ raw }`. Best-effort lifting picks `exchangeId` / `state` from\n// the common property paths an x402B server might use. Callers who need\n// stronger guarantees can read `raw` directly.\n\nimport type { ExchangeSummary } from \"./types.js\";\n\nconst HEADER_NAME = \"X-PAYMENT-RESPONSE\";\n\n/* Read a header value from anything that exposes `.get(name)`. /\ninterface HeaderLike {\n get(name: string): string \| null;\n}\n\ninterface ResponseLike {\n headers: HeaderLike;\n}\n\n/\n Decode the `X-PAYMENT-RESPONSE` header on a Response-like object. Returns\n * `undefined` when the header isn't set; throws on a malformed payload.\n /\nexport function parsePaymentResponse(response: ResponseLike): ExchangeSummary \| undefined {\n const raw = response.headers.get(HEADER_NAME);\n if (!raw) {\n return undefined;\n }\n\n const json = decodeBase64(raw);\n const parsed: unknown = JSON.parse(json);\n const summary: ExchangeSummary = { raw: parsed };\n\n // Only walk into the payload when it's actually a plain record. A valid\n // JSON value can be `null`, an array, or a primitive — touching keys on\n // those would crash, defeating the file-header permissive promise.\n if (typeof parsed === \"object\" && parsed !== null && !Array.isArray(parsed)) {\n const obj = parsed as Record<string, unknown>;\n\n const exchangeId = pickString(obj, [\"exchangeId\", \"exchange_id\"]);\n if (exchangeId !== undefined) {\n summary.exchangeId = exchangeId;\n }\n\n if (isClientStateShape(obj.state)) {\n summary.state = obj.state;\n }\n\n // Fallback for the server-emitted shape, which carries exchange state\n // under `nextActions.exchangeState` (and optionally `disputeState`)\n // rather than a top-level `state` field. The top-level lookup above\n // still wins when present, preserving forward-compat with external\n // servers that publish the flatter shape.\n if (\n summary.state === undefined &&\n typeof obj.nextActions === \"object\" &&\n obj.nextActions !== null &&\n !Array.isArray(obj.nextActions)\n ) {\n const na = obj.nextActions as Record<string, unknown>;\n const exchange = pickString(na, [\"exchangeState\"]);\n const dispute = pickString(na, [\"disputeState\"]);\n if (exchange !== undefined) {\n let candidate: unknown;\n if (exchange === \"DISPUTED\") {\n candidate = dispute !== undefined ? { exchange, dispute } : undefined;\n } else {\n candidate = { exchange };\n }\n if (isClientStateShape(candidate)) {\n summary.state = candidate;\n }\n }\n }\n }\n\n return summary;\n}\n\n/\n Shape gate for `state` arriving from the permissive server header. We\n * keep the file-header promise of permissiveness — `ClientState` is\n * `\"PRE_COMMIT\"` or an `{ exchange, dispute? }` record today, but the\n * wire contract isn't pinned, so any non-empty string (e.g. raw\n * `ExchangeState` value) or non-array `{ exchange }`-shaped record is\n * surfaced verbatim. Numbers, booleans, `null`, empty strings, arrays,\n * and records missing a string `exchange` field are rejected so garbage\n * payloads can't masquerade as a typed `ClientState`.\n /\nfunction isClientStateShape(v: unknown): v is NonNullable<ExchangeSummary[\"state\"]> {\n if (typeof v === \"string\") return v.length > 0;\n if (typeof v !== \"object\" \|\| v === null \|\| Array.isArray(v)) return false;\n const rec = v as Record<string, unknown>;\n if (typeof rec.exchange !== \"string\" \|\| rec.exchange.length === 0) return false;\n if (\"dispute\" in rec && rec.dispute !== undefined && typeof rec.dispute !== \"string\") {\n return false;\n }\n return true;\n}\n\nfunction decodeBase64(value: string): string {\n if (typeof Buffer !== \"undefined\") {\n return Buffer.from(value, \"base64\").toString(\"utf8\");\n }\n const binary = atob(value);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) {\n bytes[i] = binary.charCodeAt(i);\n }\n return new TextDecoder().decode(bytes);\n}\n\nfunction pickString(obj: Record<string, unknown>, keys: string[]): string \| undefined {\n for (const key of keys) {\n const v = obj[key];\n if (typeof v === \"string\" && v.length > 0) {\n return v;\n }\n }\n return undefined;\n}\n","// Assemble the X-PAYMENT body and base64-encode it.\n//\n// Defense-in-depth: the assembled `EscrowPaymentPayload` is re-validated\n// through `parseEscrowPaymentPayload` from `@bosonprotocol/x402-core`\n// before serialization, so shape bugs surface here instead of at the\n// server. Base64 encoding picks `Buffer` on Node and `btoa` on browser\n// targets — tsup builds both, so the runtime branch matters.\n\nimport {\n parseEscrowPaymentPayload,\n type BosonMetaTx,\n type BosonTokenAuth,\n type EscrowPaymentPayload,\n type EscrowPaymentRequirements,\n type TokenAuthStrategy,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { Address } from \"viem\";\n\nimport type { ResolvedFulfillment } from \"./fulfillment.js\";\n\n/* Current x402 protocol version embedded in the payload envelope. /\nexport const X402_VERSION = 2;\n\nexport interface AssembleArgs {\n requirements: EscrowPaymentRequirements;\n action: string;\n tokenAuthStrategy: TokenAuthStrategy;\n metaTx: BosonMetaTx;\n tokenAuth?: BosonTokenAuth;\n fulfillment?: ResolvedFulfillment;\n buyer: Address;\n}\n\n/* Construct and re-validate the payload, returning the structured object. /\nexport function assemblePayload({\n requirements,\n action,\n tokenAuthStrategy,\n metaTx,\n tokenAuth,\n fulfillment,\n buyer,\n}: AssembleArgs): EscrowPaymentPayload {\n // Fulfillment `data` rides along only for atomic Flow B — Flow A\n // defers it to the redeem POST body. The conditional emission keeps\n // the assembler aligned with the server-side rule-13 validator that\n // rejects `data` on Flow A and requires it on Flow B.\n const fulfillmentSlot =\n fulfillment === undefined\n ? undefined\n : action === \"boson-createOfferCommitAndRedeem\"\n ? { option: fulfillment.option, data: fulfillment.data }\n : { option: fulfillment.option };\n\n const payload: EscrowPaymentPayload = {\n x402Version: X402_VERSION,\n scheme: \"escrow\",\n network: requirements.network,\n payload: {\n action,\n tokenAuthStrategy,\n offerRef: {\n fullOffer: requirements.offer.fullOffer,\n sellerSig: requirements.offer.sellerSig,\n },\n buyer,\n metaTx,\n ...(tokenAuth ? { tokenAuth } : {}),\n },\n ...(fulfillmentSlot ? { fulfillment: fulfillmentSlot } : {}),\n };\n\n // Defensive re-parse — surfaces shape bugs (e.g. malformed hex) before\n // the payload escapes the client.\n parseEscrowPaymentPayload(payload);\n return payload;\n}\n\n/* Build, validate, and base64-encode the payload for the `X-PAYMENT` header. /\nexport function assembleAndEncodePayload(args: AssembleArgs): string {\n const payload = assemblePayload(args);\n const json = JSON.stringify(payload);\n if (typeof Buffer !== \"undefined\") {\n return Buffer.from(json, \"utf8\").toString(\"base64\");\n }\n // Browser fallback. Wire payloads mostly carry hex/numeric strings,\n // but atomic Flow B's `fulfillment.data` is a `Record<string, unknown>`\n // the buyer populates — emails, addresses, free-form notes. `btoa`\n // accepts only a binary string (code units 0–255) and throws\n // `InvalidCharacterError` on any character above U+00FF. UTF-8 encode\n // the JSON first, then map the bytes into the binary-string form\n // `btoa` expects.\n const bytes = new TextEncoder().encode(json);\n let binary = \"\";\n for (const b of bytes) {\n binary += String.fromCharCode(b);\n }\n return btoa(binary);\n}\n","// Cross-platform random helpers.\n//\n// The client is framework-agnostic: it must run in browsers (where\n// `node:crypto` is unavailable) as well as Node. The Web Crypto API\n// (`globalThis.crypto.getRandomValues`) covers both — it's been a Node\n// global since 19 and is universally available in modern browsers.\n// The package's `engines.node` already requires Node ≥ 22, so we can\n// rely on the global without a `node:crypto` fallback.\n//\n// Centralizing the helpers here keeps `pre-commit.ts`, `post-commit.ts`,\n// and `token-auth/erc3009.ts` from each importing their own crypto\n// primitive and re-deriving the same byte → bigint / byte → hex\n// conversion (CLAUDE.md \"Move duplicated constants ... into a shared\n// file the moment they appear in two places\").\n\nimport type { Hex } from \"viem\";\n\n/* Fill a fresh `Uint8Array` of `size` bytes with cryptographically random bytes. /\nexport function randomBytes(size: number): Uint8Array {\n const bytes = new Uint8Array(size);\n if (typeof globalThis.crypto?.getRandomValues !== \"function\") {\n throw new Error(\n \"x402-client: globalThis.crypto.getRandomValues is unavailable — environment lacks the Web Crypto API\",\n );\n }\n globalThis.crypto.getRandomValues(bytes);\n return bytes;\n}\n\n/* 32-byte cryptographically random `0x`-prefixed hex string. /\nexport function randomBytes32(): Hex {\n const bytes = randomBytes(32);\n let hex = \"0x\";\n for (const b of bytes) {\n hex += b.toString(16).padStart(2, \"0\");\n }\n return hex as Hex;\n}\n\n/* Cryptographically random `uint256`. Used for protocol meta-tx replay-protection nonces. /\nexport function randomUint256(): bigint {\n const bytes = randomBytes(32);\n let n = 0n;\n for (const byte of bytes) {\n n = (n << 8n) \| BigInt(byte);\n }\n return n;\n}\n","// Sign the buyer's Boson protocol meta-transaction for one of the two\n// commit-time actions:\n//\n// - Flow A — `boson-createOfferAndCommit` (deferred redeem). Signed via\n// `coreSdk.signMetaTxCreateOfferAndCommit`.\n// - Flow B — `boson-createOfferCommitAndRedeem` (atomic commit+redeem\n// via `OrchestrationHandlerFacet2.createOfferCommitAndRedeem`). Signed\n// via `coreSdk.signMetaTxCreateOfferCommitAndRedeem`.\n//\n// Both route through `CoreSDK` directly so the EIP-712 domain, function\n// signature, and calldata encoding stay in lock-step with the deployed\n// protocol. The returned `SignedMetaTx` is shaped exactly as the on-chain\n// `MetaTransactionsHandlerFacet` recovers against; we re-shape it into\n// the escrow scheme's wire-format `BosonMetaTx` for the X-PAYMENT payload.\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport type { FullOfferArgs } from \"@bosonprotocol/common\";\nimport type {\n BosonMetaTx,\n EscrowPaymentRequirements,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { Address, Hex } from \"viem\";\n\nimport { randomUint256 } from \"./utils/crypto.js\";\n\nexport interface SignCreateOfferAndCommitArgs {\n requirements: EscrowPaymentRequirements;\n coreSdk: CoreSDK;\n buyer: Address;\n}\n\n/\n Builds the buyer-side meta-tx for `createOfferAndCommit`, signs it via\n * `CoreSDK`, and returns the wire-format envelope ready to be embedded in\n * an `EscrowPaymentPayload`.\n \n The `createOfferAndCommitArgs` are reconstructed from the\n * `requirements.offer` triple — the opaque `fullOffer` carries the\n * `Omit<FullOfferArgs, \"signature\">` shape, `sellerSig` becomes the\n * `signature`, and the buyer's address is spliced in as `committer`. Any\n * shape drift between the wire format and `FullOfferArgs` surfaces as a\n * yup validation error from core-sdk's\n * `createOfferAndCommitArgsSchema.validateSync` — propagate it rather than\n * patch silently (CLAUDE.md \"Production over spec when they diverge\").\n /\nexport async function signCreateOfferAndCommit({\n requirements,\n coreSdk,\n buyer,\n}: SignCreateOfferAndCommitArgs): Promise<BosonMetaTx> {\n const nonce = randomUint256();\n\n const createOfferAndCommitArgs = buildCreateOfferAndCommitArgs(requirements, buyer);\n\n const signed = await coreSdk.signMetaTxCreateOfferAndCommit({\n nonce: nonce.toString(),\n createOfferAndCommitArgs,\n });\n\n return reshape(signed, buyer, nonce);\n}\n\n/\n Flow B counterpart to {@link signCreateOfferAndCommit} — signs\n * the meta-tx that drives `OrchestrationHandlerFacet2.createOfferCommitAndRedeem`.\n * The argument shape is identical (the protocol uses the same\n * `FullOfferArgs` struct); only the resulting function selector and\n * post-state differ.\n /\nexport async function signCreateOfferCommitAndRedeem({\n requirements,\n coreSdk,\n buyer,\n}: SignCreateOfferAndCommitArgs): Promise<BosonMetaTx> {\n const nonce = randomUint256();\n\n const createOfferAndCommitArgs = buildCreateOfferAndCommitArgs(requirements, buyer);\n\n const signed = await coreSdk.signMetaTxCreateOfferCommitAndRedeem({\n nonce: nonce.toString(),\n createOfferAndCommitArgs,\n });\n\n return reshape(signed, buyer, nonce);\n}\n\nfunction buildCreateOfferAndCommitArgs(\n requirements: EscrowPaymentRequirements,\n buyer: Address,\n): FullOfferArgs {\n return {\n ...(requirements.offer.fullOffer as object),\n signature: requirements.offer.sellerSig,\n committer: buyer,\n } as unknown as FullOfferArgs;\n}\n\nfunction reshape(\n signed: {\n functionName: string;\n functionSignature: string;\n r: string;\n s: string;\n v: number;\n },\n buyer: Address,\n nonce: bigint,\n): BosonMetaTx {\n return {\n from: buyer,\n nonce: nonce.toString(),\n functionName: signed.functionName,\n functionSignature: signed.functionSignature as Hex,\n sig: {\n v: Number(signed.v),\n r: signed.r as Hex,\n s: signed.s as Hex,\n },\n };\n}\n","// Sign Boson protocol meta-transactions for post-commit buyer actions.\n//\n// These are the transitions the buyer can drive once an exchange exists on\n// chain: redeem the voucher, cancel/complete the exchange, or move through\n// the dispute family. Each is a single-call meta-tx that the\n// server/facilitator submits via\n// `MetaTransactionsHandlerFacet.executeMetaTransaction`. None of them\n// carry a token-auth payload (the funds are already escrowed) so the\n// returned `BosonMetaTx` is the full wire-format the server consumes —\n// usually as a JSON POST body, not an `X-PAYMENT` header.\n//\n// We return both the `BosonMetaTx` envelope (useful for on-chain or MCP\n// channels) and the ABI-encoded `signedPayload` Hex consumed by the\n// server/facilitator HTTP convenience routes. The encoder lives in\n// `@bosonprotocol/x402-evm/codec` so client and facilitator share one\n// implementation.\n//\n// `boson-escalateDispute` is the one exception. If the dispute resolver\n// requires an escalation deposit, the resolver/server can return its own\n// 402 carrying an `escrow` `PaymentRequirements` and the buyer pairs this\n// meta-tx with a token-auth payload — that wrapper lives outside MVP. Here\n// we only sign the meta-tx itself; the deposit flow is a later PR.\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport type { BosonMetaTx, Hex as WireHex } from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { ActionId } from \"@bosonprotocol/x402-core/state-machine\";\nimport { encodeSignedPayload } from \"@bosonprotocol/x402-evm/codec\";\nimport type { Address, Hex } from \"viem\";\n\nimport { randomUint256 } from \"./utils/crypto.js\";\n\n// Matches the subset of ethers' `BigNumberish` core-sdk actually accepts at\n// runtime, without pulling `@ethersproject/bignumber` into this package's\n// declared deps. Callers usually pass decimal strings (the wire format).\ntype BigNumberish = string \| number \| bigint;\n\n/\n Buyer-invokable post-commit action ids — derived from `ActionId` in\n * `@bosonprotocol/x402-core/state-machine` (the single source of truth)\n * by excluding:\n \n - the commit-time ids, which the buyer signs via `handle402`;\n * - `boson-revokeVoucher`, which is seller-only;\n * - entity-keyed actions (`boson-withdrawFunds`), which are signed via\n * `client.signWithdrawFunds` / `client.signWithdrawAllAvailableFunds`\n * because they take an `entityId` + token list rather than an\n * `exchangeId`.\n /\ntype BuyerPostCommitActionId = Exclude<\n ActionId,\n \| \"boson-createOfferAndCommit\"\n \| \"boson-createOfferCommitAndRedeem\"\n \| \"boson-revokeVoucher\"\n \| \"boson-withdrawFunds\"\n>;\n\n/* Caller-supplied arguments for `client.signAction`. /\nexport type SignActionArgs = SimplePostCommitArgs \| ResolveDisputeArgs;\n\ninterface BaseArgs {\n exchangeId: BigNumberish;\n /* CAIP-2 network identifier (e.g. `\"eip155:8453\"`). /\n network: string;\n /* Boson Diamond address (the `escrowAddress` from the prior 402). /\n escrowAddress: Address;\n}\n\nexport interface SimplePostCommitArgs extends BaseArgs {\n actionId: Exclude<BuyerPostCommitActionId, \"boson-resolveDispute\">;\n}\n\nexport interface ResolveDisputeArgs extends BaseArgs {\n actionId: \"boson-resolveDispute\";\n /* Buyer share of the disputed amount, in the units the protocol expects (basis points). /\n buyerPercent: BigNumberish;\n /* Counterparty (seller) signature over the proposal. Hex string or `{r, s, v}`. /\n counterpartySig: Hex \| { r: Hex; s: Hex; v: number };\n}\n\nexport interface SignPostCommitActionDeps {\n buildCoreSdk: (network: string, escrowAddress: Address) => { coreSdk: CoreSDK; chainId: number };\n getBuyerAddress: () => Promise<Address>;\n}\n\n/\n Wire-format result of `signPostCommitAction`: the signed `BosonMetaTx`\n * envelope plus its ABI-encoded `signedPayload` Hex. Pick the one that\n * matches the channel — the server/facilitator HTTP routes consume\n * `signedPayload`; direct on-chain or MCP submissions use `metaTx`.\n /\nexport interface SignedPostCommitAction {\n metaTx: BosonMetaTx;\n /\n ABI-encoded `BosonMetaTx` ready to drop into a server / facilitator\n * route's `signedPayload` field. The hex is JSON-serialisable; we type\n * it as the loose wire `Hex` (string) rather than viem's strict\n * `\\`0x\\${string}\\`` so the codec's output matches the schemes module's\n * own `Hex` alias.\n /\n signedPayload: WireHex;\n}\n\n/\n Sign a post-commit action through the appropriate `CoreSDK.signMetaTx`\n mixin method. Returns both the wire-format `BosonMetaTx` envelope and\n * the ABI-encoded `signedPayload` Hex ready to POST to a server /\n * facilitator route.\n /\nexport async function signPostCommitAction(\n args: SignActionArgs,\n deps: SignPostCommitActionDeps,\n): Promise<SignedPostCommitAction> {\n const nonce = randomUint256();\n const buyer = await deps.getBuyerAddress();\n const { coreSdk } = deps.buildCoreSdk(args.network, args.escrowAddress);\n\n const signed = await callSignMetaTx(coreSdk, args, nonce);\n\n const metaTx: BosonMetaTx = {\n from: buyer,\n nonce: nonce.toString(),\n functionName: signed.functionName,\n functionSignature: signed.functionSignature as Hex,\n sig: {\n v: Number(signed.v),\n r: signed.r as Hex,\n s: signed.s as Hex,\n },\n };\n\n return { metaTx, signedPayload: encodeSignedPayload(metaTx) };\n}\n\ninterface SignedMetaTxShape {\n functionName: string;\n functionSignature: string;\n r: string;\n s: string;\n v: number;\n}\n\nasync function callSignMetaTx(\n coreSdk: CoreSDK,\n args: SignActionArgs,\n nonce: bigint,\n): Promise<SignedMetaTxShape> {\n const nonceStr = nonce.toString();\n const exchangeId = args.exchangeId;\n\n switch (args.actionId) {\n case \"boson-redeem\":\n return coreSdk.signMetaTxRedeemVoucher({ nonce: nonceStr, exchangeId });\n case \"boson-cancelVoucher\":\n return coreSdk.signMetaTxCancelVoucher({ nonce: nonceStr, exchangeId });\n case \"boson-completeExchange\":\n return coreSdk.signMetaTxCompleteExchange({ nonce: nonceStr, exchangeId });\n case \"boson-raiseDispute\":\n return coreSdk.signMetaTxRaiseDispute({ nonce: nonceStr, exchangeId });\n case \"boson-retractDispute\":\n return coreSdk.signMetaTxRetractDispute({ nonce: nonceStr, exchangeId });\n case \"boson-escalateDispute\":\n return coreSdk.signMetaTxEscalateDispute({ nonce: nonceStr, exchangeId });\n case \"boson-resolveDispute\":\n return coreSdk.signMetaTxResolveDispute({\n nonce: nonceStr,\n exchangeId,\n buyerPercent: args.buyerPercent,\n counterpartySig: args.counterpartySig,\n });\n default: {\n // The discriminated union makes this unreachable at the type level;\n // the `never` annotation enforces exhaustiveness at compile time, and\n // the throw guarantees a clear error if a runtime value ever slips\n // past the type checker.\n const _exhaustive: never = args;\n throw new Error(\n `x402-client: unsupported post-commit action '${(_exhaustive as { actionId: string }).actionId}'`,\n );\n }\n }\n}\n","// Sign Boson protocol meta-transactions for the entity-keyed\n// `boson-withdrawFunds` action.\n//\n// Unlike the buyer-side post-commit signers, withdraw is keyed by the\n// Boson account `entityId` (buyer or seller) rather than an exchange\n// id. The on-chain primitive is\n// `FundsHandlerFacet.withdrawFunds(uint256 entityId, address[] tokenList,\n// uint256[] tokenAmounts)`. The meta-tx variant\n// (`coreSdk.signMetaTxWithdrawFunds`) wraps that calldata in an EIP-712\n// envelope ready for `MetaTransactionsHandlerFacet.executeMetaTransaction`.\n//\n// Scope cap for v1: callers withdraw the whole* current balance set.\n// `signWithdrawAllAvailableFunds` reads the funds entity from the\n// subgraph, drops zero balances, then delegates to `signWithdrawFunds`\n// for the actual EIP-712 sign. Partial / user-chosen amounts can be\n// added later without a wire-format change.\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport {\n DECIMAL_UINT,\n type BosonMetaTx,\n type Hex as WireHex,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport { encodeSignedPayload } from \"@bosonprotocol/x402-evm/codec\";\nimport type { Address, Hex } from \"viem\";\n\nimport { randomUint256 } from \"./utils/crypto.js\";\n\n// Matches the subset of ethers' `BigNumberish` core-sdk actually accepts at\n// runtime, without pulling `@ethersproject/bignumber` into this package's\n// declared deps. Callers usually pass decimal strings (the wire format).\ntype BigNumberish = string \| number \| bigint;\n\n/*\n Coerce a caller-supplied `entityId` to its canonical wire form (a\n * non-negative integer decimal string). Rejects NaN, fractional, and\n * negative values up-front — passing them on to core-sdk would either\n * trip a downstream BigInt conversion or, worse, produce a signed\n * payload that always reverts on-chain.\n /\nfunction normalizeEntityId(value: BigNumberish): string {\n if (typeof value === \"bigint\") {\n if (value < 0n) throw new Error(`entityId must be non-negative, got ${value.toString()}`);\n return value.toString();\n }\n if (typeof value === \"number\") {\n if (!Number.isFinite(value) \|\| !Number.isInteger(value) \|\| value < 0) {\n throw new Error(`entityId must be a non-negative integer, got ${String(value)}`);\n }\n return value.toString();\n }\n // typeof value === \"string\"\n const trimmed = value.trim();\n if (trimmed.length === 0 \|\| !DECIMAL_UINT.test(trimmed)) {\n throw new Error(`entityId must be a decimal non-negative integer string, got \"${value}\"`);\n }\n return trimmed;\n}\n\n/\n Resolution targets accepted by the \"withdraw all\" helper. Either\n * pass the raw `entityId` (numeric Boson account id) or an EVM\n * `address` with an optional `role` discriminator for the case where\n * the address maps to both a seller and a buyer entity.\n /\nexport type WithdrawEntitySelector =\n \| { entityId: BigNumberish }\n \| { address: Address; role?: \"buyer\" \| \"seller\" };\n\n/* Arguments accepted by `signWithdrawFunds` (caller-resolved entity + token list). /\nexport interface SignWithdrawFundsArgs {\n entityId: BigNumberish;\n /* CAIP-2 network identifier (e.g. `\"eip155:8453\"`). /\n network: string;\n /* Boson Diamond address (the `escrowAddress` from the prior 402). /\n escrowAddress: Address;\n /* Token addresses to withdraw — must align by index with `tokenAmounts`. /\n tokenList: readonly Address[];\n /* Amounts to withdraw — must align by index with `tokenList`. /\n tokenAmounts: readonly BigNumberish[];\n}\n\n/* Arguments accepted by `signWithdrawAllAvailableFunds` — entity + network only. /\nexport type SignWithdrawAllAvailableFundsArgs = WithdrawEntitySelector & {\n /* CAIP-2 network identifier (e.g. `\"eip155:8453\"`). /\n network: string;\n /* Boson Diamond address. /\n escrowAddress: Address;\n};\n\n/* Wire-format result identical in shape to `SignedPostCommitAction`. /\nexport interface SignedWithdrawFunds {\n metaTx: BosonMetaTx;\n signedPayload: WireHex;\n /* Resolved `entityId` (echoed back for caller convenience when looked up by address). /\n entityId: string;\n /* Tokens included in the signature, in calldata order. /\n tokenList: readonly Address[];\n /* Amounts included in the signature, in calldata order. /\n tokenAmounts: readonly string[];\n}\n\nexport interface SignWithdrawDeps {\n buildCoreSdk: (network: string, escrowAddress: Address) => { coreSdk: CoreSDK; chainId: number };\n /* Returns the address that will sign the meta-tx — must match the configured signer. /\n getSignerAddress: () => Promise<Address>;\n}\n\ninterface SignedMetaTxShape {\n functionName: string;\n functionSignature: string;\n r: string;\n s: string;\n v: number;\n}\n\n/* Subset of `CoreSDK` used here — kept narrow so tests can stub easily. /\ninterface WithdrawCoreSdkLike {\n signMetaTxWithdrawFunds(args: {\n nonce: string;\n entityId: BigNumberish;\n tokenList: string[];\n tokenAmounts: BigNumberish[];\n }): Promise<SignedMetaTxShape>;\n getFunds(queryVars: { fundsFilter: { accountId: string } }): Promise<\n Array<{\n accountId: string;\n availableAmount: string;\n token: { address: string };\n }>\n >;\n getSellersByAddress(address: string): Promise<Array<{ id: string }>>;\n getBuyers(queryVars: { buyersFilter: { wallet: string } }): Promise<Array<{ id: string }>>;\n}\n\n/\n Sign a `withdrawFunds(entityId, tokenList, tokenAmounts)` meta-tx\n * against the configured Diamond domain. The caller supplies the\n * exact token + amount snapshot to commit to.\n /\nexport async function signWithdrawFunds(\n args: SignWithdrawFundsArgs,\n deps: SignWithdrawDeps,\n): Promise<SignedWithdrawFunds> {\n const normalised: SignWithdrawFundsArgs = {\n ...args,\n entityId: normalizeEntityId(args.entityId),\n };\n const { coreSdk } = deps.buildCoreSdk(normalised.network, normalised.escrowAddress);\n const from = await deps.getSignerAddress();\n return signWithdrawFundsInternal(normalised, coreSdk as unknown as WithdrawCoreSdkLike, from);\n}\n\n/\n \"Withdraw all\" sugar. Resolves the entity (by id or by address),\n * reads the funds entity from the subgraph, drops zero balances, and\n * signs `withdrawFunds(entityId, allTokens, allAmounts)`. Throws when\n * the entity has no available funds.\n /\nexport async function signWithdrawAllAvailableFunds(\n args: SignWithdrawAllAvailableFundsArgs,\n deps: SignWithdrawDeps,\n): Promise<SignedWithdrawFunds> {\n const { coreSdk } = deps.buildCoreSdk(args.network, args.escrowAddress);\n const sdk = coreSdk as unknown as WithdrawCoreSdkLike;\n const from = await deps.getSignerAddress();\n const entityId = await resolveEntityIdClientSide(sdk, args);\n const funds = await sdk.getFunds({ fundsFilter: { accountId: entityId } });\n const nonZero = funds.filter((f) => f.availableAmount !== \"0\" && BigInt(f.availableAmount) > 0n);\n if (nonZero.length === 0) {\n throw new Error(\n `signWithdrawAllAvailableFunds: entity ${entityId} has no available funds to withdraw`,\n );\n }\n return signWithdrawFundsInternal(\n {\n entityId,\n network: args.network,\n escrowAddress: args.escrowAddress,\n tokenList: nonZero.map((f) => f.token.address as Address),\n tokenAmounts: nonZero.map((f) => f.availableAmount),\n },\n sdk,\n from,\n );\n}\n\nasync function signWithdrawFundsInternal(\n args: SignWithdrawFundsArgs,\n coreSdk: WithdrawCoreSdkLike,\n from: Address,\n): Promise<SignedWithdrawFunds> {\n if (args.tokenList.length !== args.tokenAmounts.length) {\n throw new Error(\n `signWithdrawFunds: tokenList (${args.tokenList.length}) and tokenAmounts (${args.tokenAmounts.length}) must be the same length`,\n );\n }\n const nonce = randomUint256();\n const nonceStr = nonce.toString();\n const signed = await coreSdk.signMetaTxWithdrawFunds({\n nonce: nonceStr,\n entityId: args.entityId,\n tokenList: args.tokenList.map((t) => t),\n tokenAmounts: args.tokenAmounts.map((a) => a),\n });\n\n const metaTx: BosonMetaTx = {\n from,\n nonce: nonceStr,\n functionName: signed.functionName,\n functionSignature: signed.functionSignature as Hex,\n sig: {\n v: Number(signed.v),\n r: signed.r as Hex,\n s: signed.s as Hex,\n },\n };\n\n return {\n metaTx,\n signedPayload: encodeSignedPayload(metaTx),\n entityId: normalizeEntityId(args.entityId),\n tokenList: args.tokenList,\n tokenAmounts: args.tokenAmounts.map((a) => String(a)),\n };\n}\n\nasync function resolveEntityIdClientSide(\n coreSdk: WithdrawCoreSdkLike,\n selector: WithdrawEntitySelector,\n): Promise<string> {\n if (\"entityId\" in selector) return normalizeEntityId(selector.entityId);\n const address = selector.address.toLowerCase();\n const role = selector.role;\n const [sellers, buyers] = await Promise.all([\n role === \"buyer\"\n ? Promise.resolve<Array<{ id: string }>>([])\n : coreSdk.getSellersByAddress(address),\n role === \"seller\"\n ? Promise.resolve<Array<{ id: string }>>([])\n : coreSdk.getBuyers({ buyersFilter: { wallet: address } }),\n ]);\n const sellerIds = sellers.map((s) => s.id);\n const buyerIds = buyers.map((b) => b.id);\n\n if (role === \"seller\") {\n if (sellerIds.length === 0) {\n throw new Error(\n `signWithdrawAllAvailableFunds: no seller entity found for address ${address}`,\n );\n }\n if (sellerIds.length > 1) {\n throw new Error(\n `signWithdrawAllAvailableFunds: address ${address} resolves to multiple seller entities (ids ${sellerIds.join(\", \")}); pass entityId to disambiguate`,\n );\n }\n return sellerIds[0]!;\n }\n if (role === \"buyer\") {\n if (buyerIds.length === 0) {\n throw new Error(\n `signWithdrawAllAvailableFunds: no buyer entity found for address ${address}`,\n );\n }\n if (buyerIds.length > 1) {\n throw new Error(\n `signWithdrawAllAvailableFunds: address ${address} resolves to multiple buyer entities (ids ${buyerIds.join(\", \")}); pass entityId to disambiguate`,\n );\n }\n return buyerIds[0]!;\n }\n\n // role unspecified — exactly-one rule across both sides. Refuse to\n // guess when the address resolves to multiple sellers, multiple\n // buyers, or any combination of the two: the signed payload commits\n // to a single entityId, so silently picking `[0]` would be a bug\n // farm waiting to bite.\n const totalMatches = sellerIds.length + buyerIds.length;\n if (totalMatches === 0) {\n throw new Error(\n `signWithdrawAllAvailableFunds: no seller or buyer entity found for address ${address}`,\n );\n }\n if (totalMatches > 1) {\n throw new Error(\n `signWithdrawAllAvailableFunds: address ${address} resolves to ${describeClientMatches(sellerIds, buyerIds)}; pass role and/or entityId to disambiguate`,\n );\n }\n if (sellerIds.length === 1) return sellerIds[0]!;\n return buyerIds[0]!;\n}\n\nfunction describeClientMatches(sellerIds: string[], buyerIds: string[]): string {\n const parts: string[] = [];\n if (sellerIds.length > 0) {\n parts.push(\n sellerIds.length === 1\n ? `seller (id ${sellerIds[0]})`\n : `${sellerIds.length} sellers (ids ${sellerIds.join(\", \")})`,\n );\n }\n if (buyerIds.length > 0) {\n parts.push(\n buyerIds.length === 1\n ? `buyer (id ${buyerIds[0]})`\n : `${buyerIds.length} buyers (ids ${buyerIds.join(\", \")})`,\n );\n }\n return parts.join(\" and \");\n}\n","// Client-side deadline for token-auth signatures (ERC-3009 `validBefore`,\n// EIP-2612 `deadline`, Permit2 `deadline`).\n//\n// The facilitator validates strictly: `deadline − facilitatorNow ≤\n// requirements.maxTimeoutSeconds`. If the client signs at the boundary\n// (`floor(clientNow) + maxTimeoutSeconds`), any moment where the\n// verifier's wall-clock lags the signer's by ≥ 1 s pushes the gap\n// over `maxTimeoutSeconds` and the facilitator rejects with\n// BAD_TOKEN_AUTH_SIGNATURE. Docker Desktop's container clock drifting\n// behind the host clock makes this happen randomly in the e2e suite.\n//\n// We pull the deadline closer to `clientNow` by a small margin so the\n// facilitator's check tolerates that backward skew. 60 s comfortably\n// covers Docker drift and leaves a useful validity window even at the\n// spec's example `maxTimeoutSeconds = 300`.\n\nexport const TOKEN_AUTH_DEADLINE_SAFETY_MARGIN_SECONDS = 60;\n\nexport function computeTokenAuthDeadline(\n maxTimeoutSeconds: number,\n now: () => number = Date.now,\n): number {\n // Clamp so the margin can never make the deadline retroactive — if\n // the caller's `maxTimeoutSeconds < 60`, subtracting the full margin\n // would emit an already-expired signature.\n const timeoutSeconds = Math.max(1, Math.floor(maxTimeoutSeconds));\n const safetyMarginSeconds = Math.min(\n TOKEN_AUTH_DEADLINE_SAFETY_MARGIN_SECONDS,\n Math.max(0, timeoutSeconds - 1),\n );\n return Math.floor(now() / 1000) + timeoutSeconds - safetyMarginSeconds;\n}\n","// Build and sign the buyer's ERC-3009 `ReceiveWithAuthorization` for the\n// escrow contract via `CoreSDK.signReceiveWithErc3009Authorization`.\n//\n// The SDK generates a 32-byte random nonce internally, builds the EIP-712\n// typed-data against the token's domain (taken from `tokenDomainResolver`),\n// signs through the configured `Web3LibAdapter`, and returns a\n// `TransferAuthorization` with `{ strategy, data: { validAfter, validBefore,\n// nonce }, r, s, v, signature }`. We re-shape the result into the\n// `Erc3009AuthData` slot of the escrow payment payload.\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport type {\n Erc3009AuthData,\n EscrowPaymentRequirements,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { Address, Hex } from \"viem\";\n\nimport { parseChainId } from \"../core-sdk-factory.js\";\nimport type { TokenDomainResolver } from \"../types.js\";\n\nimport { computeTokenAuthDeadline } from \"./deadline.js\";\n\nexport interface SignErc3009Args {\n requirements: EscrowPaymentRequirements;\n buyer: Address;\n coreSdk: CoreSDK;\n tokenDomainResolver: TokenDomainResolver;\n /* Override the wall-clock; injected by tests for determinism. Defaults to `Date.now()`. /\n now?: () => number;\n}\n\n/\n Build the ERC-3009 typed-data, sign it via core-sdk, and shape the result\n * into the `Erc3009AuthData` slot of the escrow payment payload.\n /\nexport async function signErc3009({\n requirements,\n buyer,\n coreSdk,\n tokenDomainResolver,\n now = Date.now,\n}: SignErc3009Args): Promise<Erc3009AuthData> {\n const chainId = parseChainId(requirements.network);\n const domain = await tokenDomainResolver(requirements.asset as Address, chainId);\n\n const validAfter = 0;\n const validBefore = computeTokenAuthDeadline(requirements.maxTimeoutSeconds, now);\n\n const result = await coreSdk.signReceiveWithErc3009Authorization(\n requirements.asset,\n { name: domain.name, version: domain.version },\n requirements.amount,\n validAfter,\n validBefore,\n { spender: requirements.escrowAddress as `0x${string}` },\n );\n\n return {\n from: buyer,\n to: requirements.escrowAddress,\n value: requirements.amount,\n validAfter: Number(result.data.validAfter),\n validBefore: Number(result.data.validBefore),\n nonce: result.data.nonce as Hex,\n v: result.v,\n r: result.r as Hex,\n s: result.s as Hex,\n };\n}\n","// Build and sign the buyer's EIP-2612 `Permit` for the escrow contract via\n// `CoreSDK.signReceiveWithErc2612Permit`.\n//\n// The SDK fetches the token's `nonces(owner)` via `web3Lib.call(...)` before\n// signing — that path requires the client's `signerToWeb3LibAdapter` to have\n// been built with a configured `PublicClient`. Without one, the underlying\n// `eth_call` rejects with a clear \"no PublicClient configured\" error,\n// surfaced to the caller as a sign-time failure.\n//\n// The SDK returns `{ strategy: \"EIP2612\", data: { deadline }, r, s, v,\n// signature }` — note that the nonce is not* part of `data`. The wire\n// format `PermitAuthData` carries the nonce because the facilitator's\n// verification path needs it to rebuild the digest the buyer signed (the\n// on-chain `permit()` call refetches the current nonce, but the signature\n// is locked to the value at sign time). We recover it from the SDK's\n// signed typed-data by paying a second on-chain read of `nonces(owner)`;\n// in practice the value the SDK signed against is the one we observe\n// (only an interleaved successful `permit()` between sign and read would\n// shift it, which would then have invalidated the signature anyway).\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport type {\n EscrowPaymentRequirements,\n PermitAuthData,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport {\n encodeFunctionData,\n decodeFunctionResult,\n type Address,\n type Hex,\n type PublicClient,\n} from \"viem\";\n\nimport { parseChainId } from \"../core-sdk-factory.js\";\nimport { UnsupportedTokenAuthError } from \"../errors.js\";\nimport type { TokenDomainResolver } from \"../types.js\";\n\nimport { computeTokenAuthDeadline } from \"./deadline.js\";\n\nconst NONCES_ABI = [\n {\n type: \"function\",\n name: \"nonces\",\n stateMutability: \"view\",\n inputs: [{ name: \"owner\", type: \"address\" }],\n outputs: [{ type: \"uint256\" }],\n },\n] as const;\n\nexport interface SignPermitArgs {\n requirements: EscrowPaymentRequirements;\n buyer: Address;\n coreSdk: CoreSDK;\n tokenDomainResolver: TokenDomainResolver;\n /** PublicClient for the chain — required to recover the nonce that the SDK signed against. /\n publicClient: PublicClient;\n /* Override the wall-clock; injected by tests for determinism. Defaults to `Date.now()`. /\n now?: () => number;\n}\n\n/\n Build the EIP-2612 Permit typed-data, sign it via core-sdk, look up the\n * token nonce the SDK signed against, and shape the result into the\n * `PermitAuthData` slot of the escrow payment payload.\n /\nexport async function signPermit({\n requirements,\n buyer,\n coreSdk,\n tokenDomainResolver,\n publicClient,\n now = Date.now,\n}: SignPermitArgs): Promise<PermitAuthData> {\n const chainId = parseChainId(requirements.network);\n const domain = await tokenDomainResolver(requirements.asset as Address, chainId);\n\n const noncePreSign = await readNonce(publicClient, requirements.asset as Address, buyer);\n const deadline = computeTokenAuthDeadline(requirements.maxTimeoutSeconds, now);\n\n const result = await coreSdk.signReceiveWithErc2612Permit(\n requirements.asset,\n { name: domain.name, version: domain.version },\n requirements.amount,\n deadline,\n { spender: requirements.escrowAddress as `0x${string}` },\n );\n\n const noncePostSign = await readNonce(publicClient, requirements.asset as Address, buyer);\n if (noncePreSign !== noncePostSign) {\n // A successful `permit()` for this owner landed on-chain between our\n // two reads, which means the SDK signed against either nonce. We can't\n // tell which without re-signing, so fail loudly.\n throw new UnsupportedTokenAuthError(\n `x402-client: token nonce shifted during permit signing (was ${noncePreSign}, now ${noncePostSign}); retry`,\n );\n }\n\n return {\n owner: buyer,\n spender: requirements.escrowAddress,\n value: requirements.amount,\n deadline,\n nonce: noncePreSign.toString(),\n v: result.v,\n r: result.r as Hex,\n s: result.s as Hex,\n };\n}\n\nasync function readNonce(\n publicClient: PublicClient,\n token: Address,\n owner: Address,\n): Promise<bigint> {\n const result = await publicClient.call({\n to: token as `0x${string}`,\n data: encodeFunctionData({\n abi: NONCES_ABI,\n functionName: \"nonces\",\n args: [owner as `0x${string}`],\n }),\n });\n if (!result.data) {\n throw new UnsupportedTokenAuthError(\n `x402-client: token ${token} did not return data for nonces(${owner}) — does it implement EIP-2612?`,\n );\n }\n return decodeFunctionResult({\n abi: NONCES_ABI,\n functionName: \"nonces\",\n data: result.data,\n });\n}\n","// Build and sign the buyer's Uniswap Permit2 `PermitTransferFrom` for the\n// escrow contract via `CoreSDK.signReceiveWithPermit2`.\n//\n// The SDK accepts an optional `permit2Nonce` override; if omitted it\n// generates a random uint256. We pass one explicitly via `randomUint256()`\n// so tests can stub the RNG and so the value never depends on the SDK's\n// internal nonce-generation surface. The Permit2 contract address comes\n// from the wire-format `requirements.onchainHints?.permit2` when present,\n// or falls back to the canonical CREATE2 vanity address re-exported from\n// `@bosonprotocol/x402-core/eip712/token-auth`.\n//\n// Result shape from core-sdk:\n// { strategy: \"Permit2\", data: { nonce, deadline }, r, s, v, signature }\n// — we lift it into the wire-format `Permit2AuthData`.\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport { PERMIT2_ADDRESS } from \"@bosonprotocol/x402-core/eip712/token-auth\";\nimport type {\n EscrowPaymentRequirements,\n Permit2AuthData,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { Address, Hex } from \"viem\";\n\nimport { randomUint256 } from \"../utils/crypto.js\";\n\nimport { computeTokenAuthDeadline } from \"./deadline.js\";\n\nexport interface SignPermit2Args {\n requirements: EscrowPaymentRequirements;\n buyer: Address;\n coreSdk: CoreSDK;\n /* Override the wall-clock; injected by tests for determinism. Defaults to `Date.now()`. /\n now?: () => number;\n}\n\n/\n Build the Permit2 `PermitTransferFrom` typed-data, sign it via core-sdk,\n * and shape the result into the `Permit2AuthData` slot of the escrow\n * payment payload.\n /\nexport async function signPermit2({\n requirements,\n buyer,\n coreSdk,\n now = Date.now,\n}: SignPermit2Args): Promise<Permit2AuthData> {\n const deadline = computeTokenAuthDeadline(requirements.maxTimeoutSeconds, now);\n const permit2Nonce = randomUint256();\n\n // `buyer` is exposed in the call site for symmetry with the other\n // strategies and to keep the function signature stable as we add\n // explicit-`user` overrides. Today the SDK derives `user` internally\n // from `coreSdk._web3Lib.getSignerAddress()`, which we route through the\n // configured `signer.getAddress()` in `signerToWeb3LibAdapter`.\n void buyer;\n\n const result = await coreSdk.signReceiveWithPermit2(\n requirements.asset,\n requirements.amount,\n deadline,\n {\n spender: requirements.escrowAddress as `0x${string}`,\n permit2Address: PERMIT2_ADDRESS,\n permit2Nonce,\n },\n );\n\n return {\n permitted: { token: requirements.asset, amount: requirements.amount },\n spender: requirements.escrowAddress,\n nonce: permit2Nonce.toString(),\n deadline,\n signature: result.signature as Hex,\n };\n}\n","// Token-authorization strategy dispatcher.\n//\n// Picks one of the buyer-side strategies (`erc3009`, `permit`, `permit2`)\n// from `requirements.tokenAuthStrategies`, signs the corresponding payload\n// via `CoreSDK`, and returns the wire-format `BosonTokenAuth` slot. The\n// `none` strategy is encoded by the absence of `tokenAuth` on the payload\n// — callers handle it outside this module.\n//\n// Preference order when the server advertises multiple strategies:\n// `erc3009` → `permit2` → `permit`. ERC-3009 is preferred for tokens that\n// support it (USDC, USDP, EUROC, etc.) because the receive-variant\n// eliminates relayer front-running. Permit2 is preferred over Permit for\n// tokens behind the canonical Permit2 contract because it carries a\n// caller-controllable nonce. Permit is the fallback.\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport type {\n BosonTokenAuth,\n EscrowPaymentRequirements,\n TokenAuthStrategy,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { Address, PublicClient } from \"viem\";\n\nimport { UnsupportedTokenAuthError } from \"../errors.js\";\nimport type { TokenDomainResolver } from \"../types.js\";\n\nimport { signErc3009 } from \"./erc3009.js\";\nimport { signPermit } from \"./permit.js\";\nimport { signPermit2 } from \"./permit2.js\";\n\nexport interface BuildTokenAuthArgs {\n requirements: EscrowPaymentRequirements;\n buyer: Address;\n coreSdk: CoreSDK;\n /* Required for ERC-3009 and EIP-2612 Permit; not used by Permit2. /\n tokenDomainResolver?: TokenDomainResolver;\n /* Optional PublicClient for the requirements' chain. Required for Permit. /\n publicClient?: PublicClient;\n now?: () => number;\n}\n\nexport interface BuiltTokenAuth {\n strategy: TokenAuthStrategy;\n tokenAuth: BosonTokenAuth;\n}\n\nconst STRATEGY_PREFERENCE: readonly TokenAuthStrategy[] = [\"erc3009\", \"permit2\", \"permit\"];\n\nfunction strategyIsAvailable(s: TokenAuthStrategy, args: BuildTokenAuthArgs): boolean {\n switch (s) {\n case \"erc3009\":\n return args.tokenDomainResolver !== undefined;\n case \"permit\":\n return args.tokenDomainResolver !== undefined && args.publicClient !== undefined;\n case \"permit2\":\n return true;\n case \"none\":\n return false;\n default: {\n const _exhaustive: never = s;\n void _exhaustive;\n return false;\n }\n }\n}\n\n/\n Pick the highest-preference strategy from `requirements.tokenAuthStrategies`,\n * sign the corresponding payload via core-sdk, and return the wire-format\n * `BosonTokenAuth` slot.\n \n The picker is capability-aware: a strategy is only chosen when the runtime\n * config has the prerequisites for it (e.g. `tokenDomainResolver` for\n * ERC-3009, both `tokenDomainResolver` and `publicClient` for Permit). This\n * lets a deployment without `tokenDomainResolver` still satisfy servers that\n * advertise `[\"erc3009\", \"permit2\"]` by falling back to Permit2.\n /\nexport async function buildAndSignTokenAuth(args: BuildTokenAuthArgs): Promise<BuiltTokenAuth> {\n const advertised = args.requirements.tokenAuthStrategies;\n const chosen = STRATEGY_PREFERENCE.find(\n (s) => advertised.includes(s) && strategyIsAvailable(s, args),\n );\n if (!chosen) {\n throw new UnsupportedTokenAuthError(\n `server advertises tokenAuthStrategies=[${advertised.join(\", \")}]; ` +\n `client supports [${STRATEGY_PREFERENCE.join(\", \")}] but none are usable ` +\n `with the current X402bClientConfig ` +\n `(ERC-3009 and Permit require tokenDomainResolver; Permit also requires ` +\n `a PublicClient for the requirements' chain via publicClients)`,\n );\n }\n\n switch (chosen) {\n case \"erc3009\": {\n if (!args.tokenDomainResolver) {\n throw new UnsupportedTokenAuthError(\n \"server advertises 'erc3009' but no tokenDomainResolver is configured — pass tokenDomainResolver in X402bClientConfig\",\n );\n }\n const data = await signErc3009({\n ...args,\n tokenDomainResolver: args.tokenDomainResolver,\n });\n return { strategy: \"erc3009\", tokenAuth: { kind: \"erc3009\", data } };\n }\n case \"permit\": {\n if (!args.tokenDomainResolver) {\n throw new UnsupportedTokenAuthError(\n \"server advertises 'permit' but no tokenDomainResolver is configured — pass tokenDomainResolver in X402bClientConfig\",\n );\n }\n if (!args.publicClient) {\n throw new UnsupportedTokenAuthError(\n \"server advertises 'permit' but no PublicClient is configured for this chain — pass publicClients in X402bClientConfig\",\n );\n }\n const data = await signPermit({\n ...args,\n tokenDomainResolver: args.tokenDomainResolver,\n publicClient: args.publicClient,\n });\n return { strategy: \"permit\", tokenAuth: { kind: \"permit\", data } };\n }\n case \"permit2\": {\n const data = await signPermit2(args);\n return { strategy: \"permit2\", tokenAuth: { kind: \"permit2\", data } };\n }\n case \"none\": {\n // Should never reach: `STRATEGY_PREFERENCE` doesn't include \"none\",\n // so a server advertising only \"none\" falls through to the error\n // above. Keep the case for exhaustiveness against\n // `TokenAuthStrategy`.\n throw new UnsupportedTokenAuthError(\n \"tokenAuthStrategy='none' has no client-side signing — callers handle it without invoking this dispatcher\",\n );\n }\n default: {\n const _exhaustive: never = chosen;\n throw new UnsupportedTokenAuthError(\n `unrecognised tokenAuthStrategy '${(_exhaustive as { toString(): string }).toString()}'`,\n );\n }\n }\n}\n","// Top-level `createX402bClient` factory.\n//\n// Wires the action picker, token-auth strategy dispatcher, meta-tx signer\n// (via `CoreSDK`), fulfillment resolver, and payload assembler into:\n//\n// - `handle402(requirements)` — commit-time flow that emits the base64\n// `X-PAYMENT` value for the 402 retry.\n// - `signAction(args)` — post-commit flow that signs one of the buyer's\n// follow-up meta-transactions (redeem / cancel / complete / dispute\n// family). No token-auth or X-PAYMENT wrapping; the caller picks a\n// channel and POSTs the wire envelope.\n\nimport {\n parseEscrowPaymentRequirements,\n type EscrowPaymentRequirements,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { Address } from \"viem\";\n\nimport { pickAction } from \"./action.js\";\nimport { createCoreSdkFactory } from \"./core-sdk-factory.js\";\nimport { resolveFulfillment } from \"./fulfillment.js\";\nimport { assembleAndEncodePayload } from \"./payload.js\";\nimport { signCreateOfferAndCommit, signCreateOfferCommitAndRedeem } from \"./pre-commit.js\";\nimport {\n signPostCommitAction,\n type SignActionArgs,\n type SignedPostCommitAction,\n} from \"./post-commit.js\";\nimport { parsePaymentResponse } from \"./response.js\";\nimport {\n signWithdrawAllAvailableFunds,\n signWithdrawFunds,\n type SignWithdrawAllAvailableFundsArgs,\n type SignWithdrawFundsArgs,\n type SignedWithdrawFunds,\n} from \"./withdraw.js\";\nimport { buildAndSignTokenAuth } from \"./token-auth/index.js\";\nimport { MaxAmountExceededError, UnsupportedTokenAuthError } from \"./errors.js\";\nimport type { ExchangeSummary, X402bClientConfig } from \"./types.js\";\n\nexport interface X402bClient {\n /\n Consume a parsed escrow PaymentRequirements and return the base64\n * value to set as the `X-PAYMENT` header on the retry.\n /\n handle402(requirements: unknown): Promise<string>;\n\n /\n Sign a Boson protocol meta-transaction for a buyer-driven post-commit\n * action (redeem, cancel, complete, dispute family). Returns both the\n * wire-format `BosonMetaTx` envelope and the ABI-encoded `signedPayload`\n * Hex — pick the shape that matches the chosen channel. Server /\n * facilitator HTTP routes consume `signedPayload` directly (e.g. as\n * the `signedPayload` field on the JSON POST body to the endpoint the\n * prior response advertised under `actions.next[].endpoints.server`);\n * on-chain and MCP channels use the `metaTx` object.\n \n Note: `boson-escalateDispute` signs only the meta-tx. If the dispute\n * resolver requires an escalation deposit, the resolver/server returns\n * its own 402 with an `escrow` `PaymentRequirements` and the buyer pairs\n * this meta-tx with a token-auth payload — the deposit wrapper is out\n * of MVP.\n /\n signAction(args: SignActionArgs): Promise<SignedPostCommitAction>;\n\n /\n Sign a `withdrawFunds(entityId, tokenList, tokenAmounts)` meta-tx.\n * Caller-resolved entity + tokens snapshot — see\n * `signWithdrawAllAvailableFunds` for the read-from-subgraph \"withdraw\n * everything\" sugar.\n /\n signWithdrawFunds(args: SignWithdrawFundsArgs): Promise<SignedWithdrawFunds>;\n\n /\n Read available funds for the given entity from the subgraph and\n * sign a meta-tx withdrawing the entire current balance set. Accepts\n * either an `entityId` directly or an `address` (with optional\n * `role` for ambiguous wallets).\n /\n signWithdrawAllAvailableFunds(\n args: SignWithdrawAllAvailableFundsArgs,\n ): Promise<SignedWithdrawFunds>;\n\n /\n Best-effort decode of `X-PAYMENT-RESPONSE` after a successful retry.\n * Returns `undefined` when the header isn't present.\n /\n parsePaymentResponse(response: {\n headers: { get(name: string): string \| null };\n }): ExchangeSummary \| undefined;\n}\n\n/\n Build a stateless client bound to a buyer signer + policy. The\n * underlying `CoreSDK` is built lazily per `(chainId, escrowAddress)` and\n * cached across calls — both `handle402` and `signAction` reuse it.\n /\nexport function createX402bClient(config: X402bClientConfig): X402bClient {\n const buildCoreSdk = createCoreSdkFactory(config.signer, config);\n\n const getBuyerAddress = async () => (await config.signer.getAddress()) as Address;\n\n return {\n async handle402(rawRequirements) {\n const requirements: EscrowPaymentRequirements =\n parseEscrowPaymentRequirements(rawRequirements);\n\n const action = pickAction(requirements, config.policy);\n const fulfillment = resolveFulfillment(requirements, config);\n enforceMaxAmount(requirements.amount, config.policy?.maxAmount);\n const buyer = await getBuyerAddress();\n\n const { coreSdk, chainId } = buildCoreSdk(\n requirements.network,\n requirements.escrowAddress as Address,\n );\n\n // `policy.tokenAuthStrategy` forces a specific strategy from the\n // server's advertised set instead of letting the dispatcher pick\n // by preference. The forced value must be in\n // `requirements.tokenAuthStrategies`; otherwise the override is\n // rejected. `\"none\"` short-circuits the dispatcher entirely (the\n // buyer has approved the escrow off-band and the payment rides\n // the protocol's `safeTransferFrom` fallback); for the other\n // strategies the dispatcher is invoked with the advertised set\n // narrowed to a single element so it must pick the requested one.\n let tokenAuth: Awaited<ReturnType<typeof buildAndSignTokenAuth>>[\"tokenAuth\"] \| undefined;\n let strategy: Awaited<ReturnType<typeof buildAndSignTokenAuth>>[\"strategy\"];\n const forcedStrategy = config.policy?.tokenAuthStrategy;\n if (forcedStrategy !== undefined) {\n if (!requirements.tokenAuthStrategies.includes(forcedStrategy)) {\n throw new UnsupportedTokenAuthError(\n `policy.tokenAuthStrategy \"${forcedStrategy}\" is not in requirements.tokenAuthStrategies (${requirements.tokenAuthStrategies.join(\", \")})`,\n );\n }\n if (forcedStrategy === \"none\") {\n strategy = \"none\";\n tokenAuth = undefined;\n } else {\n const built = await buildAndSignTokenAuth({\n requirements: { ...requirements, tokenAuthStrategies: [forcedStrategy] },\n buyer,\n coreSdk,\n tokenDomainResolver: config.tokenDomainResolver,\n publicClient: config.publicClients?.[chainId],\n });\n strategy = built.strategy;\n tokenAuth = built.tokenAuth;\n }\n } else {\n const built = await buildAndSignTokenAuth({\n requirements,\n buyer,\n coreSdk,\n tokenDomainResolver: config.tokenDomainResolver,\n publicClient: config.publicClients?.[chainId],\n });\n strategy = built.strategy;\n tokenAuth = built.tokenAuth;\n }\n\n // Flow B (boson-createOfferCommitAndRedeem) carries the buyer's\n // delivery data along with the commit-time payload — there's no\n // later round trip in which to attach it. Flow A defers `data` to\n // the redeem-time POST body; `assemblePayload` handles the\n // conditional emission based on `action`.\n const signMetaTx =\n action === \"boson-createOfferCommitAndRedeem\"\n ? signCreateOfferCommitAndRedeem\n : signCreateOfferAndCommit;\n const metaTx = await signMetaTx({ requirements, coreSdk, buyer });\n\n return assembleAndEncodePayload({\n requirements,\n action,\n tokenAuthStrategy: strategy,\n metaTx,\n tokenAuth,\n fulfillment,\n buyer,\n });\n },\n\n signAction(args) {\n return signPostCommitAction(args, { buildCoreSdk, getBuyerAddress });\n },\n\n signWithdrawFunds(args) {\n return signWithdrawFunds(args, { buildCoreSdk, getSignerAddress: getBuyerAddress });\n },\n\n signWithdrawAllAvailableFunds(args) {\n return signWithdrawAllAvailableFunds(args, {\n buildCoreSdk,\n getSignerAddress: getBuyerAddress,\n });\n },\n\n parsePaymentResponse(response) {\n return parsePaymentResponse(response);\n },\n };\n}\n\nfunction enforceMaxAmount(amount: string, maxAmount?: string): void {\n if (maxAmount === undefined) {\n return;\n }\n\n const amountBigInt = BigInt(amount);\n const maxAmountBigInt = BigInt(maxAmount);\n if (amountBigInt > maxAmountBigInt) {\n throw new MaxAmountExceededError(\n `x402-client: requirements.amount ${amount} exceeds policy.maxAmount ${maxAmount}`,\n );\n }\n}\n","// Translator that wraps a Boson `Web3LibAdapter` (e.g. an `EthersAdapter`\n// from `@bosonprotocol/ethers-sdk`) as an x402-client `Signer`. The point\n// is to let consumers who already hold an adapter for the deployed Boson\n// protocol reuse it with `createX402bClient` without writing the shim\n// themselves — and without forcing this package to take `ethers` (or\n// `@bosonprotocol/common`) as a peer dep.\n//\n// Structural typing keeps the coupling minimal: `Web3LibAdapterLike` picks\n// only the two methods we actually invoke. The consumer's own `ethers` /\n// `@bosonprotocol/ethers-sdk` install carries the full types — an\n// `EthersAdapter` instance satisfies `Web3LibAdapterLike` by shape.\n//\n// Note on `EIP712Domain` injection: `eth_signTypedData_v4` (and the\n// `EthersAdapter` JSON path) expects `types.EIP712Domain` to be present\n// and to match exactly the fields populated on `domain`. We derive it\n// from `domain`'s field presence — the same rule viem applies internally\n// in `getTypesForEIP712Domain`.\n\nimport {\n getAddress,\n serializeTypedData,\n type Address,\n type Hex,\n type TypedDataDomain,\n type TypedDataDefinition,\n type TypedDataParameter,\n} from \"viem\";\n\nimport type { Signer } from \"./types.js\";\n\n/\n Structural subset of `@bosonprotocol/common`'s `Web3LibAdapter` that\n * {@link signerFromEthersAdapter} actually exercises. An `EthersAdapter`\n * from `@bosonprotocol/ethers-sdk` (or any future concrete adapter)\n * satisfies this shape without an explicit cast.\n /\nexport interface Web3LibAdapterLike {\n getSignerAddress(): Promise<string>;\n send(method: string, params: readonly unknown[]): Promise<unknown>;\n}\n\n/\n Wrap a Boson `Web3LibAdapter`-shaped object as an x402-client\n * {@link Signer}. `signTypedData` builds the standard\n * `eth_signTypedData_v4` JSON payload (including a derived\n * `EIP712Domain` type list) and routes it through `adapter.send`.\n /\nexport function signerFromEthersAdapter(adapter: Web3LibAdapterLike): Signer {\n const resolveAddress = async (): Promise<Address> => getAddress(await adapter.getSignerAddress());\n return {\n getAddress: resolveAddress,\n signTypedData: async ({ domain, types, primaryType, message }) => {\n const from = await resolveAddress();\n const typedData = {\n domain,\n types: { ...types, EIP712Domain: deriveEip712DomainType(domain) },\n primaryType,\n message,\n };\n const json = serializeTypedData(typedData as unknown as TypedDataDefinition);\n const sig = await adapter.send(\"eth_signTypedData_v4\", [from, json]);\n if (typeof sig !== \"string\" \|\| !/^0x[0-9a-fA-F]+$/.test(sig)) {\n throw new Error(\n \"signerFromEthersAdapter: adapter.send did not return a hex signature string\",\n );\n }\n return sig as Hex;\n },\n };\n}\n\n/\n Build the `EIP712Domain` type-list from the fields actually present on\n * `domain`, in the canonical EIP-712 order (`name`, `version`, `chainId`,\n * `verifyingContract`, `salt`). Matches viem's internal derivation so the\n * resulting digest agrees with what a viem signer would produce.\n */\nfunction deriveEip712DomainType(domain: TypedDataDomain): readonly TypedDataParameter[] {\n const fields: TypedDataParameter[] = [];\n if (domain.name !== undefined) fields.push({ name: \"name\", type: \"string\" });\n if (domain.version !== undefined) fields.push({ name: \"version\", type: \"string\" });\n if (domain.chainId !== undefined) fields.push({ name: \"chainId\", type: \"uint256\" });\n if (domain.verifyingContract !== undefined)\n fields.push({ name: \"verifyingContract\", type: \"address\" });\n if (domain.salt !== undefined) fields.push({ name: \"salt\", type: \"bytes32\" });\n return fields;\n}\n"]}
1	+ {"version":3,"sources":["../../src/errors.ts","../../src/action.ts","../../src/base64.ts","../../src/fulfillment.ts","../../src/internal/web3lib-adapter.ts","../../src/core-sdk-factory.ts","../../src/response.ts","../../src/payload.ts","../../src/utils/crypto.ts","../../src/pre-commit.ts","../../src/post-commit.ts","../../src/submit.ts","../../src/withdraw.ts","../../src/token-auth/deadline.ts","../../src/token-auth/erc3009.ts","../../src/token-auth/permit.ts","../../src/token-auth/permit2.ts","../../src/token-auth/index.ts","../../src/client.ts","../../src/signer-from-adapter.ts"],"names":["Ajv","coreSdk","CoreSDK","parseEscrowPaymentPayload","encodeSignedPayload","ExchangeState","DisputeState","DECIMAL_UINT","encodeFunctionData","decodeFunctionResult","PERMIT2_ADDRESS","parseEscrowPaymentRequirements","getAddress","serializeTypedData"],"mappings":";;;;;;;;;;;;;;;AAIO,IAAM,sBAAA,GAAN,cAAqC,KAAA,CAAM;AAAA,EAChD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AAAA,EACd;AACF;AAEO,IAAM,yBAAA,GAAN,cAAwC,KAAA,CAAM;AAAA,EACnD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,2BAAA;AAAA,EACd;AACF;AAEO,IAAM,uBAAA,GAAN,cAAsC,KAAA,CAAM;AAAA,EACjD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AAAA,EACd;AACF;AAEO,IAAM,0BAAA,GAAN,cAAyC,KAAA,CAAM;AAAA,EACpD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,4BAAA;AAAA,EACd;AACF;AAEO,IAAM,sBAAA,GAAN,cAAqC,KAAA,CAAM;AAAA,EAChD,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AAAA,EACd;AACF;;;ACZA,IAAM,MAAA,GAA8B,4BAAA;AACpC,IAAM,MAAA,GAA8B,kCAAA;AAO7B,SAAS,UAAA,CACd,cACA,MAAA,EACqB;AACrB,EAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,MAAA;AAEzC,EAAA,MAAM,YAAA,GAAe,YAAA,CAAa,OAAA,CAAQ,IAAA,CAAK,IAAA;AAAA,IAC7C,CAAC,MAAM,CAAA,CAAE,EAAA,KAAO,UAAU,CAAA,CAAE,QAAA,CAAS,SAAS,QAAQ;AAAA,GACxD;AACA,EAAA,MAAM,YAAA,GAAe,YAAA,CAAa,OAAA,CAAQ,IAAA,CAAK,IAAA;AAAA,IAC7C,CAAC,MAAM,CAAA,CAAE,EAAA,KAAO,UAAU,CAAA,CAAE,QAAA,CAAS,SAAS,QAAQ;AAAA,GACxD;AAEA,EAAA,IAAI,eAAe,mBAAA,EAAqB;AACtC,IAAA,IAAI,cAAc,OAAO,MAAA;AACzB,IAAA,MAAM,IAAI,uBAAA;AAAA,MACR,CAAA,gDAAA,EAAmD,MAAM,CAAA,sDAAA,EAAyD,YAAA,CAAa,QAAQ,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KACzK;AAAA,EACF;AAEA,EAAA,IAAI,eAAe,aAAA,EAAe;AAChC,IAAA,IAAI,cAAc,OAAO,MAAA;AACzB,IAAA,MAAM,IAAI,uBAAA;AAAA,MACR,CAAA,0CAAA,EAA6C,MAAM,CAAA,sDAAA,EAAyD,YAAA,CAAa,QAAQ,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KACnK;AAAA,EACF;AAGA,EAAA,IAAI,cAAc,OAAO,MAAA;AACzB,EAAA,IAAI,cAAc,OAAO,MAAA;AAEzB,EAAA,MAAM,IAAI,uBAAA;AAAA,IACR,CAAA,wBAAA,EAA2B,MAAM,CAAA,MAAA,EAAS,MAAM,CAAA,2DAAA;AAAA,GAClD;AACF;;;ACxDO,SAAS,aAAa,KAAA,EAAuB;AAClD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,OAAO,IAAA,CAAK,KAAA,EAAO,QAAQ,CAAA,CAAE,SAAS,MAAM,CAAA;AAAA,EACrD;AACA,EAAA,MAAM,MAAA,GAAS,KAAK,KAAK,CAAA;AACzB,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA;AAC1C,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,QAAQ,CAAA,EAAA,EAAK;AACtC,IAAA,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA,CAAO,UAAA,CAAW,CAAC,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,KAAK,CAAA;AACvC;AAGO,SAAS,aAAa,KAAA,EAAuB;AAClD,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,OAAO,IAAA,CAAK,KAAA,EAAO,MAAM,CAAA,CAAE,SAAS,QAAQ,CAAA;AAAA,EACrD;AACA,EAAA,MAAM,KAAA,GAAQ,IAAI,WAAA,EAAY,CAAE,OAAO,KAAK,CAAA;AAC5C,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,KAAA,MAAW,KAAK,KAAA,EAAO;AACrB,IAAA,MAAA,IAAU,MAAA,CAAO,aAAa,CAAC,CAAA;AAAA,EACjC;AACA,EAAA,OAAO,KAAK,MAAM,CAAA;AACpB;ACOO,SAAS,kBAAA,CACd,cACA,MAAA,EACiC;AACjC,EAAA,MAAM,QAAA,GAAW,YAAA,CAAa,WAAA,EAAa,QAAA,IAAY,KAAA;AACvD,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,MAAM,oBAAmD,MAAA,CAAO,WAAA;AAChE,EAAA,IAAI,CAAC,iBAAA,EAAmB;AACtB,IAAA,MAAM,IAAI,0BAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,YAAA,CAAa,WAAA,EAAa,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,iBAAA,CAAkB,MAAM,CAAA;AAC9F,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,UAAA,GAAa,YAAA,CAAa,WAAA,EAAa,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA,IAAK,QAAA;AACpF,IAAA,MAAM,IAAI,0BAAA;AAAA,MACR,CAAA,oBAAA,EAAuB,iBAAA,CAAkB,MAAM,CAAA,8CAAA,EAAiD,UAAU,CAAA,CAAA;AAAA,KAC5G;AAAA,EACF;AAEA,EAAA,IAAI,MAAA,CAAO,WAAW,IAAA,EAAM;AAC1B,IAAA,IAAI,iBAAA,CAAkB,SAAS,IAAA,EAAM;AACnC,MAAA,MAAM,IAAI,0BAAA;AAAA,QACR,CAAA,oBAAA,EAAuB,OAAO,EAAE,CAAA,iCAAA;AAAA,OAClC;AAAA,IACF;AAAA,EACF,CAAA,MAAO;AACL,IAAA,MAAM,GAAA,GAAM,IAAIA,oBAAA,CAAI,EAAE,WAAW,IAAA,EAAM,MAAA,EAAQ,OAAO,CAAA;AACtD,IAAA,MAAM,QAAA,GAAW,GAAA,CAAI,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA;AAC1C,IAAA,MAAM,EAAA,GAAK,QAAA,CAAS,iBAAA,CAAkB,IAAI,CAAA;AAC1C,IAAA,IAAI,CAAC,EAAA,EAAI;AACP,MAAA,MAAM,IAAI,0BAAA;AAAA,QACR,CAAA,wCAAA,EAA2C,OAAO,EAAE,CAAA,UAAA,EAAa,IAAI,UAAA,CAAW,QAAA,CAAS,MAAM,CAAC,CAAA;AAAA,OAClG;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,iBAAA,CAAkB,MAAA,EAAQ,IAAA,EAAM,kBAAkB,IAAA,EAAK;AAC1E;;;ACtDO,SAAS,sBAAA,CACd,MAAA,EACA,OAAA,EACA,YAAA,EACgB;AAChB,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,4BAAA;AAAA,IACN,gBAAA,EAAkB,MAAM,MAAA,CAAO,UAAA,EAAW;AAAA,IAC1C,kBAAkB,YAAY,KAAA;AAAA,IAC9B,YAAY,YAAY,OAAA;AAAA,IACxB,IAAA,EAAM,OAAO,MAAA,EAAQ,MAAA,KAAW;AAC9B,MAAA,IAAI,WAAW,sBAAA,EAAwB;AACrC,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,4DAA4D,MAAM,CAAA,2CAAA;AAAA,SACpE;AAAA,MACF;AACA,MAAA,MAAM,GAAA,GAAO,OAAqB,CAAC,CAAA;AACnC,MAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC3B,QAAA,MAAM,IAAI,KAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAMhC,MAAA,OAAO,MAAA,CAAO,cAAc,SAAS,CAAA;AAAA,IACvC,CAAA;AAAA,IACA,IAAA,EAAM,OAAO,GAAA,KAAQ;AACnB,MAAA,IAAI,CAAC,YAAA,EAAc;AACjB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR;AAAA,SAEF;AAAA,MACF;AACA,MAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,IAAA,CAAK;AAAA,QACrC,IAAI,GAAA,CAAI,EAAA;AAAA,QACR,MAAM,GAAA,CAAI;AAAA,OACX,CAAA;AACD,MAAA,OAAO,OAAO,IAAA,IAAQ,IAAA;AAAA,IACxB,CAAA;AAAA,IACA,YAAY,MAAM,OAAA,CAAQ,MAAA,CAAO,WAAA,CAAY,YAAY,CAAC,CAAA;AAAA,IAC1D,aAAa,MAAM,OAAA,CAAQ,MAAA,CAAO,WAAA,CAAY,aAAa,CAAC,CAAA;AAAA,IAC5D,iBAAiB,MAAM,OAAA,CAAQ,MAAA,CAAO,WAAA,CAAY,iBAAiB,CAAC,CAAA;AAAA,IACpE,uBAAuB,MAAM,OAAA,CAAQ,MAAA,CAAO,WAAA,CAAY,uBAAuB,CAAC,CAAA;AAAA,IAChF,kBAAkB,MAAM,OAAA,CAAQ,MAAA,CAAO,WAAA,CAAY,kBAAkB,CAAC;AAAA,GACxE;AACF;AAEA,SAAS,YAAY,MAAA,EAAuB;AAC1C,EAAA,OAAO,IAAI,KAAA;AAAA,IACT,oCAAoC,MAAM,CAAA,kEAAA;AAAA,GAC5C;AACF;;;ACnEA,IAAM,wBAAA,GAA2B,kDAAA;AAW1B,SAAS,aAAa,OAAA,EAAyB;AACpD,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,KAAA,CAAM,gBAAgB,CAAA;AAC5C,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,qCAAqC,OAAO,CAAA,sCAAA;AAAA,KAC9C;AAAA,EACF;AACA,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC/B,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA,IAAK,WAAW,CAAA,EAAG;AAClD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,qCAAqC,OAAO,CAAA,2CAAA;AAAA,KAC9C;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT;AAeO,SAAS,oBAAA,CACd,QACA,MAAA,EACA;AACA,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAqB;AAEvC,EAAA,OAAO,SAAS,YAAA,CAAa,OAAA,EAAiB,aAAA,EAAwC;AACpF,IAAA,MAAM,OAAA,GAAU,aAAa,OAAO,CAAA;AACpC,IAAA,MAAM,WAAW,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,aAAA,CAAc,aAAa,CAAA,CAAA;AAC1D,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,GAAA,CAAI,QAAQ,CAAA;AACjC,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,OAAO,EAAE,OAAA,EAAS,MAAA,EAAQ,OAAA,EAAQ;AAAA,IACpC;AAEA,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,YAAA,GAAe,OAAO,CAAA,IAAK,wBAAA;AACtD,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,aAAA,GAAgB,OAAO,CAAA;AACnD,IAAA,MAAM,OAAA,GAAU,sBAAA,CAAuB,MAAA,EAAQ,OAAA,EAAS,YAAY,CAAA;AAEpE,IAAA,MAAMC,SAAA,GAAU,IAAIC,eAAA,CAAQ;AAAA,MAC1B,OAAA;AAAA,MACA,WAAA;AAAA,MACA,eAAA,EAAiB,aAAA;AAAA,MACjB;AAAA,KACD,CAAA;AAED,IAAA,KAAA,CAAM,GAAA,CAAI,UAAUD,SAAO,CAAA;AAC3B,IAAA,OAAO,WAAEA,WAAS,OAAA,EAAQ;AAAA,EAC5B,CAAA;AACF;;;ACzEA,IAAM,WAAA,GAAc,oBAAA;AAeb,SAAS,qBAAqB,QAAA,EAAqD;AACxF,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA;AAC5C,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,MAAM,IAAA,GAAO,aAAa,GAAG,CAAA;AAC7B,EAAA,MAAM,MAAA,GAAkB,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACvC,EAAA,MAAM,OAAA,GAA2B,EAAE,GAAA,EAAK,MAAA,EAAO;AAK/C,EAAA,IAAI,OAAO,WAAW,QAAA,IAAY,MAAA,KAAW,QAAQ,CAAC,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG;AAC3E,IAAA,MAAM,GAAA,GAAM,MAAA;AAEZ,IAAA,MAAM,aAAa,UAAA,CAAW,GAAA,EAAK,CAAC,YAAA,EAAc,aAAa,CAAC,CAAA;AAChE,IAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,MAAA,OAAA,CAAQ,UAAA,GAAa,UAAA;AAAA,IACvB;AAEA,IAAA,IAAI,kBAAA,CAAmB,GAAA,CAAI,KAAK,CAAA,EAAG;AACjC,MAAA,OAAA,CAAQ,QAAQ,GAAA,CAAI,KAAA;AAAA,IACtB;AAOA,IAAA,IACE,OAAA,CAAQ,KAAA,KAAU,MAAA,IAClB,OAAO,IAAI,WAAA,KAAgB,QAAA,IAC3B,GAAA,CAAI,WAAA,KAAgB,QACpB,CAAC,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,EAC9B;AACA,MAAA,MAAM,KAAK,GAAA,CAAI,WAAA;AACf,MAAA,MAAM,QAAA,GAAW,UAAA,CAAW,EAAA,EAAI,CAAC,eAAe,CAAC,CAAA;AACjD,MAAA,MAAM,OAAA,GAAU,UAAA,CAAW,EAAA,EAAI,CAAC,cAAc,CAAC,CAAA;AAC/C,MAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,QAAA,IAAI,SAAA;AACJ,QAAA,IAAI,aAAa,UAAA,EAAY;AAC3B,UAAA,SAAA,GAAY,OAAA,KAAY,MAAA,GAAY,EAAE,QAAA,EAAU,SAAQ,GAAI,MAAA;AAAA,QAC9D,CAAA,MAAO;AACL,UAAA,SAAA,GAAY,EAAE,QAAA,EAAS;AAAA,QACzB;AACA,QAAA,IAAI,kBAAA,CAAmB,SAAS,CAAA,EAAG;AACjC,UAAA,OAAA,CAAQ,KAAA,GAAQ,SAAA;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,OAAA;AACT;AAYA,SAAS,mBAAmB,CAAA,EAAwD;AAClF,EAAA,IAAI,OAAO,CAAA,KAAM,QAAA,EAAU,OAAO,EAAE,MAAA,GAAS,CAAA;AAC7C,EAAA,IAAI,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG,OAAO,KAAA;AACpE,EAAA,MAAM,GAAA,GAAM,CAAA;AACZ,EAAA,IAAI,OAAO,IAAI,QAAA,KAAa,QAAA,IAAY,IAAI,QAAA,CAAS,MAAA,KAAW,GAAG,OAAO,KAAA;AAC1E,EAAA,IAAI,SAAA,IAAa,OAAO,GAAA,CAAI,OAAA,KAAY,UAAa,OAAO,GAAA,CAAI,YAAY,QAAA,EAAU;AACpF,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,UAAA,CAAW,KAA8B,IAAA,EAAoC;AACpF,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,MAAM,CAAA,GAAI,IAAI,GAAG,CAAA;AACjB,IAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,CAAE,SAAS,CAAA,EAAG;AACzC,MAAA,OAAO,CAAA;AAAA,IACT;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;ACzFO,IAAM,YAAA,GAAe,CAAA;AAarB,SAAS,eAAA,CAAgB;AAAA,EAC9B,YAAA;AAAA,EACA,MAAA;AAAA,EACA,iBAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAA,EAAuC;AAKrC,EAAA,MAAM,kBACJ,WAAA,KAAgB,MAAA,GACZ,MAAA,GACA,MAAA,KAAW,qCACT,EAAE,MAAA,EAAQ,WAAA,CAAY,MAAA,EAAQ,MAAM,WAAA,CAAY,IAAA,KAChD,EAAE,MAAA,EAAQ,YAAY,MAAA,EAAO;AAErC,EAAA,MAAM,OAAA,GAAgC;AAAA,IACpC,WAAA,EAAa,YAAA;AAAA,IACb,MAAA,EAAQ,QAAA;AAAA,IACR,SAAS,YAAA,CAAa,OAAA;AAAA,IACtB,OAAA,EAAS;AAAA,MACP,MAAA;AAAA,MACA,iBAAA;AAAA,MACA,QAAA,EAAU;AAAA,QACR,SAAA,EAAW,aAAa,KAAA,CAAM,SAAA;AAAA,QAC9B,SAAA,EAAW,aAAa,KAAA,CAAM;AAAA,OAChC;AAAA,MACA,KAAA;AAAA,MACA,MAAA;AAAA,MACA,GAAI,SAAA,GAAY,EAAE,SAAA,KAAc;AAAC,KACnC;AAAA,IACA,GAAI,eAAA,GAAkB,EAAE,WAAA,EAAa,eAAA,KAAoB;AAAC,GAC5D;AAIA,EAAAE,gCAAA,CAA0B,OAAO,CAAA;AACjC,EAAA,OAAO,OAAA;AACT;AAGO,SAAS,yBAAyB,IAAA,EAA4B;AACnE,EAAA,MAAM,OAAA,GAAU,gBAAgB,IAAI,CAAA;AACpC,EAAA,OAAO,YAAA,CAAa,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAC7C;;;AClEO,SAAS,YAAY,IAAA,EAA0B;AACpD,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,IAAI,CAAA;AACjC,EAAA,IAAI,OAAO,UAAA,CAAW,MAAA,EAAQ,eAAA,KAAoB,UAAA,EAAY;AAC5D,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACA,EAAA,UAAA,CAAW,MAAA,CAAO,gBAAgB,KAAK,CAAA;AACvC,EAAA,OAAO,KAAA;AACT;AAaO,SAAS,aAAA,GAAwB;AACtC,EAAA,MAAM,KAAA,GAAQ,YAAY,EAAE,CAAA;AAC5B,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,CAAA,GAAK,CAAA,IAAK,EAAA,GAAM,MAAA,CAAO,IAAI,CAAA;AAAA,EAC7B;AACA,EAAA,OAAO,CAAA;AACT;;;ACFA,eAAsB,wBAAA,CAAyB;AAAA,EAC7C,YAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF,CAAA,EAAuD;AACrD,EAAA,MAAM,QAAQ,aAAA,EAAc;AAE5B,EAAA,MAAM,wBAAA,GAA2B,6BAAA,CAA8B,YAAA,EAAc,KAAK,CAAA;AAElF,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,8BAAA,CAA+B;AAAA,IAC1D,KAAA,EAAO,MAAM,QAAA,EAAS;AAAA,IACtB;AAAA,GACD,CAAA;AAED,EAAA,OAAO,OAAA,CAAQ,MAAA,EAAQ,KAAA,EAAO,KAAK,CAAA;AACrC;AASA,eAAsB,8BAAA,CAA+B;AAAA,EACnD,YAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF,CAAA,EAAuD;AACrD,EAAA,MAAM,QAAQ,aAAA,EAAc;AAE5B,EAAA,MAAM,wBAAA,GAA2B,6BAAA,CAA8B,YAAA,EAAc,KAAK,CAAA;AAElF,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,oCAAA,CAAqC;AAAA,IAChE,KAAA,EAAO,MAAM,QAAA,EAAS;AAAA,IACtB;AAAA,GACD,CAAA;AAED,EAAA,OAAO,OAAA,CAAQ,MAAA,EAAQ,KAAA,EAAO,KAAK,CAAA;AACrC;AAEA,SAAS,6BAAA,CACP,cACA,KAAA,EACe;AACf,EAAA,OAAO;AAAA,IACL,GAAI,aAAa,KAAA,CAAM,SAAA;AAAA,IACvB,SAAA,EAAW,aAAa,KAAA,CAAM,SAAA;AAAA,IAC9B,SAAA,EAAW;AAAA,GACb;AACF;AAEA,SAAS,OAAA,CACP,MAAA,EAOA,KAAA,EACA,KAAA,EACa;AACb,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,MAAM,QAAA,EAAS;AAAA,IACtB,cAAc,MAAA,CAAO,YAAA;AAAA,IACrB,mBAAmB,MAAA,CAAO,iBAAA;AAAA,IAC1B,GAAA,EAAK;AAAA,MACH,CAAA,EAAG,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA;AAAA,MAClB,GAAG,MAAA,CAAO,CAAA;AAAA,MACV,GAAG,MAAA,CAAO;AAAA;AACZ,GACF;AACF;ACXA,eAAsB,oBAAA,CACpB,MACA,IAAA,EACiC;AACjC,EAAA,MAAM,QAAQ,aAAA,EAAc;AAC5B,EAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,eAAA,EAAgB;AACzC,EAAA,MAAM,EAAE,SAAQ,GAAI,IAAA,CAAK,aAAa,IAAA,CAAK,OAAA,EAAS,KAAK,aAAa,CAAA;AAEtE,EAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,OAAA,EAAS,MAAM,KAAK,CAAA;AAExD,EAAA,MAAM,MAAA,GAAsB;AAAA,IAC1B,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,MAAM,QAAA,EAAS;AAAA,IACtB,cAAc,MAAA,CAAO,YAAA;AAAA,IACrB,mBAAmB,MAAA,CAAO,iBAAA;AAAA,IAC1B,GAAA,EAAK;AAAA,MACH,CAAA,EAAG,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA;AAAA,MAClB,GAAG,MAAA,CAAO,CAAA;AAAA,MACV,GAAG,MAAA,CAAO;AAAA;AACZ,GACF;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,aAAA,EAAeC,yBAAA,CAAoB,MAAM,CAAA,EAAE;AAC9D;AAUA,eAAe,cAAA,CACb,OAAA,EACA,IAAA,EACA,KAAA,EAC4B;AAC5B,EAAA,MAAM,QAAA,GAAW,MAAM,QAAA,EAAS;AAChC,EAAA,MAAM,aAAa,IAAA,CAAK,UAAA;AAExB,EAAA,QAAQ,KAAK,QAAA;AAAU,IACrB,KAAK,cAAA;AACH,MAAA,OAAO,QAAQ,uBAAA,CAAwB,EAAE,KAAA,EAAO,QAAA,EAAU,YAAY,CAAA;AAAA,IACxE,KAAK,qBAAA;AACH,MAAA,OAAO,QAAQ,uBAAA,CAAwB,EAAE,KAAA,EAAO,QAAA,EAAU,YAAY,CAAA;AAAA,IACxE,KAAK,wBAAA;AACH,MAAA,OAAO,QAAQ,0BAAA,CAA2B,EAAE,KAAA,EAAO,QAAA,EAAU,YAAY,CAAA;AAAA,IAC3E,KAAK,oBAAA;AACH,MAAA,OAAO,QAAQ,sBAAA,CAAuB,EAAE,KAAA,EAAO,QAAA,EAAU,YAAY,CAAA;AAAA,IACvE,KAAK,sBAAA;AACH,MAAA,OAAO,QAAQ,wBAAA,CAAyB,EAAE,KAAA,EAAO,QAAA,EAAU,YAAY,CAAA;AAAA,IACzE,KAAK,uBAAA;AACH,MAAA,OAAO,QAAQ,yBAAA,CAA0B,EAAE,KAAA,EAAO,QAAA,EAAU,YAAY,CAAA;AAAA,IAC1E,KAAK,sBAAA;AACH,MAAA,OAAO,QAAQ,wBAAA,CAAyB;AAAA,QACtC,KAAA,EAAO,QAAA;AAAA,QACP,UAAA;AAAA,QACA,cAAc,IAAA,CAAK,YAAA;AAAA,QACnB,iBAAiB,IAAA,CAAK;AAAA,OACvB,CAAA;AAAA,IACH,SAAS;AAKP,MAAA,MAAM,WAAA,GAAqB,IAAA;AAC3B,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,6CAAA,EAAiD,YAAqC,QAAQ,CAAA,CAAA;AAAA,OAChG;AAAA,IACF;AAAA;AAEJ;AClJA,IAAM,eAAA,GAA4C,CAAC,QAAA,EAAU,aAAa,CAAA;AAgEnE,IAAM,wBAAA,GAAN,cAAuC,KAAA,CAAM;AAAA,EAGlD,WAAA,CAAY,UAAkB,kBAAA,EAAuC;AACnE,IAAA,KAAA;AAAA,MACE,wBAAwB,QAAQ,CAAA,uBAAA,EAA0B,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAC,CAAA,4DAAA;AAAA,KACzF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,0BAAA;AACZ,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,kBAAA,GAAqB,kBAAA;AAAA,EAC5B;AACF;AAOO,IAAM,sBAAA,GAAN,cAAqC,KAAA,CAAM;AAAA,EAEhD,WAAA,CAAY,UAAkB,QAAA,EAAqC;AACjE,IAAA,KAAA;AAAA,MACE,CAAA,qBAAA,EAAwB,QAAQ,CAAA,2CAAA,EAAyC,QAAA,CACtE,GAAA,CAAI,CAAC,CAAA,KAAM,aAAA,CAAc,CAAC,CAAC,CAAA,CAC3B,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KACf;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,wBAAA;AACZ,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAAA,EAClB;AACF;AAEA,SAAS,cAAc,CAAA,EAA2B;AAChD,EAAA,IAAI,CAAA,CAAE,IAAI,OAAO,CAAA,EAAG,EAAE,OAAO,CAAA,IAAA,EAAO,EAAE,MAAM,CAAA,CAAA,CAAA;AAC5C,EAAA,MAAM,OAAO,CAAA,CAAE,MAAA,KAAW,SAAY,CAAA,CAAA,EAAI,CAAA,CAAE,MAAM,CAAA,CAAA,CAAA,GAAM,EAAA;AACxD,EAAA,OAAO,GAAG,CAAA,CAAE,OAAO,IAAI,CAAA,CAAE,MAAM,GAAG,IAAI,CAAA,CAAA;AACxC;AASA,eAAsB,aAAa,IAAA,EAAyC;AAC1E,EAAA,MAAM,UAAU,IAAA,CAAK,KAAA,IAAS,UAAA,CAAW,KAAA,CAAM,KAAK,UAAU,CAAA;AAC9D,EAAA,MAAM,SAAA,GAAY,KAAK,SAAA,IAAa,GAAA;AAEpC,EAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,IAAA,CAAK,MAAM,CAAA;AAC3C,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,IAAI,wBAAA,CAAyB,IAAA,CAAK,OAAO,EAAA,EAAI,IAAA,CAAK,OAAO,QAAQ,CAAA;AAAA,EACzE;AAEA,EAAA,MAAM,WAA6B,EAAC;AACpC,EAAA,KAAA,MAAW,WAAW,OAAA,EAAS;AAC7B,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,MAAA,CAAO,SAAA,GAAY,OAAO,CAAA;AAChD,IAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,MAAA,QAAA,CAAS,IAAA,CAAK;AAAA,QACZ,OAAA;AAAA,QACA,EAAA,EAAI,KAAA;AAAA,QACJ,MAAA,EAAQ,aAAA;AAAA,QACR,OAAA,EAAS,uCAAuC,OAAO,CAAA,CAAA;AAAA,OACxD,CAAA;AACD,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,OAAA,GAAU,MAAM,cAAA,CAAe;AAAA,MACnC,OAAA;AAAA,MACA,QAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA;AAAA,MACA;AAAA,KACD,CAAA;AACD,IAAA,QAAA,CAAS,IAAA,CAAK,QAAQ,OAAO,CAAA;AAE7B,IAAA,IAAI,OAAA,CAAQ,OAAA,CAAQ,EAAA,IAAM,OAAA,CAAQ,WAAW,MAAA,EAAW;AACtD,MAAA,OAAO,EAAE,GAAG,OAAA,CAAQ,MAAA,EAAQ,QAAA,EAAS;AAAA,IACvC;AACA,IAAA,IAAI,CAAC,OAAA,CAAQ,OAAA,CAAQ,MAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,KAAA,EAAO;AAE3D,MAAA,MAAM,IAAI,sBAAA,CAAuB,IAAA,CAAK,MAAA,CAAO,IAAI,QAAQ,CAAA;AAAA,IAC3D;AAAA,EACF;AAEA,EAAA,MAAM,IAAI,sBAAA,CAAuB,IAAA,CAAK,MAAA,CAAO,IAAI,QAAQ,CAAA;AAC3D;AAEA,SAAS,gBAAgB,MAAA,EAAqC;AAC5D,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAmB;AACpC,EAAA,MAAM,MAAuB,EAAC;AAC9B,EAAA,KAAA,MAAW,CAAA,IAAK,OAAO,QAAA,EAAU;AAC/B,IAAA,IAAK,eAAA,CAAsC,SAAS,CAAC,CAAA,IAAK,CAAC,IAAA,CAAK,GAAA,CAAI,CAAkB,CAAA,EAAG;AACvF,MAAA,IAAA,CAAK,IAAI,CAAkB,CAAA;AAC3B,MAAA,GAAA,CAAI,KAAK,CAAkB,CAAA;AAAA,IAC7B;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAQA,eAAe,eAAe,KAAA,EAMF;AAC1B,EAAA,MAAM,EAAE,OAAA,EAAS,QAAA,EAAU,IAAA,EAAM,OAAA,EAAS,WAAU,GAAI,KAAA;AAExD,EAAA,MAAM,OAAO,OAAA,KAAY,QAAA,GAAW,gBAAgB,IAAI,CAAA,GAAI,qBAAqB,IAAI,CAAA;AAErF,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,MAAM,gBAAA,CAAiB,OAAA,EAAS,QAAA,EAAU,MAAM,SAAS,CAAA;AAAA,EACjE,SAAS,CAAA,EAAG;AACV,IAAA,MAAM,MAAA,GAAS,SAAA,CAAU,CAAC,CAAA,GAAI,SAAA,GAAY,SAAA;AAC1C,IAAA,OAAO;AAAA,MACL,OAAA,EAAS;AAAA,QACP,OAAA;AAAA,QACA,EAAA,EAAI,KAAA;AAAA,QACJ,MAAA;AAAA,QACA,SAAS,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,OAAO,CAAC;AAAA;AACpD,KACF;AAAA,EACF;AAEA,EAAA,MAAM,SAAU,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACjD,EAAA,IAAI,GAAA,CAAI,UAAU,GAAA,EAAK;AACrB,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,EAAE,OAAA,EAAS,EAAA,EAAI,OAAO,MAAA,EAAQ,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,MAAA;AAAO,KACnE;AAAA,EACF;AACA,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,EAAE,OAAA,EAAS,EAAA,EAAI,OAAO,MAAA,EAAQ,KAAA,EAAO,MAAA,EAAQ,GAAA,CAAI,MAAA;AAAO,KACnE;AAAA,EACF;AACA,EAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,OAAO,MAAA,KAAW,QAAA,EAAU;AACjD,IAAA,OAAO;AAAA,MACL,OAAA,EAAS;AAAA,QACP,OAAA;AAAA,QACA,EAAA,EAAI,KAAA;AAAA,QACJ,MAAA,EAAQ,kBAAA;AAAA,QACR,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,OAAA,EAAS;AAAA;AACX,KACF;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,SACJ,OAAA,KAAY,QAAA,GAAW,kBAAkB,MAAM,CAAA,GAAI,uBAAuB,MAAM,CAAA;AAClF,IAAA,OAAO;AAAA,MACL,SAAS,EAAE,OAAA,EAAS,IAAI,IAAA,EAAM,MAAA,EAAQ,IAAI,MAAA,EAAO;AAAA,MACjD,MAAA,EAAQ,EAAE,GAAG,MAAA,EAAQ,aAAa,OAAA;AAAQ,KAC5C;AAAA,EACF,SAAS,CAAA,EAAG;AAKV,IAAA,OAAO;AAAA,MACL,OAAA,EAAS;AAAA,QACP,OAAA;AAAA,QACA,EAAA,EAAI,KAAA;AAAA,QACJ,MAAA,EAAQ,kBAAA;AAAA,QACR,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,SAAS,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,OAAO,CAAC;AAAA;AACpD,KACF;AAAA,EACF;AACF;AAEA,SAAS,gBAAgB,IAAA,EAA2B;AAClD,EAAA,MAAM,IAAA,GAAgC;AAAA,IACpC,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,aAAA,EAAe,KAAK,MAAA,CAAO;AAAA,GAC7B;AACA,EAAA,IAAI,KAAK,MAAA,CAAO,EAAA,KAAO,cAAA,IAAkB,IAAA,CAAK,gBAAgB,MAAA,EAAW;AACvE,IAAA,IAAA,CAAK,cAAc,IAAA,CAAK,WAAA;AAAA,EAC1B;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,qBAAqB,IAAA,EAA2B;AACvD,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,KAAK,MAAA,CAAO,EAAA;AAAA,IACpB,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,eAAe,IAAA,CAAK,aAAA;AAAA,IACpB,aAAA,EAAe,KAAK,MAAA,CAAO;AAAA,GAC7B;AACF;AAEA,eAAe,gBAAA,CACb,OAAA,EACA,QAAA,EACA,IAAA,EACA,SAAA,EACmB;AACnB,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,CAAM,IAAI,YAAA,CAAa,SAAS,CAAC,CAAA,EAAG,SAAS,CAAA;AACvF,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,QAAQ,QAAA,EAAU;AAAA,MAC7B,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,MAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,MACzB,QAAQ,UAAA,CAAW;AAAA,KACpB,CAAA;AAAA,EACH,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAEA,IAAM,YAAA,GAAN,cAA2B,KAAA,CAAM;AAAA,EAE/B,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA,CAAM,CAAA,oDAAA,EAAuD,SAAS,CAAA,EAAA,CAAI,CAAA;AAF5E,IAAA,IAAA,CAAS,SAAA,GAAY,IAAA;AAGnB,IAAA,IAAA,CAAK,IAAA,GAAO,cAAA;AAAA,EACd;AACF,CAAA;AAEA,SAAS,UAAU,CAAA,EAAqB;AACtC,EAAA,IAAI,CAAA,YAAa,cAAc,OAAO,IAAA;AACtC,EAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,KAAM,MAAM,OAAO,KAAA;AAChD,EAAA,MAAM,GAAA,GAAM,CAAA;AACZ,EAAA,IAAI,GAAA,CAAI,SAAA,KAAc,IAAA,EAAM,OAAO,IAAA;AACnC,EAAA,IAAI,IAAI,IAAA,KAAS,YAAA,IAAgB,GAAA,CAAI,IAAA,KAAS,gBAAgB,OAAO,IAAA;AAGrE,EAAA,IAAI,OAAO,GAAA,CAAI,KAAA,KAAU,QAAA,IAAY,GAAA,CAAI,UAAU,IAAA,EAAM;AACvD,IAAA,MAAM,QAAQ,GAAA,CAAI,KAAA;AAClB,IAAA,IAAI,KAAA,CAAM,SAAA,KAAc,IAAA,EAAM,OAAO,IAAA;AACrC,IAAA,IAAI,KAAA,CAAM,IAAA,KAAS,cAAA,EAAgB,OAAO,IAAA;AAAA,EAC5C;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,kBAAkB,IAAA,EAA+D;AACxF,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,EAAM;AAC7C,IAAA,MAAM,IAAI,MAAM,uCAAuC,CAAA;AAAA,EACzD;AACA,EAAA,MAAM,GAAA,GAAM,IAAA;AAUZ,EAAA,MAAM,SAAS,GAAA,CAAI,MAAA;AACnB,EAAA,MAAM,aAAA,GAAgB,IAAI,WAAA,EAAa,aAAA;AACvC,EAAA,IAAI,CAAC,SAAA,CAAU,MAAM,KAAK,CAAC,eAAA,CAAgB,aAAa,CAAA,EAAG;AACzD,IAAA,MAAM,IAAI,MAAM,6DAA6D,CAAA;AAAA,EAC/E;AACA,EAAA,MAAM,GAAA,GAAsD;AAAA,IAC1D,MAAA;AAAA,IACA,gBAAA,EAAkB,aAAA;AAAA,IAClB,aAAa,GAAA,CAAI;AAAA,GACnB;AACA,EAAA,IAAI,cAAA,CAAe,GAAA,CAAI,WAAA,EAAa,YAAY,CAAA,EAAG;AACjD,IAAA,GAAA,CAAI,eAAA,GAAkB,IAAI,WAAA,CAAY,YAAA;AAAA,EACxC;AACA,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,uBAAuB,IAAA,EAA+D;AAC7F,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,KAAS,IAAA,EAAM;AAC7C,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,MAAM,GAAA,GAAM,IAAA;AAMZ,EAAA,IAAI,GAAA,CAAI,EAAA,KAAO,IAAA,IAAQ,CAAC,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA,IAAK,CAAC,eAAA,CAAgB,GAAA,CAAI,gBAAgB,CAAA,EAAG;AACvF,IAAA,MAAM,IAAI,MAAM,yDAAyD,CAAA;AAAA,EAC3E;AACA,EAAA,MAAM,GAAA,GAAsD;AAAA,IAC1D,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,kBAAkB,GAAA,CAAI;AAAA,GACxB;AACA,EAAA,IAAI,cAAA,CAAe,GAAA,CAAI,eAAe,CAAA,EAAG;AACvC,IAAA,GAAA,CAAI,kBAAkB,GAAA,CAAI,eAAA;AAAA,EAC5B;AACA,EAAA,OAAO,GAAA;AACT;AAMA,IAAM,UAAA,GAAa,qBAAA;AAEnB,SAAS,UAAU,CAAA,EAAsB;AACvC,EAAA,OAAO,OAAO,CAAA,KAAM,QAAA,IAAY,UAAA,CAAW,KAAK,CAAC,CAAA;AACnD;AAEA,SAAS,gBAAgB,CAAA,EAAgC;AACvD,EAAA,OAAO,OAAO,MAAM,QAAA,IAAa,MAAA,CAAO,OAAOC,0BAAa,CAAA,CAAe,SAAS,CAAC,CAAA;AACvF;AAEA,SAAS,eAAe,CAAA,EAA+B;AACrD,EAAA,OAAO,OAAO,MAAM,QAAA,IAAa,MAAA,CAAO,OAAOC,yBAAY,CAAA,CAAe,SAAS,CAAC,CAAA;AACtF;AClXA,SAAS,kBAAkB,KAAA,EAA6B;AACtD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,IAAI,KAAA,GAAQ,IAAI,MAAM,IAAI,MAAM,CAAA,mCAAA,EAAsC,KAAA,CAAM,QAAA,EAAU,CAAA,CAAE,CAAA;AACxF,IAAA,OAAO,MAAM,QAAA,EAAS;AAAA,EACxB;AACA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,IAAK,CAAC,MAAA,CAAO,SAAA,CAAU,KAAK,CAAA,IAAK,KAAA,GAAQ,CAAA,EAAG;AACpE,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6CAAA,EAAgD,MAAA,CAAO,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,IACjF;AACA,IAAA,OAAO,MAAM,QAAA,EAAS;AAAA,EACxB;AAEA,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,EAAA,IAAI,QAAQ,MAAA,KAAW,CAAA,IAAK,CAACC,mBAAA,CAAa,IAAA,CAAK,OAAO,CAAA,EAAG;AACvD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6DAAA,EAAgE,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,EAC1F;AACA,EAAA,OAAO,OAAA;AACT;AAmFA,eAAsB,iBAAA,CACpB,MACA,IAAA,EAC8B;AAC9B,EAAA,MAAM,UAAA,GAAoC;AAAA,IACxC,GAAG,IAAA;AAAA,IACH,QAAA,EAAU,iBAAA,CAAkB,IAAA,CAAK,QAAQ;AAAA,GAC3C;AACA,EAAA,MAAM,EAAE,SAAQ,GAAI,IAAA,CAAK,aAAa,UAAA,CAAW,OAAA,EAAS,WAAW,aAAa,CAAA;AAClF,EAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,gBAAA,EAAiB;AACzC,EAAA,OAAO,yBAAA,CAA0B,UAAA,EAAY,OAAA,EAA2C,IAAI,CAAA;AAC9F;AAQA,eAAsB,6BAAA,CACpB,MACA,IAAA,EAC8B;AAC9B,EAAA,MAAM,EAAE,SAAQ,GAAI,IAAA,CAAK,aAAa,IAAA,CAAK,OAAA,EAAS,KAAK,aAAa,CAAA;AACtE,EAAA,MAAM,GAAA,GAAM,OAAA;AACZ,EAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,gBAAA,EAAiB;AACzC,EAAA,MAAM,QAAA,GAAW,MAAM,yBAAA,CAA0B,GAAA,EAAK,IAAI,CAAA;AAC1D,EAAA,MAAM,KAAA,GAAQ,MAAM,GAAA,CAAI,QAAA,CAAS,EAAE,aAAa,EAAE,SAAA,EAAW,QAAA,EAAS,EAAG,CAAA;AACzE,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,eAAA,KAAoB,GAAA,IAAO,MAAA,CAAO,CAAA,CAAE,eAAe,CAAA,GAAI,EAAE,CAAA;AAC/F,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,yCAAyC,QAAQ,CAAA,mCAAA;AAAA,KACnD;AAAA,EACF;AACA,EAAA,OAAO,yBAAA;AAAA,IACL;AAAA,MACE,QAAA;AAAA,MACA,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,eAAe,IAAA,CAAK,aAAA;AAAA,MACpB,WAAW,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,MAAM,OAAkB,CAAA;AAAA,MACxD,cAAc,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,eAAe;AAAA,KACpD;AAAA,IACA,GAAA;AAAA,IACA;AAAA,GACF;AACF;AAEA,eAAe,yBAAA,CACb,IAAA,EACA,OAAA,EACA,IAAA,EAC8B;AAC9B,EAAA,IAAI,IAAA,CAAK,SAAA,CAAU,MAAA,KAAW,IAAA,CAAK,aAAa,MAAA,EAAQ;AACtD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,iCAAiC,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA,oBAAA,EAAuB,IAAA,CAAK,aAAa,MAAM,CAAA,yBAAA;AAAA,KACvG;AAAA,EACF;AACA,EAAA,MAAM,QAAQ,aAAA,EAAc;AAC5B,EAAA,MAAM,QAAA,GAAW,MAAM,QAAA,EAAS;AAChC,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,uBAAA,CAAwB;AAAA,IACnD,KAAA,EAAO,QAAA;AAAA,IACP,UAAU,IAAA,CAAK,QAAA;AAAA,IACf,WAAW,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,CAAC,MAAM,CAAC,CAAA;AAAA,IACtC,cAAc,IAAA,CAAK,YAAA,CAAa,GAAA,CAAI,CAAC,MAAM,CAAC;AAAA,GAC7C,CAAA;AAED,EAAA,MAAM,MAAA,GAAsB;AAAA,IAC1B,IAAA;AAAA,IACA,KAAA,EAAO,QAAA;AAAA,IACP,cAAc,MAAA,CAAO,YAAA;AAAA,IACrB,mBAAmB,MAAA,CAAO,iBAAA;AAAA,IAC1B,GAAA,EAAK;AAAA,MACH,CAAA,EAAG,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA;AAAA,MAClB,GAAG,MAAA,CAAO,CAAA;AAAA,MACV,GAAG,MAAA,CAAO;AAAA;AACZ,GACF;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,aAAA,EAAeH,0BAAoB,MAAM,CAAA;AAAA,IACzC,QAAA,EAAU,iBAAA,CAAkB,IAAA,CAAK,QAAQ,CAAA;AAAA,IACzC,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,YAAA,EAAc,KAAK,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAC;AAAA,GACtD;AACF;AAEA,eAAe,yBAAA,CACb,SACA,QAAA,EACiB;AACjB,EAAA,IAAI,UAAA,IAAc,QAAA,EAAU,OAAO,iBAAA,CAAkB,SAAS,QAAQ,CAAA;AACtE,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,OAAA,CAAQ,WAAA,EAAY;AAC7C,EAAA,MAAM,OAAO,QAAA,CAAS,IAAA;AACtB,EAAA,MAAM,CAAC,OAAA,EAAS,MAAM,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,IAC1C,IAAA,KAAS,UACL,OAAA,CAAQ,OAAA,CAA+B,EAAE,CAAA,GACzC,OAAA,CAAQ,mBAAA,CAAoB,OAAO,CAAA;AAAA,IACvC,IAAA,KAAS,QAAA,GACL,OAAA,CAAQ,OAAA,CAA+B,EAAE,CAAA,GACzC,OAAA,CAAQ,SAAA,CAAU,EAAE,YAAA,EAAc,EAAE,MAAA,EAAQ,OAAA,IAAW;AAAA,GAC5D,CAAA;AACD,EAAA,MAAM,YAAY,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,EAAE,CAAA;AACzC,EAAA,MAAM,WAAW,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,EAAE,CAAA;AAEvC,EAAA,IAAI,SAAS,QAAA,EAAU;AACrB,IAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC1B,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,qEAAqE,OAAO,CAAA;AAAA,OAC9E;AAAA,IACF;AACA,IAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACxB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,0CAA0C,OAAO,CAAA,2CAAA,EAA8C,SAAA,CAAU,IAAA,CAAK,IAAI,CAAC,CAAA,gCAAA;AAAA,OACrH;AAAA,IACF;AACA,IAAA,OAAO,UAAU,CAAC,CAAA;AAAA,EACpB;AACA,EAAA,IAAI,SAAS,OAAA,EAAS;AACpB,IAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,oEAAoE,OAAO,CAAA;AAAA,OAC7E;AAAA,IACF;AACA,IAAA,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AACvB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,0CAA0C,OAAO,CAAA,0CAAA,EAA6C,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,gCAAA;AAAA,OACnH;AAAA,IACF;AACA,IAAA,OAAO,SAAS,CAAC,CAAA;AAAA,EACnB;AAOA,EAAA,MAAM,YAAA,GAAe,SAAA,CAAU,MAAA,GAAS,QAAA,CAAS,MAAA;AACjD,EAAA,IAAI,iBAAiB,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,8EAA8E,OAAO,CAAA;AAAA,KACvF;AAAA,EACF;AACA,EAAA,IAAI,eAAe,CAAA,EAAG;AACpB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,0CAA0C,OAAO,CAAA,aAAA,EAAgB,qBAAA,CAAsB,SAAA,EAAW,QAAQ,CAAC,CAAA,2CAAA;AAAA,KAC7G;AAAA,EACF;AACA,EAAA,IAAI,SAAA,CAAU,MAAA,KAAW,CAAA,EAAG,OAAO,UAAU,CAAC,CAAA;AAC9C,EAAA,OAAO,SAAS,CAAC,CAAA;AACnB;AAEA,SAAS,qBAAA,CAAsB,WAAqB,QAAA,EAA4B;AAC9E,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,IAAI,SAAA,CAAU,SAAS,CAAA,EAAG;AACxB,IAAA,KAAA,CAAM,IAAA;AAAA,MACJ,SAAA,CAAU,MAAA,KAAW,CAAA,GACjB,CAAA,WAAA,EAAc,UAAU,CAAC,CAAC,CAAA,CAAA,CAAA,GAC1B,CAAA,EAAG,UAAU,MAAM,CAAA,cAAA,EAAiB,SAAA,CAAU,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC9D;AAAA,EACF;AACA,EAAA,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG;AACvB,IAAA,KAAA,CAAM,IAAA;AAAA,MACJ,QAAA,CAAS,MAAA,KAAW,CAAA,GAChB,CAAA,UAAA,EAAa,SAAS,CAAC,CAAC,CAAA,CAAA,CAAA,GACxB,CAAA,EAAG,SAAS,MAAM,CAAA,aAAA,EAAgB,QAAA,CAAS,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC3D;AAAA,EACF;AACA,EAAA,OAAO,KAAA,CAAM,KAAK,OAAO,CAAA;AAC3B;;;ACrSO,IAAM,yCAAA,GAA4C,EAAA;AAElD,SAAS,wBAAA,CACd,iBAAA,EACA,GAAA,GAAoB,IAAA,CAAK,GAAA,EACjB;AAIR,EAAA,MAAM,iBAAiB,IAAA,CAAK,GAAA,CAAI,GAAG,IAAA,CAAK,KAAA,CAAM,iBAAiB,CAAC,CAAA;AAChE,EAAA,MAAM,sBAAsB,IAAA,CAAK,GAAA;AAAA,IAC/B,yCAAA;AAAA,IACA,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,cAAA,GAAiB,CAAC;AAAA,GAChC;AACA,EAAA,OAAO,KAAK,KAAA,CAAM,GAAA,EAAI,GAAI,GAAI,IAAI,cAAA,GAAiB,mBAAA;AACrD;;;ACIA,eAAsB,WAAA,CAAY;AAAA,EAChC,YAAA;AAAA,EACA,KAAA;AAAA,EACA,OAAA;AAAA,EACA,mBAAA;AAAA,EACA,MAAM,IAAA,CAAK;AACb,CAAA,EAA8C;AAC5C,EAAA,MAAM,OAAA,GAAU,YAAA,CAAa,YAAA,CAAa,OAAO,CAAA;AACjD,EAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,CAAoB,YAAA,CAAa,OAAkB,OAAO,CAAA;AAE/E,EAAA,MAAM,UAAA,GAAa,CAAA;AACnB,EAAA,MAAM,WAAA,GAAc,wBAAA,CAAyB,YAAA,CAAa,iBAAA,EAAmB,GAAG,CAAA;AAEhF,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,mCAAA;AAAA,IAC3B,YAAA,CAAa,KAAA;AAAA,IACb,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA,EAAM,OAAA,EAAS,OAAO,OAAA,EAAQ;AAAA,IAC7C,YAAA,CAAa,MAAA;AAAA,IACb,UAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,OAAA,EAAS,YAAA,CAAa,aAAA;AAA+B,GACzD;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,KAAA;AAAA,IACN,IAAI,YAAA,CAAa,aAAA;AAAA,IACjB,OAAO,YAAA,CAAa,MAAA;AAAA,IACpB,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAAA,IACzC,WAAA,EAAa,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA;AAAA,IAC3C,KAAA,EAAO,OAAO,IAAA,CAAK,KAAA;AAAA,IACnB,GAAG,MAAA,CAAO,CAAA;AAAA,IACV,GAAG,MAAA,CAAO,CAAA;AAAA,IACV,GAAG,MAAA,CAAO;AAAA,GACZ;AACF;AC7BA,IAAM,UAAA,GAAa;AAAA,EACjB;AAAA,IACE,IAAA,EAAM,UAAA;AAAA,IACN,IAAA,EAAM,QAAA;AAAA,IACN,eAAA,EAAiB,MAAA;AAAA,IACjB,QAAQ,CAAC,EAAE,MAAM,OAAA,EAAS,IAAA,EAAM,WAAW,CAAA;AAAA,IAC3C,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,WAAW;AAAA;AAEjC,CAAA;AAkBA,eAAsB,UAAA,CAAW;AAAA,EAC/B,YAAA;AAAA,EACA,KAAA;AAAA,EACA,OAAA;AAAA,EACA,mBAAA;AAAA,EACA,YAAA;AAAA,EACA,MAAM,IAAA,CAAK;AACb,CAAA,EAA4C;AAC1C,EAAA,MAAM,OAAA,GAAU,YAAA,CAAa,YAAA,CAAa,OAAO,CAAA;AACjD,EAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,CAAoB,YAAA,CAAa,OAAkB,OAAO,CAAA;AAE/E,EAAA,MAAM,eAAe,MAAM,SAAA,CAAU,YAAA,EAAc,YAAA,CAAa,OAAkB,KAAK,CAAA;AACvF,EAAA,MAAM,QAAA,GAAW,wBAAA,CAAyB,YAAA,CAAa,iBAAA,EAAmB,GAAG,CAAA;AAE7E,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,4BAAA;AAAA,IAC3B,YAAA,CAAa,KAAA;AAAA,IACb,EAAE,IAAA,EAAM,MAAA,CAAO,IAAA,EAAM,OAAA,EAAS,OAAO,OAAA,EAAQ;AAAA,IAC7C,YAAA,CAAa,MAAA;AAAA,IACb,QAAA;AAAA,IACA,EAAE,OAAA,EAAS,YAAA,CAAa,aAAA;AAA+B,GACzD;AAEA,EAAA,MAAM,gBAAgB,MAAM,SAAA,CAAU,YAAA,EAAc,YAAA,CAAa,OAAkB,KAAK,CAAA;AACxF,EAAA,IAAI,iBAAiB,aAAA,EAAe;AAIlC,IAAA,MAAM,IAAI,yBAAA;AAAA,MACR,CAAA,4DAAA,EAA+D,YAAY,CAAA,MAAA,EAAS,aAAa,CAAA,QAAA;AAAA,KACnG;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,KAAA;AAAA,IACP,SAAS,YAAA,CAAa,aAAA;AAAA,IACtB,OAAO,YAAA,CAAa,MAAA;AAAA,IACpB,QAAA;AAAA,IACA,KAAA,EAAO,aAAa,QAAA,EAAS;AAAA,IAC7B,GAAG,MAAA,CAAO,CAAA;AAAA,IACV,GAAG,MAAA,CAAO,CAAA;AAAA,IACV,GAAG,MAAA,CAAO;AAAA,GACZ;AACF;AAEA,eAAe,SAAA,CACb,YAAA,EACA,KAAA,EACA,KAAA,EACiB;AACjB,EAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,IAAA,CAAK;AAAA,IACrC,EAAA,EAAI,KAAA;AAAA,IACJ,MAAMI,uBAAA,CAAmB;AAAA,MACvB,GAAA,EAAK,UAAA;AAAA,MACL,YAAA,EAAc,QAAA;AAAA,MACd,IAAA,EAAM,CAAC,KAAsB;AAAA,KAC9B;AAAA,GACF,CAAA;AACD,EAAA,IAAI,CAAC,OAAO,IAAA,EAAM;AAChB,IAAA,MAAM,IAAI,yBAAA;AAAA,MACR,CAAA,mBAAA,EAAsB,KAAK,CAAA,gCAAA,EAAmC,KAAK,CAAA,oCAAA;AAAA,KACrE;AAAA,EACF;AACA,EAAA,OAAOC,yBAAA,CAAqB;AAAA,IAC1B,GAAA,EAAK,UAAA;AAAA,IACL,YAAA,EAAc,QAAA;AAAA,IACd,MAAM,MAAA,CAAO;AAAA,GACd,CAAA;AACH;AC5FA,eAAsB,WAAA,CAAY;AAAA,EAChC,YAAA;AAAA,EACA,KAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAM,IAAA,CAAK;AACb,CAAA,EAA8C;AAC5C,EAAA,MAAM,QAAA,GAAW,wBAAA,CAAyB,YAAA,CAAa,iBAAA,EAAmB,GAAG,CAAA;AAC7E,EAAA,MAAM,eAAe,aAAA,EAAc;AASnC,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,sBAAA;AAAA,IAC3B,YAAA,CAAa,KAAA;AAAA,IACb,YAAA,CAAa,MAAA;AAAA,IACb,QAAA;AAAA,IACA;AAAA,MACE,SAAS,YAAA,CAAa,aAAA;AAAA,MACtB,cAAA,EAAgBC,yBAAA;AAAA,MAChB;AAAA;AACF,GACF;AAEA,EAAA,OAAO;AAAA,IACL,WAAW,EAAE,KAAA,EAAO,aAAa,KAAA,EAAO,MAAA,EAAQ,aAAa,MAAA,EAAO;AAAA,IACpE,SAAS,YAAA,CAAa,aAAA;AAAA,IACtB,KAAA,EAAO,aAAa,QAAA,EAAS;AAAA,IAC7B,QAAA;AAAA,IACA,WAAW,MAAA,CAAO;AAAA,GACpB;AACF;;;AC5BA,IAAM,mBAAA,GAAoD,CAAC,SAAA,EAAW,SAAA,EAAW,QAAQ,CAAA;AAEzF,SAAS,mBAAA,CAAoB,GAAsB,IAAA,EAAmC;AACpF,EAAA,QAAQ,CAAA;AAAG,IACT,KAAK,SAAA;AACH,MAAA,OAAO,KAAK,mBAAA,KAAwB,MAAA;AAAA,IACtC,KAAK,QAAA;AACH,MAAA,OAAO,IAAA,CAAK,mBAAA,KAAwB,MAAA,IAAa,IAAA,CAAK,YAAA,KAAiB,MAAA;AAAA,IACzE,KAAK,SAAA;AACH,MAAA,OAAO,IAAA;AAAA,IACT,KAAK,MAAA;AACH,MAAA,OAAO,KAAA;AAAA,IACT,SAAS;AAGP,MAAA,OAAO,KAAA;AAAA,IACT;AAAA;AAEJ;AAaA,eAAsB,sBAAsB,IAAA,EAAmD;AAC7F,EAAA,MAAM,UAAA,GAAa,KAAK,YAAA,CAAa,mBAAA;AACrC,EAAA,MAAM,SAAS,mBAAA,CAAoB,IAAA;AAAA,IACjC,CAAC,MAAM,UAAA,CAAW,QAAA,CAAS,CAAC,CAAA,IAAK,mBAAA,CAAoB,GAAG,IAAI;AAAA,GAC9D;AACA,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,yBAAA;AAAA,MACR,CAAA,uCAAA,EAA0C,WAAW,IAAA,CAAK,IAAI,CAAC,CAAA,oBAAA,EACzC,mBAAA,CAAoB,IAAA,CAAK,IAAI,CAAC,CAAA,6LAAA;AAAA,KAItD;AAAA,EACF;AAEA,EAAA,QAAQ,MAAA;AAAQ,IACd,KAAK,SAAA,EAAW;AACd,MAAA,IAAI,CAAC,KAAK,mBAAA,EAAqB;AAC7B,QAAA,MAAM,IAAI,yBAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,MAAM,IAAA,GAAO,MAAM,WAAA,CAAY;AAAA,QAC7B,GAAG,IAAA;AAAA,QACH,qBAAqB,IAAA,CAAK;AAAA,OAC3B,CAAA;AACD,MAAA,OAAO,EAAE,UAAU,SAAA,EAAW,SAAA,EAAW,EAAE,IAAA,EAAM,SAAA,EAAW,MAAK,EAAE;AAAA,IACrE;AAAA,IACA,KAAK,QAAA,EAAU;AACb,MAAA,IAAI,CAAC,KAAK,mBAAA,EAAqB;AAC7B,QAAA,MAAM,IAAI,yBAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,IAAI,CAAC,KAAK,YAAA,EAAc;AACtB,QAAA,MAAM,IAAI,yBAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,MAAM,IAAA,GAAO,MAAM,UAAA,CAAW;AAAA,QAC5B,GAAG,IAAA;AAAA,QACH,qBAAqB,IAAA,CAAK,mBAAA;AAAA,QAC1B,cAAc,IAAA,CAAK;AAAA,OACpB,CAAA;AACD,MAAA,OAAO,EAAE,UAAU,QAAA,EAAU,SAAA,EAAW,EAAE,IAAA,EAAM,QAAA,EAAU,MAAK,EAAE;AAAA,IACnE;AAAA,IACA,KAAK,SAAA,EAAW;AACd,MAAA,MAAM,IAAA,GAAO,MAAM,WAAA,CAAY,IAAI,CAAA;AACnC,MAAA,OAAO,EAAE,UAAU,SAAA,EAAW,SAAA,EAAW,EAAE,IAAA,EAAM,SAAA,EAAW,MAAK,EAAE;AAAA,IACrE;AAAA,IACA,KAAK,MAAA,EAAQ;AAKX,MAAA,MAAM,IAAI,yBAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AAAA,IACA,SAAS;AACP,MAAA,MAAM,WAAA,GAAqB,MAAA;AAC3B,MAAA,MAAM,IAAI,yBAAA;AAAA,QACR,CAAA,gCAAA,EAAoC,WAAA,CAAuC,QAAA,EAAU,CAAA,CAAA;AAAA,OACvF;AAAA,IACF;AAAA;AAEJ;;;ACEO,SAAS,kBAAkB,MAAA,EAAwC;AACxE,EAAA,MAAM,YAAA,GAAe,oBAAA,CAAqB,MAAA,CAAO,MAAA,EAAQ,MAAM,CAAA;AAE/D,EAAA,MAAM,eAAA,GAAkB,YAAa,MAAM,MAAA,CAAO,OAAO,UAAA,EAAW;AAEpE,EAAA,OAAO;AAAA,IACL,MAAM,UAAU,eAAA,EAAiB;AAC/B,MAAA,MAAM,YAAA,GACJC,sCAA+B,eAAe,CAAA;AAEhD,MAAA,MAAM,MAAA,GAAS,UAAA,CAAW,YAAA,EAAc,MAAA,CAAO,MAAM,CAAA;AACrD,MAAA,MAAM,WAAA,GAAc,kBAAA,CAAmB,YAAA,EAAc,MAAM,CAAA;AAC3D,MAAA,gBAAA,CAAiB,YAAA,CAAa,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,SAAS,CAAA;AAC9D,MAAA,MAAM,KAAA,GAAQ,MAAM,eAAA,EAAgB;AAEpC,MAAA,MAAM,EAAE,OAAA,EAAS,OAAA,EAAQ,GAAI,YAAA;AAAA,QAC3B,YAAA,CAAa,OAAA;AAAA,QACb,YAAA,CAAa;AAAA,OACf;AAWA,MAAA,IAAI,SAAA;AACJ,MAAA,IAAI,QAAA;AACJ,MAAA,MAAM,cAAA,GAAiB,OAAO,MAAA,EAAQ,iBAAA;AACtC,MAAA,IAAI,mBAAmB,MAAA,EAAW;AAChC,QAAA,IAAI,CAAC,YAAA,CAAa,mBAAA,CAAoB,QAAA,CAAS,cAAc,CAAA,EAAG;AAC9D,UAAA,MAAM,IAAI,yBAAA;AAAA,YACR,6BAA6B,cAAc,CAAA,8CAAA,EAAiD,aAAa,mBAAA,CAAoB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,WACzI;AAAA,QACF;AACA,QAAA,IAAI,mBAAmB,MAAA,EAAQ;AAC7B,UAAA,QAAA,GAAW,MAAA;AACX,UAAA,SAAA,GAAY,MAAA;AAAA,QACd,CAAA,MAAO;AACL,UAAA,MAAM,KAAA,GAAQ,MAAM,qBAAA,CAAsB;AAAA,YACxC,cAAc,EAAE,GAAG,cAAc,mBAAA,EAAqB,CAAC,cAAc,CAAA,EAAE;AAAA,YACvE,KAAA;AAAA,YACA,OAAA;AAAA,YACA,qBAAqB,MAAA,CAAO,mBAAA;AAAA,YAC5B,YAAA,EAAc,MAAA,CAAO,aAAA,GAAgB,OAAO;AAAA,WAC7C,CAAA;AACD,UAAA,QAAA,GAAW,KAAA,CAAM,QAAA;AACjB,UAAA,SAAA,GAAY,KAAA,CAAM,SAAA;AAAA,QACpB;AAAA,MACF,CAAA,MAAO;AACL,QAAA,MAAM,KAAA,GAAQ,MAAM,qBAAA,CAAsB;AAAA,UACxC,YAAA;AAAA,UACA,KAAA;AAAA,UACA,OAAA;AAAA,UACA,qBAAqB,MAAA,CAAO,mBAAA;AAAA,UAC5B,YAAA,EAAc,MAAA,CAAO,aAAA,GAAgB,OAAO;AAAA,SAC7C,CAAA;AACD,QAAA,QAAA,GAAW,KAAA,CAAM,QAAA;AACjB,QAAA,SAAA,GAAY,KAAA,CAAM,SAAA;AAAA,MACpB;AAOA,MAAA,MAAM,UAAA,GACJ,MAAA,KAAW,kCAAA,GACP,8BAAA,GACA,wBAAA;AACN,MAAA,MAAM,SAAS,MAAM,UAAA,CAAW,EAAE,YAAA,EAAc,OAAA,EAAS,OAAO,CAAA;AAEhE,MAAA,OAAO,wBAAA,CAAyB;AAAA,QAC9B,YAAA;AAAA,QACA,MAAA;AAAA,QACA,iBAAA,EAAmB,QAAA;AAAA,QACnB,MAAA;AAAA,QACA,SAAA;AAAA,QACA,WAAA;AAAA,QACA;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,WAAW,IAAA,EAAM;AACf,MAAA,OAAO,oBAAA,CAAqB,IAAA,EAAM,EAAE,YAAA,EAAc,iBAAiB,CAAA;AAAA,IACrE,CAAA;AAAA,IAEA,MAAM,aAAa,IAAA,EAAM;AACvB,MAAA,MAAM,SAAS,MAAM,oBAAA,CAAqB,MAAM,EAAE,YAAA,EAAc,iBAAiB,CAAA;AACjF,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,gBAAA,CAAiB,IAAA,CAAK,IAAA,CAAK,CAAC,KAAA,KAAU,KAAA,CAAM,EAAA,KAAO,IAAA,CAAK,QAAQ,CAAA;AACpF,MAAA,IAAI,WAAW,MAAA,EAAW;AACxB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,oCAAA,EAAuC,KAAK,QAAQ,CAAA,2CAAA;AAAA,SACtD;AAAA,MACF;AACA,MAAA,MAAM,UAAA,GAAa;AAAA,QACjB,MAAA;AAAA,QACA,MAAA;AAAA,QACA,UAAA,EAAY,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAAA,QAClC,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,eAAe,IAAA,CAAK,aAAA;AAAA,QACpB,aAAa,IAAA,CAAK,WAAA;AAAA,QAClB,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,WAAW,IAAA,CAAK;AAAA,OAClB;AACA,MAAA,OAAO,aAAkB,UAAU,CAAA;AAAA,IACrC,CAAA;AAAA,IAEA,kBAAkB,IAAA,EAAM;AACtB,MAAA,OAAO,kBAAkB,IAAA,EAAM,EAAE,YAAA,EAAc,gBAAA,EAAkB,iBAAiB,CAAA;AAAA,IACpF,CAAA;AAAA,IAEA,8BAA8B,IAAA,EAAM;AAClC,MAAA,OAAO,8BAA8B,IAAA,EAAM;AAAA,QACzC,YAAA;AAAA,QACA,gBAAA,EAAkB;AAAA,OACnB,CAAA;AAAA,IACH,CAAA;AAAA,IAEA,qBAAqB,QAAA,EAAU;AAC7B,MAAA,OAAO,qBAAqB,QAAQ,CAAA;AAAA,IACtC;AAAA,GACF;AACF;AAEA,SAAS,gBAAA,CAAiB,QAAgB,SAAA,EAA0B;AAClE,EAAA,IAAI,cAAc,MAAA,EAAW;AAC3B,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GAAe,OAAO,MAAM,CAAA;AAClC,EAAA,MAAM,eAAA,GAAkB,OAAO,SAAS,CAAA;AACxC,EAAA,IAAI,eAAe,eAAA,EAAiB;AAClC,IAAA,MAAM,IAAI,sBAAA;AAAA,MACR,CAAA,iCAAA,EAAoC,MAAM,CAAA,0BAAA,EAA6B,SAAS,CAAA;AAAA,KAClF;AAAA,EACF;AACF;AC9OO,SAAS,wBAAwB,OAAA,EAAqC;AAC3E,EAAA,MAAM,iBAAiB,YAA8BC,eAAA,CAAW,MAAM,OAAA,CAAQ,kBAAkB,CAAA;AAChG,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,cAAA;AAAA,IACZ,eAAe,OAAO,EAAE,QAAQ,KAAA,EAAO,WAAA,EAAa,SAAQ,KAAM;AAChE,MAAA,MAAM,IAAA,GAAO,MAAM,cAAA,EAAe;AAClC,MAAA,MAAM,SAAA,GAAY;AAAA,QAChB,MAAA;AAAA,QACA,OAAO,EAAE,GAAG,OAAO,YAAA,EAAc,sBAAA,CAAuB,MAAM,CAAA,EAAE;AAAA,QAChE,WAAA;AAAA,QACA;AAAA,OACF;AACA,MAAA,MAAM,IAAA,GAAOC,wBAAmB,SAA2C,CAAA;AAC3E,MAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,IAAA,CAAK,wBAAwB,CAAC,IAAA,EAAM,IAAI,CAAC,CAAA;AACnE,MAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,CAAC,kBAAA,CAAmB,IAAA,CAAK,GAAG,CAAA,EAAG;AAC5D,QAAA,MAAM,IAAI,KAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO,GAAA;AAAA,IACT;AAAA,GACF;AACF;AAQA,SAAS,uBAAuB,MAAA,EAAwD;AACtF,EAAA,MAAM,SAA+B,EAAC;AACtC,EAAA,IAAI,MAAA,CAAO,IAAA,KAAS,MAAA,EAAW,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,QAAA,EAAU,CAAA;AAC3E,EAAA,IAAI,MAAA,CAAO,OAAA,KAAY,MAAA,EAAW,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,QAAA,EAAU,CAAA;AACjF,EAAA,IAAI,MAAA,CAAO,OAAA,KAAY,MAAA,EAAW,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,CAAA;AAClF,EAAA,IAAI,OAAO,iBAAA,KAAsB,MAAA;AAC/B,IAAA,MAAA,CAAO,KAAK,EAAE,IAAA,EAAM,mBAAA,EAAqB,IAAA,EAAM,WAAW,CAAA;AAC5D,EAAA,IAAI,MAAA,CAAO,IAAA,KAAS,MAAA,EAAW,MAAA,CAAO,IAAA,CAAK,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAW,CAAA;AAC5E,EAAA,OAAO,MAAA;AACT","file":"index.js","sourcesContent":["// Typed error classes for the x402-client. Each is a leaf `Error` subclass\n// with a stable `name` so callers can branch on `instanceof` or string-match\n// without parsing messages.\n\nexport class UnsupportedSchemeError extends Error {\n constructor(message: string) {\n super(message);\n this.name = \"UnsupportedSchemeError\";\n }\n}\n\nexport class UnsupportedTokenAuthError extends Error {\n constructor(message: string) {\n super(message);\n this.name = \"UnsupportedTokenAuthError\";\n }\n}\n\nexport class NoCompatibleActionError extends Error {\n constructor(message: string) {\n super(message);\n this.name = \"NoCompatibleActionError\";\n }\n}\n\nexport class FulfillmentValidationError extends Error {\n constructor(message: string) {\n super(message);\n this.name = \"FulfillmentValidationError\";\n }\n}\n\nexport class MaxAmountExceededError extends Error {\n constructor(message: string) {\n super(message);\n this.name = \"MaxAmountExceededError\";\n }\n}\n","// Pick the on-chain Boson action to invoke from a parsed PaymentRequirements.\n//\n// Two commit-time actions are supported:\n// - `boson-createOfferAndCommit` (Flow A, deferred redeem)\n// - `boson-createOfferCommitAndRedeem` (Flow B, atomic commit+redeem)\n//\n// Selection rules:\n// - `policy.redeemMode = \"commit-only\"`: require Flow A.\n// - `policy.redeemMode = \"auto\"` (or unset): prefer Flow A, fall back to Flow B.\n// - `policy.redeemMode = \"commit-and-redeem\"`: require Flow B; throw\n// `NoCompatibleActionError` if the server hasn't advertised it.\n//\n// In \"auto\" mode we keep MVP behaviour (prefer Flow A whenever advertised)\n// so existing callers don't silently switch flows on the SDK upgrade. A\n// future policy could promote Flow B when both are offered, but that's a\n// separate change.\n\nimport type {\n BosonCommitActionId,\n EscrowPaymentRequirements,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\n\nimport { NoCompatibleActionError } from \"./errors.js\";\nimport type { Policy } from \"./types.js\";\n\nconst FLOW_A: BosonCommitActionId = \"boson-createOfferAndCommit\";\nconst FLOW_B: BosonCommitActionId = \"boson-createOfferCommitAndRedeem\";\n\n/*\n Resolve the Boson commit-time action the client will sign. Throws\n * `NoCompatibleActionError` when the server hasn't advertised any action\n * compatible with the requested policy.\n /\nexport function pickAction(\n requirements: EscrowPaymentRequirements,\n policy?: Policy,\n): BosonCommitActionId {\n const redeemMode = policy?.redeemMode ?? \"auto\";\n\n const flowAOffered = requirements.actions.next.some(\n (a) => a.id === FLOW_A && a.channels.includes(\"server\"),\n );\n const flowBOffered = requirements.actions.next.some(\n (a) => a.id === FLOW_B && a.channels.includes(\"server\"),\n );\n\n if (redeemMode === \"commit-and-redeem\") {\n if (flowBOffered) return FLOW_B;\n throw new NoCompatibleActionError(\n `policy.redeemMode='commit-and-redeem' requires '${FLOW_B}' on the server channel; requirements only advertise [${requirements.actions.next.map((a) => a.id).join(\", \")}]`,\n );\n }\n\n if (redeemMode === \"commit-only\") {\n if (flowAOffered) return FLOW_A;\n throw new NoCompatibleActionError(\n `policy.redeemMode='commit-only' requires '${FLOW_A}' on the server channel; requirements only advertise [${requirements.actions.next.map((a) => a.id).join(\", \")}]`,\n );\n }\n\n // \"auto\": prefer Flow A when present, but fall back to Flow B.\n if (flowAOffered) return FLOW_A;\n if (flowBOffered) return FLOW_B;\n\n throw new NoCompatibleActionError(\n `no commit-time action ('${FLOW_A}' or '${FLOW_B}') with 'server' channel found in requirements.actions.next`,\n );\n}\n","// Isomorphic base64 helpers used by the X-PAYMENT / X-PAYMENT-RESPONSE\n// header pipeline. Picks `Buffer` on Node and `atob` / `btoa` on\n// browsers — tsup builds both formats, so the runtime branch matters.\n//\n// Browser-side encode goes UTF-8 → binary-string → `btoa` because\n// `btoa` accepts only code units 0–255 and throws\n// `InvalidCharacterError` on any character above U+00FF, while wire\n// payloads can carry free-form fulfillment data populated by the\n// buyer (emails, addresses, notes). Decode does the inverse.\n\n/* Decode a base64-encoded string to UTF-8. /\nexport function decodeBase64(value: string): string {\n if (typeof Buffer !== \"undefined\") {\n return Buffer.from(value, \"base64\").toString(\"utf8\");\n }\n const binary = atob(value);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) {\n bytes[i] = binary.charCodeAt(i);\n }\n return new TextDecoder().decode(bytes);\n}\n\n/* Encode a UTF-8 string as base64. /\nexport function encodeBase64(value: string): string {\n if (typeof Buffer !== \"undefined\") {\n return Buffer.from(value, \"utf8\").toString(\"base64\");\n }\n const bytes = new TextEncoder().encode(value);\n let binary = \"\";\n for (const b of bytes) {\n binary += String.fromCharCode(b);\n }\n return btoa(binary);\n}\n","// Resolve the `fulfillment` slot the client will attach to the commit-time\n// payment payload. The buyer's chosen `option` always flows (capability\n// negotiation against the server's advertised set); the `data` field is\n// validated locally against the option's JSON Schema either way so the\n// client fails fast before signing — but whether it travels with the\n// commit-time payload depends on the action the client is signing:\n//\n// - Atomic Flow B (`boson-createOfferCommitAndRedeem`): the commit and\n// on-chain redeem happen in one transaction, so the X-PAYMENT header\n// is the only round trip the buyer makes. `data` MUST be present.\n// - Two-step Flow A (`boson-createOfferAndCommit`): the buyer redeems\n// later via `boson-redeem`'s POST body — `data` is omitted at commit\n// and attached at redeem.\n//\n// The conditional emission lives in the payload assembler (`payload.ts`);\n// this module returns both `option` and `data` and lets the caller decide.\n\nimport Ajv from \"ajv\";\nimport type { EscrowPaymentRequirements } from \"@bosonprotocol/x402-core/schemes/escrow\";\n\nimport { FulfillmentValidationError } from \"./errors.js\";\nimport type { FulfillmentConfig, X402bClientConfig } from \"./types.js\";\n\nexport interface ResolvedFulfillment {\n option: string;\n /\n Buyer-supplied delivery data, validated locally against the option's\n * JSON Schema. The payload assembler decides whether to include this\n * field in the commit-time payload (Flow B yes, Flow A no).\n /\n data: Record<string, unknown> \| null;\n}\n\n/\n Returns the resolved `{ option, data }` pair the assembler will attach\n * to the commit-time fulfillment slot (Flow B) or carry forward for the\n * redeem-time POST body (Flow A). Throws when the requirements demand a\n * fulfillment but the client config doesn't supply one, when the option\n * id isn't advertised by the server, or when the buyer data doesn't\n * validate against the option's schema.\n /\nexport function resolveFulfillment(\n requirements: EscrowPaymentRequirements,\n config: Pick<X402bClientConfig, \"fulfillment\">,\n): ResolvedFulfillment \| undefined {\n const required = requirements.fulfillment?.required ?? false;\n if (!required) {\n return undefined;\n }\n\n const fulfillmentConfig: FulfillmentConfig \| undefined = config.fulfillment;\n if (!fulfillmentConfig) {\n throw new FulfillmentValidationError(\n \"requirements.fulfillment.required is true but client config did not supply a fulfillment selection\",\n );\n }\n\n const option = requirements.fulfillment?.options.find((o) => o.id === fulfillmentConfig.option);\n if (!option) {\n const advertised = requirements.fulfillment?.options.map((o) => o.id).join(\", \") ?? \"<none>\";\n throw new FulfillmentValidationError(\n `fulfillment option '${fulfillmentConfig.option}' not advertised by requirements (advertised: ${advertised})`,\n );\n }\n\n if (option.schema === null) {\n if (fulfillmentConfig.data !== null) {\n throw new FulfillmentValidationError(\n `fulfillment option '${option.id}' accepts no buyer data; use null`,\n );\n }\n } else {\n const ajv = new Ajv({ allErrors: true, strict: false });\n const validate = ajv.compile(option.schema);\n const ok = validate(fulfillmentConfig.data);\n if (!ok) {\n throw new FulfillmentValidationError(\n `fulfillment data does not match option '${option.id}' schema: ${ajv.errorsText(validate.errors)}`,\n );\n }\n }\n\n return { option: fulfillmentConfig.option, data: fulfillmentConfig.data };\n}\n","// Translator that wraps a `Signer` (plus an optional viem `PublicClient`\n// for read-only RPC calls) into a `Web3LibAdapter` that `CoreSDK` can be\n// constructed against.\n//\n// Two RPC methods are forwarded:\n//\n// - `send(\"eth_signTypedData_v4\", ...)` — buyer signs via `signer.signTypedData`.\n// - `call({ to, data })` — read-only `eth_call`, forwarded to the\n// `PublicClient` when one is configured. Required by the EIP-2612\n// Permit token-auth path, which fetches the token's `nonces(owner)`\n// before signing. Throws a clear error when invoked without a\n// PublicClient so the configuration mistake surfaces fast.\n//\n// Transaction-flavour methods (`sendTransaction`, `estimateGas`,\n// `getBalance`, `getTransactionReceipt`, `getCurrentTimeMs`) reject — the\n// buyer never goes on-chain in MVP.\n\nimport type { Web3LibAdapter } from \"@bosonprotocol/common\";\nimport type { PublicClient, TypedDataDomain, TypedDataParameter } from \"viem\";\n\nimport type { Signer } from \"../types.js\";\n\n/\n Build the `Web3LibAdapter` that `@bosonprotocol/core-sdk`'s `CoreSDK`\n * accepts. `send(\"eth_signTypedData_v4\", [address, jsonString])` delegates\n * to `signer.signTypedData(...)`. `call({ to, data })` is forwarded to\n * `publicClient.call(...)` when one is provided; otherwise it throws (the\n * Permit strategy is the only path that exercises `call`).\n /\nexport function signerToWeb3LibAdapter(\n signer: Signer,\n chainId: number,\n publicClient?: PublicClient,\n): Web3LibAdapter {\n return {\n uuid: \"x402-client:signer-adapter\",\n getSignerAddress: () => signer.getAddress(),\n isSignerContract: async () => false,\n getChainId: async () => chainId,\n send: async (method, params) => {\n if (method !== \"eth_signTypedData_v4\") {\n throw new Error(\n `x402-client: signer adapter does not support RPC method '${method}'; only eth_signTypedData_v4 is implemented`,\n );\n }\n const raw = (params as unknown[])[1];\n if (typeof raw !== \"string\") {\n throw new Error(\n \"x402-client: eth_signTypedData_v4 payload[1] is not a JSON string — core-sdk internals may have changed\",\n );\n }\n const typedData = JSON.parse(raw) as {\n domain: TypedDataDomain;\n types: Record<string, readonly TypedDataParameter[]>;\n primaryType: string;\n message: Record<string, unknown>;\n };\n return signer.signTypedData(typedData);\n },\n call: async (req) => {\n if (!publicClient) {\n throw new Error(\n \"x402-client: signer adapter has no PublicClient configured; eth_call cannot be forwarded. \" +\n \"Pass `publicClients` in X402bClientConfig to enable the Permit token-auth strategy.\",\n );\n }\n const result = await publicClient.call({\n to: req.to as `0x${string}`,\n data: req.data as `0x${string}` \| undefined,\n });\n return result.data ?? \"0x\";\n },\n getBalance: () => Promise.reject(unreachable(\"getBalance\")),\n estimateGas: () => Promise.reject(unreachable(\"estimateGas\")),\n sendTransaction: () => Promise.reject(unreachable(\"sendTransaction\")),\n getTransactionReceipt: () => Promise.reject(unreachable(\"getTransactionReceipt\")),\n getCurrentTimeMs: () => Promise.reject(unreachable(\"getCurrentTimeMs\")),\n };\n}\n\nfunction unreachable(method: string): Error {\n return new Error(\n `x402-client: stub Web3LibAdapter.${method}() is not implemented — the client never goes on-chain in MVP`,\n );\n}\n","// Construct (and cache) the `CoreSDK` instance the client signs through.\n//\n// The buyer never queries Boson's subgraph in MVP — only the EIP-712 meta-tx\n// signing path is invoked — but `CoreSDK`'s base constructor requires a\n// `subgraphUrl` string. Callers can configure real URLs per chain via\n// `subgraphUrls`, or omit it and rely on the placeholder sentinel below;\n// either way no HTTP call to that URL is made during signing.\n\nimport { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport type { Address } from \"viem\";\n\nimport { signerToWeb3LibAdapter } from \"./internal/web3lib-adapter.js\";\nimport type { Signer, X402bClientConfig } from \"./types.js\";\n\n// Sentinel used when the caller did not configure a real subgraph URL for\n// the chain. The signing path never reads from it; the value just needs to\n// be a non-empty string the constructor accepts.\nconst PLACEHOLDER_SUBGRAPH_URL = \"https://x402-client.placeholder.invalid/subgraph\";\n\nexport interface CoreSdkContext {\n coreSdk: CoreSDK;\n chainId: number;\n}\n\n/\n Parse a CAIP-2 EVM network identifier (e.g. `\"eip155:8453\"`) into its\n * numeric chain id. Throws if the network is not a well-formed `eip155:<N>`.\n /\nexport function parseChainId(network: string): number {\n const match = network.match(/^eip155:(\\d+)$/);\n if (!match) {\n throw new Error(\n `x402-client: unsupported network '${network}' (expected CAIP-2 'eip155:<chainId>')`,\n );\n }\n const chainId = Number(match[1]);\n if (!Number.isSafeInteger(chainId) \|\| chainId <= 0) {\n throw new Error(\n `x402-client: unsupported network '${network}' (chainId must be a positive safe integer)`,\n );\n }\n return chainId;\n}\n\n/\n Lazy factory that returns a `CoreSDK` instance configured against the\n * escrow contract advertised in the network. Instances are cached per\n * `(chainId, escrowAddress)` so repeated calls on the same network — for\n * commit and subsequent post-commit actions on the same exchange — reuse a\n * single SDK.\n \n The SDK's `web3Lib.call(...)` is wired through `config.publicClients[chainId]`\n * when one is configured; this enables read-only RPC reads (e.g. the EIP-2612\n * Permit strategy's `nonces(owner)` lookup). Chains without a PublicClient\n * configured can still sign meta-transactions and ERC-3009 / Permit2\n * token-auths.\n /\nexport function createCoreSdkFactory(\n signer: Signer,\n config: Pick<X402bClientConfig, \"subgraphUrls\" \| \"publicClients\">,\n) {\n const cache = new Map<string, CoreSDK>();\n\n return function buildCoreSdk(network: string, escrowAddress: Address): CoreSdkContext {\n const chainId = parseChainId(network);\n const cacheKey = `${chainId}:${escrowAddress.toLowerCase()}`;\n const cached = cache.get(cacheKey);\n if (cached) {\n return { coreSdk: cached, chainId };\n }\n\n const subgraphUrl = config.subgraphUrls?.[chainId] ?? PLACEHOLDER_SUBGRAPH_URL;\n const publicClient = config.publicClients?.[chainId];\n const web3Lib = signerToWeb3LibAdapter(signer, chainId, publicClient);\n\n const coreSdk = new CoreSDK({\n web3Lib,\n subgraphUrl,\n protocolDiamond: escrowAddress,\n chainId,\n });\n\n cache.set(cacheKey, coreSdk);\n return { coreSdk, chainId };\n };\n}\n","// Parse the optional `X-PAYMENT-RESPONSE` header the server may emit after\n// settling.\n//\n// The escrow-scheme spec doesn't pin a strict contract for this header yet,\n// so the parser is permissive: base64-decode the value, JSON-parse it, and\n// return `{ raw }`. Best-effort lifting picks `exchangeId` / `state` from\n// the common property paths an x402B server might use. Callers who need\n// stronger guarantees can read `raw` directly.\n\nimport { decodeBase64 } from \"./base64.js\";\nimport type { ExchangeSummary } from \"./types.js\";\n\nconst HEADER_NAME = \"X-PAYMENT-RESPONSE\";\n\n/* Read a header value from anything that exposes `.get(name)`. /\ninterface HeaderLike {\n get(name: string): string \| null;\n}\n\ninterface ResponseLike {\n headers: HeaderLike;\n}\n\n/\n Decode the `X-PAYMENT-RESPONSE` header on a Response-like object. Returns\n * `undefined` when the header isn't set; throws on a malformed payload.\n /\nexport function parsePaymentResponse(response: ResponseLike): ExchangeSummary \| undefined {\n const raw = response.headers.get(HEADER_NAME);\n if (!raw) {\n return undefined;\n }\n\n const json = decodeBase64(raw);\n const parsed: unknown = JSON.parse(json);\n const summary: ExchangeSummary = { raw: parsed };\n\n // Only walk into the payload when it's actually a plain record. A valid\n // JSON value can be `null`, an array, or a primitive — touching keys on\n // those would crash, defeating the file-header permissive promise.\n if (typeof parsed === \"object\" && parsed !== null && !Array.isArray(parsed)) {\n const obj = parsed as Record<string, unknown>;\n\n const exchangeId = pickString(obj, [\"exchangeId\", \"exchange_id\"]);\n if (exchangeId !== undefined) {\n summary.exchangeId = exchangeId;\n }\n\n if (isClientStateShape(obj.state)) {\n summary.state = obj.state;\n }\n\n // Fallback for the server-emitted shape, which carries exchange state\n // under `nextActions.exchangeState` (and optionally `disputeState`)\n // rather than a top-level `state` field. The top-level lookup above\n // still wins when present, preserving forward-compat with external\n // servers that publish the flatter shape.\n if (\n summary.state === undefined &&\n typeof obj.nextActions === \"object\" &&\n obj.nextActions !== null &&\n !Array.isArray(obj.nextActions)\n ) {\n const na = obj.nextActions as Record<string, unknown>;\n const exchange = pickString(na, [\"exchangeState\"]);\n const dispute = pickString(na, [\"disputeState\"]);\n if (exchange !== undefined) {\n let candidate: unknown;\n if (exchange === \"DISPUTED\") {\n candidate = dispute !== undefined ? { exchange, dispute } : undefined;\n } else {\n candidate = { exchange };\n }\n if (isClientStateShape(candidate)) {\n summary.state = candidate;\n }\n }\n }\n }\n\n return summary;\n}\n\n/\n Shape gate for `state` arriving from the permissive server header. We\n * keep the file-header promise of permissiveness — `ClientState` is\n * `\"PRE_COMMIT\"` or an `{ exchange, dispute? }` record today, but the\n * wire contract isn't pinned, so any non-empty string (e.g. raw\n * `ExchangeState` value) or non-array `{ exchange }`-shaped record is\n * surfaced verbatim. Numbers, booleans, `null`, empty strings, arrays,\n * and records missing a string `exchange` field are rejected so garbage\n * payloads can't masquerade as a typed `ClientState`.\n /\nfunction isClientStateShape(v: unknown): v is NonNullable<ExchangeSummary[\"state\"]> {\n if (typeof v === \"string\") return v.length > 0;\n if (typeof v !== \"object\" \|\| v === null \|\| Array.isArray(v)) return false;\n const rec = v as Record<string, unknown>;\n if (typeof rec.exchange !== \"string\" \|\| rec.exchange.length === 0) return false;\n if (\"dispute\" in rec && rec.dispute !== undefined && typeof rec.dispute !== \"string\") {\n return false;\n }\n return true;\n}\n\nfunction pickString(obj: Record<string, unknown>, keys: string[]): string \| undefined {\n for (const key of keys) {\n const v = obj[key];\n if (typeof v === \"string\" && v.length > 0) {\n return v;\n }\n }\n return undefined;\n}\n","// Assemble the X-PAYMENT body and base64-encode it.\n//\n// Defense-in-depth: the assembled `EscrowPaymentPayload` is re-validated\n// through `parseEscrowPaymentPayload` from `@bosonprotocol/x402-core`\n// before serialization, so shape bugs surface here instead of at the\n// server. Base64 encoding goes through the isomorphic `encodeBase64`\n// helper from `./base64.js` — `Buffer` on Node, UTF-8-aware\n// `btoa` on browsers.\n\nimport {\n parseEscrowPaymentPayload,\n type BosonMetaTx,\n type BosonTokenAuth,\n type EscrowPaymentPayload,\n type EscrowPaymentRequirements,\n type TokenAuthStrategy,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { Address } from \"viem\";\n\nimport { encodeBase64 } from \"./base64.js\";\nimport type { ResolvedFulfillment } from \"./fulfillment.js\";\n\n/* Current x402 protocol version embedded in the payload envelope. /\nexport const X402_VERSION = 2;\n\nexport interface AssembleArgs {\n requirements: EscrowPaymentRequirements;\n action: string;\n tokenAuthStrategy: TokenAuthStrategy;\n metaTx: BosonMetaTx;\n tokenAuth?: BosonTokenAuth;\n fulfillment?: ResolvedFulfillment;\n buyer: Address;\n}\n\n/* Construct and re-validate the payload, returning the structured object. /\nexport function assemblePayload({\n requirements,\n action,\n tokenAuthStrategy,\n metaTx,\n tokenAuth,\n fulfillment,\n buyer,\n}: AssembleArgs): EscrowPaymentPayload {\n // Fulfillment `data` rides along only for atomic Flow B — Flow A\n // defers it to the redeem POST body. The conditional emission keeps\n // the assembler aligned with the server-side rule-13 validator that\n // rejects `data` on Flow A and requires it on Flow B.\n const fulfillmentSlot =\n fulfillment === undefined\n ? undefined\n : action === \"boson-createOfferCommitAndRedeem\"\n ? { option: fulfillment.option, data: fulfillment.data }\n : { option: fulfillment.option };\n\n const payload: EscrowPaymentPayload = {\n x402Version: X402_VERSION,\n scheme: \"escrow\",\n network: requirements.network,\n payload: {\n action,\n tokenAuthStrategy,\n offerRef: {\n fullOffer: requirements.offer.fullOffer,\n sellerSig: requirements.offer.sellerSig,\n },\n buyer,\n metaTx,\n ...(tokenAuth ? { tokenAuth } : {}),\n },\n ...(fulfillmentSlot ? { fulfillment: fulfillmentSlot } : {}),\n };\n\n // Defensive re-parse — surfaces shape bugs (e.g. malformed hex) before\n // the payload escapes the client.\n parseEscrowPaymentPayload(payload);\n return payload;\n}\n\n/* Build, validate, and base64-encode the payload for the `X-PAYMENT` header. /\nexport function assembleAndEncodePayload(args: AssembleArgs): string {\n const payload = assemblePayload(args);\n return encodeBase64(JSON.stringify(payload));\n}\n","// Cross-platform random helpers.\n//\n// The client is framework-agnostic: it must run in browsers (where\n// `node:crypto` is unavailable) as well as Node. The Web Crypto API\n// (`globalThis.crypto.getRandomValues`) covers both — it's been a Node\n// global since 19 and is universally available in modern browsers.\n// The package's `engines.node` already requires Node ≥ 22, so we can\n// rely on the global without a `node:crypto` fallback.\n//\n// Centralizing the helpers here keeps `pre-commit.ts`, `post-commit.ts`,\n// and `token-auth/erc3009.ts` from each importing their own crypto\n// primitive and re-deriving the same byte → bigint / byte → hex\n// conversion (CLAUDE.md \"Move duplicated constants ... into a shared\n// file the moment they appear in two places\").\n\nimport type { Hex } from \"viem\";\n\n/* Fill a fresh `Uint8Array` of `size` bytes with cryptographically random bytes. /\nexport function randomBytes(size: number): Uint8Array {\n const bytes = new Uint8Array(size);\n if (typeof globalThis.crypto?.getRandomValues !== \"function\") {\n throw new Error(\n \"x402-client: globalThis.crypto.getRandomValues is unavailable — environment lacks the Web Crypto API\",\n );\n }\n globalThis.crypto.getRandomValues(bytes);\n return bytes;\n}\n\n/* 32-byte cryptographically random `0x`-prefixed hex string. /\nexport function randomBytes32(): Hex {\n const bytes = randomBytes(32);\n let hex = \"0x\";\n for (const b of bytes) {\n hex += b.toString(16).padStart(2, \"0\");\n }\n return hex as Hex;\n}\n\n/* Cryptographically random `uint256`. Used for protocol meta-tx replay-protection nonces. /\nexport function randomUint256(): bigint {\n const bytes = randomBytes(32);\n let n = 0n;\n for (const byte of bytes) {\n n = (n << 8n) \| BigInt(byte);\n }\n return n;\n}\n","// Sign the buyer's Boson protocol meta-transaction for one of the two\n// commit-time actions:\n//\n// - Flow A — `boson-createOfferAndCommit` (deferred redeem). Signed via\n// `coreSdk.signMetaTxCreateOfferAndCommit`.\n// - Flow B — `boson-createOfferCommitAndRedeem` (atomic commit+redeem\n// via `OrchestrationHandlerFacet2.createOfferCommitAndRedeem`). Signed\n// via `coreSdk.signMetaTxCreateOfferCommitAndRedeem`.\n//\n// Both route through `CoreSDK` directly so the EIP-712 domain, function\n// signature, and calldata encoding stay in lock-step with the deployed\n// protocol. The returned `SignedMetaTx` is shaped exactly as the on-chain\n// `MetaTransactionsHandlerFacet` recovers against; we re-shape it into\n// the escrow scheme's wire-format `BosonMetaTx` for the X-PAYMENT payload.\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport type { FullOfferArgs } from \"@bosonprotocol/common\";\nimport type {\n BosonMetaTx,\n EscrowPaymentRequirements,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { Address, Hex } from \"viem\";\n\nimport { randomUint256 } from \"./utils/crypto.js\";\n\nexport interface SignCreateOfferAndCommitArgs {\n requirements: EscrowPaymentRequirements;\n coreSdk: CoreSDK;\n buyer: Address;\n}\n\n/\n Builds the buyer-side meta-tx for `createOfferAndCommit`, signs it via\n * `CoreSDK`, and returns the wire-format envelope ready to be embedded in\n * an `EscrowPaymentPayload`.\n \n The `createOfferAndCommitArgs` are reconstructed from the\n * `requirements.offer` triple — the opaque `fullOffer` carries the\n * `Omit<FullOfferArgs, \"signature\">` shape, `sellerSig` becomes the\n * `signature`, and the buyer's address is spliced in as `committer`. Any\n * shape drift between the wire format and `FullOfferArgs` surfaces as a\n * yup validation error from core-sdk's\n * `createOfferAndCommitArgsSchema.validateSync` — propagate it rather than\n * patch silently (CLAUDE.md \"Production over spec when they diverge\").\n /\nexport async function signCreateOfferAndCommit({\n requirements,\n coreSdk,\n buyer,\n}: SignCreateOfferAndCommitArgs): Promise<BosonMetaTx> {\n const nonce = randomUint256();\n\n const createOfferAndCommitArgs = buildCreateOfferAndCommitArgs(requirements, buyer);\n\n const signed = await coreSdk.signMetaTxCreateOfferAndCommit({\n nonce: nonce.toString(),\n createOfferAndCommitArgs,\n });\n\n return reshape(signed, buyer, nonce);\n}\n\n/\n Flow B counterpart to {@link signCreateOfferAndCommit} — signs\n * the meta-tx that drives `OrchestrationHandlerFacet2.createOfferCommitAndRedeem`.\n * The argument shape is identical (the protocol uses the same\n * `FullOfferArgs` struct); only the resulting function selector and\n * post-state differ.\n /\nexport async function signCreateOfferCommitAndRedeem({\n requirements,\n coreSdk,\n buyer,\n}: SignCreateOfferAndCommitArgs): Promise<BosonMetaTx> {\n const nonce = randomUint256();\n\n const createOfferAndCommitArgs = buildCreateOfferAndCommitArgs(requirements, buyer);\n\n const signed = await coreSdk.signMetaTxCreateOfferCommitAndRedeem({\n nonce: nonce.toString(),\n createOfferAndCommitArgs,\n });\n\n return reshape(signed, buyer, nonce);\n}\n\nfunction buildCreateOfferAndCommitArgs(\n requirements: EscrowPaymentRequirements,\n buyer: Address,\n): FullOfferArgs {\n return {\n ...(requirements.offer.fullOffer as object),\n signature: requirements.offer.sellerSig,\n committer: buyer,\n } as unknown as FullOfferArgs;\n}\n\nfunction reshape(\n signed: {\n functionName: string;\n functionSignature: string;\n r: string;\n s: string;\n v: number;\n },\n buyer: Address,\n nonce: bigint,\n): BosonMetaTx {\n return {\n from: buyer,\n nonce: nonce.toString(),\n functionName: signed.functionName,\n functionSignature: signed.functionSignature as Hex,\n sig: {\n v: Number(signed.v),\n r: signed.r as Hex,\n s: signed.s as Hex,\n },\n };\n}\n","// Sign Boson protocol meta-transactions for post-commit buyer actions.\n//\n// These are the transitions the buyer can drive once an exchange exists on\n// chain: redeem the voucher, cancel/complete the exchange, or move through\n// the dispute family. Each is a single-call meta-tx that the\n// server/facilitator submits via\n// `MetaTransactionsHandlerFacet.executeMetaTransaction`. None of them\n// carry a token-auth payload (the funds are already escrowed) so the\n// returned `BosonMetaTx` is the full wire-format the server consumes —\n// usually as a JSON POST body, not an `X-PAYMENT` header.\n//\n// We return both the `BosonMetaTx` envelope (useful for on-chain or MCP\n// channels) and the ABI-encoded `signedPayload` Hex consumed by the\n// server/facilitator HTTP convenience routes. The encoder lives in\n// `@bosonprotocol/x402-evm/codec` so client and facilitator share one\n// implementation.\n//\n// `boson-escalateDispute` is the one exception. If the dispute resolver\n// requires an escalation deposit, the resolver/server can return its own\n// 402 carrying an `escrow` `PaymentRequirements` and the buyer pairs this\n// meta-tx with a token-auth payload — that wrapper lives outside MVP. Here\n// we only sign the meta-tx itself; the deposit flow is a later PR.\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport type { BosonMetaTx, Hex as WireHex } from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { ActionId } from \"@bosonprotocol/x402-core/state-machine\";\nimport { encodeSignedPayload } from \"@bosonprotocol/x402-evm/codec\";\nimport type { Address, Hex } from \"viem\";\n\nimport { randomUint256 } from \"./utils/crypto.js\";\n\n// Matches the subset of ethers' `BigNumberish` core-sdk actually accepts at\n// runtime, without pulling `@ethersproject/bignumber` into this package's\n// declared deps. Callers usually pass decimal strings (the wire format).\ntype BigNumberish = string \| number \| bigint;\n\n/\n Buyer-invokable post-commit action ids — derived from `ActionId` in\n * `@bosonprotocol/x402-core/state-machine` (the single source of truth)\n * by excluding:\n \n - the commit-time ids, which the buyer signs via `handle402`;\n * - `boson-revokeVoucher`, which is seller-only;\n * - entity-keyed actions (`boson-withdrawFunds`), which are signed via\n * `client.signWithdrawFunds` / `client.signWithdrawAllAvailableFunds`\n * because they take an `entityId` + token list rather than an\n * `exchangeId`.\n /\ntype BuyerPostCommitActionId = Exclude<\n ActionId,\n \| \"boson-createOfferAndCommit\"\n \| \"boson-createOfferCommitAndRedeem\"\n \| \"boson-revokeVoucher\"\n \| \"boson-withdrawFunds\"\n>;\n\n/* Caller-supplied arguments for `client.signAction`. /\nexport type SignActionArgs = SimplePostCommitArgs \| ResolveDisputeArgs;\n\ninterface BaseArgs {\n exchangeId: BigNumberish;\n /* CAIP-2 network identifier (e.g. `\"eip155:8453\"`). /\n network: string;\n /* Boson Diamond address (the `escrowAddress` from the prior 402). /\n escrowAddress: Address;\n}\n\nexport interface SimplePostCommitArgs extends BaseArgs {\n actionId: Exclude<BuyerPostCommitActionId, \"boson-resolveDispute\">;\n}\n\nexport interface ResolveDisputeArgs extends BaseArgs {\n actionId: \"boson-resolveDispute\";\n /* Buyer share of the disputed amount, in the units the protocol expects (basis points). /\n buyerPercent: BigNumberish;\n /* Counterparty (seller) signature over the proposal. Hex string or `{r, s, v}`. /\n counterpartySig: Hex \| { r: Hex; s: Hex; v: number };\n}\n\nexport interface SignPostCommitActionDeps {\n buildCoreSdk: (network: string, escrowAddress: Address) => { coreSdk: CoreSDK; chainId: number };\n getBuyerAddress: () => Promise<Address>;\n}\n\n/\n Wire-format result of `signPostCommitAction`: the signed `BosonMetaTx`\n * envelope plus its ABI-encoded `signedPayload` Hex. Pick the one that\n * matches the channel — the server/facilitator HTTP routes consume\n * `signedPayload`; direct on-chain or MCP submissions use `metaTx`.\n /\nexport interface SignedPostCommitAction {\n metaTx: BosonMetaTx;\n /\n ABI-encoded `BosonMetaTx` ready to drop into a server / facilitator\n * route's `signedPayload` field. The hex is JSON-serialisable; we type\n * it as the loose wire `Hex` (string) rather than viem's strict\n * `\\`0x\\${string}\\`` so the codec's output matches the schemes module's\n * own `Hex` alias.\n /\n signedPayload: WireHex;\n}\n\n/\n Sign a post-commit action through the appropriate `CoreSDK.signMetaTx`\n mixin method. Returns both the wire-format `BosonMetaTx` envelope and\n * the ABI-encoded `signedPayload` Hex ready to POST to a server /\n * facilitator route.\n /\nexport async function signPostCommitAction(\n args: SignActionArgs,\n deps: SignPostCommitActionDeps,\n): Promise<SignedPostCommitAction> {\n const nonce = randomUint256();\n const buyer = await deps.getBuyerAddress();\n const { coreSdk } = deps.buildCoreSdk(args.network, args.escrowAddress);\n\n const signed = await callSignMetaTx(coreSdk, args, nonce);\n\n const metaTx: BosonMetaTx = {\n from: buyer,\n nonce: nonce.toString(),\n functionName: signed.functionName,\n functionSignature: signed.functionSignature as Hex,\n sig: {\n v: Number(signed.v),\n r: signed.r as Hex,\n s: signed.s as Hex,\n },\n };\n\n return { metaTx, signedPayload: encodeSignedPayload(metaTx) };\n}\n\ninterface SignedMetaTxShape {\n functionName: string;\n functionSignature: string;\n r: string;\n s: string;\n v: number;\n}\n\nasync function callSignMetaTx(\n coreSdk: CoreSDK,\n args: SignActionArgs,\n nonce: bigint,\n): Promise<SignedMetaTxShape> {\n const nonceStr = nonce.toString();\n const exchangeId = args.exchangeId;\n\n switch (args.actionId) {\n case \"boson-redeem\":\n return coreSdk.signMetaTxRedeemVoucher({ nonce: nonceStr, exchangeId });\n case \"boson-cancelVoucher\":\n return coreSdk.signMetaTxCancelVoucher({ nonce: nonceStr, exchangeId });\n case \"boson-completeExchange\":\n return coreSdk.signMetaTxCompleteExchange({ nonce: nonceStr, exchangeId });\n case \"boson-raiseDispute\":\n return coreSdk.signMetaTxRaiseDispute({ nonce: nonceStr, exchangeId });\n case \"boson-retractDispute\":\n return coreSdk.signMetaTxRetractDispute({ nonce: nonceStr, exchangeId });\n case \"boson-escalateDispute\":\n return coreSdk.signMetaTxEscalateDispute({ nonce: nonceStr, exchangeId });\n case \"boson-resolveDispute\":\n return coreSdk.signMetaTxResolveDispute({\n nonce: nonceStr,\n exchangeId,\n buyerPercent: args.buyerPercent,\n counterpartySig: args.counterpartySig,\n });\n default: {\n // The discriminated union makes this unreachable at the type level;\n // the `never` annotation enforces exhaustiveness at compile time, and\n // the throw guarantees a clear error if a runtime value ever slips\n // past the type checker.\n const _exhaustive: never = args;\n throw new Error(\n `x402-client: unsupported post-commit action '${(_exhaustive as { actionId: string }).actionId}'`,\n );\n }\n }\n}\n","// Channel-aware submitter for buyer-driven post-commit actions.\n//\n// Given a `NextAction` entry (from a prior server response's\n// `nextActions.next[]`) and a signed payload, walk the action's\n// advertised `channels` in order, intersected with the channels this\n// submitter knows how to drive over HTTP (`server`, `facilitator`).\n// Stop at the first 2xx and return the normalized result; treat 5xx /\n// network errors / timeouts as a signal to fall back; treat 4xx as\n// terminal (a buyer-side payload error fallback can't fix — masking it\n// would hide bugs).\n//\n// `onchain` / `mcp` / `xmtp` channels stay out of this module: the\n// onchain submitter needs a wallet client plumbed through client config\n// and tx-receipt waiting; the agentic channels need a separate\n// `@bosonprotocol/x402-agent` package that isn't shipped. Callers whose\n// `action.channels` only list those will hit `NoCompatibleChannelError`.\n//\n// The server channel returns the rich `{ txHash, nextActions, fulfillment? }`\n// envelope; the facilitator's `/perform-action` returns only\n// `{ ok: true, txHash, newExchangeState, newDisputeState? }`. The result\n// is normalized to the intersection — `nextActions` is surfaced when\n// the server channel handled the action, omitted when the facilitator\n// did (callers that need a fresh envelope after a facilitator fallback\n// can re-derive it server-side or read it from the next response).\n\nimport type { EscrowNextActions, NextAction } from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport { DisputeState, ExchangeState, type ActionId } from \"@bosonprotocol/x402-core/state-machine\";\nimport type { Address, Hex } from \"viem\";\n\nimport type { SignedPostCommitAction } from \"./post-commit.js\";\n\n/* Channels this submitter drives over HTTP. /\nexport type SubmitChannel = \"server\" \| \"facilitator\";\n\nconst SUBMIT_CHANNELS: readonly SubmitChannel[] = [\"server\", \"facilitator\"];\n\n/\n Why a channel attempt didn't yield a 2xx. `\"no-endpoint\"` is a\n * configuration gap (channel advertised, but no URL listed under\n * `action.endpoints`) — distinct from a real transport-level\n * `\"network\"` failure so callers branching on `reason` can tell the\n * two apart. `\"invalid-response\"` covers 2xx replies whose body\n * doesn't match the channel's expected shape — the server replied\n * but with something we can't make sense of, treated as a\n * recoverable failure (the next channel is tried).\n /\nexport type ChannelFailureReason =\n \| \"5xx\"\n \| \"4xx\"\n \| \"network\"\n \| \"timeout\"\n \| \"no-endpoint\"\n \| \"invalid-response\";\n\n/* Per-channel attempt record — every walk-step appended to `attempts[]`. /\nexport type ChannelAttempt =\n \| { channel: SubmitChannel; ok: true; status: number }\n \| {\n channel: SubmitChannel;\n ok: false;\n reason: ChannelFailureReason;\n status?: number;\n message?: string;\n };\n\n/* Caller passes `{ option, data }` for the redeem-only fulfillment payload. /\nexport interface FulfillmentRequest {\n option: string;\n data: Record<string, unknown> \| null;\n}\n\nexport interface SubmitArgs {\n action: NextAction;\n signed: SignedPostCommitAction;\n exchangeId: string;\n /* CAIP-2 (e.g. `\"eip155:31337\"`). Required by the facilitator route. /\n network: string;\n /* Escrow contract address. Required by the facilitator route. /\n escrowAddress: Address;\n /* Redeem-only — forwarded to the `server` channel body; ignored by `facilitator`. /\n fulfillment?: FulfillmentRequest;\n /* Defaults to `globalThis.fetch`. /\n fetch?: typeof globalThis.fetch;\n /* Per-channel timeout in milliseconds. Defaults to 10000. /\n timeoutMs?: number;\n}\n\nexport interface SubmitResult {\n txHash: Hex;\n newExchangeState: ExchangeState;\n newDisputeState?: DisputeState;\n /* Present only when the `server` channel handled the action. /\n nextActions?: EscrowNextActions;\n channelUsed: SubmitChannel;\n attempts: readonly ChannelAttempt[];\n}\n\n/* Thrown when no advertised channel matches one this submitter can drive. /\nexport class NoCompatibleChannelError extends Error {\n readonly actionId: string;\n readonly advertisedChannels: readonly string[];\n constructor(actionId: string, advertisedChannels: readonly string[]) {\n super(\n `x402-client: action '${actionId}' advertises channels [${advertisedChannels.join(\", \")}] but none are submittable over HTTP (server / facilitator).`,\n );\n this.name = \"NoCompatibleChannelError\";\n this.actionId = actionId;\n this.advertisedChannels = advertisedChannels;\n }\n}\n\n/\n Thrown when every attempted channel failed. Carries the per-channel\n * attempt log so callers can branch on the final cause (e.g. 4xx from\n * the server → buyer payload bug; 5xx from both → outage).\n /\nexport class AllChannelsFailedError extends Error {\n readonly attempts: readonly ChannelAttempt[];\n constructor(actionId: string, attempts: readonly ChannelAttempt[]) {\n super(\n `x402-client: action '${actionId}' failed on every attempted channel — ${attempts\n .map((a) => formatAttempt(a))\n .join(\"; \")}`,\n );\n this.name = \"AllChannelsFailedError\";\n this.attempts = attempts;\n }\n}\n\nfunction formatAttempt(a: ChannelAttempt): string {\n if (a.ok) return `${a.channel}=ok(${a.status})`;\n const tail = a.status !== undefined ? `(${a.status})` : \"\";\n return `${a.channel}=${a.reason}${tail}`;\n}\n\n/\n Submit a signed post-commit action through the first responsive HTTP\n * channel advertised on `action.channels`. Returns the normalized result\n * on first 2xx; throws `NoCompatibleChannelError` when no submittable\n * channel is advertised, or `AllChannelsFailedError` when every attempt\n * failed.\n /\nexport async function submitAction(args: SubmitArgs): Promise<SubmitResult> {\n const fetcher = args.fetch ?? globalThis.fetch.bind(globalThis);\n const timeoutMs = args.timeoutMs ?? 10_000;\n\n const ordered = orderedChannels(args.action);\n if (ordered.length === 0) {\n throw new NoCompatibleChannelError(args.action.id, args.action.channels);\n }\n\n const attempts: ChannelAttempt[] = [];\n for (const channel of ordered) {\n const endpoint = args.action.endpoints?.[channel];\n if (endpoint === undefined) {\n attempts.push({\n channel,\n ok: false,\n reason: \"no-endpoint\",\n message: `no endpoint advertised for channel '${channel}'`,\n });\n continue;\n }\n\n const outcome = await attemptChannel({\n channel,\n endpoint,\n args,\n fetcher,\n timeoutMs,\n });\n attempts.push(outcome.attempt);\n\n if (outcome.attempt.ok && outcome.result !== undefined) {\n return { ...outcome.result, attempts };\n }\n if (!outcome.attempt.ok && outcome.attempt.reason === \"4xx\") {\n // 4xx is a buyer-payload error — no fallback can fix it; surface it.\n throw new AllChannelsFailedError(args.action.id, attempts);\n }\n }\n\n throw new AllChannelsFailedError(args.action.id, attempts);\n}\n\nfunction orderedChannels(action: NextAction): SubmitChannel[] {\n const seen = new Set<SubmitChannel>();\n const out: SubmitChannel[] = [];\n for (const c of action.channels) {\n if ((SUBMIT_CHANNELS as readonly string[]).includes(c) && !seen.has(c as SubmitChannel)) {\n seen.add(c as SubmitChannel);\n out.push(c as SubmitChannel);\n }\n }\n return out;\n}\n\ninterface AttemptOutcome {\n attempt: ChannelAttempt;\n /* Set when `attempt.ok === true`. /\n result?: Omit<SubmitResult, \"attempts\">;\n}\n\nasync function attemptChannel(input: {\n channel: SubmitChannel;\n endpoint: string;\n args: SubmitArgs;\n fetcher: typeof globalThis.fetch;\n timeoutMs: number;\n}): Promise<AttemptOutcome> {\n const { channel, endpoint, args, fetcher, timeoutMs } = input;\n\n const body = channel === \"server\" ? buildServerBody(args) : buildFacilitatorBody(args);\n\n let res: Response;\n try {\n res = await fetchWithTimeout(fetcher, endpoint, body, timeoutMs);\n } catch (e) {\n const reason = isTimeout(e) ? \"timeout\" : \"network\";\n return {\n attempt: {\n channel,\n ok: false,\n reason,\n message: e instanceof Error ? e.message : String(e),\n },\n };\n }\n\n const parsed = (await res.json().catch(() => null)) as unknown;\n if (res.status >= 500) {\n return {\n attempt: { channel, ok: false, reason: \"5xx\", status: res.status },\n };\n }\n if (!res.ok) {\n return {\n attempt: { channel, ok: false, reason: \"4xx\", status: res.status },\n };\n }\n if (parsed === null \|\| typeof parsed !== \"object\") {\n return {\n attempt: {\n channel,\n ok: false,\n reason: \"invalid-response\",\n status: res.status,\n message: \"response body is not a JSON object\",\n },\n };\n }\n\n try {\n const result =\n channel === \"server\" ? parseServerResult(parsed) : parseFacilitatorResult(parsed);\n return {\n attempt: { channel, ok: true, status: res.status },\n result: { ...result, channelUsed: channel },\n };\n } catch (e) {\n // 2xx body parsed as JSON but doesn't match the expected shape — the\n // server replied with something we can't make sense of. Treat as\n // recoverable so the next channel gets a chance (vs. a 4xx, which\n // is terminal because no other channel can fix the buyer's payload).\n return {\n attempt: {\n channel,\n ok: false,\n reason: \"invalid-response\",\n status: res.status,\n message: e instanceof Error ? e.message : String(e),\n },\n };\n }\n}\n\nfunction buildServerBody(args: SubmitArgs): unknown {\n const body: Record<string, unknown> = {\n exchangeId: args.exchangeId,\n signedPayload: args.signed.signedPayload,\n };\n if (args.action.id === \"boson-redeem\" && args.fulfillment !== undefined) {\n body.fulfillment = args.fulfillment;\n }\n return body;\n}\n\nfunction buildFacilitatorBody(args: SubmitArgs): unknown {\n return {\n action: args.action.id as ActionId,\n exchangeId: args.exchangeId,\n network: args.network,\n escrowAddress: args.escrowAddress,\n signedPayload: args.signed.signedPayload,\n };\n}\n\nasync function fetchWithTimeout(\n fetcher: typeof globalThis.fetch,\n endpoint: string,\n body: unknown,\n timeoutMs: number,\n): Promise<Response> {\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(new TimeoutError(timeoutMs)), timeoutMs);\n try {\n return await fetcher(endpoint, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(body),\n signal: controller.signal,\n });\n } finally {\n clearTimeout(timer);\n }\n}\n\nclass TimeoutError extends Error {\n readonly isTimeout = true as const;\n constructor(timeoutMs: number) {\n super(`x402-client/submit: channel attempt timed out after ${timeoutMs}ms`);\n this.name = \"TimeoutError\";\n }\n}\n\nfunction isTimeout(e: unknown): boolean {\n if (e instanceof TimeoutError) return true;\n if (typeof e !== \"object\" \|\| e === null) return false;\n const obj = e as { name?: unknown; isTimeout?: unknown; cause?: unknown };\n if (obj.isTimeout === true) return true;\n if (obj.name === \"AbortError\" \|\| obj.name === \"TimeoutError\") return true;\n // `AbortController.abort(reason)` surfaces the reason on `.cause` for\n // fetch implementations that wrap it; check one level deep.\n if (typeof obj.cause === \"object\" && obj.cause !== null) {\n const cause = obj.cause as { isTimeout?: unknown; name?: unknown };\n if (cause.isTimeout === true) return true;\n if (cause.name === \"TimeoutError\") return true;\n }\n return false;\n}\n\nfunction parseServerResult(body: unknown): Omit<SubmitResult, \"attempts\" \| \"channelUsed\"> {\n if (typeof body !== \"object\" \|\| body === null) {\n throw new Error(\"server response body is not an object\");\n }\n const raw = body as {\n txHash?: unknown;\n nextActions?: {\n exchangeState?: unknown;\n disputeState?: unknown;\n next?: unknown;\n exchangeId?: unknown;\n fallback?: unknown;\n };\n };\n const txHash = raw.txHash;\n const exchangeState = raw.nextActions?.exchangeState;\n if (!isHexHash(txHash) \|\| !isExchangeState(exchangeState)) {\n throw new Error(\"server response missing txHash or nextActions.exchangeState\");\n }\n const out: Omit<SubmitResult, \"attempts\" \| \"channelUsed\"> = {\n txHash,\n newExchangeState: exchangeState,\n nextActions: raw.nextActions as EscrowNextActions,\n };\n if (isDisputeState(raw.nextActions?.disputeState)) {\n out.newDisputeState = raw.nextActions.disputeState;\n }\n return out;\n}\n\nfunction parseFacilitatorResult(body: unknown): Omit<SubmitResult, \"attempts\" \| \"channelUsed\"> {\n if (typeof body !== \"object\" \|\| body === null) {\n throw new Error(\"facilitator response body is not an object\");\n }\n const raw = body as {\n ok?: unknown;\n txHash?: unknown;\n newExchangeState?: unknown;\n newDisputeState?: unknown;\n };\n if (raw.ok !== true \|\| !isHexHash(raw.txHash) \|\| !isExchangeState(raw.newExchangeState)) {\n throw new Error(\"facilitator response missing ok/txHash/newExchangeState\");\n }\n const out: Omit<SubmitResult, \"attempts\" \| \"channelUsed\"> = {\n txHash: raw.txHash,\n newExchangeState: raw.newExchangeState,\n };\n if (isDisputeState(raw.newDisputeState)) {\n out.newDisputeState = raw.newDisputeState;\n }\n return out;\n}\n\n// Standard EVM tx-hash shape: `0x` + 64 hex chars (32 bytes). Validating\n// here ensures invalid hashes (e.g. test placeholders, garbled\n// payloads) don't slip through as typed-success results that break\n// downstream consumers expecting a real `Hex`.\nconst TX_HASH_RE = /^0x[0-9a-fA-F]{64}$/;\n\nfunction isHexHash(v: unknown): v is Hex {\n return typeof v === \"string\" && TX_HASH_RE.test(v);\n}\n\nfunction isExchangeState(v: unknown): v is ExchangeState {\n return typeof v === \"string\" && (Object.values(ExchangeState) as string[]).includes(v);\n}\n\nfunction isDisputeState(v: unknown): v is DisputeState {\n return typeof v === \"string\" && (Object.values(DisputeState) as string[]).includes(v);\n}\n","// Sign Boson protocol meta-transactions for the entity-keyed\n// `boson-withdrawFunds` action.\n//\n// Unlike the buyer-side post-commit signers, withdraw is keyed by the\n// Boson account `entityId` (buyer or seller) rather than an exchange\n// id. The on-chain primitive is\n// `FundsHandlerFacet.withdrawFunds(uint256 entityId, address[] tokenList,\n// uint256[] tokenAmounts)`. The meta-tx variant\n// (`coreSdk.signMetaTxWithdrawFunds`) wraps that calldata in an EIP-712\n// envelope ready for `MetaTransactionsHandlerFacet.executeMetaTransaction`.\n//\n// Scope cap for v1: callers withdraw the whole* current balance set.\n// `signWithdrawAllAvailableFunds` reads the funds entity from the\n// subgraph, drops zero balances, then delegates to `signWithdrawFunds`\n// for the actual EIP-712 sign. Partial / user-chosen amounts can be\n// added later without a wire-format change.\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport {\n DECIMAL_UINT,\n type BosonMetaTx,\n type Hex as WireHex,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport { encodeSignedPayload } from \"@bosonprotocol/x402-evm/codec\";\nimport type { Address, Hex } from \"viem\";\n\nimport { randomUint256 } from \"./utils/crypto.js\";\n\n// Matches the subset of ethers' `BigNumberish` core-sdk actually accepts at\n// runtime, without pulling `@ethersproject/bignumber` into this package's\n// declared deps. Callers usually pass decimal strings (the wire format).\ntype BigNumberish = string \| number \| bigint;\n\n/*\n Coerce a caller-supplied `entityId` to its canonical wire form (a\n * non-negative integer decimal string). Rejects NaN, fractional, and\n * negative values up-front — passing them on to core-sdk would either\n * trip a downstream BigInt conversion or, worse, produce a signed\n * payload that always reverts on-chain.\n /\nfunction normalizeEntityId(value: BigNumberish): string {\n if (typeof value === \"bigint\") {\n if (value < 0n) throw new Error(`entityId must be non-negative, got ${value.toString()}`);\n return value.toString();\n }\n if (typeof value === \"number\") {\n if (!Number.isFinite(value) \|\| !Number.isInteger(value) \|\| value < 0) {\n throw new Error(`entityId must be a non-negative integer, got ${String(value)}`);\n }\n return value.toString();\n }\n // typeof value === \"string\"\n const trimmed = value.trim();\n if (trimmed.length === 0 \|\| !DECIMAL_UINT.test(trimmed)) {\n throw new Error(`entityId must be a decimal non-negative integer string, got \"${value}\"`);\n }\n return trimmed;\n}\n\n/\n Resolution targets accepted by the \"withdraw all\" helper. Either\n * pass the raw `entityId` (numeric Boson account id) or an EVM\n * `address` with an optional `role` discriminator for the case where\n * the address maps to both a seller and a buyer entity.\n /\nexport type WithdrawEntitySelector =\n \| { entityId: BigNumberish }\n \| { address: Address; role?: \"buyer\" \| \"seller\" };\n\n/* Arguments accepted by `signWithdrawFunds` (caller-resolved entity + token list). /\nexport interface SignWithdrawFundsArgs {\n entityId: BigNumberish;\n /* CAIP-2 network identifier (e.g. `\"eip155:8453\"`). /\n network: string;\n /* Boson Diamond address (the `escrowAddress` from the prior 402). /\n escrowAddress: Address;\n /* Token addresses to withdraw — must align by index with `tokenAmounts`. /\n tokenList: readonly Address[];\n /* Amounts to withdraw — must align by index with `tokenList`. /\n tokenAmounts: readonly BigNumberish[];\n}\n\n/* Arguments accepted by `signWithdrawAllAvailableFunds` — entity + network only. /\nexport type SignWithdrawAllAvailableFundsArgs = WithdrawEntitySelector & {\n /* CAIP-2 network identifier (e.g. `\"eip155:8453\"`). /\n network: string;\n /* Boson Diamond address. /\n escrowAddress: Address;\n};\n\n/* Wire-format result identical in shape to `SignedPostCommitAction`. /\nexport interface SignedWithdrawFunds {\n metaTx: BosonMetaTx;\n signedPayload: WireHex;\n /* Resolved `entityId` (echoed back for caller convenience when looked up by address). /\n entityId: string;\n /* Tokens included in the signature, in calldata order. /\n tokenList: readonly Address[];\n /* Amounts included in the signature, in calldata order. /\n tokenAmounts: readonly string[];\n}\n\nexport interface SignWithdrawDeps {\n buildCoreSdk: (network: string, escrowAddress: Address) => { coreSdk: CoreSDK; chainId: number };\n /* Returns the address that will sign the meta-tx — must match the configured signer. /\n getSignerAddress: () => Promise<Address>;\n}\n\ninterface SignedMetaTxShape {\n functionName: string;\n functionSignature: string;\n r: string;\n s: string;\n v: number;\n}\n\n/* Subset of `CoreSDK` used here — kept narrow so tests can stub easily. /\ninterface WithdrawCoreSdkLike {\n signMetaTxWithdrawFunds(args: {\n nonce: string;\n entityId: BigNumberish;\n tokenList: string[];\n tokenAmounts: BigNumberish[];\n }): Promise<SignedMetaTxShape>;\n getFunds(queryVars: { fundsFilter: { accountId: string } }): Promise<\n Array<{\n accountId: string;\n availableAmount: string;\n token: { address: string };\n }>\n >;\n getSellersByAddress(address: string): Promise<Array<{ id: string }>>;\n getBuyers(queryVars: { buyersFilter: { wallet: string } }): Promise<Array<{ id: string }>>;\n}\n\n/\n Sign a `withdrawFunds(entityId, tokenList, tokenAmounts)` meta-tx\n * against the configured Diamond domain. The caller supplies the\n * exact token + amount snapshot to commit to.\n /\nexport async function signWithdrawFunds(\n args: SignWithdrawFundsArgs,\n deps: SignWithdrawDeps,\n): Promise<SignedWithdrawFunds> {\n const normalised: SignWithdrawFundsArgs = {\n ...args,\n entityId: normalizeEntityId(args.entityId),\n };\n const { coreSdk } = deps.buildCoreSdk(normalised.network, normalised.escrowAddress);\n const from = await deps.getSignerAddress();\n return signWithdrawFundsInternal(normalised, coreSdk as unknown as WithdrawCoreSdkLike, from);\n}\n\n/\n \"Withdraw all\" sugar. Resolves the entity (by id or by address),\n * reads the funds entity from the subgraph, drops zero balances, and\n * signs `withdrawFunds(entityId, allTokens, allAmounts)`. Throws when\n * the entity has no available funds.\n /\nexport async function signWithdrawAllAvailableFunds(\n args: SignWithdrawAllAvailableFundsArgs,\n deps: SignWithdrawDeps,\n): Promise<SignedWithdrawFunds> {\n const { coreSdk } = deps.buildCoreSdk(args.network, args.escrowAddress);\n const sdk = coreSdk as unknown as WithdrawCoreSdkLike;\n const from = await deps.getSignerAddress();\n const entityId = await resolveEntityIdClientSide(sdk, args);\n const funds = await sdk.getFunds({ fundsFilter: { accountId: entityId } });\n const nonZero = funds.filter((f) => f.availableAmount !== \"0\" && BigInt(f.availableAmount) > 0n);\n if (nonZero.length === 0) {\n throw new Error(\n `signWithdrawAllAvailableFunds: entity ${entityId} has no available funds to withdraw`,\n );\n }\n return signWithdrawFundsInternal(\n {\n entityId,\n network: args.network,\n escrowAddress: args.escrowAddress,\n tokenList: nonZero.map((f) => f.token.address as Address),\n tokenAmounts: nonZero.map((f) => f.availableAmount),\n },\n sdk,\n from,\n );\n}\n\nasync function signWithdrawFundsInternal(\n args: SignWithdrawFundsArgs,\n coreSdk: WithdrawCoreSdkLike,\n from: Address,\n): Promise<SignedWithdrawFunds> {\n if (args.tokenList.length !== args.tokenAmounts.length) {\n throw new Error(\n `signWithdrawFunds: tokenList (${args.tokenList.length}) and tokenAmounts (${args.tokenAmounts.length}) must be the same length`,\n );\n }\n const nonce = randomUint256();\n const nonceStr = nonce.toString();\n const signed = await coreSdk.signMetaTxWithdrawFunds({\n nonce: nonceStr,\n entityId: args.entityId,\n tokenList: args.tokenList.map((t) => t),\n tokenAmounts: args.tokenAmounts.map((a) => a),\n });\n\n const metaTx: BosonMetaTx = {\n from,\n nonce: nonceStr,\n functionName: signed.functionName,\n functionSignature: signed.functionSignature as Hex,\n sig: {\n v: Number(signed.v),\n r: signed.r as Hex,\n s: signed.s as Hex,\n },\n };\n\n return {\n metaTx,\n signedPayload: encodeSignedPayload(metaTx),\n entityId: normalizeEntityId(args.entityId),\n tokenList: args.tokenList,\n tokenAmounts: args.tokenAmounts.map((a) => String(a)),\n };\n}\n\nasync function resolveEntityIdClientSide(\n coreSdk: WithdrawCoreSdkLike,\n selector: WithdrawEntitySelector,\n): Promise<string> {\n if (\"entityId\" in selector) return normalizeEntityId(selector.entityId);\n const address = selector.address.toLowerCase();\n const role = selector.role;\n const [sellers, buyers] = await Promise.all([\n role === \"buyer\"\n ? Promise.resolve<Array<{ id: string }>>([])\n : coreSdk.getSellersByAddress(address),\n role === \"seller\"\n ? Promise.resolve<Array<{ id: string }>>([])\n : coreSdk.getBuyers({ buyersFilter: { wallet: address } }),\n ]);\n const sellerIds = sellers.map((s) => s.id);\n const buyerIds = buyers.map((b) => b.id);\n\n if (role === \"seller\") {\n if (sellerIds.length === 0) {\n throw new Error(\n `signWithdrawAllAvailableFunds: no seller entity found for address ${address}`,\n );\n }\n if (sellerIds.length > 1) {\n throw new Error(\n `signWithdrawAllAvailableFunds: address ${address} resolves to multiple seller entities (ids ${sellerIds.join(\", \")}); pass entityId to disambiguate`,\n );\n }\n return sellerIds[0]!;\n }\n if (role === \"buyer\") {\n if (buyerIds.length === 0) {\n throw new Error(\n `signWithdrawAllAvailableFunds: no buyer entity found for address ${address}`,\n );\n }\n if (buyerIds.length > 1) {\n throw new Error(\n `signWithdrawAllAvailableFunds: address ${address} resolves to multiple buyer entities (ids ${buyerIds.join(\", \")}); pass entityId to disambiguate`,\n );\n }\n return buyerIds[0]!;\n }\n\n // role unspecified — exactly-one rule across both sides. Refuse to\n // guess when the address resolves to multiple sellers, multiple\n // buyers, or any combination of the two: the signed payload commits\n // to a single entityId, so silently picking `[0]` would be a bug\n // farm waiting to bite.\n const totalMatches = sellerIds.length + buyerIds.length;\n if (totalMatches === 0) {\n throw new Error(\n `signWithdrawAllAvailableFunds: no seller or buyer entity found for address ${address}`,\n );\n }\n if (totalMatches > 1) {\n throw new Error(\n `signWithdrawAllAvailableFunds: address ${address} resolves to ${describeClientMatches(sellerIds, buyerIds)}; pass role and/or entityId to disambiguate`,\n );\n }\n if (sellerIds.length === 1) return sellerIds[0]!;\n return buyerIds[0]!;\n}\n\nfunction describeClientMatches(sellerIds: string[], buyerIds: string[]): string {\n const parts: string[] = [];\n if (sellerIds.length > 0) {\n parts.push(\n sellerIds.length === 1\n ? `seller (id ${sellerIds[0]})`\n : `${sellerIds.length} sellers (ids ${sellerIds.join(\", \")})`,\n );\n }\n if (buyerIds.length > 0) {\n parts.push(\n buyerIds.length === 1\n ? `buyer (id ${buyerIds[0]})`\n : `${buyerIds.length} buyers (ids ${buyerIds.join(\", \")})`,\n );\n }\n return parts.join(\" and \");\n}\n","// Client-side deadline for token-auth signatures (ERC-3009 `validBefore`,\n// EIP-2612 `deadline`, Permit2 `deadline`).\n//\n// The facilitator validates strictly: `deadline − facilitatorNow ≤\n// requirements.maxTimeoutSeconds`. If the client signs at the boundary\n// (`floor(clientNow) + maxTimeoutSeconds`), any moment where the\n// verifier's wall-clock lags the signer's by ≥ 1 s pushes the gap\n// over `maxTimeoutSeconds` and the facilitator rejects with\n// BAD_TOKEN_AUTH_SIGNATURE. Docker Desktop's container clock drifting\n// behind the host clock makes this happen randomly in the e2e suite.\n//\n// We pull the deadline closer to `clientNow` by a small margin so the\n// facilitator's check tolerates that backward skew. 60 s comfortably\n// covers Docker drift and leaves a useful validity window even at the\n// spec's example `maxTimeoutSeconds = 300`.\n\nexport const TOKEN_AUTH_DEADLINE_SAFETY_MARGIN_SECONDS = 60;\n\nexport function computeTokenAuthDeadline(\n maxTimeoutSeconds: number,\n now: () => number = Date.now,\n): number {\n // Clamp so the margin can never make the deadline retroactive — if\n // the caller's `maxTimeoutSeconds < 60`, subtracting the full margin\n // would emit an already-expired signature.\n const timeoutSeconds = Math.max(1, Math.floor(maxTimeoutSeconds));\n const safetyMarginSeconds = Math.min(\n TOKEN_AUTH_DEADLINE_SAFETY_MARGIN_SECONDS,\n Math.max(0, timeoutSeconds - 1),\n );\n return Math.floor(now() / 1000) + timeoutSeconds - safetyMarginSeconds;\n}\n","// Build and sign the buyer's ERC-3009 `ReceiveWithAuthorization` for the\n// escrow contract via `CoreSDK.signReceiveWithErc3009Authorization`.\n//\n// The SDK generates a 32-byte random nonce internally, builds the EIP-712\n// typed-data against the token's domain (taken from `tokenDomainResolver`),\n// signs through the configured `Web3LibAdapter`, and returns a\n// `TransferAuthorization` with `{ strategy, data: { validAfter, validBefore,\n// nonce }, r, s, v, signature }`. We re-shape the result into the\n// `Erc3009AuthData` slot of the escrow payment payload.\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport type {\n Erc3009AuthData,\n EscrowPaymentRequirements,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { Address, Hex } from \"viem\";\n\nimport { parseChainId } from \"../core-sdk-factory.js\";\nimport type { TokenDomainResolver } from \"../types.js\";\n\nimport { computeTokenAuthDeadline } from \"./deadline.js\";\n\nexport interface SignErc3009Args {\n requirements: EscrowPaymentRequirements;\n buyer: Address;\n coreSdk: CoreSDK;\n tokenDomainResolver: TokenDomainResolver;\n /* Override the wall-clock; injected by tests for determinism. Defaults to `Date.now()`. /\n now?: () => number;\n}\n\n/\n Build the ERC-3009 typed-data, sign it via core-sdk, and shape the result\n * into the `Erc3009AuthData` slot of the escrow payment payload.\n /\nexport async function signErc3009({\n requirements,\n buyer,\n coreSdk,\n tokenDomainResolver,\n now = Date.now,\n}: SignErc3009Args): Promise<Erc3009AuthData> {\n const chainId = parseChainId(requirements.network);\n const domain = await tokenDomainResolver(requirements.asset as Address, chainId);\n\n const validAfter = 0;\n const validBefore = computeTokenAuthDeadline(requirements.maxTimeoutSeconds, now);\n\n const result = await coreSdk.signReceiveWithErc3009Authorization(\n requirements.asset,\n { name: domain.name, version: domain.version },\n requirements.amount,\n validAfter,\n validBefore,\n { spender: requirements.escrowAddress as `0x${string}` },\n );\n\n return {\n from: buyer,\n to: requirements.escrowAddress,\n value: requirements.amount,\n validAfter: Number(result.data.validAfter),\n validBefore: Number(result.data.validBefore),\n nonce: result.data.nonce as Hex,\n v: result.v,\n r: result.r as Hex,\n s: result.s as Hex,\n };\n}\n","// Build and sign the buyer's EIP-2612 `Permit` for the escrow contract via\n// `CoreSDK.signReceiveWithErc2612Permit`.\n//\n// The SDK fetches the token's `nonces(owner)` via `web3Lib.call(...)` before\n// signing — that path requires the client's `signerToWeb3LibAdapter` to have\n// been built with a configured `PublicClient`. Without one, the underlying\n// `eth_call` rejects with a clear \"no PublicClient configured\" error,\n// surfaced to the caller as a sign-time failure.\n//\n// The SDK returns `{ strategy: \"EIP2612\", data: { deadline }, r, s, v,\n// signature }` — note that the nonce is not* part of `data`. The wire\n// format `PermitAuthData` carries the nonce because the facilitator's\n// verification path needs it to rebuild the digest the buyer signed (the\n// on-chain `permit()` call refetches the current nonce, but the signature\n// is locked to the value at sign time). We recover it from the SDK's\n// signed typed-data by paying a second on-chain read of `nonces(owner)`;\n// in practice the value the SDK signed against is the one we observe\n// (only an interleaved successful `permit()` between sign and read would\n// shift it, which would then have invalidated the signature anyway).\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport type {\n EscrowPaymentRequirements,\n PermitAuthData,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport {\n encodeFunctionData,\n decodeFunctionResult,\n type Address,\n type Hex,\n type PublicClient,\n} from \"viem\";\n\nimport { parseChainId } from \"../core-sdk-factory.js\";\nimport { UnsupportedTokenAuthError } from \"../errors.js\";\nimport type { TokenDomainResolver } from \"../types.js\";\n\nimport { computeTokenAuthDeadline } from \"./deadline.js\";\n\nconst NONCES_ABI = [\n {\n type: \"function\",\n name: \"nonces\",\n stateMutability: \"view\",\n inputs: [{ name: \"owner\", type: \"address\" }],\n outputs: [{ type: \"uint256\" }],\n },\n] as const;\n\nexport interface SignPermitArgs {\n requirements: EscrowPaymentRequirements;\n buyer: Address;\n coreSdk: CoreSDK;\n tokenDomainResolver: TokenDomainResolver;\n /** PublicClient for the chain — required to recover the nonce that the SDK signed against. /\n publicClient: PublicClient;\n /* Override the wall-clock; injected by tests for determinism. Defaults to `Date.now()`. /\n now?: () => number;\n}\n\n/\n Build the EIP-2612 Permit typed-data, sign it via core-sdk, look up the\n * token nonce the SDK signed against, and shape the result into the\n * `PermitAuthData` slot of the escrow payment payload.\n /\nexport async function signPermit({\n requirements,\n buyer,\n coreSdk,\n tokenDomainResolver,\n publicClient,\n now = Date.now,\n}: SignPermitArgs): Promise<PermitAuthData> {\n const chainId = parseChainId(requirements.network);\n const domain = await tokenDomainResolver(requirements.asset as Address, chainId);\n\n const noncePreSign = await readNonce(publicClient, requirements.asset as Address, buyer);\n const deadline = computeTokenAuthDeadline(requirements.maxTimeoutSeconds, now);\n\n const result = await coreSdk.signReceiveWithErc2612Permit(\n requirements.asset,\n { name: domain.name, version: domain.version },\n requirements.amount,\n deadline,\n { spender: requirements.escrowAddress as `0x${string}` },\n );\n\n const noncePostSign = await readNonce(publicClient, requirements.asset as Address, buyer);\n if (noncePreSign !== noncePostSign) {\n // A successful `permit()` for this owner landed on-chain between our\n // two reads, which means the SDK signed against either nonce. We can't\n // tell which without re-signing, so fail loudly.\n throw new UnsupportedTokenAuthError(\n `x402-client: token nonce shifted during permit signing (was ${noncePreSign}, now ${noncePostSign}); retry`,\n );\n }\n\n return {\n owner: buyer,\n spender: requirements.escrowAddress,\n value: requirements.amount,\n deadline,\n nonce: noncePreSign.toString(),\n v: result.v,\n r: result.r as Hex,\n s: result.s as Hex,\n };\n}\n\nasync function readNonce(\n publicClient: PublicClient,\n token: Address,\n owner: Address,\n): Promise<bigint> {\n const result = await publicClient.call({\n to: token as `0x${string}`,\n data: encodeFunctionData({\n abi: NONCES_ABI,\n functionName: \"nonces\",\n args: [owner as `0x${string}`],\n }),\n });\n if (!result.data) {\n throw new UnsupportedTokenAuthError(\n `x402-client: token ${token} did not return data for nonces(${owner}) — does it implement EIP-2612?`,\n );\n }\n return decodeFunctionResult({\n abi: NONCES_ABI,\n functionName: \"nonces\",\n data: result.data,\n });\n}\n","// Build and sign the buyer's Uniswap Permit2 `PermitTransferFrom` for the\n// escrow contract via `CoreSDK.signReceiveWithPermit2`.\n//\n// The SDK accepts an optional `permit2Nonce` override; if omitted it\n// generates a random uint256. We pass one explicitly via `randomUint256()`\n// so tests can stub the RNG and so the value never depends on the SDK's\n// internal nonce-generation surface. The Permit2 contract address comes\n// from the wire-format `requirements.onchainHints?.permit2` when present,\n// or falls back to the canonical CREATE2 vanity address re-exported from\n// `@bosonprotocol/x402-core/eip712/token-auth`.\n//\n// Result shape from core-sdk:\n// { strategy: \"Permit2\", data: { nonce, deadline }, r, s, v, signature }\n// — we lift it into the wire-format `Permit2AuthData`.\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport { PERMIT2_ADDRESS } from \"@bosonprotocol/x402-core/eip712/token-auth\";\nimport type {\n EscrowPaymentRequirements,\n Permit2AuthData,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { Address, Hex } from \"viem\";\n\nimport { randomUint256 } from \"../utils/crypto.js\";\n\nimport { computeTokenAuthDeadline } from \"./deadline.js\";\n\nexport interface SignPermit2Args {\n requirements: EscrowPaymentRequirements;\n buyer: Address;\n coreSdk: CoreSDK;\n /* Override the wall-clock; injected by tests for determinism. Defaults to `Date.now()`. /\n now?: () => number;\n}\n\n/\n Build the Permit2 `PermitTransferFrom` typed-data, sign it via core-sdk,\n * and shape the result into the `Permit2AuthData` slot of the escrow\n * payment payload.\n /\nexport async function signPermit2({\n requirements,\n buyer,\n coreSdk,\n now = Date.now,\n}: SignPermit2Args): Promise<Permit2AuthData> {\n const deadline = computeTokenAuthDeadline(requirements.maxTimeoutSeconds, now);\n const permit2Nonce = randomUint256();\n\n // `buyer` is exposed in the call site for symmetry with the other\n // strategies and to keep the function signature stable as we add\n // explicit-`user` overrides. Today the SDK derives `user` internally\n // from `coreSdk._web3Lib.getSignerAddress()`, which we route through the\n // configured `signer.getAddress()` in `signerToWeb3LibAdapter`.\n void buyer;\n\n const result = await coreSdk.signReceiveWithPermit2(\n requirements.asset,\n requirements.amount,\n deadline,\n {\n spender: requirements.escrowAddress as `0x${string}`,\n permit2Address: PERMIT2_ADDRESS,\n permit2Nonce,\n },\n );\n\n return {\n permitted: { token: requirements.asset, amount: requirements.amount },\n spender: requirements.escrowAddress,\n nonce: permit2Nonce.toString(),\n deadline,\n signature: result.signature as Hex,\n };\n}\n","// Token-authorization strategy dispatcher.\n//\n// Picks one of the buyer-side strategies (`erc3009`, `permit`, `permit2`)\n// from `requirements.tokenAuthStrategies`, signs the corresponding payload\n// via `CoreSDK`, and returns the wire-format `BosonTokenAuth` slot. The\n// `none` strategy is encoded by the absence of `tokenAuth` on the payload\n// — callers handle it outside this module.\n//\n// Preference order when the server advertises multiple strategies:\n// `erc3009` → `permit2` → `permit`. ERC-3009 is preferred for tokens that\n// support it (USDC, USDP, EUROC, etc.) because the receive-variant\n// eliminates relayer front-running. Permit2 is preferred over Permit for\n// tokens behind the canonical Permit2 contract because it carries a\n// caller-controllable nonce. Permit is the fallback.\n\nimport type { CoreSDK } from \"@bosonprotocol/core-sdk\";\nimport type {\n BosonTokenAuth,\n EscrowPaymentRequirements,\n TokenAuthStrategy,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { Address, PublicClient } from \"viem\";\n\nimport { UnsupportedTokenAuthError } from \"../errors.js\";\nimport type { TokenDomainResolver } from \"../types.js\";\n\nimport { signErc3009 } from \"./erc3009.js\";\nimport { signPermit } from \"./permit.js\";\nimport { signPermit2 } from \"./permit2.js\";\n\nexport interface BuildTokenAuthArgs {\n requirements: EscrowPaymentRequirements;\n buyer: Address;\n coreSdk: CoreSDK;\n /* Required for ERC-3009 and EIP-2612 Permit; not used by Permit2. /\n tokenDomainResolver?: TokenDomainResolver;\n /* Optional PublicClient for the requirements' chain. Required for Permit. /\n publicClient?: PublicClient;\n now?: () => number;\n}\n\nexport interface BuiltTokenAuth {\n strategy: TokenAuthStrategy;\n tokenAuth: BosonTokenAuth;\n}\n\nconst STRATEGY_PREFERENCE: readonly TokenAuthStrategy[] = [\"erc3009\", \"permit2\", \"permit\"];\n\nfunction strategyIsAvailable(s: TokenAuthStrategy, args: BuildTokenAuthArgs): boolean {\n switch (s) {\n case \"erc3009\":\n return args.tokenDomainResolver !== undefined;\n case \"permit\":\n return args.tokenDomainResolver !== undefined && args.publicClient !== undefined;\n case \"permit2\":\n return true;\n case \"none\":\n return false;\n default: {\n const _exhaustive: never = s;\n void _exhaustive;\n return false;\n }\n }\n}\n\n/\n Pick the highest-preference strategy from `requirements.tokenAuthStrategies`,\n * sign the corresponding payload via core-sdk, and return the wire-format\n * `BosonTokenAuth` slot.\n \n The picker is capability-aware: a strategy is only chosen when the runtime\n * config has the prerequisites for it (e.g. `tokenDomainResolver` for\n * ERC-3009, both `tokenDomainResolver` and `publicClient` for Permit). This\n * lets a deployment without `tokenDomainResolver` still satisfy servers that\n * advertise `[\"erc3009\", \"permit2\"]` by falling back to Permit2.\n /\nexport async function buildAndSignTokenAuth(args: BuildTokenAuthArgs): Promise<BuiltTokenAuth> {\n const advertised = args.requirements.tokenAuthStrategies;\n const chosen = STRATEGY_PREFERENCE.find(\n (s) => advertised.includes(s) && strategyIsAvailable(s, args),\n );\n if (!chosen) {\n throw new UnsupportedTokenAuthError(\n `server advertises tokenAuthStrategies=[${advertised.join(\", \")}]; ` +\n `client supports [${STRATEGY_PREFERENCE.join(\", \")}] but none are usable ` +\n `with the current X402bClientConfig ` +\n `(ERC-3009 and Permit require tokenDomainResolver; Permit also requires ` +\n `a PublicClient for the requirements' chain via publicClients)`,\n );\n }\n\n switch (chosen) {\n case \"erc3009\": {\n if (!args.tokenDomainResolver) {\n throw new UnsupportedTokenAuthError(\n \"server advertises 'erc3009' but no tokenDomainResolver is configured — pass tokenDomainResolver in X402bClientConfig\",\n );\n }\n const data = await signErc3009({\n ...args,\n tokenDomainResolver: args.tokenDomainResolver,\n });\n return { strategy: \"erc3009\", tokenAuth: { kind: \"erc3009\", data } };\n }\n case \"permit\": {\n if (!args.tokenDomainResolver) {\n throw new UnsupportedTokenAuthError(\n \"server advertises 'permit' but no tokenDomainResolver is configured — pass tokenDomainResolver in X402bClientConfig\",\n );\n }\n if (!args.publicClient) {\n throw new UnsupportedTokenAuthError(\n \"server advertises 'permit' but no PublicClient is configured for this chain — pass publicClients in X402bClientConfig\",\n );\n }\n const data = await signPermit({\n ...args,\n tokenDomainResolver: args.tokenDomainResolver,\n publicClient: args.publicClient,\n });\n return { strategy: \"permit\", tokenAuth: { kind: \"permit\", data } };\n }\n case \"permit2\": {\n const data = await signPermit2(args);\n return { strategy: \"permit2\", tokenAuth: { kind: \"permit2\", data } };\n }\n case \"none\": {\n // Should never reach: `STRATEGY_PREFERENCE` doesn't include \"none\",\n // so a server advertising only \"none\" falls through to the error\n // above. Keep the case for exhaustiveness against\n // `TokenAuthStrategy`.\n throw new UnsupportedTokenAuthError(\n \"tokenAuthStrategy='none' has no client-side signing — callers handle it without invoking this dispatcher\",\n );\n }\n default: {\n const _exhaustive: never = chosen;\n throw new UnsupportedTokenAuthError(\n `unrecognised tokenAuthStrategy '${(_exhaustive as { toString(): string }).toString()}'`,\n );\n }\n }\n}\n","// Top-level `createX402bClient` factory.\n//\n// Wires the action picker, token-auth strategy dispatcher, meta-tx signer\n// (via `CoreSDK`), fulfillment resolver, and payload assembler into:\n//\n// - `handle402(requirements)` — commit-time flow that emits the base64\n// `X-PAYMENT` value for the 402 retry.\n// - `signAction(args)` — post-commit flow that signs one of the buyer's\n// follow-up meta-transactions (redeem / cancel / complete / dispute\n// family). No token-auth or X-PAYMENT wrapping; the caller picks a\n// channel and POSTs the wire envelope.\n\nimport {\n parseEscrowPaymentRequirements,\n type EscrowPaymentRequirements,\n} from \"@bosonprotocol/x402-core/schemes/escrow\";\nimport type { Address } from \"viem\";\n\nimport { pickAction } from \"./action.js\";\nimport { createCoreSdkFactory } from \"./core-sdk-factory.js\";\nimport { resolveFulfillment } from \"./fulfillment.js\";\nimport { assembleAndEncodePayload } from \"./payload.js\";\nimport { signCreateOfferAndCommit, signCreateOfferCommitAndRedeem } from \"./pre-commit.js\";\nimport {\n signPostCommitAction,\n type SignActionArgs,\n type SignedPostCommitAction,\n} from \"./post-commit.js\";\nimport { parsePaymentResponse } from \"./response.js\";\nimport {\n submitAction as submitActionInner,\n type FulfillmentRequest,\n type SubmitResult,\n} from \"./submit.js\";\nimport {\n signWithdrawAllAvailableFunds,\n signWithdrawFunds,\n type SignWithdrawAllAvailableFundsArgs,\n type SignWithdrawFundsArgs,\n type SignedWithdrawFunds,\n} from \"./withdraw.js\";\nimport { buildAndSignTokenAuth } from \"./token-auth/index.js\";\nimport { MaxAmountExceededError, UnsupportedTokenAuthError } from \"./errors.js\";\nimport type { ExchangeSummary, X402bClientConfig } from \"./types.js\";\nimport type { EscrowNextActions } from \"@bosonprotocol/x402-core/schemes/escrow\";\n\n/\n Args for `client.submitAction`. Layered over `SignActionArgs`: the\n * client signs the meta-tx, then resolves the matching `NextAction`\n * entry on `priorNextActions` and walks its `channels[]` (server →\n * facilitator) until the first 2xx. See `submit.ts` for the channel\n * walk semantics; see `signAction` for the signing args.\n /\nexport type SubmitActionArgs = SignActionArgs & {\n /\n The `nextActions` envelope returned by the prior server response.\n * Used to read `channels[]` + `endpoints[channel]` for the entry\n * matching `actionId`.\n /\n priorNextActions: EscrowNextActions;\n /* Redeem-only fulfillment payload — forwarded to the `server` channel body. /\n fulfillment?: FulfillmentRequest;\n /* Override the default `globalThis.fetch`. Useful for tests / custom transports. /\n fetch?: typeof globalThis.fetch;\n /* Per-channel timeout in milliseconds. Default 10000. /\n timeoutMs?: number;\n};\n\nexport interface X402bClient {\n /\n Consume a parsed escrow PaymentRequirements and return the base64\n * value to set as the `X-PAYMENT` header on the retry.\n /\n handle402(requirements: unknown): Promise<string>;\n\n /\n Sign a Boson protocol meta-transaction for a buyer-driven post-commit\n * action (redeem, cancel, complete, dispute family). Returns both the\n * wire-format `BosonMetaTx` envelope and the ABI-encoded `signedPayload`\n * Hex — pick the shape that matches the chosen channel. Server /\n * facilitator HTTP routes consume `signedPayload` directly (e.g. as\n * the `signedPayload` field on the JSON POST body to the endpoint the\n * prior response advertised under `actions.next[].endpoints.server`);\n * on-chain and MCP channels use the `metaTx` object.\n \n Note: `boson-escalateDispute` signs only the meta-tx. If the dispute\n * resolver requires an escalation deposit, the resolver/server returns\n * its own 402 with an `escrow` `PaymentRequirements` and the buyer pairs\n * this meta-tx with a token-auth payload — the deposit wrapper is out\n * of MVP.\n /\n signAction(args: SignActionArgs): Promise<SignedPostCommitAction>;\n\n /\n Sign a buyer post-commit action via {@link X402bClient.signAction} and\n * submit it through the first responsive HTTP channel the seller\n * advertised on the matching `nextActions.next[]` entry. Order is taken\n * from `priorNextActions` (the envelope from the prior server response);\n * the walk is intersected with `[\"server\", \"facilitator\"]` — `onchain` /\n * `mcp` / `xmtp` channels are out of scope for this method.\n \n Falls back to the next channel on 5xx / network error / timeout.\n * Stops and throws on 4xx (a buyer-side payload error fallback\n * can't fix — masking it would hide bugs). Throws\n * `NoCompatibleChannelError` when the matching entry advertises only\n * non-HTTP channels, and `AllChannelsFailedError` when every attempt\n * failed.\n \n Pre-existing callers that prefer to keep submission outside the SDK\n * can still use `signAction` + their own dispatch.\n /\n submitAction(args: SubmitActionArgs): Promise<SubmitResult>;\n\n /\n Sign a `withdrawFunds(entityId, tokenList, tokenAmounts)` meta-tx.\n * Caller-resolved entity + tokens snapshot — see\n * `signWithdrawAllAvailableFunds` for the read-from-subgraph \"withdraw\n * everything\" sugar.\n /\n signWithdrawFunds(args: SignWithdrawFundsArgs): Promise<SignedWithdrawFunds>;\n\n /\n Read available funds for the given entity from the subgraph and\n * sign a meta-tx withdrawing the entire current balance set. Accepts\n * either an `entityId` directly or an `address` (with optional\n * `role` for ambiguous wallets).\n /\n signWithdrawAllAvailableFunds(\n args: SignWithdrawAllAvailableFundsArgs,\n ): Promise<SignedWithdrawFunds>;\n\n /\n Best-effort decode of `X-PAYMENT-RESPONSE` after a successful retry.\n * Returns `undefined` when the header isn't present.\n /\n parsePaymentResponse(response: {\n headers: { get(name: string): string \| null };\n }): ExchangeSummary \| undefined;\n}\n\n/\n Build a stateless client bound to a buyer signer + policy. The\n * underlying `CoreSDK` is built lazily per `(chainId, escrowAddress)` and\n * cached across calls — both `handle402` and `signAction` reuse it.\n /\nexport function createX402bClient(config: X402bClientConfig): X402bClient {\n const buildCoreSdk = createCoreSdkFactory(config.signer, config);\n\n const getBuyerAddress = async () => (await config.signer.getAddress()) as Address;\n\n return {\n async handle402(rawRequirements) {\n const requirements: EscrowPaymentRequirements =\n parseEscrowPaymentRequirements(rawRequirements);\n\n const action = pickAction(requirements, config.policy);\n const fulfillment = resolveFulfillment(requirements, config);\n enforceMaxAmount(requirements.amount, config.policy?.maxAmount);\n const buyer = await getBuyerAddress();\n\n const { coreSdk, chainId } = buildCoreSdk(\n requirements.network,\n requirements.escrowAddress as Address,\n );\n\n // `policy.tokenAuthStrategy` forces a specific strategy from the\n // server's advertised set instead of letting the dispatcher pick\n // by preference. The forced value must be in\n // `requirements.tokenAuthStrategies`; otherwise the override is\n // rejected. `\"none\"` short-circuits the dispatcher entirely (the\n // buyer has approved the escrow off-band and the payment rides\n // the protocol's `safeTransferFrom` fallback); for the other\n // strategies the dispatcher is invoked with the advertised set\n // narrowed to a single element so it must pick the requested one.\n let tokenAuth: Awaited<ReturnType<typeof buildAndSignTokenAuth>>[\"tokenAuth\"] \| undefined;\n let strategy: Awaited<ReturnType<typeof buildAndSignTokenAuth>>[\"strategy\"];\n const forcedStrategy = config.policy?.tokenAuthStrategy;\n if (forcedStrategy !== undefined) {\n if (!requirements.tokenAuthStrategies.includes(forcedStrategy)) {\n throw new UnsupportedTokenAuthError(\n `policy.tokenAuthStrategy \"${forcedStrategy}\" is not in requirements.tokenAuthStrategies (${requirements.tokenAuthStrategies.join(\", \")})`,\n );\n }\n if (forcedStrategy === \"none\") {\n strategy = \"none\";\n tokenAuth = undefined;\n } else {\n const built = await buildAndSignTokenAuth({\n requirements: { ...requirements, tokenAuthStrategies: [forcedStrategy] },\n buyer,\n coreSdk,\n tokenDomainResolver: config.tokenDomainResolver,\n publicClient: config.publicClients?.[chainId],\n });\n strategy = built.strategy;\n tokenAuth = built.tokenAuth;\n }\n } else {\n const built = await buildAndSignTokenAuth({\n requirements,\n buyer,\n coreSdk,\n tokenDomainResolver: config.tokenDomainResolver,\n publicClient: config.publicClients?.[chainId],\n });\n strategy = built.strategy;\n tokenAuth = built.tokenAuth;\n }\n\n // Flow B (boson-createOfferCommitAndRedeem) carries the buyer's\n // delivery data along with the commit-time payload — there's no\n // later round trip in which to attach it. Flow A defers `data` to\n // the redeem-time POST body; `assemblePayload` handles the\n // conditional emission based on `action`.\n const signMetaTx =\n action === \"boson-createOfferCommitAndRedeem\"\n ? signCreateOfferCommitAndRedeem\n : signCreateOfferAndCommit;\n const metaTx = await signMetaTx({ requirements, coreSdk, buyer });\n\n return assembleAndEncodePayload({\n requirements,\n action,\n tokenAuthStrategy: strategy,\n metaTx,\n tokenAuth,\n fulfillment,\n buyer,\n });\n },\n\n signAction(args) {\n return signPostCommitAction(args, { buildCoreSdk, getBuyerAddress });\n },\n\n async submitAction(args) {\n const signed = await signPostCommitAction(args, { buildCoreSdk, getBuyerAddress });\n const action = args.priorNextActions.next.find((entry) => entry.id === args.actionId);\n if (action === undefined) {\n throw new Error(\n `x402-client/submitAction: actionId '${args.actionId}' is not present in priorNextActions.next[]`,\n );\n }\n const submitArgs = {\n action,\n signed,\n exchangeId: String(args.exchangeId),\n network: args.network,\n escrowAddress: args.escrowAddress,\n fulfillment: args.fulfillment,\n fetch: args.fetch,\n timeoutMs: args.timeoutMs,\n };\n return submitActionInner(submitArgs);\n },\n\n signWithdrawFunds(args) {\n return signWithdrawFunds(args, { buildCoreSdk, getSignerAddress: getBuyerAddress });\n },\n\n signWithdrawAllAvailableFunds(args) {\n return signWithdrawAllAvailableFunds(args, {\n buildCoreSdk,\n getSignerAddress: getBuyerAddress,\n });\n },\n\n parsePaymentResponse(response) {\n return parsePaymentResponse(response);\n },\n };\n}\n\nfunction enforceMaxAmount(amount: string, maxAmount?: string): void {\n if (maxAmount === undefined) {\n return;\n }\n\n const amountBigInt = BigInt(amount);\n const maxAmountBigInt = BigInt(maxAmount);\n if (amountBigInt > maxAmountBigInt) {\n throw new MaxAmountExceededError(\n `x402-client: requirements.amount ${amount} exceeds policy.maxAmount ${maxAmount}`,\n );\n }\n}\n","// Translator that wraps a Boson `Web3LibAdapter` (e.g. an `EthersAdapter`\n// from `@bosonprotocol/ethers-sdk`) as an x402-client `Signer`. The point\n// is to let consumers who already hold an adapter for the deployed Boson\n// protocol reuse it with `createX402bClient` without writing the shim\n// themselves — and without forcing this package to take `ethers` (or\n// `@bosonprotocol/common`) as a peer dep.\n//\n// Structural typing keeps the coupling minimal: `Web3LibAdapterLike` picks\n// only the two methods we actually invoke. The consumer's own `ethers` /\n// `@bosonprotocol/ethers-sdk` install carries the full types — an\n// `EthersAdapter` instance satisfies `Web3LibAdapterLike` by shape.\n//\n// Note on `EIP712Domain` injection: `eth_signTypedData_v4` (and the\n// `EthersAdapter` JSON path) expects `types.EIP712Domain` to be present\n// and to match exactly the fields populated on `domain`. We derive it\n// from `domain`'s field presence — the same rule viem applies internally\n// in `getTypesForEIP712Domain`.\n\nimport {\n getAddress,\n serializeTypedData,\n type Address,\n type Hex,\n type TypedDataDomain,\n type TypedDataDefinition,\n type TypedDataParameter,\n} from \"viem\";\n\nimport type { Signer } from \"./types.js\";\n\n/\n Structural subset of `@bosonprotocol/common`'s `Web3LibAdapter` that\n * {@link signerFromEthersAdapter} actually exercises. An `EthersAdapter`\n * from `@bosonprotocol/ethers-sdk` (or any future concrete adapter)\n * satisfies this shape without an explicit cast.\n /\nexport interface Web3LibAdapterLike {\n getSignerAddress(): Promise<string>;\n send(method: string, params: readonly unknown[]): Promise<unknown>;\n}\n\n/\n Wrap a Boson `Web3LibAdapter`-shaped object as an x402-client\n * {@link Signer}. `signTypedData` builds the standard\n * `eth_signTypedData_v4` JSON payload (including a derived\n * `EIP712Domain` type list) and routes it through `adapter.send`.\n /\nexport function signerFromEthersAdapter(adapter: Web3LibAdapterLike): Signer {\n const resolveAddress = async (): Promise<Address> => getAddress(await adapter.getSignerAddress());\n return {\n getAddress: resolveAddress,\n signTypedData: async ({ domain, types, primaryType, message }) => {\n const from = await resolveAddress();\n const typedData = {\n domain,\n types: { ...types, EIP712Domain: deriveEip712DomainType(domain) },\n primaryType,\n message,\n };\n const json = serializeTypedData(typedData as unknown as TypedDataDefinition);\n const sig = await adapter.send(\"eth_signTypedData_v4\", [from, json]);\n if (typeof sig !== \"string\" \|\| !/^0x[0-9a-fA-F]+$/.test(sig)) {\n throw new Error(\n \"signerFromEthersAdapter: adapter.send did not return a hex signature string\",\n );\n }\n return sig as Hex;\n },\n };\n}\n\n/\n Build the `EIP712Domain` type-list from the fields actually present on\n * `domain`, in the canonical EIP-712 order (`name`, `version`, `chainId`,\n * `verifyingContract`, `salt`). Matches viem's internal derivation so the\n * resulting digest agrees with what a viem signer would produce.\n */\nfunction deriveEip712DomainType(domain: TypedDataDomain): readonly TypedDataParameter[] {\n const fields: TypedDataParameter[] = [];\n if (domain.name !== undefined) fields.push({ name: \"name\", type: \"string\" });\n if (domain.version !== undefined) fields.push({ name: \"version\", type: \"string\" });\n if (domain.chainId !== undefined) fields.push({ name: \"chainId\", type: \"uint256\" });\n if (domain.verifyingContract !== undefined)\n fields.push({ name: \"verifyingContract\", type: \"address\" });\n if (domain.salt !== undefined) fields.push({ name: \"salt\", type: \"bytes32\" });\n return fields;\n}\n"]}