@cimplify/sdk 0.103.0 → 0.104.1

package/dist/mock/cli.mjs

@@ -7,16 +7,164 @@ import { Http2ServerRequest, constants } from 'http2';
 import { Readable } from 'stream';
 import { createHmac } from 'crypto';
 
-// ../node_modules/.bun/@hono+node-server@2.0.5+8bc17dcb8a4189a6/node_modules/@hono/node-server/dist/constants-BLSFu_RU.mjs
+// ../node_modules/.bun/@hono+node-server@2.1.1+804d2c5c04916069/node_modules/@hono/node-server/dist/constants-BLSFu_RU.mjs
 var X_ALREADY_SENT = "x-hono-already-sent";
 
-// ../node_modules/.bun/@hono+node-server@2.0.5+8bc17dcb8a4189a6/node_modules/@hono/node-server/dist/index.mjs
+// ../node_modules/.bun/@hono+node-server@2.1.1+804d2c5c04916069/node_modules/@hono/node-server/dist/index.mjs
 var RequestError = class extends Error {
   constructor(message, options) {
     super(message, options);
     this.name = "RequestError";
   }
 };
+var nonJoinedHeaders = /* @__PURE__ */ new Set([
+  "age",
+  "authorization",
+  "content-length",
+  "content-type",
+  "etag",
+  "expires",
+  "from",
+  "host",
+  "if-modified-since",
+  "if-unmodified-since",
+  "last-modified",
+  "location",
+  "max-forwards",
+  "proxy-authorization",
+  "referer",
+  "retry-after",
+  "server",
+  "user-agent"
+]);
+var validHeaderName = /^[!#$%&'*+\-.^_`|~\dA-Za-z]+$/;
+var isHttpWhitespace = (code) => code === 9 || code === 10 || code === 13 || code === 32;
+var normalizeHeaderValue = (value) => {
+  if (!isHttpWhitespace(value.charCodeAt(0)) && !isHttpWhitespace(value.charCodeAt(value.length - 1))) return value;
+  let start = 0;
+  let end = value.length;
+  while (start < end && isHttpWhitespace(value.charCodeAt(start))) start++;
+  while (end > start && isHttpWhitespace(value.charCodeAt(end - 1))) end--;
+  return value.slice(start, end);
+};
+var forbiddenHeaderValue = /[\0\r\n]/;
+var GlobalHeaders = globalThis.Headers;
+var materializeHeaders = (rawHeaders, HeadersCtor = GlobalHeaders) => {
+  const headers = new HeadersCtor();
+  for (let i = 0; i < rawHeaders.length; i += 2) {
+    const name = rawHeaders[i];
+    if (!name.startsWith(":")) headers.append(name, rawHeaders[i + 1]);
+  }
+  return headers;
+};
+var RequestHeaders = class {
+  #incoming;
+  #rawHeaders;
+  #headers;
+  #invalidValue;
+  constructor(incoming) {
+    this.#incoming = incoming;
+    if (incoming instanceof Http2ServerRequest) this.#rawHeaders = incoming.rawHeaders.slice();
+  }
+  get #lazyRawHeaders() {
+    return this.#rawHeaders ??= this.#incoming.rawHeaders.slice();
+  }
+  get #native() {
+    if (!this.#headers) {
+      this.#headers = materializeHeaders(this.#lazyRawHeaders);
+      this.#rawHeaders = void 0;
+    }
+    return this.#headers;
+  }
+  #normalizedName(name) {
+    if (typeof name !== "string") return;
+    if (!validHeaderName.test(name)) throw new TypeError(`Invalid header name: ${name}`);
+    return name.toLowerCase();
+  }
+  #lookupHttp1(lowerName) {
+    const headers = this.#incoming instanceof Http2ServerRequest ? void 0 : this.#incoming.headers;
+    if (!headers || nonJoinedHeaders.has(lowerName) || lowerName === "set-cookie" || lowerName === "__proto__") return;
+    if (!Object.hasOwn(headers, lowerName)) return null;
+    const rawValue = headers[lowerName];
+    if (typeof rawValue === "string") {
+      const value = normalizeHeaderValue(rawValue);
+      return forbiddenHeaderValue.test(value) ? void 0 : value;
+    }
+  }
+  #lookup(rawHeaders, lowerName) {
+    const separator = lowerName === "cookie" ? "; " : ", ";
+    let value = null;
+    for (let i = 0; i < rawHeaders.length; i += 2) {
+      const rawName = rawHeaders[i];
+      if (rawName.length === lowerName.length && rawName.toLowerCase() === lowerName) {
+        const rawValue = normalizeHeaderValue(rawHeaders[i + 1]);
+        if (forbiddenHeaderValue.test(rawValue)) {
+          this.#invalidValue = true;
+          return;
+        }
+        value = value === null ? rawValue : value + separator + rawValue;
+      }
+    }
+    return value;
+  }
+  append(name, value) {
+    this.#native.append(name, value);
+  }
+  delete(name) {
+    this.#native.delete(name);
+  }
+  get(name) {
+    const lowerName = this.#normalizedName(name);
+    if (lowerName && !this.#headers && !this.#invalidValue) {
+      const http1Value = this.#lookupHttp1(lowerName);
+      if (http1Value !== void 0) return http1Value;
+      const value = this.#lookup(this.#lazyRawHeaders, lowerName);
+      if (value !== void 0) return value;
+    }
+    return this.#native.get(name);
+  }
+  has(name) {
+    const lowerName = this.#normalizedName(name);
+    if (lowerName && !this.#headers && !this.#invalidValue) {
+      const http1Value = this.#lookupHttp1(lowerName);
+      if (http1Value !== void 0) return http1Value !== null;
+      const value = this.#lookup(this.#lazyRawHeaders, lowerName);
+      if (value !== void 0) return value !== null;
+    }
+    return this.#native.has(name);
+  }
+  set(name, value) {
+    this.#native.set(name, value);
+  }
+  getSetCookie() {
+    return this.#native.getSetCookie();
+  }
+  keys() {
+    return this.#native.keys();
+  }
+  values() {
+    return this.#native.values();
+  }
+  entries() {
+    return this.#native.entries();
+  }
+  forEach(callback, thisArg) {
+    this.#native.forEach((value, key) => {
+      callback.call(thisArg, value, key, this);
+    });
+  }
+  [Symbol.iterator]() {
+    return this.entries();
+  }
+};
+Object.defineProperty(RequestHeaders.prototype, /* @__PURE__ */ Symbol.for("nodejs.util.inspect.custom"), { value: function(depth, options, inspectFn) {
+  return `Headers (lightweight) ${inspectFn(Object.fromEntries(this), {
+    ...options,
+    depth: depth == null ? null : depth - 1
+  })}`;
+} });
+Object.setPrototypeOf(RequestHeaders.prototype, GlobalHeaders.prototype);
+var newHeadersFromIncoming = (incoming) => globalThis.Headers === GlobalHeaders ? new RequestHeaders(incoming) : materializeHeaders(incoming.rawHeaders, globalThis.Headers);
 var reValidRequestUrl = /^\/[!#$&-;=?-\[\]_a-z~]*$/;
 var reDotSegment = /\/\.\.?(?:[/?#]|$)/;
 var reValidHost = /^[a-z0-9._-]+(?::(?:[1-5]\d{3,4}|[6-9]\d{3}))?$/;
@@ -49,16 +197,55 @@ var Request$1 = class extends GlobalRequest {
     super(input, options);
   }
 };
-var newHeadersFromIncoming = (incoming) => {
-  const headerRecord = [];
-  const rawHeaders = incoming.rawHeaders;
-  for (let i = 0, len = rawHeaders.length; i < len; i += 2) {
-    const key = rawHeaders[i];
-    if (key.charCodeAt(0) !== 58) headerRecord.push([key, rawHeaders[i + 1]]);
-  }
-  return new Headers(headerRecord);
-};
 var wrapBodyStream = /* @__PURE__ */ Symbol("wrapBodyStream");
+var byteExactEncodings = /* @__PURE__ */ new Set([
+  "latin1",
+  "binary",
+  "hex",
+  "base64",
+  "base64url"
+]);
+var isByteExactEncoding = (encoding) => encoding === null || byteExactEncodings.has(encoding);
+var bodyBufferedBeforeDisconnectKey = /* @__PURE__ */ Symbol("bodyBufferedBeforeDisconnect");
+var bodyBufferedLengthBeforeDisconnectKey = /* @__PURE__ */ Symbol("bodyBufferedLengthBeforeDisconnect");
+var toBufferChunk = (chunk, encoding) => Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk, encoding ?? "utf8");
+var isRecoverableDisconnectedIncoming = (incoming) => !(incoming instanceof Http2ServerRequest) && !!incoming.complete && !!incoming.readableAborted && typeof incoming.read === "function" && isByteExactEncoding(incoming.readableEncoding);
+var recordBodyBufferedBeforeDisconnect = (incoming) => {
+  if (incoming.readableDidRead || !isRecoverableDisconnectedIncoming(incoming)) return;
+  const incomingWithRecovery = incoming;
+  incomingWithRecovery[bodyBufferedLengthBeforeDisconnectKey] ??= incoming.readableLength;
+};
+var readBodyBufferedBeforeDisconnect = (incoming, chunks) => {
+  if (incoming.readableDidRead && !chunks || !isRecoverableDisconnectedIncoming(incoming)) return;
+  const incomingWithRecovery = incoming;
+  if (incomingWithRecovery[bodyBufferedBeforeDisconnectKey] !== void 0) return incomingWithRecovery[bodyBufferedBeforeDisconnectKey];
+  let result;
+  const errored = incoming.errored;
+  if (errored && errored.code !== "ECONNRESET") result = errored;
+  else if (incomingWithRecovery[bodyBufferedLengthBeforeDisconnectKey] !== void 0 && incoming.readableLength !== incomingWithRecovery[bodyBufferedLengthBeforeDisconnectKey]) result = newBodyUnusableError();
+  else {
+    const bodyChunks = chunks ?? [];
+    const chunk = incoming.read();
+    if (chunk !== null) bodyChunks.push(toBufferChunk(chunk, incoming.readableEncoding));
+    const buffer = bodyChunks.length === 1 ? bodyChunks[0] : Buffer.concat(bodyChunks);
+    result = buffer;
+    const contentLength = incoming.headers["content-length"];
+    if (typeof contentLength === "string" && /^\d+$/.test(contentLength)) {
+      const expectedLength = Number(contentLength);
+      if (Number.isSafeInteger(expectedLength) && buffer.length !== expectedLength) result = newBodyUnusableError();
+    }
+  }
+  incomingWithRecovery[bodyBufferedBeforeDisconnectKey] = result;
+  return result;
+};
+var enqueueBufferedBody = (controller, buffered) => {
+  if (buffered instanceof Error) {
+    controller.error(buffered);
+    return;
+  }
+  if (buffered.length > 0) controller.enqueue(buffered);
+  controller.close();
+};
 var newRequestFromIncoming = (method, url, headers, incoming, abortController) => {
   const init = {
     method,
@@ -81,6 +268,13 @@ var newRequestFromIncoming = (method, url, headers, incoming, abortController) =
     let reader;
     init.body = new ReadableStream({ async pull(controller) {
       try {
+        if (!reader) {
+          const buffered = readBodyBufferedBeforeDisconnect(incoming);
+          if (buffered !== void 0) {
+            enqueueBufferedBody(controller, buffered);
+            return;
+          }
+        }
         reader ||= Readable.toWeb(incoming).getReader();
         const { done, value } = await reader.read();
         if (done) controller.close();
@@ -89,7 +283,13 @@ var newRequestFromIncoming = (method, url, headers, incoming, abortController) =
         controller.error(error);
       }
     } });
-  } else init.body = Readable.toWeb(incoming);
+  } else {
+    const buffered = readBodyBufferedBeforeDisconnect(incoming);
+    if (buffered !== void 0) init.body = new ReadableStream({ start(controller) {
+      enqueueBufferedBody(controller, buffered);
+    } });
+    else init.body = Readable.toWeb(incoming);
+  }
   return new Request$1(url, init);
 };
 var getRequestCache = /* @__PURE__ */ Symbol("getRequestCache");
@@ -131,8 +331,10 @@ var normalizeIncomingMethod = (method) => {
     case "GET":
     case "HEAD":
     case "OPTIONS":
+    case "PATCH":
     case "POST":
     case "PUT":
+    case "QUERY":
       return method;
   }
   const upper = method.toUpperCase();
@@ -180,11 +382,23 @@ var readRawBodyIfAvailable = (request) => {
   const incoming = request[incomingKey];
   if ("rawBody" in incoming && incoming.rawBody instanceof Buffer) return incoming.rawBody;
 };
+var normalizeAbortError = (request, incoming) => {
+  if (incoming.errored) return incoming.errored;
+  const reason = request[abortReasonKey];
+  if (reason !== void 0) return reason instanceof Error ? reason : new Error(String(reason));
+  return /* @__PURE__ */ new Error("Client connection prematurely closed.");
+};
 var readBodyDirect = (request) => {
   if (request[bodyBufferKey]) return Promise.resolve(request[bodyBufferKey]);
   if (request[bodyReadPromiseKey]) return request[bodyReadPromiseKey];
   const incoming = request[incomingKey];
-  if (Readable.isDisturbed(incoming)) return rejectBodyUnusable();
+  if (incoming.readableDidRead) return rejectBodyUnusable();
+  const buffered = readBodyBufferedBeforeDisconnect(incoming);
+  if (buffered !== void 0) {
+    if (buffered instanceof Error) return Promise.reject(buffered);
+    request[bodyBufferKey] = buffered;
+    return Promise.resolve(buffered);
+  }
   const promise = new Promise((resolve2, reject) => {
     const chunks = [];
     let settled = false;
@@ -194,8 +408,22 @@ var readBodyDirect = (request) => {
       cleanup();
       callback();
     };
+    const recoverCompleteBodyAfterDisconnect = (error) => {
+      const streamError = incoming.errored ?? error;
+      if (!isRecoverableDisconnectedIncoming(incoming) || streamError && streamError.code !== "ECONNRESET") return false;
+      finish(() => {
+        const recovered = readBodyBufferedBeforeDisconnect(incoming, chunks);
+        if (recovered instanceof Error) reject(recovered);
+        else if (recovered === void 0) reject(error ?? normalizeAbortError(request, incoming));
+        else {
+          request[bodyBufferKey] = recovered;
+          resolve2(recovered);
+        }
+      });
+      return true;
+    };
     const onData = (chunk) => {
-      chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+      chunks.push(toBufferChunk(chunk, incoming.readableEncoding));
     };
     const onEnd = () => {
       finish(() => {
@@ -205,6 +433,7 @@ var readBodyDirect = (request) => {
       });
     };
     const onError = (error) => {
+      if (recoverCompleteBodyAfterDisconnect(error)) return;
       finish(() => {
         reject(error);
       });
@@ -214,17 +443,9 @@ var readBodyDirect = (request) => {
         onEnd();
         return;
       }
+      if (recoverCompleteBodyAfterDisconnect()) return;
       finish(() => {
-        if (incoming.errored) {
-          reject(incoming.errored);
-          return;
-        }
-        const reason = request[abortReasonKey];
-        if (reason !== void 0) {
-          reject(reason instanceof Error ? reason : new Error(String(reason)));
-          return;
-        }
-        reject(/* @__PURE__ */ new Error("Client connection prematurely closed."));
+        reject(normalizeAbortError(request, incoming));
       });
     };
     const cleanup = () => {
@@ -403,23 +624,23 @@ var Response$1 = class Response$12 {
     const liveHeaders = cache && cache[2] instanceof Headers ? cache[2] : void 0;
     delete this[cacheKey];
     return this[responseCache] ||= new GlobalResponse(this.#body, liveHeaders ? {
-      ...this.#init,
+      status: this.#init?.status,
+      statusText: this.#init?.statusText,
       headers: liveHeaders
     } : this.#init);
   }
   constructor(body, init) {
     let headers;
     this.#body = body;
-    if (init instanceof Response$12) {
+    if (init instanceof GlobalResponse) {
       const cachedGlobalResponse = init[responseCache];
       if (cachedGlobalResponse) {
         this.#init = cachedGlobalResponse;
         this[getResponseCache]();
         return;
-      } else {
-        this.#init = init.#init;
-        headers = new Headers(init.headers);
       }
+      this.#init = init instanceof Response$12 ? init.#init : init;
+      headers = new Headers(init.headers);
     } else this.#init = init;
     if (body == null || typeof body === "string" || typeof body?.getReader !== "undefined" || body instanceof Blob || body instanceof Uint8Array) this[cacheKey] = [
       init?.status || 200,
@@ -597,7 +818,10 @@ var drainIncoming = (incoming) => {
   const forceClose = () => {
     cleanup();
     const socket = incoming.socket;
-    if (socket && !socket.destroyed) socket.destroySoon();
+    if (socket && !socket.destroyed) {
+      if (typeof socket.destroySoon === "function") socket.destroySoon();
+      else if (typeof socket.destroy === "function") socket.destroy();
+    }
   };
   const timer = setTimeout(forceClose, DRAIN_TIMEOUT_MS);
   timer.unref?.();
@@ -611,8 +835,13 @@ var drainIncoming = (incoming) => {
   incoming.resume();
 };
 var makeCloseHandler = (req, incoming, outgoing, needsBodyCleanup) => () => {
-  if (incoming.errored) req[abortRequest](incoming.errored.toString());
-  else if (!outgoing.writableFinished) req[abortRequest]("Client connection prematurely closed.");
+  if (incoming.errored) {
+    recordBodyBufferedBeforeDisconnect(incoming);
+    req[abortRequest](incoming.errored.toString());
+  } else if (!outgoing.writableFinished) {
+    recordBodyBufferedBeforeDisconnect(incoming);
+    req[abortRequest]("Client connection prematurely closed.");
+  }
   if (needsBodyCleanup && !incoming.readableEnded) setTimeout(() => {
     if (!incoming.readableEnded) setTimeout(() => {
       drainIncoming(incoming);
@@ -863,10 +1092,18 @@ var setupWebSocket = (options) => {
       waiterMap.delete(request);
     }
   });
+  const rejectWaiter = (request) => {
+    const waiter = waiterMap.get(request);
+    if (waiter) {
+      waiterMap.delete(request);
+      waiter.reject(/* @__PURE__ */ new Error("WebSocket handshake aborted"));
+    }
+  };
   const waitForWebSocket = (request, connectionSymbol) => {
-    return new Promise((resolve2) => {
+    return new Promise((resolve2, reject) => {
       waiterMap.set(request, {
         resolve: resolve2,
+        reject,
         connectionSymbol
       });
     });
@@ -893,16 +1130,19 @@ var setupWebSocket = (options) => {
     }
     const waiter = waiterMap.get(request);
     if (!waiter || waiter.connectionSymbol !== env[CONNECTION_SYMBOL_KEY]) {
-      waiterMap.delete(request);
+      rejectWaiter(request);
       if (server.listenerCount("upgrade") === 1) rejectUpgradeRequest(socket, status, responseHeaders);
       return;
     }
     const addResponseHeaders = (headers) => {
       appendResponseHeaders(headers, responseHeaders);
     };
+    const reclaimWaiterOnClose = () => rejectWaiter(request);
+    socket.once("close", reclaimWaiterOnClose);
     wss.on("headers", addResponseHeaders);
     try {
       wss.handleUpgrade(request, socket, head, (ws) => {
+        socket.off("close", reclaimWaiterOnClose);
         wss.emit("connection", ws, request);
       });
     } finally {
@@ -940,7 +1180,7 @@ var serve = (options, listeningListener) => {
   return server;
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/compose.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/compose.js
 var compose = (middleware, onError, onNotFound) => {
   return (context, next) => {
     let index = -1;
@@ -984,21 +1224,46 @@ var compose = (middleware, onError, onNotFound) => {
   };
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/request/constants.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = /* @__PURE__ */ Symbol();
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/utils/body.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/utils/buffer.js
+var bufferToFormData = (arrayBuffer, contentType2) => {
+  const response = new Response(arrayBuffer, {
+    headers: {
+      // Normalize the media type (case-insensitive) while keeping parameters like the boundary
+      "Content-Type": contentType2.replace(/^[^;]+/, (mediaType) => mediaType.toLowerCase())
+    }
+  });
+  return response.formData();
+};
+
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/utils/body.js
+var isRawRequest = (request) => "headers" in request;
 var parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) => {
   const { all = false, dot = false } = options;
-  const headers = request instanceof HonoRequest ? request.raw.headers : request.headers;
+  const headers = isRawRequest(request) ? request.headers : request.raw.headers;
   const contentType2 = headers.get("Content-Type");
-  if (contentType2?.startsWith("multipart/form-data") || contentType2?.startsWith("application/x-www-form-urlencoded")) {
+  const mediaType = contentType2?.split(";")[0].trim().toLowerCase();
+  if (mediaType === "multipart/form-data" || mediaType === "application/x-www-form-urlencoded") {
     return parseFormData(request, { all, dot });
   }
   return {};
 };
 async function parseFormData(request, options) {
-  const formData = await request.formData();
+  if (!isRawRequest(request) && request.bodyCache.formData) {
+    return convertFormDataToBodyData(
+      await request.bodyCache.formData,
+      options
+    );
+  }
+  const headers = isRawRequest(request) ? request.headers : request.raw.headers;
+  const arrayBuffer = await request.arrayBuffer();
+  const formDataPromise = bufferToFormData(arrayBuffer, headers.get("Content-Type") || "");
+  if (!isRawRequest(request)) {
+    request.bodyCache.formData = formDataPromise;
+  }
+  const formData = await formDataPromise;
   if (formData) {
     return convertFormDataToBodyData(formData, options);
   }
@@ -1058,7 +1323,7 @@ var handleParsingNestedValues = (form, key, value) => {
   });
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/utils/url.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/utils/url.js
 var splitPath = (path) => {
   const paths = path.split("/");
   if (paths[0] === "") {
@@ -1164,13 +1429,13 @@ var checkOptionalParameter = (path) => {
     if (segment !== "" && !/\:/.test(segment)) {
       basePath += "/" + segment;
     } else if (/\:/.test(segment)) {
-      if (/\?/.test(segment)) {
+      if (segment.charCodeAt(segment.length - 1) === 63) {
         if (results.length === 0 && basePath === "") {
           results.push("/");
         } else {
           results.push(basePath);
         }
-        const optionalSegment = segment.replace("?", "");
+        const optionalSegment = segment.slice(0, -1);
         basePath += "/" + optionalSegment;
         results.push(basePath);
       } else {
@@ -1180,18 +1445,16 @@ var checkOptionalParameter = (path) => {
   });
   return results.filter((v, i, a) => a.indexOf(v) === i);
 };
+var tryDecodeURIComponent = (str) => str.indexOf("%") !== -1 ? tryDecode(str, decodeURIComponent_) : str;
 var _decodeURI = (value) => {
-  if (!/[%+]/.test(value)) {
-    return value;
-  }
   if (value.indexOf("+") !== -1) {
     value = value.replace(/\+/g, " ");
   }
-  return value.indexOf("%") !== -1 ? tryDecode(value, decodeURIComponent_) : value;
+  return tryDecodeURIComponent(value);
 };
 var _getQueryParam = (url, key, multiple) => {
   let encoded;
-  if (!multiple && key && !/[%+]/.test(key)) {
+  if (!multiple && key && key.indexOf("%") === -1 && key.indexOf("+") === -1) {
     let keyIndex2 = url.indexOf("?", 8);
     if (keyIndex2 === -1) {
       return void 0;
@@ -1215,7 +1478,7 @@ var _getQueryParam = (url, key, multiple) => {
       return void 0;
     }
   }
-  const results = {};
+  const results = /* @__PURE__ */ Object.create(null);
   encoded ??= /[%+]/.test(url);
   let keyIndex = url.indexOf("?", 8);
   while (keyIndex !== -1) {
@@ -1261,8 +1524,7 @@ var getQueryParams = (url, key) => {
 };
 var decodeURIComponent_ = decodeURIComponent;
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/request.js
-var tryDecodeURIComponent = (str) => tryDecode(str, decodeURIComponent_);
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/request.js
 var HonoRequest = class {
   /**
    * `.raw` can get the raw Request object.
@@ -1301,7 +1563,6 @@ var HonoRequest = class {
     this.raw = request;
     this.path = path;
     this.#matchResult = matchResult;
-    this.#validatedData = {};
   }
   param(key) {
     return key ? this.#getDecodedParam(key) : this.#getAllDecodedParams();
@@ -1309,7 +1570,7 @@ var HonoRequest = class {
   #getDecodedParam(key) {
     const paramKey = this.#matchResult[0][this.routeIndex][1][key];
     const param = this.#getParamValue(paramKey);
-    return param && /\%/.test(param) ? tryDecodeURIComponent(param) : param;
+    return param && tryDecodeURIComponent(param);
   }
   #getAllDecodedParams() {
     const decoded = {};
@@ -1317,7 +1578,7 @@ var HonoRequest = class {
     for (const key of keys) {
       const value = this.#getParamValue(this.#matchResult[0][this.routeIndex][1][key]);
       if (value !== void 0) {
-        decoded[key] = /\%/.test(value) ? tryDecodeURIComponent(value) : value;
+        decoded[key] = tryDecodeURIComponent(value);
       }
     }
     return decoded;
@@ -1335,7 +1596,7 @@ var HonoRequest = class {
     if (name) {
       return this.raw.headers.get(name) ?? void 0;
     }
-    const headerData = {};
+    const headerData = /* @__PURE__ */ Object.create(null);
     this.raw.headers.forEach((value, key) => {
       headerData[key] = value;
     });
@@ -1350,8 +1611,7 @@ var HonoRequest = class {
     if (cachedBody) {
       return cachedBody;
     }
-    const anyCachedKey = Object.keys(bodyCache)[0];
-    if (anyCachedKey) {
+    for (const anyCachedKey in bodyCache) {
       return bodyCache[anyCachedKey].then((body) => {
         if (anyCachedKey === "json") {
           body = JSON.stringify(body);
@@ -1454,10 +1714,10 @@ var HonoRequest = class {
    * @param data - The validated data to add.
    */
   addValidatedData(target, data) {
-    this.#validatedData[target] = data;
+    (this.#validatedData ??= {})[target] = data;
   }
   valid(target) {
-    return this.#validatedData[target];
+    return this.#validatedData?.[target];
   }
   /**
    * `.url()` can get the request url strings.
@@ -1544,7 +1804,7 @@ var HonoRequest = class {
   }
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/utils/html.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/utils/html.js
 var HtmlEscapedCallbackPhase = {
   Stringify: 1};
 var resolveCallback = async (str, phase, preserveCallbacks, context, buffer) => {
@@ -1575,7 +1835,7 @@ var resolveCallback = async (str, phase, preserveCallbacks, context, buffer) =>
   }
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/context.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/context.js
 var TEXT_PLAIN = "text/plain; charset=UTF-8";
 var setDefaultContentType = (contentType2, headers) => {
   return {
@@ -1848,11 +2108,11 @@ var Context = class {
     return Object.fromEntries(this.#var);
   }
   #newResponse(data, arg, headers) {
-    const responseHeaders = this.#res ? new Headers(this.#res.headers) : this.#preparedHeaders ?? new Headers();
-    if (typeof arg === "object" && "headers" in arg) {
-      const argHeaders = arg.headers instanceof Headers ? arg.headers : new Headers(arg.headers);
-      for (const [key, value] of argHeaders) {
-        if (key.toLowerCase() === "set-cookie") {
+    let responseHeaders = this.#res ? new Headers(this.#res.headers) : this.#preparedHeaders;
+    if (typeof arg === "object" && arg.headers) {
+      responseHeaders ??= new Headers();
+      for (const [key, value] of new Headers(arg.headers)) {
+        if (key === "set-cookie") {
           responseHeaders.append(key, value);
         } else {
           responseHeaders.set(key, value);
@@ -1860,19 +2120,34 @@ var Context = class {
       }
     }
     if (headers) {
-      for (const [k, v] of Object.entries(headers)) {
-        if (typeof v === "string") {
-          responseHeaders.set(k, v);
-        } else {
-          responseHeaders.delete(k);
-          for (const v2 of v) {
-            responseHeaders.append(k, v2);
+      if (!responseHeaders) {
+        let count = 0;
+        for (const k in headers) {
+          if (++count > 1 || typeof headers[k] !== "string") {
+            responseHeaders = new Headers();
+            break;
+          }
+        }
+      }
+      if (responseHeaders) {
+        for (const k in headers) {
+          const v = headers[k];
+          if (typeof v === "string") {
+            responseHeaders.set(k, v);
+          } else {
+            responseHeaders.delete(k);
+            for (const v2 of v) {
+              responseHeaders.append(k, v2);
+            }
           }
         }
       }
     }
     const status = typeof arg === "number" ? arg : arg?.status ?? this.#status;
-    return createResponseInstance(data, { status, headers: responseHeaders });
+    return createResponseInstance(data, {
+      status,
+      headers: responseHeaders ?? headers
+    });
   }
   newResponse = (...args) => this.#newResponse(...args);
   /**
@@ -1982,18 +2257,18 @@ var Context = class {
   };
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/router.js
 var METHOD_NAME_ALL = "ALL";
 var METHOD_NAME_ALL_LOWERCASE = "all";
-var METHODS = ["get", "post", "put", "delete", "options", "patch"];
+var METHODS = ["get", "post", "put", "delete", "options", "patch", "query"];
 var MESSAGE_MATCHER_IS_ALREADY_BUILT = "Can not add a route since the matcher is already built.";
 var UnsupportedPathError = class extends Error {
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/utils/constants.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/utils/constants.js
 var COMPOSED_HANDLER = "__COMPOSED_HANDLER";
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/hono-base.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/hono-base.js
 var notFoundHandler = (c) => {
   return c.text("404 Not Found", 404);
 };
@@ -2012,6 +2287,7 @@ var Hono = class _Hono {
   delete;
   options;
   patch;
+  query;
   all;
   on;
   use;
@@ -2311,8 +2587,8 @@ var Hono = class _Hono {
    * @see {@link https://hono.dev/docs/api/hono#fetch}
    *
    * @param {Request} request - request Object of request
-   * @param {Env} Env - env Object
-   * @param {ExecutionContext} - context of execution
+   * @param {Env} env - env Object
+   * @param {ExecutionContext} executionCtx - context of execution
    * @returns {Response | Promise<Response>} response of request
    *
    */
@@ -2369,7 +2645,7 @@ var Hono = class _Hono {
   };
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/reg-exp-router/matcher.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/router/reg-exp-router/matcher.js
 var emptyParam = [];
 function match(method, path) {
   const matchers = this.buildAllMatchers();
@@ -2390,7 +2666,7 @@ function match(method, path) {
   return match2(method, path);
 }
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/reg-exp-router/node.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/router/reg-exp-router/node.js
 var LABEL_REG_EXP_STR = "[^/]+";
 var ONLY_WILDCARD_REG_EXP_STR = ".*";
 var TAIL_WILDCARD_REG_EXP_STR = "(?:|/.*)";
@@ -2404,7 +2680,7 @@ function compareKey(a, b) {
     return 1;
   }
   if (a === ONLY_WILDCARD_REG_EXP_STR || a === TAIL_WILDCARD_REG_EXP_STR) {
-    return 1;
+    return b === TAIL_WILDCARD_REG_EXP_STR ? -1 : 1;
   } else if (b === ONLY_WILDCARD_REG_EXP_STR || b === TAIL_WILDCARD_REG_EXP_STR) {
     return -1;
   }
@@ -2416,76 +2692,75 @@ function compareKey(a, b) {
   return a.length === b.length ? a < b ? -1 : 1 : b.length - a.length;
 }
 var Node = class _Node {
+  // handler index of a dynamic path, or -1 for a static path terminal
   #index;
   #varIndex;
   #children = /* @__PURE__ */ Object.create(null);
-  insert(tokens, index, paramMap, context, pathErrorCheckOnly) {
-    if (tokens.length === 0) {
-      if (this.#index !== void 0) {
-        throw PATH_ERROR;
-      }
-      if (pathErrorCheckOnly) {
-        return;
-      }
-      this.#index = index;
-      return;
-    }
-    const [token, ...restTokens] = tokens;
-    const pattern = token === "*" ? restTokens.length === 0 ? ["", "", ONLY_WILDCARD_REG_EXP_STR] : ["", "", LABEL_REG_EXP_STR] : token === "/*" ? ["", "", TAIL_WILDCARD_REG_EXP_STR] : token.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/);
-    let node;
-    if (pattern) {
-      const name = pattern[1];
-      let regexpStr = pattern[2] || LABEL_REG_EXP_STR;
-      if (name && pattern[2]) {
-        if (regexpStr === ".*") {
-          throw PATH_ERROR;
-        }
-        regexpStr = regexpStr.replace(/^\((?!\?:)(?=[^)]+\)$)/, "(?:");
-        if (/\((?!\?:)/.test(regexpStr)) {
-          throw PATH_ERROR;
-        }
-      }
-      node = this.#children[regexpStr];
-      if (!node) {
-        if (Object.keys(this.#children).some(
-          (k) => k !== ONLY_WILDCARD_REG_EXP_STR && k !== TAIL_WILDCARD_REG_EXP_STR
-        )) {
-          throw PATH_ERROR;
+  insert(tokens, index, paramMap, context, isStatic) {
+    let node = this;
+    for (let i = 0, len = tokens.length; i < len; i++) {
+      const token = tokens[i];
+      const pattern = token.length === 1 ? token === "*" ? i === len - 1 ? ["", "", ONLY_WILDCARD_REG_EXP_STR] : ["", "", LABEL_REG_EXP_STR] : null : token === "/*" ? ["", "", TAIL_WILDCARD_REG_EXP_STR] : token.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/);
+      let nextNode;
+      if (pattern) {
+        const name = pattern[1];
+        let regexpStr = pattern[2] || LABEL_REG_EXP_STR;
+        if (name && pattern[2]) {
+          if (regexpStr === ".*") {
+            throw PATH_ERROR;
+          }
+          regexpStr = regexpStr.replace(/^\((?!\?:)(?=[^)]+\)$)/, "(?:");
+          if (/\((?!\?:)/.test(regexpStr)) {
+            throw PATH_ERROR;
+          }
+          if (regexpStr.length === 1 && regExpMetaChars.has(regexpStr)) {
+            throw PATH_ERROR;
+          }
         }
-        if (pathErrorCheckOnly) {
-          return;
+        nextNode = node.#children[regexpStr];
+        if (!nextNode) {
+          if (regexpStr !== ONLY_WILDCARD_REG_EXP_STR && regexpStr !== TAIL_WILDCARD_REG_EXP_STR) {
+            for (const k in node.#children) {
+              if (
+                // a single-char pattern coexists with single-char literals as a literal does
+                (regexpStr.length > 1 || k.length > 1) && k !== ONLY_WILDCARD_REG_EXP_STR && k !== TAIL_WILDCARD_REG_EXP_STR
+              ) {
+                throw PATH_ERROR;
+              }
+            }
+          }
+          nextNode = node.#children[regexpStr] = new _Node();
         }
-        node = this.#children[regexpStr] = new _Node();
         if (name !== "") {
-          node.#varIndex = context.varIndex++;
-        }
-      }
-      if (!pathErrorCheckOnly && name !== "") {
-        paramMap.push([name, node.#varIndex]);
-      }
-    } else {
-      node = this.#children[token];
-      if (!node) {
-        if (Object.keys(this.#children).some(
-          (k) => k.length > 1 && k !== ONLY_WILDCARD_REG_EXP_STR && k !== TAIL_WILDCARD_REG_EXP_STR
-        )) {
-          throw PATH_ERROR;
+          nextNode.#varIndex ??= context.varIndex++;
+          paramMap.push([name, nextNode.#varIndex]);
         }
-        if (pathErrorCheckOnly) {
-          return;
+      } else {
+        nextNode = node.#children[token];
+        if (!nextNode) {
+          for (const k in node.#children) {
+            if (k.length > 1 && k !== ONLY_WILDCARD_REG_EXP_STR && k !== TAIL_WILDCARD_REG_EXP_STR) {
+              throw PATH_ERROR;
+            }
+          }
+          nextNode = node.#children[token] = new _Node();
         }
-        node = this.#children[token] = new _Node();
       }
+      node = nextNode;
     }
-    node.insert(restTokens, index, paramMap, context, pathErrorCheckOnly);
+    if (node.#index !== void 0) {
+      throw PATH_ERROR;
+    }
+    node.#index = isStatic ? -1 : index;
   }
   buildRegExpStr() {
     const childKeys = Object.keys(this.#children).sort(compareKey);
     const strList = childKeys.map((k) => {
       const c = this.#children[k];
-      return (typeof c.#varIndex === "number" ? `(${k})@${c.#varIndex}` : regExpMetaChars.has(k) ? `\\${k}` : k) + c.buildRegExpStr();
-    });
-    if (typeof this.#index === "number") {
+      const childStr = c.buildRegExpStr();
+      return childStr === "" ? "" : (typeof c.#varIndex === "number" ? `(${k})@${c.#varIndex}` : regExpMetaChars.has(k) ? `\\${k}` : k) + childStr;
+    }).filter(Boolean);
+    if (typeof this.#index === "number" && this.#index !== -1) {
       strList.unshift(`#${this.#index}`);
     }
     if (strList.length === 0) {
@@ -2498,16 +2773,24 @@ var Node = class _Node {
   }
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/reg-exp-router/trie.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/router/reg-exp-router/trie.js
 var Trie = class {
   #context = { varIndex: 0 };
   #root = new Node();
-  insert(path, index, pathErrorCheckOnly) {
+  #index = 0;
+  // dynamic path -> [handler index, param assoc]; static paths are not registered
+  paths = /* @__PURE__ */ Object.create(null);
+  insert(path, isStatic) {
+    if (isStatic) {
+      this.#root.insert(path.split(""), 0, [], this.#context, true);
+      return;
+    }
     const paramAssoc = [];
     const groups = [];
+    let markedPath = path;
     for (let i = 0; ; ) {
       let replaced = false;
-      path = path.replace(/\{[^}]+\}/g, (m) => {
+      markedPath = markedPath.replace(/\{[^}]+\}/g, (m) => {
         const mark = `@\\${i}`;
         groups[i] = [mark, m];
         i++;
@@ -2518,7 +2801,7 @@ var Trie = class {
         break;
       }
     }
-    const tokens = path.match(/(?::[^\/]+)|(?:\/\*$)|./g) || [];
+    const tokens = markedPath.match(/(?::[^\/]+)|(?:\/\*$)|./g) || [];
     for (let i = groups.length - 1; i >= 0; i--) {
       const [mark] = groups[i];
       for (let j = tokens.length - 1; j >= 0; j--) {
@@ -2528,8 +2811,8 @@ var Trie = class {
         }
       }
     }
-    this.#root.insert(tokens, index, paramAssoc, this.#context, pathErrorCheckOnly);
-    return paramAssoc;
+    this.#root.insert(tokens, this.#index, paramAssoc, this.#context, false);
+    this.paths[path] = [this.#index++, paramAssoc];
   }
   buildRegExp() {
     let regexp = this.#root.buildRegExpStr();
@@ -2554,8 +2837,7 @@ var Trie = class {
   }
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/reg-exp-router/router.js
-var nullMatcher = [/^$/, [], /* @__PURE__ */ Object.create(null)];
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/router/reg-exp-router/router.js
 var wildcardRegExpCache = /* @__PURE__ */ Object.create(null);
 function buildWildcardRegExp(path) {
   return wildcardRegExpCache[path] ??= new RegExp(
@@ -2568,63 +2850,6 @@ function buildWildcardRegExp(path) {
 function clearWildcardRegExpCache() {
   wildcardRegExpCache = /* @__PURE__ */ Object.create(null);
 }
-function buildMatcherFromPreprocessedRoutes(routes) {
-  const trie = new Trie();
-  const handlerData = [];
-  if (routes.length === 0) {
-    return nullMatcher;
-  }
-  const routesWithStaticPathFlag = routes.map(
-    (route) => [!/\*|\/:/.test(route[0]), ...route]
-  ).sort(
-    ([isStaticA, pathA], [isStaticB, pathB]) => isStaticA ? 1 : isStaticB ? -1 : pathA.length - pathB.length
-  );
-  const staticMap = /* @__PURE__ */ Object.create(null);
-  for (let i = 0, j = -1, len = routesWithStaticPathFlag.length; i < len; i++) {
-    const [pathErrorCheckOnly, path, handlers] = routesWithStaticPathFlag[i];
-    if (pathErrorCheckOnly) {
-      staticMap[path] = [handlers.map(([h]) => [h, /* @__PURE__ */ Object.create(null)]), emptyParam];
-    } else {
-      j++;
-    }
-    let paramAssoc;
-    try {
-      paramAssoc = trie.insert(path, j, pathErrorCheckOnly);
-    } catch (e) {
-      throw e === PATH_ERROR ? new UnsupportedPathError(path) : e;
-    }
-    if (pathErrorCheckOnly) {
-      continue;
-    }
-    handlerData[j] = handlers.map(([h, paramCount]) => {
-      const paramIndexMap = /* @__PURE__ */ Object.create(null);
-      paramCount -= 1;
-      for (; paramCount >= 0; paramCount--) {
-        const [key, value] = paramAssoc[paramCount];
-        paramIndexMap[key] = value;
-      }
-      return [h, paramIndexMap];
-    });
-  }
-  const [regexp, indexReplacementMap, paramReplacementMap] = trie.buildRegExp();
-  for (let i = 0, len = handlerData.length; i < len; i++) {
-    for (let j = 0, len2 = handlerData[i].length; j < len2; j++) {
-      const map = handlerData[i][j]?.[1];
-      if (!map) {
-        continue;
-      }
-      const keys = Object.keys(map);
-      for (let k = 0, len3 = keys.length; k < len3; k++) {
-        map[keys[k]] = paramReplacementMap[map[keys[k]]];
-      }
-    }
-  }
-  const handlerMap = [];
-  for (const i in indexReplacementMap) {
-    handlerMap[i] = handlerData[indexReplacementMap[i]];
-  }
-  return [regexp, handlerMap, staticMap];
-}
 function findMiddleware(middleware, path) {
   if (!middleware) {
     return void 0;
@@ -2640,9 +2865,18 @@ var RegExpRouter = class {
   name = "RegExpRouter";
   #middleware;
   #routes;
+  #tries;
   constructor() {
     this.#middleware = { [METHOD_NAME_ALL]: /* @__PURE__ */ Object.create(null) };
     this.#routes = { [METHOD_NAME_ALL]: /* @__PURE__ */ Object.create(null) };
+    this.#tries = { [METHOD_NAME_ALL]: new Trie() };
+  }
+  #insertPath(method, path) {
+    try {
+      this.#tries[method].insert(path, !/\*|\/:/.test(path));
+    } catch (e) {
+      throw e === PATH_ERROR ? new UnsupportedPathError(path) : e;
+    }
   }
   add(method, path, handler) {
     const middleware = this.#middleware;
@@ -2651,10 +2885,12 @@ var RegExpRouter = class {
       throw new Error(MESSAGE_MATCHER_IS_ALREADY_BUILT);
     }
     if (!middleware[method]) {
+      this.#tries[method] = new Trie();
       [middleware, routes].forEach((handlerMap) => {
         handlerMap[method] = /* @__PURE__ */ Object.create(null);
         Object.keys(handlerMap[METHOD_NAME_ALL]).forEach((p) => {
           handlerMap[method][p] = [...handlerMap[METHOD_NAME_ALL][p]];
+          this.#insertPath(method, p);
         });
       });
     }
@@ -2664,13 +2900,12 @@ var RegExpRouter = class {
     const paramCount = (path.match(/\/:/g) || []).length;
     if (/\*$/.test(path)) {
       const re = buildWildcardRegExp(path);
-      if (method === METHOD_NAME_ALL) {
-        Object.keys(middleware).forEach((m) => {
-          middleware[m][path] ||= findMiddleware(middleware[m], path) || findMiddleware(middleware[METHOD_NAME_ALL], path) || [];
-        });
-      } else {
-        middleware[method][path] ||= findMiddleware(middleware[method], path) || findMiddleware(middleware[METHOD_NAME_ALL], path) || [];
-      }
+      Object.keys(middleware).forEach((m) => {
+        if ((method === METHOD_NAME_ALL || method === m) && !middleware[m][path]) {
+          this.#insertPath(m, path);
+          middleware[m][path] = findMiddleware(middleware[m], path) || findMiddleware(middleware[METHOD_NAME_ALL], path) || [];
+        }
+      });
       Object.keys(middleware).forEach((m) => {
         if (method === METHOD_NAME_ALL || method === m) {
           Object.keys(middleware[m]).forEach((p) => {
@@ -2692,9 +2927,12 @@ var RegExpRouter = class {
       const path2 = paths[i];
       Object.keys(routes).forEach((m) => {
         if (method === METHOD_NAME_ALL || method === m) {
-          routes[m][path2] ||= [
-            ...findMiddleware(middleware[m], path2) || findMiddleware(middleware[METHOD_NAME_ALL], path2) || []
-          ];
+          if (!routes[m][path2]) {
+            this.#insertPath(m, path2);
+            routes[m][path2] = [
+              ...findMiddleware(middleware[m], path2) || findMiddleware(middleware[METHOD_NAME_ALL], path2) || []
+            ];
+          }
           routes[m][path2].push([handler, paramCount - len + i + 1]);
         }
       });
@@ -2706,33 +2944,58 @@ var RegExpRouter = class {
     Object.keys(this.#routes).concat(Object.keys(this.#middleware)).forEach((method) => {
       matchers[method] ||= this.#buildMatcher(method);
     });
-    this.#middleware = this.#routes = void 0;
+    this.#middleware = this.#routes = this.#tries = void 0;
     clearWildcardRegExpCache();
     return matchers;
   }
   #buildMatcher(method) {
-    const routes = [];
-    let hasOwnRoute = method === METHOD_NAME_ALL;
-    [this.#middleware, this.#routes].forEach((r) => {
-      const ownRoute = r[method] ? Object.keys(r[method]).map((path) => [path, r[method][path]]) : [];
-      if (ownRoute.length !== 0) {
-        hasOwnRoute ||= true;
-        routes.push(...ownRoute);
-      } else if (method !== METHOD_NAME_ALL) {
-        routes.push(
-          ...Object.keys(r[METHOD_NAME_ALL]).map((path) => [path, r[METHOD_NAME_ALL][path]])
-        );
+    const middleware = this.#middleware[method];
+    const routes = this.#routes[method];
+    const trie = this.#tries[method];
+    const staticMap = /* @__PURE__ */ Object.create(null);
+    const handlerData = [];
+    [middleware, routes].forEach((r) => {
+      for (const path in r) {
+        const handlers = r[path];
+        const pathData = trie.paths[path];
+        if (!pathData) {
+          staticMap[path] = [handlers.map(([h]) => [h, /* @__PURE__ */ Object.create(null)]), emptyParam];
+          continue;
+        }
+        const paramAssoc = pathData[1];
+        handlerData[pathData[0]] = handlers.map(([h, paramCount]) => {
+          const paramIndexMap = /* @__PURE__ */ Object.create(null);
+          paramCount -= 1;
+          for (; paramCount >= 0; paramCount--) {
+            const [key, value] = paramAssoc[paramCount];
+            paramIndexMap[key] = value;
+          }
+          return [h, paramIndexMap];
+        });
       }
     });
-    if (!hasOwnRoute) {
-      return null;
-    } else {
-      return buildMatcherFromPreprocessedRoutes(routes);
+    const [regexp, indexReplacementMap, paramReplacementMap] = trie.buildRegExp();
+    for (let i = 0, len = handlerData.length; i < len; i++) {
+      for (let j = 0, len2 = handlerData[i].length; j < len2; j++) {
+        const map = handlerData[i][j]?.[1];
+        if (!map) {
+          continue;
+        }
+        const keys = Object.keys(map);
+        for (let k = 0, len3 = keys.length; k < len3; k++) {
+          map[keys[k]] = paramReplacementMap[map[keys[k]]];
+        }
+      }
+    }
+    const handlerMap = [];
+    for (const i in indexReplacementMap) {
+      handlerMap[i] = handlerData[indexReplacementMap[i]];
     }
+    return [regexp, handlerMap, staticMap];
   }
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/smart-router/router.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/router/smart-router/router.js
 var SmartRouter = class {
   name = "SmartRouter";
   #routers = [];
@@ -2787,7 +3050,7 @@ var SmartRouter = class {
   }
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/trie-router/node.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/router/trie-router/node.js
 var emptyParams = /* @__PURE__ */ Object.create(null);
 var hasChildren = (children) => {
   for (const _ in children) {
@@ -2921,9 +3184,18 @@ var Node2 = class _Node2 {
             if (m) {
               params[name] = m[0];
               this.#pushHandlerSets(handlerSets, child, method, node.#params, params);
+              if (m[0].length === restPathString.length && child.#children["*"]) {
+                this.#pushHandlerSets(
+                  handlerSets,
+                  child.#children["*"],
+                  method,
+                  node.#params,
+                  params
+                );
+              }
               if (hasChildren(child.#children)) {
                 child.#params = params;
-                const componentCount = m[0].match(/\//)?.length ?? 0;
+                const componentCount = m[0].match(/\//g)?.length ?? 0;
                 const targetCurNodes = curNodesQueue[componentCount] ||= [];
                 targetCurNodes.push(child);
               }
@@ -2962,7 +3234,7 @@ var Node2 = class _Node2 {
   }
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/router/trie-router/router.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/router/trie-router/router.js
 var TrieRouter = class {
   name = "TrieRouter";
   #node;
@@ -2984,7 +3256,7 @@ var TrieRouter = class {
   }
 };
 
-// ../node_modules/.bun/hono@4.12.25/node_modules/hono/dist/hono.js
+// ../node_modules/.bun/hono@4.13.2/node_modules/hono/dist/hono.js
 var Hono2 = class extends Hono {
   /**
    * Creates an instance of the Hono class.
@@ -3000,9 +3272,75 @@ var Hono2 = class extends Hono {
 };
 
 // src/types/common.ts
+var SUPPORTED_CURRENCY_CODES = /* @__PURE__ */ new Set([
+  "USD",
+  "EUR",
+  "GBP",
+  "JPY",
+  "CNY",
+  "CHF",
+  "CAD",
+  "AUD",
+  "GHS",
+  "NGN",
+  "KES",
+  "ZAR",
+  "XOF",
+  "XAF",
+  "EGP",
+  "TZS",
+  "UGX",
+  "RWF",
+  "ETB",
+  "ZMW",
+  "BWP",
+  "MUR",
+  "NAD",
+  "MWK",
+  "AOA",
+  "CDF",
+  "GMD",
+  "GNF",
+  "LRD",
+  "SLL",
+  "MZN",
+  "BIF",
+  "INR",
+  "BRL",
+  "COP",
+  "MXN",
+  "KRW",
+  "TRY",
+  "THB",
+  "MYR",
+  "PHP",
+  "IDR",
+  "VND",
+  "SGD",
+  "HKD",
+  "TWD",
+  "AED",
+  "SAR",
+  "ILS"
+]);
+function isSupportedCurrency(code) {
+  return SUPPORTED_CURRENCY_CODES.has(code);
+}
+var warnedCurrencies = /* @__PURE__ */ new Set();
+function currencyCode(value) {
+  const normalized = value.trim().toUpperCase();
+  if (!isSupportedCurrency(normalized) && !warnedCurrencies.has(normalized)) {
+    warnedCurrencies.add(normalized);
+    console.warn(
+      `[Cimplify] Unrecognized currency code "${normalized}". It may not format correctly.`
+    );
+  }
+  return normalized;
+}
 var ErrorCode = {
   NOT_FOUND: "NOT_FOUND",
-  VALIDATION_ERROR: "VALIDATION_ERROR"};
+  VALIDATION_ERROR: "VALIDATION_ERROR",
+  CART_EMPTY: "CART_EMPTY"};
 var DOCS_ERROR_BASE_URL = "https://docs.cimplify.io/reference/error-codes";
 function docsUrlForCode(code) {
   return `${DOCS_ERROR_BASE_URL}#${code.toLowerCase().replace(/_/g, "-")}`;
@@ -3040,6 +3378,8 @@ var ERROR_SUGGESTIONS = {
   CARD_DECLINED: "Card was declined. Ask shopper to retry or switch payment method.",
   INVALID_OTP: "Authorization code is invalid. Let shopper re-enter OTP/PIN and retry.",
   OTP_EXPIRED: "Authorization code expired. Request a new OTP and re-submit authorization.",
+  OTP_CHALLENGE_EXHAUSTED: "This verification challenge has no attempts left. Continue checkout without saved details or request a fresh challenge.",
+  OTP_CHALLENGE_CONSUMED: "This verification challenge has already been used. Continue with the established session or request a fresh challenge.",
   AUTHORIZATION_FAILED: "Additional payment authorization failed. Retry authorization or change payment method.",
   PAYMENT_ACTION_NOT_COMPLETED: "Required payment action was not completed. Resume provider flow and poll for status.",
   SLOT_UNAVAILABLE: "Selected schedule slot is unavailable. Refresh available slots and ask shopper to reselect.",
@@ -3058,6 +3398,10 @@ var ERROR_SUGGESTIONS = {
   CHECKOUT_NOT_READY: "Checkout elements are still initializing. Wait for readiness before submit.",
   CANCELLED: "Checkout was cancelled. Preserve cart state and allow shopper to retry.",
   REQUEST_TIMEOUT: "Provider call timed out. Poll payment/order status before issuing another charge attempt.",
+  CHECKOUT_AUTHORITY_REQUIRED: "Provide an exact cart or purchase-intent authority before starting checkout.",
+  AUTH_CONFIG_REQUIRED: "Configure the OAuth client and redirect URI before mounting embedded authentication.",
+  AUTH_CALLBACK_MISSING_TOKEN: "The authentication callback returned no access token. Restart sign-in before checkout.",
+  AUTH_START_FAILED: "Embedded authentication could not start. Verify the OAuth configuration and retry.",
   POPUP_BLOCKED: "Browser blocked provider popup. Ask shopper to enable popups and retry.",
   FX_QUOTE_FAILED: "Failed to lock FX quote. Retry currency quote or fallback to base currency."
 };
@@ -3101,7 +3445,7 @@ function authMiddleware(deps) {
     await next();
   };
 }
-var IDEMPOTENT_PATH_RE = /\/(cart\/items|cart\/coupons|checkout|payments\/authorization|auth\/(request-otp|verify-otp|profile|logout))(\/|$)/;
+var IDEMPOTENT_PATH_RE = /\/(cart\/items|cart\/coupons|checkout|purchase-intents|payments\/authorization|auth\/(request-otp|verify-otp|profile|logout))(\/|$)/;
 var IDEMPOTENCY_TTL_MS = 24 * 60 * 60 * 1e3;
 function idempotencyMiddleware(deps) {
   return async (c, next) => {
@@ -3111,7 +3455,8 @@ function idempotencyMiddleware(deps) {
     const key = c.req.header("idempotency-key") ?? c.req.header("Idempotency-Key");
     if (!key || key.length > 200) return next();
     const session = c.var.session;
-    const recordId = `${session.id}:${key}`;
+    const routeScope = c.req.path.includes("/purchase-intents") ? `:${c.req.path}` : "";
+    const recordId = `${session.id}${routeScope}:${key}`;
     const existing = deps.registry.idempotency.get(recordId);
     if (existing) {
       const expiresAt = Date.parse(existing.expires_at);
@@ -3189,8 +3534,89 @@ var PAYMENT_METHOD = {
   MOBILE_MONEY: "mobile_money",
   CARD: "card"
 };
+var CHECKOUT_NEXT_ACTION = {
+  NONE: "none"};
+var CHECKOUT_ORDER_RESULT_STATUS = {
+  CONFIRMED: "confirmed"};
+var AUTHORIZATION_TYPE = {
+  OTP: "otp"};
+var DEFAULT_CURRENCY = "GHS";
+
+// src/types/purchase-intent.ts
+var PURCHASE_INTENT_SOURCE_KIND = {
+  CART: "cart"};
+var PURCHASING_PRINCIPAL_KIND = {
+  ACCOUNT: "account",
+  BUSINESS: "business",
+  GUEST: "guest"};
+var PURCHASE_INTENT_STATUS = {
+  OPEN: "open",
+  CONVERTED: "converted"};
+var PURCHASE_INTENT_SELLABLE_KIND = {
+  PRODUCT: "product",
+  VARIANT: "variant"
+};
+var PURCHASE_INTENT_LINE_CONFIGURATION_KIND = {
+  SIMPLE: "simple"};
+var MOBILE_MONEY_TENDER_AUTHORITY_KIND = {
+  TRANSIENT: "transient"};
+var PURCHASE_INTENT_MOBILE_MONEY_NETWORK = {
+  MTN: "mtn",
+  TELECEL: "telecel",
+  AIRTEL: "airtel"
+};
+var CHECKOUT_COMPLIANCE_LANE = {
+  NATIVE: "native"};
+var CHECKOUT_COMPLIANCE_REASON = {
+  PHYSICAL_GOODS_NATIVE: "physical_goods_native"};
+var PURCHASE_INTENT_PAYMENT_METHOD = {
+  CARD: "card",
+  MOBILE_MONEY: "mobile_money"};
+var PAYMENT_COLLECTION_MODE = {
+  REQUEST_TO_PAY: "request_to_pay",
+  CREDENTIAL_CHARGE: "credential_charge"};
+var PURCHASE_INTENT_PAYMENT_PROVIDER = {
+  PAYSTACK: "paystack"};
+var PAYMENT_OPTION_STATUS = {
+  ELIGIBLE: "eligible"};
+var PAYMENT_OPTION_NEXT_ACTION = {
+  PROVIDER_APPROVAL: "provider_approval"};
+var LEGACY_CHECKOUT_PAYMENT_STATUS = {
+  SUCCEEDED: "succeeded"};
+var CHECKOUT_TERMS_COMPONENT = {
+  DUE_NOW: "due_now"};
+var CHECKOUT_TERMS_DELTA_KIND = {
+  MONEY: "money",
+  PAYMENT_OPTION: "payment_option"
+};
+var CHECKOUT_INVALIDATION_REASON = {
+  PAYMENT_OPTION_CHANGED: "payment_option_changed"
+};
+var PURCHASE_INTENT_CONFIRM_STATUS = {
+  ORDER_CREATED: "order_created",
+  CARD_POPUP_REQUIRED: "card_popup_required",
+  AUTHORIZATION_REQUIRED: "authorization_required",
+  TERMS_CHANGED: "terms_changed",
+  SELECTION_UNAVAILABLE: "selection_unavailable",
+  SOURCE_UNAVAILABLE: "source_unavailable"
+};
 
 // src/mock/routes/v1.ts
+var PURCHASE_INTENT_ROUTE = {
+  COLLECTION: "/purchase-intents",
+  MEMBER: "/purchase-intents/:intent_id",
+  REFRESH: "/purchase-intents/:intent_id/refresh",
+  CONFIRM: "/purchase-intents/:intent_id/confirm",
+  ACTION: "/purchase-intents/:intent_id/attempts/:attempt_id/actions"
+};
+var PURCHASE_INTENT_ROUTE_PARAM = {
+  INTENT_ID: "intent_id",
+  ATTEMPT_ID: "attempt_id"
+};
+var PAYMENT_ROUTE = {
+  COLLECTION_OPTIONS: "/payments/collection-options",
+  AUTHORIZATION: "/payments/authorization"
+};
 function buildV1(deps) {
   const app = new Hono2();
   app.use("*", chaosMiddleware(deps));
@@ -3452,6 +3878,36 @@ function buildV1(deps) {
     "/catalogue/quotes/:quote_id/refresh",
     (c) => tryRoute(c, () => deps.catalogue.refreshQuote(c.req.param("quote_id")))
   );
+  app.get("/reviews/summary", (c) => {
+    const productId = c.req.query("product_id");
+    if (productId !== void 0 && (productId.length === 0 || productId.trim() !== productId)) {
+      return fail(c, validation("product_id must be a non-empty canonical identifier"));
+    }
+    const response = {
+      data: {
+        ratings: {
+          product_id: productId ?? null,
+          review_count: 0,
+          rating_sum: 0,
+          average_rating: null,
+          distribution: { one: 0, two: 0, three: 0, four: 0, five: 0 }
+        },
+        trust_chips: {
+          on_time_delivery_percent: null,
+          delivery_sample_size: 0,
+          average_first_response_seconds: null,
+          support_sample_size: 0
+        }
+      }
+    };
+    return c.json(response);
+  });
+  app.get("/reviews", (c) => {
+    const response = {
+      data: { items: [], next_cursor: null }
+    };
+    return c.json(response);
+  });
   app.get("/cart", (c) => tryRoute(c, () => deps.cart.toUICart(deps.cart.get(c.var.session))));
   app.delete("/cart", (c) => tryRoute(c, () => deps.cart.clear(c.var.session)));
   app.get("/cart/items", (c) => tryRoute(c, () => deps.cart.getItems(c.var.session)));
@@ -3533,28 +3989,81 @@ function buildV1(deps) {
     "/subscriptions/:subscription_id/skip",
     (c) => tryRoute(c, () => deps.subscriptions.skipNext(c.req.param("subscription_id")))
   );
-  app.get("/payments/collection-options", (c) => {
+  app.get(PAYMENT_ROUTE.COLLECTION_OPTIONS, async (c) => {
     const currency = c.req.query("currency")?.trim().toUpperCase();
     if (!currency || !/^[A-Z]{3}$/.test(currency)) {
       return fail(c, validation("currency must be a canonical three-letter code"));
     }
     return tryRoute(c, () => ({
       presentment_currency: currency,
-      options: currency === "GHS" ? [
+      options: currency === DEFAULT_CURRENCY ? [
         { method: PAYMENT_METHOD.CARD, network: null },
-        { method: PAYMENT_METHOD.MOBILE_MONEY, network: "mtn" },
-        { method: PAYMENT_METHOD.MOBILE_MONEY, network: "telecel" },
-        { method: PAYMENT_METHOD.MOBILE_MONEY, network: "airteltigo" }
+        {
+          method: PAYMENT_METHOD.MOBILE_MONEY,
+          network: PURCHASE_INTENT_MOBILE_MONEY_NETWORK.MTN
+        },
+        {
+          method: PAYMENT_METHOD.MOBILE_MONEY,
+          network: PURCHASE_INTENT_MOBILE_MONEY_NETWORK.TELECEL
+        },
+        {
+          method: PAYMENT_METHOD.MOBILE_MONEY,
+          network: PURCHASE_INTENT_MOBILE_MONEY_NETWORK.AIRTEL
+        }
       ] : currency === "USD" ? [{ method: PAYMENT_METHOD.CARD, network: null }] : []
     }));
   });
-  app.post("/checkout", async (c) => {
+  app.post(PURCHASE_INTENT_ROUTE.COLLECTION, async (c) => {
+    const body = await c.req.json().catch(() => ({}));
+    return tryRoute(c, () => deps.purchaseIntents.mint(c.var.session, body));
+  });
+  app.get(
+    PURCHASE_INTENT_ROUTE.MEMBER,
+    (c) => tryRoute(
+      c,
+      () => deps.purchaseIntents.get(
+        c.var.session,
+        c.req.param(PURCHASE_INTENT_ROUTE_PARAM.INTENT_ID)
+      )
+    )
+  );
+  app.post(PURCHASE_INTENT_ROUTE.REFRESH, async (c) => {
+    const body = await c.req.json().catch(() => ({}));
+    return tryRoute(
+      c,
+      () => deps.purchaseIntents.refresh(
+        c.var.session,
+        c.req.param(PURCHASE_INTENT_ROUTE_PARAM.INTENT_ID),
+        body.expected_intent_revision
+      )
+    );
+  });
+  app.post(PURCHASE_INTENT_ROUTE.CONFIRM, async (c) => {
+    const body = await c.req.json().catch(() => ({}));
+    return tryRoute(
+      c,
+      () => deps.purchaseIntents.confirm(
+        c.var.session,
+        c.req.param(PURCHASE_INTENT_ROUTE_PARAM.INTENT_ID),
+        body
+      )
+    );
+  });
+  app.post(PURCHASE_INTENT_ROUTE.ACTION, async (c) => {
     const body = await c.req.json().catch(() => ({}));
-    return tryRoute(c, () => deps.checkout.process(c.var.session, body));
+    return tryRoute(
+      c,
+      () => deps.purchaseIntents.submitAction(
+        c.var.session,
+        c.req.param(PURCHASE_INTENT_ROUTE_PARAM.INTENT_ID),
+        c.req.param(PURCHASE_INTENT_ROUTE_PARAM.ATTEMPT_ID),
+        body
+      )
+    );
   });
-  app.post("/payments/authorization", async (c) => {
+  app.post(PAYMENT_ROUTE.AUTHORIZATION, async (c) => {
     const body = await c.req.json().catch(() => ({}));
-    return tryRoute(c, () => deps.checkout.authorize(body));
+    return tryRoute(c, () => deps.payments.authorize(body));
   });
   app.get("/auth/status", (c) => tryRoute(c, () => deps.auth.status(c.var.session.token)));
   app.post("/auth/request-otp", async (c) => {
@@ -3860,6 +4369,7 @@ function createStateRegistry() {
     collections: createMemoryStore(),
     carts: createMemoryStore(),
     orders: createMemoryStore(),
+    purchaseIntents: createMemoryStore(),
     subscriptions: createMemoryStore(),
     bookings: createMemoryStore(),
     services: createMemoryStore(),
@@ -4009,9 +4519,9 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
 // injected into the HTML page served by the mock. Edit this file directly \u2014
 // type-check via tsgo + the IframeToParentMessage shape from the SDK.
 (function () {
-  var TYPE = window.__CIMPLIFY_MOCK_ELEMENT__;
-  var DEFAULT_BUSINESS = window.__CIMPLIFY_MOCK_BUSINESS__;
-  var MSG = {
+  const TYPE = window.__CIMPLIFY_MOCK_ELEMENT__;
+  const DEFAULT_BUSINESS = window.__CIMPLIFY_MOCK_BUSINESS__;
+  const MSG = {
     INIT: "init", SET_TOKEN: "set_token", SET_CART: "set_cart", GET_DATA: "get_data",
     REFRESH_TOKEN: "refresh_token", LOGOUT: "logout",
     PROCESS_CHECKOUT: "process_checkout", ABORT_CHECKOUT: "abort_checkout",
@@ -4024,12 +4534,36 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
     CHECKOUT_STATUS: "checkout_status", CHECKOUT_COMPLETE: "checkout_complete",
     ORDER_TYPE_CHANGED: "order_type_changed", REQUEST_SUBMIT: "request_submit"
   };
-  var qs = new URLSearchParams(location.search);
-  var AUTO = qs.get("auto") === "true";
-  var DEMO_OTP = qs.get("otp") || "123456";
-  var ORIGIN = qs.get("origin") || "*";
-  var NONCE = qs.get("nonce");
-  var state = {
+  const PURCHASE_INTENT = {
+    PATH: "/api/v1/purchase-intents",
+    ORDER_CREATED: "order_created",
+    CARD_POPUP_REQUIRED: "card_popup_required",
+    AUTHORIZATION_REQUIRED: "authorization_required",
+    ELIGIBLE: "eligible"
+  };
+  const CHECKOUT_STATUS = {
+    PROCESSING: "processing",
+    SUCCESS: "success",
+    FAILED: "failed"
+  };
+  const CHECKOUT_ERROR = { FAILED: "CHECKOUT_FAILED" };
+  const ORDER_STATUS = { CONFIRMED: "confirmed" };
+  const TENDER = {
+    CARD: "card",
+    MOBILE_MONEY: "mobile_money",
+    AUTHORITY_TRANSIENT: "transient",
+    MTN: "mtn"
+  };
+  const PAYMENT_PROVIDER = { PAYSTACK: "paystack" };
+  const SOURCE_KIND = { CART: "cart" };
+  const AUTHORIZATION = { OTP: "otp" };
+  const EXACT_ZERO_MONEY = /^[+-]?0+(?:\\.0+)?(?:[eE][+-]?\\d+)?$/;
+  const qs = new URLSearchParams(location.search);
+  const AUTO = qs.get("auto") === "true";
+  const DEMO_OTP = qs.get("otp") || "123456";
+  const ORIGIN = qs.get("origin") || "*";
+  const NONCE = qs.get("nonce");
+  const state = {
     businessId: DEFAULT_BUSINESS,
     token: null,
     cart: null,
@@ -4040,15 +4574,33 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
     contact: null,
     pendingOtp: null
   };
-  var content = document.getElementById("content");
-  var title = document.getElementById("title");
+  const content = document.getElementById("content");
+  const title = document.getElementById("title");
 
   function send(msg) {
     if (NONCE) msg.nonce = NONCE;
     parent.postMessage(msg, ORIGIN);
   }
+  function isExactlyZeroMoney(value) {
+    return typeof value === "number"
+      ? Object.is(value, 0) || Object.is(value, -0)
+      : EXACT_ZERO_MONEY.test(String(value).trim());
+  }
   function reportHeight() { send({ type: MSG.HEIGHT_CHANGE, height: document.documentElement.scrollHeight }); }
   function ready() { send({ type: MSG.READY, height: document.documentElement.scrollHeight }); }
+  function responseWithBody(response) {
+    return response.json().then(function (body) {
+      return { status: response.status, body: body };
+    });
+  }
+  function assertSuccessfulResponse(response, fallbackMessage) {
+    if (response.status >= 400) {
+      throw new Error(
+        (response.body && response.body.error && response.body.error.message) || fallbackMessage
+      );
+    }
+    return response.body;
+  }
 
   function defaultAddress() {
     return {
@@ -4058,9 +4610,20 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
     };
   }
   function defaultPayment(type) {
-    if (type === "card") return { type: "card", provider: "paystack", last_four: "4242", label: "Visa \u2022\u2022\u2022\u2022 4242" };
-    if (type === "cash") return { type: "cash", label: "Cash on delivery" };
-    return { type: "mobile_money", provider: "mtn", phone_number: "+233244000000", label: "MTN Mobile Money" };
+    if (type === TENDER.CARD) {
+      return {
+        type: TENDER.CARD,
+        provider: PAYMENT_PROVIDER.PAYSTACK,
+        last_four: "4242",
+        label: "Visa \u2022\u2022\u2022\u2022 4242"
+      };
+    }
+    return {
+      type: TENDER.MOBILE_MONEY,
+      provider: TENDER.MTN,
+      phone_number: "+233244000000",
+      label: "MTN Mobile Money"
+    };
   }
 
   function renderAuth() {
@@ -4085,12 +4648,12 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
       '  <div class="option" data-key="lagos">5 Allen Ave, Ikeja, Lagos</div>' +
       '</div>' +
       '<button id="confirm">Use this address</button>';
-    var options = {
+    const options = {
       "default": defaultAddress(),
       "east-legon": { street_address: "8 Ring Road", city: "Accra", region: "Greater Accra", country: "GH", latitude: 5.65, longitude: -0.16 },
       "lagos": { street_address: "5 Allen Avenue", city: "Lagos", region: "Lagos", country: "NG", latitude: 6.5244, longitude: 3.3792 }
     };
-    var picked = "default";
+    let picked = "default";
     Array.prototype.forEach.call(document.querySelectorAll(".option"), function (el) {
       el.onclick = function () {
         picked = el.getAttribute("data-key");
@@ -4113,10 +4676,9 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
       '<div class="options" id="pay-options">' +
       '  <div class="option selected" data-method="mobile_money">\u{1F4F1} MTN Mobile Money</div>' +
       '  <div class="option" data-method="card">\u{1F4B3} Card (Paystack)</div>' +
-      '  <div class="option" data-method="cash">\u{1F4B5} Cash on delivery</div>' +
       '</div>' +
       '<button id="confirm">Use this method</button>';
-    var picked = "mobile_money";
+    let picked = TENDER.MOBILE_MONEY;
     Array.prototype.forEach.call(document.querySelectorAll(".option"), function (el) {
       el.onclick = function () {
         picked = el.getAttribute("data-method");
@@ -4160,7 +4722,6 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
       '</div>' +
       '<label>Payment method</label>' +
       '<select id="pay-method">' +
-      '  <option value="cash">Cash</option>' +
       '  <option value="mobile_money">Mobile Money (MTN)</option>' +
       '  <option value="card">Card (Paystack)</option>' +
       '</select>' +
@@ -4177,65 +4738,139 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
   }
 
   function runCheckout() {
-    var statusEl = document.getElementById("status");
-    var errEl = document.getElementById("err");
-    var resultEl = document.getElementById("result");
+    const statusEl = document.getElementById("status");
+    const errEl = document.getElementById("err");
+    const resultEl = document.getElementById("result");
     if (errEl) errEl.textContent = "";
     if (!state.cart) { errEl.textContent = "No cart provided"; return; }
-    var customer = {
+    const customer = {
       name: document.getElementById("cust-name").value.trim() || "Customer",
       email: document.getElementById("cust-email").value.trim() || "noemail@example.com",
       phone: document.getElementById("cust-phone").value.trim() || "+233000000000",
       save_details: false
     };
-    var paymentMethod = document.getElementById("pay-method").value;
-    var orderType = document.getElementById("order-type").value;
+    const paymentMethod = document.getElementById("pay-method").value;
+    const orderType = document.getElementById("order-type").value;
     statusEl.textContent = "Processing\u2026";
-    send({ type: MSG.CHECKOUT_STATUS, status: "processing", context: {} });
+    send({ type: MSG.CHECKOUT_STATUS, status: CHECKOUT_STATUS.PROCESSING, context: {} });
 
-    var headers = { "content-type": "application/json" };
+    const headers = { "content-type": "application/json" };
     if (state.token) headers["x-session-token"] = state.token;
 
-    fetch("/api/v1/checkout", {
+    const preference = paymentMethod === TENDER.MOBILE_MONEY
+      ? {
+          method_kind: TENDER.MOBILE_MONEY,
+          authority: {
+            authority_kind: TENDER.AUTHORITY_TRANSIENT,
+            phone_number: customer.phone,
+            network: TENDER.MTN
+          }
+        }
+      : { method_kind: TENDER.CARD };
+    const intentKey = "mock-element:" + state.cart.id;
+    fetch(PURCHASE_INTENT.PATH, {
       method: "POST",
       headers: headers,
       body: JSON.stringify({
-        cart_id: state.cart.id,
-        customer: customer,
-        order_type: orderType,
-        payment_method: paymentMethod,
-        address_info: state.address || undefined
+        client_intent_key: intentKey,
+        source: { kind: SOURCE_KIND.CART, cart_id: state.cart.id },
+        checkout: {
+          customer: customer,
+          order_type: orderType,
+          address_info: state.address || {},
+          tender_preference: preference
+        }
       })
     })
-      .then(function (r) { return r.json().then(function (b) { return { status: r.status, body: b }; }); })
+      .then(responseWithBody)
       .then(function (resp) {
-        if (resp.status >= 400) {
-          var msg = (resp.body && resp.body.error && resp.body.error.message) || "Checkout failed";
-          send({ type: MSG.CHECKOUT_COMPLETE, success: false, error: { code: (resp.body.error && resp.body.error.code) || "CHECKOUT_FAILED", message: msg, recoverable: true } });
-          statusEl.textContent = "Failed";
-          errEl.textContent = msg;
-          return;
+        const intent = assertSuccessfulResponse(resp, "Intent creation failed");
+        const terms = intent.current_terms;
+        const option = terms && terms.payment_options && terms.payment_options.filter(function (candidate) {
+          return candidate.status === PURCHASE_INTENT.ELIGIBLE && candidate.method_kind === preference.method_kind;
+        })[0];
+        if (!terms || (!option && !isExactlyZeroMoney(terms.money.rail_amount))) {
+          throw new Error("No eligible payment option");
+        }
+        const confirmationPath = PURCHASE_INTENT.PATH + "/" + encodeURIComponent(intent.id) + "/confirm";
+        const confirmationBody = JSON.stringify({
+          accepted_intent_revision: terms.intent_revision,
+          accepted_terms_version: terms.terms_version,
+          accepted_due_now: terms.money.due_now,
+          accepted_customer_debit_amount: option
+            ? option.customer_debit_amount
+            : terms.money.rail_amount,
+          currency: terms.money.currency,
+          payment_option_id: option ? option.id : null,
+          idempotency_key: "mock-confirm:" + intent.id
+        });
+        function confirmIntent() {
+          return fetch(confirmationPath, {
+            method: "POST",
+            headers: headers,
+            body: confirmationBody
+          })
+            .then(responseWithBody)
+            .then(function (response) {
+              return assertSuccessfulResponse(response, "Intent confirmation failed");
+            });
+        }
+
+        return confirmIntent().then(function (outcome) {
+          // This mock has no external provider window. Replaying the exact
+          // idempotent confirmation models the provider-approved callback.
+          return outcome.status === PURCHASE_INTENT.CARD_POPUP_REQUIRED
+            ? confirmIntent()
+            : outcome;
+        });
+      })
+      .then(function (outcome) {
+        if (outcome.status !== PURCHASE_INTENT.AUTHORIZATION_REQUIRED) return outcome;
+        return fetch(
+          PURCHASE_INTENT.PATH + "/" + encodeURIComponent(outcome.intent_id) +
+            "/attempts/" + encodeURIComponent(outcome.attempt_id) + "/actions",
+          {
+            method: "POST",
+            headers: headers,
+            body: JSON.stringify({ authorization: { type: AUTHORIZATION.OTP, value: DEMO_OTP } })
+          }
+        )
+          .then(responseWithBody)
+          .then(function (response) {
+            return assertSuccessfulResponse(response, "Authorization failed");
+          });
+      })
+      .then(function (outcome) {
+        if (outcome.status !== PURCHASE_INTENT.ORDER_CREATED) {
+          throw new Error("Checkout requires " + outcome.status.replace(/_/g, " "));
         }
-        var b = resp.body;
-        send({ type: MSG.CHECKOUT_STATUS, status: "success", context: { order_id: b.order_id, order_number: b.order_number, provider: b.provider } });
+        send({
+          type: MSG.CHECKOUT_STATUS,
+          status: CHECKOUT_STATUS.SUCCESS,
+          context: { order_id: outcome.order_id }
+        });
         send({
           type: MSG.CHECKOUT_COMPLETE,
           success: true,
           order: {
-            id: b.order_id,
-            order_number: b.order_number,
-            status: b.requires_authorization ? "pending" : "confirmed",
+            id: outcome.order_id,
+            order_number: outcome.order_number || outcome.order_id,
+            status: ORDER_STATUS.CONFIRMED,
             total: (state.cart && state.cart.total_price) || "0.00",
             currency: (state.cart && state.cart.currency) || "GHS"
           }
         });
-        statusEl.textContent = "Success \u2014 order " + b.order_number;
+        statusEl.textContent = "Success \u2014 order " + outcome.order_id;
         resultEl.style.display = "block";
-        resultEl.textContent = JSON.stringify(b, null, 2);
+        resultEl.textContent = JSON.stringify(outcome, null, 2);
       })
       .catch(function (e) {
-        send({ type: MSG.CHECKOUT_COMPLETE, success: false, error: { code: "NETWORK", message: String(e), recoverable: true } });
-        statusEl.textContent = "Network error";
+        send({
+          type: MSG.CHECKOUT_COMPLETE,
+          success: false,
+          error: { code: CHECKOUT_ERROR.FAILED, message: String(e), recoverable: true }
+        });
+        statusEl.textContent = "Failed";
         errEl.textContent = String(e);
       });
   }
@@ -4252,7 +4887,7 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
         break;
       case MSG.SET_CART:
         state.cart = msg.cart;
-        var s = document.getElementById("status");
+        const s = document.getElementById("status");
         if (s) s.textContent = "Cart loaded \u2014 " + (msg.cart && msg.cart.items ? msg.cart.items.length : 0) + " item(s), " + ((msg.cart && msg.cart.currency) || "GHS") + " " + ((msg.cart && msg.cart.total_price) || "0.00");
         reportHeight();
         break;
@@ -4276,7 +4911,7 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
         }
         break;
       case MSG.ABORT_CHECKOUT:
-        send({ type: MSG.CHECKOUT_STATUS, status: "failed", context: {} });
+        send({ type: MSG.CHECKOUT_STATUS, status: CHECKOUT_STATUS.FAILED, context: {} });
         break;
     }
   }
@@ -4347,9 +4982,10 @@ function buildLink(deps) {
   app.post("/auth/request-otp", async (c) => {
     const body = await c.req.json().catch(() => ({}));
     return tryRoute(c, () => {
-      deps.auth.requestOtp(body.contact ?? "");
+      const challenge = deps.auth.requestOtp(body.contact ?? "");
       return {
         success: true,
+        challenge_id: challenge.otp_id,
         message: `OTP sent to ${body.contact ?? "contact"}`,
         expires_in: 300,
         is_new_account: false
@@ -4359,7 +4995,11 @@ function buildLink(deps) {
   app.post("/auth/verify-otp", async (c) => {
     const body = await c.req.json().catch(() => ({}));
     return tryRoute(c, () => {
-      const session = deps.auth.verifyOtp(body.contact ?? "", body.otp_code ?? "");
+      const session = deps.auth.verifyOtp(
+        body.contact ?? "",
+        body.otp_code ?? "",
+        body.challenge_id
+      );
       c.header("x-session-token", session.token);
       const customer = deps.link.ensureCustomer(session.customer_id ?? session.id, {
         email: body.contact?.includes("@") ? body.contact : void 0,
@@ -4453,10 +5093,7 @@ function buildLink(deps) {
       };
     });
   });
-  app.get(
-    "/preferences",
-    (c) => tryRoute(c, () => deps.link.getPreferences(customerId(c)))
-  );
+  app.get("/preferences", (c) => tryRoute(c, () => deps.link.getPreferences(customerId(c))));
   app.post("/preferences", async (c) => {
     const body = await c.req.json().catch(() => ({}));
     return tryRoute(c, () => {
@@ -4888,6 +5525,7 @@ function createAuthService(opts) {
       token: id,
       business_id: options.defaultBusinessId,
       is_authenticated: authenticated,
+      account_id: authenticated ? ids.raw("account") : void 0,
       customer_id: authenticated ? ids.customer() : void 0,
       customer_name: profile?.name,
       customer_email: profile?.email,
@@ -4933,9 +5571,16 @@ function createAuthService(opts) {
         code_hint: options.mode === "permissive" ? code : void 0
       };
     },
-    verifyOtp(contact, code) {
-      const matching = registry.otps.list((o) => o.contact === contact);
-      const otp = matching[matching.length - 1];
+    verifyOtp(contact, code, challengeId) {
+      let otp = challengeId ? registry.otps.get(challengeId) : void 0;
+      if (!challengeId) {
+        const matching = registry.otps.list((o) => o.contact === contact);
+        otp = matching[matching.length - 1];
+      }
+      if (challengeId) {
+        if (!otp) throw new Error("No OTP challenge found");
+        if (otp.contact !== contact) throw new Error("OTP challenge does not match contact");
+      }
       if (options.mode === "strict") {
         if (!otp) throw new Error("No OTP requested");
         if (otp.code !== code && code !== options.defaultOtp) throw new Error("Invalid OTP");
@@ -4963,7 +5608,7 @@ function createAuthService(opts) {
       if (!s) return { is_authenticated: false, user_type: "guest" };
       return {
         is_authenticated: s.is_authenticated,
-        account_id: s.customer_id,
+        account_id: s.account_id,
         user_type: s.is_authenticated ? "customer" : "guest",
         session_expires_at: s.expires_at ? Math.floor(new Date(s.expires_at).getTime() / 1e3) : void 0,
         session: s
@@ -6261,88 +6906,10 @@ function createCartService(opts) {
   };
 }
 
-// src/mock/domain/checkout.ts
-function createCheckoutService(opts) {
-  const { registry, clock, ids, bus} = opts;
+// src/mock/domain/payment.ts
+function createPaymentService(options) {
+  const { registry, clock, bus } = options;
   return {
-    process(session, body) {
-      if (!body.cart_id) throw validation("cart_id required");
-      const c = registry.carts.get(body.cart_id);
-      if (!c) throw notFound(`Cart ${body.cart_id} not found`);
-      if (c.items.length === 0) throw validation("Cart is empty", { code: "CART_EMPTY" });
-      const orderId = ids.order();
-      const orderNumber = ids.orderNumber();
-      const paymentId = ids.payment();
-      const reference = ids.payment();
-      const requiresAuth = body.payment_method === "mobile_money";
-      const isCard = body.payment_method === "card" || body.payment_method === "stripe";
-      const cardProvider = body.payment_method === "stripe" || body.pay_currency?.toUpperCase() === "USD" ? "stripe" : "paystack";
-      const order = {
-        id: orderId,
-        business_id: c.business_id,
-        user_friendly_id: orderNumber,
-        channel: c.channel,
-        status: requiresAuth ? "pending" : "confirmed",
-        payment_state: requiresAuth ? "not_paid" : "paid",
-        order_type: body.order_type,
-        customer_id: session.customer_id,
-        customer_name: body.customer.name,
-        customer_email: body.customer.email,
-        customer_phone: body.customer.phone,
-        delivery_address: body.address_info?.street_address,
-        delivery_fee: c.delivery_fee,
-        subtotal: c.subtotal,
-        tax_amount: c.tax_amount,
-        service_charge: c.service_charge,
-        total_discounts: c.total_discounts,
-        total_price: c.total_price,
-        currency: c.currency,
-        items: c.items,
-        applied_discount_ids: c.applied_discount_ids,
-        applied_discount_codes: c.applied_discount_codes,
-        payment_id: paymentId,
-        payment_reference: reference,
-        metadata: body.metadata,
-        created_at: clock.iso(),
-        updated_at: clock.iso()
-      };
-      registry.orders.put(orderId, order);
-      registry.carts.put(c.id, { ...c, status: "converted", updated_at: clock.iso() });
-      bus.emit("order.created", { order_id: orderId, order_number: orderNumber }, c.business_id);
-      if (!requiresAuth) {
-        bus.emit("order.payment.captured", { order_id: orderId, reference }, c.business_id);
-        bus.emit("order.confirmed", { order_id: orderId }, c.business_id);
-      }
-      const billToken = `bt_${reference.slice(-12)}_${Math.random().toString(36).slice(2, 10)}`;
-      const result = {
-        order_id: orderId,
-        order_number: orderNumber,
-        payment_id: paymentId,
-        payment_status: requiresAuth || isCard ? "pending" : "succeeded",
-        payment_reference: reference,
-        requires_authorization: requiresAuth,
-        authorization_type: requiresAuth ? "otp" : void 0,
-        next_action: requiresAuth ? {
-          type: "authorization",
-          authorization_type: "otp",
-          display_text: "Approve on your mobile money app"
-        } : { type: "none" },
-        provider: isCard ? cardProvider : body.payment_method,
-        bill_token: billToken
-      };
-      if (isCard) {
-        const proc = globalThis.process;
-        result.client_secret = cardProvider === "stripe" ? `pi_${orderId.slice(-12)}_secret_${Math.random().toString(36).slice(2, 18)}` : `access_${reference}`;
-        result.public_key = cardProvider === "stripe" ? proc?.env?.NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY ?? "pk_test_mock_stripe" : proc?.env?.NEXT_PUBLIC_PAYSTACK_PUBLIC_KEY ?? "pk_test_mock_paystack";
-        result.next_action = {
-          type: "card_popup",
-          provider: cardProvider,
-          client_secret: result.client_secret,
-          public_key: result.public_key
-        };
-      }
-      return result;
-    },
     authorize(body) {
       if (!body.payment_id?.trim()) throw validation("payment_id required");
       if (!body.authorization) throw validation("authorization required");
@@ -6353,7 +6920,7 @@ function createCheckoutService(opts) {
       const updated = {
         ...order,
         payment_state: "paid",
-        status: "confirmed",
+        status: CHECKOUT_ORDER_RESULT_STATUS.CONFIRMED,
         updated_at: clock.iso()
       };
       registry.orders.put(order.id, updated);
@@ -6364,14 +6931,542 @@ function createCheckoutService(opts) {
         order_number: order.user_friendly_id,
         payment_id: body.payment_id,
         payment_reference: order.payment_reference,
-        payment_status: "succeeded",
+        payment_status: LEGACY_CHECKOUT_PAYMENT_STATUS.SUCCEEDED,
         requires_authorization: false,
-        next_action: { type: "none" }
+        next_action: { type: CHECKOUT_NEXT_ACTION.NONE }
       };
     }
   };
 }
 
+// src/mock/domain/purchase-intent.ts
+var INTENT_LIFETIME_MS = 15 * 60 * 1e3;
+var ZERO_MONEY = "0.00";
+var PURCHASE_INTENT_MOBILE_MONEY_NETWORKS = new Set(
+  Object.values(PURCHASE_INTENT_MOBILE_MONEY_NETWORK)
+);
+var MOCK_PURCHASE_INTENT = {
+  OWNER_KIND: { ACCOUNT: "account", STOREFRONT_SESSION: "storefront_session" },
+  CART_STATUS: { ACTIVE: "active", CONVERTED: "converted" },
+  ORDER_STATUS: { PENDING: "pending", CONFIRMED: "confirmed" },
+  PAYMENT_STATE: { NOT_PAID: "not_paid", PAID: "paid" },
+  EVENT: {
+    ORDER_CREATED: "order.created",
+    PAYMENT_CAPTURED: "order.payment.captured",
+    ORDER_CONFIRMED: "order.confirmed"
+  },
+  ID_PREFIX: { INTENT: "pi", ATTEMPT: "attempt" },
+  DEFAULT_LOCATION_ID: "mock-location",
+  MOCK_PAYSTACK_PUBLIC_KEY: "pk_test_mock_paystack",
+  COMPLIANCE: {
+    POLICY_NAME: "mock-storefront-commerce"
+  }
+};
+var DECIMAL_WIRE_VALUE = /^([+-]?)(\d+)(?:\.(\d+))?(?:[eE]([+-]?\d+))?$/;
+function isExactlyZero(value) {
+  if (typeof value === "number") return Object.is(value, 0) || Object.is(value, -0);
+  const match2 = DECIMAL_WIRE_VALUE.exec(value.trim());
+  return Boolean(match2 && [...match2[2], ...match2[3] ?? ""].every((digit) => digit === "0"));
+}
+function sameDecimal(left, right) {
+  const canonical = (value) => {
+    const wire = typeof value === "number" ? String(value) : value.trim();
+    const match2 = DECIMAL_WIRE_VALUE.exec(wire);
+    if (!match2) return null;
+    let digits = `${match2[2]}${match2[3] ?? ""}`.replace(/^0+/, "");
+    if (!digits) return "0";
+    let scale = BigInt((match2[3] ?? "").length) - BigInt(match2[4] ?? "0");
+    while (digits.endsWith("0")) {
+      digits = digits.slice(0, -1);
+      scale -= 1n;
+    }
+    const sign = match2[1] === "-" ? "-" : "";
+    return `${sign}${digits}:${scale}`;
+  };
+  const normalizedLeft = canonical(left);
+  return normalizedLeft !== null && normalizedLeft === canonical(right);
+}
+function wireMoney(value) {
+  return typeof value === "string" ? value.trim() : String(value);
+}
+function decimal(value) {
+  return wireMoney(value.toFixed(2));
+}
+function paymentOptions(intentId, currency, amount, expiresAt) {
+  const normalizedCurrency = currencyCode(currency);
+  const normalizedAmount = wireMoney(amount);
+  return [
+    {
+      id: `${intentId}:${PURCHASE_INTENT_PAYMENT_METHOD.CARD}`,
+      rank: 0,
+      method_kind: PURCHASE_INTENT_PAYMENT_METHOD.CARD,
+      collection_mode: PAYMENT_COLLECTION_MODE.CREDENTIAL_CHARGE,
+      provider: PURCHASE_INTENT_PAYMENT_PROVIDER.PAYSTACK,
+      principal_amount: normalizedAmount,
+      fee_amount: wireMoney(ZERO_MONEY),
+      customer_debit_amount: normalizedAmount,
+      currency: normalizedCurrency,
+      status: PAYMENT_OPTION_STATUS.ELIGIBLE,
+      expected_next_action: PAYMENT_OPTION_NEXT_ACTION.PROVIDER_APPROVAL,
+      expires_at: expiresAt
+    },
+    {
+      id: `${intentId}:${PURCHASE_INTENT_PAYMENT_METHOD.MOBILE_MONEY}`,
+      rank: 1,
+      method_kind: PURCHASE_INTENT_PAYMENT_METHOD.MOBILE_MONEY,
+      collection_mode: PAYMENT_COLLECTION_MODE.REQUEST_TO_PAY,
+      provider: PURCHASE_INTENT_PAYMENT_PROVIDER.PAYSTACK,
+      principal_amount: normalizedAmount,
+      fee_amount: wireMoney(ZERO_MONEY),
+      customer_debit_amount: normalizedAmount,
+      currency: normalizedCurrency,
+      status: PAYMENT_OPTION_STATUS.ELIGIBLE,
+      expected_next_action: PAYMENT_OPTION_NEXT_ACTION.PROVIDER_APPROVAL,
+      expires_at: expiresAt
+    }
+  ];
+}
+function termsForCart(input) {
+  const total = wireMoney(input.total);
+  return {
+    id: `${input.intentId}:terms:${input.version}`,
+    intent_revision: input.revision,
+    terms_version: input.version,
+    terms_digest: `mock:${input.intentId}:${input.revision}:${input.version}`,
+    money: {
+      currency: currencyCode(input.currency),
+      subtotal: wireMoney(input.subtotal),
+      discount_total: wireMoney(input.discount),
+      tax_total: wireMoney(input.tax),
+      delivery_total: wireMoney(input.delivery),
+      statutory_total: wireMoney(ZERO_MONEY),
+      total_obligation: total,
+      due_now: total,
+      rail_amount: total,
+      store_credit_consumed: wireMoney(ZERO_MONEY),
+      voucher_credit_consumed: wireMoney(ZERO_MONEY)
+    },
+    material: {
+      line_digest: `mock-lines:${input.intentId}`,
+      destination_digest: `mock-destination:${input.intentId}`,
+      delivery_promise_digest: `mock-delivery:${input.intentId}`,
+      entitlement_digest: `mock-entitlement:${input.intentId}`,
+      cancellation_terms_digest: `mock-cancellation:${input.intentId}`
+    },
+    compliance: {
+      policy_name: MOCK_PURCHASE_INTENT.COMPLIANCE.POLICY_NAME,
+      policy_version: 1,
+      lane: CHECKOUT_COMPLIANCE_LANE.NATIVE,
+      reason_code: CHECKOUT_COMPLIANCE_REASON.PHYSICAL_GOODS_NATIVE,
+      evidence_digest: `mock-compliance:${input.intentId}`
+    },
+    payment_options: isExactlyZero(input.total) ? [] : paymentOptions(input.intentId, input.currency, input.total, input.validUntil),
+    valid_until: input.validUntil,
+    created_at: input.now
+  };
+}
+function intentView(intent) {
+  const {
+    intent_owner: _owner,
+    mint_request: _request,
+    last_confirmation: _confirmation,
+    ...view
+  } = intent;
+  return view;
+}
+function purchasingPrincipal(session) {
+  if (!session.is_authenticated) {
+    return { kind: PURCHASING_PRINCIPAL_KIND.GUEST };
+  }
+  if (!session.account_id) throw validation("Authenticated mock session has no account authority");
+  return {
+    kind: PURCHASING_PRINCIPAL_KIND.ACCOUNT,
+    account_id: session.account_id
+  };
+}
+function assertSupportedTenderPreference(request) {
+  if (request.source.kind !== PURCHASE_INTENT_SOURCE_KIND.CART) return;
+  const checkout = request.checkout;
+  if (!checkout) throw validation("Cart checkout input is required");
+  const preference = checkout.tender_preference;
+  if (preference?.method_kind !== PURCHASE_INTENT_PAYMENT_METHOD.MOBILE_MONEY || preference.authority.authority_kind !== MOBILE_MONEY_TENDER_AUTHORITY_KIND.TRANSIENT) {
+    return;
+  }
+  if (!PURCHASE_INTENT_MOBILE_MONEY_NETWORKS.has(preference.authority.network)) {
+    throw validation("Mobile Money network is not available for PurchaseIntent checkout");
+  }
+}
+function intentOwner(session) {
+  if (!session.is_authenticated) {
+    return { kind: MOCK_PURCHASE_INTENT.OWNER_KIND.STOREFRONT_SESSION, id: session.id };
+  }
+  if (!session.account_id) throw validation("Authenticated mock session has no account authority");
+  return { kind: MOCK_PURCHASE_INTENT.OWNER_KIND.ACCOUNT, id: session.account_id };
+}
+function createPurchaseIntentMockService(options) {
+  const { registry, clock, ids, bus } = options;
+  function stored(session, intentId) {
+    const intent = registry.purchaseIntents.get(intentId);
+    if (!intent) throw notFound(`Purchase intent ${intentId} not found`);
+    const owner = intentOwner(session);
+    if (intent.intent_owner.kind !== owner.kind || intent.intent_owner.id !== owner.id) {
+      throw notFound(`Purchase intent ${intentId} not found`);
+    }
+    return intent;
+  }
+  function completeProviderOrder(intent, order, attemptId) {
+    const updated = {
+      ...order,
+      payment_state: MOCK_PURCHASE_INTENT.PAYMENT_STATE.PAID,
+      status: MOCK_PURCHASE_INTENT.ORDER_STATUS.CONFIRMED,
+      updated_at: clock.iso()
+    };
+    registry.orders.put(order.id, updated);
+    bus.emit(
+      MOCK_PURCHASE_INTENT.EVENT.PAYMENT_CAPTURED,
+      { order_id: order.id, reference: order.payment_reference },
+      order.business_id
+    );
+    bus.emit(MOCK_PURCHASE_INTENT.EVENT.ORDER_CONFIRMED, { order_id: order.id }, order.business_id);
+    const completed = {
+      status: PURCHASE_INTENT_CONFIRM_STATUS.ORDER_CREATED,
+      intent_id: intent.id,
+      attempt_id: attemptId,
+      order_id: order.id,
+      order_number: order.user_friendly_id,
+      payment_id: order.payment_id
+    };
+    registry.purchaseIntents.put(intent.id, {
+      ...intent,
+      updated_at: clock.iso(),
+      last_confirmation: completed
+    });
+    return completed;
+  }
+  return {
+    mint(session, request) {
+      if (!request.client_intent_key.trim()) throw validation("client_intent_key required");
+      if (request.source.kind !== PURCHASE_INTENT_SOURCE_KIND.CART) {
+        throw validation("The mock currently prepares cart purchase intents only");
+      }
+      const checkoutInput = request.checkout;
+      if (!checkoutInput) throw validation("Cart checkout input is required");
+      assertSupportedTenderPreference(request);
+      const cart = registry.carts.get(request.source.cart_id);
+      if (!cart) throw notFound(`Cart ${request.source.cart_id} not found`);
+      if (cart.items.length === 0) {
+        throw validation("Cart is empty", { code: ErrorCode.CART_EMPTY });
+      }
+      const principal = purchasingPrincipal(session);
+      const owner = intentOwner(session);
+      const existing = registry.purchaseIntents.list(
+        (candidate) => candidate.mint_request.client_intent_key === request.client_intent_key && candidate.intent_owner.kind === owner.kind && candidate.intent_owner.id === owner.id
+      )[0];
+      if (existing) return intentView(existing);
+      const now = clock.iso();
+      const expiresAt = new Date(clock.nowMs() + INTENT_LIFETIME_MS).toISOString();
+      const intentId = ids.raw(MOCK_PURCHASE_INTENT.ID_PREFIX.INTENT);
+      const terms = termsForCart({
+        intentId,
+        revision: 1,
+        version: 1,
+        currency: cart.currency,
+        subtotal: cart.subtotal,
+        discount: cart.total_discounts,
+        tax: cart.tax_amount,
+        delivery: cart.delivery_fee,
+        total: cart.total_price,
+        now,
+        validUntil: expiresAt
+      });
+      const intent = {
+        id: intentId,
+        seller_business_id: cart.business_id,
+        principal,
+        revision: 1,
+        status: PURCHASE_INTENT_STATUS.OPEN,
+        source: {
+          kind: PURCHASE_INTENT_SOURCE_KIND.CART,
+          source_id: cart.id,
+          source_version: cart.updated_at,
+          seller_business_id: cart.business_id,
+          subject: {
+            kind: PURCHASING_PRINCIPAL_KIND.BUSINESS,
+            business_id: cart.business_id
+          },
+          binding_digest: `mock-cart:${cart.id}:${cart.updated_at}`
+        },
+        lines: cart.items.map((line, ordinal) => ({
+          id: line.id,
+          ordinal,
+          sellable: {
+            kind: line.variant_id ? PURCHASE_INTENT_SELLABLE_KIND.VARIANT : PURCHASE_INTENT_SELLABLE_KIND.PRODUCT,
+            product_id: line.item_id,
+            variant_id: line.variant_id,
+            location_id: checkoutInput.location_id || MOCK_PURCHASE_INTENT.DEFAULT_LOCATION_ID
+          },
+          quantity: line.quantity,
+          configuration: {
+            kind: PURCHASE_INTENT_LINE_CONFIGURATION_KIND.SIMPLE,
+            variant_id: line.variant_id,
+            customer_inputs: line.customer_inputs
+          }
+        })),
+        line_pricing: cart.items.map((line) => {
+          const unitPrice = Number(line.price) + Number(line.add_ons_price);
+          const lineSubtotal = unitPrice * line.quantity - Number(line.item_discount_amount);
+          return {
+            intent_line_id: line.id,
+            quantity: line.quantity,
+            unit_price: decimal(unitPrice),
+            line_subtotal: decimal(lineSubtotal),
+            currency: currencyCode(cart.currency)
+          };
+        }),
+        current_terms: terms,
+        expires_at: expiresAt,
+        created_at: now,
+        updated_at: now,
+        intent_owner: owner,
+        mint_request: request
+      };
+      registry.purchaseIntents.put(intentId, intent);
+      return intentView(intent);
+    },
+    get(session, intentId) {
+      return intentView(stored(session, intentId));
+    },
+    refresh(session, intentId, expectedRevision) {
+      const intent = stored(session, intentId);
+      if (intent.revision !== expectedRevision) {
+        throw validation("expected_intent_revision does not match current intent revision");
+      }
+      if (!intent.current_terms) throw validation("Purchase intent has no current terms");
+      const previous = intent.current_terms;
+      const nextDelivery = Number(previous.money.delivery_total) + 1;
+      const nextTotal = Number(previous.money.total_obligation) + 1;
+      const now = clock.iso();
+      const replacement = termsForCart({
+        intentId,
+        revision: intent.revision,
+        version: previous.terms_version + 1,
+        currency: previous.money.currency,
+        subtotal: String(previous.money.subtotal),
+        discount: String(previous.money.discount_total),
+        tax: String(previous.money.tax_total),
+        delivery: nextDelivery.toFixed(2),
+        total: nextTotal.toFixed(2),
+        now,
+        validUntil: intent.expires_at
+      });
+      const updated = { ...intent, current_terms: replacement, updated_at: now };
+      registry.purchaseIntents.put(intentId, updated);
+      return intentView(updated);
+    },
+    confirm(session, intentId, request) {
+      const intent = stored(session, intentId);
+      if (intent.status === PURCHASE_INTENT_STATUS.CONVERTED && intent.last_confirmation) {
+        const orderId2 = "order_id" in intent.last_confirmation ? intent.last_confirmation.order_id : void 0;
+        const order2 = orderId2 ? registry.orders.get(orderId2) : void 0;
+        if (order2?.payment_state === MOCK_PURCHASE_INTENT.PAYMENT_STATE.PAID) {
+          return {
+            status: PURCHASE_INTENT_CONFIRM_STATUS.ORDER_CREATED,
+            intent_id: intent.id,
+            attempt_id: "attempt_id" in intent.last_confirmation ? intent.last_confirmation.attempt_id : ids.raw(MOCK_PURCHASE_INTENT.ID_PREFIX.ATTEMPT),
+            order_id: order2.id
+          };
+        }
+        if (order2?.payment_id && intent.last_confirmation.status === PURCHASE_INTENT_CONFIRM_STATUS.CARD_POPUP_REQUIRED) {
+          return completeProviderOrder(intent, order2, intent.last_confirmation.attempt_id);
+        }
+        return intent.last_confirmation;
+      }
+      const terms = intent.current_terms;
+      if (!terms) throw validation("Purchase intent has no current terms");
+      const zeroRail = isExactlyZero(terms.money.rail_amount);
+      const option = request.payment_option_id ? terms.payment_options.find(
+        (candidate) => candidate.id === request.payment_option_id && candidate.status === PAYMENT_OPTION_STATUS.ELIGIBLE
+      ) : void 0;
+      const acceptedBaseTermsChanged = !sameDecimal(request.accepted_due_now, terms.money.due_now) || request.currency !== terms.money.currency;
+      if (request.accepted_intent_revision !== intent.revision || request.accepted_terms_version !== terms.terms_version || acceptedBaseTermsChanged) {
+        const deltas = acceptedBaseTermsChanged ? [
+          {
+            kind: CHECKOUT_TERMS_DELTA_KIND.MONEY,
+            component: CHECKOUT_TERMS_COMPONENT.DUE_NOW,
+            accepted: request.accepted_due_now,
+            replacement: terms.money.due_now
+          }
+        ] : [
+          {
+            kind: CHECKOUT_TERMS_DELTA_KIND.PAYMENT_OPTION,
+            accepted_option_id: request.payment_option_id ?? null,
+            accepted_customer_debit_amount: request.accepted_customer_debit_amount,
+            replacement_option_id: option?.id ?? null,
+            replacement_customer_debit_amount: option?.customer_debit_amount ?? null
+          }
+        ];
+        return {
+          status: PURCHASE_INTENT_CONFIRM_STATUS.TERMS_CHANGED,
+          intent_id: intent.id,
+          replacement: terms,
+          deltas
+        };
+      }
+      if (!zeroRail && !option || zeroRail && request.payment_option_id != null) {
+        return {
+          status: PURCHASE_INTENT_CONFIRM_STATUS.SELECTION_UNAVAILABLE,
+          intent_id: intent.id,
+          lines: intent.lines.map((line) => ({
+            line_id: line.id,
+            reason: CHECKOUT_INVALIDATION_REASON.PAYMENT_OPTION_CHANGED
+          }))
+        };
+      }
+      const acceptedCustomerDebitMatches = zeroRail ? isExactlyZero(request.accepted_customer_debit_amount) : Boolean(
+        option && sameDecimal(request.accepted_customer_debit_amount, option.customer_debit_amount)
+      );
+      if (!acceptedCustomerDebitMatches) {
+        return {
+          status: PURCHASE_INTENT_CONFIRM_STATUS.TERMS_CHANGED,
+          intent_id: intent.id,
+          replacement: terms,
+          deltas: [
+            {
+              kind: CHECKOUT_TERMS_DELTA_KIND.PAYMENT_OPTION,
+              accepted_option_id: request.payment_option_id ?? null,
+              accepted_customer_debit_amount: request.accepted_customer_debit_amount,
+              replacement_option_id: option?.id ?? null,
+              replacement_customer_debit_amount: option?.customer_debit_amount ?? null
+            }
+          ]
+        };
+      }
+      if (intent.mint_request.source.kind !== PURCHASE_INTENT_SOURCE_KIND.CART) {
+        throw validation("The mock currently confirms cart purchase intents only");
+      }
+      const checkoutInput = intent.mint_request.checkout;
+      if (!checkoutInput) throw validation("Cart checkout input is required");
+      const cart = registry.carts.get(intent.mint_request.source.cart_id);
+      if (!cart || cart.status !== MOCK_PURCHASE_INTENT.CART_STATUS.ACTIVE) {
+        return { status: PURCHASE_INTENT_CONFIRM_STATUS.SOURCE_UNAVAILABLE, intent_id: intent.id };
+      }
+      const attemptId = ids.raw(MOCK_PURCHASE_INTENT.ID_PREFIX.ATTEMPT);
+      const orderId = ids.order();
+      const orderNumber = ids.orderNumber();
+      const paymentId = zeroRail ? void 0 : ids.payment();
+      const paymentReference = zeroRail ? void 0 : ids.payment();
+      const needsProvider = option?.method_kind === PURCHASE_INTENT_PAYMENT_METHOD.CARD || option?.method_kind === PURCHASE_INTENT_PAYMENT_METHOD.MOBILE_MONEY;
+      const paid = zeroRail;
+      const order = {
+        id: orderId,
+        business_id: cart.business_id,
+        user_friendly_id: orderNumber,
+        channel: cart.channel,
+        status: paid ? MOCK_PURCHASE_INTENT.ORDER_STATUS.CONFIRMED : MOCK_PURCHASE_INTENT.ORDER_STATUS.PENDING,
+        payment_state: paid ? MOCK_PURCHASE_INTENT.PAYMENT_STATE.PAID : MOCK_PURCHASE_INTENT.PAYMENT_STATE.NOT_PAID,
+        order_type: checkoutInput.order_type,
+        customer_id: session.customer_id,
+        customer_name: checkoutInput.customer.name,
+        customer_email: checkoutInput.customer.email,
+        customer_phone: checkoutInput.customer.phone,
+        delivery_address: checkoutInput.address_info.street_address,
+        delivery_fee: cart.delivery_fee,
+        subtotal: cart.subtotal,
+        tax_amount: cart.tax_amount,
+        service_charge: cart.service_charge,
+        total_discounts: cart.total_discounts,
+        total_price: cart.total_price,
+        currency: cart.currency,
+        items: cart.items,
+        applied_discount_ids: cart.applied_discount_ids,
+        applied_discount_codes: cart.applied_discount_codes,
+        payment_id: paymentId,
+        payment_reference: paymentReference,
+        metadata: checkoutInput.metadata,
+        created_at: clock.iso(),
+        updated_at: clock.iso()
+      };
+      registry.orders.put(orderId, order);
+      registry.carts.put(cart.id, {
+        ...cart,
+        status: MOCK_PURCHASE_INTENT.CART_STATUS.CONVERTED,
+        updated_at: clock.iso()
+      });
+      bus.emit(
+        MOCK_PURCHASE_INTENT.EVENT.ORDER_CREATED,
+        { order_id: orderId, order_number: orderNumber },
+        cart.business_id
+      );
+      if (paid) {
+        if (paymentReference) {
+          bus.emit(
+            MOCK_PURCHASE_INTENT.EVENT.PAYMENT_CAPTURED,
+            { order_id: orderId, reference: paymentReference },
+            cart.business_id
+          );
+        }
+        bus.emit(
+          MOCK_PURCHASE_INTENT.EVENT.ORDER_CONFIRMED,
+          { order_id: orderId },
+          cart.business_id
+        );
+      }
+      let confirmation;
+      if (option?.method_kind === PURCHASE_INTENT_PAYMENT_METHOD.MOBILE_MONEY) {
+        confirmation = {
+          status: PURCHASE_INTENT_CONFIRM_STATUS.AUTHORIZATION_REQUIRED,
+          intent_id: intent.id,
+          attempt_id: attemptId,
+          order_id: orderId,
+          authorization_type: AUTHORIZATION_TYPE.OTP,
+          display_text: "Approve on your mobile money app"
+        };
+      } else if (option?.method_kind === PURCHASE_INTENT_PAYMENT_METHOD.CARD) {
+        confirmation = {
+          status: PURCHASE_INTENT_CONFIRM_STATUS.CARD_POPUP_REQUIRED,
+          intent_id: intent.id,
+          attempt_id: attemptId,
+          order_id: orderId,
+          provider: PURCHASE_INTENT_PAYMENT_PROVIDER.PAYSTACK,
+          client_secret: `access_${paymentReference}`,
+          public_key: MOCK_PURCHASE_INTENT.MOCK_PAYSTACK_PUBLIC_KEY
+        };
+      } else {
+        confirmation = {
+          status: PURCHASE_INTENT_CONFIRM_STATUS.ORDER_CREATED,
+          intent_id: intent.id,
+          attempt_id: attemptId,
+          order_id: orderId
+        };
+      }
+      if (needsProvider && !paymentId) {
+        throw validation("Provider-backed purchase intent has no payment authority");
+      }
+      registry.purchaseIntents.put(intent.id, {
+        ...intent,
+        status: PURCHASE_INTENT_STATUS.CONVERTED,
+        converted_order_id: orderId,
+        updated_at: clock.iso(),
+        last_confirmation: confirmation
+      });
+      return confirmation;
+    },
+    submitAction(session, intentId, attemptId, request) {
+      const intent = stored(session, intentId);
+      const previous = intent.last_confirmation;
+      if (!previous || previous.status !== PURCHASE_INTENT_CONFIRM_STATUS.AUTHORIZATION_REQUIRED || previous.attempt_id !== attemptId) {
+        throw validation("Purchase-intent attempt is not awaiting authorization");
+      }
+      if (!request.authorization) throw validation("authorization required");
+      const order = registry.orders.get(previous.order_id);
+      if (!order || !order.payment_id) {
+        throw notFound(`Purchase-intent attempt ${attemptId} not found`);
+      }
+      return completeProviderOrder(intent, order, attemptId);
+    }
+  };
+}
+
 // src/mock/domain/orders.ts
 function createOrderService(opts) {
   const { registry, clock, bus } = opts;
@@ -6750,6 +7845,7 @@ function createDeliveryService() {
             rate_id: "dlvrt_mock_standard",
             name: "Standard",
             fee: standardFree ? money(0) : money(15),
+            fee_status: "priced",
             currency: "GHS",
             free_delivery_applied: standardFree,
             free_over_amount: money(200),
@@ -6763,6 +7859,7 @@ function createDeliveryService() {
             name: "Express",
             description: "Delivered within the hour",
             fee: money(25),
+            fee_status: "priced",
             currency: "GHS",
             free_delivery_applied: false,
             eta_min_minutes: 30,
@@ -11681,7 +12778,7 @@ var ID_PREFIX = {
   product: "prod_",
   service: "svc_"
 };
-var DEFAULT_CURRENCY = "GHS";
+var DEFAULT_CURRENCY2 = "GHS";
 function slugify(value) {
   return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
 }
@@ -11716,7 +12813,7 @@ function makeSeedContext(registry) {
       const business = {
         business_type: "other",
         email: `hello@${handle}.test`,
-        default_currency: DEFAULT_CURRENCY,
+        default_currency: DEFAULT_CURRENCY2,
         default_offers_table_service: false,
         default_accepts_online_orders: true,
         status: "active",
@@ -11895,7 +12992,8 @@ function createDeps(options = {}) {
   const inventory = createInventoryService({ registry });
   const cart = createCartService({ registry, clock, ids, bus, inventory });
   const orders = createOrderService({ registry, clock, bus });
-  const checkout = createCheckoutService({ registry, clock, ids, bus});
+  const payments = createPaymentService({ registry, clock, bus });
+  const purchaseIntents = createPurchaseIntentMockService({ registry, clock, ids, bus });
   const subscriptions = createSubscriptionService({ registry, clock, bus });
   const scheduling = createSchedulingService({ registry, clock, bus });
   const fx = createFxService({ registry, clock, ids });
@@ -11916,7 +13014,8 @@ function createDeps(options = {}) {
     business,
     catalogue,
     cart,
-    checkout,
+    payments,
+    purchaseIntents,
     orders,
     subscriptions,
     scheduling,