@devlab.group/agent-commerce 1.4.1 → 1.5.0

package/dist/constants-6mypC60h.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The one MPP profile this rail targets.
+ *
+ * MPP combines a core HTTP authentication layer, an intent, a method and
+ * optional extensions. These constants identify the selected combination and
+ * the exact specification revision.
+ *
+ * Importing this metadata does not load `mppx`.
+ */
+/** Upstream specification repository the pinned drafts were read from */
+declare const MPP_SPEC_REPOSITORY = "https://github.com/tempoxyz/mpp-specs";
+/**
+ * Upstream commit the pinned drafts were read at.
+ *
+ * A draft's content can change without its `-00` name changing, so the name
+ * alone does not identify a document; the commit does.
+ */
+declare const MPP_SPEC_COMMIT = "806fdb8b8c92cda5c84b8660558921b6bbeef7e0";
+/** The core HTTP authentication draft, the `charge` intent, and its EVM method */
+declare const MPP_SPEC_DRAFTS: {
+    readonly core: "draft-httpauth-payment-00";
+    readonly intent: "draft-payment-intent-charge-00";
+    readonly method: "draft-evm-charge-00";
+};
+/** Exact `mppx` release the rail is pinned to */
+declare const MPPX_VERSION = "0.10.1";
+/**
+ * The pinned profile.
+ *
+ * `intent`, `method` and `credentialType` copy MPP wire identifiers from
+ * `mppx` so this module has no peer import; tests detect drift. `assetSymbol`
+ * is the pricing currency an MPP resource must use. EVM charge requests carry a
+ * numeric `chainId` and token address instead.
+ */
+declare const MPP_PROFILE: {
+    readonly intent: "charge";
+    readonly method: "evm";
+    readonly credentialType: "authorization";
+    readonly assetSymbol: "USDC";
+    readonly assetDecimals: 6;
+};
+/** Supported CAIP-2 networks; gateway config applies the x402 mainnet guardrails */
+declare const MPP_NETWORKS: readonly ["eip155:84532", "eip155:8453"];
+type MppNetwork = (typeof MPP_NETWORKS)[number];
+/**
+ * Compact descriptor value naming the core draft, intent and method
+ */
+declare const MPP_SUPPORTED_SPEC: string;
+
+export { type MppNetwork as M, MPPX_VERSION as a, MPP_PROFILE as b, MPP_SPEC_COMMIT as c, MPP_SPEC_DRAFTS as d, MPP_SPEC_REPOSITORY as e, MPP_SUPPORTED_SPEC as f };

package/dist/index.d.ts

@@ -1,11 +1,12 @@
 import { f as Ap2AuthorizationConfig } from './types-CJtwLu1c.js';
-import { I as IsoTimestamp, D as DecimalAmount, P as PaymentMethodName, a as CommerceResource, b as PaymentSubmission, B as BackendHandler, A as AdapterDescriptor, c as AdapterHealth, R as ResourceRegistry, d as PaymentProvider, L as Logger, C as Clock, e as IdGenerator } from './runtime-CKq3d_3K.js';
-export { f as AuthorizationMethodName, g as BackendMethod, h as DEFAULT_BACKEND_TIMEOUT_MS, J as JsonSchema, N as NOOP_LOGGER, i as PROTOCOL_NAMES, j as PaymentChallenge, k as PaymentContext, l as PaymentRequirement, m as PaymentResult, n as PaymentSettlementContext, o as PaymentVerificationContext, p as Pricing, q as ProtocolName, s as systemClock } from './runtime-CKq3d_3K.js';
+import { I as IsoTimestamp, D as DecimalAmount, P as PaymentMethodName, a as CommerceResource, b as PaymentSubmission, B as BackendHandler, A as AdapterDescriptor, c as AdapterHealth, R as ResourceRegistry, d as PaymentProvider, L as Logger, C as Clock, e as IdGenerator } from './runtime-DC5XQ9Cc.js';
+export { f as AuthorizationMethodName, g as BackendMethod, h as DEFAULT_BACKEND_TIMEOUT_MS, J as JsonSchema, N as NOOP_LOGGER, i as PAYMENT_METHOD_NAMES, j as PROTOCOL_NAMES, k as PaymentChallenge, l as PaymentContext, m as PaymentRequirement, n as PaymentResult, o as PaymentSettlementContext, p as PaymentVerificationContext, q as Pricing, r as ProtocolName, s as systemClock } from './runtime-DC5XQ9Cc.js';
+import { M as MppNetwork } from './constants-6mypC60h.js';
 import { X as X402FacilitatorConfig } from './guardrails-Dmwi63KB.js';
-import { a as AuthorizationRequirement, b as AuthorizationSubmission, A as AuthorizationProvider } from './authorization-CPDcpJVa.js';
-export { c as AuthorizationFinalizeContext, d as AuthorizationRecord, e as AuthorizationVerification, f as AuthorizationVerificationContext } from './authorization-CPDcpJVa.js';
-import { D as DeliveredOutcome, P as PaymentRequiredOutcome, C as CommerceEvent, a as PaymentAttempt, b as CommerceReceipt, E as ExecutionPipeline, c as ProtocolAdapter, H as HttpProtocolAdapter, A as AdapterHttpRoute, d as ProtocolAdapterContext } from './protocol-adapter-Bebmggf_.js';
-export { e as COMMERCE_EVENT_TYPES, f as CanonicalRequest, g as CommerceEventType, h as EventSink, i as ExecutionOutcome, j as isHttpProtocolAdapter } from './protocol-adapter-Bebmggf_.js';
+import { a as AuthorizationRequirement, b as AuthorizationSubmission, A as AuthorizationProvider } from './authorization-DA7mjy_O.js';
+export { c as AuthorizationFinalizeContext, d as AuthorizationRecord, e as AuthorizationVerification, f as AuthorizationVerificationContext } from './authorization-DA7mjy_O.js';
+import { D as DeliveredOutcome, P as PaymentRequiredOutcome, C as CommerceEvent, a as PaymentAttempt, b as CommerceReceipt, E as ExecutionPipeline, c as ProtocolAdapter, H as HttpProtocolAdapter, A as AdapterHttpRoute, d as ProtocolAdapterContext } from './protocol-adapter-APRjs1E2.js';
+export { e as COMMERCE_EVENT_TYPES, f as CanonicalRequest, g as CommerceEventType, h as EventSink, i as ExecutionOutcome, j as isHttpProtocolAdapter } from './protocol-adapter-APRjs1E2.js';
 import { FastifyInstance } from 'fastify';
 import { IncomingMessage, ServerResponse } from 'node:http';
 
@@ -278,11 +279,10 @@ declare function parseAuthorizationHeader(raw: string | readonly string[] | unde
  * (MCP tool arguments, A2A message data). HTTP carries both in headers and
  * uses the two parse helpers directly.
  *
- * The payment method comes from the resource's own declaration. This is not
- * the place that decides which rail a resource uses, so a proof for a
- * resource with no configured rail is dropped rather than forwarded under an
- * invented method. The pipeline then treats the request as unpaid and decides
- * on its own terms.
+ * A payment proof is labelled with the resource's first method. `createGateway`
+ * puts provider-backed methods first so the label matches pipeline selection;
+ * custom registries must preserve that ordering. Without a method, the proof is
+ * dropped and the pipeline receives an unpaid request.
  */
 declare function extractReservedInputFields(rawInput: Record<string, unknown>, resource: CommerceResource | undefined, requestId?: string): {
     input: Record<string, unknown>;
@@ -546,6 +546,21 @@ interface GatewayConfig {
             readonly allowMainnet?: boolean;
             readonly allowUnauthenticatedFacilitator?: boolean;
         };
+        readonly mpp?: {
+            readonly enabled: boolean;
+            readonly network: MppNetwork;
+            readonly rpcUrl: string;
+            readonly asset: string;
+            readonly assetName: string;
+            readonly assetVersion: string;
+            readonly recipient: string;
+            readonly realm: string;
+            readonly challengeSecret: string;
+            readonly challengeTtlSeconds?: number;
+            readonly facilitator: X402FacilitatorConfig;
+            readonly allowMainnet?: boolean;
+            readonly allowUnauthenticatedFacilitator?: boolean;
+        };
     };
     /**
      * Absent when no `authorization:` block is configured, which is how every

package/dist/index.js

@@ -1,7 +1,8 @@
-import { AP2_SPEC_VERSION, AP2_MODES, AP2_DEFAULT_CLOCK_SKEW_SECONDS, AP2_JWK_MEMBERS, AP2_KEY_TYPE, AP2_SIGNING_ALGORITHM, AP2_JWK_CURVE, AP2_JWK_COORDINATE_BYTES, openSqliteDatabase, AP2_MAX_CLOCK_SKEW_SECONDS } from './chunk-GF6KHHKL.js';
-import { resolveX402Deployment, resolveDeploymentMode, requireNetworkProfile } from './chunk-NWIQLJNU.js';
-import { RESERVED_INPUT_FIELDS, PROTOCOL_NAMES, PAYMENT_HEADER, AUTHORIZATION_HEADER, CommerceError, systemClock, NOOP_LOGGER, PACKAGE_VERSION, toCommerceError, DEFAULT_BACKEND_TIMEOUT_MS, toErrorEnvelope, isHttpProtocolAdapter, isCommerceError, parseAuthorizationHeader, toPaymentRequiredEnvelope, PAYMENT_REQUIRED_HEADER, PAYMENT_RESPONSE_HEADER } from './chunk-ZEGFLRGV.js';
-export { AUTHORIZATION_HEADER, AUTHORIZATION_INPUT_FIELD, COMMERCE_ERROR_CODES, COMMERCE_ERROR_HTTP_STATUS, COMMERCE_EVENT_TYPES, CommerceError, DEFAULT_BACKEND_TIMEOUT_MS, DELIVERY_SUMMARY_META_KEY, MAX_AUTHORIZATION_HEADER_BYTES, NOOP_LOGGER, PAYMENT_HEADER, PAYMENT_INPUT_FIELD, PAYMENT_REQUIRED_HEADER, PAYMENT_RESPONSE_HEADER, PROTOCOL_NAMES, RESERVED_INPUT_FIELDS, RETRYABLE_ERROR_CODES, extractReservedInputFields, isCommerceError, isHttpProtocolAdapter, isPaymentRequiredEnvelope, parseAuthorizationHeader, parseAuthorizationSubmission, systemClock, toCommerceError, toDeliverySummary, toErrorEnvelope, toPaymentRequiredEnvelope } from './chunk-ZEGFLRGV.js';
+import { AP2_SPEC_VERSION, AP2_MODES, AP2_DEFAULT_CLOCK_SKEW_SECONDS, AP2_JWK_MEMBERS, AP2_KEY_TYPE, AP2_SIGNING_ALGORITHM, AP2_JWK_CURVE, AP2_JWK_COORDINATE_BYTES, openSqliteDatabase, AP2_MAX_CLOCK_SKEW_SECONDS } from './chunk-US622BKF.js';
+import { MPP_DEFAULT_NETWORK, isMppNetwork, MPP_NETWORKS, MPP_MIN_CHALLENGE_SECRET_LENGTH, MPP_PROFILE } from './chunk-6D2EZ5ME.js';
+import { resolveX402Deployment, resolveDeploymentMode, requireNetworkProfile } from './chunk-PBYN7EK2.js';
+import { RESERVED_INPUT_FIELDS, PROTOCOL_NAMES, PAYMENT_METHOD_NAMES, PAYMENT_HEADER, AUTHORIZATION_HEADER, CommerceError, systemClock, NOOP_LOGGER, PACKAGE_VERSION, toCommerceError, DEFAULT_BACKEND_TIMEOUT_MS, toErrorEnvelope, isHttpProtocolAdapter, isCommerceError, parseAuthorizationHeader, toPaymentRequiredEnvelope, PAYMENT_REQUIRED_HEADER, PAYMENT_RESPONSE_HEADER } from './chunk-5GEWKNIH.js';
+export { AUTHORIZATION_HEADER, AUTHORIZATION_INPUT_FIELD, COMMERCE_ERROR_CODES, COMMERCE_ERROR_HTTP_STATUS, COMMERCE_EVENT_TYPES, CommerceError, DEFAULT_BACKEND_TIMEOUT_MS, DELIVERY_SUMMARY_META_KEY, MAX_AUTHORIZATION_HEADER_BYTES, NOOP_LOGGER, PAYMENT_HEADER, PAYMENT_INPUT_FIELD, PAYMENT_METHOD_NAMES, PAYMENT_REQUIRED_HEADER, PAYMENT_RESPONSE_HEADER, PROTOCOL_NAMES, RESERVED_INPUT_FIELDS, RETRYABLE_ERROR_CODES, extractReservedInputFields, isCommerceError, isHttpProtocolAdapter, isPaymentRequiredEnvelope, parseAuthorizationHeader, parseAuthorizationSubmission, systemClock, toCommerceError, toDeliverySummary, toErrorEnvelope, toPaymentRequiredEnvelope } from './chunk-5GEWKNIH.js';
 import { promises, accessSync, constants } from 'fs';
 import * as path from 'path';
 import { parse, YAMLError } from 'yaml';
@@ -822,7 +823,8 @@ function createExecutionPipeline(options) {
         const mapped = isCommerceError(error) ? error : new CommerceError("PAYMENT_INVALID", "Payment verification failed", {
           requestId: request.requestId,
           resourceId: resource.id,
-          cause: error
+          cause: error,
+          ...retryChallenge(requirement)
         });
         await safeEmit(
           buildEvent({
@@ -854,7 +856,8 @@ function createExecutionPipeline(options) {
           verification.rejectionReason ?? "Payment was rejected",
           {
             requestId: request.requestId,
-            resourceId: resource.id
+            resourceId: resource.id,
+            ...retryChallenge(requirement)
           }
         );
       }
@@ -1077,7 +1080,8 @@ function createExecutionPipeline(options) {
                 amount: paymentResult.amount,
                 currency: paymentResult.currency,
                 ...paymentResult.network !== void 0 ? { network: paymentResult.network } : {},
-                ...paymentResult.externalReference !== void 0 ? { externalReference: paymentResult.externalReference } : {}
+                ...paymentResult.externalReference !== void 0 ? { externalReference: paymentResult.externalReference } : {},
+                ...typeof paymentResult.metadata?.["receipt"] === "string" ? { receipt: paymentResult.metadata["receipt"] } : {}
               }
             }
           }
@@ -1155,6 +1159,10 @@ function resolveAuthorizationProviders(providers, resource, requestId) {
     return found;
   });
 }
+function retryChallenge(requirement) {
+  const envelope = requirement.challenge.envelope;
+  return envelope === void 0 ? {} : { details: { challenge: envelope } };
+}
 function pickProvider(providers, methods) {
   for (const method of methods) {
     const found = providers.find((provider) => provider.name === method);
@@ -1422,8 +1430,26 @@ var X402Schema = z.object({
   /** Accepts a mainnet facilitator that takes no credential. Never defaulted. */
   allowUnauthenticatedFacilitator: BooleanOrString.optional()
 }).strict();
+var MppSchema = z.object({
+  enabled: BooleanOrString,
+  network: z.string().min(1).optional(),
+  rpcUrl: z.string().min(1),
+  asset: z.string().min(1),
+  assetName: z.string().min(1),
+  assetVersion: z.string().min(1),
+  recipient: z.string().min(1),
+  realm: z.string().min(1),
+  challengeSecret: z.string().min(1),
+  challengeTtlSeconds: NumberOrString.optional(),
+  facilitator: FacilitatorSchema,
+  // Real funds. Never defaulted - see src/payments/x402/guardrails.ts
+  allowMainnet: BooleanOrString.optional(),
+  // Accepts a mainnet facilitator that takes no credential. Never defaulted
+  allowUnauthenticatedFacilitator: BooleanOrString.optional()
+}).strict();
 var PaymentsSchema = z.object({
-  x402: X402Schema.optional()
+  x402: X402Schema.optional(),
+  mpp: MppSchema.optional()
 }).strict();
 var Ap2KeySchema = z.object({
   kid: z.string().min(1),
@@ -1559,7 +1585,7 @@ function toBoolean(value, path2) {
   );
 }
 var SUPPORTED_PROTOCOLS = new Set(PROTOCOL_NAMES);
-var SUPPORTED_PAYMENT_METHODS = /* @__PURE__ */ new Set(["x402"]);
+var SUPPORTED_PAYMENT_METHODS = new Set(PAYMENT_METHOD_NAMES);
 var SUPPORTED_AUTHORIZATION_METHODS = /* @__PURE__ */ new Set(["ap2"]);
 function normalise(raw) {
   const protocols = {
@@ -1576,12 +1602,7 @@ function normalise(raw) {
   };
   validateMountPaths(protocols);
   const x402Raw = raw.payments.x402;
-  const facilitator = x402Raw === void 0 ? void 0 : x402Raw.facilitator.mode === "local" ? { mode: "local", signerPrivateKey: x402Raw.facilitator.signerPrivateKey } : {
-    mode: "remote",
-    url: x402Raw.facilitator.url,
-    auth: x402Raw.facilitator.auth ?? { type: "none" }
-  };
-  const x402 = x402Raw && facilitator ? {
+  const x402 = x402Raw !== void 0 ? {
     enabled: toBoolean(x402Raw.enabled, "payments.x402.enabled"),
     network: x402Raw.network,
     rpcUrl: x402Raw.rpcUrl,
@@ -1600,7 +1621,7 @@ function normalise(raw) {
         min: 1
       }
     ),
-    facilitator,
+    facilitator: normaliseFacilitator(x402Raw.facilitator),
     ...x402Raw.allowMainnet !== void 0 ? { allowMainnet: toBoolean(x402Raw.allowMainnet, "payments.x402.allowMainnet") } : {},
     ...x402Raw.allowUnauthenticatedFacilitator !== void 0 ? {
       allowUnauthenticatedFacilitator: toBoolean(
@@ -1623,12 +1644,13 @@ function normalise(raw) {
       ...x402.allowUnauthenticatedFacilitator !== void 0 ? { allowUnauthenticatedFacilitator: x402.allowUnauthenticatedFacilitator } : {}
     });
   }
+  const mpp = normaliseMpp(raw.payments.mpp);
   const ap2 = normaliseAp2(raw.authorization?.ap2);
   if (ap2?.enabled) {
     validateReplayStoreIsolated(ap2.replay.path, raw.storage.receipts.path, protocols.acp);
   }
   const resources = Object.entries(raw.resources).map(
-    ([id, entry]) => normaliseResource(id, entry, protocols, x402, ap2)
+    ([id, entry]) => normaliseResource(id, entry, protocols, x402, mpp, ap2)
   );
   if (protocols.acp.enabled) validateAcpCheckoutMapping(protocols.acp, resources);
   return {
@@ -1650,7 +1672,8 @@ function normalise(raw) {
     protocols,
     resources,
     payments: {
-      ...x402 !== void 0 ? { x402 } : {}
+      ...x402 !== void 0 ? { x402 } : {},
+      ...mpp !== void 0 ? { mpp } : {}
     },
     ...ap2 !== void 0 ? { authorization: { ap2 } } : {}
   };
@@ -2002,7 +2025,74 @@ function validateAcpOperationInput(path2, operation, resource) {
     }
   }
 }
-function normaliseResource(id, entry, protocols, x402, ap2) {
+function normaliseFacilitator(raw) {
+  return raw.mode === "local" ? { mode: "local", signerPrivateKey: raw.signerPrivateKey } : { mode: "remote", url: raw.url, auth: raw.auth ?? { type: "none" } };
+}
+function normaliseMpp(raw) {
+  if (raw === void 0) return void 0;
+  const network = raw.network ?? MPP_DEFAULT_NETWORK;
+  if (!isMppNetwork(network)) {
+    throw new CommerceError(
+      "CONFIG_INVALID",
+      `payments.mpp.network must be one of ${MPP_NETWORKS.join(", ")}`,
+      { details: { path: "payments.mpp.network" } }
+    );
+  }
+  const mpp = {
+    enabled: toBoolean(raw.enabled, "payments.mpp.enabled"),
+    network,
+    rpcUrl: raw.rpcUrl,
+    asset: raw.asset,
+    assetName: raw.assetName,
+    assetVersion: raw.assetVersion,
+    recipient: raw.recipient,
+    realm: raw.realm,
+    challengeSecret: raw.challengeSecret,
+    ...raw.challengeTtlSeconds !== void 0 ? {
+      challengeTtlSeconds: toNumber(
+        raw.challengeTtlSeconds,
+        "payments.mpp.challengeTtlSeconds",
+        { min: 1 }
+      )
+    } : {},
+    facilitator: normaliseFacilitator(raw.facilitator),
+    ...raw.allowMainnet !== void 0 ? { allowMainnet: toBoolean(raw.allowMainnet, "payments.mpp.allowMainnet") } : {},
+    ...raw.allowUnauthenticatedFacilitator !== void 0 ? {
+      allowUnauthenticatedFacilitator: toBoolean(
+        raw.allowUnauthenticatedFacilitator,
+        "payments.mpp.allowUnauthenticatedFacilitator"
+      )
+    } : {}
+  };
+  validateAddress("payments.mpp.recipient", mpp.recipient);
+  validateAddress("payments.mpp.asset", mpp.asset);
+  if (/[\r\n]/.test(mpp.realm)) {
+    throw new CommerceError("CONFIG_INVALID", "payments.mpp.realm must be a single line", {
+      details: { path: "payments.mpp.realm" }
+    });
+  }
+  if (mpp.challengeSecret.length < MPP_MIN_CHALLENGE_SECRET_LENGTH) {
+    throw new CommerceError(
+      "CONFIG_INVALID",
+      `payments.mpp.challengeSecret must have length at least ${MPP_MIN_CHALLENGE_SECRET_LENGTH}`,
+      { details: { path: "payments.mpp.challengeSecret" } }
+    );
+  }
+  resolveX402Deployment({
+    network: mpp.network,
+    payTo: mpp.recipient,
+    asset: mpp.asset,
+    assetName: mpp.assetName,
+    assetVersion: mpp.assetVersion,
+    facilitator: mpp.facilitator,
+    ...mpp.allowMainnet !== void 0 ? { allowMainnet: mpp.allowMainnet } : {},
+    ...mpp.allowUnauthenticatedFacilitator !== void 0 ? { allowUnauthenticatedFacilitator: mpp.allowUnauthenticatedFacilitator } : {},
+    configPath: "payments.mpp",
+    payToField: "recipient"
+  });
+  return mpp;
+}
+function normaliseResource(id, entry, protocols, x402, mpp, ap2) {
   if (entry.input !== void 0) validateResourceSchemaKeywords(id, "input", entry.input);
   const inputProperties = entry.input?.["properties"];
   if (inputProperties && typeof inputProperties === "object") {
@@ -2078,7 +2168,7 @@ function normaliseResource(id, entry, protocols, x402, ap2) {
     );
   }
   if (entry.pricing.type === "fixed") {
-    validatePricingAmount(id, entry.pricing.amount, x402);
+    validatePricingAmount(id, entry.pricing.amount, x402?.assetDecimals);
   }
   const paymentMethods = entry.payments ?? [];
   if (entry.pricing.type === "fixed") {
@@ -2093,17 +2183,28 @@ function normaliseResource(id, entry, protocols, x402, ap2) {
       if (!SUPPORTED_PAYMENT_METHODS.has(method)) {
         throw new CommerceError(
           "CONFIG_INVALID",
-          `Resource "${id}" names unsupported payment method "${method}". Supported: x402.`,
+          `Resource "${id}" names unsupported payment method "${method}". Supported: ${PAYMENT_METHOD_NAMES.join(", ")}.`,
           { details: { path: `resources.${id}.payments`, resourceId: id, method } }
         );
       }
-      if (method === "x402" && (!x402 || !x402.enabled)) {
+    }
+    const enabledRails = [...x402?.enabled ? ["x402"] : [], ...mpp?.enabled ? ["mpp"] : []];
+    if (!paymentMethods.some((method) => enabledRails.includes(method))) {
+      throw new CommerceError(
+        "CONFIG_INVALID",
+        `Resource "${id}" names payment method(s) "${paymentMethods.join(", ")}", none of which is configured and enabled under "payments"`,
+        { details: { path: `resources.${id}.payments`, resourceId: id, paymentMethods } }
+      );
+    }
+    if (mpp?.enabled && paymentMethods.includes("mpp")) {
+      if (entry.pricing.currency !== MPP_PROFILE.assetSymbol) {
         throw new CommerceError(
           "CONFIG_INVALID",
-          `Resource "${id}" names payment method "x402" which is not configured or not enabled under payments.x402`,
-          { details: { path: `resources.${id}.payments`, resourceId: id, method } }
+          `Resource "${id}" is priced in ${entry.pricing.currency}, but MPP charges ${MPP_PROFILE.assetSymbol}`,
+          { details: { path: `resources.${id}.pricing.currency`, resourceId: id } }
         );
       }
+      validatePricingAmount(id, entry.pricing.amount, MPP_PROFILE.assetDecimals);
     }
   }
   const pricing = entry.pricing.type === "free" ? { type: "free" } : { type: "fixed", amount: entry.pricing.amount, currency: entry.pricing.currency };
@@ -2245,7 +2346,7 @@ function validateResourceSchemaKeywords(id, path2, schema) {
 }
 var PRICING_AMOUNT_PATTERN = /^\d+(?:\.\d+)?$/;
 var ZERO_AMOUNT_PATTERN = /^0(?:\.0+)?$/;
-function validatePricingAmount(id, amount, x402) {
+function validatePricingAmount(id, amount, decimals) {
   const path2 = `resources.${id}.pricing.amount`;
   if (!PRICING_AMOUNT_PATTERN.test(amount)) {
     throw new CommerceError(
@@ -2261,12 +2362,12 @@ function validatePricingAmount(id, amount, x402) {
       { details: { path: path2, resourceId: id } }
     );
   }
-  if (x402 !== void 0) {
+  if (decimals !== void 0) {
     const fractionalDigits = amount.includes(".") ? amount.split(".")[1]?.length ?? 0 : 0;
-    if (fractionalDigits > x402.assetDecimals) {
+    if (fractionalDigits > decimals) {
       throw new CommerceError(
         "CONFIG_INVALID",
-        `Resource "${id}" has pricing.amount "${amount}" with more precision (${fractionalDigits} fractional digits) than the configured asset supports (${x402.assetDecimals} decimals)`,
+        `Resource "${id}" has pricing.amount "${amount}" with more precision (${fractionalDigits} fractional digits) than the configured asset supports (${decimals} decimals)`,
         { details: { path: path2, resourceId: id } }
       );
     }
@@ -2525,6 +2626,7 @@ var SECRET_FIELD_NAMES = [
   "seed",
   "mnemonic",
   "secret",
+  "challengeSecret",
   "apiKey",
   "adminToken",
   "token"
@@ -2590,7 +2692,7 @@ function wrapPino(instance) {
 }
 var CORS_METHODS = "GET,POST,DELETE,OPTIONS";
 var CORS_HEADERS = "content-type,payment-signature,x-request-id,authorization";
-var CORS_EXPOSED_HEADERS = "payment-required,payment-response,x-request-id";
+var CORS_EXPOSED_HEADERS = "payment-required,payment-response,www-authenticate,payment-receipt,x-request-id";
 function buildAccessControlHook(options) {
   const allowedOrigins = new Set(options.allowedOrigins.map((origin) => origin.toLowerCase()));
   const publicHostname = hostnameOf(options.publicBaseUrl);
@@ -3003,7 +3105,7 @@ async function buildWellKnownDocument(options) {
       return { ...runtime.adapter.descriptor, health: publicHealth(health) };
     })
   );
-  const x402 = options.config.payments.x402;
+  const { x402, mpp } = options.config.payments;
   return {
     gateway: {
       implementationVersion: PACKAGE_VERSION,
@@ -3039,6 +3141,22 @@ async function buildWellKnownDocument(options) {
             x402.facilitator.mode
           )
         }
+      } : {},
+      ...mpp !== void 0 ? {
+        mpp: {
+          enabled: mpp.enabled,
+          network: mpp.network,
+          asset: mpp.asset,
+          assetName: mpp.assetName,
+          assetVersion: mpp.assetVersion,
+          assetDecimals: MPP_PROFILE.assetDecimals,
+          recipient: mpp.recipient,
+          facilitator: { mode: mpp.facilitator.mode },
+          mode: resolveDeploymentMode(
+            requireNetworkProfile(mpp.network, "payments.mpp.network"),
+            mpp.facilitator.mode
+          )
+        }
       } : {}
     }
   };
@@ -3160,9 +3278,8 @@ async function handleInvoke(request, reply, options) {
         resourceId
       });
     }
-    const paymentHeader = request.headers[PAYMENT_HEADER];
-    const paymentValue = Array.isArray(paymentHeader) ? paymentHeader[0] : paymentHeader;
     const paymentMethod = resource.paymentMethods[0];
+    const paymentValue = paymentProof(request, paymentMethod);
     const payment = paymentValue !== void 0 && paymentMethod !== void 0 ? { method: paymentMethod, payload: paymentValue } : void 0;
     const authorization = parseAuthorizationHeader(
       request.headers[AUTHORIZATION_HEADER],
@@ -3180,7 +3297,10 @@ async function handleInvoke(request, reply, options) {
     const outcome = await options.pipeline.execute(canonicalRequest);
     if (outcome.kind === "payment-required") {
       const envelope = toPaymentRequiredEnvelope(outcome);
-      if (envelope.payment.envelope !== void 0) {
+      if (envelope.payment.provider === "mpp") {
+        const challenge = envelope.payment.envelope?.["wwwAuthenticate"];
+        if (typeof challenge === "string") reply.header("www-authenticate", challenge);
+      } else if (envelope.payment.envelope !== void 0) {
         reply.header(PAYMENT_REQUIRED_HEADER, encodeHeaderDocument(envelope.payment.envelope));
       }
       reply.header("cache-control", "no-store");
@@ -3189,6 +3309,10 @@ async function handleInvoke(request, reply, options) {
     }
     if (outcome.payment) {
       reply.header(PAYMENT_RESPONSE_HEADER, encodePaymentSummary(outcome.payment));
+      const receipt = outcome.payment.metadata?.["receipt"];
+      if (outcome.payment.provider === "mpp" && typeof receipt === "string") {
+        reply.header("payment-receipt", receipt);
+      }
     }
     reply.status(outcome.backendStatus).send(outcome.body);
   } catch (error) {
@@ -3196,15 +3320,31 @@ async function handleInvoke(request, reply, options) {
     const settledPayment = errorPaymentSummary(commerceError);
     if (settledPayment !== void 0) {
       reply.header(PAYMENT_RESPONSE_HEADER, encodePaymentSummary(settledPayment));
+      if (settledPayment.provider === "mpp" && settledPayment.receipt !== void 0) {
+        reply.header("payment-receipt", settledPayment.receipt);
+      }
+    }
+    const challenge = commerceError.details?.["challenge"];
+    if (commerceError.code === "PAYMENT_INVALID" && typeof challenge?.["wwwAuthenticate"] === "string") {
+      reply.header("www-authenticate", challenge["wwwAuthenticate"]);
+      reply.header("cache-control", "no-store");
     }
     reply.status(commerceError.httpStatus).send(toErrorEnvelope(commerceError));
   }
 }
+function paymentProof(request, method) {
+  if (method === "mpp") {
+    const value2 = request.headers.authorization;
+    return value2 !== void 0 && /^Payment\s+\S/i.test(value2) ? value2 : void 0;
+  }
+  const value = request.headers[PAYMENT_HEADER];
+  return Array.isArray(value) ? value[0] : value;
+}
 function errorPaymentSummary(error) {
   const payment = error.details?.["payment"];
   if (typeof payment !== "object" || payment === null) return void 0;
   const rec = payment;
-  const { status, provider, amount, currency, network, externalReference } = rec;
+  const { status, provider, amount, currency, network, externalReference, receipt } = rec;
   if (typeof status !== "string" || typeof provider !== "string" || typeof amount !== "string" || typeof currency !== "string") {
     return void 0;
   }
@@ -3214,7 +3354,8 @@ function errorPaymentSummary(error) {
     amount,
     currency,
     ...typeof network === "string" ? { network } : {},
-    ...typeof externalReference === "string" ? { externalReference } : {}
+    ...typeof externalReference === "string" ? { externalReference } : {},
+    ...typeof receipt === "string" ? { receipt } : {}
   };
 }
 function encodeHeaderDocument(document) {
@@ -3256,13 +3397,25 @@ function parseLimit(value) {
 // src/gateway/server.ts
 var REQUEST_ID_HEADER = "x-request-id";
 var CLIENT_REQUEST_ID_PATTERN = /^[A-Za-z0-9._:-]{1,64}$/;
+function withProviderBackedMethodsFirst(resource, providers) {
+  const backed = (method) => providers.some((provider) => provider.name === method);
+  const ordered = [
+    ...resource.paymentMethods.filter(backed),
+    ...resource.paymentMethods.filter((method) => !backed(method))
+  ];
+  return ordered.some((method, i) => method !== resource.paymentMethods[i]) ? { ...resource, paymentMethods: ordered } : resource;
+}
 async function createGateway(options) {
   const clock = options.clock ?? systemClock;
   const ids = options.ids ?? createDefaultIdGenerator();
   const logger = options.logger ?? createGatewayLogger({ name: options.config.merchant.id }).core;
   const backend = options.backend ?? new HttpBackendExecutor({ logger });
   const authorizationProviders = options.authorizationProviders ?? [];
-  const resources = createResourceRegistry(options.config.resources);
+  const resources = createResourceRegistry(
+    options.config.resources.map(
+      (resource) => withProviderBackedMethodsFirst(resource, options.paymentProviders)
+    )
+  );
   const eventBus = createEventBus({ store: options.store, logger });
   const pipeline = createExecutionPipeline({
     resources,