@devlab.group/agent-commerce 2.0.0 → 2.2.0

package/dist/cli/provider-4BQDH56Y.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/payments/mpp/credential.ts","../../src/payments/mpp/descriptor.ts","../../src/payments/mpp/options.ts","../../src/payments/mpp/provider.ts"],"names":["isAddress","getAddress"],"mappings":";;;;;;;;;;;;;;AASA,IAAM,oBAAA,GAA+D;AAAA,EACnE,CAAC,6CAA6C,aAAa,CAAA;AAAA,EAC3D,CAAC,wCAAwC,mBAAmB,CAAA;AAAA,EAC5D,CAAC,sCAAsC,6BAA6B,CAAA;AAAA,EACpE,CAAC,iCAAiC,uBAAuB,CAAA;AAAA,EACzD,CAAC,qCAAqC,iBAAiB,CAAA;AAAA,EACvD,CAAC,qCAAqC,cAAc,CAAA;AAAA,EACpD,CAAC,wCAAwC,iBAAiB;AAC5D,CAAA;AAEO,SAAS,mBAAmB,KAAA,EAAwB;AACzD,EAAA,IAAI,KAAA,YAAiB,MAAA,CAAO,mBAAA,EAAqB,OAAO,mBAAA;AACxD,EAAA,IAAI,KAAA,YAAiB,MAAA,CAAO,mBAAA,EAAqB,OAAO,iBAAA;AACxD,EAAA,IAAI,KAAA,YAAiB,MAAA,CAAO,qBAAA,EAAuB,OAAO,mBAAA;AAC1D,EAAA,IAAI,KAAA,YAAiB,OAAO,uBAAA,EAAyB;AACnD,IAAA,MAAM,KAAA,GAAQ,oBAAA,CAAqB,IAAA,CAAK,CAAC,CAAC,IAAI,CAAA,KAAM,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,EAAO,OAAO,KAAA,CAAM,CAAC,CAAA;AAAA,EAC3B;AACA,EAAA,OAAO,uBAAA;AACT;AAIO,SAAS,iBAAiB,OAAA,EAAwC;AACvE,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,SAAA,EAAU,CAAE,UAAA,CAAW,GAAG,CAAA,GACjD,UAAA,CAAW,SAAA,CAAU,IAAA,CAAK,KAAA,CAAM,OAAO,CAA0B,CAAA,GACjE,OAAA;AACJ,EAAA,OAAO,UAAA,CAAW,YAAY,UAAU,CAAA;AAC1C;AAMO,SAAS,eAAA,CACd,MAAA,EACA,MAAA,EACA,UAAA,EACoB;AACpB,EAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,CAAO,KAAA,EAAO,OAAO,aAAA;AAC1C,EAAA,IAAI,OAAO,MAAA,KAAW,MAAA,CAAO,UAAU,MAAA,CAAO,MAAA,KAAW,OAAO,MAAA,EAAQ;AACtE,IAAA,OAAO,oBAAA;AAAA,EACT;AAGA,EAAA,IAAI,MAAA,CAAO,WAAW,cAAA,CAAe,SAAA,CAAU,EAAE,QAAA,EAAU,UAAA,EAAY,CAAA,EAAG;AACxE,IAAA,OAAO,gBAAA;AAAA,EACT;AAIA,EAAA,IAAI,OAAO,MAAA,KAAW,MAAA,IAAa,MAAA,CAAO,MAAA,KAAW,OAAO,MAAA,EAAQ;AAClE,IAAA,OAAO,sBAAA;AAAA,EACT;AACA,EAAA,MAAM,MAAM,MAAA,CAAO,OAAA;AACnB,EAAA,MAAM,OAAO,MAAA,CAAO,OAAA;AACpB,EAAA,IAAI,GAAA,CAAI,MAAA,KAAW,IAAA,CAAK,MAAA,EAAQ,OAAO,cAAA;AACvC,EAAA,IAAI,CAAC,WAAA,CAAY,GAAA,CAAI,WAAW,IAAA,CAAK,SAAS,GAAG,OAAO,iBAAA;AACxD,EAAA,IAAI,IAAI,aAAA,EAAe,OAAA,KAAY,IAAA,CAAK,aAAA,EAAe,SAAS,OAAO,eAAA;AACvE,EAAA,IAAI,CAAC,WAAA,CAAY,GAAA,CAAI,UAAU,IAAA,CAAK,QAAQ,GAAG,OAAO,aAAA;AACtD,EAAA,IAAI,UAAU,GAAA,CAAI,aAAa,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,CAAA,EAAG;AAClE,IAAA,OAAO,wBAAA;AAAA,EACT;AACA,EAAA,IAAI,UAAU,GAAG,CAAA,KAAM,SAAA,CAAU,IAAI,GAAG,OAAO,aAAA;AAC/C,EAAA,OAAO,MAAA;AACT;AAGO,SAAS,gBAAA,CACd,iBACA,aAAA,EACmB;AACnB,EAAA,MAAM,EAAE,WAAW,IAAA,EAAM,EAAA,EAAI,OAAO,UAAA,EAAY,WAAA,EAAa,OAAM,GAAI,aAAA;AACvE,EAAA,MAAM,OAAA,GAAU;AAAA,IACd,WAAA,EAAa,CAAA;AAAA,IACb,QAAA,EAAU,eAAA,CAAgB,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAA;AAAA,IAC7C,OAAA,EAAS,EAAE,SAAA,EAAW,aAAA,EAAe,EAAE,IAAA,EAAM,EAAA,EAAI,KAAA,EAAO,UAAA,EAAY,WAAA,EAAa,KAAA,EAAM;AAAE,GAC3F;AACA,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA,EAAE;AAC5F;AAWA,SAAS,UAAU,KAAA,EAAmC;AACpD,EAAA,OAAO,KAAA,KAAU,MAAA,GAAY,EAAA,GAAK,cAAA,CAAe,UAAU,KAA+B,CAAA;AAC5F;AAEO,SAAS,WAAA,CAAY,GAAuB,CAAA,EAAgC;AACjF,EAAA,OAAO,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,MAAA,IAAa,UAAU,CAAC,CAAA,IAAK,SAAA,CAAU,CAAC,IACpE,UAAA,CAAW,CAAC,CAAA,KAAM,UAAA,CAAW,CAAC,CAAA,GAC9B,KAAA;AACN;;;AC/FO,IAAM,cAAA,GAAoC;AAAA,EAC/C,IAAA,EAAM,KAAA;AAAA,EACN,IAAA,EAAM,SAAA;AAAA,EACN,qBAAA,EAAuB,eAAA;AAAA,EACvB,aAAA,EAAe,kBAAA;AAAA,EACf,YAAA,EAAc;AAAA,IACZ,CAAA,OAAA,EAAU,YAAY,MAAM,CAAA,CAAA;AAAA,IAC5B,CAAA,OAAA,EAAU,YAAY,MAAM,CAAA,CAAA;AAAA,IAC5B,CAAA,WAAA,EAAc,YAAY,cAAc,CAAA,CAAA;AAAA,IACxC,UAAA;AAAA,IACA,GAAG,YAAA,CAAa,GAAA,CAAI,CAAC,OAAA,KAAY,CAAA,QAAA,EAAW,OAAO,CAAA,CAAE,CAAA;AAAA,IACrD,CAAA,MAAA,EAAS,YAAY,WAAW,CAAA,CAAA;AAAA,IAChC,sBAAA;AAAA,IACA,oBAAA;AAAA,IACA,cAAA;AAAA,IACA,iBAAA;AAAA;AAAA,IAEA;AAAA,GACF;AAAA;AAAA,EAEA,MAAA,EAAQ,cAAA;AAAA,EACR,WAAA,EAAa;AAAA;AAAA,IAEX,wBAAA;AAAA;AAAA,IAEA,oBAAA;AAAA,IACA,wBAAA;AAAA,IACA,iBAAA;AAAA;AAAA,IAEA,QAAA;AAAA,IACA,qBAAA;AAAA;AAAA,IAEA,cAAA;AAAA,IACA;AAAA;AAEJ,CAAA;ACMO,SAAS,cAAc,OAAA,EAAgC;AAC5D,EAAA,OAAO,IAAI,aAAA,CAAc,gBAAA,EAAkB,OAAO,CAAA;AACpD;AAOO,SAAS,gBAAgB,OAAA,EAAoC;AAClE,EAAA,IAAI,CAACA,SAAAA,CAAU,OAAA,CAAQ,SAAS,CAAA,EAAG,MAAM,cAAc,qCAAqC,CAAA;AAC5F,EAAA,IAAI,CAACA,SAAAA,CAAU,OAAA,CAAQ,KAAK,CAAA,EAAG,MAAM,cAAc,iCAAiC,CAAA;AACpF,EAAA,IAAI,QAAQ,SAAA,CAAU,MAAA,KAAW,KAAK,OAAA,CAAQ,YAAA,CAAa,WAAW,CAAA,EAAG;AACvE,IAAA,MAAM,cAAc,qDAAqD,CAAA;AAAA,EAC3E;AAGA,EAAA,IAAI,OAAA,CAAQ,MAAM,MAAA,KAAW,CAAA,IAAK,SAAS,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC9D,IAAA,MAAM,cAAc,kDAAkD,CAAA;AAAA,EACxE;AACA,EAAA,IAAI,OAAA,CAAQ,eAAA,CAAgB,MAAA,GAAS,+BAAA,EAAiC;AACpE,IAAA,MAAM,aAAA;AAAA,MACJ,kDAAkD,+BAA+B,CAAA;AAAA,KACnF;AAAA,EACF;AACA,EAAA,MAAM,MAAM,OAAA,CAAQ,mBAAA;AACpB,EAAA,IAAI,GAAA,KAAQ,WAAc,CAAC,MAAA,CAAO,UAAU,GAAG,CAAA,IAAK,OAAO,CAAA,CAAA,EAAI;AAC7D,IAAA,MAAM,cAAc,8DAA8D,CAAA;AAAA,EACpF;AACA,EAAA,IAAI,QAAQ,OAAA,KAAY,MAAA,IAAa,CAAC,YAAA,CAAa,OAAA,CAAQ,OAAO,CAAA,EAAG;AACnE,IAAA,MAAM,cAAc,CAAA,2BAAA,EAA8B,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,EAC7E;AACF;;;AC9BA,IAAM,6BAAA,GAAgC,GAAA;AAGtC,IAAM,kBAAA,GAAqB,sCAAA;AAE3B,IAAM,0BAA0B,QAAA,CAAS;AAAA,EACvC;AACF,CAAC,CAAA;AAED,IAAM,qBAAA,GAAwB,GAAA;AAEvB,SAAS,yBAAyB,OAAA,EAA8C;AACrF,EAAA,MAAM,EAAE,QAAQ,WAAA,EAAa,YAAA,EAAc,iCAAiC,MAAA,EAAQ,GAAG,MAAK,GAC1F,OAAA;AAEF,EAAA,eAAA,CAAgB,IAAI,CAAA;AAGpB,EAAA,MAAM,aAAa,yBAAA,CAA0B;AAAA,IAC3C,OAAA,EAAS,QAAQ,OAAA,IAAW,mBAAA;AAAA,IAC5B,MAAA;AAAA,IACA,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,cAAc,OAAA,CAAQ,YAAA;AAAA,IACtB,eAAe,WAAA,CAAY,aAAA;AAAA,IAC3B,OAAO,OAAA,CAAQ,SAAA;AAAA,IACf,WAAA;AAAA,IACA,GAAI,YAAA,KAAiB,MAAA,GAAY,EAAE,YAAA,KAAiB,EAAC;AAAA,IACrD,GAAI,+BAAA,KAAoC,MAAA,GAAY,EAAE,+BAAA,KAAoC,EAAC;AAAA,IAC3F,GAAI,MAAA,KAAW,MAAA,GAAY,EAAE,MAAA,KAAW,EAAC;AAAA,IACzC,GAAI,QAAQ,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM,GAAI;AAAC,GAC/D,CAAA;AAED,EAAA,MAAM,QAAQ,kBAAA,CAAmB;AAAA,IAC/B,SAAA,EAAW,KAAK,MAAA,EAAQ,EAAE,SAAS,qBAAA,EAAuB,UAAA,EAAY,GAAG;AAAA,GAC1E,CAAA;AACD,EAAA,MAAM,SAAA,GAA6B,CAAC,KAAA,EAAO,KAAA,KACzC,MAAM,YAAA,CAAa;AAAA,IACjB,SAAS,OAAA,CAAQ,KAAA;AAAA,IACjB,GAAA,EAAK,uBAAA;AAAA,IACL,YAAA,EAAc,oBAAA;AAAA,IACd,IAAA,EAAM,CAAC,KAAA,EAAO,KAAK;AAAA,GACpB,CAAA;AACH,EAAA,OAAO,+BAAA,CAAgC,IAAA,EAAM,UAAA,EAAY,SAAS,CAAA;AACpE;AAMO,SAAS,+BAAA,CACd,OAAA,EACA,UAAA,EACA,SAAA,EACiB;AACjB,EAAA,eAAA,CAAgB,OAAO,CAAA;AACvB,EAAA,IAAI,UAAA,CAAW,SAAS,MAAA,EAAQ;AAC9B,IAAA,MAAM,cAAc,iDAAiD,CAAA;AAAA,EACvE;AACA,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,IAAW,mBAAA;AACnC,EAAA,MAAM,UAAU,MAAA,CAAO,OAAA,CAAQ,MAAM,GAAG,CAAA,CAAE,CAAC,CAAC,CAAA;AAC5C,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,WAAA;AAC/B,EAAA,MAAM,UAAA,GAAa,QAAQ,mBAAA,IAAuB,6BAAA;AAClD,EAAA,MAAM,SAAA,GAAYC,UAAAA,CAAW,OAAA,CAAQ,SAAS,CAAA;AAC9C,EAAA,MAAM,KAAA,GAAQA,UAAAA,CAAW,OAAA,CAAQ,KAAK,CAAA;AACtC,EAAA,MAAM,GAAA,GAAM,QAAQ,GAAA,IAAO,WAAA;AAG3B,EAAA,IAAI,sBAAA,GAAyB,KAAA;AAI7B,EAAA,MAAM,SAAS,MAAA,CAAO;AAAA,IACpB,QAAA,EAAU,KAAA;AAAA,IACV,SAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAU,WAAA,CAAY,aAAA;AAAA,IACtB,eAAe,EAAE,IAAA,EAAM,QAAQ,SAAA,EAAW,OAAA,EAAS,QAAQ,YAAA,EAAa;AAAA,IACxE,QAAQ,YAAY;AAClB,MAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,kCAAkC,CAAA;AAAA,IAC9E;AAAA,GACD,CAAA;AAED,EAAA,SAAS,QAAA,CAAS,aAAiC,MAAA,EAA+B;AAChF,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,UAAA;AAAA,MACR,QAAA,EAAU,KAAA;AAAA,MACV,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,UAAU,WAAA,CAAY,QAAA;AAAA,MACtB,OAAA;AAAA,MACA,KAAA;AAAA,MACA,eAAA,EAAiB;AAAA,KACnB;AAAA,EACF;AAEA,EAAA,eAAe,kBAAkB,OAAA,EAAsD;AACrF,IAAA,IAAI,OAAA,CAAQ,QAAA,KAAa,WAAA,CAAY,WAAA,EAAa;AAChD,MAAA,MAAM,aAAA;AAAA,QACJ,CAAA,UAAA,EAAa,QAAQ,QAAA,CAAS,EAAE,kBAAkB,OAAA,CAAQ,QAAQ,CAAA,kBAAA,EAAqB,WAAA,CAAY,WAAW,CAAA;AAAA,OAChH;AAAA,IACF;AAGA,IAAA,IAAI,qBAAqB,OAAA,CAAQ,MAAA,EAAQ,WAAA,CAAY,aAAa,KAAK,EAAA,EAAI;AACzE,MAAA,MAAM,IAAI,aAAA,CAAc,iBAAA,EAAmB,CAAA,QAAA,EAAW,OAAA,CAAQ,MAAM,CAAA,oBAAA,CAAA,EAAwB;AAAA,QAC1F,OAAA,EAAS,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA;AAAO,OACnC,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,CAAC,sBAAA,EAAwB;AAC3B,MAAA,MAAM,sBAAsB,OAAO,CAAA;AACnC,MAAA,sBAAA,GAAyB,IAAA;AAAA,IAC3B;AACA,IAAA,MAAM,WAAA,GACJ,QAAQ,oBAAA,GAAuB,OAAA,CAAQ,SAAS,EAAE,CAAA,IAClD,QAAQ,WAAA,IACR,wBAAA;AAGF,IAAA,MAAM,OAAA,GAAU,IAAI,IAAA,CAAK,KAAA,CAAM,KAAI,CAAE,OAAA,EAAQ,GAAI,UAAA,GAAa,GAAI,CAAA;AAClE,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,QAAA,GAAW,2BAA2B,CAAA;AAC7D,IAAA,MAAM,SAAA,GAAY,SAAA,CAAU,UAAA,CAAW,OAAA,CAAQ,MAAA,EAAQ;AAAA,MACrD,WAAW,OAAA,CAAQ,eAAA;AAAA,MACnB,OAAO,OAAA,CAAQ,KAAA;AAAA,MACf,OAAA;AAAA;AAAA;AAAA,MAGA,GAAI,OAAO,MAAA,KAAW,WAAW,EAAE,MAAA,KAAW,EAAC;AAAA;AAAA;AAAA,MAG/C,IAAA,EAAM,EAAE,QAAA,EAAU,OAAA,CAAQ,SAAS,EAAA,EAAG;AAAA,MACtC,OAAA,EAAS;AAAA,QACP,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,QAAA,EAAU,KAAA;AAAA,QACV,SAAA;AAAA,QACA,OAAA;AAAA,QACA,UAAU,WAAA,CAAY,aAAA;AAAA,QACtB,eAAA,EAAiB,CAAC,WAAA,CAAY,cAAc;AAAA;AAC9C,KACD,CAAA;AACD,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,GAAA,CAAI,IAAA,CAAK,QAAQ,CAAA;AAAA,MACrB,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,UAAA,EAAY,QAAQ,QAAA,CAAS,EAAA;AAAA,MAC7B,QAAA,EAAU,KAAA;AAAA,MACV,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,UAAU,OAAA,CAAQ,QAAA;AAAA,MAClB,WAAA,EAAa,SAAA;AAAA,MACb,OAAA;AAAA,MACA,KAAA;AAAA,MACA,SAAA,EAAW,QAAQ,WAAA,EAAY;AAAA,MAC/B,SAAA,EAAW;AAAA,QACT,QAAA,EAAU,KAAA;AAAA,QACV,SAAS,eAAA,CAAgB,IAAA;AAAA,QACzB,OAAA,EAAS,CAAC,SAAS,CAAA;AAAA;AAAA;AAAA;AAAA,QAInB,QAAA,EAAU,EAAE,eAAA,EAAiB,SAAA,CAAU,SAAA,CAAU,SAAS,CAAA,EAAG,UAAA,EAAY,CAAC,SAAS,CAAA;AAAE,OACvF;AAAA,MACA,UAAU,EAAE,CAAC,iCAAiC,GAAG,gBAAgB,eAAA;AAAgB,KACnF;AAAA,EACF;AAEA,EAAA,eAAe,OAAO,OAAA,EAA6D;AACjF,IAAA,MAAM,EAAE,WAAA,EAAa,QAAA,EAAU,UAAA,EAAW,GAAI,OAAA;AAC9C,IAAA,IAAI,YAAY,QAAA,KAAa,KAAA,IAAS,WAAA,CAAY,SAAA,CAAU,aAAa,KAAA,EAAO;AAC9E,MAAA,OAAO,QAAA,CAAS,aAAa,gBAAgB,CAAA;AAAA,IAC/C;AACA,IAAA,MAAM,MAAA,GAAS,WAAA,CAAY,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAA;AAC9C,IAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,QAAA,CAAS,aAAa,mBAAmB,CAAA;AAE7D,IAAA,IAAI,UAAA;AACJ,IAAA,IAAI;AACF,MAAA,UAAA,GAAa,gBAAA,CAAiB,WAAW,OAAO,CAAA;AAAA,IAClD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,QAAA,CAAS,aAAa,sBAAsB,CAAA;AAAA,IACrD;AACA,IAAA,MAAM,SAAS,UAAA,CAAW,SAAA;AAI1B,IAAA,IAAI,CAAC,UAAU,MAAA,CAAO,MAAA,EAAQ,EAAE,SAAA,EAAW,OAAA,CAAQ,eAAA,EAAiB,CAAA,EAAG;AACrE,MAAA,OAAO,QAAA,CAAS,aAAa,sBAAsB,CAAA;AAAA,IACrD;AACA,IAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,MAAA,EAAQ,MAAA,EAAQ,SAAS,EAAE,CAAA;AAC3D,IAAA,IAAI,OAAA,EAAS,OAAO,QAAA,CAAS,WAAA,EAAa,OAAO,CAAA;AACjD,IAAA,IAAI,CAAC,MAAA,CAAO,OAAA,IAAW,IAAI,KAAK,MAAA,CAAO,OAAO,CAAA,CAAE,OAAA,EAAQ,IAAK,KAAA,CAAM,GAAA,EAAI,CAAE,SAAQ,EAAG;AAClF,MAAA,OAAO,QAAA,CAAS,aAAa,mBAAmB,CAAA;AAAA,IAClD;AACA,IAAA,IAAK,UAAA,CAAW,OAAA,EAAuC,IAAA,KAAS,WAAA,CAAY,cAAA,EAAgB;AAC1F,MAAA,OAAO,QAAA,CAAS,aAAa,wBAAwB,CAAA;AAAA,IACvD;AAKA,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAM,aAAa,MAAM,MAAA,CAAO,mBAAmB,CAAC,MAAM,GAAG,UAAU,CAAA;AACvE,MAAA,KAAA,GAAQA,UAAAA,CAAY,UAAA,CAAW,OAAA,CAA8B,KAAK,CAAA;AAAA,IACpE,SAAS,KAAA,EAAO;AACd,MAAA,OAAO,QAAA,CAAS,WAAA,EAAa,kBAAA,CAAmB,KAAK,CAAC,CAAA;AAAA,IACxD;AAGA,IAAA,MAAM,KAAA,GAAS,WAAW,OAAA,CAAuC,KAAA;AAEjE,IAAA,MAAM,SAAA,GAAY,iBAAiB,EAAE,OAAA,EAAS,OAAO,IAAA,EAAM,KAAA,EAAO,OAAO,CAAA;AAKzE,IAAA,MAAM,gBAAA,GAAmB,MAAM,UAAA,CAAW,MAAA;AAAA,MACxC,MAAM,aAAA,CAAc,OAAA,EAAS,UAAA,CAAW,OAAqC;AAAA,KAC/E;AACA,IAAA,IAAI,gBAAA,CAAiB,WAAW,UAAA,EAAY;AAI1C,MAAA,MAAM,SAAS,gBAAA,CAAiB,eAAA;AAChC,MAAA,MAAM,KAAA,GACJ,MAAA,KAAW,kBAAA,KACT,MAAM,SAAA,GAAY,KAAA,EAAO,KAAK,CAAA,CAAE,KAAA,CAAM,MAAM,KAAK,CAAA,IAAM,KAAA,CAAA;AAC3D,MAAA,OAAO,QAAA;AAAA,QACL,WAAA;AAAA,QACA,KAAA,GAAQ,2BAA4B,MAAA,IAAU;AAAA,OAChD;AAAA,IACF;AAEA,IAAA,IAAI,gBAAA,CAAiB,cAAc,SAAA,EAAW;AAC5C,MAAA,OAAO,QAAA,CAAS,aAAa,qBAAqB,CAAA;AAAA,IACpD;AAEA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,UAAA;AAAA,MACR,QAAA,EAAU,KAAA;AAAA,MACV,KAAA;AAAA,MACA,KAAA,EAAO,SAAA;AAAA,MACP,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,UAAU,WAAA,CAAY,QAAA;AAAA,MACtB,OAAA;AAAA,MACA,KAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAGA,EAAA,eAAe,aAAA,CACb,SACA,aAAA,EACqC;AACrC,IAAA,MAAM,EAAE,SAAA,EAAW,WAAA,EAAa,QAAA,EAAS,GAAI,OAAA;AAC7C,IAAA,MAAM,eAAA,GAAkB,MAAM,qBAAA,CAAsB;AAAA,MAClD,SAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,UAAU,WAAA,CAAY,QAAA;AAAA,MACtB,WAAA,EAAa,MAAM,MAAA;AAAO,KAC3B,CAAA;AACD,IAAA,OAAO;AAAA,MACL,SAAA;AAAA,MACA,QAAA;AAAA,MACA,WAAA,EAAa,eAAA;AAAA,MACb,UAAA,EAAY,gBAAA,CAAiB,eAAA,EAAiB,aAAa;AAAA,KAC7D;AAAA,EACF;AAEA,EAAA,eAAe,sBAAsB,OAAA,EAAsD;AACzF,IAAA,MAAM,IAAA,GAAO,MAAM,UAAA,CAAW,iBAAA,CAAkB,OAAO,CAAA;AACvD,IAAA,MAAM,KAAA,GAAS,KAAK,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAA,GAAI,OAAO,KAAK,EAAC;AACxD,IAAA,IACE,IAAA,CAAK,OAAA,KAAY,OAAA,IACjB,CAAC,WAAA,CAAY,KAAK,KAAA,EAAO,KAAK,CAAA,IAC9B,CAAC,WAAA,CAAY,IAAA,CAAK,aAAa,SAAS,CAAA,IACxC,KAAA,CAAM,MAAM,CAAA,KAAM,OAAA,CAAQ,aAC1B,KAAA,CAAM,SAAS,CAAA,KAAM,OAAA,CAAQ,YAAA,EAC7B;AACA,MAAA,MAAM,aAAA;AAAA,QACJ;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,eAAe,OAAO,OAAA,EAA2D;AAC/E,IAAA,MAAM,EAAE,SAAA,EAAW,WAAA,EAAa,QAAA,EAAU,UAAA,EAAY,cAAa,GAAI,OAAA;AACvE,IAAA,IAAI,YAAA,CAAa,MAAA,KAAW,UAAA,IAAc,YAAA,CAAa,cAAc,MAAA,EAAW;AAC9E,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAKA,IAAA,MAAM,UAAA,GAAa,gBAAA,CAAiB,UAAA,CAAW,OAAO,CAAA;AACtD,IAAA,MAAM,gBAAgB,UAAA,CAAW,OAAA;AACjC,IAAA,MAAM,OAAA,GAAU,MAAM,UAAA,CAAW,MAAA,CAAO;AAAA,MACtC,GAAI,MAAM,aAAA,CAAc,EAAE,WAAW,WAAA,EAAa,QAAqB,CAAA,EAAG,aAAa,CAAA;AAAA,MACvF,YAAA,EAAc,EAAE,GAAG,YAAA,EAAc,UAAU,MAAA;AAAO,KACnD,CAAA;AACD,IAAA,MAAM,MAAA,GAAwB;AAAA,MAC5B,GAAG,OAAA;AAAA,MACH,QAAA,EAAU,KAAA;AAAA,MACV,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,UAAU,WAAA,CAAY,QAAA;AAAA,MACtB,WAAW,YAAA,CAAa;AAAA,KAC1B;AACA,IAAA,IAAI,QAAQ,MAAA,KAAW,SAAA,IAAa,OAAA,CAAQ,iBAAA,KAAsB,QAAW,OAAO,MAAA;AAGpF,IAAA,MAAM,MAAA,GAAqE;AAAA,MACzE,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,WAAW,OAAA,CAAQ,iBAAA;AAAA,MACnB,MAAA,EAAQ,SAAA;AAAA,MACR,SAAA,EAAW,OAAA,CAAQ,SAAA,IAAa,KAAA,CAAM,MAAA,EAAO;AAAA,MAC7C,WAAA,EAAa,WAAW,SAAA,CAAU,EAAA;AAAA,MAClC;AAAA,KACF;AACA,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA;AACnC,IAAA,OAAO,EAAE,GAAG,MAAA,EAAQ,QAAA,EAAU,EAAE,GAAG,OAAA,CAAQ,QAAA,EAAU,OAAA,EAAS,OAAA,CAAQ,SAAA,CAAU,OAAO,GAAE,EAAE;AAAA,EAC7F;AAEA,EAAA,SAAS,MAAA,GAAiC;AACxC,IAAA,OAAO,WAAW,MAAA,EAAO;AAAA,EAC3B;AAEA,EAAA,OAAO,EAAE,MAAM,KAAA,EAAO,UAAA,EAAY,gBAAgB,iBAAA,EAAmB,MAAA,EAAQ,QAAQ,MAAA,EAAO;AAC9F","file":"provider-4BQDH56Y.js","sourcesContent":["// Reading an MPP credential: its decoding, its binding to the challenge, and the x402 proof it carries\nimport { type Challenge, Credential, Errors, PaymentRequest } from 'mppx';\nimport type { Types } from 'mppx/evm';\nimport { getAddress, isAddress } from 'viem';\nimport type { PaymentRequirement, PaymentSubmission } from '../../core';\n\n// mppx reports a verification failure only as message text. The pinned\n// release's wording maps to stable reasons, and the tests cover every entry;\n// unmapped text becomes `authorization_invalid`.\nconst VERIFICATION_REASONS: readonly (readonly [string, string])[] = [\n  ['EVM authorization challenge hash mismatch', 'wrong_nonce'],\n  ['EVM authorization signature mismatch', 'invalid_signature'],\n  ['EVM authorization is not valid yet', 'authorization_not_yet_valid'],\n  ['EVM authorization has expired', 'authorization_expired'],\n  ['EVM authorization source mismatch', 'source_mismatch'],\n  ['EVM authorization amount mismatch', 'wrong_amount'],\n  ['EVM authorization recipient mismatch', 'wrong_recipient'],\n];\n\nexport function verificationReason(error: unknown): string {\n  if (error instanceof Errors.PaymentExpiredError) return 'challenge_expired';\n  if (error instanceof Errors.InvalidPayloadError) return 'invalid_payload';\n  if (error instanceof Errors.InvalidChallengeError) return 'invalid_challenge';\n  if (error instanceof Errors.VerificationFailedError) {\n    const match = VERIFICATION_REASONS.find(([text]) => error.message.includes(text));\n    if (match) return match[1];\n  }\n  return 'authorization_invalid';\n}\n\n// Accept the HTTP `Authorization: Payment ...` value or a JSON credential\n// from MCP `_meta`. Serialize the object for mppx deserialization\nexport function decodeCredential(payload: string): Credential.Credential {\n  const serialized = payload.trimStart().startsWith('{')\n    ? Credential.serialize(JSON.parse(payload) as Credential.Credential)\n    : payload;\n  return Credential.deserialize(serialized);\n}\n\n// Compares the echoed challenge with the one issued for this request. Both\n// carry a valid HMAC by now, so any difference means the credential answers a\n// challenge issued for other terms. The final comparison catches a difference\n// in any request field the named checks do not cover.\nexport function bindingMismatch(\n  echoed: Challenge.Challenge,\n  issued: Challenge.Challenge,\n  resourceId: string,\n): string | undefined {\n  if (echoed.realm !== issued.realm) return 'wrong_realm';\n  if (echoed.method !== issued.method || echoed.intent !== issued.intent) {\n    return 'unsupported_method';\n  }\n  // Only the encoded `opaque` survives the credential round trip, not `meta`,\n  // so compare it with the encoding of this resource's binding\n  if (echoed.opaque !== PaymentRequest.serialize({ resource: resourceId })) {\n    return 'wrong_resource';\n  }\n  // `issued` was built for the request carrying this credential, so a\n  // different body, or none, fails here. A challenge without a digest binds\n  // no body, as the core draft reads it.\n  if (echoed.digest !== undefined && echoed.digest !== issued.digest) {\n    return 'body_digest_mismatch';\n  }\n  const got = echoed.request as ChargeRequest;\n  const want = issued.request as ChargeRequest;\n  if (got.amount !== want.amount) return 'wrong_amount';\n  if (!sameAddress(got.recipient, want.recipient)) return 'wrong_recipient';\n  if (got.methodDetails?.chainId !== want.methodDetails?.chainId) return 'wrong_network';\n  if (!sameAddress(got.currency, want.currency)) return 'wrong_asset';\n  if (canonical(got.methodDetails) !== canonical(want.methodDetails)) {\n    return 'unsupported_credential';\n  }\n  if (canonical(got) !== canonical(want)) return 'wrong_terms';\n  return undefined;\n}\n\n// Rewrap the MPP authorization as the x402 `exact` payload expected by settlement\nexport function toX402Submission(\n  x402Requirement: PaymentRequirement,\n  authorization: Types.AuthorizationPayload,\n): PaymentSubmission {\n  const { signature, from, to, value, validAfter, validBefore, nonce } = authorization;\n  const payment = {\n    x402Version: 2,\n    accepted: x402Requirement.challenge.accepts[0],\n    payload: { signature, authorization: { from, to, value, validAfter, validBefore, nonce } },\n  };\n  return { method: 'x402', payload: Buffer.from(JSON.stringify(payment)).toString('base64') };\n}\n\ninterface ChargeRequest {\n  readonly amount?: string;\n  readonly currency?: string;\n  readonly recipient?: string;\n  readonly methodDetails?: { readonly chainId?: number };\n}\n\n// The encoding mppx binds into the challenge HMAC, so key order cannot\n// produce a false mismatch\nfunction canonical(value: object | undefined): string {\n  return value === undefined ? '' : PaymentRequest.serialize(value as PaymentRequest.Request);\n}\n\nexport function sameAddress(a: string | undefined, b: string | undefined): boolean {\n  return a !== undefined && b !== undefined && isAddress(a) && isAddress(b)\n    ? getAddress(a) === getAddress(b)\n    : false;\n}\n","/**\n * Describes the MPP profile and its unsupported variants.\n *\n * The protocol name alone cannot identify a compatible intent, method and\n * extension set, so the descriptor lists both the target and its gaps.\n *\n * Importing the descriptor does not load `mppx`.\n */\nimport type { AdapterDescriptor } from '../../core/public-types';\nimport { PACKAGE_VERSION } from '../../version';\nimport { MPP_NETWORKS, MPP_PROFILE, MPP_SUPPORTED_SPEC } from './constants';\n\nexport const MPP_DESCRIPTOR: AdapterDescriptor = {\n  name: 'mpp',\n  kind: 'payment',\n  implementationVersion: PACKAGE_VERSION,\n  supportedSpec: MPP_SUPPORTED_SPEC,\n  capabilities: [\n    `intent=${MPP_PROFILE.intent}`,\n    `method=${MPP_PROFILE.method}`,\n    `credential=${MPP_PROFILE.credentialType}`,\n    'eip-3009',\n    ...MPP_NETWORKS.map((network) => `network=${network}`),\n    `asset=${MPP_PROFILE.assetSymbol}`,\n    'verify-before-settle',\n    'authorization-flow',\n    'upfront-flow',\n    'payment-receipt',\n    // HTTP request bodies only; MCP and A2A carry the proof in the body\n    'challenge-digest-binding',\n  ],\n  // The pinned specs are drafts and mppx is pre-1.0; the wire format may change\n  status: 'experimental',\n  unsupported: [\n    // Name other methods as a class instead of maintaining a second list\n    'methods other than evm',\n    // This profile supports only the EIP-3009 `authorization` credential\n    'credential=permit2',\n    'credential=transaction',\n    'credential=hash',\n    // The draft allows splits only with permit2 credentials\n    'splits',\n    'intent=subscription',\n    // A separate EVM draft, not an option of charge\n    'evm sessions',\n    'discovery extension',\n  ],\n};\n","// The MPP provider's options, checked once at construction\nimport { isAddress } from 'viem';\nimport { type Clock, CommerceError, type IdGenerator, type Logger } from '../../core';\nimport type { X402FacilitatorConfig } from '../x402/guardrails';\nimport type { X402PaymentFlow } from '../x402/payment-flow';\nimport { isMppNetwork, MPP_MIN_CHALLENGE_SECRET_LENGTH, MPP_NETWORKS } from './constants';\n\n/** Whether the token contract has recorded `nonce` as used by `payer` */\nexport type NonceUsedReader = (payer: `0x${string}`, nonce: `0x${string}`) => Promise<boolean>;\n\nexport interface MppProviderOptions {\n  /** Merchant-controlled settlement destination. Never gateway-owned */\n  readonly recipient: `0x${string}`;\n  /** EIP-3009 token the charge is paid in */\n  readonly asset: `0x${string}`;\n  /** EIP-712 domain name of the asset, e.g. 'USDC' or 'MockUSDC' */\n  readonly assetName: string;\n  /** EIP-712 domain version of the asset, e.g. '2' */\n  readonly assetVersion: string;\n  /** Value of each challenge's `realm`, such as the gateway's host */\n  readonly realm: string;\n  /** Key that binds each challenge to this gateway. Never logged or published */\n  readonly challengeSecret: string;\n  /** RPC endpoint of the settlement chain */\n  readonly rpcUrl: string;\n  /** The x402 facilitator that verifies and broadcasts the authorization */\n  readonly facilitator: X402FacilitatorConfig;\n  /** Must be `true` before anything settles on a mainnet. Never a default */\n  readonly allowMainnet?: boolean;\n  /** Required on mainnet when facilitator auth is `none` */\n  readonly allowUnauthenticatedFacilitator?: boolean;\n  readonly logger?: Logger;\n  /**\n   * Seconds a challenge stays valid, 300 by default. The mppx client signs its\n   * authorization to expire at the same moment.\n   */\n  readonly challengeTtlSeconds?: number;\n  /**\n   * CAIP-2 network: `eip155:31337` (local Anvil), `eip155:84532` (Base\n   * Sepolia, the default) or `eip155:8453` (Base)\n   */\n  readonly network?: string;\n  /**\n   * Same flow values as x402. The default, `upfront`, settles before the\n   * backend; `authorization` settles after it\n   */\n  readonly paymentFlow?: X402PaymentFlow;\n  /** Per-resource overrides of `paymentFlow`, keyed by resource id */\n  readonly resourcePaymentFlows?: Readonly<Record<string, X402PaymentFlow>>;\n  readonly clock?: Clock;\n  readonly ids?: IdGenerator;\n}\n\nexport function configInvalid(message: string): CommerceError {\n  return new CommerceError('CONFIG_INVALID', message);\n}\n\nexport type MppChallengeOptions = Omit<\n  MppProviderOptions,\n  'rpcUrl' | 'facilitator' | 'allowMainnet' | 'allowUnauthenticatedFacilitator' | 'logger'\n>;\n\nexport function validateOptions(options: MppChallengeOptions): void {\n  if (!isAddress(options.recipient)) throw configInvalid('MPP recipient is not an EVM address');\n  if (!isAddress(options.asset)) throw configInvalid('MPP asset is not an EVM address');\n  if (options.assetName.length === 0 || options.assetVersion.length === 0) {\n    throw configInvalid('MPP asset needs its EIP-712 domain name and version');\n  }\n  // mppx refuses CR or LF in the quoted realm parameter, so checking here fails\n  // at construction instead of on every challenge\n  if (options.realm.length === 0 || /[\\r\\n]/.test(options.realm)) {\n    throw configInvalid('MPP realm must be a non-empty single-line string');\n  }\n  if (options.challengeSecret.length < MPP_MIN_CHALLENGE_SECRET_LENGTH) {\n    throw configInvalid(\n      `MPP challenge secret must have length at least ${MPP_MIN_CHALLENGE_SECRET_LENGTH}`,\n    );\n  }\n  const ttl = options.challengeTtlSeconds;\n  if (ttl !== undefined && (!Number.isInteger(ttl) || ttl <= 0)) {\n    throw configInvalid('MPP challenge TTL must be a positive whole number of seconds');\n  }\n  if (options.network !== undefined && !isMppNetwork(options.network)) {\n    throw configInvalid(`MPP network must be one of ${MPP_NETWORKS.join(', ')}`);\n  }\n}\n","/**\n * MPP payment provider for the `charge` intent, the `evm` method and the\n * EIP-3009 `authorization` credential.\n *\n * It issues challenges and verifies credentials without moving funds: local\n * checks first, then a read-only check by an x402 facilitator. Settlement hands\n * the same signed authorization to that facilitator through an internal x402\n * provider built from these options. The MPP layer adds no signing key.\n *\n * Under the default `upfront` flow settlement precedes the backend call; under\n * `authorization` it follows a successful one. The drafts require a confirmed\n * transaction before a `Payment-Receipt`.\n */\nimport { Challenge, type Credential, Method, Receipt } from 'mppx';\nimport { Methods, type Types } from 'mppx/evm';\nimport { charge } from 'mppx/evm/server';\nimport { createPublicClient, getAddress, http, parseAbi } from 'viem';\nimport {\n  type AdapterHealth,\n  CommerceError,\n  type PaymentContext,\n  type PaymentProvider,\n  type PaymentRequirement,\n  type PaymentResult,\n  type PaymentSettlementContext,\n  type PaymentVerificationContext,\n  systemClock,\n} from '../../core';\nimport { SETTLE_AFTER_BACKEND_METADATA_KEY } from '../../core/execution/settlement-order';\nimport { parseCanonicalAmount } from '../x402/amount';\nimport { createX402PaymentProvider, DEFAULT_IDS } from '../x402/provider';\nimport { computeReplayKey } from '../x402/replay-key';\nimport {\n  MPP_DEFAULT_NETWORK,\n  MPP_DEFAULT_PAYMENT_FLOW,\n  MPP_PROFILE,\n  MPP_SPEC_DRAFTS,\n} from './constants';\nimport {\n  bindingMismatch,\n  decodeCredential,\n  sameAddress,\n  toX402Submission,\n  verificationReason,\n} from './credential';\nimport { MPP_DESCRIPTOR } from './descriptor';\nimport {\n  configInvalid,\n  type MppChallengeOptions,\n  type MppProviderOptions,\n  type NonceUsedReader,\n  validateOptions,\n} from './options';\nimport { CONTENT_DIGEST_METADATA_KEY } from './transport';\n\nconst DEFAULT_CHALLENGE_TTL_SECONDS = 300;\n\n// The x402 SDK's verify reason for an EIP-3009 nonce already spent on chain\nconst NONCE_ALREADY_USED = 'invalid_exact_evm_nonce_already_used';\n\nconst AUTHORIZATION_STATE_ABI = parseAbi([\n  'function authorizationState(address authorizer, bytes32 nonce) view returns (bool)',\n]);\n\nconst NONCE_READ_TIMEOUT_MS = 5_000;\n\nexport function createMppPaymentProvider(options: MppProviderOptions): PaymentProvider {\n  const { rpcUrl, facilitator, allowMainnet, allowUnauthenticatedFacilitator, logger, ...rest } =\n    options;\n  // Checked first so a bad MPP option is reported as one, not as an x402 error\n  validateOptions(rest);\n  // Built from the same terms, and never registered as a rail, so an MPP-only\n  // deployment needs no x402 configuration\n  const settlement = createX402PaymentProvider({\n    network: options.network ?? MPP_DEFAULT_NETWORK,\n    rpcUrl,\n    asset: options.asset,\n    assetName: options.assetName,\n    assetVersion: options.assetVersion,\n    assetDecimals: MPP_PROFILE.assetDecimals,\n    payTo: options.recipient,\n    facilitator,\n    ...(allowMainnet !== undefined ? { allowMainnet } : {}),\n    ...(allowUnauthenticatedFacilitator !== undefined ? { allowUnauthenticatedFacilitator } : {}),\n    ...(logger !== undefined ? { logger } : {}),\n    ...(options.clock !== undefined ? { clock: options.clock } : {}),\n  });\n  // One attempt: the read only names the reason for a refusal already decided\n  const chain = createPublicClient({\n    transport: http(rpcUrl, { timeout: NONCE_READ_TIMEOUT_MS, retryCount: 0 }),\n  });\n  const nonceUsed: NonceUsedReader = (payer, nonce) =>\n    chain.readContract({\n      address: options.asset,\n      abi: AUTHORIZATION_STATE_ABI,\n      functionName: 'authorizationState',\n      args: [payer, nonce],\n    });\n  return createMppProviderWithSettlement(rest, settlement, nonceUsed);\n}\n\n/**\n * Internal seam: tests inject a settlement provider and the nonce reader. Not\n * exported from the `./mpp` entry.\n */\nexport function createMppProviderWithSettlement(\n  options: MppChallengeOptions,\n  settlement: PaymentProvider,\n  nonceUsed?: NonceUsedReader,\n): PaymentProvider {\n  validateOptions(options);\n  if (settlement.name !== 'x402') {\n    throw configInvalid('MPP settlement must be an x402 payment provider');\n  }\n  const network = options.network ?? MPP_DEFAULT_NETWORK;\n  const chainId = Number(network.split(':')[1]);\n  const clock = options.clock ?? systemClock;\n  const ttlSeconds = options.challengeTtlSeconds ?? DEFAULT_CHALLENGE_TTL_SECONDS;\n  const recipient = getAddress(options.recipient);\n  const asset = getAddress(options.asset);\n  const ids = options.ids ?? DEFAULT_IDS;\n  // The settlement provider's terms are fixed at construction, so one passing\n  // check covers every later challenge\n  let settlementTermsChecked = false;\n\n  // charge() requires a callback even though this provider never invokes the\n  // mppx broadcast path. Settlement is delegated to the x402 provider.\n  const method = charge({\n    currency: asset,\n    recipient,\n    chainId,\n    decimals: MPP_PROFILE.assetDecimals,\n    authorization: { name: options.assetName, version: options.assetVersion },\n    settle: async () => {\n      throw new CommerceError('INTERNAL_ERROR', 'MPP direct broadcast is disabled');\n    },\n  });\n\n  function rejected(requirement: PaymentRequirement, reason: string): PaymentResult {\n    return {\n      status: 'rejected',\n      provider: 'mpp',\n      amount: requirement.amount,\n      currency: requirement.currency,\n      network,\n      asset,\n      rejectionReason: reason,\n    };\n  }\n\n  async function createRequirement(context: PaymentContext): Promise<PaymentRequirement> {\n    if (context.currency !== MPP_PROFILE.assetSymbol) {\n      throw configInvalid(\n        `Resource \"${context.resource.id}\" is priced in ${context.currency}, but MPP charges ${MPP_PROFILE.assetSymbol}`,\n      );\n    }\n    // Strict parse first: mppx converts with viem's parseUnits, which rounds\n    // excess precision instead of refusing it\n    if (parseCanonicalAmount(context.amount, MPP_PROFILE.assetDecimals) <= 0n) {\n      throw new CommerceError('PAYMENT_INVALID', `Amount \"${context.amount}\" must be above zero`, {\n        details: { amount: context.amount },\n      });\n    }\n    // Reject a mismatched settlement requirement before the buyer signs\n    if (!settlementTermsChecked) {\n      await settlementRequirement(context);\n      settlementTermsChecked = true;\n    }\n    const paymentFlow =\n      options.resourcePaymentFlows?.[context.resource.id] ??\n      options.paymentFlow ??\n      MPP_DEFAULT_PAYMENT_FLOW;\n    // mppx signs `validBefore` at this expiry. Under `authorization`, the\n    // backend must finish before then for settlement to proceed.\n    const expires = new Date(clock.now().getTime() + ttlSeconds * 1000);\n    const digest = context.metadata?.[CONTENT_DIGEST_METADATA_KEY];\n    const challenge = Challenge.fromMethod(Methods.charge, {\n      secretKey: options.challengeSecret,\n      realm: options.realm,\n      expires,\n      // Present for an HTTP request with a body. MCP and A2A carry the proof\n      // in the body itself, so their challenges bind none.\n      ...(typeof digest === 'string' ? { digest } : {}),\n      // Bound by the challenge HMAC, so a challenge for one resource cannot pay\n      // for another at the same price\n      meta: { resource: context.resource.id },\n      request: {\n        amount: context.amount,\n        currency: asset,\n        recipient,\n        chainId,\n        decimals: MPP_PROFILE.assetDecimals,\n        credentialTypes: [MPP_PROFILE.credentialType],\n      },\n    });\n    return {\n      id: ids.next('payreq'),\n      requestId: context.requestId,\n      resourceId: context.resource.id,\n      provider: 'mpp',\n      amount: context.amount,\n      currency: context.currency,\n      destination: recipient,\n      network,\n      asset,\n      expiresAt: expires.toISOString(),\n      challenge: {\n        provider: 'mpp',\n        version: MPP_SPEC_DRAFTS.core,\n        accepts: [challenge],\n        // Build both carrier forms here because the HTTP route and MCP\n        // adapter cannot import mppx: a header value for HTTP and challenge\n        // objects for MCP\n        envelope: { wwwAuthenticate: Challenge.serialize(challenge), challenges: [challenge] },\n      },\n      metadata: { [SETTLE_AFTER_BACKEND_METADATA_KEY]: paymentFlow === 'authorization' },\n    };\n  }\n\n  async function verify(context: PaymentVerificationContext): Promise<PaymentResult> {\n    const { requirement, resource, submission } = context;\n    if (requirement.provider !== 'mpp' || requirement.challenge.provider !== 'mpp') {\n      return rejected(requirement, 'wrong_provider');\n    }\n    const issued = requirement.challenge.accepts[0] as Challenge.Challenge | undefined;\n    if (!issued) return rejected(requirement, 'missing_challenge');\n\n    let credential: Credential.Credential;\n    try {\n      credential = decodeCredential(submission.payload);\n    } catch {\n      return rejected(requirement, 'malformed_credential');\n    }\n    const echoed = credential.challenge;\n\n    // A valid HMAC means this gateway issued the challenge, not that it was\n    // issued for this resource and price. The binding checks below close that gap.\n    if (!Challenge.verify(echoed, { secretKey: options.challengeSecret })) {\n      return rejected(requirement, 'challenge_not_issued');\n    }\n    const binding = bindingMismatch(echoed, issued, resource.id);\n    if (binding) return rejected(requirement, binding);\n    if (!echoed.expires || new Date(echoed.expires).getTime() <= clock.now().getTime()) {\n      return rejected(requirement, 'challenge_expired');\n    }\n    if ((credential.payload as { type?: unknown } | null)?.type !== MPP_PROFILE.credentialType) {\n      return rejected(requirement, 'unsupported_credential');\n    }\n\n    // Local checks only: signature recovery, nonce == challenge hash, the\n    // validity window and payload terms. With no network call involved, any\n    // failure here is a verdict on the credential, not an outage.\n    let payer: `0x${string}`;\n    try {\n      const validation = await Method.validateCredential([method], credential);\n      payer = getAddress((validation.details as { payer: string }).payer);\n    } catch (error) {\n      return rejected(requirement, verificationReason(error));\n    }\n\n    // validateCredential proved it equals the 32-byte challenge hash\n    const nonce = (credential.payload as Types.AuthorizationPayload).nonce as `0x${string}`;\n    // Match x402's key so the same authorization collides across both rails\n    const replayKey = computeReplayKey({ chainId, asset, from: payer, nonce });\n\n    // The facilitator check runs before the pipeline reserves the replay key,\n    // so an outage throws the x402 provider's retryable error and uses up\n    // nothing, and a refusal is an ordinary rejection\n    const x402Verification = await settlement.verify(\n      await toX402Context(context, credential.payload as Types.AuthorizationPayload),\n    );\n    if (x402Verification.status !== 'verified') {\n      // A spent challenge-hash nonce means the challenge was used. Check\n      // the token when the facilitator reports only a simulation failure;\n      // keep its reason if the token read fails.\n      const reason = x402Verification.rejectionReason;\n      const spent =\n        reason === NONCE_ALREADY_USED ||\n        ((await nonceUsed?.(payer, nonce).catch(() => false)) ?? false);\n      return rejected(\n        requirement,\n        spent ? 'challenge_already_used' : (reason ?? 'settlement_rejected'),\n      );\n    }\n    // A different key would settle an authorization the pipeline did not reserve\n    if (x402Verification.replayKey !== replayKey) {\n      return rejected(requirement, 'settlement_mismatch');\n    }\n\n    return {\n      status: 'verified',\n      provider: 'mpp',\n      payer,\n      payee: recipient,\n      amount: requirement.amount,\n      currency: requirement.currency,\n      network,\n      asset,\n      replayKey,\n    };\n  }\n\n  // The same payment as an x402 requirement and `exact` submission\n  async function toX402Context(\n    context: PaymentVerificationContext,\n    authorization: Types.AuthorizationPayload,\n  ): Promise<PaymentVerificationContext> {\n    const { requestId, requirement, resource } = context;\n    const x402Requirement = await settlementRequirement({\n      requestId,\n      resource,\n      amount: requirement.amount,\n      currency: requirement.currency,\n      requestedAt: clock.nowIso(),\n    });\n    return {\n      requestId,\n      resource,\n      requirement: x402Requirement,\n      submission: toX402Submission(x402Requirement, authorization),\n    };\n  }\n\n  async function settlementRequirement(context: PaymentContext): Promise<PaymentRequirement> {\n    const x402 = await settlement.createRequirement(context);\n    const extra = (x402.challenge.accepts[0]?.['extra'] ?? {}) as Record<string, unknown>;\n    if (\n      x402.network !== network ||\n      !sameAddress(x402.asset, asset) ||\n      !sameAddress(x402.destination, recipient) ||\n      extra['name'] !== options.assetName ||\n      extra['version'] !== options.assetVersion\n    ) {\n      throw configInvalid(\n        'MPP settlement provider must use the same network, asset, EIP-712 domain and recipient',\n      );\n    }\n    return x402;\n  }\n\n  async function settle(context: PaymentSettlementContext): Promise<PaymentResult> {\n    const { requestId, requirement, resource, submission, verification } = context;\n    if (verification.status !== 'verified' || verification.replayKey === undefined) {\n      throw new CommerceError(\n        'PAYMENT_INVALID',\n        'MPP settle() called without a successful verify()',\n      );\n    }\n\n    // verify() already ran the facilitator check, and the facilitator checks\n    // again before broadcasting. A throw may follow a broadcast, so it\n    // propagates and the pipeline marks the payment uncertain.\n    const credential = decodeCredential(submission.payload);\n    const authorization = credential.payload as Types.AuthorizationPayload;\n    const settled = await settlement.settle({\n      ...(await toX402Context({ requestId, requirement, resource, submission }, authorization)),\n      verification: { ...verification, provider: 'x402' },\n    });\n    const result: PaymentResult = {\n      ...settled,\n      provider: 'mpp',\n      amount: requirement.amount,\n      currency: requirement.currency,\n      replayKey: verification.replayKey,\n    };\n    if (settled.status !== 'settled' || settled.externalReference === undefined) return result;\n    // Include the EVM method's `challengeId` and `chainId` in the receipt\n    // sent through the HTTP `Payment-Receipt` header\n    const fields: Receipt.Receipt & { challengeId: string; chainId: number } = {\n      method: MPP_PROFILE.method,\n      reference: settled.externalReference,\n      status: 'success',\n      timestamp: settled.settledAt ?? clock.nowIso(),\n      challengeId: credential.challenge.id,\n      chainId,\n    };\n    const receipt = Receipt.from(fields);\n    return { ...result, metadata: { ...settled.metadata, receipt: Receipt.serialize(receipt) } };\n  }\n\n  function health(): Promise<AdapterHealth> {\n    return settlement.health();\n  }\n\n  return { name: 'mpp', descriptor: MPP_DESCRIPTOR, createRequirement, verify, settle, health };\n}\n\nexport type { MppProviderOptions, NonceUsedReader } from './options';\n"]}