@devlab.group/agent-commerce 2.1.0 → 2.2.0

package/dist/cli/chunk-SS3QFF5N.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/storage/receipts/redact.ts","../../src/storage/receipts/rows.ts","../../src/storage/receipts/schema.ts","../../src/storage/receipts/store.ts","../../src/protocols/a2a/constants.ts","../../src/protocols/a2a/descriptor.ts","../../src/protocols/acp/descriptor.ts"],"names":["fsConstants","buildDescriptor"],"mappings":";;;;;;;;AAWA,IAAM,kBAAA,GACJ,iOAAA;AAEF,IAAM,QAAA,GAAW,YAAA;AAGV,SAAS,YAAY,GAAA,EAAsB;AAChD,EAAA,OAAO,kBAAA,CAAmB,KAAK,GAAG,CAAA;AACpC;AAMO,SAAS,OAAU,KAAA,EAAa;AACrC,EAAA,OAAO,YAAY,KAAK,CAAA;AAC1B;AAEA,SAAS,YAAY,KAAA,EAAyB;AAC5C,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,IAAA,OAAO,KAAA,CAAM,IAAI,WAAW,CAAA;AAAA,EAC9B;AACA,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,EAAU;AAC/C,IAAA,MAAM,MAA+B,EAAC;AACtC,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAgC,CAAA,EAAG;AAC3E,MAAA,GAAA,CAAI,GAAG,CAAA,GAAI,WAAA,CAAY,GAAG,CAAA,GAAI,QAAA,GAAW,YAAY,KAAK,CAAA;AAAA,IAC5D;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,OAAO,KAAA;AACT;;;ACgBO,SAAS,aAAa,OAAA,EAW3B;AACA,EAAA,OAAO;AAAA,IACL,IAAI,OAAA,CAAQ,EAAA;AAAA,IACZ,YAAY,OAAA,CAAQ,SAAA;AAAA,IACpB,aAAa,OAAA,CAAQ,UAAA;AAAA,IACrB,YAAA,EAAc,OAAA,CAAQ,OAAA,KAAY,MAAA,GAAY,IAAA,CAAK,UAAU,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAC,CAAA,GAAI,IAAA;AAAA,IACxF,cAAc,OAAA,CAAQ,WAAA;AAAA,IACtB,gBAAgB,OAAA,CAAQ,aAAA;AAAA,IACxB,WAAA,EAAa,QAAQ,UAAA,IAAc,IAAA;AAAA,IACnC,QAAA,EAAU,QAAQ,QAAA,IAAY,IAAA;AAAA,IAC9B,aAAA,EAAe,OAAA,CAAQ,QAAA,KAAa,MAAA,GAAY,IAAA,CAAK,UAAU,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAC,CAAA,GAAI,IAAA;AAAA,IAC3F,kBAAA,EACE,OAAA,CAAQ,aAAA,KAAkB,MAAA,GAAY,IAAA,CAAK,UAAU,MAAA,CAAO,OAAA,CAAQ,aAAa,CAAC,CAAA,GAAI;AAAA,GAC1F;AACF;AAEO,SAAS,aAAa,GAAA,EAAkC;AAC7D,EAAA,MAAM,OAAA,GACJ,IAAI,YAAA,KAAiB,IAAA,GAAQ,KAAK,KAAA,CAAM,GAAA,CAAI,YAAY,CAAA,GAAsB,MAAA;AAChF,EAAA,MAAM,QAAA,GACJ,IAAI,aAAA,KAAkB,IAAA,GACjB,KAAK,KAAA,CAAM,GAAA,CAAI,aAAa,CAAA,GAC7B,MAAA;AAGN,EAAA,MAAM,aAAA,GACJ,IAAI,kBAAA,KAAuB,IAAA,GACtB,KAAK,KAAA,CAAM,GAAA,CAAI,kBAAkB,CAAA,GAClC,MAAA;AACN,EAAA,OAAO;AAAA,IACL,IAAI,GAAA,CAAI,EAAA;AAAA,IACR,WAAW,GAAA,CAAI,UAAA;AAAA,IACf,YAAY,GAAA,CAAI,WAAA;AAAA,IAChB,aAAa,GAAA,CAAI,YAAA;AAAA,IACjB,eAAe,GAAA,CAAI,cAAA;AAAA,IACnB,GAAI,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,KAAY,EAAC;AAAA,IAC3C,GAAI,IAAI,WAAA,KAAgB,IAAA,GAAO,EAAE,UAAA,EAAY,GAAA,CAAI,WAAA,EAAY,GAAI,EAAC;AAAA,IAClE,GAAI,IAAI,QAAA,KAAa,IAAA,GAAO,EAAE,QAAA,EAAU,GAAA,CAAI,QAAA,EAAS,GAAI,EAAC;AAAA,IAC1D,GAAI,QAAA,KAAa,MAAA,GAAY,EAAE,QAAA,KAAa,EAAC;AAAA,IAC7C,GAAI,aAAA,KAAkB,MAAA,GAAY,EAAE,aAAA,KAAkB;AAAC,GACzD;AACF;AAEO,SAAS,WAAW,KAAA,EAWzB;AACA,EAAA,OAAO;AAAA,IACL,IAAI,KAAA,CAAM,EAAA;AAAA,IACV,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,YAAY,KAAA,CAAM,SAAA;AAAA,IAClB,WAAA,EAAa,MAAM,UAAA,IAAc,IAAA;AAAA,IACjC,IAAI,KAAA,CAAM,EAAA;AAAA,IACV,OAAA,EAAS,MAAM,OAAA,IAAW,IAAA;AAAA,IAC1B,gBAAA,EAAkB,MAAM,eAAA,IAAmB,IAAA;AAAA,IAC3C,WAAA,EAAa,MAAM,UAAA,IAAc,IAAA;AAAA,IACjC,MAAA,EAAQ,MAAM,MAAA,IAAU,IAAA;AAAA,IACxB,SAAA,EAAW,KAAA,CAAM,IAAA,KAAS,MAAA,GAAY,IAAA,CAAK,UAAU,MAAA,CAAO,KAAA,CAAM,IAAI,CAAC,CAAA,GAAI;AAAA,GAC7E;AACF;AAEO,SAAS,WAAW,GAAA,EAA8B;AACvD,EAAA,MAAM,IAAA,GACJ,IAAI,SAAA,KAAc,IAAA,GAAQ,KAAK,KAAA,CAAM,GAAA,CAAI,SAAS,CAAA,GAAgC,MAAA;AACpF,EAAA,OAAO;AAAA,IACL,IAAI,GAAA,CAAI,EAAA;AAAA,IACR,MAAM,GAAA,CAAI,IAAA;AAAA,IACV,WAAW,GAAA,CAAI,UAAA;AAAA,IACf,IAAI,GAAA,CAAI,EAAA;AAAA,IACR,GAAI,IAAI,WAAA,KAAgB,IAAA,GAAO,EAAE,UAAA,EAAY,GAAA,CAAI,WAAA,EAAY,GAAI,EAAC;AAAA,IAClE,GAAI,IAAI,OAAA,KAAY,IAAA,GAAO,EAAE,OAAA,EAAS,GAAA,CAAI,OAAA,EAAQ,GAAI,EAAC;AAAA,IACvD,GAAI,IAAI,gBAAA,KAAqB,IAAA,GAAO,EAAE,eAAA,EAAiB,GAAA,CAAI,gBAAA,EAAiB,GAAI,EAAC;AAAA,IACjF,GAAI,IAAI,WAAA,KAAgB,IAAA,GAAO,EAAE,UAAA,EAAY,GAAA,CAAI,WAAA,EAAY,GAAI,EAAC;AAAA,IAClE,GAAI,IAAI,MAAA,KAAW,IAAA,GAAO,EAAE,MAAA,EAAQ,GAAA,CAAI,MAAA,EAAyB,GAAI,EAAC;AAAA,IACtE,GAAI,IAAA,KAAS,MAAA,GAAY,EAAE,IAAA,KAAS;AAAC,GACvC;AACF;AAEO,SAAS,oBAAoB,GAAA,EAAwC;AAC1E,EAAA,OAAO;AAAA,IACL,IAAI,GAAA,CAAI,EAAA;AAAA,IACR,WAAW,GAAA,CAAI,UAAA;AAAA,IACf,YAAY,GAAA,CAAI,WAAA;AAAA,IAChB,UAAU,GAAA,CAAI,QAAA;AAAA,IACd,WAAW,GAAA,CAAI,UAAA;AAAA,IACf,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,QAAQ,GAAA,CAAI,MAAA;AAAA,IACZ,UAAU,GAAA,CAAI,QAAA;AAAA,IACd,GAAI,IAAI,KAAA,KAAU,IAAA,GAAO,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI,EAAC;AAAA,IACjD,GAAI,IAAI,KAAA,KAAU,IAAA,GAAO,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI,EAAC;AAAA,IACjD,GAAI,IAAI,kBAAA,KAAuB,IAAA,GAAO,EAAE,iBAAA,EAAmB,GAAA,CAAI,kBAAA,EAAmB,GAAI,EAAC;AAAA,IACvF,GAAI,IAAI,gBAAA,KAAqB,IAAA,GAAO,EAAE,eAAA,EAAiB,GAAA,CAAI,gBAAA,EAAiB,GAAI,EAAC;AAAA,IACjF,WAAW,GAAA,CAAI,UAAA;AAAA,IACf,WAAW,GAAA,CAAI;AAAA,GACjB;AACF;;;AChKA,IAAM,UAAA,GAAmC;AAAA,EACvC;AAAA,IACE,OAAA,EAAS,CAAA;AAAA,IACT,GAAG,EAAA,EAAI;AACL,MAAA,EAAA,CAAG,IAAA,CAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAAA,CAmDP,CAAA;AAAA,IACH;AAAA,GACF;AAAA,EACA;AAAA,IACE,OAAA,EAAS,CAAA;AAAA,IACT,GAAG,EAAA,EAAI;AAGL,MAAA,EAAA,CAAG,KAAK,CAAA,wDAAA,CAA0D,CAAA;AAAA,IACpE;AAAA,GACF;AAAA,EACA;AAAA,IACE,OAAA,EAAS,CAAA;AAAA,IACT,GAAG,EAAA,EAAI;AAIL,MAAA,EAAA,CAAG,IAAA,CAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAAA,CAqBP,CAAA;AAAA,IACH;AAAA;AAEJ,CAAA;AAGO,IAAM,cAAA,GAAiB,UAAA,CAAW,EAAA,CAAG,EAAE,GAAG,OAAA,IAAW,CAAA;AAMrD,SAAS,QAAQ,EAAA,EAA6B;AACnD,EAAA,MAAM,UAAU,EAAA,CAAG,MAAA,CAAO,gBAAgB,EAAE,MAAA,EAAQ,MAAM,CAAA;AAC1D,EAAA,KAAA,MAAW,aAAa,UAAA,EAAY;AAClC,IAAA,IAAI,SAAA,CAAU,WAAW,OAAA,EAAS;AAClC,IAAA,MAAM,KAAA,GAAQ,EAAA,CAAG,WAAA,CAAY,MAAM;AACjC,MAAA,SAAA,CAAU,GAAG,EAAE,CAAA;AACf,MAAA,EAAA,CAAG,MAAA,CAAO,CAAA,eAAA,EAAkB,SAAA,CAAU,OAAO,CAAA,CAAE,CAAA;AAAA,IACjD,CAAC,CAAA;AACD,IAAA,KAAA,EAAM;AAAA,EACR;AACF;;;ACxFA,IAAM,kBAAA,GAAqB,EAAA;AAM3B,IAAM,cAAA,GAAiB,GAAA;AAKvB,SAAS,eAAe,KAAA,EAAmC;AACzD,EAAA,MAAM,OAAO,KAAA,KAAU,MAAA,IAAa,OAAO,QAAA,CAAS,KAAK,IAAI,KAAA,GAAQ,kBAAA;AACrE,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,MAAM,IAAI,CAAA,EAAG,CAAC,CAAA,EAAG,cAAc,CAAA;AAC/D;AAUA,IAAM,UAAA,GAA0B;AAAA,EAC9B,IAAA,EAAM,CAAC,MAAA,KAAY,MAAA,KAAW,MAAA,GAAY,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,UAAA,EAAY,CAAA,CAAA,GAAK,UAAA;AAC1E,CAAA;AAEA,SAAS,oBAAA,CAAqB,KAAc,MAAA,EAAyB;AACnE,EAAA,OACE,GAAA,YAAe,KAAA,IACf,MAAA,IAAU,GAAA,IACT,GAAA,CAA2B,SAAS,0BAAA,IACrC,GAAA,CAAI,OAAA,CAAQ,QAAA,CAAS,MAAM,CAAA;AAE/B;AAEO,SAAS,yBAAyB,OAAA,EAAkD;AACzF,EAAA,MAAM,MAAA,GAAS,QAAQ,MAAA,IAAU,WAAA;AACjC,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,WAAA;AAC/B,EAAA,MAAM,GAAA,GAAM,QAAQ,GAAA,IAAO,UAAA;AAC3B,EAAA,MAAM,OAAO,OAAA,CAAQ,IAAA;AACrB,EAAA,MAAM,eAAe,IAAA,KAAS,UAAA;AAI9B,EAAA,MAAM,KAAK,kBAAA,CAAmB,EAAE,MAAM,KAAA,EAAO,kBAAA,EAAoB,QAAQ,CAAA;AACzE,EAAA,OAAA,CAAQ,EAAE,CAAA;AAEV,EAAA,MAAM,oBAAoB,EAAA,CAAG,OAAA;AAAA,IAC3B,CAAA;AAAA,yJAAA;AAAA,GAEF;AACA,EAAA,MAAM,cAAA,GAAiB,EAAA,CAAG,OAAA,CAA8B,qCAAqC,CAAA;AAC7F,EAAA,MAAM,mBAAmB,EAAA,CAAG,OAAA;AAAA,IAC1B;AAAA,GACF;AACA,EAAA,MAAM,4BAA4B,EAAA,CAAG,OAAA;AAAA,IACnC;AAAA,GACF;AACA,EAAA,MAAM,oBAAoB,EAAA,CAAG,OAAA;AAAA,IAC3B;AAAA,GACF;AAIA,EAAA,MAAM,+BAA+B,EAAA,CAAG,OAAA;AAAA,IACtC;AAAA,GACF;AAEA,EAAA,MAAM,kBAAkB,EAAA,CAAG,OAAA;AAAA,IACzB,CAAA;AAAA,wHAAA;AAAA,GAEF;AACA,EAAA,MAAM,iBAAiB,EAAA,CAAG,OAAA;AAAA,IACxB;AAAA,GACF;AACA,EAAA,MAAM,0BAA0B,EAAA,CAAG,OAAA;AAAA,IACjC;AAAA,GACF;AAEA,EAAA,MAAM,2BAA2B,EAAA,CAAG,OAAA;AAAA,IAClC,CAAA;AAAA;AAAA,gBAAA;AAAA,GAGF;AAEA,EAAA,MAAM,6BAA6B,EAAA,CAAG,OAAA;AAAA,IACpC,CAAA;AAAA;AAAA;AAAA,oFAAA;AAAA,GAIF;AACA,EAAA,MAAM,4BAA4B,EAAA,CAAG,OAAA;AAAA,IACnC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gBAAA;AAAA,GAMF;AAMA,EAAA,MAAM,2BAA2B,EAAA,CAAG,OAAA;AAAA,IAClC,CAAA;AAAA;AAAA;AAAA;AAAA,mCAAA;AAAA,GAKF;AACA,EAAA,MAAM,0BAA0B,EAAA,CAAG,OAAA;AAAA,IACjC;AAAA,GACF;AACA,EAAA,MAAM,mCAAmC,EAAA,CAAG,OAAA;AAAA,IAC1C;AAAA,GACF;AACA,EAAA,MAAM,2BAA2B,EAAA,CAAG,OAAA;AAAA,IAClC;AAAA,GACF;AAIA,EAAA,MAAM,yBAAyB,EAAA,CAAG,WAAA;AAAA,IAChC,CAAC,MAAA,KAAmE;AAClE,MAAA,0BAAA,CAA2B,IAAI,MAAM,CAAA;AACrC,MAAA,OAAO,yBAAA,CAA0B,IAAI,MAAM,CAAA;AAAA,IAC7C;AAAA,GACF;AAEA,EAAA,IAAI,MAAA,GAAS,KAAA;AAEb,EAAA,MAAM,UAAA,GAAgC;AAAA,IACpC,IAAA,EAAM,sBAAA;AAAA,IACN,IAAA,EAAM,SAAA;AAAA,IACN,qBAAA,EAAuB,eAAA;AAAA,IACvB,aAAA,EAAe,kBAAkB,cAAc,CAAA,CAAA;AAAA,IAC/C,YAAA,EAAc,CAAC,UAAA,EAAY,QAAA,EAAU,kBAAkB,CAAA;AAAA,IACvD,MAAA,EAAQ;AAAA,GACV;AAEA,EAAA,MAAM,KAAA,GAAsB;AAAA,IAC1B,MAAM,IAAA,GAAsB;AAG1B,MAAA,MAAM,UAAU,EAAA,CAAG,MAAA,CAAO,gBAAgB,EAAE,MAAA,EAAQ,MAAM,CAAA;AAC1D,MAAA,IAAI,YAAY,cAAA,EAAgB;AAC9B,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,eAAA;AAAA,UACA,CAAA,6CAAA,EAAgD,OAAO,CAAA,WAAA,EAAc,cAAc,CAAA,CAAA;AAAA,SACrF;AAAA,MACF;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,YAAY,KAAA,EAAqC;AACrD,MAAA,IAAI;AACF,QAAA,eAAA,CAAgB,GAAA,CAAI,UAAA,CAAW,KAAK,CAAC,CAAA;AAAA,MACvC,SAAS,GAAA,EAAK;AACZ,QAAA,MAAA,CAAO,IAAA;AAAA,UACL;AAAA,YACE,KAAK,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAAA,YACpD,SAAS,KAAA,CAAM,EAAA;AAAA,YACf,WAAW,KAAA,CAAM;AAAA,WACnB;AAAA,UACA;AAAA,SACF;AAAA,MACF;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,sBAAsB,WAAA,EAAiE;AAC3F,MAAA,MAAM,GAAA,GAAM,MAAM,MAAA,EAAO;AACzB,MAAA,MAAM,MAAA,GAAS;AAAA,QACb,EAAA,EAAI,GAAA,CAAI,IAAA,CAAK,SAAS,CAAA;AAAA,QACtB,YAAY,WAAA,CAAY,SAAA;AAAA,QACxB,aAAa,WAAA,CAAY,UAAA;AAAA,QACzB,UAAU,WAAA,CAAY,QAAA;AAAA,QACtB,YAAY,WAAA,CAAY,SAAA;AAAA,QACxB,QAAQ,WAAA,CAAY,MAAA;AAAA,QACpB,UAAU,WAAA,CAAY,QAAA;AAAA,QACtB,KAAA,EAAO,YAAY,KAAA,IAAS,IAAA;AAAA,QAC5B,KAAA,EAAO,YAAY,KAAA,IAAS,IAAA;AAAA,QAC5B,UAAA,EAAY,GAAA;AAAA,QACZ,UAAA,EAAY;AAAA,OACd;AACA,MAAA,IAAI,GAAA;AACJ,MAAA,IAAI;AAIF,QAAA,GAAA,GAAA,CACG,YAAY,eAAA,KAAoB,IAAA,GAC7B,sBAAA,CAAuB,SAAA,CAAU,MAAM,CAAA,GACvC,KAAA,CAAA;AAAA,QAEH,yBAAyB,GAAA,CAAI;AAAA,UAC5B,GAAG,MAAA;AAAA,UACH,MAAA,EAAQ,UAAA;AAAA,UACR,kBAAA,EAAoB,IAAA;AAAA,UACpB,gBAAA,EAAkB;AAAA,SACnB,CAAA;AAAA,MACL,SAAS,GAAA,EAAK;AACZ,QAAA,IAAI,oBAAA,CAAqB,GAAA,EAAK,6BAA6B,CAAA,EAAG;AAE5D,UAAA,MAAM,QAAA,GAAW,wBAAA,CAAyB,GAAA,CAAI,WAAA,CAAY,SAAS,CAAA;AACnE,UAAA,MAAM,IAAI,aAAA;AAAA,YACR,kBAAA;AAAA,YACA,CAAA,uDAAA,EAA0D,YAAY,SAAS,CAAA,CAAA,CAAA;AAAA,YAC/E;AAAA,cACE,WAAW,WAAA,CAAY,SAAA;AAAA,cACvB,YAAY,WAAA,CAAY,UAAA;AAAA,cACxB,GAAI,QAAA,KAAa,MAAA,GAAY,EAAE,OAAA,EAAS,EAAE,aAAA,EAAe,QAAA,CAAS,MAAA,EAAO,EAAE,GAAI;AAAC;AAClF,WACF;AAAA,QACF;AACA,QAAA,MAAM,eAAA,CAAgB,GAAA,EAAK,eAAA,EAAiB,mCAAmC,CAAA;AAAA,MACjF;AACA,MAAA,OAAO,oBAAoB,GAAG,CAAA;AAAA,IAChC,CAAA;AAAA,IAEA,MAAM,qBAAqB,MAAA,EAA6C;AACtE,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,yBAAyB,GAAA,CAAI;AAAA,UAC1C,YAAY,MAAA,CAAO,SAAA;AAAA,UACnB,QAAQ,MAAA,CAAO,MAAA;AAAA,UACf,kBAAA,EAAoB,OAAO,iBAAA,IAAqB,IAAA;AAAA,UAChD,gBAAA,EAAkB,OAAO,eAAA,IAAmB,IAAA;AAAA,UAC5C,UAAA,EAAY,MAAM,MAAA;AAAO,SAC1B,CAAA;AACD,QAAA,IAAI,MAAA,CAAO,YAAY,CAAA,EAAG;AACxB,UAAA,MAAM,IAAI,aAAA;AAAA,YACR,eAAA;AAAA,YACA,CAAA,uCAAA,EAA0C,OAAO,SAAS,CAAA;AAAA,WAC5D;AAAA,QACF;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,eAAA,CAAgB,GAAA,EAAK,eAAA,EAAiB,kCAAkC,CAAA;AAAA,MAChF;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,YAAY,OAAA,EAAyC;AACzD,MAAA,IAAI;AACF,QAAA,iBAAA,CAAkB,GAAA,CAAI,YAAA,CAAa,OAAO,CAAC,CAAA;AAAA,MAC7C,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,eAAA,CAAgB,GAAA,EAAK,eAAA,EAAiB,wBAAwB,CAAA;AAAA,MACtE;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,WAAW,EAAA,EAAkD;AACjE,MAAA,MAAM,GAAA,GAAM,cAAA,CAAe,GAAA,CAAI,EAAE,CAAA;AACjC,MAAA,OAAO,GAAA,KAAQ,MAAA,GAAY,YAAA,CAAa,GAAG,CAAA,GAAI,MAAA;AAAA,IACjD,CAAA;AAAA,IAEA,MAAM,YAAA,CAAa,WAAA,GAA2B,EAAC,EAAwC;AACrF,MAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,WAAA,CAAY,KAAK,CAAA;AAC9C,MAAA,MAAM,IAAA,GACJ,WAAA,CAAY,SAAA,KAAc,MAAA,GACtB,yBAAA,CAA0B,GAAA,CAAI,WAAA,CAAY,SAAA,EAAW,KAAK,CAAA,GAC1D,gBAAA,CAAiB,GAAA,CAAI,KAAK,CAAA;AAChC,MAAA,OAAO,IAAA,CAAK,IAAI,YAAY,CAAA;AAAA,IAC9B,CAAA;AAAA;AAAA,IAGA,MAAM,aAAA,GAAiC;AACrC,MAAA,OAAO,iBAAA,CAAkB,GAAA,EAAI,EAAG,KAAA,IAAS,CAAA;AAAA,IAC3C,CAAA;AAAA;AAAA,IAGA,MAAM,wBAAA,GAA4C;AAChD,MAAA,OAAO,4BAAA,CAA6B,GAAA,EAAI,EAAG,KAAA,IAAS,CAAA;AAAA,IACtD,CAAA;AAAA,IAEA,MAAM,UAAA,CAAW,WAAA,GAA2B,EAAC,EAAsC;AACjF,MAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,WAAA,CAAY,KAAK,CAAA;AAC9C,MAAA,MAAM,IAAA,GACJ,WAAA,CAAY,SAAA,KAAc,MAAA,GACtB,uBAAA,CAAwB,GAAA,CAAI,WAAA,CAAY,SAAA,EAAW,KAAK,CAAA,GACxD,cAAA,CAAe,GAAA,CAAI,KAAK,CAAA;AAC9B,MAAA,OAAO,IAAA,CAAK,IAAI,UAAU,CAAA;AAAA,IAC5B,CAAA;AAAA,IAEA,MAAM,mBAAA,CAAoB,WAAA,GAA2B,EAAC,EAAuC;AAC3F,MAAA,MAAM,KAAA,GAAQ,cAAA,CAAe,WAAA,CAAY,KAAK,CAAA;AAC9C,MAAA,MAAM,IAAA,GACJ,WAAA,CAAY,SAAA,KAAc,MAAA,GACtB,gCAAA,CAAiC,GAAA,CAAI,WAAA,CAAY,SAAA,EAAW,KAAK,CAAA,GACjE,uBAAA,CAAwB,GAAA,CAAI,KAAK,CAAA;AACvC,MAAA,OAAO,IAAA,CAAK,IAAI,mBAAmB,CAAA;AAAA,IACrC,CAAA;AAAA,IAEA,UAAA;AAAA,IAEA,MAAM,MAAA,GAAiC;AAKrC,MAAA,MAAM,SAAA,GAAY,MAAM,WAAA,EAAY;AACpC,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,OAAO,EAAE,QAAQ,MAAA,EAAQ,MAAA,EAAQ,qBAAqB,SAAA,EAAW,KAAA,CAAM,QAAO,EAAE;AAAA,MAClF;AACA,MAAA,IAAI,YAAA,EAAc;AAChB,QAAA,IAAI;AACF,UAAA,UAAA,CAAW,IAAA,EAAMA,UAAY,IAAI,CAAA;AAAA,QACnC,SAAS,GAAA,EAAK;AACZ,UAAA,MAAA,CAAO,IAAA;AAAA,YACL,EAAE,KAAK,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAE;AAAA,YACxD;AAAA,WACF;AACA,UAAA,OAAO;AAAA,YACL,MAAA,EAAQ,MAAA;AAAA,YACR,MAAA,EAAQ,kBAAA;AAAA,YACR,SAAA,EAAW,MAAM,MAAA,EAAO;AAAA,YACxB,UAAA,EAAY,KAAA,CAAM,WAAA,EAAY,GAAI;AAAA,WACpC;AAAA,QACF;AAAA,MACF;AACA,MAAA,IAAI;AACF,QAAA,MAAM,UAAU,EAAA,CAAG,MAAA,CAAO,gBAAgB,EAAE,MAAA,EAAQ,MAAM,CAAA;AAC1D,QAAA,IAAI,YAAY,cAAA,EAAgB;AAC9B,UAAA,MAAA,CAAO,IAAA;AAAA,YACL,EAAE,KAAA,EAAO,OAAA,EAAS,QAAA,EAAU,cAAA,EAAe;AAAA,YAC3C;AAAA,WACF;AACA,UAAA,OAAO;AAAA,YACL,MAAA,EAAQ,MAAA;AAAA,YACR,MAAA,EAAQ,uBAAA;AAAA,YACR,SAAA,EAAW,MAAM,MAAA,EAAO;AAAA,YACxB,UAAA,EAAY,KAAA,CAAM,WAAA,EAAY,GAAI;AAAA,WACpC;AAAA,QACF;AACA,QAAA,OAAO;AAAA,UACL,MAAA,EAAQ,MAAA;AAAA,UACR,MAAA,EAAQ,kBAAkB,cAAc,CAAA,SAAA,CAAA;AAAA,UACxC,SAAA,EAAW,MAAM,MAAA,EAAO;AAAA,UACxB,UAAA,EAAY,KAAA,CAAM,WAAA,EAAY,GAAI;AAAA,SACpC;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,MAAA,CAAO,IAAA;AAAA,UACL,EAAE,KAAK,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAA,EAAE;AAAA,UACxD;AAAA,SACF;AACA,QAAA,OAAO;AAAA,UACL,MAAA,EAAQ,MAAA;AAAA,UACR,MAAA,EAAQ,mBAAA;AAAA,UACR,SAAA,EAAW,MAAM,MAAA,EAAO;AAAA,UACxB,UAAA,EAAY,KAAA,CAAM,WAAA,EAAY,GAAI;AAAA,SACpC;AAAA,MACF;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,KAAA,GAAuB;AAC3B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,MAAA,GAAS,IAAA;AACT,QAAA,EAAA,CAAG,KAAA,EAAM;AAAA,MACX;AAAA,IACF;AAAA,GACF;AAEA,EAAA,OAAO,KAAA;AACT;;;ACrYO,IAAM,gBAAA,GAAmB;AAGzB,IAAM,oBAAA,GAAuB;AAG7B,IAAM,oBAAA,GAAuB;AAO7B,IAAM,mBAAA,GAAsB;AAG5B,IAAM,sBAAA,GAAyB;AAG/B,IAAM,mBAAA,GAAsB;AAG5B,IAAM,sBAAA,GAAyB;AAM/B,IAAM,kBAAA,GAAqB;AAG3B,IAAM,uBAAA,GAA0B;AAMhC,IAAM,uBAAA,GAA6C;AAAA,EACxD,kCAAA;AAAA,EACA,+BAAA;AAAA,EACA,iCAAA;AAAA,EACA;AACF;AAQO,IAAM,uBAAA,GAA6C;AAAA,EACxD,sBAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA,iBAAA;AAAA,EACA,GAAG,uBAAA;AAAA,EACH;AACF;AAMO,IAAM,uBAAA,GAA6C,CAAC,SAAA,EAAW,YAAY;AAO3E,IAAM,wBAAA,GAA2B;AACjC,IAAM,qBAAA,GAAwB;AAG9B,IAAM,6BAAA,GAAgC;AAGtC,IAAM,qBAAA,GAAwB;;;AC5ErC,IAAM,gBAAA,GAAsC;AAAA,EAC1C,YAAA;AAAA,EACA,SAAA;AAAA,EACA,aAAA;AAAA;AAAA,EAEA;AACF,CAAA;AAOO,IAAM,eAAA,GAAqC;AAAA;AAAA,EAEhD,GAAG,uBAAA;AAAA;AAAA,EAEH,wBAAA;AAAA,EACA,cAAA;AAAA;AAAA,EAEA,KAAA;AAAA,EACA,+BAAA;AAAA,EACA,sDAAA;AAAA,EACA,oBAAA;AAAA,EACA,wCAAA;AAAA,EACA,oCAAA;AAAA,EACA,4BAAA;AAAA,EACA,mDAAA;AAAA;AAAA,EAEA;AACF;AAEO,SAAS,gBAAgB,qBAAA,EAAkD;AAChF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,KAAA;AAAA,IACN,IAAA,EAAM,UAAA;AAAA,IACN,qBAAA;AAAA,IACA,aAAA,EAAe,gBAAA;AAAA,IACf,YAAA,EAAc,gBAAA;AAAA,IACd,MAAA,EAAQ,cAAA;AAAA,IACR,WAAA,EAAa;AAAA,GACf;AACF;;;AC1CA,IAAM,gBAAA,GAAsC;AAAA,EAC1C,gBAAA;AAAA,EACA,sBAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA;AAAA,EAEA,2CAAA;AAAA,EACA,kBAAA;AAAA,EACA,GAAG;AACL,CAAA;AAOO,IAAM,eAAA,GAAqC;AAAA;AAAA;AAAA,EAGhD,eAAA;AAAA,EACA,cAAA;AAAA,EACA,2BAAA;AAAA,EACA,kBAAA;AAAA,EACA,yBAAA;AAAA;AAAA,EAEA,2BAAA;AAAA,EACA,UAAA;AAAA,EACA,qCAAA;AAAA,EACA,iBAAA;AAAA;AAAA,EAEA,+BAAA;AAAA,EACA,sCAAA;AAAA;AAAA,EAEA,oBAAA;AAAA,EACA,iCAAA;AAAA,EACA,2BAAA;AAAA,EACA;AACF;AAEO,SAASC,iBAAgB,qBAAA,EAAkD;AAChF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,KAAA;AAAA,IACN,IAAA,EAAM,UAAA;AAAA,IACN,qBAAA;AAAA,IACA,aAAA,EAAe,gBAAA;AAAA,IACf,YAAA,EAAc,gBAAA;AAAA,IACd,MAAA,EAAQ,cAAA;AAAA,IACR,WAAA,EAAa;AAAA,GACf;AACF","file":"chunk-SS3QFF5N.js","sourcesContent":["/**\n * Defense in depth against persisting secrets. Receipt, event and payment\n * metadata must not carry secrets (docs/contracts.md, \"Store no secrets\"); at\n * the persistence boundary this module replaces secret-shaped values rather\n * than rejecting the write, because event persistence must not break a\n * commerce flow.\n */\n\n// Matches anywhere in the key (only `auth` and `proof` must be the whole key),\n// so an audit field whose name contains \"token\", \"session\", \"jwt\" or similar\n// persists as [REDACTED]\nconst SECRET_KEY_PATTERN =\n  /private[-_ ]?key|secret|password|mnemonic|seed[-_ ]?phrase|api[-_ ]?key|authoriz(e|ation)|^auth$|auth[-_]?header|payment[-_ ]?proof|^proof$|x-payment|signature|signed[-_ ]?message|token|bearer|credential|cookie|session|jwt/i;\n\nconst REDACTED = '[REDACTED]';\n\n/** True if `key` looks like it names a secret value */\nexport function isSecretKey(key: string): boolean {\n  return SECRET_KEY_PATTERN.test(key);\n}\n\n/**\n * Returns a copy with every value under a secret-shaped key replaced, at any\n * depth. Clean input comes back equal to itself.\n */\nexport function redact<T>(value: T): T {\n  return redactValue(value) as T;\n}\n\nfunction redactValue(value: unknown): unknown {\n  if (Array.isArray(value)) {\n    return value.map(redactValue);\n  }\n  if (value !== null && typeof value === 'object') {\n    const out: Record<string, unknown> = {};\n    for (const [key, inner] of Object.entries(value as Record<string, unknown>)) {\n      out[key] = isSecretKey(key) ? REDACTED : redactValue(inner);\n    }\n    return out;\n  }\n  return value;\n}\n","/**\n * SQLite row shapes and their mapping to and from the canonical model. Under\n * `exactOptionalPropertyTypes`, an optional field is set only when present.\n */\nimport type {\n  AuthorizationRecord,\n  CommerceEvent,\n  CommerceEventType,\n  CommerceReceipt,\n  PaymentAttempt,\n  PaymentResult,\n} from '../../core';\nimport { redact } from './redact';\n\nexport interface ReceiptRow {\n  readonly id: string;\n  readonly request_id: string;\n  readonly resource_id: string;\n  readonly payment_json: string | null;\n  readonly delivered_at: string;\n  readonly backend_status: number;\n  readonly duration_ms: number | null;\n  readonly protocol: string | null;\n  readonly metadata_json: string | null;\n  readonly authorization_json: string | null;\n}\n\nexport interface EventRow {\n  readonly id: string;\n  readonly type: string;\n  readonly request_id: string;\n  readonly resource_id: string | null;\n  readonly at: string;\n  readonly adapter: string | null;\n  readonly payment_provider: string | null;\n  readonly duration_ms: number | null;\n  readonly status: string | null;\n  readonly data_json: string | null;\n}\n\nexport interface PaymentAttemptRow {\n  readonly id: string;\n  readonly request_id: string;\n  readonly resource_id: string;\n  readonly provider: string;\n  readonly replay_key: string;\n  readonly status: string;\n  readonly amount: string;\n  readonly currency: string;\n  readonly payer: string | null;\n  readonly payee: string | null;\n  readonly external_reference: string | null;\n  readonly rejection_reason: string | null;\n  readonly created_at: string;\n  readonly updated_at: string;\n}\n\nexport function receiptToRow(receipt: CommerceReceipt): {\n  id: string;\n  request_id: string;\n  resource_id: string;\n  payment_json: string | null;\n  delivered_at: string;\n  backend_status: number;\n  duration_ms: number | null;\n  protocol: string | null;\n  metadata_json: string | null;\n  authorization_json: string | null;\n} {\n  return {\n    id: receipt.id,\n    request_id: receipt.requestId,\n    resource_id: receipt.resourceId,\n    payment_json: receipt.payment !== undefined ? JSON.stringify(redact(receipt.payment)) : null,\n    delivered_at: receipt.deliveredAt,\n    backend_status: receipt.backendStatus,\n    duration_ms: receipt.durationMs ?? null,\n    protocol: receipt.protocol ?? null,\n    metadata_json: receipt.metadata !== undefined ? JSON.stringify(redact(receipt.metadata)) : null,\n    authorization_json:\n      receipt.authorization !== undefined ? JSON.stringify(redact(receipt.authorization)) : null,\n  };\n}\n\nexport function rowToReceipt(row: ReceiptRow): CommerceReceipt {\n  const payment =\n    row.payment_json !== null ? (JSON.parse(row.payment_json) as PaymentResult) : undefined;\n  const metadata =\n    row.metadata_json !== null\n      ? (JSON.parse(row.metadata_json) as Record<string, unknown>)\n      : undefined;\n  // Null for a receipt written before this column existed and for a resource\n  // that requires no authorization\n  const authorization =\n    row.authorization_json !== null\n      ? (JSON.parse(row.authorization_json) as AuthorizationRecord)\n      : undefined;\n  return {\n    id: row.id,\n    requestId: row.request_id,\n    resourceId: row.resource_id,\n    deliveredAt: row.delivered_at,\n    backendStatus: row.backend_status,\n    ...(payment !== undefined ? { payment } : {}),\n    ...(row.duration_ms !== null ? { durationMs: row.duration_ms } : {}),\n    ...(row.protocol !== null ? { protocol: row.protocol } : {}),\n    ...(metadata !== undefined ? { metadata } : {}),\n    ...(authorization !== undefined ? { authorization } : {}),\n  };\n}\n\nexport function eventToRow(event: CommerceEvent): {\n  id: string;\n  type: string;\n  request_id: string;\n  resource_id: string | null;\n  at: string;\n  adapter: string | null;\n  payment_provider: string | null;\n  duration_ms: number | null;\n  status: string | null;\n  data_json: string | null;\n} {\n  return {\n    id: event.id,\n    type: event.type,\n    request_id: event.requestId,\n    resource_id: event.resourceId ?? null,\n    at: event.at,\n    adapter: event.adapter ?? null,\n    payment_provider: event.paymentProvider ?? null,\n    duration_ms: event.durationMs ?? null,\n    status: event.status ?? null,\n    data_json: event.data !== undefined ? JSON.stringify(redact(event.data)) : null,\n  };\n}\n\nexport function rowToEvent(row: EventRow): CommerceEvent {\n  const data =\n    row.data_json !== null ? (JSON.parse(row.data_json) as Record<string, unknown>) : undefined;\n  return {\n    id: row.id,\n    type: row.type as CommerceEventType,\n    requestId: row.request_id,\n    at: row.at,\n    ...(row.resource_id !== null ? { resourceId: row.resource_id } : {}),\n    ...(row.adapter !== null ? { adapter: row.adapter } : {}),\n    ...(row.payment_provider !== null ? { paymentProvider: row.payment_provider } : {}),\n    ...(row.duration_ms !== null ? { durationMs: row.duration_ms } : {}),\n    ...(row.status !== null ? { status: row.status as 'ok' | 'error' } : {}),\n    ...(data !== undefined ? { data } : {}),\n  };\n}\n\nexport function rowToPaymentAttempt(row: PaymentAttemptRow): PaymentAttempt {\n  return {\n    id: row.id,\n    requestId: row.request_id,\n    resourceId: row.resource_id,\n    provider: row.provider,\n    replayKey: row.replay_key,\n    status: row.status as PaymentAttempt['status'],\n    amount: row.amount,\n    currency: row.currency,\n    ...(row.payer !== null ? { payer: row.payer } : {}),\n    ...(row.payee !== null ? { payee: row.payee } : {}),\n    ...(row.external_reference !== null ? { externalReference: row.external_reference } : {}),\n    ...(row.rejection_reason !== null ? { rejectionReason: row.rejection_reason } : {}),\n    createdAt: row.created_at,\n    updatedAt: row.updated_at,\n  };\n}\n","/**\n * Receipt-store schema migrations. `PRAGMA user_version` records the applied\n * version, so a restart against an existing file keeps its data.\n */\nimport type Database from 'better-sqlite3';\n\ninterface Migration {\n  readonly version: number;\n  up(db: Database.Database): void;\n}\n\nconst MIGRATIONS: readonly Migration[] = [\n  {\n    version: 1,\n    up(db) {\n      db.exec(`\n        CREATE TABLE IF NOT EXISTS receipts (\n          seq             INTEGER PRIMARY KEY AUTOINCREMENT,\n          id              TEXT NOT NULL UNIQUE,\n          request_id      TEXT NOT NULL,\n          resource_id     TEXT NOT NULL,\n          payment_json    TEXT,\n          delivered_at    TEXT NOT NULL,\n          backend_status  INTEGER NOT NULL,\n          duration_ms     INTEGER,\n          protocol        TEXT,\n          metadata_json   TEXT\n        );\n        CREATE INDEX IF NOT EXISTS idx_receipts_request_id ON receipts(request_id);\n        CREATE INDEX IF NOT EXISTS idx_receipts_delivered_at ON receipts(delivered_at);\n\n        CREATE TABLE IF NOT EXISTS events (\n          seq               INTEGER PRIMARY KEY AUTOINCREMENT,\n          id                TEXT NOT NULL UNIQUE,\n          type              TEXT NOT NULL,\n          request_id        TEXT NOT NULL,\n          resource_id       TEXT,\n          at                TEXT NOT NULL,\n          adapter           TEXT,\n          payment_provider  TEXT,\n          duration_ms       INTEGER,\n          status            TEXT,\n          data_json         TEXT\n        );\n        CREATE INDEX IF NOT EXISTS idx_events_request_id ON events(request_id);\n        CREATE INDEX IF NOT EXISTS idx_events_at ON events(at);\n\n        CREATE TABLE IF NOT EXISTS payment_attempts (\n          seq                 INTEGER PRIMARY KEY AUTOINCREMENT,\n          id                  TEXT NOT NULL UNIQUE,\n          request_id          TEXT NOT NULL,\n          resource_id         TEXT NOT NULL,\n          provider             TEXT NOT NULL,\n          replay_key          TEXT NOT NULL UNIQUE,\n          status              TEXT NOT NULL,\n          amount              TEXT NOT NULL,\n          currency            TEXT NOT NULL,\n          payer               TEXT,\n          payee               TEXT,\n          external_reference  TEXT,\n          rejection_reason    TEXT,\n          created_at          TEXT NOT NULL,\n          updated_at          TEXT NOT NULL\n        );\n        CREATE INDEX IF NOT EXISTS idx_payment_attempts_request_id ON payment_attempts(request_id);\n        CREATE INDEX IF NOT EXISTS idx_payment_attempts_created_at ON payment_attempts(created_at);\n      `);\n    },\n  },\n  {\n    version: 2,\n    up(db) {\n      // Not folded into v1: an existing database keeps its rows, and a receipt\n      // written before this column has no authorization to record\n      db.exec(`ALTER TABLE receipts ADD COLUMN authorization_json TEXT;`);\n    },\n  },\n  {\n    version: 3,\n    up(db) {\n      // Archive rejected attempts before reclaim overwrites them. replay_key\n      // is not unique here: one authorization can be rejected and reclaimed\n      // repeatedly.\n      db.exec(`\n        CREATE TABLE IF NOT EXISTS payment_attempt_history (\n          seq                 INTEGER PRIMARY KEY AUTOINCREMENT,\n          id                  TEXT NOT NULL,\n          request_id          TEXT NOT NULL,\n          resource_id         TEXT NOT NULL,\n          provider            TEXT NOT NULL,\n          replay_key          TEXT NOT NULL,\n          status              TEXT NOT NULL,\n          amount              TEXT NOT NULL,\n          currency            TEXT NOT NULL,\n          payer               TEXT,\n          payee               TEXT,\n          external_reference  TEXT,\n          rejection_reason    TEXT,\n          created_at          TEXT NOT NULL,\n          updated_at          TEXT NOT NULL,\n          superseded_at       TEXT NOT NULL\n        );\n        CREATE INDEX IF NOT EXISTS idx_payment_attempt_history_replay_key ON payment_attempt_history(replay_key);\n        CREATE INDEX IF NOT EXISTS idx_payment_attempt_history_request_id ON payment_attempt_history(request_id);\n      `);\n    },\n  },\n];\n\n/** Target schema version: the version of the last migration */\nexport const SCHEMA_VERSION = MIGRATIONS.at(-1)?.version ?? 0;\n\n/**\n * Brings `db` up to {@link SCHEMA_VERSION}, one transaction per migration.\n * On an already-migrated file it only reads `PRAGMA user_version`.\n */\nexport function migrate(db: Database.Database): void {\n  const current = db.pragma('user_version', { simple: true }) as number;\n  for (const migration of MIGRATIONS) {\n    if (migration.version <= current) continue;\n    const apply = db.transaction(() => {\n      migration.up(db);\n      db.pragma(`user_version = ${migration.version}`);\n    });\n    apply();\n  }\n}\n","/**\n * SQLite implementation of the frozen ReceiptStore interface: a thin layer\n * over statements prepared once at open, with no ORM\n */\nimport { randomUUID } from 'node:crypto';\nimport { accessSync, constants as fsConstants } from 'node:fs';\nimport {\n  type AdapterDescriptor,\n  type AdapterHealth,\n  type Clock,\n  CommerceError,\n  type CommerceEvent,\n  type CommerceReceipt,\n  type IdGenerator,\n  type ListOptions,\n  type Logger,\n  NOOP_LOGGER,\n  type PaymentAttempt,\n  type PaymentAttemptReservation,\n  type PaymentAttemptUpdate,\n  type ReceiptStore,\n  systemClock,\n  toCommerceError,\n} from '../../core';\nimport { PACKAGE_VERSION } from '../../version';\nimport { openSqliteDatabase } from '../sqlite';\nimport {\n  type EventRow,\n  eventToRow,\n  type PaymentAttemptRow,\n  type ReceiptRow,\n  receiptToRow,\n  rowToEvent,\n  rowToPaymentAttempt,\n  rowToReceipt,\n} from './rows';\nimport { migrate, SCHEMA_VERSION } from './schema';\n\nconst DEFAULT_LIST_LIMIT = 50;\n/**\n * Ceiling on every list query, enforced in the store so every caller is\n * covered, not only the HTTP route. SQLite reads a negative `LIMIT` as no\n * limit, so `{ limit: -1 }` would otherwise return the whole table.\n */\nconst MAX_LIST_LIMIT = 500;\n\n// Clamps to a whole number in [1, MAX_LIST_LIMIT]. An absent or non-finite\n// limit (NaN, Infinity) takes the default, whether or not the caller filtered\n// it first.\nfunction clampListLimit(limit: number | undefined): number {\n  const base = limit !== undefined && Number.isFinite(limit) ? limit : DEFAULT_LIST_LIMIT;\n  return Math.min(Math.max(Math.trunc(base), 1), MAX_LIST_LIMIT);\n}\n\nexport interface SqliteReceiptStoreOptions {\n  /** File path, or ':memory:' for tests. Parent directory is created if missing */\n  readonly path: string;\n  readonly logger?: Logger;\n  readonly clock?: Clock;\n  readonly ids?: IdGenerator;\n}\n\nconst defaultIds: IdGenerator = {\n  next: (prefix) => (prefix !== undefined ? `${prefix}_${randomUUID()}` : randomUUID()),\n};\n\nfunction isUniqueConstraintOn(err: unknown, column: string): boolean {\n  return (\n    err instanceof Error &&\n    'code' in err &&\n    (err as { code?: unknown }).code === 'SQLITE_CONSTRAINT_UNIQUE' &&\n    err.message.includes(column)\n  );\n}\n\nexport function createSqliteReceiptStore(options: SqliteReceiptStoreOptions): ReceiptStore {\n  const logger = options.logger ?? NOOP_LOGGER;\n  const clock = options.clock ?? systemClock;\n  const ids = options.ids ?? defaultIds;\n  const path = options.path;\n  const isFileBacked = path !== ':memory:';\n\n  // Shared with the ACP idempotency and AP2 replay stores, so the permission\n  // hardening has one definition\n  const db = openSqliteDatabase({ path, label: 'Receipt database', logger });\n  migrate(db);\n\n  const insertReceiptStmt = db.prepare(\n    `INSERT INTO receipts (id, request_id, resource_id, payment_json, delivered_at, backend_status, duration_ms, protocol, metadata_json, authorization_json)\n     VALUES (@id, @request_id, @resource_id, @payment_json, @delivered_at, @backend_status, @duration_ms, @protocol, @metadata_json, @authorization_json)`,\n  );\n  const getReceiptStmt = db.prepare<[string], ReceiptRow>('SELECT * FROM receipts WHERE id = ?');\n  const listReceiptsStmt = db.prepare<[number], ReceiptRow>(\n    'SELECT * FROM receipts ORDER BY delivered_at DESC, seq DESC LIMIT ?',\n  );\n  const listReceiptsByRequestStmt = db.prepare<[string, number], ReceiptRow>(\n    'SELECT * FROM receipts WHERE request_id = ? ORDER BY delivered_at DESC, seq DESC LIMIT ?',\n  );\n  const countReceiptsStmt = db.prepare<[], { count: number }>(\n    'SELECT COUNT(*) AS count FROM receipts',\n  );\n  // backend_status is NOT NULL, so NOT BETWEEN cannot skip a row. 0 (no status\n  // known) and every non-2xx status count as undelivered, the same rule as the\n  // dashboard's deliveryResult() in ReceiptList.tsx.\n  const countUndeliveredReceiptsStmt = db.prepare<[], { count: number }>(\n    'SELECT COUNT(*) AS count FROM receipts WHERE backend_status NOT BETWEEN 200 AND 299',\n  );\n\n  const insertEventStmt = db.prepare(\n    `INSERT INTO events (id, type, request_id, resource_id, at, adapter, payment_provider, duration_ms, status, data_json)\n     VALUES (@id, @type, @request_id, @resource_id, @at, @adapter, @payment_provider, @duration_ms, @status, @data_json)`,\n  );\n  const listEventsStmt = db.prepare<[number], EventRow>(\n    'SELECT * FROM events ORDER BY at DESC, seq DESC LIMIT ?',\n  );\n  const listEventsByRequestStmt = db.prepare<[string, number], EventRow>(\n    'SELECT * FROM events WHERE request_id = ? ORDER BY at DESC, seq DESC LIMIT ?',\n  );\n\n  const insertPaymentAttemptStmt = db.prepare<Record<string, unknown>, PaymentAttemptRow>(\n    `INSERT INTO payment_attempts (id, request_id, resource_id, provider, replay_key, status, amount, currency, payer, payee, external_reference, rejection_reason, created_at, updated_at)\n     VALUES (@id, @request_id, @resource_id, @provider, @replay_key, @status, @amount, @currency, @payer, @payee, @external_reference, @rejection_reason, @created_at, @updated_at)\n     RETURNING *`,\n  );\n  // Keeps the rejected row a reclaim is about to overwrite\n  const archiveRejectedAttemptStmt = db.prepare(\n    `INSERT INTO payment_attempt_history (id, request_id, resource_id, provider, replay_key, status, amount, currency, payer, payee, external_reference, rejection_reason, created_at, updated_at, superseded_at)\n     SELECT id, request_id, resource_id, provider, replay_key, status, amount, currency, payer, payee, external_reference, rejection_reason, created_at, updated_at, @created_at\n     FROM payment_attempts\n     WHERE replay_key = @replay_key AND provider = @provider AND status = 'rejected'`,\n  );\n  const reclaimPaymentAttemptStmt = db.prepare<Record<string, unknown>, PaymentAttemptRow>(\n    `UPDATE payment_attempts SET id = @id, request_id = @request_id, resource_id = @resource_id,\n       status = 'reserved', amount = @amount, currency = @currency,\n       payer = @payer, payee = @payee, external_reference = NULL, rejection_reason = NULL,\n       created_at = @created_at, updated_at = @updated_at\n     WHERE replay_key = @replay_key AND provider = @provider AND status = 'rejected'\n     RETURNING *`,\n  );\n  // COALESCE: an omitted field (bound as NULL by updatePaymentAttempt) keeps\n  // its stored value. A status-only update must not erase external_reference,\n  // which holds the tx hash of a settlement-uncertain attempt: the record that\n  // the buyer's funds may have moved. Clearing a value would need an explicit\n  // sentinel, not `undefined`.\n  const updatePaymentAttemptStmt = db.prepare(\n    `UPDATE payment_attempts SET status = @status,\n       external_reference = COALESCE(@external_reference, external_reference),\n       rejection_reason = COALESCE(@rejection_reason, rejection_reason),\n       updated_at = @updated_at\n     WHERE replay_key = @replay_key`,\n  );\n  const listPaymentAttemptsStmt = db.prepare<[number], PaymentAttemptRow>(\n    'SELECT * FROM payment_attempts ORDER BY created_at DESC, seq DESC LIMIT ?',\n  );\n  const listPaymentAttemptsByRequestStmt = db.prepare<[string, number], PaymentAttemptRow>(\n    'SELECT * FROM payment_attempts WHERE request_id = ? ORDER BY created_at DESC, seq DESC LIMIT ?',\n  );\n  const paymentAttemptStatusStmt = db.prepare<[string], Pick<PaymentAttemptRow, 'status'>>(\n    'SELECT status FROM payment_attempts WHERE replay_key = ?',\n  );\n  // IMMEDIATE takes the write lock before the read, so of two retries on one\n  // file only one archives and reclaims. The other finds no rejected row, and\n  // its insert hits the unique replay key.\n  const reclaimRejectedAttempt = db.transaction(\n    (params: Record<string, unknown>): PaymentAttemptRow | undefined => {\n      archiveRejectedAttemptStmt.run(params);\n      return reclaimPaymentAttemptStmt.get(params);\n    },\n  );\n\n  let closed = false;\n\n  const descriptor: AdapterDescriptor = {\n    name: 'sqlite-receipt-store',\n    kind: 'storage',\n    implementationVersion: PACKAGE_VERSION,\n    supportedSpec: `sqlite-schema-v${SCHEMA_VERSION}`,\n    capabilities: ['receipts', 'events', 'payment-attempts'],\n    status: 'stable',\n  };\n\n  const store: ReceiptStore = {\n    async init(): Promise<void> {\n      // Migration already ran synchronously at construction. This check keeps\n      // init() a real, idempotent gate for callers that await it first.\n      const version = db.pragma('user_version', { simple: true }) as number;\n      if (version !== SCHEMA_VERSION) {\n        throw new CommerceError(\n          'STORAGE_ERROR',\n          `Receipt store schema version mismatch (found ${version}, expected ${SCHEMA_VERSION})`,\n        );\n      }\n    },\n\n    async appendEvent(event: CommerceEvent): Promise<void> {\n      try {\n        insertEventStmt.run(eventToRow(event));\n      } catch (err) {\n        logger.warn(\n          {\n            err: err instanceof Error ? err.message : String(err),\n            eventId: event.id,\n            requestId: event.requestId,\n          },\n          'receipt-store: failed to persist commerce event',\n        );\n      }\n    },\n\n    async reservePaymentAttempt(reservation: PaymentAttemptReservation): Promise<PaymentAttempt> {\n      const now = clock.nowIso();\n      const params = {\n        id: ids.next('attempt'),\n        request_id: reservation.requestId,\n        resource_id: reservation.resourceId,\n        provider: reservation.provider,\n        replay_key: reservation.replayKey,\n        amount: reservation.amount,\n        currency: reservation.currency,\n        payer: reservation.payer ?? null,\n        payee: reservation.payee ?? null,\n        created_at: now,\n        updated_at: now,\n      };\n      let row: PaymentAttemptRow;\n      try {\n        // Reclaim only if the rail permits reusing an authorization whose\n        // attempt was rejected. NEAR client retries reuse the access key's\n        // next nonce and therefore the replay key.\n        row =\n          (reservation.reclaimRejected === true\n            ? reclaimRejectedAttempt.immediate(params)\n            : undefined) ??\n          // RETURNING on a successful insert always yields the inserted row\n          (insertPaymentAttemptStmt.get({\n            ...params,\n            status: 'reserved' satisfies PaymentAttempt['status'],\n            external_reference: null,\n            rejection_reason: null,\n          }) as PaymentAttemptRow);\n      } catch (err) {\n        if (isUniqueConstraintOn(err, 'payment_attempts.replay_key')) {\n          // Report the existing status so the pipeline can choose a replay response\n          const existing = paymentAttemptStatusStmt.get(reservation.replayKey);\n          throw new CommerceError(\n            'PAYMENT_REPLAYED',\n            `Payment authorization has already been used (replayKey=${reservation.replayKey})`,\n            {\n              requestId: reservation.requestId,\n              resourceId: reservation.resourceId,\n              ...(existing !== undefined ? { details: { attemptStatus: existing.status } } : {}),\n            },\n          );\n        }\n        throw toCommerceError(err, 'STORAGE_ERROR', 'Failed to reserve payment attempt');\n      }\n      return rowToPaymentAttempt(row);\n    },\n\n    async updatePaymentAttempt(update: PaymentAttemptUpdate): Promise<void> {\n      try {\n        const result = updatePaymentAttemptStmt.run({\n          replay_key: update.replayKey,\n          status: update.status,\n          external_reference: update.externalReference ?? null,\n          rejection_reason: update.rejectionReason ?? null,\n          updated_at: clock.nowIso(),\n        });\n        if (result.changes === 0) {\n          throw new CommerceError(\n            'STORAGE_ERROR',\n            `No payment attempt found for replayKey=${update.replayKey}`,\n          );\n        }\n      } catch (err) {\n        throw toCommerceError(err, 'STORAGE_ERROR', 'Failed to update payment attempt');\n      }\n    },\n\n    async saveReceipt(receipt: CommerceReceipt): Promise<void> {\n      try {\n        insertReceiptStmt.run(receiptToRow(receipt));\n      } catch (err) {\n        throw toCommerceError(err, 'STORAGE_ERROR', 'Failed to save receipt');\n      }\n    },\n\n    async getReceipt(id: string): Promise<CommerceReceipt | undefined> {\n      const row = getReceiptStmt.get(id);\n      return row !== undefined ? rowToReceipt(row) : undefined;\n    },\n\n    async listReceipts(listOptions: ListOptions = {}): Promise<readonly CommerceReceipt[]> {\n      const limit = clampListLimit(listOptions.limit);\n      const rows =\n        listOptions.requestId !== undefined\n          ? listReceiptsByRequestStmt.all(listOptions.requestId, limit)\n          : listReceiptsStmt.all(limit);\n      return rows.map(rowToReceipt);\n    },\n\n    // Exact total, not bounded by the listReceipts clamp (see ReceiptStore.countReceipts)\n    async countReceipts(): Promise<number> {\n      return countReceiptsStmt.get()?.count ?? 0;\n    },\n\n    // Exact count of non-2xx receipts (see ReceiptStore.countUndeliveredReceipts)\n    async countUndeliveredReceipts(): Promise<number> {\n      return countUndeliveredReceiptsStmt.get()?.count ?? 0;\n    },\n\n    async listEvents(listOptions: ListOptions = {}): Promise<readonly CommerceEvent[]> {\n      const limit = clampListLimit(listOptions.limit);\n      const rows =\n        listOptions.requestId !== undefined\n          ? listEventsByRequestStmt.all(listOptions.requestId, limit)\n          : listEventsStmt.all(limit);\n      return rows.map(rowToEvent);\n    },\n\n    async listPaymentAttempts(listOptions: ListOptions = {}): Promise<readonly PaymentAttempt[]> {\n      const limit = clampListLimit(listOptions.limit);\n      const rows =\n        listOptions.requestId !== undefined\n          ? listPaymentAttemptsByRequestStmt.all(listOptions.requestId, limit)\n          : listPaymentAttemptsStmt.all(limit);\n      return rows.map(rowToPaymentAttempt);\n    },\n\n    descriptor,\n\n    async health(): Promise<AdapterHealth> {\n      // `detail` comes from a fixed vocabulary, never from a caught error: an\n      // accessSync error carries an absolute host path, e.g. \"EACCES:\n      // permission denied, access '/workspace/data/receipts.sqlite'\". The raw\n      // message goes to the logger at warn.\n      const startedAt = clock.monotonicMs();\n      if (closed) {\n        return { status: 'fail', detail: 'store-unavailable', checkedAt: clock.nowIso() };\n      }\n      if (isFileBacked) {\n        try {\n          accessSync(path, fsConstants.W_OK);\n        } catch (err) {\n          logger.warn(\n            { err: err instanceof Error ? err.message : String(err) },\n            'receipt-store: health check failed (store not writable)',\n          );\n          return {\n            status: 'fail',\n            detail: 'store-unwritable',\n            checkedAt: clock.nowIso(),\n            durationMs: clock.monotonicMs() - startedAt,\n          };\n        }\n      }\n      try {\n        const version = db.pragma('user_version', { simple: true }) as number;\n        if (version !== SCHEMA_VERSION) {\n          logger.warn(\n            { found: version, expected: SCHEMA_VERSION },\n            'receipt-store: health check failed (schema version mismatch)',\n          );\n          return {\n            status: 'fail',\n            detail: 'store-schema-mismatch',\n            checkedAt: clock.nowIso(),\n            durationMs: clock.monotonicMs() - startedAt,\n          };\n        }\n        return {\n          status: 'pass',\n          detail: `sqlite schema v${SCHEMA_VERSION} writable`,\n          checkedAt: clock.nowIso(),\n          durationMs: clock.monotonicMs() - startedAt,\n        };\n      } catch (err) {\n        logger.warn(\n          { err: err instanceof Error ? err.message : String(err) },\n          'receipt-store: health check failed (store unavailable)',\n        );\n        return {\n          status: 'fail',\n          detail: 'store-unavailable',\n          checkedAt: clock.nowIso(),\n          durationMs: clock.monotonicMs() - startedAt,\n        };\n      }\n    },\n\n    async close(): Promise<void> {\n      if (!closed) {\n        closed = true;\n        db.close();\n      }\n    },\n  };\n\n  return store;\n}\n","/**\n * A2A pins, kept in one place so nothing infers one version from another.\n *\n * The specification revision and the negotiation version look alike but\n * differ: `1.0.1` names the document this adapter was written against, `1.0`\n * is what a client negotiates on the wire. Neither is this package's version\n * (`PACKAGE_VERSION`).\n */\n\n/** A2A specification revision this adapter targets */\nexport const A2A_SPEC_VERSION = '1.0.1';\n\n/** Protocol negotiation version carried on the wire */\nexport const A2A_PROTOCOL_VERSION = '1.0';\n\n/** The only transport binding this adapter serves */\nexport const A2A_PROTOCOL_BINDING = 'JSONRPC';\n\n/**\n * Fixed by the A2A specification: a client fetches the card from this exact\n * path, so it is not configurable. `src/config` reserves it against adapter\n * mounts for the same reason.\n */\nexport const A2A_AGENT_CARD_PATH = '/.well-known/agent-card.json';\n\n/** Mount serving the JSON-RPC endpoint, unless configuration says otherwise */\nexport const A2A_DEFAULT_MOUNT_PATH = '/a2a';\n\n/** Content type on both sides of every supported A2A exchange */\nexport const A2A_JSON_MEDIA_TYPE = 'application/json';\n\n/** Card identity when the operator names none. Matches the MCP adapter's default server name */\nexport const A2A_DEFAULT_AGENT_NAME = 'agent-commerce';\n\n/**\n * Version negotiation header. An absent or empty value means `0.3`, which\n * this adapter does not serve.\n */\nexport const A2A_VERSION_HEADER = 'a2a-version';\n\n/** The one JSON-RPC method this adapter serves, not the legacy `message/send` */\nexport const A2A_METHOD_SEND_MESSAGE = 'SendMessage';\n\n/**\n * Push notification configuration methods. The card declares no push\n * support, so these return `PushNotificationNotSupportedError`.\n */\nexport const A2A_PUSH_CONFIG_METHODS: readonly string[] = [\n  'CreateTaskPushNotificationConfig',\n  'GetTaskPushNotificationConfig',\n  'ListTaskPushNotificationConfigs',\n  'DeleteTaskPushNotificationConfig',\n];\n\n/**\n * A2A methods that exist and are not served here, kept apart from unknown\n * methods so a caller learns whether it hit a refused method or a typo. The\n * descriptor and the transport both read this one list.\n * `A2A_TASK_LOOKUP_METHODS` get a different error code on the wire.\n */\nexport const A2A_UNSUPPORTED_METHODS: readonly string[] = [\n  'SendStreamingMessage',\n  'GetTask',\n  'ListTasks',\n  'CancelTask',\n  'SubscribeToTask',\n  ...A2A_PUSH_CONFIG_METHODS,\n  'GetExtendedAgentCard',\n];\n\n/**\n * Methods A2A gives an agent no capability flag to decline. No task can be\n * read back or canceled, so they answer `TaskNotFoundError`.\n */\nexport const A2A_TASK_LOOKUP_METHODS: readonly string[] = ['GetTask', 'CancelTask'];\n\n/**\n * Terminal states for completed and failed calls. An unpaid x402 extension\n * task instead waits in `TASK_STATE_INPUT_REQUIRED`. `GetTask` finds no task\n * in any state.\n */\nexport const A2A_TASK_STATE_COMPLETED = 'TASK_STATE_COMPLETED';\nexport const A2A_TASK_STATE_FAILED = 'TASK_STATE_FAILED';\n\n/** An unpaid x402 extension task waiting for a payment message */\nexport const A2A_TASK_STATE_INPUT_REQUIRED = 'TASK_STATE_INPUT_REQUIRED';\n\n/** Extension activation header, a comma-separated list of extension URIs */\nexport const A2A_EXTENSIONS_HEADER = 'a2a-extensions';\n","/**\n * Adapter self-description.\n *\n * `supportedSpec` is the A2A specification revision (`1.0.1`), never the\n * negotiation version (`1.0`) and never this package's version. Status is\n * `experimental` while the adapter lacks the features in the unsupported list\n * below; an entry leaves that list only when its feature is implemented.\n */\nimport type { AdapterDescriptor } from '../../core';\nimport { A2A_SPEC_VERSION, A2A_UNSUPPORTED_METHODS } from './constants';\n\n// What this adapter implements\nconst A2A_CAPABILITIES: readonly string[] = [\n  'agent-card',\n  'jsonrpc',\n  'SendMessage',\n  // The x402 A2A transport, opt-in per request\n  'x402-extension',\n];\n\n/**\n * Major A2A features this adapter does not implement, served on\n * `/.well-known/agent-commerce` and printed by `doctor`, so no client assumes\n * full protocol support\n */\nexport const A2A_UNSUPPORTED: readonly string[] = [\n  // Methods, as the protocol names them; the transport refuses the same list\n  ...A2A_UNSUPPORTED_METHODS,\n  // Transports other than the one binding served\n  'HTTP+JSON/REST binding',\n  'gRPC binding',\n  // Behaviors\n  'SSE',\n  'long-running task persistence',\n  'task resumption other than an x402 extension payment',\n  'push notifications',\n  'multi-turn conversational continuation',\n  'authenticated extended agent cards',\n  'A2A authentication schemes',\n  'artifact types beyond Agent Commerce outcome data',\n  // Pending x402 payments live in process memory\n  'x402 extension payments across gateway restarts or instances',\n];\n\nexport function buildDescriptor(implementationVersion: string): AdapterDescriptor {\n  return {\n    name: 'a2a',\n    kind: 'protocol',\n    implementationVersion,\n    supportedSpec: A2A_SPEC_VERSION,\n    capabilities: A2A_CAPABILITIES,\n    status: 'experimental',\n    unsupported: A2A_UNSUPPORTED,\n  };\n}\n","/**\n * Adapter self-description.\n *\n * `supportedSpec` is the pinned ACP snapshot, never this package's version.\n * Status is `experimental` while the adapter lacks the features in the\n * unsupported list below; an entry leaves that list only when its feature is\n * implemented.\n */\nimport type { AdapterDescriptor } from '../../core';\nimport { ACP_CHECKOUT_OPERATIONS, ACP_SPEC_VERSION } from './constants';\n\n// What this adapter implements\nconst ACP_CAPABILITIES: readonly string[] = [\n  'rest transport',\n  'well-known discovery',\n  'bearer authentication',\n  'API-Version enforcement',\n  // Forwarded as received: the gateway verifies neither signature header\n  'request header forwarding to the merchant',\n  'checkout service',\n  ...ACP_CHECKOUT_OPERATIONS,\n];\n\n/**\n * Major ACP features this adapter does not implement, served on\n * `/.well-known/agent-commerce` and printed by `doctor`, so no client assumes\n * full protocol support\n */\nexport const ACP_UNSUPPORTED: readonly string[] = [\n  // Services this seller does not implement, named as ACP names them. The\n  // discovery document advertises `checkout` alone, and these are the reason.\n  'carts service',\n  'feed service',\n  'standalone orders service',\n  'delegate_payment',\n  'delegate_authentication',\n  // Bindings and delivery directions\n  'ACP MCP transport binding',\n  'webhooks',\n  'outbound merchant-to-agent delivery',\n  'ACP client role',\n  // Request authentication beyond the bearer token\n  'Signature header verification',\n  'Timestamp replay-window verification',\n  // Extensions, versioning and payment handlers\n  'discount extension',\n  'general ACP extension framework',\n  'multiple ACP API versions',\n  'seller-backed payment handler integration',\n];\n\nexport function buildDescriptor(implementationVersion: string): AdapterDescriptor {\n  return {\n    name: 'acp',\n    kind: 'protocol',\n    implementationVersion,\n    supportedSpec: ACP_SPEC_VERSION,\n    capabilities: ACP_CAPABILITIES,\n    status: 'experimental',\n    unsupported: ACP_UNSUPPORTED,\n  };\n}\n"]}

package/dist/cli/chunk-TPC4EJLT.js

@@ -0,0 +1,11 @@
+// src/protocols/mcp/constants.ts
+var MCP_TOOL_NAME_CHARS = "A-Za-z0-9._-";
+var MCP_TOOL_NAME_MAX_LENGTH = 128;
+var MCP_TOOL_NAME_PATTERN = new RegExp(
+  `^[${MCP_TOOL_NAME_CHARS}]{1,${MCP_TOOL_NAME_MAX_LENGTH}}$`
+);
+var MCP_MODERN_PROTOCOL_REVISION = "2026-07-28";
+
+export { MCP_MODERN_PROTOCOL_REVISION, MCP_TOOL_NAME_CHARS, MCP_TOOL_NAME_MAX_LENGTH, MCP_TOOL_NAME_PATTERN };
+//# sourceMappingURL=chunk-TPC4EJLT.js.map
+//# sourceMappingURL=chunk-TPC4EJLT.js.map

package/dist/cli/chunk-TPC4EJLT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/protocols/mcp/constants.ts"],"names":[],"mappings":";AAUO,IAAM,mBAAA,GAAsB;AAG5B,IAAM,wBAAA,GAA2B;AAQjC,IAAM,wBAAwB,IAAI,MAAA;AAAA,EACvC,CAAA,EAAA,EAAK,mBAAmB,CAAA,IAAA,EAAO,wBAAwB,CAAA,EAAA;AACzD;AAMO,IAAM,4BAAA,GAA+B","file":"chunk-TPC4EJLT.js","sourcesContent":["/**\n * MCP protocol constants shared by the config layer, the adapter and the\n * OpenAPI importer.\n *\n * Kept dependency-free: `src/config` validates tool names at load time, so\n * anything imported here would become a config-load dependency too, and the\n * MCP SDK is an optional peer the main entry and CLI must never load.\n */\n\n/** Characters SEP-986 allows in an MCP tool name, as a regex character class body */\nexport const MCP_TOOL_NAME_CHARS = 'A-Za-z0-9._-';\n\n/** Longest MCP tool name SEP-986 allows */\nexport const MCP_TOOL_NAME_MAX_LENGTH = 128;\n\n/**\n * MCP tool names per SEP-986: 1-128 chars of [A-Za-z0-9._-], the SDK's own\n * `TOOL_NAME_REGEX`, which it does not export. Config refuses an mcp-exposed\n * resource whose id fails it; the low-level `Server` checks no names, so the\n * adapter also skips such an id with a warning.\n */\nexport const MCP_TOOL_NAME_PATTERN = new RegExp(\n  `^[${MCP_TOOL_NAME_CHARS}]{1,${MCP_TOOL_NAME_MAX_LENGTH}}$`,\n);\n\n/**\n * The modern revision served by the SDK. A v2 client negotiates this value\n * in the conformance test.\n */\nexport const MCP_MODERN_PROTOCOL_REVISION = '2026-07-28';\n"]}

package/dist/cli/config-4IBGVFSP.js

@@ -0,0 +1,11 @@
+export { loadConfig, parseConfig, substituteEnv } from './chunk-RWVPYAKC.js';
+import './chunk-2ZZOGI5I.js';
+import './chunk-AA3FIEAR.js';
+import './chunk-NSPPEF5M.js';
+import './chunk-7JNYFUT3.js';
+import './chunk-FHCFR2GS.js';
+import './chunk-TPC4EJLT.js';
+import './chunk-QQ3WY5L3.js';
+import './chunk-3M6U7ILB.js';
+//# sourceMappingURL=config-4IBGVFSP.js.map
+//# sourceMappingURL=config-4IBGVFSP.js.map

package/dist/cli/config-4IBGVFSP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"config-4IBGVFSP.js"}