@devlab.group/agent-commerce 2.1.0 → 2.2.0

package/dist/mcp.js

@@ -1,6 +1,6 @@
 import { MCP_TOOL_NAME_PATTERN, readCappedBody, MCP_MODERN_PROTOCOL_REVISION, x402ErrorCode, settlementFailure, settlementResponseFromDetails, x402McpPaymentSubmission, X402_MCP_PAYMENT_META_KEY, X402_MCP_PAYMENT_RESPONSE_META_KEY, settlementResponse, X402_MCP_ERROR_META_KEY } from './chunk-ES3V6ECS.js';
 import { mcpPaymentRequired, MPP_MCP_CREDENTIAL_META_KEY, receiptObject, MPP_MCP_RECEIPT_META_KEY, MPP_MCP_PAYMENT_REQUIRED_META_KEY } from './chunk-5ZYXBCDX.js';
-import { PACKAGE_VERSION, toLogInfo, toCommerceError, CommerceError, extractReservedInputFields, PAYMENT_INPUT_FIELD, AUTHORIZATION_INPUT_FIELD, toErrorEnvelope, DELIVERY_SUMMARY_META_KEY, toDeliverySummary, toPaymentRequiredEnvelope } from './chunk-SY6GUYSQ.js';
+import { PACKAGE_VERSION, toLogInfo, toCommerceError, CommerceError, extractReservedInputFields, PAYMENT_INPUT_FIELD, AUTHORIZATION_INPUT_FIELD, toErrorEnvelope, DELIVERY_SUMMARY_META_KEY, toDeliverySummary, toPaymentRequiredEnvelope } from './chunk-7ZMMXZ4G.js';
 import { isRecord } from './chunk-2CJNA7MS.js';
 import { createMcpHandler, Server, ProtocolError, ProtocolErrorCode, LATEST_PROTOCOL_VERSION } from '@modelcontextprotocol/server';
 
@@ -253,7 +253,7 @@ var McpProtocolAdapter = class {
       resources = context.resources.listExposedVia("mcp");
     } catch (err) {
       context.logger.error(
-        { adapter: "mcp", err: toLogInfo(err) },
+        { err: toLogInfo(err) },
         "mcp adapter: failed to list mcp-exposed resources"
       );
       resources = [];
@@ -289,10 +289,7 @@ var McpProtocolAdapter = class {
       }
     }
     for (const s of skipped) {
-      context.logger.warn(
-        { adapter: "mcp", resourceId: s.id, reason: s.reason },
-        "mcp adapter: resource skipped"
-      );
+      context.logger.warn({ resourceId: s.id, reason: s.reason }, "mcp adapter: resource skipped");
     }
     this.tools = tools;
     this.toolsByResourceId = toolsByResourceId;
@@ -302,13 +299,12 @@ var McpProtocolAdapter = class {
       {
         legacy: "stateless",
         // Reporting only: a request the SDK rejects is already answered
-        onerror: (err) => context.logger.debug({ adapter: "mcp", err: toLogInfo(err) }, "mcp adapter: SDK error")
+        onerror: (err) => context.logger.debug({ err: toLogInfo(err) }, "mcp adapter: SDK error")
       }
     );
     this.started = true;
     context.logger.info(
       {
-        adapter: "mcp",
         mountPath: this.mountPath,
         toolCount: tools.length,
         skippedCount: skipped.length
@@ -361,10 +357,7 @@ var McpProtocolAdapter = class {
       );
       await writeWebResponse(response, res);
     } catch (err) {
-      this.context?.logger.error(
-        { adapter: "mcp", err: toLogInfo(err) },
-        "mcp adapter: request handling failed"
-      );
+      this.context?.logger.error({ err: toLogInfo(err) }, "mcp adapter: request handling failed");
       this.writeJsonRpcError(res, 500, "Internal server error.");
     }
   }
@@ -462,10 +455,7 @@ var McpProtocolAdapter = class {
       }
     } catch (err) {
       const error = toCommerceError(err);
-      context.logger.warn(
-        { adapter: "mcp", resourceId, err: toLogInfo(error) },
-        "mcp adapter: execution failed"
-      );
+      context.logger.warn({ resourceId, err: toLogInfo(error) }, "mcp adapter: execution failed");
       return errorResult(error, resource.paymentMethods[0]);
     }
   }

package/dist/mcp.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/protocols/mcp/descriptor.ts","../src/protocols/mcp/tool-mapping.ts","../src/protocols/mcp/result-mapping.ts","../src/protocols/mcp/adapter.ts"],"names":[],"mappings":";;;;;;AAUA,IAAM,kBAAA,GAAqB,CAAA,EAAG,4BAA4B,CAAA,EAAA,EAAK,uBAAuB,CAAA,CAAA;AAGtF,IAAM,gBAAA,GAAsC,CAAC,YAAA,EAAc,YAAY,CAAA;AAUhE,IAAM,eAAA,GAAqC;AAAA,EAChD,WAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EACA,kCAAA;AAAA,EACA,OAAA;AAAA,EACA,0BAAA;AAAA,EACA,eAAA;AAAA,EACA,UAAA;AAAA,EACA,eAAA;AAAA,EACA,YAAA;AAAA,EACA,oBAAA;AAAA;AAAA,EAEA,+CAAA;AAAA,EACA;AACF,CAAA;AAEO,SAAS,gBAAgB,qBAAA,EAAkD;AAChF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,KAAA;AAAA,IACN,IAAA,EAAM,UAAA;AAAA,IACN,qBAAA;AAAA,IACA,aAAA,EAAe,kBAAA;AAAA,IACf,YAAA,EAAc,gBAAA;AAAA,IACd,MAAA,EAAQ,QAAA;AAAA,IACR,WAAA,EAAa;AAAA,GACf;AACF;;;ACnCO,SAAS,gBAAgB,EAAA,EAAqB;AACnD,EAAA,OAAO,qBAAA,CAAsB,KAAK,EAAE,CAAA;AACtC;AAEA,SAAS,eAAe,QAAA,EAAqC;AAC3D,EAAA,OAAO,QAAA,CAAS,QAAQ,IAAA,KAAS,MAAA;AACnC;AAIA,SAAS,qBAAqB,QAAA,EAA2D;AACvF,EAAA,OAAO,QAAA,CAAS,eAAe,CAAC,CAAA;AAClC;AAGO,SAAS,cAAc,MAAA,EAA+C;AAC3E,EAAA,MAAM,KAAA,GAAQ,QAAQ,mBAAmB,CAAA,UAAA,CAAA;AACzC,EAAA,IAAI,WAAW,MAAA,EAAQ,OAAO,CAAA,OAAA,EAAU,yBAAyB,SAAS,KAAK,CAAA,CAAA;AAC/E,EAAA,IAAI,WAAW,KAAA,EAAO,OAAO,CAAA,OAAA,EAAU,2BAA2B,SAAS,KAAK,CAAA,CAAA;AAChF,EAAA,OAAO,KAAA;AACT;AAGA,SAAS,iBAAiB,QAAA,EAAoC;AAC5D,EAAA,MAAM,MAAA,GAAS,qBAAqB,QAAQ,CAAA;AAC5C,EAAA,MAAM,IAAA,GAAO,MAAA,KAAW,MAAA,GAAY,CAAA,GAAA,EAAM,MAAM,CAAA,CAAA,GAAK,GAAA;AACrD,EAAA,OAAO,CAAA,SAAA,EAAY,IAAI,CAAA,kBAAA,EAAqB,aAAA,CAAc,MAAM,CAAC,CAAA,2CAAA,CAAA;AACnE;AAGA,IAAM,SAAA,GAAY,mDAAA;AAMlB,SAAS,6BAA6B,QAAA,EAAoC;AACxE,EAAA,MAAM,MAAA,GAAS,qBAAqB,QAAQ,CAAA;AAC5C,EAAA,IAAI,WAAW,MAAA,EAAQ;AACrB,IAAA,OAAO,iGAAiG,SAAS,CAAA,CAAA;AAAA,EACnH;AACA,EAAA,IAAI,WAAW,KAAA,EAAO;AACpB,IAAA,OAAO,2HAA2H,SAAS,CAAA,CAAA;AAAA,EAC7I;AACA,EAAA,IAAI,WAAW,MAAA,EAAW;AACxB,IAAA,OAAO,GAAG,MAAM,CAAA,mFAAA,CAAA;AAAA,EAClB;AACA,EAAA,OAAO,mEAAA;AACT;AAGA,SAAS,sBAAsB,QAAA,EAA+C;AAC5E,EAAA,OAAO,QAAA,CAAS,aAAA,EAAe,QAAA,IAAY,EAAC;AAC9C;AAEA,SAAS,kBAAkB,QAAA,EAAoC;AAC7D,EAAA,MAAM,OAAA,GAAU,sBAAsB,QAAQ,CAAA;AAC9C,EAAA,OAAO,OAAA,CAAQ,MAAA,GAAS,CAAA,GACpB,CAAA,eAAA,EAAkB,OAAA,CAAQ,KAAK,OAAO,CAAC,CAAA,uBAAA,EAA0B,yBAAyB,CAAA,cAAA,CAAA,GAC1F,EAAA;AACN;AAMO,SAAS,qBAAqB,QAAA,EAAoC;AACvE,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,WAAA,IAAe,QAAA,CAAS,IAAA;AAC9C,EAAA,QAAQ,QAAA,CAAS,QAAQ,IAAA;AAAM,IAC7B,KAAK,MAAA;AACH,MAAA,OAAO,IAAA;AAAA,IACT,KAAK,OAAA,EAAS;AACZ,MAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAS,GAAI,QAAA,CAAS,OAAA;AACtC,MAAA,OAAO,CAAA,EAAG,IAAI,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,EAAI,QAAQ,CAAA,WAAA,EAAc,gBAAA,CAAiB,QAAQ,CAAC,CAAA,EAAG,iBAAA,CAAkB,QAAQ,CAAC,CAAA,CAAA;AAAA,IAClH;AAAA,IACA,KAAK,SAAA;AACH,MAAA,OAAO,CAAA,EAAG,IAAI,CAAA,uDAAA,EAA0D,gBAAA,CAAiB,QAAQ,CAAC,CAAA,EAAG,iBAAA,CAAkB,QAAQ,CAAC,CAAA,CAAA;AAAA;AAEtI;AAaO,SAAS,iBAAiB,QAAA,EAAiD;AAChF,EAAA,MAAM,OAAO,QAAA,CAAS,WAAA;AACtB,EAAA,MAAM,YAAA,GAAe,SAAS,IAAI,CAAA;AAGlC,EAAA,MAAM,mBAAA,GACJ,YAAA,IAAgB,QAAA,CAAS,IAAA,CAAK,UAAU,IACpC,MAAA,CAAO,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA;AAAA,IAAO,CAAC,KAAA,KACtC,QAAA,CAAS,KAAA,CAAM,CAAC,CAAC;AAAA,MAEnB,EAAC;AACP,EAAA,MAAM,UAAA,GAAyC,MAAA,CAAO,WAAA,CAAY,mBAAmB,CAAA;AAIrF,EAAA,IAAI,cAAA,CAAe,QAAQ,CAAA,EAAG;AAC5B,IAAA,UAAA,CAAW,mBAAmB,CAAA,GAAI;AAAA,MAChC,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EAAa,6BAA6B,QAAQ;AAAA,KACpD;AAAA,EACF;AACA,EAAA,MAAM,OAAA,GAAU,sBAAsB,QAAQ,CAAA;AAC9C,EAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,IAAA,UAAA,CAAW,yBAAyB,CAAA,GAAI;AAAA,MACtC,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE,mGAAA;AAAA,MACF,UAAA,EAAY;AAAA,QACV,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,MAAM,CAAC,GAAG,OAAO,CAAA,EAAE;AAAA,QAC7C,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,WAAW,CAAA;AAAE,OAC1C;AAAA,MACA,QAAA,EAAU,CAAC,QAAA,EAAU,SAAS;AAAA,KAChC;AAAA,EACF;AAEA,EAAA,MAAM,WACJ,YAAA,IAAgB,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,GACvC,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,IAC9D,EAAC;AAEP,EAAA,MAAM,KAAA,GAAQ,eACV,MAAA,CAAO,WAAA;AAAA,IACL,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,CAAE,MAAA;AAAA,MACnB,CAAC,CAAC,GAAG,CAAA,KAAM,QAAQ,MAAA,IAAU,GAAA,KAAQ,gBAAgB,GAAA,KAAQ;AAAA;AAC/D,MAEF,EAAC;AAEL,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,IAAA,EAAM,QAAA;AAAA,IACN,UAAA;AAAA,IACA,GAAI,QAAA,CAAS,MAAA,GAAS,IAAI,EAAE,QAAA,KAAa;AAAC,GAC5C;AACF;;;AChIA,SAAS,SAAS,KAAA,EAAwC;AACxD,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,gBAAgB,OAAA,EAA2C;AAClE,EAAA,MAAM,OAAO,OAAA,CAAQ,IAAA;AACrB,EAAA,MAAM,IAAA,GAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,CAAK,SAAA,CAAU,QAAQ,IAAI,CAAA;AAC1E,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,EAAA,MAAM,OAAA,GACJ,SAAS,QAAA,KAAa,KAAA,GAAQ,cAAc,OAAA,CAAQ,QAAA,GAAW,SAAS,CAAC,CAAA,GAAI,MAAA;AAC/E,EAAA,OAAO;AAAA,IACL,SAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,IAChC,GAAI,SAAS,IAAI,CAAA,GAAI,EAAE,iBAAA,EAAmB,IAAA,KAAS,EAAC;AAAA,IACpD,KAAA,EAAO;AAAA,MACL,CAAC,yBAAyB,GAAG,QAAA,CAAS,iBAAA,CAAkB,OAAO,CAAC,CAAA;AAAA,MAChE,GAAI,OAAA,EAAS,QAAA,KAAa,MAAA,GACtB,EAAE,CAAC,kCAAkC,GAAG,kBAAA,CAAmB,OAAO,CAAA,EAAE,GACpE,EAAC;AAAA,MACL,GAAI,YAAY,MAAA,GAAY,EAAE,CAAC,wBAAwB,GAAG,OAAA,EAAQ,GAAI;AAAC;AACzE,GACF;AACF;AAIA,SAAS,eAAA,CACP,UAAA,EACA,QAAA,EACA,IAAA,EACgB;AAChB,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,IAAA;AAAA,IACT,OAAA,EAAS;AAAA,MACP,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,IAAA,CAAK,SAAA,CAAU,UAAU,CAAA,EAAE;AAAA,MACjD,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,QAAA;AAAS,KACjC;AAAA,IACA,iBAAA,EAAmB,UAAA;AAAA,IACnB,GAAI,IAAA,KAAS,MAAA,GAAY,EAAE,KAAA,EAAO,IAAA,KAAS;AAAC,GAC9C;AACF;AAIA,SAAS,iBAAA,CACP,UACA,SAAA,EACyB;AACzB,EAAA,OAAO,EAAE,GAAG,SAAA,EAAW,GAAG,QAAA,EAAS;AACrC;AAEA,SAAS,sBAAsB,OAAA,EAAiD;AAC9E,EAAA,MAAM,QAAA,GAAW,0BAA0B,OAAO,CAAA;AAClD,EAAA,MAAM,IAAI,QAAA,CAAS,OAAA;AACnB,EAAA,MAAM,YAAA,GAAe,CAAA,CAAE,QAAA,KAAa,MAAA,GAAS,EAAE,QAAA,GAAW,MAAA;AAC1D,EAAA,MAAM,UAAA,GACJ,YAAA,KAAiB,MAAA,GACb,iBAAA,CAAkB,QAAA,CAAS,QAAQ,CAAA,EAAG,YAAY,CAAA,GAClD,QAAA,CAAS,QAAQ,CAAA;AACvB,EAAA,MAAM,cAAc,CAAA,CAAE,QAAA,KAAa,QAAQ,kBAAA,CAAmB,CAAA,CAAE,QAAQ,CAAA,GAAI,MAAA;AAC5E,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,iBAAiB,MAAA,EAAW,IAAA,GAAO,EAAE,CAAC,uBAAuB,GAAG,YAAA,EAAa;AAAA,OAAA,IACxE,gBAAgB,MAAA,EAAW,IAAA,GAAO,EAAE,CAAC,iCAAiC,GAAG,WAAA,EAAY;AAC9F,EAAA,OAAO,eAAA;AAAA,IACL,UAAA;AAAA;AAAA,IAEA,CAAA,kBAAA,EAAqB,CAAA,CAAE,MAAM,CAAA,CAAA,EAAI,CAAA,CAAE,QAAQ,CAAA,EAAG,CAAA,CAAE,WAAA,KAAgB,MAAA,GAAY,CAAA,IAAA,EAAO,CAAA,CAAE,WAAW,CAAA,CAAA,GAAK,EAAE,CAAA,eAAA,EAAkB,OAAA,CAAQ,UAAU,CAAA,iBAAA,EAAoB,CAAA,CAAE,QAAQ,CAAA,kBAAA,EAAqB,aAAA,CAAc,CAAA,CAAE,QAAQ,CAAC,CAAA,CAAA,CAAA;AAAA,IACvN;AAAA,GACF;AACF;AAGO,SAAS,WAAA,CAAY,OAAsB,IAAA,EAA0C;AAC1F,EAAA,MAAM,QAAA,GAAW,gBAAgB,KAAK,CAAA;AACtC,EAAA,MAAM,UAAU,KAAA,CAAM,OAAA;AACtB,EAAA,MAAM,SAAA,GAAY,UAAU,WAAW,CAAA;AAEvC,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,UAAA,KAAe,GAAA,IAAO,SAAS,SAAS,CAAA;AAC9D,EAAA,MAAM,YAAA,GACJ,IAAA,KAAS,MAAA,IAAU,OAAA,GACf;AAAA,IACE,GAAG,SAAA;AAAA,IACH,KAAA,EAAO,cAAc,KAAA,CAAM,IAAA,EAAM,UAAU,QAAQ,CAAA,EAAG,OAAA,GAAU,SAAS,CAAC;AAAA,GAC5E,GACA,MAAA;AACN,EAAA,MAAM,UAAA,GACJ,YAAA,KAAiB,MAAA,GACb,iBAAA,CAAkB,QAAA,CAAS,QAAQ,CAAA,EAAG,YAAY,CAAA,GAClD,QAAA,CAAS,QAAQ,CAAA;AACvB,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,SAAS,MAAA,EAAQ;AACnB,IAAA,MAAM,UAAA,GACJ,MAAM,IAAA,KAAS,2BAAA,GACX,kBAAkB,OAAO,CAAA,GACzB,8BAA8B,OAAO,CAAA;AAC3C,IAAA,IAAI,UAAA,KAAe,MAAA,IAAa,YAAA,KAAiB,MAAA,EAAW;AAC1D,MAAA,IAAA,GAAO;AAAA,QACL,GAAI,iBAAiB,MAAA,GAAY,EAAE,CAAC,uBAAuB,GAAG,YAAA,EAAa,GAAI,EAAC;AAAA,QAChF,GAAI,eAAe,MAAA,GAAY,EAAE,CAAC,kCAAkC,GAAG,UAAA,EAAW,GAAI;AAAC,OACzF;AAAA,IACF;AAAA,EACF,CAAA,MAAA,IAAW,IAAA,KAAS,KAAA,IAAS,OAAA,EAAS;AAEpC,IAAA,MAAM,QAAA,GAAW,mBAAmB,SAAA,EAAW;AAAA,MAC7C,MAAM,KAAA,CAAM,IAAA;AAAA,MACZ,MAAA,EAAQ,UAAU,QAAQ,CAAA;AAAA,MAC1B,QAAQ,KAAA,CAAM;AAAA,KACf,CAAA;AACD,IAAA,IAAI,aAAa,MAAA,EAAW,IAAA,GAAO,EAAE,CAAC,iCAAiC,GAAG,QAAA,EAAS;AAAA,EACrF;AACA,EAAA,OAAO,eAAA,CAAgB,YAAY,CAAA,EAAG,QAAA,CAAS,IAAI,CAAA,EAAA,EAAK,QAAA,CAAS,OAAO,CAAA,CAAA,EAAI,IAAI,CAAA;AAClF;AAEO,SAAS,WAAW,OAAA,EAA2C;AACpE,EAAA,OAAO,QAAQ,IAAA,KAAS,WAAA,GAAc,gBAAgB,OAAO,CAAA,GAAI,sBAAsB,OAAO,CAAA;AAChG;;;ACxEA,IAAM,kBAAA,GAAqB,MAAA;AAC3B,IAAM,mBAAA,GAAsB,gBAAA;AAO5B,IAAM,yBAAA,GAA4B,CAAA;AAIlC,IAAM,yBAAyB,GAAA,GAAM,IAAA;AAQrC,IAAM,qBAAA,GAAwB,EAAA;AAG9B,IAAM,2BAAA,GAA8B,YAAA;AAGpC,IAAM,qBAAA,GAAwB,EAAE,KAAA,EAAO,GAAA,EAAQ,YAAY,QAAA,EAAS;AAEpE,IAAM,qBAAN,MAAwD;AAAA,EAC7C,IAAA,GAAO,KAAA;AAAA,EACP,SAAA;AAAA,EACA,UAAA;AAAA,EAEQ,UAAA;AAAA,EACA,aAAA;AAAA,EAET,OAAA;AAAA,EACA,OAAA,GAAU,KAAA;AAAA,EACV,QAAmC,EAAC;AAAA,EACpC,iBAAA,uBAA+D,GAAA,EAAI;AAAA,EACnE,UAAsC,EAAC;AAAA,EACvC,OAAA;AAAA;AAAA;AAAA;AAAA,EAKA,iBAAA,GAAoB,CAAA;AAAA,EACX,kBAAqC,EAAC;AAAA,EAEvD,WAAA,CAAY,OAAA,GAA6B,EAAC,EAAG;AAC3C,IAAA,IAAA,CAAK,SAAA,GAAY,QAAQ,SAAA,IAAa,kBAAA;AACtC,IAAA,IAAA,CAAK,UAAA,GAAa,QAAQ,UAAA,IAAc,mBAAA;AACxC,IAAA,IAAA,CAAK,aAAA,GAAgB,QAAQ,aAAA,IAAiB,eAAA;AAC9C,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,eAAe,CAAA;AAAA,EACnD;AAAA,EAEA,MAAM,MAAM,OAAA,EAAgD;AAC1D,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,IAAA,CAAK,OAAA,GAAU,KAAA;AAEf,IAAA,IAAI,YAAyC,EAAC;AAC9C,IAAA,IAAI;AACF,MAAA,SAAA,GAAY,OAAA,CAAQ,SAAA,CAAU,cAAA,CAAe,KAAK,CAAA;AAAA,IACpD,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,QACb,EAAE,OAAA,EAAS,KAAA,EAAO,GAAA,EAAK,SAAA,CAAU,GAAG,CAAA,EAAE;AAAA,QACtC;AAAA,OACF;AACA,MAAA,SAAA,GAAY,EAAC;AAAA,IACf;AAEA,IAAA,MAAM,QAA0B,EAAC;AACjC,IAAA,MAAM,iBAAA,uBAAwB,GAAA,EAA8B;AAC5D,IAAA,MAAM,UAA6B,EAAC;AAEpC,IAAA,KAAA,MAAW,YAAY,SAAA,EAAW;AAChC,MAAA,IAAI;AACF,QAAA,IAAI,CAAC,eAAA,CAAgB,QAAA,CAAS,EAAE,CAAA,EAAG;AACjC,UAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,YACX,IAAI,QAAA,CAAS,EAAA;AAAA,YACb,MAAA,EAAQ,CAAA,qDAAA,EAAwD,qBAAA,CAAsB,MAAM,CAAA,CAAA;AAAA,WAC7F,CAAA;AACD,UAAA;AAAA,QACF;AACA,QAAA,IAAI,iBAAA,CAAkB,GAAA,CAAI,QAAA,CAAS,EAAE,CAAA,EAAG;AACtC,UAAA,OAAA,CAAQ,KAAK,EAAE,EAAA,EAAI,SAAS,EAAA,EAAI,MAAA,EAAQ,uBAAuB,CAAA;AAC/D,UAAA;AAAA,QACF;AACA,QAAA,MAAM,IAAA,GAAa;AAAA,UACjB,MAAM,QAAA,CAAS,EAAA;AAAA,UACf,WAAA,EAAa,qBAAqB,QAAQ,CAAA;AAAA,UAC1C,WAAA,EAAa,iBAAiB,QAAQ;AAAA,SACxC;AACA,QAAA,KAAA,CAAM,IAAA,CAAK,EAAE,QAAA,EAAU,IAAA,EAAM,CAAA;AAC7B,QAAA,iBAAA,CAAkB,GAAA,CAAI,QAAA,CAAS,EAAA,EAAI,QAAQ,CAAA;AAAA,MAC7C,SAAS,GAAA,EAAK;AACZ,QAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,UACX,IAAI,QAAA,CAAS,EAAA;AAAA,UACb,MAAA,EAAQ,CAAA,0BAAA,EAA6B,eAAA,CAAgB,GAAG,EAAE,OAAO,CAAA;AAAA,SAClE,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,MAAA,OAAA,CAAQ,MAAA,CAAO,IAAA;AAAA,QACb,EAAE,SAAS,KAAA,EAAO,UAAA,EAAY,EAAE,EAAA,EAAI,MAAA,EAAQ,EAAE,MAAA,EAAO;AAAA,QACrD;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AACb,IAAA,IAAA,CAAK,iBAAA,GAAoB,iBAAA;AACzB,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AAEf,IAAA,IAAA,CAAK,OAAA,GAAU,gBAAA;AAAA,MACb,CAAC,GAAA,KAAQ,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,aAAa,MAAA,IAAU,IAAI,eAAA,EAAgB,CAAE,MAAM,CAAA;AAAA,MACjF;AAAA,QACE,MAAA,EAAQ,WAAA;AAAA;AAAA,QAER,OAAA,EAAS,CAAC,GAAA,KACR,OAAA,CAAQ,OAAO,KAAA,CAAM,EAAE,OAAA,EAAS,KAAA,EAAO,GAAA,EAAK,SAAA,CAAU,GAAG,CAAA,IAAK,wBAAwB;AAAA;AAC1F,KACF;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AAEf,IAAA,OAAA,CAAQ,MAAA,CAAO,IAAA;AAAA,MACb;AAAA,QACE,OAAA,EAAS,KAAA;AAAA,QACT,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,WAAW,KAAA,CAAM,MAAA;AAAA,QACjB,cAAc,OAAA,CAAQ;AAAA,OACxB;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,CAAW,GAAA,EAAsB,GAAA,EAAoC;AACzE,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,KAAK,OAAA,IAAW,CAAC,KAAK,OAAA,IAAW,CAAC,KAAK,OAAA,EAAS;AACnD,QAAA,IAAA,CAAK,iBAAA,CAAkB,GAAA,EAAK,GAAA,EAAK,6BAA6B,CAAA;AAC9D,QAAA;AAAA,MACF;AACA,MAAA,IAAI,GAAA,CAAI,WAAW,MAAA,EAAQ;AACzB,QAAA,IAAA,CAAK,iBAAA,CAAkB,GAAA,EAAK,GAAA,EAAK,sDAAsD,CAAA;AACvF,QAAA;AAAA,MACF;AAKA,MAAA,MAAM,eAAA,GAAkB,IAAI,eAAA,EAAgB;AAC5C,MAAA,GAAA,CAAI,IAAA,CAAK,OAAA,EAAS,MAAM,eAAA,CAAgB,OAAO,CAAA;AAC/C,MAAA,MAAM,IAAA,GAAO,MAAM,cAAA,CAAe,GAAA,EAAK,sBAAsB,CAAA;AAC7D,MAAA,IAAI,IAAA,CAAK,SAAS,WAAA,EAAa;AAC7B,QAAA,IAAA,CAAK,iBAAA;AAAA,UACH,GAAA;AAAA,UACA,GAAA;AAAA,UACA,4BAA4B,sBAAsB,CAAA,YAAA;AAAA,SACpD;AACA,QAAA;AAAA,MACF;AACA,MAAA,IAAI,IAAA,CAAK,SAAS,IAAA,EAAM;AACtB,QAAA,IAAA,CAAK,iBAAA,CAAkB,GAAA,EAAK,GAAA,EAAK,kCAAkC,CAAA;AACnE,QAAA;AAAA,MACF;AACA,MAAA,MAAM,IAAA,GAAO,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAChC,MAAA,MAAM,OAAA,GAAU,GAAA,CAAI,OAAA,CAAQ,sBAAsB,CAAA;AAClD,MAAA,IAAI,MAAM,OAAA,CAAQ,IAAI,KAAK,OAAA,KAAY,KAAA,CAAA,IAAa,YAAY,2BAAA,EAA6B;AAC3F,QAAA,IAAA,CAAK,iBAAA;AAAA,UACH,GAAA;AAAA,UACA,GAAA;AAAA,UACA,+DAA+D,2BAA2B,CAAA,CAAA;AAAA,SAC5F;AACA,QAAA;AAAA,MACF;AACA,MAAA,MAAM,YAAY,eAAA,CAAgB,GAAG,CAAA,GAAI,KAAA,CAAA,GAAY,kBAAkB,IAAI,CAAA;AAC3E,MAAA,IAAI,cAAc,KAAA,CAAA,EAAW;AAC3B,QAAA,IAAA,CAAK,kBAAkB,GAAA,EAAK,GAAA,EAAK,UAAU,OAAA,EAAS,CAAA,KAAA,EAAQ,UAAU,EAAE,CAAA;AACxE,QAAA;AAAA,MACF;AACA,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,OAAA,CAAQ,KAAA;AAAA,QAClC,YAAA,CAAa,GAAA,EAAK,IAAA,CAAK,IAAA,EAAM,gBAAgB,MAAM;AAAA,OACrD;AACA,MAAA,MAAM,gBAAA,CAAiB,UAAU,GAAG,CAAA;AAAA,IACtC,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,SAAS,MAAA,CAAO,KAAA;AAAA,QACnB,EAAE,OAAA,EAAS,KAAA,EAAO,GAAA,EAAK,SAAA,CAAU,GAAG,CAAA,EAAE;AAAA,QACtC;AAAA,OACF;AACA,MAAA,IAAA,CAAK,iBAAA,CAAkB,GAAA,EAAK,GAAA,EAAK,wBAAwB,CAAA;AAAA,IAC3D;AAAA,EACF;AAAA,EAEA,MAAM,MAAA,GAAiC;AACrC,IAAA,MAAM,SAAA,GAAY,KAAK,OAAA,EAAS,KAAA,CAAM,QAAO,IAAA,iBAAK,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AACzE,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,IAAW,CAAC,KAAK,OAAA,EAAS;AAClC,MAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,qCAAqC,SAAA,EAAU;AAAA,IAClF;AACA,IAAA,MAAM,SAAA,GAAY,KAAK,KAAA,CAAM,MAAA;AAC7B,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG;AAC3B,MAAA,MAAM,MAAA,GAAS,GAAG,SAAS,CAAA,qBAAA,EAAwB,KAAK,OAAA,CAAQ,MAAM,CAAA,sBAAA,EAAyB,IAAA,CAAK,OAAA,CACjG,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,CAAA,CAAE,EAAE,CAAA,EAAA,EAAK,CAAA,CAAE,MAAM,CAAA,CAAA,CAAG,CAAA,CAClC,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AACb,MAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,SAAA,EAAU;AAAA,IAC7C;AACA,IAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,QAAQ,CAAA,EAAG,SAAS,wBAAwB,SAAA,EAAU;AAAA,EACjF;AAAA,EAEA,MAAM,IAAA,GAAsB;AAC1B,IAAA,IAAA,CAAK,OAAA,GAAU,KAAA;AACf,IAAA,MAAM,UAAU,IAAA,CAAK,OAAA;AACrB,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AACf,IAAA,IAAI;AACF,MAAA,MAAM,SAAS,KAAA,EAAM;AAAA,IACvB,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AAAA,EACjB;AAAA;AAAA,EAGQ,iBAAA,CACN,GAAA,EACA,MAAA,EACA,OAAA,EACA,IAAA,GAAO,UAAU,GAAA,GAAM,MAAA,GAAS,MAAA,EAChC,EAAA,GAA6B,IAAA,EACvB;AACN,IAAA,IAAI,IAAI,WAAA,EAAa;AACrB,IAAA,GAAA,CAAI,UAAU,MAAA,EAAQ;AAAA,MACpB,cAAA,EAAgB,kBAAA;AAAA;AAAA,MAEhB,GAAI,MAAA,KAAW,GAAA,GAAM,EAAE,KAAA,EAAO,MAAA,KAAW;AAAC,KAC3C,CAAA;AACD,IAAA,GAAA,CAAI,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,EAAE,IAAA,EAAM,OAAA,EAAQ,EAAG,EAAA,EAAI,CAAC,CAAA;AAAA,EAC1E;AAAA,EAEQ,YAAY,MAAA,EAA6B;AAC/C,IAAA,MAAM,SAAS,IAAI,MAAA;AAAA,MACjB,EAAE,IAAA,EAAM,IAAA,CAAK,UAAA,EAAY,OAAA,EAAS,KAAK,aAAA,EAAc;AAAA,MACrD,EAAE,YAAA,EAAc,EAAE,KAAA,EAAO,EAAC,EAAE,EAAG,UAAA,EAAY,EAAE,YAAA,EAAc,qBAAA,EAAsB;AAAE,KACrF;AACA,IAAA,MAAA,CAAO,iBAAA,CAAkB,YAAA,EAAc,OAAO,OAAA,KAAY;AAExD,MAAA,IAAI,OAAA,CAAQ,MAAA,EAAQ,MAAA,KAAW,MAAA,EAAW;AACxC,QAAA,MAAM,IAAI,aAAA,CAAc,iBAAA,CAAkB,aAAA,EAAe,iBAAiB,CAAA;AAAA,MAC5E;AACA,MAAA,OAAO,EAAE,OAAO,IAAA,CAAK,KAAA,CAAM,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAA,EAAE;AAAA,IAChD,CAAC,CAAA;AACD,IAAA,MAAA,CAAO,iBAAA;AAAA,MAAkB,YAAA;AAAA,MAAc,OAAO,YAC5C,IAAA,CAAK,cAAA;AAAA,QACH,QAAQ,MAAA,CAAO,IAAA;AAAA,QACf,OAAA,CAAQ,MAAA,CAAO,SAAA,IAAa,EAAC;AAAA,QAC7B,QAAQ,MAAA,CAAO,KAAA;AAAA,QACf;AAAA;AACF,KACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,MAAc,cAAA,CACZ,UAAA,EACA,OAAA,EACA,MACA,MAAA,EACyB;AACzB,IAAA,MAAM,UAAU,IAAA,CAAK,OAAA;AACrB,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,OAAO,WAAA,CAAY,IAAI,aAAA,CAAc,gBAAA,EAAkB,6BAA6B,CAAC,CAAA;AAAA,IACvF;AAGA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,iBAAA,CAAkB,GAAA,CAAI,UAAU,CAAA;AACtD,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,aAAA,CAAc,iBAAA,CAAkB,aAAA,EAAe,CAAA,cAAA,EAAiB,UAAU,CAAA,EAAA,CAAI,CAAA;AAAA,IAC1F;AACA,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,KAAK,CAAA;AACxC,MAAA,MAAM,MAAA,GAAS,0BAAA,CAA2B,OAAA,EAAS,QAAA,EAAU,SAAS,CAAA;AACtE,MAAA,MAAM,EAAE,KAAA,EAAO,aAAA,EAAc,GAAI,MAAA;AAGjC,MAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,IAAA,EAAM,QAAQ,KAAK,MAAA,CAAO,OAAA;AAC1D,MAAA,MAAM,OAAA,GAA4B;AAAA,QAChC,SAAA;AAAA,QACA,UAAA;AAAA,QACA,KAAA;AAAA,QACA,QAAA,EAAU,KAAA;AAAA,QACV,UAAA,EAAY,OAAA,CAAQ,KAAA,CAAM,MAAA,EAAO;AAAA,QACjC,GAAI,OAAA,KAAY,KAAA,CAAA,GAAY,EAAE,OAAA,KAAY,EAAC;AAAA,QAC3C,GAAI,aAAA,KAAkB,KAAA,CAAA,GAAY,EAAE,aAAA,KAAkB;AAAC,OACzD;AACA,MAAA,MAAM,IAAA,CAAK,oBAAoB,MAAM,CAAA;AACrC,MAAA,IAAI;AAIF,QAAA,IAAI,OAAO,OAAA,EAAS;AAIlB,UAAA,OAAO,WAAA;AAAA,YACL,IAAI,aAAA;AAAA,cACF,sBAAA;AAAA,cACA;AAAA;AACF,WACF;AAAA,QACF;AACA,QAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,QAAA,CAAS,QAAQ,OAAO,CAAA;AACtD,QAAA,OAAO,WAAW,OAAO,CAAA;AAAA,MAC3B,CAAA,SAAE;AAGA,QAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,MAC3B;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,KAAA,GAAQ,gBAAgB,GAAG,CAAA;AACjC,MAAA,OAAA,CAAQ,MAAA,CAAO,IAAA;AAAA,QACb,EAAE,OAAA,EAAS,KAAA,EAAO,YAAY,GAAA,EAAK,SAAA,CAAU,KAAK,CAAA,EAAE;AAAA,QACpD;AAAA,OACF;AACA,MAAA,OAAO,WAAA,CAAY,KAAA,EAAO,QAAA,CAAS,cAAA,CAAe,CAAC,CAAC,CAAA;AAAA,IACtD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,oBAAoB,MAAA,EAAoC;AACpE,IAAA,IAAI,IAAA,CAAK,oBAAoB,yBAAA,EAA2B;AACtD,MAAA,IAAA,CAAK,iBAAA,EAAA;AACL,MAAA;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,eAAA,CAAgB,MAAA,IAAU,qBAAA,EAAuB;AAGxD,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,cAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAGA,IAAA,MAAM,IAAI,QAAc,CAAC,OAAA,KAAY,KAAK,eAAA,CAAgB,IAAA,CAAK,OAAO,CAAC,CAAA;AACvE,IAAA,IAAI,OAAO,OAAA,EAAS;AAElB,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAEzB,MAAA,MAAM,IAAI,aAAA,CAAc,sBAAA,EAAwB,mCAAmC,CAAA;AAAA,IACrF;AAAA,EACF;AAAA,EAEQ,mBAAA,GAA4B;AAClC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,eAAA,CAAgB,KAAA,EAAM;AAExC,IAAA,IAAI,IAAA,KAAS,QAAW,IAAA,EAAK;AAAA,SACxB,IAAA,CAAK,iBAAA,EAAA;AAAA,EACZ;AACF,CAAA;AAIA,SAAS,YAAA,CAAa,GAAA,EAAsB,IAAA,EAAc,MAAA,EAA8B;AACtF,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,EAAA,KAAA,MAAW,CAAC,MAAM,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,EAAG;AACvD,IAAA,IAAI,KAAA,KAAU,MAAA,EAAW,OAAA,CAAQ,GAAA,CAAI,IAAA,EAAM,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,IAAA,CAAK,IAAI,IAAI,KAAK,CAAA;AAAA,EAC5F;AACA,EAAA,OAAO,IAAI,QAAQ,IAAI,GAAA,CAAI,IAAI,GAAA,IAAO,GAAA,EAAK,kBAAkB,CAAA,EAAG;AAAA,IAC9D,MAAA,EAAQ,IAAI,MAAA,IAAU,MAAA;AAAA,IACtB,OAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH;AAMA,SAAS,gBAAgB,GAAA,EAA+B;AACtD,EAAA,IAAI,GAAA,CAAI,OAAA,CAAQ,YAAY,CAAA,KAAM,QAAW,OAAO,IAAA;AACpD,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,OAAA,CAAQ,sBAAsB,CAAA;AAElD,EAAA,OAAO,OAAO,OAAA,KAAY,QAAA,IAAY,OAAA,IAAW,4BAAA;AACnD;AAGA,SAAS,UAAU,IAAA,EAAuB;AACxC,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAGA,SAAS,kBAAkB,OAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,SAAS,OAAO,CAAA,IAAK,QAAQ,QAAQ,CAAA,KAAM,cAAc,OAAO,MAAA;AACrE,EAAA,MAAM,EAAA,GAAK,QAAQ,IAAI,CAAA;AACvB,EAAA,IAAI,OAAO,EAAA,KAAO,QAAA,IAAY,OAAO,EAAA,KAAO,UAAU,OAAO,MAAA;AAC7D,EAAA,MAAM,MAAA,GAAS,QAAQ,QAAQ,CAAA;AAC/B,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI,CAAC,QAAA,CAAS,MAAM,CAAA,EAAG,OAAA,GAAU,0BAAA;AAAA,OAAA,IACxB,OAAO,MAAA,CAAO,MAAM,CAAA,KAAM,UAAU,OAAA,GAAU,yBAAA;AAAA,OAAA,IAC9C,MAAA,CAAO,WAAW,CAAA,KAAM,MAAA,IAAa,CAAC,QAAA,CAAS,MAAA,CAAO,WAAW,CAAC,CAAA,EAAG;AAC5E,IAAA,OAAA,GAAU,+BAAA;AAAA,EACZ,CAAA,MAAA,IAAW,MAAA,CAAO,OAAO,CAAA,KAAM,MAAA,IAAa,CAAC,QAAA,CAAS,MAAA,CAAO,OAAO,CAAC,CAAA,EAAG;AACtE,IAAA,OAAA,GAAU,2BAAA;AAAA,EACZ;AACA,EAAA,OAAO,OAAA,KAAY,SACf,MAAA,GACA,EAAE,IAAI,OAAA,EAAS,CAAA,2BAAA,EAA8B,OAAO,CAAA,CAAA,CAAA,EAAI;AAC9D;AAGA,eAAe,gBAAA,CAAiB,UAAoB,GAAA,EAAoC;AACtF,EAAA,GAAA,CAAI,UAAU,QAAA,CAAS,MAAA,EAAQ,OAAO,WAAA,CAAY,QAAA,CAAS,OAAO,CAAC,CAAA;AACnE,EAAA,IAAI,QAAA,CAAS,SAAS,IAAA,EAAM;AAC1B,IAAA,WAAA,MAAiB,KAAA,IAAS,SAAS,IAAA,EAAM;AACvC,MAAA,IAAI,IAAI,SAAA,EAAW;AACnB,MAAA,GAAA,CAAI,MAAM,KAAK,CAAA;AAAA,IACjB;AAAA,EACF;AACA,EAAA,GAAA,CAAI,GAAA,EAAI;AACV;AAGA,SAAS,eAAA,CACP,MACA,QAAA,EAC+B;AAC/B,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,cAAA,CAAe,CAAC,CAAA;AACxC,EAAA,IAAI,WAAW,MAAA,EAAQ;AACrB,IAAA,MAAM,OAAA,GAAU,wBAAA,CAAyB,IAAA,GAAO,yBAAyB,CAAC,CAAA;AAC1E,IAAA,IAAI,OAAA,KAAY,MAAA,EAAW,OAAO,EAAE,QAAQ,OAAA,EAAQ;AAAA,EACtD;AACA,EAAA,MAAM,UAAA,GAAa,OAAO,2BAA2B,CAAA;AACrD,EAAA,IAAI,MAAA,KAAW,KAAA,IAAS,QAAA,CAAS,UAAU,CAAA,EAAG;AAE5C,IAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,CAAK,SAAA,CAAU,UAAU,CAAA,EAAE;AAAA,EACvD;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,iBAAiB,OAAA,EAAkD;AACjF,EAAA,OAAO,IAAI,mBAAmB,OAAO,CAAA;AACvC","file":"mcp.js","sourcesContent":["/**\n * Adapter self-description. `supportedSpec` lists the modern revision and\n * the newest 2025-era revision. The SDK's legacy fallback also accepts older\n * 2025-era revisions.\n */\nimport { LATEST_PROTOCOL_VERSION } from '@modelcontextprotocol/server';\nimport type { AdapterDescriptor } from '../../core';\nimport { MCP_MODERN_PROTOCOL_REVISION } from './constants';\n\n// List the modern revision followed by the SDK's latest legacy revision\nconst MCP_SUPPORTED_SPEC = `${MCP_MODERN_PROTOCOL_REVISION}, ${LATEST_PROTOCOL_VERSION}`;\n\n// Tool-oriented capabilities this adapter implements\nconst MCP_CAPABILITIES: readonly string[] = ['tools/list', 'tools/call'];\n\n/**\n * MCP surfaces this adapter does not implement, listed so its descriptor never\n * implies blanket protocol compatibility.\n *\n * `dns-rebinding-protection` is delegated rather than missing: the gateway's\n * `onRequest` hook validates Host and Origin for `/mcp` (see adapter.ts), and\n * the adapter provides none on its own.\n */\nexport const MCP_UNSUPPORTED: readonly string[] = [\n  'resources',\n  'prompts',\n  'sampling',\n  'completions',\n  'elicitation',\n  'roots',\n  'logging',\n  'notifications/tools/list_changed',\n  'tasks',\n  'dns-rebinding-protection',\n  'authorization',\n  'sessions',\n  'subscriptions',\n  'pagination',\n  'HTTP+SSE transport',\n  // mppx reads challenges and refusals from tool-result `_meta`.\n  'MPP payment-required as JSON-RPC error -32042',\n  'MPP verification failure as JSON-RPC error -32043',\n];\n\nexport function buildDescriptor(implementationVersion: string): AdapterDescriptor {\n  return {\n    name: 'mcp',\n    kind: 'protocol',\n    implementationVersion,\n    supportedSpec: MCP_SUPPORTED_SPEC,\n    capabilities: MCP_CAPABILITIES,\n    status: 'stable',\n    unsupported: MCP_UNSUPPORTED,\n  };\n}\n","/**\n * Maps a canonical `CommerceResource` to an MCP `Tool`: the tool name is the\n * resource id, the description carries a price notice for a paid resource,\n * and the input schema is the canonical JSON Schema plus the reserved\n * `_payment` and `_authorization` properties the resource accepts\n */\n\nimport type { JSONObject, Tool } from '@modelcontextprotocol/server';\nimport {\n  AUTHORIZATION_INPUT_FIELD,\n  type CommerceResource,\n  PAYMENT_INPUT_FIELD,\n  type PaymentMethodName,\n} from '../../core';\nimport { isRecord } from '../../core/is-record';\nimport { MPP_MCP_CREDENTIAL_META_KEY } from '../../payments/mpp/transport';\nimport { X402_MCP_PAYMENT_META_KEY } from '../../payments/x402/transport';\nimport { MCP_TOOL_NAME_PATTERN } from './constants';\n\nexport function isValidToolName(id: string): boolean {\n  return MCP_TOOL_NAME_PATTERN.test(id);\n}\n\nfunction isPaidResource(resource: CommerceResource): boolean {\n  return resource.pricing.type !== 'free';\n}\n\n// The rail a `_payment` proof is labeled with (see `extractReservedInputFields`),\n// `undefined` when the resource lists none\nfunction primaryPaymentMethod(resource: CommerceResource): PaymentMethodName | undefined {\n  return resource.paymentMethods[0];\n}\n\n/** Describe the selected rail's `_meta` proof and `_payment` fallback */\nexport function proofCarriers(method: PaymentMethodName | undefined): string {\n  const field = `the \"${PAYMENT_INPUT_FIELD}\" argument`;\n  if (method === 'x402') return `_meta[\"${X402_MCP_PAYMENT_META_KEY}\"] or ${field}`;\n  if (method === 'mpp') return `_meta[\"${MPP_MCP_CREDENTIAL_META_KEY}\"] or ${field}`;\n  return field;\n}\n\n// How to supply a proof, generic when the resource names no rail\nfunction paymentProofNote(resource: CommerceResource): string {\n  const method = primaryPaymentMethod(resource);\n  const rail = method !== undefined ? `an ${method}` : 'a';\n  return `Requires ${rail} payment proof in ${proofCarriers(method)}, built from the payment-required response.`;\n}\n\n// Tell callers to omit `_payment` when a wrapper supplies `_meta`\nconst OMIT_NOTE = 'Omit it when the client sends the proof in _meta.';\n\n/**\n * Description for the reserved `_payment` input property, in the proof\n * encoding of the resource's own rail\n */\nfunction paymentInputFieldDescription(resource: CommerceResource): string {\n  const method = primaryPaymentMethod(resource);\n  if (method === 'x402') {\n    return `x402 payment proof (base64 PAYMENT-SIGNATURE value) for a previous payment-required response. ${OMIT_NOTE}`;\n  }\n  if (method === 'mpp') {\n    return `MPP credential (the full \"Authorization: Payment ...\" value) for the challenge in a previous payment-required response. ${OMIT_NOTE}`;\n  }\n  if (method !== undefined) {\n    return `${method} payment proof (base64-encoded) returned from a previous payment-required response.`;\n  }\n  return 'Payment proof returned from a previous payment-required response.';\n}\n\n// The authorization methods the resource requires, empty when it requires none\nfunction requiredAuthorization(resource: CommerceResource): readonly string[] {\n  return resource.authorization?.required ?? [];\n}\n\nfunction authorizationNote(resource: CommerceResource): string {\n  const methods = requiredAuthorization(resource);\n  return methods.length > 0\n    ? ` Also requires ${methods.join(' and ')} authorization in the \"${AUTHORIZATION_INPUT_FIELD}\" input field.`\n    : '';\n}\n\n/**\n * Tool description. A paid resource gets a price notice appended, so an agent\n * sees the cost before calling, not only in the input schema.\n */\nexport function buildToolDescription(resource: CommerceResource): string {\n  const base = resource.description ?? resource.name;\n  switch (resource.pricing.type) {\n    case 'free':\n      return base;\n    case 'fixed': {\n      const { amount, currency } = resource.pricing;\n      return `${base} Costs ${amount} ${currency} per call. ${paymentProofNote(resource)}${authorizationNote(resource)}`;\n    }\n    case 'dynamic':\n      return `${base} Requires payment (amount determined at request time). ${paymentProofNote(resource)}${authorizationNote(resource)}`;\n  }\n}\n\n/**\n * Builds the MCP `Tool.inputSchema` from the canonical `CommerceResource.inputSchema`.\n *\n * Every keyword is carried through except that `type` is forced to the\n * `'object'` MCP requires, `properties` keeps only object-valued entries and\n * `required` only strings. A paid resource gains the optional `_payment`\n * string property, and a resource requiring authorization the optional\n * `_authorization` object. Both are declared because a resource's input schema\n * is closed by default, and a client that validates arguments against it\n * would otherwise refuse to send them.\n */\nexport function buildInputSchema(resource: CommerceResource): Tool['inputSchema'] {\n  const base = resource.inputSchema;\n  const baseIsObject = isRecord(base);\n\n  // Keep object-valued property schemas from the resource's config JSON\n  const basePropertyEntries: readonly [string, JSONObject][] =\n    baseIsObject && isRecord(base.properties)\n      ? Object.entries(base.properties).filter((entry): entry is [string, JSONObject] =>\n          isRecord(entry[1]),\n        )\n      : [];\n  const properties: Record<string, JSONObject> = Object.fromEntries(basePropertyEntries);\n\n  // Both overwrite a resource-declared property of the same name; config\n  // rejects that collision at load time\n  if (isPaidResource(resource)) {\n    properties[PAYMENT_INPUT_FIELD] = {\n      type: 'string',\n      description: paymentInputFieldDescription(resource),\n    };\n  }\n  const methods = requiredAuthorization(resource);\n  if (methods.length > 0) {\n    properties[AUTHORIZATION_INPUT_FIELD] = {\n      type: 'object',\n      description:\n        'Authorization this resource requires in addition to payment: the method and its serialized proof.',\n      properties: {\n        method: { type: 'string', enum: [...methods] },\n        payload: { type: 'string', minLength: 1 },\n      },\n      required: ['method', 'payload'],\n    };\n  }\n\n  const required =\n    baseIsObject && Array.isArray(base.required)\n      ? base.required.filter((v): v is string => typeof v === 'string')\n      : [];\n\n  const extra = baseIsObject\n    ? Object.fromEntries(\n        Object.entries(base).filter(\n          ([key]) => key !== 'type' && key !== 'properties' && key !== 'required',\n        ),\n      )\n    : {};\n\n  return {\n    ...extra,\n    type: 'object',\n    properties,\n    ...(required.length > 0 ? { required } : {}),\n  };\n}\n","/**\n * Maps pipeline outcomes and errors to MCP tool results through the core wire\n * helpers (`toErrorEnvelope`, `toPaymentRequiredEnvelope`,\n * `toDeliverySummary`). The A2A adapter uses all three and the HTTP route the\n * two envelopes, so each shape is defined once.\n */\n\nimport type { CallToolResult } from '@modelcontextprotocol/server';\nimport {\n  type CommerceError,\n  DELIVERY_SUMMARY_META_KEY,\n  type DeliveredOutcome,\n  type ExecutionOutcome,\n  type PaymentMethodName,\n  type PaymentRequiredOutcome,\n  toDeliverySummary,\n  toErrorEnvelope,\n  toPaymentRequiredEnvelope,\n} from '../../core';\nimport { isRecord } from '../../core/is-record';\nimport {\n  MPP_MCP_PAYMENT_REQUIRED_META_KEY,\n  MPP_MCP_RECEIPT_META_KEY,\n  mcpPaymentRequired,\n  receiptObject,\n} from '../../payments/mpp/transport';\nimport {\n  settlementFailure,\n  settlementResponse,\n  settlementResponseFromDetails,\n  X402_MCP_ERROR_META_KEY,\n  X402_MCP_PAYMENT_RESPONSE_META_KEY,\n  x402ErrorCode,\n} from '../../payments/x402/transport';\nimport { proofCarriers } from './tool-mapping';\n\nfunction toRecord(value: object): Record<string, unknown> {\n  return value as Record<string, unknown>;\n}\n\nfunction deliveredResult(outcome: DeliveredOutcome): CallToolResult {\n  const body = outcome.body;\n  const text = typeof body === 'string' ? body : JSON.stringify(body ?? null);\n  const payment = outcome.payment;\n  const receipt =\n    payment?.provider === 'mpp' ? receiptObject(payment.metadata?.['receipt']) : undefined;\n  return {\n    content: [{ type: 'text', text }],\n    ...(isRecord(body) ? { structuredContent: body } : {}),\n    _meta: {\n      [DELIVERY_SUMMARY_META_KEY]: toRecord(toDeliverySummary(outcome)),\n      ...(payment?.provider === 'x402'\n        ? { [X402_MCP_PAYMENT_RESPONSE_META_KEY]: settlementResponse(payment) }\n        : {}),\n      ...(receipt !== undefined ? { [MPP_MCP_RECEIPT_META_KEY]: receipt } : {}),\n    },\n  };\n}\n\n// The x402 MCP transport requires the first text block to repeat\n// `structuredContent` as JSON; the second gives readers a short explanation\nfunction structuredError(\n  structured: Record<string, unknown>,\n  sentence: string,\n  meta?: Record<string, unknown>,\n): CallToolResult {\n  return {\n    isError: true,\n    content: [\n      { type: 'text', text: JSON.stringify(structured) },\n      { type: 'text', text: sentence },\n    ],\n    structuredContent: structured,\n    ...(meta !== undefined ? { _meta: meta } : {}),\n  };\n}\n\n// Put x402's PaymentRequired fields beside the gateway error envelope so\n// x402 clients can read the challenge from `structuredContent`\nfunction withX402Challenge(\n  envelope: Record<string, unknown>,\n  challenge: Record<string, unknown>,\n): Record<string, unknown> {\n  return { ...challenge, ...envelope };\n}\n\nfunction paymentRequiredResult(outcome: PaymentRequiredOutcome): CallToolResult {\n  const envelope = toPaymentRequiredEnvelope(outcome);\n  const p = envelope.payment;\n  const x402Required = p.provider === 'x402' ? p.envelope : undefined;\n  const structured =\n    x402Required !== undefined\n      ? withX402Challenge(toRecord(envelope), x402Required)\n      : toRecord(envelope);\n  const mppRequired = p.provider === 'mpp' ? mcpPaymentRequired(p.envelope) : undefined;\n  let meta: Record<string, unknown> | undefined;\n  if (x402Required !== undefined) meta = { [X402_MCP_ERROR_META_KEY]: x402Required };\n  else if (mppRequired !== undefined) meta = { [MPP_MCP_PAYMENT_REQUIRED_META_KEY]: mppRequired };\n  return structuredError(\n    structured,\n    // A challenge with several offers names no single destination\n    `Payment required: ${p.amount} ${p.currency}${p.destination !== undefined ? ` to ${p.destination}` : ''} for resource \"${outcome.resourceId}\". Retry with an ${p.provider} payment proof in ${proofCarriers(p.provider)}.`,\n    meta,\n  );\n}\n\n/** A tool result for an error; `rail` is the payment method the call used, if any */\nexport function errorResult(error: CommerceError, rail?: PaymentMethodName): CallToolResult {\n  const envelope = toErrorEnvelope(error);\n  const details = error.details;\n  const challenge = details?.['challenge'];\n  // Include the rail's new challenge when a 402 refusal supplies one\n  const refused = error.httpStatus === 402 && isRecord(challenge);\n  const x402Required =\n    rail === 'x402' && refused\n      ? {\n          ...challenge,\n          error: x402ErrorCode(error.code, details?.['reason'], details?.['network']),\n        }\n      : undefined;\n  const structured =\n    x402Required !== undefined\n      ? withX402Challenge(toRecord(envelope), x402Required)\n      : toRecord(envelope);\n  let meta: Record<string, unknown> | undefined;\n  if (rail === 'x402') {\n    const settlement =\n      error.code === 'PAYMENT_SETTLEMENT_FAILED'\n        ? settlementFailure(details)\n        : settlementResponseFromDetails(details);\n    if (settlement !== undefined || x402Required !== undefined) {\n      meta = {\n        ...(x402Required !== undefined ? { [X402_MCP_ERROR_META_KEY]: x402Required } : {}),\n        ...(settlement !== undefined ? { [X402_MCP_PAYMENT_RESPONSE_META_KEY]: settlement } : {}),\n      };\n    }\n  } else if (rail === 'mpp' && refused) {\n    // MPP error results carry a challenge but no receipt\n    const required = mcpPaymentRequired(challenge, {\n      code: error.code,\n      reason: details?.['reason'],\n      detail: error.message,\n    });\n    if (required !== undefined) meta = { [MPP_MCP_PAYMENT_REQUIRED_META_KEY]: required };\n  }\n  return structuredError(structured, `${envelope.code}: ${envelope.message}`, meta);\n}\n\nexport function mapOutcome(outcome: ExecutionOutcome): CallToolResult {\n  return outcome.kind === 'delivered' ? deliveredResult(outcome) : paymentRequiredResult(outcome);\n}\n","/**\n * MCP protocol adapter.\n *\n * One MCP tool per mcp-exposed canonical resource. Every `tools/call` builds a\n * `CanonicalRequest` and goes through `context.pipeline.execute()`. This\n * adapter reads payment carriers but leaves verification, settlement and\n * merchant calls to the pipeline.\n *\n * The SDK's `createMcpHandler` serves `2026-07-28` over Streamable HTTP and\n * routes 2025-era requests through its stateless fallback. It creates a\n * low-level `Server` for each request. This adapter converts the gateway's\n * Node request and response to the web types the handler uses, without adding\n * `@modelcontextprotocol/node` as a peer.\n *\n * Tools are registered on the low-level `Server`, not through\n * `McpServer.registerTool`, whose `inputSchema` accepts only a Zod schema or\n * shape. `CommerceResource.inputSchema` and the MCP wire `Tool.inputSchema`\n * are both JSON Schema, so building `Tool` objects directly carries the schema\n * through with no lossy conversion. The SDK marks `Server` `@deprecated` but\n * still documents it for advanced cases such as this one.\n *\n * The gateway's `onRequest` hook validates Host and Origin for every route,\n * including `/mcp`. This adapter has no separate allowlist. When mounted\n * outside the gateway, it provides no Host or Origin checks; its descriptor\n * therefore lists `dns-rebinding-protection` as unsupported.\n */\nimport type { IncomingMessage, ServerResponse } from 'node:http';\nimport {\n  type CallToolResult,\n  createMcpHandler,\n  type McpHttpHandler,\n  ProtocolError,\n  ProtocolErrorCode,\n  Server,\n  type Tool,\n} from '@modelcontextprotocol/server';\nimport {\n  type AdapterDescriptor,\n  type AdapterHealth,\n  type CanonicalRequest,\n  CommerceError,\n  type CommerceResource,\n  extractReservedInputFields,\n  type HttpProtocolAdapter,\n  type PaymentSubmission,\n  type ProtocolAdapterContext,\n  toCommerceError,\n} from '../../core';\nimport { toLogInfo } from '../../core/errors';\nimport { isRecord } from '../../core/is-record';\nimport { MPP_MCP_CREDENTIAL_META_KEY } from '../../payments/mpp/transport';\nimport { X402_MCP_PAYMENT_META_KEY, x402McpPaymentSubmission } from '../../payments/x402/transport';\nimport { PACKAGE_VERSION } from '../../version';\nimport { readCappedBody } from '../http';\nimport { MCP_MODERN_PROTOCOL_REVISION, MCP_TOOL_NAME_PATTERN } from './constants';\nimport { buildDescriptor } from './descriptor';\nimport { errorResult, mapOutcome } from './result-mapping';\nimport { buildInputSchema, buildToolDescription, isValidToolName } from './tool-mapping';\n\nexport interface McpAdapterOptions {\n  /** Path prefix the gateway mounts this adapter at. Default '/mcp' */\n  readonly mountPath?: string;\n  /** MCP `Implementation.name` reported during initialize */\n  readonly serverName?: string;\n  /** MCP `Implementation.version` reported during initialize. Default: this package's version */\n  readonly serverVersion?: string;\n}\n\ninterface RegisteredTool {\n  readonly resource: CommerceResource;\n  readonly tool: Tool;\n}\n\ninterface SkippedResource {\n  readonly id: string;\n  readonly reason: string;\n}\n\nconst DEFAULT_MOUNT_PATH = '/mcp';\nconst DEFAULT_SERVER_NAME = 'agent-commerce';\n\n/**\n * The SDK can dispatch several `tools/call` requests in one JSON-RPC batch\n * before earlier calls settle. One POST can therefore start concurrent\n * `pipeline.execute()` calls. Limit active calls to 8 per adapter instance.\n */\nconst MAX_CONCURRENT_TOOL_CALLS = 8;\n\n// A second line behind the gateway mount's cap, bounding what this adapter\n// buffers if it is mounted without that guard\nconst MAX_REQUEST_BODY_BYTES = 256 * 1024;\n\n/**\n * Bounds the queue behind the semaphore, per adapter instance. Without it an\n * oversized batch would queue in full and then run in full. 64 is 8x\n * MAX_CONCURRENT_TOOL_CALLS, room for a legitimate burst; calls beyond it fail\n * fast with GATEWAY_BUSY and reach no backend.\n */\nconst MAX_QUEUED_TOOL_CALLS = 64;\n\n// Batch revision used by the SDK when no protocol-version header is sent\nconst MCP_BATCH_PROTOCOL_REVISION = '2025-03-26';\n\n// The tool list is public and stable until restart; cache it for a minute\nconst TOOLS_LIST_CACHE_HINT = { ttlMs: 60_000, cacheScope: 'public' } as const;\n\nclass McpProtocolAdapter implements HttpProtocolAdapter {\n  readonly name = 'mcp' as const;\n  readonly mountPath: string;\n  readonly descriptor: AdapterDescriptor;\n\n  private readonly serverName: string;\n  private readonly serverVersion: string;\n\n  private context: ProtocolAdapterContext | undefined;\n  private started = false;\n  private tools: readonly RegisteredTool[] = [];\n  private toolsByResourceId: ReadonlyMap<string, CommerceResource> = new Map();\n  private skipped: readonly SkippedResource[] = [];\n  private handler: McpHttpHandler | undefined;\n\n  // Counting semaphore on `pipeline.execute()`. It lives on the adapter, not\n  // the request, so the cap holds across concurrent `/mcp` requests as well\n  // as within one batch.\n  private inFlightToolCalls = 0;\n  private readonly toolCallWaiters: Array<() => void> = [];\n\n  constructor(options: McpAdapterOptions = {}) {\n    this.mountPath = options.mountPath ?? DEFAULT_MOUNT_PATH;\n    this.serverName = options.serverName ?? DEFAULT_SERVER_NAME;\n    this.serverVersion = options.serverVersion ?? PACKAGE_VERSION;\n    this.descriptor = buildDescriptor(PACKAGE_VERSION);\n  }\n\n  async start(context: ProtocolAdapterContext): Promise<void> {\n    this.context = context;\n    this.started = false;\n\n    let resources: readonly CommerceResource[] = [];\n    try {\n      resources = context.resources.listExposedVia('mcp');\n    } catch (err) {\n      context.logger.error(\n        { adapter: 'mcp', err: toLogInfo(err) },\n        'mcp adapter: failed to list mcp-exposed resources',\n      );\n      resources = [];\n    }\n\n    const tools: RegisteredTool[] = [];\n    const toolsByResourceId = new Map<string, CommerceResource>();\n    const skipped: SkippedResource[] = [];\n\n    for (const resource of resources) {\n      try {\n        if (!isValidToolName(resource.id)) {\n          skipped.push({\n            id: resource.id,\n            reason: `resource id is not a legal MCP tool name (must match ${MCP_TOOL_NAME_PATTERN.source})`,\n          });\n          continue;\n        }\n        if (toolsByResourceId.has(resource.id)) {\n          skipped.push({ id: resource.id, reason: 'duplicate tool name' });\n          continue;\n        }\n        const tool: Tool = {\n          name: resource.id,\n          description: buildToolDescription(resource),\n          inputSchema: buildInputSchema(resource),\n        };\n        tools.push({ resource, tool });\n        toolsByResourceId.set(resource.id, resource);\n      } catch (err) {\n        skipped.push({\n          id: resource.id,\n          reason: `failed to build MCP tool: ${toCommerceError(err).message}`,\n        });\n      }\n    }\n\n    for (const s of skipped) {\n      context.logger.warn(\n        { adapter: 'mcp', resourceId: s.id, reason: s.reason },\n        'mcp adapter: resource skipped',\n      );\n    }\n\n    this.tools = tools;\n    this.toolsByResourceId = toolsByResourceId;\n    this.skipped = skipped;\n    // Route 2025-era requests through the SDK's stateless fallback\n    this.handler = createMcpHandler(\n      (ctx) => this.buildServer(ctx.requestInfo?.signal ?? new AbortController().signal),\n      {\n        legacy: 'stateless',\n        // Reporting only: a request the SDK rejects is already answered\n        onerror: (err) =>\n          context.logger.debug({ adapter: 'mcp', err: toLogInfo(err) }, 'mcp adapter: SDK error'),\n      },\n    );\n    this.started = true;\n\n    context.logger.info(\n      {\n        adapter: 'mcp',\n        mountPath: this.mountPath,\n        toolCount: tools.length,\n        skippedCount: skipped.length,\n      },\n      'mcp adapter started',\n    );\n  }\n\n  async handleHttp(req: IncomingMessage, res: ServerResponse): Promise<void> {\n    try {\n      if (!this.started || !this.context || !this.handler) {\n        this.writeJsonRpcError(res, 503, 'MCP adapter is not running.');\n        return;\n      }\n      if (req.method !== 'POST') {\n        this.writeJsonRpcError(res, 405, 'Method not allowed. This endpoint only accepts POST.');\n        return;\n      }\n\n      // Aborted when the response closes. `handleToolCall` checks it only\n      // before `pipeline.execute()`: a call that may already have settled\n      // must finish, or the buyer is charged for nothing.\n      const abortController = new AbortController();\n      res.once('close', () => abortController.abort());\n      const read = await readCappedBody(req, MAX_REQUEST_BODY_BYTES);\n      if (read.kind === 'too-large') {\n        this.writeJsonRpcError(\n          res,\n          413,\n          `Request body exceeds the ${MAX_REQUEST_BODY_BYTES}-byte limit.`,\n        );\n        return;\n      }\n      if (read.kind !== 'ok') {\n        this.writeJsonRpcError(res, 400, 'Could not read the request body.');\n        return;\n      }\n      const body = parseJson(read.text);\n      const version = req.headers['mcp-protocol-version'];\n      if (Array.isArray(body) && version !== undefined && version !== MCP_BATCH_PROTOCOL_REVISION) {\n        this.writeJsonRpcError(\n          res,\n          400,\n          `Invalid Request: JSON-RPC batches are supported only in MCP ${MCP_BATCH_PROTOCOL_REVISION}.`,\n        );\n        return;\n      }\n      const malformed = isModernRequest(req) ? undefined : malformedToolCall(body);\n      if (malformed !== undefined) {\n        this.writeJsonRpcError(res, 200, malformed.message, -32602, malformed.id);\n        return;\n      }\n      const response = await this.handler.fetch(\n        toWebRequest(req, read.text, abortController.signal),\n      );\n      await writeWebResponse(response, res);\n    } catch (err) {\n      this.context?.logger.error(\n        { adapter: 'mcp', err: toLogInfo(err) },\n        'mcp adapter: request handling failed',\n      );\n      this.writeJsonRpcError(res, 500, 'Internal server error.');\n    }\n  }\n\n  async health(): Promise<AdapterHealth> {\n    const checkedAt = this.context?.clock.nowIso() ?? new Date().toISOString();\n    if (!this.started || !this.context) {\n      return { status: 'fail', detail: 'MCP adapter has not been started.', checkedAt };\n    }\n    const toolCount = this.tools.length;\n    if (this.skipped.length > 0) {\n      const detail = `${toolCount} tool(s) registered; ${this.skipped.length} resource(s) skipped: ${this.skipped\n        .map((s) => `${s.id} (${s.reason})`)\n        .join('; ')}`;\n      return { status: 'warn', detail, checkedAt };\n    }\n    return { status: 'pass', detail: `${toolCount} tool(s) registered.`, checkedAt };\n  }\n\n  async stop(): Promise<void> {\n    this.started = false;\n    const handler = this.handler;\n    this.handler = undefined;\n    try {\n      await handler?.close();\n    } catch {\n      // Best effort: stop() must be idempotent and never throw\n    }\n    this.context = undefined;\n  }\n\n  // Use general JSON-RPC codes for transport errors\n  private writeJsonRpcError(\n    res: ServerResponse,\n    status: number,\n    message: string,\n    code = status >= 500 ? -32603 : -32600,\n    id: string | number | null = null,\n  ): void {\n    if (res.headersSent) return;\n    res.writeHead(status, {\n      'content-type': 'application/json',\n      // RFC 9110 requires Allow on a 405, and this endpoint takes only POST\n      ...(status === 405 ? { allow: 'POST' } : {}),\n    });\n    res.end(JSON.stringify({ jsonrpc: '2.0', error: { code, message }, id }));\n  }\n\n  private buildServer(signal: AbortSignal): Server {\n    const server = new Server(\n      { name: this.serverName, version: this.serverVersion },\n      { capabilities: { tools: {} }, cacheHints: { 'tools/list': TOOLS_LIST_CACHE_HINT } },\n    );\n    server.setRequestHandler('tools/list', async (request) => {\n      // A cursor is invalid because this list is not paginated\n      if (request.params?.cursor !== undefined) {\n        throw new ProtocolError(ProtocolErrorCode.InvalidParams, 'Invalid cursor.');\n      }\n      return { tools: this.tools.map((t) => t.tool) };\n    });\n    server.setRequestHandler('tools/call', async (request) =>\n      this.handleToolCall(\n        request.params.name,\n        request.params.arguments ?? {},\n        request.params._meta,\n        signal,\n      ),\n    );\n    return server;\n  }\n\n  private async handleToolCall(\n    resourceId: string,\n    rawArgs: Record<string, unknown>,\n    meta: Record<string, unknown> | undefined,\n    signal: AbortSignal,\n  ): Promise<CallToolResult> {\n    const context = this.context;\n    if (!context) {\n      return errorResult(new CommerceError('INTERNAL_ERROR', 'MCP adapter is not running.'));\n    }\n    // Clients can call names absent from `tools/list`. Return the same MCP\n    // error for unknown and non-MCP resources without revealing the latter\n    const resource = this.toolsByResourceId.get(resourceId);\n    if (!resource) {\n      throw new ProtocolError(ProtocolErrorCode.InvalidParams, `Unknown tool \"${resourceId}\".`);\n    }\n    try {\n      const requestId = context.ids.next('mcp');\n      const fields = extractReservedInputFields(rawArgs, resource, requestId);\n      const { input, authorization } = fields;\n      // Client wrappers attach proofs in `_meta`; that proof takes priority\n      // over a possible `_payment` placeholder in the arguments\n      const payment = paymentFromMeta(meta, resource) ?? fields.payment;\n      const request: CanonicalRequest = {\n        requestId,\n        resourceId,\n        input,\n        protocol: 'mcp',\n        receivedAt: context.clock.nowIso(),\n        ...(payment !== undefined ? { payment } : {}),\n        ...(authorization !== undefined ? { authorization } : {}),\n      };\n      await this.acquireToolCallSlot(signal);\n      try {\n        // The last cancellation point: a queued call whose caller has left\n        // must not start a pipeline run, while a started one may reach\n        // settle() and must finish\n        if (signal.aborted) {\n          // No error code names \"the caller left\". PROTOCOL_UNSUPPORTED is the\n          // closest non-retryable one; GATEWAY_BUSY would invite a retry\n          // nobody is left to make.\n          return errorResult(\n            new CommerceError(\n              'PROTOCOL_UNSUPPORTED',\n              'Client disconnected before this call started.',\n            ),\n          );\n        }\n        const outcome = await context.pipeline.execute(request);\n        return mapOutcome(outcome);\n      } finally {\n        // Always released: a stranded permit shrinks the cap for good and\n        // eventually deadlocks the adapter\n        this.releaseToolCallSlot();\n      }\n    } catch (err) {\n      const error = toCommerceError(err);\n      context.logger.warn(\n        { adapter: 'mcp', resourceId, err: toLogInfo(error) },\n        'mcp adapter: execution failed',\n      );\n      return errorResult(error, resource.paymentMethods[0]);\n    }\n  }\n\n  /**\n   * Takes a permit, or queues for one when MAX_CONCURRENT_TOOL_CALLS are in\n   * flight. Throws when the queue is full or the caller disconnected while\n   * queued; a throw never leaks a permit.\n   */\n  private async acquireToolCallSlot(signal: AbortSignal): Promise<void> {\n    if (this.inFlightToolCalls < MAX_CONCURRENT_TOOL_CALLS) {\n      this.inFlightToolCalls++;\n      return;\n    }\n    if (this.toolCallWaiters.length >= MAX_QUEUED_TOOL_CALLS) {\n      // Load shedding is transient, so GATEWAY_BUSY tells the caller to back\n      // off and retry\n      throw new CommerceError(\n        'GATEWAY_BUSY',\n        'Too many tool calls already queued on this adapter; retry later.',\n      );\n    }\n    // Resolved by releaseToolCallSlot, which hands its permit straight to the\n    // oldest waiter, so a call arriving later cannot take it first\n    await new Promise<void>((resolve) => this.toolCallWaiters.push(resolve));\n    if (signal.aborted) {\n      // This waiter now holds a permit it will not use; pass it on\n      this.releaseToolCallSlot();\n      // Non-retryable, for the same reason as the check in handleToolCall\n      throw new CommerceError('PROTOCOL_UNSUPPORTED', 'Client disconnected while queued.');\n    }\n  }\n\n  private releaseToolCallSlot(): void {\n    const next = this.toolCallWaiters.shift();\n    // Handing the permit over leaves the in-flight count unchanged\n    if (next !== undefined) next();\n    else this.inFlightToolCalls--;\n  }\n}\n\n// Pass the Node request body to the SDK as a stream. The gateway's socket\n// byte limit still applies, and the signal reports client disconnects.\nfunction toWebRequest(req: IncomingMessage, body: string, signal: AbortSignal): Request {\n  const headers = new Headers();\n  for (const [name, value] of Object.entries(req.headers)) {\n    if (value !== undefined) headers.set(name, Array.isArray(value) ? value.join(', ') : value);\n  }\n  return new Request(new URL(req.url ?? '/', 'http://localhost'), {\n    method: req.method ?? 'POST',\n    headers,\n    body,\n    signal,\n  });\n}\n\n/**\n * Let the SDK validate requests with `Mcp-Method` or a modern version header;\n * malformed headers and `_meta` may require an HTTP 400 response\n */\nfunction isModernRequest(req: IncomingMessage): boolean {\n  if (req.headers['mcp-method'] !== undefined) return true;\n  const version = req.headers['mcp-protocol-version'];\n  // ISO revision dates sort lexically.\n  return typeof version === 'string' && version >= MCP_MODERN_PROTOCOL_REVISION;\n}\n\n// Undefined for a body that is not JSON; the SDK answers that with -32700\nfunction parseJson(body: string): unknown {\n  try {\n    return JSON.parse(body);\n  } catch {\n    return undefined;\n  }\n}\n\n// Give malformed tool calls without modern headers a short -32602 response\nfunction malformedToolCall(message: unknown): { id: string | number; message: string } | undefined {\n  if (!isRecord(message) || message['method'] !== 'tools/call') return undefined;\n  const id = message['id'];\n  if (typeof id !== 'string' && typeof id !== 'number') return undefined;\n  const params = message['params'];\n  let problem: string | undefined;\n  if (!isRecord(params)) problem = 'params must be an object';\n  else if (typeof params['name'] !== 'string') problem = '\"name\" must be a string';\n  else if (params['arguments'] !== undefined && !isRecord(params['arguments'])) {\n    problem = '\"arguments\" must be an object';\n  } else if (params['_meta'] !== undefined && !isRecord(params['_meta'])) {\n    problem = '\"_meta\" must be an object';\n  }\n  return problem === undefined\n    ? undefined\n    : { id, message: `Invalid tools/call params: ${problem}.` };\n}\n\n// Stream the SDK's response body, including SSE, to the Node response\nasync function writeWebResponse(response: Response, res: ServerResponse): Promise<void> {\n  res.writeHead(response.status, Object.fromEntries(response.headers));\n  if (response.body !== null) {\n    for await (const chunk of response.body) {\n      if (res.destroyed) break;\n      res.write(chunk);\n    }\n  }\n  res.end();\n}\n\n// Read a proof from the selected rail's MCP `_meta` carrier\nfunction paymentFromMeta(\n  meta: Record<string, unknown> | undefined,\n  resource: CommerceResource,\n): PaymentSubmission | undefined {\n  const method = resource.paymentMethods[0];\n  if (method === 'x402') {\n    const payload = x402McpPaymentSubmission(meta?.[X402_MCP_PAYMENT_META_KEY]);\n    if (payload !== undefined) return { method, payload };\n  }\n  const credential = meta?.[MPP_MCP_CREDENTIAL_META_KEY];\n  if (method === 'mpp' && isRecord(credential)) {\n    // The MPP provider converts this object to an Authorization value\n    return { method, payload: JSON.stringify(credential) };\n  }\n  return undefined;\n}\n\nexport function createMcpAdapter(options?: McpAdapterOptions): HttpProtocolAdapter {\n  return new McpProtocolAdapter(options);\n}\n"]}
+{"version":3,"sources":["../src/protocols/mcp/descriptor.ts","../src/protocols/mcp/tool-mapping.ts","../src/protocols/mcp/result-mapping.ts","../src/protocols/mcp/adapter.ts"],"names":[],"mappings":";;;;;;AAUA,IAAM,kBAAA,GAAqB,CAAA,EAAG,4BAA4B,CAAA,EAAA,EAAK,uBAAuB,CAAA,CAAA;AAGtF,IAAM,gBAAA,GAAsC,CAAC,YAAA,EAAc,YAAY,CAAA;AAUhE,IAAM,eAAA,GAAqC;AAAA,EAChD,WAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EACA,kCAAA;AAAA,EACA,OAAA;AAAA,EACA,0BAAA;AAAA,EACA,eAAA;AAAA,EACA,UAAA;AAAA,EACA,eAAA;AAAA,EACA,YAAA;AAAA,EACA,oBAAA;AAAA;AAAA,EAEA,+CAAA;AAAA,EACA;AACF,CAAA;AAEO,SAAS,gBAAgB,qBAAA,EAAkD;AAChF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,KAAA;AAAA,IACN,IAAA,EAAM,UAAA;AAAA,IACN,qBAAA;AAAA,IACA,aAAA,EAAe,kBAAA;AAAA,IACf,YAAA,EAAc,gBAAA;AAAA,IACd,MAAA,EAAQ,QAAA;AAAA,IACR,WAAA,EAAa;AAAA,GACf;AACF;;;ACnCO,SAAS,gBAAgB,EAAA,EAAqB;AACnD,EAAA,OAAO,qBAAA,CAAsB,KAAK,EAAE,CAAA;AACtC;AAEA,SAAS,eAAe,QAAA,EAAqC;AAC3D,EAAA,OAAO,QAAA,CAAS,QAAQ,IAAA,KAAS,MAAA;AACnC;AAIA,SAAS,qBAAqB,QAAA,EAA2D;AACvF,EAAA,OAAO,QAAA,CAAS,eAAe,CAAC,CAAA;AAClC;AAGO,SAAS,cAAc,MAAA,EAA+C;AAC3E,EAAA,MAAM,KAAA,GAAQ,QAAQ,mBAAmB,CAAA,UAAA,CAAA;AACzC,EAAA,IAAI,WAAW,MAAA,EAAQ,OAAO,CAAA,OAAA,EAAU,yBAAyB,SAAS,KAAK,CAAA,CAAA;AAC/E,EAAA,IAAI,WAAW,KAAA,EAAO,OAAO,CAAA,OAAA,EAAU,2BAA2B,SAAS,KAAK,CAAA,CAAA;AAChF,EAAA,OAAO,KAAA;AACT;AAGA,SAAS,iBAAiB,QAAA,EAAoC;AAC5D,EAAA,MAAM,MAAA,GAAS,qBAAqB,QAAQ,CAAA;AAC5C,EAAA,MAAM,IAAA,GAAO,MAAA,KAAW,MAAA,GAAY,CAAA,GAAA,EAAM,MAAM,CAAA,CAAA,GAAK,GAAA;AACrD,EAAA,OAAO,CAAA,SAAA,EAAY,IAAI,CAAA,kBAAA,EAAqB,aAAA,CAAc,MAAM,CAAC,CAAA,2CAAA,CAAA;AACnE;AAGA,IAAM,SAAA,GAAY,mDAAA;AAMlB,SAAS,6BAA6B,QAAA,EAAoC;AACxE,EAAA,MAAM,MAAA,GAAS,qBAAqB,QAAQ,CAAA;AAC5C,EAAA,IAAI,WAAW,MAAA,EAAQ;AACrB,IAAA,OAAO,iGAAiG,SAAS,CAAA,CAAA;AAAA,EACnH;AACA,EAAA,IAAI,WAAW,KAAA,EAAO;AACpB,IAAA,OAAO,2HAA2H,SAAS,CAAA,CAAA;AAAA,EAC7I;AACA,EAAA,IAAI,WAAW,MAAA,EAAW;AACxB,IAAA,OAAO,GAAG,MAAM,CAAA,mFAAA,CAAA;AAAA,EAClB;AACA,EAAA,OAAO,mEAAA;AACT;AAGA,SAAS,sBAAsB,QAAA,EAA+C;AAC5E,EAAA,OAAO,QAAA,CAAS,aAAA,EAAe,QAAA,IAAY,EAAC;AAC9C;AAEA,SAAS,kBAAkB,QAAA,EAAoC;AAC7D,EAAA,MAAM,OAAA,GAAU,sBAAsB,QAAQ,CAAA;AAC9C,EAAA,OAAO,OAAA,CAAQ,MAAA,GAAS,CAAA,GACpB,CAAA,eAAA,EAAkB,OAAA,CAAQ,KAAK,OAAO,CAAC,CAAA,uBAAA,EAA0B,yBAAyB,CAAA,cAAA,CAAA,GAC1F,EAAA;AACN;AAMO,SAAS,qBAAqB,QAAA,EAAoC;AACvE,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,WAAA,IAAe,QAAA,CAAS,IAAA;AAC9C,EAAA,QAAQ,QAAA,CAAS,QAAQ,IAAA;AAAM,IAC7B,KAAK,MAAA;AACH,MAAA,OAAO,IAAA;AAAA,IACT,KAAK,OAAA,EAAS;AACZ,MAAA,MAAM,EAAE,MAAA,EAAQ,QAAA,EAAS,GAAI,QAAA,CAAS,OAAA;AACtC,MAAA,OAAO,CAAA,EAAG,IAAI,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,EAAI,QAAQ,CAAA,WAAA,EAAc,gBAAA,CAAiB,QAAQ,CAAC,CAAA,EAAG,iBAAA,CAAkB,QAAQ,CAAC,CAAA,CAAA;AAAA,IAClH;AAAA,IACA,KAAK,SAAA;AACH,MAAA,OAAO,CAAA,EAAG,IAAI,CAAA,uDAAA,EAA0D,gBAAA,CAAiB,QAAQ,CAAC,CAAA,EAAG,iBAAA,CAAkB,QAAQ,CAAC,CAAA,CAAA;AAAA;AAEtI;AAaO,SAAS,iBAAiB,QAAA,EAAiD;AAChF,EAAA,MAAM,OAAO,QAAA,CAAS,WAAA;AACtB,EAAA,MAAM,YAAA,GAAe,SAAS,IAAI,CAAA;AAGlC,EAAA,MAAM,mBAAA,GACJ,YAAA,IAAgB,QAAA,CAAS,IAAA,CAAK,UAAU,IACpC,MAAA,CAAO,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA;AAAA,IAAO,CAAC,KAAA,KACtC,QAAA,CAAS,KAAA,CAAM,CAAC,CAAC;AAAA,MAEnB,EAAC;AACP,EAAA,MAAM,UAAA,GAAyC,MAAA,CAAO,WAAA,CAAY,mBAAmB,CAAA;AAIrF,EAAA,IAAI,cAAA,CAAe,QAAQ,CAAA,EAAG;AAC5B,IAAA,UAAA,CAAW,mBAAmB,CAAA,GAAI;AAAA,MAChC,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EAAa,6BAA6B,QAAQ;AAAA,KACpD;AAAA,EACF;AACA,EAAA,MAAM,OAAA,GAAU,sBAAsB,QAAQ,CAAA;AAC9C,EAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,IAAA,UAAA,CAAW,yBAAyB,CAAA,GAAI;AAAA,MACtC,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EACE,mGAAA;AAAA,MACF,UAAA,EAAY;AAAA,QACV,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,MAAM,CAAC,GAAG,OAAO,CAAA,EAAE;AAAA,QAC7C,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,WAAW,CAAA;AAAE,OAC1C;AAAA,MACA,QAAA,EAAU,CAAC,QAAA,EAAU,SAAS;AAAA,KAChC;AAAA,EACF;AAEA,EAAA,MAAM,WACJ,YAAA,IAAgB,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,GACvC,IAAA,CAAK,QAAA,CAAS,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,IAC9D,EAAC;AAEP,EAAA,MAAM,KAAA,GAAQ,eACV,MAAA,CAAO,WAAA;AAAA,IACL,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,CAAE,MAAA;AAAA,MACnB,CAAC,CAAC,GAAG,CAAA,KAAM,QAAQ,MAAA,IAAU,GAAA,KAAQ,gBAAgB,GAAA,KAAQ;AAAA;AAC/D,MAEF,EAAC;AAEL,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,IAAA,EAAM,QAAA;AAAA,IACN,UAAA;AAAA,IACA,GAAI,QAAA,CAAS,MAAA,GAAS,IAAI,EAAE,QAAA,KAAa;AAAC,GAC5C;AACF;;;AChIA,SAAS,SAAS,KAAA,EAAwC;AACxD,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,gBAAgB,OAAA,EAA2C;AAClE,EAAA,MAAM,OAAO,OAAA,CAAQ,IAAA;AACrB,EAAA,MAAM,IAAA,GAAO,OAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,CAAK,SAAA,CAAU,QAAQ,IAAI,CAAA;AAC1E,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,EAAA,MAAM,OAAA,GACJ,SAAS,QAAA,KAAa,KAAA,GAAQ,cAAc,OAAA,CAAQ,QAAA,GAAW,SAAS,CAAC,CAAA,GAAI,MAAA;AAC/E,EAAA,OAAO;AAAA,IACL,SAAS,CAAC,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,CAAA;AAAA,IAChC,GAAI,SAAS,IAAI,CAAA,GAAI,EAAE,iBAAA,EAAmB,IAAA,KAAS,EAAC;AAAA,IACpD,KAAA,EAAO;AAAA,MACL,CAAC,yBAAyB,GAAG,QAAA,CAAS,iBAAA,CAAkB,OAAO,CAAC,CAAA;AAAA,MAChE,GAAI,OAAA,EAAS,QAAA,KAAa,MAAA,GACtB,EAAE,CAAC,kCAAkC,GAAG,kBAAA,CAAmB,OAAO,CAAA,EAAE,GACpE,EAAC;AAAA,MACL,GAAI,YAAY,MAAA,GAAY,EAAE,CAAC,wBAAwB,GAAG,OAAA,EAAQ,GAAI;AAAC;AACzE,GACF;AACF;AAIA,SAAS,eAAA,CACP,UAAA,EACA,QAAA,EACA,IAAA,EACgB;AAChB,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,IAAA;AAAA,IACT,OAAA,EAAS;AAAA,MACP,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAM,IAAA,CAAK,SAAA,CAAU,UAAU,CAAA,EAAE;AAAA,MACjD,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,QAAA;AAAS,KACjC;AAAA,IACA,iBAAA,EAAmB,UAAA;AAAA,IACnB,GAAI,IAAA,KAAS,MAAA,GAAY,EAAE,KAAA,EAAO,IAAA,KAAS;AAAC,GAC9C;AACF;AAIA,SAAS,iBAAA,CACP,UACA,SAAA,EACyB;AACzB,EAAA,OAAO,EAAE,GAAG,SAAA,EAAW,GAAG,QAAA,EAAS;AACrC;AAEA,SAAS,sBAAsB,OAAA,EAAiD;AAC9E,EAAA,MAAM,QAAA,GAAW,0BAA0B,OAAO,CAAA;AAClD,EAAA,MAAM,IAAI,QAAA,CAAS,OAAA;AACnB,EAAA,MAAM,YAAA,GAAe,CAAA,CAAE,QAAA,KAAa,MAAA,GAAS,EAAE,QAAA,GAAW,MAAA;AAC1D,EAAA,MAAM,UAAA,GACJ,YAAA,KAAiB,MAAA,GACb,iBAAA,CAAkB,QAAA,CAAS,QAAQ,CAAA,EAAG,YAAY,CAAA,GAClD,QAAA,CAAS,QAAQ,CAAA;AACvB,EAAA,MAAM,cAAc,CAAA,CAAE,QAAA,KAAa,QAAQ,kBAAA,CAAmB,CAAA,CAAE,QAAQ,CAAA,GAAI,MAAA;AAC5E,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,iBAAiB,MAAA,EAAW,IAAA,GAAO,EAAE,CAAC,uBAAuB,GAAG,YAAA,EAAa;AAAA,OAAA,IACxE,gBAAgB,MAAA,EAAW,IAAA,GAAO,EAAE,CAAC,iCAAiC,GAAG,WAAA,EAAY;AAC9F,EAAA,OAAO,eAAA;AAAA,IACL,UAAA;AAAA;AAAA,IAEA,CAAA,kBAAA,EAAqB,CAAA,CAAE,MAAM,CAAA,CAAA,EAAI,CAAA,CAAE,QAAQ,CAAA,EAAG,CAAA,CAAE,WAAA,KAAgB,MAAA,GAAY,CAAA,IAAA,EAAO,CAAA,CAAE,WAAW,CAAA,CAAA,GAAK,EAAE,CAAA,eAAA,EAAkB,OAAA,CAAQ,UAAU,CAAA,iBAAA,EAAoB,CAAA,CAAE,QAAQ,CAAA,kBAAA,EAAqB,aAAA,CAAc,CAAA,CAAE,QAAQ,CAAC,CAAA,CAAA,CAAA;AAAA,IACvN;AAAA,GACF;AACF;AAGO,SAAS,WAAA,CAAY,OAAsB,IAAA,EAA0C;AAC1F,EAAA,MAAM,QAAA,GAAW,gBAAgB,KAAK,CAAA;AACtC,EAAA,MAAM,UAAU,KAAA,CAAM,OAAA;AACtB,EAAA,MAAM,SAAA,GAAY,UAAU,WAAW,CAAA;AAEvC,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,UAAA,KAAe,GAAA,IAAO,SAAS,SAAS,CAAA;AAC9D,EAAA,MAAM,YAAA,GACJ,IAAA,KAAS,MAAA,IAAU,OAAA,GACf;AAAA,IACE,GAAG,SAAA;AAAA,IACH,KAAA,EAAO,cAAc,KAAA,CAAM,IAAA,EAAM,UAAU,QAAQ,CAAA,EAAG,OAAA,GAAU,SAAS,CAAC;AAAA,GAC5E,GACA,MAAA;AACN,EAAA,MAAM,UAAA,GACJ,YAAA,KAAiB,MAAA,GACb,iBAAA,CAAkB,QAAA,CAAS,QAAQ,CAAA,EAAG,YAAY,CAAA,GAClD,QAAA,CAAS,QAAQ,CAAA;AACvB,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,SAAS,MAAA,EAAQ;AACnB,IAAA,MAAM,UAAA,GACJ,MAAM,IAAA,KAAS,2BAAA,GACX,kBAAkB,OAAO,CAAA,GACzB,8BAA8B,OAAO,CAAA;AAC3C,IAAA,IAAI,UAAA,KAAe,MAAA,IAAa,YAAA,KAAiB,MAAA,EAAW;AAC1D,MAAA,IAAA,GAAO;AAAA,QACL,GAAI,iBAAiB,MAAA,GAAY,EAAE,CAAC,uBAAuB,GAAG,YAAA,EAAa,GAAI,EAAC;AAAA,QAChF,GAAI,eAAe,MAAA,GAAY,EAAE,CAAC,kCAAkC,GAAG,UAAA,EAAW,GAAI;AAAC,OACzF;AAAA,IACF;AAAA,EACF,CAAA,MAAA,IAAW,IAAA,KAAS,KAAA,IAAS,OAAA,EAAS;AAEpC,IAAA,MAAM,QAAA,GAAW,mBAAmB,SAAA,EAAW;AAAA,MAC7C,MAAM,KAAA,CAAM,IAAA;AAAA,MACZ,MAAA,EAAQ,UAAU,QAAQ,CAAA;AAAA,MAC1B,QAAQ,KAAA,CAAM;AAAA,KACf,CAAA;AACD,IAAA,IAAI,aAAa,MAAA,EAAW,IAAA,GAAO,EAAE,CAAC,iCAAiC,GAAG,QAAA,EAAS;AAAA,EACrF;AACA,EAAA,OAAO,eAAA,CAAgB,YAAY,CAAA,EAAG,QAAA,CAAS,IAAI,CAAA,EAAA,EAAK,QAAA,CAAS,OAAO,CAAA,CAAA,EAAI,IAAI,CAAA;AAClF;AAEO,SAAS,WAAW,OAAA,EAA2C;AACpE,EAAA,OAAO,QAAQ,IAAA,KAAS,WAAA,GAAc,gBAAgB,OAAO,CAAA,GAAI,sBAAsB,OAAO,CAAA;AAChG;;;ACxEA,IAAM,kBAAA,GAAqB,MAAA;AAC3B,IAAM,mBAAA,GAAsB,gBAAA;AAO5B,IAAM,yBAAA,GAA4B,CAAA;AAIlC,IAAM,yBAAyB,GAAA,GAAM,IAAA;AAQrC,IAAM,qBAAA,GAAwB,EAAA;AAG9B,IAAM,2BAAA,GAA8B,YAAA;AAGpC,IAAM,qBAAA,GAAwB,EAAE,KAAA,EAAO,GAAA,EAAQ,YAAY,QAAA,EAAS;AAEpE,IAAM,qBAAN,MAAwD;AAAA,EAC7C,IAAA,GAAO,KAAA;AAAA,EACP,SAAA;AAAA,EACA,UAAA;AAAA,EAEQ,UAAA;AAAA,EACA,aAAA;AAAA,EAET,OAAA;AAAA,EACA,OAAA,GAAU,KAAA;AAAA,EACV,QAAmC,EAAC;AAAA,EACpC,iBAAA,uBAA+D,GAAA,EAAI;AAAA,EACnE,UAAsC,EAAC;AAAA,EACvC,OAAA;AAAA;AAAA;AAAA;AAAA,EAKA,iBAAA,GAAoB,CAAA;AAAA,EACX,kBAAqC,EAAC;AAAA,EAEvD,WAAA,CAAY,OAAA,GAA6B,EAAC,EAAG;AAC3C,IAAA,IAAA,CAAK,SAAA,GAAY,QAAQ,SAAA,IAAa,kBAAA;AACtC,IAAA,IAAA,CAAK,UAAA,GAAa,QAAQ,UAAA,IAAc,mBAAA;AACxC,IAAA,IAAA,CAAK,aAAA,GAAgB,QAAQ,aAAA,IAAiB,eAAA;AAC9C,IAAA,IAAA,CAAK,UAAA,GAAa,gBAAgB,eAAe,CAAA;AAAA,EACnD;AAAA,EAEA,MAAM,MAAM,OAAA,EAAgD;AAC1D,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,IAAA,CAAK,OAAA,GAAU,KAAA;AAEf,IAAA,IAAI,YAAyC,EAAC;AAC9C,IAAA,IAAI;AACF,MAAA,SAAA,GAAY,OAAA,CAAQ,SAAA,CAAU,cAAA,CAAe,KAAK,CAAA;AAAA,IACpD,SAAS,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,QACb,EAAE,GAAA,EAAK,SAAA,CAAU,GAAG,CAAA,EAAE;AAAA,QACtB;AAAA,OACF;AACA,MAAA,SAAA,GAAY,EAAC;AAAA,IACf;AAEA,IAAA,MAAM,QAA0B,EAAC;AACjC,IAAA,MAAM,iBAAA,uBAAwB,GAAA,EAA8B;AAC5D,IAAA,MAAM,UAA6B,EAAC;AAEpC,IAAA,KAAA,MAAW,YAAY,SAAA,EAAW;AAChC,MAAA,IAAI;AACF,QAAA,IAAI,CAAC,eAAA,CAAgB,QAAA,CAAS,EAAE,CAAA,EAAG;AACjC,UAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,YACX,IAAI,QAAA,CAAS,EAAA;AAAA,YACb,MAAA,EAAQ,CAAA,qDAAA,EAAwD,qBAAA,CAAsB,MAAM,CAAA,CAAA;AAAA,WAC7F,CAAA;AACD,UAAA;AAAA,QACF;AACA,QAAA,IAAI,iBAAA,CAAkB,GAAA,CAAI,QAAA,CAAS,EAAE,CAAA,EAAG;AACtC,UAAA,OAAA,CAAQ,KAAK,EAAE,EAAA,EAAI,SAAS,EAAA,EAAI,MAAA,EAAQ,uBAAuB,CAAA;AAC/D,UAAA;AAAA,QACF;AACA,QAAA,MAAM,IAAA,GAAa;AAAA,UACjB,MAAM,QAAA,CAAS,EAAA;AAAA,UACf,WAAA,EAAa,qBAAqB,QAAQ,CAAA;AAAA,UAC1C,WAAA,EAAa,iBAAiB,QAAQ;AAAA,SACxC;AACA,QAAA,KAAA,CAAM,IAAA,CAAK,EAAE,QAAA,EAAU,IAAA,EAAM,CAAA;AAC7B,QAAA,iBAAA,CAAkB,GAAA,CAAI,QAAA,CAAS,EAAA,EAAI,QAAQ,CAAA;AAAA,MAC7C,SAAS,GAAA,EAAK;AACZ,QAAA,OAAA,CAAQ,IAAA,CAAK;AAAA,UACX,IAAI,QAAA,CAAS,EAAA;AAAA,UACb,MAAA,EAAQ,CAAA,0BAAA,EAA6B,eAAA,CAAgB,GAAG,EAAE,OAAO,CAAA;AAAA,SAClE,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,MAAA,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,EAAE,UAAA,EAAY,CAAA,CAAE,IAAI,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,EAAG,+BAA+B,CAAA;AAAA,IAC7F;AAEA,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AACb,IAAA,IAAA,CAAK,iBAAA,GAAoB,iBAAA;AACzB,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AAEf,IAAA,IAAA,CAAK,OAAA,GAAU,gBAAA;AAAA,MACb,CAAC,GAAA,KAAQ,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,aAAa,MAAA,IAAU,IAAI,eAAA,EAAgB,CAAE,MAAM,CAAA;AAAA,MACjF;AAAA,QACE,MAAA,EAAQ,WAAA;AAAA;AAAA,QAER,OAAA,EAAS,CAAC,GAAA,KAAQ,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,EAAE,GAAA,EAAK,SAAA,CAAU,GAAG,CAAA,EAAE,EAAG,wBAAwB;AAAA;AAC1F,KACF;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,IAAA;AAEf,IAAA,OAAA,CAAQ,MAAA,CAAO,IAAA;AAAA,MACb;AAAA,QACE,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,WAAW,KAAA,CAAM,MAAA;AAAA,QACjB,cAAc,OAAA,CAAQ;AAAA,OACxB;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,CAAW,GAAA,EAAsB,GAAA,EAAoC;AACzE,IAAA,IAAI;AACF,MAAA,IAAI,CAAC,KAAK,OAAA,IAAW,CAAC,KAAK,OAAA,IAAW,CAAC,KAAK,OAAA,EAAS;AACnD,QAAA,IAAA,CAAK,iBAAA,CAAkB,GAAA,EAAK,GAAA,EAAK,6BAA6B,CAAA;AAC9D,QAAA;AAAA,MACF;AACA,MAAA,IAAI,GAAA,CAAI,WAAW,MAAA,EAAQ;AACzB,QAAA,IAAA,CAAK,iBAAA,CAAkB,GAAA,EAAK,GAAA,EAAK,sDAAsD,CAAA;AACvF,QAAA;AAAA,MACF;AAKA,MAAA,MAAM,eAAA,GAAkB,IAAI,eAAA,EAAgB;AAC5C,MAAA,GAAA,CAAI,IAAA,CAAK,OAAA,EAAS,MAAM,eAAA,CAAgB,OAAO,CAAA;AAC/C,MAAA,MAAM,IAAA,GAAO,MAAM,cAAA,CAAe,GAAA,EAAK,sBAAsB,CAAA;AAC7D,MAAA,IAAI,IAAA,CAAK,SAAS,WAAA,EAAa;AAC7B,QAAA,IAAA,CAAK,iBAAA;AAAA,UACH,GAAA;AAAA,UACA,GAAA;AAAA,UACA,4BAA4B,sBAAsB,CAAA,YAAA;AAAA,SACpD;AACA,QAAA;AAAA,MACF;AACA,MAAA,IAAI,IAAA,CAAK,SAAS,IAAA,EAAM;AACtB,QAAA,IAAA,CAAK,iBAAA,CAAkB,GAAA,EAAK,GAAA,EAAK,kCAAkC,CAAA;AACnE,QAAA;AAAA,MACF;AACA,MAAA,MAAM,IAAA,GAAO,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAChC,MAAA,MAAM,OAAA,GAAU,GAAA,CAAI,OAAA,CAAQ,sBAAsB,CAAA;AAClD,MAAA,IAAI,MAAM,OAAA,CAAQ,IAAI,KAAK,OAAA,KAAY,KAAA,CAAA,IAAa,YAAY,2BAAA,EAA6B;AAC3F,QAAA,IAAA,CAAK,iBAAA;AAAA,UACH,GAAA;AAAA,UACA,GAAA;AAAA,UACA,+DAA+D,2BAA2B,CAAA,CAAA;AAAA,SAC5F;AACA,QAAA;AAAA,MACF;AACA,MAAA,MAAM,YAAY,eAAA,CAAgB,GAAG,CAAA,GAAI,KAAA,CAAA,GAAY,kBAAkB,IAAI,CAAA;AAC3E,MAAA,IAAI,cAAc,KAAA,CAAA,EAAW;AAC3B,QAAA,IAAA,CAAK,kBAAkB,GAAA,EAAK,GAAA,EAAK,UAAU,OAAA,EAAS,CAAA,KAAA,EAAQ,UAAU,EAAE,CAAA;AACxE,QAAA;AAAA,MACF;AACA,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,OAAA,CAAQ,KAAA;AAAA,QAClC,YAAA,CAAa,GAAA,EAAK,IAAA,CAAK,IAAA,EAAM,gBAAgB,MAAM;AAAA,OACrD;AACA,MAAA,MAAM,gBAAA,CAAiB,UAAU,GAAG,CAAA;AAAA,IACtC,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,OAAA,EAAS,OAAO,KAAA,CAAM,EAAE,KAAK,SAAA,CAAU,GAAG,CAAA,EAAE,EAAG,sCAAsC,CAAA;AAC1F,MAAA,IAAA,CAAK,iBAAA,CAAkB,GAAA,EAAK,GAAA,EAAK,wBAAwB,CAAA;AAAA,IAC3D;AAAA,EACF;AAAA,EAEA,MAAM,MAAA,GAAiC;AACrC,IAAA,MAAM,SAAA,GAAY,KAAK,OAAA,EAAS,KAAA,CAAM,QAAO,IAAA,iBAAK,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AACzE,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,IAAW,CAAC,KAAK,OAAA,EAAS;AAClC,MAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,qCAAqC,SAAA,EAAU;AAAA,IAClF;AACA,IAAA,MAAM,SAAA,GAAY,KAAK,KAAA,CAAM,MAAA;AAC7B,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG;AAC3B,MAAA,MAAM,MAAA,GAAS,GAAG,SAAS,CAAA,qBAAA,EAAwB,KAAK,OAAA,CAAQ,MAAM,CAAA,sBAAA,EAAyB,IAAA,CAAK,OAAA,CACjG,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,CAAA,CAAE,EAAE,CAAA,EAAA,EAAK,CAAA,CAAE,MAAM,CAAA,CAAA,CAAG,CAAA,CAClC,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AACb,MAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAQ,SAAA,EAAU;AAAA,IAC7C;AACA,IAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,QAAQ,CAAA,EAAG,SAAS,wBAAwB,SAAA,EAAU;AAAA,EACjF;AAAA,EAEA,MAAM,IAAA,GAAsB;AAC1B,IAAA,IAAA,CAAK,OAAA,GAAU,KAAA;AACf,IAAA,MAAM,UAAU,IAAA,CAAK,OAAA;AACrB,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AACf,IAAA,IAAI;AACF,MAAA,MAAM,SAAS,KAAA,EAAM;AAAA,IACvB,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AAAA,EACjB;AAAA;AAAA,EAGQ,iBAAA,CACN,GAAA,EACA,MAAA,EACA,OAAA,EACA,IAAA,GAAO,UAAU,GAAA,GAAM,MAAA,GAAS,MAAA,EAChC,EAAA,GAA6B,IAAA,EACvB;AACN,IAAA,IAAI,IAAI,WAAA,EAAa;AACrB,IAAA,GAAA,CAAI,UAAU,MAAA,EAAQ;AAAA,MACpB,cAAA,EAAgB,kBAAA;AAAA;AAAA,MAEhB,GAAI,MAAA,KAAW,GAAA,GAAM,EAAE,KAAA,EAAO,MAAA,KAAW;AAAC,KAC3C,CAAA;AACD,IAAA,GAAA,CAAI,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,EAAE,IAAA,EAAM,OAAA,EAAQ,EAAG,EAAA,EAAI,CAAC,CAAA;AAAA,EAC1E;AAAA,EAEQ,YAAY,MAAA,EAA6B;AAC/C,IAAA,MAAM,SAAS,IAAI,MAAA;AAAA,MACjB,EAAE,IAAA,EAAM,IAAA,CAAK,UAAA,EAAY,OAAA,EAAS,KAAK,aAAA,EAAc;AAAA,MACrD,EAAE,YAAA,EAAc,EAAE,KAAA,EAAO,EAAC,EAAE,EAAG,UAAA,EAAY,EAAE,YAAA,EAAc,qBAAA,EAAsB;AAAE,KACrF;AACA,IAAA,MAAA,CAAO,iBAAA,CAAkB,YAAA,EAAc,OAAO,OAAA,KAAY;AAExD,MAAA,IAAI,OAAA,CAAQ,MAAA,EAAQ,MAAA,KAAW,MAAA,EAAW;AACxC,QAAA,MAAM,IAAI,aAAA,CAAc,iBAAA,CAAkB,aAAA,EAAe,iBAAiB,CAAA;AAAA,MAC5E;AACA,MAAA,OAAO,EAAE,OAAO,IAAA,CAAK,KAAA,CAAM,IAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAA,EAAE;AAAA,IAChD,CAAC,CAAA;AACD,IAAA,MAAA,CAAO,iBAAA;AAAA,MAAkB,YAAA;AAAA,MAAc,OAAO,YAC5C,IAAA,CAAK,cAAA;AAAA,QACH,QAAQ,MAAA,CAAO,IAAA;AAAA,QACf,OAAA,CAAQ,MAAA,CAAO,SAAA,IAAa,EAAC;AAAA,QAC7B,QAAQ,MAAA,CAAO,KAAA;AAAA,QACf;AAAA;AACF,KACF;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,MAAc,cAAA,CACZ,UAAA,EACA,OAAA,EACA,MACA,MAAA,EACyB;AACzB,IAAA,MAAM,UAAU,IAAA,CAAK,OAAA;AACrB,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,OAAO,WAAA,CAAY,IAAI,aAAA,CAAc,gBAAA,EAAkB,6BAA6B,CAAC,CAAA;AAAA,IACvF;AAGA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,iBAAA,CAAkB,GAAA,CAAI,UAAU,CAAA;AACtD,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,aAAA,CAAc,iBAAA,CAAkB,aAAA,EAAe,CAAA,cAAA,EAAiB,UAAU,CAAA,EAAA,CAAI,CAAA;AAAA,IAC1F;AACA,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,KAAK,CAAA;AACxC,MAAA,MAAM,MAAA,GAAS,0BAAA,CAA2B,OAAA,EAAS,QAAA,EAAU,SAAS,CAAA;AACtE,MAAA,MAAM,EAAE,KAAA,EAAO,aAAA,EAAc,GAAI,MAAA;AAGjC,MAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,IAAA,EAAM,QAAQ,KAAK,MAAA,CAAO,OAAA;AAC1D,MAAA,MAAM,OAAA,GAA4B;AAAA,QAChC,SAAA;AAAA,QACA,UAAA;AAAA,QACA,KAAA;AAAA,QACA,QAAA,EAAU,KAAA;AAAA,QACV,UAAA,EAAY,OAAA,CAAQ,KAAA,CAAM,MAAA,EAAO;AAAA,QACjC,GAAI,OAAA,KAAY,KAAA,CAAA,GAAY,EAAE,OAAA,KAAY,EAAC;AAAA,QAC3C,GAAI,aAAA,KAAkB,KAAA,CAAA,GAAY,EAAE,aAAA,KAAkB;AAAC,OACzD;AACA,MAAA,MAAM,IAAA,CAAK,oBAAoB,MAAM,CAAA;AACrC,MAAA,IAAI;AAIF,QAAA,IAAI,OAAO,OAAA,EAAS;AAIlB,UAAA,OAAO,WAAA;AAAA,YACL,IAAI,aAAA;AAAA,cACF,sBAAA;AAAA,cACA;AAAA;AACF,WACF;AAAA,QACF;AACA,QAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,QAAA,CAAS,QAAQ,OAAO,CAAA;AACtD,QAAA,OAAO,WAAW,OAAO,CAAA;AAAA,MAC3B,CAAA,SAAE;AAGA,QAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,MAC3B;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,KAAA,GAAQ,gBAAgB,GAAG,CAAA;AACjC,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAK,EAAE,UAAA,EAAY,KAAK,SAAA,CAAU,KAAK,CAAA,EAAE,EAAG,+BAA+B,CAAA;AAC1F,MAAA,OAAO,WAAA,CAAY,KAAA,EAAO,QAAA,CAAS,cAAA,CAAe,CAAC,CAAC,CAAA;AAAA,IACtD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,oBAAoB,MAAA,EAAoC;AACpE,IAAA,IAAI,IAAA,CAAK,oBAAoB,yBAAA,EAA2B;AACtD,MAAA,IAAA,CAAK,iBAAA,EAAA;AACL,MAAA;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,eAAA,CAAgB,MAAA,IAAU,qBAAA,EAAuB;AAGxD,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,cAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAGA,IAAA,MAAM,IAAI,QAAc,CAAC,OAAA,KAAY,KAAK,eAAA,CAAgB,IAAA,CAAK,OAAO,CAAC,CAAA;AACvE,IAAA,IAAI,OAAO,OAAA,EAAS;AAElB,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAEzB,MAAA,MAAM,IAAI,aAAA,CAAc,sBAAA,EAAwB,mCAAmC,CAAA;AAAA,IACrF;AAAA,EACF;AAAA,EAEQ,mBAAA,GAA4B;AAClC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,eAAA,CAAgB,KAAA,EAAM;AAExC,IAAA,IAAI,IAAA,KAAS,QAAW,IAAA,EAAK;AAAA,SACxB,IAAA,CAAK,iBAAA,EAAA;AAAA,EACZ;AACF,CAAA;AAIA,SAAS,YAAA,CAAa,GAAA,EAAsB,IAAA,EAAc,MAAA,EAA8B;AACtF,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,EAAA,KAAA,MAAW,CAAC,MAAM,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,EAAG;AACvD,IAAA,IAAI,KAAA,KAAU,MAAA,EAAW,OAAA,CAAQ,GAAA,CAAI,IAAA,EAAM,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,IAAA,CAAK,IAAI,IAAI,KAAK,CAAA;AAAA,EAC5F;AACA,EAAA,OAAO,IAAI,QAAQ,IAAI,GAAA,CAAI,IAAI,GAAA,IAAO,GAAA,EAAK,kBAAkB,CAAA,EAAG;AAAA,IAC9D,MAAA,EAAQ,IAAI,MAAA,IAAU,MAAA;AAAA,IACtB,OAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH;AAMA,SAAS,gBAAgB,GAAA,EAA+B;AACtD,EAAA,IAAI,GAAA,CAAI,OAAA,CAAQ,YAAY,CAAA,KAAM,QAAW,OAAO,IAAA;AACpD,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,OAAA,CAAQ,sBAAsB,CAAA;AAElD,EAAA,OAAO,OAAO,OAAA,KAAY,QAAA,IAAY,OAAA,IAAW,4BAAA;AACnD;AAGA,SAAS,UAAU,IAAA,EAAuB;AACxC,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAGA,SAAS,kBAAkB,OAAA,EAAwE;AACjG,EAAA,IAAI,CAAC,SAAS,OAAO,CAAA,IAAK,QAAQ,QAAQ,CAAA,KAAM,cAAc,OAAO,MAAA;AACrE,EAAA,MAAM,EAAA,GAAK,QAAQ,IAAI,CAAA;AACvB,EAAA,IAAI,OAAO,EAAA,KAAO,QAAA,IAAY,OAAO,EAAA,KAAO,UAAU,OAAO,MAAA;AAC7D,EAAA,MAAM,MAAA,GAAS,QAAQ,QAAQ,CAAA;AAC/B,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI,CAAC,QAAA,CAAS,MAAM,CAAA,EAAG,OAAA,GAAU,0BAAA;AAAA,OAAA,IACxB,OAAO,MAAA,CAAO,MAAM,CAAA,KAAM,UAAU,OAAA,GAAU,yBAAA;AAAA,OAAA,IAC9C,MAAA,CAAO,WAAW,CAAA,KAAM,MAAA,IAAa,CAAC,QAAA,CAAS,MAAA,CAAO,WAAW,CAAC,CAAA,EAAG;AAC5E,IAAA,OAAA,GAAU,+BAAA;AAAA,EACZ,CAAA,MAAA,IAAW,MAAA,CAAO,OAAO,CAAA,KAAM,MAAA,IAAa,CAAC,QAAA,CAAS,MAAA,CAAO,OAAO,CAAC,CAAA,EAAG;AACtE,IAAA,OAAA,GAAU,2BAAA;AAAA,EACZ;AACA,EAAA,OAAO,OAAA,KAAY,SACf,MAAA,GACA,EAAE,IAAI,OAAA,EAAS,CAAA,2BAAA,EAA8B,OAAO,CAAA,CAAA,CAAA,EAAI;AAC9D;AAGA,eAAe,gBAAA,CAAiB,UAAoB,GAAA,EAAoC;AACtF,EAAA,GAAA,CAAI,UAAU,QAAA,CAAS,MAAA,EAAQ,OAAO,WAAA,CAAY,QAAA,CAAS,OAAO,CAAC,CAAA;AACnE,EAAA,IAAI,QAAA,CAAS,SAAS,IAAA,EAAM;AAC1B,IAAA,WAAA,MAAiB,KAAA,IAAS,SAAS,IAAA,EAAM;AACvC,MAAA,IAAI,IAAI,SAAA,EAAW;AACnB,MAAA,GAAA,CAAI,MAAM,KAAK,CAAA;AAAA,IACjB;AAAA,EACF;AACA,EAAA,GAAA,CAAI,GAAA,EAAI;AACV;AAGA,SAAS,eAAA,CACP,MACA,QAAA,EAC+B;AAC/B,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,cAAA,CAAe,CAAC,CAAA;AACxC,EAAA,IAAI,WAAW,MAAA,EAAQ;AACrB,IAAA,MAAM,OAAA,GAAU,wBAAA,CAAyB,IAAA,GAAO,yBAAyB,CAAC,CAAA;AAC1E,IAAA,IAAI,OAAA,KAAY,MAAA,EAAW,OAAO,EAAE,QAAQ,OAAA,EAAQ;AAAA,EACtD;AACA,EAAA,MAAM,UAAA,GAAa,OAAO,2BAA2B,CAAA;AACrD,EAAA,IAAI,MAAA,KAAW,KAAA,IAAS,QAAA,CAAS,UAAU,CAAA,EAAG;AAE5C,IAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,CAAK,SAAA,CAAU,UAAU,CAAA,EAAE;AAAA,EACvD;AACA,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,iBAAiB,OAAA,EAAkD;AACjF,EAAA,OAAO,IAAI,mBAAmB,OAAO,CAAA;AACvC","file":"mcp.js","sourcesContent":["/**\n * Adapter self-description. `supportedSpec` lists the modern revision and\n * the newest 2025-era revision. The SDK's legacy fallback also accepts older\n * 2025-era revisions.\n */\nimport { LATEST_PROTOCOL_VERSION } from '@modelcontextprotocol/server';\nimport type { AdapterDescriptor } from '../../core';\nimport { MCP_MODERN_PROTOCOL_REVISION } from './constants';\n\n// List the modern revision followed by the SDK's latest legacy revision\nconst MCP_SUPPORTED_SPEC = `${MCP_MODERN_PROTOCOL_REVISION}, ${LATEST_PROTOCOL_VERSION}`;\n\n// Tool-oriented capabilities this adapter implements\nconst MCP_CAPABILITIES: readonly string[] = ['tools/list', 'tools/call'];\n\n/**\n * MCP surfaces this adapter does not implement, listed so its descriptor never\n * implies blanket protocol compatibility.\n *\n * `dns-rebinding-protection` is delegated rather than missing: the gateway's\n * `onRequest` hook validates Host and Origin for `/mcp` (see adapter.ts), and\n * the adapter provides none on its own.\n */\nexport const MCP_UNSUPPORTED: readonly string[] = [\n  'resources',\n  'prompts',\n  'sampling',\n  'completions',\n  'elicitation',\n  'roots',\n  'logging',\n  'notifications/tools/list_changed',\n  'tasks',\n  'dns-rebinding-protection',\n  'authorization',\n  'sessions',\n  'subscriptions',\n  'pagination',\n  'HTTP+SSE transport',\n  // mppx reads challenges and refusals from tool-result `_meta`.\n  'MPP payment-required as JSON-RPC error -32042',\n  'MPP verification failure as JSON-RPC error -32043',\n];\n\nexport function buildDescriptor(implementationVersion: string): AdapterDescriptor {\n  return {\n    name: 'mcp',\n    kind: 'protocol',\n    implementationVersion,\n    supportedSpec: MCP_SUPPORTED_SPEC,\n    capabilities: MCP_CAPABILITIES,\n    status: 'stable',\n    unsupported: MCP_UNSUPPORTED,\n  };\n}\n","/**\n * Maps a canonical `CommerceResource` to an MCP `Tool`: the tool name is the\n * resource id, the description carries a price notice for a paid resource,\n * and the input schema is the canonical JSON Schema plus the reserved\n * `_payment` and `_authorization` properties the resource accepts\n */\n\nimport type { JSONObject, Tool } from '@modelcontextprotocol/server';\nimport {\n  AUTHORIZATION_INPUT_FIELD,\n  type CommerceResource,\n  PAYMENT_INPUT_FIELD,\n  type PaymentMethodName,\n} from '../../core';\nimport { isRecord } from '../../core/is-record';\nimport { MPP_MCP_CREDENTIAL_META_KEY } from '../../payments/mpp/transport';\nimport { X402_MCP_PAYMENT_META_KEY } from '../../payments/x402/transport';\nimport { MCP_TOOL_NAME_PATTERN } from './constants';\n\nexport function isValidToolName(id: string): boolean {\n  return MCP_TOOL_NAME_PATTERN.test(id);\n}\n\nfunction isPaidResource(resource: CommerceResource): boolean {\n  return resource.pricing.type !== 'free';\n}\n\n// The rail a `_payment` proof is labeled with (see `extractReservedInputFields`),\n// `undefined` when the resource lists none\nfunction primaryPaymentMethod(resource: CommerceResource): PaymentMethodName | undefined {\n  return resource.paymentMethods[0];\n}\n\n/** Describe the selected rail's `_meta` proof and `_payment` fallback */\nexport function proofCarriers(method: PaymentMethodName | undefined): string {\n  const field = `the \"${PAYMENT_INPUT_FIELD}\" argument`;\n  if (method === 'x402') return `_meta[\"${X402_MCP_PAYMENT_META_KEY}\"] or ${field}`;\n  if (method === 'mpp') return `_meta[\"${MPP_MCP_CREDENTIAL_META_KEY}\"] or ${field}`;\n  return field;\n}\n\n// How to supply a proof, generic when the resource names no rail\nfunction paymentProofNote(resource: CommerceResource): string {\n  const method = primaryPaymentMethod(resource);\n  const rail = method !== undefined ? `an ${method}` : 'a';\n  return `Requires ${rail} payment proof in ${proofCarriers(method)}, built from the payment-required response.`;\n}\n\n// Tell callers to omit `_payment` when a wrapper supplies `_meta`\nconst OMIT_NOTE = 'Omit it when the client sends the proof in _meta.';\n\n/**\n * Description for the reserved `_payment` input property, in the proof\n * encoding of the resource's own rail\n */\nfunction paymentInputFieldDescription(resource: CommerceResource): string {\n  const method = primaryPaymentMethod(resource);\n  if (method === 'x402') {\n    return `x402 payment proof (base64 PAYMENT-SIGNATURE value) for a previous payment-required response. ${OMIT_NOTE}`;\n  }\n  if (method === 'mpp') {\n    return `MPP credential (the full \"Authorization: Payment ...\" value) for the challenge in a previous payment-required response. ${OMIT_NOTE}`;\n  }\n  if (method !== undefined) {\n    return `${method} payment proof (base64-encoded) returned from a previous payment-required response.`;\n  }\n  return 'Payment proof returned from a previous payment-required response.';\n}\n\n// The authorization methods the resource requires, empty when it requires none\nfunction requiredAuthorization(resource: CommerceResource): readonly string[] {\n  return resource.authorization?.required ?? [];\n}\n\nfunction authorizationNote(resource: CommerceResource): string {\n  const methods = requiredAuthorization(resource);\n  return methods.length > 0\n    ? ` Also requires ${methods.join(' and ')} authorization in the \"${AUTHORIZATION_INPUT_FIELD}\" input field.`\n    : '';\n}\n\n/**\n * Tool description. A paid resource gets a price notice appended, so an agent\n * sees the cost before calling, not only in the input schema.\n */\nexport function buildToolDescription(resource: CommerceResource): string {\n  const base = resource.description ?? resource.name;\n  switch (resource.pricing.type) {\n    case 'free':\n      return base;\n    case 'fixed': {\n      const { amount, currency } = resource.pricing;\n      return `${base} Costs ${amount} ${currency} per call. ${paymentProofNote(resource)}${authorizationNote(resource)}`;\n    }\n    case 'dynamic':\n      return `${base} Requires payment (amount determined at request time). ${paymentProofNote(resource)}${authorizationNote(resource)}`;\n  }\n}\n\n/**\n * Builds the MCP `Tool.inputSchema` from the canonical `CommerceResource.inputSchema`.\n *\n * Every keyword is carried through except that `type` is forced to the\n * `'object'` MCP requires, `properties` keeps only object-valued entries and\n * `required` only strings. A paid resource gains the optional `_payment`\n * string property, and a resource requiring authorization the optional\n * `_authorization` object. Both are declared because a resource's input schema\n * is closed by default, and a client that validates arguments against it\n * would otherwise refuse to send them.\n */\nexport function buildInputSchema(resource: CommerceResource): Tool['inputSchema'] {\n  const base = resource.inputSchema;\n  const baseIsObject = isRecord(base);\n\n  // Keep object-valued property schemas from the resource's config JSON\n  const basePropertyEntries: readonly [string, JSONObject][] =\n    baseIsObject && isRecord(base.properties)\n      ? Object.entries(base.properties).filter((entry): entry is [string, JSONObject] =>\n          isRecord(entry[1]),\n        )\n      : [];\n  const properties: Record<string, JSONObject> = Object.fromEntries(basePropertyEntries);\n\n  // Both overwrite a resource-declared property of the same name; config\n  // rejects that collision at load time\n  if (isPaidResource(resource)) {\n    properties[PAYMENT_INPUT_FIELD] = {\n      type: 'string',\n      description: paymentInputFieldDescription(resource),\n    };\n  }\n  const methods = requiredAuthorization(resource);\n  if (methods.length > 0) {\n    properties[AUTHORIZATION_INPUT_FIELD] = {\n      type: 'object',\n      description:\n        'Authorization this resource requires in addition to payment: the method and its serialized proof.',\n      properties: {\n        method: { type: 'string', enum: [...methods] },\n        payload: { type: 'string', minLength: 1 },\n      },\n      required: ['method', 'payload'],\n    };\n  }\n\n  const required =\n    baseIsObject && Array.isArray(base.required)\n      ? base.required.filter((v): v is string => typeof v === 'string')\n      : [];\n\n  const extra = baseIsObject\n    ? Object.fromEntries(\n        Object.entries(base).filter(\n          ([key]) => key !== 'type' && key !== 'properties' && key !== 'required',\n        ),\n      )\n    : {};\n\n  return {\n    ...extra,\n    type: 'object',\n    properties,\n    ...(required.length > 0 ? { required } : {}),\n  };\n}\n","/**\n * Maps pipeline outcomes and errors to MCP tool results through the core wire\n * helpers (`toErrorEnvelope`, `toPaymentRequiredEnvelope`,\n * `toDeliverySummary`). The A2A adapter uses all three and the HTTP route the\n * two envelopes, so each shape is defined once.\n */\n\nimport type { CallToolResult } from '@modelcontextprotocol/server';\nimport {\n  type CommerceError,\n  DELIVERY_SUMMARY_META_KEY,\n  type DeliveredOutcome,\n  type ExecutionOutcome,\n  type PaymentMethodName,\n  type PaymentRequiredOutcome,\n  toDeliverySummary,\n  toErrorEnvelope,\n  toPaymentRequiredEnvelope,\n} from '../../core';\nimport { isRecord } from '../../core/is-record';\nimport {\n  MPP_MCP_PAYMENT_REQUIRED_META_KEY,\n  MPP_MCP_RECEIPT_META_KEY,\n  mcpPaymentRequired,\n  receiptObject,\n} from '../../payments/mpp/transport';\nimport {\n  settlementFailure,\n  settlementResponse,\n  settlementResponseFromDetails,\n  X402_MCP_ERROR_META_KEY,\n  X402_MCP_PAYMENT_RESPONSE_META_KEY,\n  x402ErrorCode,\n} from '../../payments/x402/transport';\nimport { proofCarriers } from './tool-mapping';\n\nfunction toRecord(value: object): Record<string, unknown> {\n  return value as Record<string, unknown>;\n}\n\nfunction deliveredResult(outcome: DeliveredOutcome): CallToolResult {\n  const body = outcome.body;\n  const text = typeof body === 'string' ? body : JSON.stringify(body ?? null);\n  const payment = outcome.payment;\n  const receipt =\n    payment?.provider === 'mpp' ? receiptObject(payment.metadata?.['receipt']) : undefined;\n  return {\n    content: [{ type: 'text', text }],\n    ...(isRecord(body) ? { structuredContent: body } : {}),\n    _meta: {\n      [DELIVERY_SUMMARY_META_KEY]: toRecord(toDeliverySummary(outcome)),\n      ...(payment?.provider === 'x402'\n        ? { [X402_MCP_PAYMENT_RESPONSE_META_KEY]: settlementResponse(payment) }\n        : {}),\n      ...(receipt !== undefined ? { [MPP_MCP_RECEIPT_META_KEY]: receipt } : {}),\n    },\n  };\n}\n\n// The x402 MCP transport requires the first text block to repeat\n// `structuredContent` as JSON; the second gives readers a short explanation\nfunction structuredError(\n  structured: Record<string, unknown>,\n  sentence: string,\n  meta?: Record<string, unknown>,\n): CallToolResult {\n  return {\n    isError: true,\n    content: [\n      { type: 'text', text: JSON.stringify(structured) },\n      { type: 'text', text: sentence },\n    ],\n    structuredContent: structured,\n    ...(meta !== undefined ? { _meta: meta } : {}),\n  };\n}\n\n// Put x402's PaymentRequired fields beside the gateway error envelope so\n// x402 clients can read the challenge from `structuredContent`\nfunction withX402Challenge(\n  envelope: Record<string, unknown>,\n  challenge: Record<string, unknown>,\n): Record<string, unknown> {\n  return { ...challenge, ...envelope };\n}\n\nfunction paymentRequiredResult(outcome: PaymentRequiredOutcome): CallToolResult {\n  const envelope = toPaymentRequiredEnvelope(outcome);\n  const p = envelope.payment;\n  const x402Required = p.provider === 'x402' ? p.envelope : undefined;\n  const structured =\n    x402Required !== undefined\n      ? withX402Challenge(toRecord(envelope), x402Required)\n      : toRecord(envelope);\n  const mppRequired = p.provider === 'mpp' ? mcpPaymentRequired(p.envelope) : undefined;\n  let meta: Record<string, unknown> | undefined;\n  if (x402Required !== undefined) meta = { [X402_MCP_ERROR_META_KEY]: x402Required };\n  else if (mppRequired !== undefined) meta = { [MPP_MCP_PAYMENT_REQUIRED_META_KEY]: mppRequired };\n  return structuredError(\n    structured,\n    // A challenge with several offers names no single destination\n    `Payment required: ${p.amount} ${p.currency}${p.destination !== undefined ? ` to ${p.destination}` : ''} for resource \"${outcome.resourceId}\". Retry with an ${p.provider} payment proof in ${proofCarriers(p.provider)}.`,\n    meta,\n  );\n}\n\n/** A tool result for an error; `rail` is the payment method the call used, if any */\nexport function errorResult(error: CommerceError, rail?: PaymentMethodName): CallToolResult {\n  const envelope = toErrorEnvelope(error);\n  const details = error.details;\n  const challenge = details?.['challenge'];\n  // Include the rail's new challenge when a 402 refusal supplies one\n  const refused = error.httpStatus === 402 && isRecord(challenge);\n  const x402Required =\n    rail === 'x402' && refused\n      ? {\n          ...challenge,\n          error: x402ErrorCode(error.code, details?.['reason'], details?.['network']),\n        }\n      : undefined;\n  const structured =\n    x402Required !== undefined\n      ? withX402Challenge(toRecord(envelope), x402Required)\n      : toRecord(envelope);\n  let meta: Record<string, unknown> | undefined;\n  if (rail === 'x402') {\n    const settlement =\n      error.code === 'PAYMENT_SETTLEMENT_FAILED'\n        ? settlementFailure(details)\n        : settlementResponseFromDetails(details);\n    if (settlement !== undefined || x402Required !== undefined) {\n      meta = {\n        ...(x402Required !== undefined ? { [X402_MCP_ERROR_META_KEY]: x402Required } : {}),\n        ...(settlement !== undefined ? { [X402_MCP_PAYMENT_RESPONSE_META_KEY]: settlement } : {}),\n      };\n    }\n  } else if (rail === 'mpp' && refused) {\n    // MPP error results carry a challenge but no receipt\n    const required = mcpPaymentRequired(challenge, {\n      code: error.code,\n      reason: details?.['reason'],\n      detail: error.message,\n    });\n    if (required !== undefined) meta = { [MPP_MCP_PAYMENT_REQUIRED_META_KEY]: required };\n  }\n  return structuredError(structured, `${envelope.code}: ${envelope.message}`, meta);\n}\n\nexport function mapOutcome(outcome: ExecutionOutcome): CallToolResult {\n  return outcome.kind === 'delivered' ? deliveredResult(outcome) : paymentRequiredResult(outcome);\n}\n","/**\n * MCP protocol adapter.\n *\n * One MCP tool per mcp-exposed canonical resource. Every `tools/call` builds a\n * `CanonicalRequest` and goes through `context.pipeline.execute()`. This\n * adapter reads payment carriers but leaves verification, settlement and\n * merchant calls to the pipeline.\n *\n * The SDK's `createMcpHandler` serves `2026-07-28` over Streamable HTTP and\n * routes 2025-era requests through its stateless fallback. It creates a\n * low-level `Server` for each request. This adapter converts the gateway's\n * Node request and response to the web types the handler uses, without adding\n * `@modelcontextprotocol/node` as a peer.\n *\n * Tools are registered on the low-level `Server`, not through\n * `McpServer.registerTool`, whose `inputSchema` accepts only a Zod schema or\n * shape. `CommerceResource.inputSchema` and the MCP wire `Tool.inputSchema`\n * are both JSON Schema, so building `Tool` objects directly carries the schema\n * through with no lossy conversion. The SDK marks `Server` `@deprecated` but\n * still documents it for advanced cases such as this one.\n *\n * The gateway's `onRequest` hook validates Host and Origin for every route,\n * including `/mcp`. This adapter has no separate allowlist. When mounted\n * outside the gateway, it provides no Host or Origin checks; its descriptor\n * therefore lists `dns-rebinding-protection` as unsupported.\n */\nimport type { IncomingMessage, ServerResponse } from 'node:http';\nimport {\n  type CallToolResult,\n  createMcpHandler,\n  type McpHttpHandler,\n  ProtocolError,\n  ProtocolErrorCode,\n  Server,\n  type Tool,\n} from '@modelcontextprotocol/server';\nimport {\n  type AdapterDescriptor,\n  type AdapterHealth,\n  type CanonicalRequest,\n  CommerceError,\n  type CommerceResource,\n  extractReservedInputFields,\n  type HttpProtocolAdapter,\n  type PaymentSubmission,\n  type ProtocolAdapterContext,\n  toCommerceError,\n} from '../../core';\nimport { toLogInfo } from '../../core/errors';\nimport { isRecord } from '../../core/is-record';\nimport { MPP_MCP_CREDENTIAL_META_KEY } from '../../payments/mpp/transport';\nimport { X402_MCP_PAYMENT_META_KEY, x402McpPaymentSubmission } from '../../payments/x402/transport';\nimport { PACKAGE_VERSION } from '../../version';\nimport { readCappedBody } from '../http';\nimport { MCP_MODERN_PROTOCOL_REVISION, MCP_TOOL_NAME_PATTERN } from './constants';\nimport { buildDescriptor } from './descriptor';\nimport { errorResult, mapOutcome } from './result-mapping';\nimport { buildInputSchema, buildToolDescription, isValidToolName } from './tool-mapping';\n\nexport interface McpAdapterOptions {\n  /** Path prefix the gateway mounts this adapter at. Default '/mcp' */\n  readonly mountPath?: string;\n  /** MCP `Implementation.name` reported during initialize */\n  readonly serverName?: string;\n  /** MCP `Implementation.version` reported during initialize. Default: this package's version */\n  readonly serverVersion?: string;\n}\n\ninterface RegisteredTool {\n  readonly resource: CommerceResource;\n  readonly tool: Tool;\n}\n\ninterface SkippedResource {\n  readonly id: string;\n  readonly reason: string;\n}\n\nconst DEFAULT_MOUNT_PATH = '/mcp';\nconst DEFAULT_SERVER_NAME = 'agent-commerce';\n\n/**\n * The SDK can dispatch several `tools/call` requests in one JSON-RPC batch\n * before earlier calls settle. One POST can therefore start concurrent\n * `pipeline.execute()` calls. Limit active calls to 8 per adapter instance.\n */\nconst MAX_CONCURRENT_TOOL_CALLS = 8;\n\n// A second line behind the gateway mount's cap, bounding what this adapter\n// buffers if it is mounted without that guard\nconst MAX_REQUEST_BODY_BYTES = 256 * 1024;\n\n/**\n * Bounds the queue behind the semaphore, per adapter instance. Without it an\n * oversized batch would queue in full and then run in full. 64 is 8x\n * MAX_CONCURRENT_TOOL_CALLS, room for a legitimate burst; calls beyond it fail\n * fast with GATEWAY_BUSY and reach no backend.\n */\nconst MAX_QUEUED_TOOL_CALLS = 64;\n\n// Batch revision used by the SDK when no protocol-version header is sent\nconst MCP_BATCH_PROTOCOL_REVISION = '2025-03-26';\n\n// The tool list is public and stable until restart; cache it for a minute\nconst TOOLS_LIST_CACHE_HINT = { ttlMs: 60_000, cacheScope: 'public' } as const;\n\nclass McpProtocolAdapter implements HttpProtocolAdapter {\n  readonly name = 'mcp' as const;\n  readonly mountPath: string;\n  readonly descriptor: AdapterDescriptor;\n\n  private readonly serverName: string;\n  private readonly serverVersion: string;\n\n  private context: ProtocolAdapterContext | undefined;\n  private started = false;\n  private tools: readonly RegisteredTool[] = [];\n  private toolsByResourceId: ReadonlyMap<string, CommerceResource> = new Map();\n  private skipped: readonly SkippedResource[] = [];\n  private handler: McpHttpHandler | undefined;\n\n  // Counting semaphore on `pipeline.execute()`. It lives on the adapter, not\n  // the request, so the cap holds across concurrent `/mcp` requests as well\n  // as within one batch.\n  private inFlightToolCalls = 0;\n  private readonly toolCallWaiters: Array<() => void> = [];\n\n  constructor(options: McpAdapterOptions = {}) {\n    this.mountPath = options.mountPath ?? DEFAULT_MOUNT_PATH;\n    this.serverName = options.serverName ?? DEFAULT_SERVER_NAME;\n    this.serverVersion = options.serverVersion ?? PACKAGE_VERSION;\n    this.descriptor = buildDescriptor(PACKAGE_VERSION);\n  }\n\n  async start(context: ProtocolAdapterContext): Promise<void> {\n    this.context = context;\n    this.started = false;\n\n    let resources: readonly CommerceResource[] = [];\n    try {\n      resources = context.resources.listExposedVia('mcp');\n    } catch (err) {\n      context.logger.error(\n        { err: toLogInfo(err) },\n        'mcp adapter: failed to list mcp-exposed resources',\n      );\n      resources = [];\n    }\n\n    const tools: RegisteredTool[] = [];\n    const toolsByResourceId = new Map<string, CommerceResource>();\n    const skipped: SkippedResource[] = [];\n\n    for (const resource of resources) {\n      try {\n        if (!isValidToolName(resource.id)) {\n          skipped.push({\n            id: resource.id,\n            reason: `resource id is not a legal MCP tool name (must match ${MCP_TOOL_NAME_PATTERN.source})`,\n          });\n          continue;\n        }\n        if (toolsByResourceId.has(resource.id)) {\n          skipped.push({ id: resource.id, reason: 'duplicate tool name' });\n          continue;\n        }\n        const tool: Tool = {\n          name: resource.id,\n          description: buildToolDescription(resource),\n          inputSchema: buildInputSchema(resource),\n        };\n        tools.push({ resource, tool });\n        toolsByResourceId.set(resource.id, resource);\n      } catch (err) {\n        skipped.push({\n          id: resource.id,\n          reason: `failed to build MCP tool: ${toCommerceError(err).message}`,\n        });\n      }\n    }\n\n    for (const s of skipped) {\n      context.logger.warn({ resourceId: s.id, reason: s.reason }, 'mcp adapter: resource skipped');\n    }\n\n    this.tools = tools;\n    this.toolsByResourceId = toolsByResourceId;\n    this.skipped = skipped;\n    // Route 2025-era requests through the SDK's stateless fallback\n    this.handler = createMcpHandler(\n      (ctx) => this.buildServer(ctx.requestInfo?.signal ?? new AbortController().signal),\n      {\n        legacy: 'stateless',\n        // Reporting only: a request the SDK rejects is already answered\n        onerror: (err) => context.logger.debug({ err: toLogInfo(err) }, 'mcp adapter: SDK error'),\n      },\n    );\n    this.started = true;\n\n    context.logger.info(\n      {\n        mountPath: this.mountPath,\n        toolCount: tools.length,\n        skippedCount: skipped.length,\n      },\n      'mcp adapter started',\n    );\n  }\n\n  async handleHttp(req: IncomingMessage, res: ServerResponse): Promise<void> {\n    try {\n      if (!this.started || !this.context || !this.handler) {\n        this.writeJsonRpcError(res, 503, 'MCP adapter is not running.');\n        return;\n      }\n      if (req.method !== 'POST') {\n        this.writeJsonRpcError(res, 405, 'Method not allowed. This endpoint only accepts POST.');\n        return;\n      }\n\n      // Aborted when the response closes. `handleToolCall` checks it only\n      // before `pipeline.execute()`: a call that may already have settled\n      // must finish, or the buyer is charged for nothing.\n      const abortController = new AbortController();\n      res.once('close', () => abortController.abort());\n      const read = await readCappedBody(req, MAX_REQUEST_BODY_BYTES);\n      if (read.kind === 'too-large') {\n        this.writeJsonRpcError(\n          res,\n          413,\n          `Request body exceeds the ${MAX_REQUEST_BODY_BYTES}-byte limit.`,\n        );\n        return;\n      }\n      if (read.kind !== 'ok') {\n        this.writeJsonRpcError(res, 400, 'Could not read the request body.');\n        return;\n      }\n      const body = parseJson(read.text);\n      const version = req.headers['mcp-protocol-version'];\n      if (Array.isArray(body) && version !== undefined && version !== MCP_BATCH_PROTOCOL_REVISION) {\n        this.writeJsonRpcError(\n          res,\n          400,\n          `Invalid Request: JSON-RPC batches are supported only in MCP ${MCP_BATCH_PROTOCOL_REVISION}.`,\n        );\n        return;\n      }\n      const malformed = isModernRequest(req) ? undefined : malformedToolCall(body);\n      if (malformed !== undefined) {\n        this.writeJsonRpcError(res, 200, malformed.message, -32602, malformed.id);\n        return;\n      }\n      const response = await this.handler.fetch(\n        toWebRequest(req, read.text, abortController.signal),\n      );\n      await writeWebResponse(response, res);\n    } catch (err) {\n      this.context?.logger.error({ err: toLogInfo(err) }, 'mcp adapter: request handling failed');\n      this.writeJsonRpcError(res, 500, 'Internal server error.');\n    }\n  }\n\n  async health(): Promise<AdapterHealth> {\n    const checkedAt = this.context?.clock.nowIso() ?? new Date().toISOString();\n    if (!this.started || !this.context) {\n      return { status: 'fail', detail: 'MCP adapter has not been started.', checkedAt };\n    }\n    const toolCount = this.tools.length;\n    if (this.skipped.length > 0) {\n      const detail = `${toolCount} tool(s) registered; ${this.skipped.length} resource(s) skipped: ${this.skipped\n        .map((s) => `${s.id} (${s.reason})`)\n        .join('; ')}`;\n      return { status: 'warn', detail, checkedAt };\n    }\n    return { status: 'pass', detail: `${toolCount} tool(s) registered.`, checkedAt };\n  }\n\n  async stop(): Promise<void> {\n    this.started = false;\n    const handler = this.handler;\n    this.handler = undefined;\n    try {\n      await handler?.close();\n    } catch {\n      // Best effort: stop() must be idempotent and never throw\n    }\n    this.context = undefined;\n  }\n\n  // Use general JSON-RPC codes for transport errors\n  private writeJsonRpcError(\n    res: ServerResponse,\n    status: number,\n    message: string,\n    code = status >= 500 ? -32603 : -32600,\n    id: string | number | null = null,\n  ): void {\n    if (res.headersSent) return;\n    res.writeHead(status, {\n      'content-type': 'application/json',\n      // RFC 9110 requires Allow on a 405, and this endpoint takes only POST\n      ...(status === 405 ? { allow: 'POST' } : {}),\n    });\n    res.end(JSON.stringify({ jsonrpc: '2.0', error: { code, message }, id }));\n  }\n\n  private buildServer(signal: AbortSignal): Server {\n    const server = new Server(\n      { name: this.serverName, version: this.serverVersion },\n      { capabilities: { tools: {} }, cacheHints: { 'tools/list': TOOLS_LIST_CACHE_HINT } },\n    );\n    server.setRequestHandler('tools/list', async (request) => {\n      // A cursor is invalid because this list is not paginated\n      if (request.params?.cursor !== undefined) {\n        throw new ProtocolError(ProtocolErrorCode.InvalidParams, 'Invalid cursor.');\n      }\n      return { tools: this.tools.map((t) => t.tool) };\n    });\n    server.setRequestHandler('tools/call', async (request) =>\n      this.handleToolCall(\n        request.params.name,\n        request.params.arguments ?? {},\n        request.params._meta,\n        signal,\n      ),\n    );\n    return server;\n  }\n\n  private async handleToolCall(\n    resourceId: string,\n    rawArgs: Record<string, unknown>,\n    meta: Record<string, unknown> | undefined,\n    signal: AbortSignal,\n  ): Promise<CallToolResult> {\n    const context = this.context;\n    if (!context) {\n      return errorResult(new CommerceError('INTERNAL_ERROR', 'MCP adapter is not running.'));\n    }\n    // Clients can call names absent from `tools/list`. Return the same MCP\n    // error for unknown and non-MCP resources without revealing the latter\n    const resource = this.toolsByResourceId.get(resourceId);\n    if (!resource) {\n      throw new ProtocolError(ProtocolErrorCode.InvalidParams, `Unknown tool \"${resourceId}\".`);\n    }\n    try {\n      const requestId = context.ids.next('mcp');\n      const fields = extractReservedInputFields(rawArgs, resource, requestId);\n      const { input, authorization } = fields;\n      // Client wrappers attach proofs in `_meta`; that proof takes priority\n      // over a possible `_payment` placeholder in the arguments\n      const payment = paymentFromMeta(meta, resource) ?? fields.payment;\n      const request: CanonicalRequest = {\n        requestId,\n        resourceId,\n        input,\n        protocol: 'mcp',\n        receivedAt: context.clock.nowIso(),\n        ...(payment !== undefined ? { payment } : {}),\n        ...(authorization !== undefined ? { authorization } : {}),\n      };\n      await this.acquireToolCallSlot(signal);\n      try {\n        // The last cancellation point: a queued call whose caller has left\n        // must not start a pipeline run, while a started one may reach\n        // settle() and must finish\n        if (signal.aborted) {\n          // No error code names \"the caller left\". PROTOCOL_UNSUPPORTED is the\n          // closest non-retryable one; GATEWAY_BUSY would invite a retry\n          // nobody is left to make.\n          return errorResult(\n            new CommerceError(\n              'PROTOCOL_UNSUPPORTED',\n              'Client disconnected before this call started.',\n            ),\n          );\n        }\n        const outcome = await context.pipeline.execute(request);\n        return mapOutcome(outcome);\n      } finally {\n        // Always released: a stranded permit shrinks the cap for good and\n        // eventually deadlocks the adapter\n        this.releaseToolCallSlot();\n      }\n    } catch (err) {\n      const error = toCommerceError(err);\n      context.logger.warn({ resourceId, err: toLogInfo(error) }, 'mcp adapter: execution failed');\n      return errorResult(error, resource.paymentMethods[0]);\n    }\n  }\n\n  /**\n   * Takes a permit, or queues for one when MAX_CONCURRENT_TOOL_CALLS are in\n   * flight. Throws when the queue is full or the caller disconnected while\n   * queued; a throw never leaks a permit.\n   */\n  private async acquireToolCallSlot(signal: AbortSignal): Promise<void> {\n    if (this.inFlightToolCalls < MAX_CONCURRENT_TOOL_CALLS) {\n      this.inFlightToolCalls++;\n      return;\n    }\n    if (this.toolCallWaiters.length >= MAX_QUEUED_TOOL_CALLS) {\n      // Load shedding is transient, so GATEWAY_BUSY tells the caller to back\n      // off and retry\n      throw new CommerceError(\n        'GATEWAY_BUSY',\n        'Too many tool calls already queued on this adapter; retry later.',\n      );\n    }\n    // Resolved by releaseToolCallSlot, which hands its permit straight to the\n    // oldest waiter, so a call arriving later cannot take it first\n    await new Promise<void>((resolve) => this.toolCallWaiters.push(resolve));\n    if (signal.aborted) {\n      // This waiter now holds a permit it will not use; pass it on\n      this.releaseToolCallSlot();\n      // Non-retryable, for the same reason as the check in handleToolCall\n      throw new CommerceError('PROTOCOL_UNSUPPORTED', 'Client disconnected while queued.');\n    }\n  }\n\n  private releaseToolCallSlot(): void {\n    const next = this.toolCallWaiters.shift();\n    // Handing the permit over leaves the in-flight count unchanged\n    if (next !== undefined) next();\n    else this.inFlightToolCalls--;\n  }\n}\n\n// Pass the Node request body to the SDK as a stream. The gateway's socket\n// byte limit still applies, and the signal reports client disconnects.\nfunction toWebRequest(req: IncomingMessage, body: string, signal: AbortSignal): Request {\n  const headers = new Headers();\n  for (const [name, value] of Object.entries(req.headers)) {\n    if (value !== undefined) headers.set(name, Array.isArray(value) ? value.join(', ') : value);\n  }\n  return new Request(new URL(req.url ?? '/', 'http://localhost'), {\n    method: req.method ?? 'POST',\n    headers,\n    body,\n    signal,\n  });\n}\n\n/**\n * Let the SDK validate requests with `Mcp-Method` or a modern version header;\n * malformed headers and `_meta` may require an HTTP 400 response\n */\nfunction isModernRequest(req: IncomingMessage): boolean {\n  if (req.headers['mcp-method'] !== undefined) return true;\n  const version = req.headers['mcp-protocol-version'];\n  // ISO revision dates sort lexically.\n  return typeof version === 'string' && version >= MCP_MODERN_PROTOCOL_REVISION;\n}\n\n// Undefined for a body that is not JSON; the SDK answers that with -32700\nfunction parseJson(body: string): unknown {\n  try {\n    return JSON.parse(body);\n  } catch {\n    return undefined;\n  }\n}\n\n// Give malformed tool calls without modern headers a short -32602 response\nfunction malformedToolCall(message: unknown): { id: string | number; message: string } | undefined {\n  if (!isRecord(message) || message['method'] !== 'tools/call') return undefined;\n  const id = message['id'];\n  if (typeof id !== 'string' && typeof id !== 'number') return undefined;\n  const params = message['params'];\n  let problem: string | undefined;\n  if (!isRecord(params)) problem = 'params must be an object';\n  else if (typeof params['name'] !== 'string') problem = '\"name\" must be a string';\n  else if (params['arguments'] !== undefined && !isRecord(params['arguments'])) {\n    problem = '\"arguments\" must be an object';\n  } else if (params['_meta'] !== undefined && !isRecord(params['_meta'])) {\n    problem = '\"_meta\" must be an object';\n  }\n  return problem === undefined\n    ? undefined\n    : { id, message: `Invalid tools/call params: ${problem}.` };\n}\n\n// Stream the SDK's response body, including SSE, to the Node response\nasync function writeWebResponse(response: Response, res: ServerResponse): Promise<void> {\n  res.writeHead(response.status, Object.fromEntries(response.headers));\n  if (response.body !== null) {\n    for await (const chunk of response.body) {\n      if (res.destroyed) break;\n      res.write(chunk);\n    }\n  }\n  res.end();\n}\n\n// Read a proof from the selected rail's MCP `_meta` carrier\nfunction paymentFromMeta(\n  meta: Record<string, unknown> | undefined,\n  resource: CommerceResource,\n): PaymentSubmission | undefined {\n  const method = resource.paymentMethods[0];\n  if (method === 'x402') {\n    const payload = x402McpPaymentSubmission(meta?.[X402_MCP_PAYMENT_META_KEY]);\n    if (payload !== undefined) return { method, payload };\n  }\n  const credential = meta?.[MPP_MCP_CREDENTIAL_META_KEY];\n  if (method === 'mpp' && isRecord(credential)) {\n    // The MPP provider converts this object to an Authorization value\n    return { method, payload: JSON.stringify(credential) };\n  }\n  return undefined;\n}\n\nexport function createMcpAdapter(options?: McpAdapterOptions): HttpProtocolAdapter {\n  return new McpProtocolAdapter(options);\n}\n"]}

package/dist/mpp.js

@@ -1,9 +1,9 @@
 import { MPP_PROFILE, MPP_NETWORKS, MPP_SUPPORTED_SPEC, MPP_DEFAULT_NETWORK, MPP_MIN_CHALLENGE_SECRET_LENGTH, isMppNetwork, MPP_DEFAULT_PAYMENT_FLOW, MPP_SPEC_DRAFTS } from './chunk-6Z2H53CG.js';
 export { MPPX_VERSION, MPP_PROFILE, MPP_SPEC_COMMIT, MPP_SPEC_DRAFTS, MPP_SPEC_REPOSITORY, MPP_SUPPORTED_SPEC } from './chunk-6Z2H53CG.js';
 import { CONTENT_DIGEST_METADATA_KEY } from './chunk-5ZYXBCDX.js';
-import { createX402PaymentProvider, DEFAULT_IDS, parseCanonicalAmount } from './chunk-UHMYRV3J.js';
-import { SETTLE_AFTER_BACKEND_METADATA_KEY } from './chunk-IFGRCXME.js';
-import { PACKAGE_VERSION, systemClock, CommerceError } from './chunk-SY6GUYSQ.js';
+import { createX402PaymentProvider, DEFAULT_IDS, parseCanonicalAmount } from './chunk-HNRDZLSN.js';
+import { SETTLE_AFTER_BACKEND_METADATA_KEY } from './chunk-Y4RE3XYF.js';
+import { PACKAGE_VERSION, systemClock, CommerceError } from './chunk-7ZMMXZ4G.js';
 import { computeReplayKey } from './chunk-KA2AX5FH.js';
 import './chunk-2CJNA7MS.js';
 import { Challenge, Method, Receipt, Credential, PaymentRequest, Errors } from 'mppx';

package/dist/x402.d.ts

@@ -46,6 +46,11 @@ interface X402ProviderOptions extends X402OfferOptions {
     readonly paymentFlow?: X402PaymentFlow;
     /** Per-resource overrides of `paymentFlow`, keyed by resource id */
     readonly resourcePaymentFlows?: Readonly<Record<string, X402PaymentFlow>>;
+    /**
+     * The media type each resource's challenge declares as `resource.mimeType`,
+     * keyed by resource id. Defaults to `application/json`.
+     */
+    readonly resourceMimeTypes?: Readonly<Record<string, string>>;
     /**
      * Which facilitator verifies and broadcasts. `local` runs one in this process
      * against a dev chain, and its `signerPrivateKey` pays gas there, usually

package/dist/x402.js

@@ -1,7 +1,7 @@
-import { chainIdFromCaip2 } from './chunk-UHMYRV3J.js';
-export { createX402PaymentProvider, createX402PaymentProvider as x402 } from './chunk-UHMYRV3J.js';
-export { SUPPORTED_NETWORK_IDS } from './chunk-IFGRCXME.js';
-import { CommerceError } from './chunk-SY6GUYSQ.js';
+import { chainIdFromCaip2 } from './chunk-HNRDZLSN.js';
+export { createX402PaymentProvider, createX402PaymentProvider as x402 } from './chunk-HNRDZLSN.js';
+export { SUPPORTED_NETWORK_IDS } from './chunk-Y4RE3XYF.js';
+import { CommerceError } from './chunk-7ZMMXZ4G.js';
 import './chunk-KA2AX5FH.js';
 import './chunk-2CJNA7MS.js';
 import { PaymentRequirementsV2Schema } from '@x402/core/schemas';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devlab.group/agent-commerce",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Open-source, self-hosted, non-custodial commerce and payment orchestration gateway for AI agents.",
   "license": "Apache-2.0",
   "type": "module",
@@ -100,7 +100,7 @@
     "demo:agent": "tsx demo/agent/src/main.ts",
     "demo:up": "docker compose up --build",
     "demo:down": "docker compose down -v",
-    "test:cli:dist": "node dist/cli/index.js --help && node dist/cli/index.js --version && node dist/cli/index.js version | grep -q '@x402/core' && node dist/cli/index.js version | head -1 >/dev/null && node dist/cli/index.js import openapi --help >/dev/null",
+    "test:cli:dist": "node dist/cli/index.js --help && node dist/cli/index.js --version && node dist/cli/index.js version | grep -q '@x402/core' && node dist/cli/index.js version | head -1 >/dev/null && node dist/cli/index.js import openapi --help >/dev/null && node dist/cli/index.js start --help >/dev/null",
     "pack:dry": "npm pack --dry-run"
   },
   "dependencies": {

package/dist/chunk-LZS5BL3W.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/authorization/ap2/constants.ts","../src/storage/sqlite.ts"],"names":["fsConstants"],"mappings":";;;;;;AAQO,IAAM,gBAAA,GAAmB;AAOzB,IAAM,SAAA,GAAY,CAAC,QAAQ;AAO3B,IAAM,qBAAA,GAAwB;AAG9B,IAAM,YAAA,GAAe;AACrB,IAAM,aAAA,GAAgB;AAGtB,IAAM,wBAAA,GAA2B;AAOjC,IAAM,eAAA,GAAkB,CAAC,KAAA,EAAO,KAAA,EAAO,KAAK,GAAA,EAAK,KAAA,EAAO,OAAO,KAAK;AAOpE,IAAM,wBAAA,GAA2B;AAQjC,IAAM,oBAAA,GAAuB;AAO7B,IAAM,oBAAA,GAAuB;AAG7B,IAAM,8BAAA,GAAiC;AAMvC,IAAM,0BAAA,GAA6B;ACtCnC,SAAS,mBAAmB,OAAA,EAA+C;AAChF,EAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,MAAA,EAAO,GAAI,OAAA;AAChC,EAAA,MAAM,eAAe,IAAA,KAAS,UAAA;AAE9B,EAAA,IAAI,YAAA,EAAc;AAGhB,IAAA,SAAA,CAAU,OAAA,CAAQ,IAAI,CAAA,EAAG,EAAE,WAAW,IAAA,EAAM,IAAA,EAAM,KAAO,CAAA;AAAA,EAC3D;AAIA,EAAA,IAAI,YAAA,IAAgB,UAAA,CAAW,IAAI,CAAA,EAAG;AACpC,IAAA,IAAI;AACF,MAAA,UAAA,CAAW,IAAA,EAAMA,UAAY,IAAI,CAAA;AAAA,IACnC,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,eAAA;AAAA,QACA,CAAA,EAAG,KAAK,CAAA,EAAA,EAAK,IAAI,CAAA,kDAAA,EAAqD,OAAO,OAAA,CAAQ,MAAA,KAAW,UAAA,GAAa,OAAA,CAAQ,MAAA,EAAO,GAAI,SAAS,CAAA,4KAAA,CAAA;AAAA,QACzI,EAAE,OAAA,EAAS,EAAE,IAAA,EAAK;AAAE,OACtB;AAAA,IACF;AAAA,EACF;AAOA,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,IAAI;AACF,MAAA,SAAA,CAAU,QAAA,CAAS,IAAA,EAAM,GAAA,EAAK,GAAK,CAAC,CAAA;AAAA,IACtC,CAAA,CAAA,MAAQ;AAAA,IAGR;AAAA,EACF;AAEA,EAAA,MAAM,EAAA,GAAK,IAAI,QAAA,CAAS,IAAI,CAAA;AAC5B,EAAA,EAAA,CAAG,OAAO,oBAAoB,CAAA;AAC9B,EAAA,EAAA,CAAG,OAAO,mBAAmB,CAAA;AAC7B,EAAA,IAAI,YAAA,EAAc,2BAAA,CAA4B,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AACjE,EAAA,OAAO,EAAA;AACT;AAWA,SAAS,2BAAA,CAA4B,IAAA,EAAc,KAAA,EAAe,MAAA,EAAsB;AACtF,EAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,IAAA,CAAA,EAAQ,CAAA,EAAG,IAAI,CAAA,IAAA,CAAM,CAAA,EAAG;AACvD,IAAA,IAAI;AACF,MAAA,SAAA,CAAU,MAAM,GAAK,CAAA;AAAA,IACvB,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,OAAQ,KAAA,CAAgC,IAAA;AAC9C,MAAA,IAAI,SAAS,QAAA,EAAU;AACvB,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,EAAE,IAAA,EAAM,KAAA,EAAO,KAAA,EAAO,QAAQ,SAAA,EAAU;AAAA,QACxC;AAAA,OACF;AAAA,IACF;AAAA,EACF;AACF","file":"chunk-LZS5BL3W.js","sourcesContent":["/**\n * Pinned AP2 identifiers and key policy.\n *\n * AP2 v0.2.0 (2026-04-28, commit b4587ac) is the tagged release this gateway\n * verifies against; unversioned `main` is never implemented against. Config,\n * the verifier and `doctor` all read these, so a bump lands in one place.\n */\n\nexport const AP2_SPEC_VERSION = '0.2.0';\n\n/**\n * Direct only. Autonomous mode needs open mandates, cnf-bound agent keys and\n * constraint evaluation over `checkout.line_items`, none of which is\n * implemented, so it is refused rather than partly served.\n */\nexport const AP2_MODES = ['direct'] as const;\nexport type Ap2Mode = (typeof AP2_MODES)[number];\n\n/**\n * A single algorithm, so `alg=none` and the HMAC family are excluded by\n * construction rather than by a denylist\n */\nexport const AP2_SIGNING_ALGORITHM = 'ES256';\n\n/** The key type and curve ES256 implies. Any other pair is refused at load */\nexport const AP2_KEY_TYPE = 'EC';\nexport const AP2_JWK_CURVE = 'P-256';\n\n/** Byte length of a P-256 coordinate, before base64url encoding */\nexport const AP2_JWK_COORDINATE_BYTES = 32;\n\n/**\n * JWK members a verification key may carry. An allowlist, so private material\n * (`d`) and URL members (`x5u`, `jku`) are refused without the list naming\n * them. Keys are configured inline and never fetched; see docs/security.md.\n */\nexport const AP2_JWK_MEMBERS = ['kty', 'crv', 'x', 'y', 'kid', 'alg', 'use'] as const;\n\n/**\n * Compared against this literal, never as a prefix. `mandate.checkout.open.1`\n * carries spending constraints nothing here evaluates, so accepting it would\n * tell a buyer their limits were checked when nothing read them.\n */\nexport const AP2_CHECKOUT_MANDATE_VCT = 'mandate.checkout.1';\n\n/**\n * Merchant checkout JWTs declare this gateway-specific profile; AP2 leaves\n * the checkout payload out of scope. The identifier is a namespace that\n * clients do not dereference. Merchants sign it into each checkout JWT, so\n * changing the expected value would reject previously signed JWTs.\n */\nexport const AP2_CHECKOUT_PROFILE = 'agent-commerce/ap2/checkout/v1';\n\n/**\n * The only accepted SD-JWT `_sd_alg` (an absent one means sha-256). Any other\n * value is refused rather than hashed as sha-256, which would check a\n * presentation under an algorithm it never claimed.\n */\nexport const AP2_DIGEST_ALGORITHM = 'sha-256';\n\n/** Seconds of clock skew tolerated on mandate and checkout time claims */\nexport const AP2_DEFAULT_CLOCK_SKEW_SECONDS = 60;\n\n/**\n * Skew as wide as a mandate's validity window would stop `exp` rejecting\n * anything. An operator who needs more than five minutes has a clock to fix.\n */\nexport const AP2_MAX_CLOCK_SKEW_SECONDS = 300;\n","/**\n * Opens a SQLite file with owner-only permissions. Every store that keeps a\n * SQLite file opens it here, so the hardening below exists once: the file is\n * pre-created at 0600, the WAL sidecars are narrowed once WAL creates them, and\n * an existing but unwritable file fails at startup.\n *\n * Callers own their schema; this function migrates nothing.\n */\nimport {\n  accessSync,\n  chmodSync,\n  closeSync,\n  existsSync,\n  constants as fsConstants,\n  mkdirSync,\n  openSync,\n} from 'node:fs';\nimport { dirname } from 'node:path';\nimport Database from 'better-sqlite3';\nimport { CommerceError, type Logger } from '../core';\n\nexport interface OpenSqliteOptions {\n  /** File path, or ':memory:' for tests. Parent directory is created if missing */\n  readonly path: string;\n  /** Names the database in operator-facing errors, e.g. \"Receipt database\" */\n  readonly label: string;\n  readonly logger: Logger;\n}\n\nexport function openSqliteDatabase(options: OpenSqliteOptions): Database.Database {\n  const { path, label, logger } = options;\n  const isFileBacked = path !== ':memory:';\n\n  if (isFileBacked) {\n    // 0700 on a directory this creates. A recursive mkdir leaves an existing\n    // one, the operator's, with its mode.\n    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });\n  }\n\n  // Check write access at startup. SQLite can open a read-only database and\n  // report the problem only when the first write is attempted.\n  if (isFileBacked && existsSync(path)) {\n    try {\n      accessSync(path, fsConstants.W_OK);\n    } catch {\n      throw new CommerceError(\n        'STORAGE_ERROR',\n        `${label} \"${path}\" exists but is not writable by this process (uid ${typeof process.getuid === 'function' ? process.getuid() : 'unknown'}). If this is a container that recently changed user, an existing volume may still be owned by the previous one - recreate it (docker compose down -v) or fix its ownership.`,\n        { details: { path } },\n      );\n    }\n  }\n\n  // Create the file at 0600 before SQLite creates it at 0644 (less the umask).\n  // A chmod afterwards is too late: a local user who opens the file in between\n  // keeps a readable descriptor across the chmod. SQLite copies the main file's\n  // mode onto the -wal/-shm sidecars, so this covers all three. `mode` applies\n  // on creation only; an existing file is left to the chmod below.\n  if (isFileBacked) {\n    try {\n      closeSync(openSync(path, 'a', 0o600));\n    } catch {\n      // Silent on purpose: `new Database` reports the same cause with a better\n      // message, or the failure is harmless and the chmod below covers it\n    }\n  }\n\n  const db = new Database(path);\n  db.pragma('journal_mode = WAL');\n  db.pragma('foreign_keys = ON');\n  if (isFileBacked) restrictDatabasePermissions(path, label, logger);\n  return db;\n}\n\n/**\n * Narrows the database and its WAL sidecars to owner-only. The receipt ledger\n * holds no key material, but it does hold payer and payee addresses, amounts,\n * settlement hashes, replay keys and the commerce event log.\n *\n * Runs after `journal_mode = WAL`, which creates the sidecars, and also\n * tightens a database that already existed with a looser mode. A failure only\n * warns: a filesystem without POSIX modes must not stop the gateway starting.\n */\nfunction restrictDatabasePermissions(path: string, label: string, logger: Logger): void {\n  for (const file of [path, `${path}-wal`, `${path}-shm`]) {\n    try {\n      chmodSync(file, 0o600);\n    } catch (error) {\n      const code = (error as NodeJS.ErrnoException).code;\n      if (code === 'ENOENT') continue;\n      logger.warn(\n        { file, label, error: code ?? 'unknown' },\n        'could not restrict database permissions to owner-only',\n      );\n    }\n  }\n}\n"]}