@devlab.group/agent-commerce 2.3.0 → 2.4.1

package/dist/mcp.d.ts

@@ -1,7 +1,7 @@
-import { H as HttpProtocolAdapter } from './protocol-adapter-CfxU8Z2T.js';
+import { HttpProtocolAdapter } from './index.js';
 import 'node:http';
-import './runtime-7vLNYvmU.js';
-import './authorization-CMkIuAkO.js';
+import './runtime-Cl_BLVZV.js';
+import './authorization-DjAecwuW.js';
 
 interface McpAdapterOptions {
     /** Path prefix the gateway mounts this adapter at. Default '/mcp' */
@@ -13,4 +13,5 @@ interface McpAdapterOptions {
 }
 declare function createMcpAdapter(options?: McpAdapterOptions): HttpProtocolAdapter;
 
-export { type McpAdapterOptions, createMcpAdapter, createMcpAdapter as mcp };
+export { createMcpAdapter, createMcpAdapter as mcp };
+export type { McpAdapterOptions };

package/dist/mcp.js

@@ -1,6 +1,6 @@
 import { MCP_TOOL_NAME_PATTERN, readCappedBody, MCP_MODERN_PROTOCOL_REVISION, x402ErrorCode, settlementFailure, settlementResponseFromDetails, x402McpPaymentSubmission, X402_MCP_PAYMENT_META_KEY, X402_MCP_PAYMENT_RESPONSE_META_KEY, settlementResponse, X402_MCP_ERROR_META_KEY } from './chunk-ES3V6ECS.js';
 import { mcpPaymentRequired, MPP_MCP_CREDENTIAL_META_KEY, receiptObject, MPP_MCP_RECEIPT_META_KEY, MPP_MCP_PAYMENT_REQUIRED_META_KEY } from './chunk-5ZYXBCDX.js';
-import { PACKAGE_VERSION, toLogInfo, toCommerceError, CommerceError, extractReservedInputFields, PAYMENT_INPUT_FIELD, AUTHORIZATION_INPUT_FIELD, toErrorEnvelope, DELIVERY_SUMMARY_META_KEY, toDeliverySummary, toPaymentRequiredEnvelope } from './chunk-Q5TII32R.js';
+import { PACKAGE_VERSION, toLogInfo, toCommerceError, CommerceError, extractReservedInputFields, PAYMENT_INPUT_FIELD, AUTHORIZATION_INPUT_FIELD, toErrorEnvelope, DELIVERY_SUMMARY_META_KEY, toDeliverySummary, toPaymentRequiredEnvelope } from './chunk-DTKU3Z2M.js';
 import { isRecord } from './chunk-2CJNA7MS.js';
 import { createMcpHandler, Server, ProtocolError, ProtocolErrorCode, LATEST_PROTOCOL_VERSION } from '@modelcontextprotocol/server';
 

package/dist/mpp.d.ts

@@ -1,6 +1,6 @@
-export { a as MPPX_VERSION, b as MPP_PROFILE, c as MPP_SPEC_COMMIT, d as MPP_SPEC_DRAFTS, e as MPP_SPEC_REPOSITORY, f as MPP_SUPPORTED_SPEC } from './constants-nackLItD.js';
-import { A as AdapterDescriptor, L as Logger, C as Clock, e as IdGenerator, d as PaymentProvider } from './runtime-7vLNYvmU.js';
-import { a as X402FacilitatorConfig, X as X402PaymentFlow } from './guardrails-CX_jYXvZ.js';
+export { a as MPPX_VERSION, b as MPP_PROFILE, c as MPP_SPEC_COMMIT, d as MPP_SPEC_DRAFTS, e as MPP_SPEC_REPOSITORY, f as MPP_SUPPORTED_SPEC } from './constants-BG22tE8S.js';
+import { AdapterDescriptor, Logger, Clock, IdGenerator, PaymentProvider } from './index.js';
+import { X402FacilitatorConfig, X402PaymentFlow } from './x402.js';
 
 /**
  * Describes the MPP profile and its unsupported variants.
@@ -58,4 +58,5 @@ interface MppProviderOptions {
 
 declare function createMppPaymentProvider(options: MppProviderOptions): PaymentProvider;
 
-export { MPP_DESCRIPTOR, type MppProviderOptions, createMppPaymentProvider, createMppPaymentProvider as mpp };
+export { MPP_DESCRIPTOR, createMppPaymentProvider, createMppPaymentProvider as mpp };
+export type { MppProviderOptions };

package/dist/mpp.js

@@ -1,11 +1,12 @@
 import { MPP_PROFILE, MPP_NETWORKS, MPP_SUPPORTED_SPEC, MPP_DEFAULT_NETWORK, MPP_MIN_CHALLENGE_SECRET_LENGTH, isMppNetwork, MPP_DEFAULT_PAYMENT_FLOW, MPP_SPEC_DRAFTS } from './chunk-6Z2H53CG.js';
 export { MPPX_VERSION, MPP_PROFILE, MPP_SPEC_COMMIT, MPP_SPEC_DRAFTS, MPP_SPEC_REPOSITORY, MPP_SUPPORTED_SPEC } from './chunk-6Z2H53CG.js';
 import { CONTENT_DIGEST_METADATA_KEY } from './chunk-5ZYXBCDX.js';
-import { createX402PaymentProvider, DEFAULT_IDS, parseCanonicalAmount } from './chunk-TNS7U5Q4.js';
-import { SETTLE_AFTER_BACKEND_METADATA_KEY } from './chunk-XVU46YAH.js';
-import { PACKAGE_VERSION, systemClock, CommerceError } from './chunk-Q5TII32R.js';
+import { createX402PaymentProvider, DEFAULT_IDS, parseCanonicalAmount } from './chunk-CXWC5LWM.js';
+import { SETTLE_AFTER_BACKEND_METADATA_KEY } from './chunk-QPV3EGJO.js';
+import { PACKAGE_VERSION, systemClock, CommerceError } from './chunk-DTKU3Z2M.js';
 import { computeReplayKey } from './chunk-KA2AX5FH.js';
 import './chunk-2CJNA7MS.js';
+import { PERMIT2_ADDRESS } from '@x402/evm';
 import { Challenge, Method, Receipt, Credential, PaymentRequest, Errors } from 'mppx';
 import { Methods } from 'mppx/evm';
 import { charge } from 'mppx/evm/server';
@@ -238,7 +239,9 @@ function createMppProviderWithSettlement(options, settlement, nonceUsed) {
         recipient,
         chainId,
         decimals: MPP_PROFILE.assetDecimals,
-        credentialTypes: [MPP_PROFILE.credentialType]
+        credentialTypes: [MPP_PROFILE.credentialType],
+        // Required by draft-evm-charge-00 for every credential type
+        permit2Address: PERMIT2_ADDRESS
       }
     });
     return {

package/dist/mpp.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/payments/mpp/descriptor.ts","../src/payments/mpp/credential.ts","../src/payments/mpp/options.ts","../src/payments/mpp/provider.ts"],"names":["isAddress","getAddress"],"mappings":";;;;;;;;;;;;;;AAYO,IAAM,cAAA,GAAoC;AAAA,EAC/C,IAAA,EAAM,KAAA;AAAA,EACN,IAAA,EAAM,SAAA;AAAA,EACN,qBAAA,EAAuB,eAAA;AAAA,EACvB,aAAA,EAAe,kBAAA;AAAA,EACf,YAAA,EAAc;AAAA,IACZ,CAAA,OAAA,EAAU,YAAY,MAAM,CAAA,CAAA;AAAA,IAC5B,CAAA,OAAA,EAAU,YAAY,MAAM,CAAA,CAAA;AAAA,IAC5B,CAAA,WAAA,EAAc,YAAY,cAAc,CAAA,CAAA;AAAA,IACxC,UAAA;AAAA,IACA,GAAG,YAAA,CAAa,GAAA,CAAI,CAAC,OAAA,KAAY,CAAA,QAAA,EAAW,OAAO,CAAA,CAAE,CAAA;AAAA,IACrD,CAAA,MAAA,EAAS,YAAY,WAAW,CAAA,CAAA;AAAA,IAChC,sBAAA;AAAA,IACA,oBAAA;AAAA,IACA,cAAA;AAAA,IACA,iBAAA;AAAA;AAAA,IAEA;AAAA,GACF;AAAA;AAAA,EAEA,MAAA,EAAQ,cAAA;AAAA,EACR,WAAA,EAAa;AAAA;AAAA,IAEX,wBAAA;AAAA;AAAA,IAEA,oBAAA;AAAA,IACA,wBAAA;AAAA,IACA,iBAAA;AAAA;AAAA,IAEA,QAAA;AAAA,IACA,qBAAA;AAAA;AAAA,IAEA,cAAA;AAAA,IACA;AAAA;AAEJ;ACtCA,IAAM,oBAAA,GAA+D;AAAA,EACnE,CAAC,6CAA6C,aAAa,CAAA;AAAA,EAC3D,CAAC,wCAAwC,mBAAmB,CAAA;AAAA,EAC5D,CAAC,sCAAsC,6BAA6B,CAAA;AAAA,EACpE,CAAC,iCAAiC,uBAAuB,CAAA;AAAA,EACzD,CAAC,qCAAqC,iBAAiB,CAAA;AAAA,EACvD,CAAC,qCAAqC,cAAc,CAAA;AAAA,EACpD,CAAC,wCAAwC,iBAAiB;AAC5D,CAAA;AAEO,SAAS,mBAAmB,KAAA,EAAwB;AACzD,EAAA,IAAI,KAAA,YAAiB,MAAA,CAAO,mBAAA,EAAqB,OAAO,mBAAA;AACxD,EAAA,IAAI,KAAA,YAAiB,MAAA,CAAO,mBAAA,EAAqB,OAAO,iBAAA;AACxD,EAAA,IAAI,KAAA,YAAiB,MAAA,CAAO,qBAAA,EAAuB,OAAO,mBAAA;AAC1D,EAAA,IAAI,KAAA,YAAiB,OAAO,uBAAA,EAAyB;AACnD,IAAA,MAAM,KAAA,GAAQ,oBAAA,CAAqB,IAAA,CAAK,CAAC,CAAC,IAAI,CAAA,KAAM,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,EAAO,OAAO,KAAA,CAAM,CAAC,CAAA;AAAA,EAC3B;AACA,EAAA,OAAO,uBAAA;AACT;AAIO,SAAS,iBAAiB,OAAA,EAAwC;AACvE,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,SAAA,EAAU,CAAE,UAAA,CAAW,GAAG,CAAA,GACjD,UAAA,CAAW,SAAA,CAAU,IAAA,CAAK,KAAA,CAAM,OAAO,CAA0B,CAAA,GACjE,OAAA;AACJ,EAAA,OAAO,UAAA,CAAW,YAAY,UAAU,CAAA;AAC1C;AAMO,SAAS,eAAA,CACd,MAAA,EACA,MAAA,EACA,UAAA,EACoB;AACpB,EAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,CAAO,KAAA,EAAO,OAAO,aAAA;AAC1C,EAAA,IAAI,OAAO,MAAA,KAAW,MAAA,CAAO,UAAU,MAAA,CAAO,MAAA,KAAW,OAAO,MAAA,EAAQ;AACtE,IAAA,OAAO,oBAAA;AAAA,EACT;AAGA,EAAA,IAAI,MAAA,CAAO,WAAW,cAAA,CAAe,SAAA,CAAU,EAAE,QAAA,EAAU,UAAA,EAAY,CAAA,EAAG;AACxE,IAAA,OAAO,gBAAA;AAAA,EACT;AAIA,EAAA,IAAI,OAAO,MAAA,KAAW,MAAA,IAAa,MAAA,CAAO,MAAA,KAAW,OAAO,MAAA,EAAQ;AAClE,IAAA,OAAO,sBAAA;AAAA,EACT;AACA,EAAA,MAAM,MAAM,MAAA,CAAO,OAAA;AACnB,EAAA,MAAM,OAAO,MAAA,CAAO,OAAA;AACpB,EAAA,IAAI,GAAA,CAAI,MAAA,KAAW,IAAA,CAAK,MAAA,EAAQ,OAAO,cAAA;AACvC,EAAA,IAAI,CAAC,WAAA,CAAY,GAAA,CAAI,WAAW,IAAA,CAAK,SAAS,GAAG,OAAO,iBAAA;AACxD,EAAA,IAAI,IAAI,aAAA,EAAe,OAAA,KAAY,IAAA,CAAK,aAAA,EAAe,SAAS,OAAO,eAAA;AACvE,EAAA,IAAI,CAAC,WAAA,CAAY,GAAA,CAAI,UAAU,IAAA,CAAK,QAAQ,GAAG,OAAO,aAAA;AACtD,EAAA,IAAI,UAAU,GAAA,CAAI,aAAa,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,CAAA,EAAG;AAClE,IAAA,OAAO,wBAAA;AAAA,EACT;AACA,EAAA,IAAI,UAAU,GAAG,CAAA,KAAM,SAAA,CAAU,IAAI,GAAG,OAAO,aAAA;AAC/C,EAAA,OAAO,MAAA;AACT;AAGO,SAAS,gBAAA,CACd,iBACA,aAAA,EACmB;AACnB,EAAA,MAAM,EAAE,WAAW,IAAA,EAAM,EAAA,EAAI,OAAO,UAAA,EAAY,WAAA,EAAa,OAAM,GAAI,aAAA;AACvE,EAAA,MAAM,OAAA,GAAU;AAAA,IACd,WAAA,EAAa,CAAA;AAAA,IACb,QAAA,EAAU,eAAA,CAAgB,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAA;AAAA,IAC7C,OAAA,EAAS,EAAE,SAAA,EAAW,aAAA,EAAe,EAAE,IAAA,EAAM,EAAA,EAAI,KAAA,EAAO,UAAA,EAAY,WAAA,EAAa,KAAA,EAAM;AAAE,GAC3F;AACA,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA,EAAE;AAC5F;AAWA,SAAS,UAAU,KAAA,EAAmC;AACpD,EAAA,OAAO,KAAA,KAAU,MAAA,GAAY,EAAA,GAAK,cAAA,CAAe,UAAU,KAA+B,CAAA;AAC5F;AAEO,SAAS,WAAA,CAAY,GAAuB,CAAA,EAAgC;AACjF,EAAA,OAAO,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,MAAA,IAAa,UAAU,CAAC,CAAA,IAAK,SAAA,CAAU,CAAC,IACpE,UAAA,CAAW,CAAC,CAAA,KAAM,UAAA,CAAW,CAAC,CAAA,GAC9B,KAAA;AACN;ACtDO,SAAS,cAAc,OAAA,EAAgC;AAC5D,EAAA,OAAO,IAAI,aAAA,CAAc,gBAAA,EAAkB,OAAO,CAAA;AACpD;AAOO,SAAS,gBAAgB,OAAA,EAAoC;AAClE,EAAA,IAAI,CAACA,SAAAA,CAAU,OAAA,CAAQ,SAAS,CAAA,EAAG,MAAM,cAAc,qCAAqC,CAAA;AAC5F,EAAA,IAAI,CAACA,SAAAA,CAAU,OAAA,CAAQ,KAAK,CAAA,EAAG,MAAM,cAAc,iCAAiC,CAAA;AACpF,EAAA,IAAI,QAAQ,SAAA,CAAU,MAAA,KAAW,KAAK,OAAA,CAAQ,YAAA,CAAa,WAAW,CAAA,EAAG;AACvE,IAAA,MAAM,cAAc,qDAAqD,CAAA;AAAA,EAC3E;AAGA,EAAA,IAAI,OAAA,CAAQ,MAAM,MAAA,KAAW,CAAA,IAAK,SAAS,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC9D,IAAA,MAAM,cAAc,kDAAkD,CAAA;AAAA,EACxE;AACA,EAAA,IAAI,OAAA,CAAQ,eAAA,CAAgB,MAAA,GAAS,+BAAA,EAAiC;AACpE,IAAA,MAAM,aAAA;AAAA,MACJ,kDAAkD,+BAA+B,CAAA;AAAA,KACnF;AAAA,EACF;AACA,EAAA,MAAM,MAAM,OAAA,CAAQ,mBAAA;AACpB,EAAA,IAAI,GAAA,KAAQ,WAAc,CAAC,MAAA,CAAO,UAAU,GAAG,CAAA,IAAK,OAAO,CAAA,CAAA,EAAI;AAC7D,IAAA,MAAM,cAAc,8DAA8D,CAAA;AAAA,EACpF;AACA,EAAA,IAAI,QAAQ,OAAA,KAAY,MAAA,IAAa,CAAC,YAAA,CAAa,OAAA,CAAQ,OAAO,CAAA,EAAG;AACnE,IAAA,MAAM,cAAc,CAAA,2BAAA,EAA8B,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,EAC7E;AACF;;;AC9BA,IAAM,6BAAA,GAAgC,GAAA;AAGtC,IAAM,kBAAA,GAAqB,sCAAA;AAE3B,IAAM,0BAA0B,QAAA,CAAS;AAAA,EACvC;AACF,CAAC,CAAA;AAED,IAAM,qBAAA,GAAwB,GAAA;AAEvB,SAAS,yBAAyB,OAAA,EAA8C;AACrF,EAAA,MAAM,EAAE,QAAQ,WAAA,EAAa,YAAA,EAAc,iCAAiC,MAAA,EAAQ,GAAG,MAAK,GAC1F,OAAA;AAEF,EAAA,eAAA,CAAgB,IAAI,CAAA;AAGpB,EAAA,MAAM,aAAa,yBAAA,CAA0B;AAAA,IAC3C,OAAA,EAAS,QAAQ,OAAA,IAAW,mBAAA;AAAA,IAC5B,MAAA;AAAA,IACA,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,cAAc,OAAA,CAAQ,YAAA;AAAA,IACtB,eAAe,WAAA,CAAY,aAAA;AAAA,IAC3B,OAAO,OAAA,CAAQ,SAAA;AAAA,IACf,WAAA;AAAA,IACA,GAAI,YAAA,KAAiB,MAAA,GAAY,EAAE,YAAA,KAAiB,EAAC;AAAA,IACrD,GAAI,+BAAA,KAAoC,MAAA,GAAY,EAAE,+BAAA,KAAoC,EAAC;AAAA,IAC3F,GAAI,MAAA,KAAW,MAAA,GAAY,EAAE,MAAA,KAAW,EAAC;AAAA,IACzC,GAAI,QAAQ,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM,GAAI;AAAC,GAC/D,CAAA;AAED,EAAA,MAAM,QAAQ,kBAAA,CAAmB;AAAA,IAC/B,SAAA,EAAW,KAAK,MAAA,EAAQ,EAAE,SAAS,qBAAA,EAAuB,UAAA,EAAY,GAAG;AAAA,GAC1E,CAAA;AACD,EAAA,MAAM,SAAA,GAA6B,CAAC,KAAA,EAAO,KAAA,KACzC,MAAM,YAAA,CAAa;AAAA,IACjB,SAAS,OAAA,CAAQ,KAAA;AAAA,IACjB,GAAA,EAAK,uBAAA;AAAA,IACL,YAAA,EAAc,oBAAA;AAAA,IACd,IAAA,EAAM,CAAC,KAAA,EAAO,KAAK;AAAA,GACpB,CAAA;AACH,EAAA,OAAO,+BAAA,CAAgC,IAAA,EAAM,UAAA,EAAY,SAAS,CAAA;AACpE;AAMO,SAAS,+BAAA,CACd,OAAA,EACA,UAAA,EACA,SAAA,EACiB;AACjB,EAAA,eAAA,CAAgB,OAAO,CAAA;AACvB,EAAA,IAAI,UAAA,CAAW,SAAS,MAAA,EAAQ;AAC9B,IAAA,MAAM,cAAc,iDAAiD,CAAA;AAAA,EACvE;AACA,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,IAAW,mBAAA;AACnC,EAAA,MAAM,UAAU,MAAA,CAAO,OAAA,CAAQ,MAAM,GAAG,CAAA,CAAE,CAAC,CAAC,CAAA;AAC5C,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,WAAA;AAC/B,EAAA,MAAM,UAAA,GAAa,QAAQ,mBAAA,IAAuB,6BAAA;AAClD,EAAA,MAAM,SAAA,GAAYC,UAAAA,CAAW,OAAA,CAAQ,SAAS,CAAA;AAC9C,EAAA,MAAM,KAAA,GAAQA,UAAAA,CAAW,OAAA,CAAQ,KAAK,CAAA;AACtC,EAAA,MAAM,GAAA,GAAM,QAAQ,GAAA,IAAO,WAAA;AAG3B,EAAA,IAAI,sBAAA,GAAyB,KAAA;AAI7B,EAAA,MAAM,SAAS,MAAA,CAAO;AAAA,IACpB,QAAA,EAAU,KAAA;AAAA,IACV,SAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAU,WAAA,CAAY,aAAA;AAAA,IACtB,eAAe,EAAE,IAAA,EAAM,QAAQ,SAAA,EAAW,OAAA,EAAS,QAAQ,YAAA,EAAa;AAAA,IACxE,QAAQ,YAAY;AAClB,MAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,kCAAkC,CAAA;AAAA,IAC9E;AAAA,GACD,CAAA;AAED,EAAA,SAAS,QAAA,CAAS,aAAiC,MAAA,EAA+B;AAChF,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,UAAA;AAAA,MACR,QAAA,EAAU,KAAA;AAAA,MACV,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,UAAU,WAAA,CAAY,QAAA;AAAA,MACtB,OAAA;AAAA,MACA,KAAA;AAAA,MACA,eAAA,EAAiB;AAAA,KACnB;AAAA,EACF;AAEA,EAAA,eAAe,kBAAkB,OAAA,EAAsD;AACrF,IAAA,IAAI,OAAA,CAAQ,QAAA,KAAa,WAAA,CAAY,WAAA,EAAa;AAChD,MAAA,MAAM,aAAA;AAAA,QACJ,CAAA,UAAA,EAAa,QAAQ,QAAA,CAAS,EAAE,kBAAkB,OAAA,CAAQ,QAAQ,CAAA,kBAAA,EAAqB,WAAA,CAAY,WAAW,CAAA;AAAA,OAChH;AAAA,IACF;AAGA,IAAA,IAAI,qBAAqB,OAAA,CAAQ,MAAA,EAAQ,WAAA,CAAY,aAAa,KAAK,EAAA,EAAI;AACzE,MAAA,MAAM,IAAI,aAAA,CAAc,iBAAA,EAAmB,CAAA,QAAA,EAAW,OAAA,CAAQ,MAAM,CAAA,oBAAA,CAAA,EAAwB;AAAA,QAC1F,OAAA,EAAS,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA;AAAO,OACnC,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,CAAC,sBAAA,EAAwB;AAC3B,MAAA,MAAM,sBAAsB,OAAO,CAAA;AACnC,MAAA,sBAAA,GAAyB,IAAA;AAAA,IAC3B;AACA,IAAA,MAAM,WAAA,GACJ,QAAQ,oBAAA,GAAuB,OAAA,CAAQ,SAAS,EAAE,CAAA,IAClD,QAAQ,WAAA,IACR,wBAAA;AAGF,IAAA,MAAM,OAAA,GAAU,IAAI,IAAA,CAAK,KAAA,CAAM,KAAI,CAAE,OAAA,EAAQ,GAAI,UAAA,GAAa,GAAI,CAAA;AAClE,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,QAAA,GAAW,2BAA2B,CAAA;AAC7D,IAAA,MAAM,SAAA,GAAY,SAAA,CAAU,UAAA,CAAW,OAAA,CAAQ,MAAA,EAAQ;AAAA,MACrD,WAAW,OAAA,CAAQ,eAAA;AAAA,MACnB,OAAO,OAAA,CAAQ,KAAA;AAAA,MACf,OAAA;AAAA;AAAA;AAAA,MAGA,GAAI,OAAO,MAAA,KAAW,WAAW,EAAE,MAAA,KAAW,EAAC;AAAA;AAAA;AAAA,MAG/C,IAAA,EAAM,EAAE,QAAA,EAAU,OAAA,CAAQ,SAAS,EAAA,EAAG;AAAA,MACtC,OAAA,EAAS;AAAA,QACP,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,QAAA,EAAU,KAAA;AAAA,QACV,SAAA;AAAA,QACA,OAAA;AAAA,QACA,UAAU,WAAA,CAAY,aAAA;AAAA,QACtB,eAAA,EAAiB,CAAC,WAAA,CAAY,cAAc;AAAA;AAC9C,KACD,CAAA;AACD,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,GAAA,CAAI,IAAA,CAAK,QAAQ,CAAA;AAAA,MACrB,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,UAAA,EAAY,QAAQ,QAAA,CAAS,EAAA;AAAA,MAC7B,QAAA,EAAU,KAAA;AAAA,MACV,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,UAAU,OAAA,CAAQ,QAAA;AAAA,MAClB,WAAA,EAAa,SAAA;AAAA,MACb,OAAA;AAAA,MACA,KAAA;AAAA,MACA,SAAA,EAAW,QAAQ,WAAA,EAAY;AAAA,MAC/B,SAAA,EAAW;AAAA,QACT,QAAA,EAAU,KAAA;AAAA,QACV,SAAS,eAAA,CAAgB,IAAA;AAAA,QACzB,OAAA,EAAS,CAAC,SAAS,CAAA;AAAA;AAAA;AAAA;AAAA,QAInB,QAAA,EAAU,EAAE,eAAA,EAAiB,SAAA,CAAU,SAAA,CAAU,SAAS,CAAA,EAAG,UAAA,EAAY,CAAC,SAAS,CAAA;AAAE,OACvF;AAAA,MACA,UAAU,EAAE,CAAC,iCAAiC,GAAG,gBAAgB,eAAA;AAAgB,KACnF;AAAA,EACF;AAEA,EAAA,eAAe,OAAO,OAAA,EAA6D;AACjF,IAAA,MAAM,EAAE,WAAA,EAAa,QAAA,EAAU,UAAA,EAAW,GAAI,OAAA;AAC9C,IAAA,IAAI,YAAY,QAAA,KAAa,KAAA,IAAS,WAAA,CAAY,SAAA,CAAU,aAAa,KAAA,EAAO;AAC9E,MAAA,OAAO,QAAA,CAAS,aAAa,gBAAgB,CAAA;AAAA,IAC/C;AACA,IAAA,MAAM,MAAA,GAAS,WAAA,CAAY,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAA;AAC9C,IAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,QAAA,CAAS,aAAa,mBAAmB,CAAA;AAE7D,IAAA,IAAI,UAAA;AACJ,IAAA,IAAI;AACF,MAAA,UAAA,GAAa,gBAAA,CAAiB,WAAW,OAAO,CAAA;AAAA,IAClD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,QAAA,CAAS,aAAa,sBAAsB,CAAA;AAAA,IACrD;AACA,IAAA,MAAM,SAAS,UAAA,CAAW,SAAA;AAI1B,IAAA,IAAI,CAAC,UAAU,MAAA,CAAO,MAAA,EAAQ,EAAE,SAAA,EAAW,OAAA,CAAQ,eAAA,EAAiB,CAAA,EAAG;AACrE,MAAA,OAAO,QAAA,CAAS,aAAa,sBAAsB,CAAA;AAAA,IACrD;AACA,IAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,MAAA,EAAQ,MAAA,EAAQ,SAAS,EAAE,CAAA;AAC3D,IAAA,IAAI,OAAA,EAAS,OAAO,QAAA,CAAS,WAAA,EAAa,OAAO,CAAA;AACjD,IAAA,IAAI,CAAC,MAAA,CAAO,OAAA,IAAW,IAAI,KAAK,MAAA,CAAO,OAAO,CAAA,CAAE,OAAA,EAAQ,IAAK,KAAA,CAAM,GAAA,EAAI,CAAE,SAAQ,EAAG;AAClF,MAAA,OAAO,QAAA,CAAS,aAAa,mBAAmB,CAAA;AAAA,IAClD;AACA,IAAA,IAAK,UAAA,CAAW,OAAA,EAAuC,IAAA,KAAS,WAAA,CAAY,cAAA,EAAgB;AAC1F,MAAA,OAAO,QAAA,CAAS,aAAa,wBAAwB,CAAA;AAAA,IACvD;AAKA,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAM,aAAa,MAAM,MAAA,CAAO,mBAAmB,CAAC,MAAM,GAAG,UAAU,CAAA;AACvE,MAAA,KAAA,GAAQA,UAAAA,CAAY,UAAA,CAAW,OAAA,CAA8B,KAAK,CAAA;AAAA,IACpE,SAAS,KAAA,EAAO;AACd,MAAA,OAAO,QAAA,CAAS,WAAA,EAAa,kBAAA,CAAmB,KAAK,CAAC,CAAA;AAAA,IACxD;AAGA,IAAA,MAAM,KAAA,GAAS,WAAW,OAAA,CAAuC,KAAA;AAEjE,IAAA,MAAM,SAAA,GAAY,iBAAiB,EAAE,OAAA,EAAS,OAAO,IAAA,EAAM,KAAA,EAAO,OAAO,CAAA;AAKzE,IAAA,MAAM,gBAAA,GAAmB,MAAM,UAAA,CAAW,MAAA;AAAA,MACxC,MAAM,aAAA,CAAc,OAAA,EAAS,UAAA,CAAW,OAAqC;AAAA,KAC/E;AACA,IAAA,IAAI,gBAAA,CAAiB,WAAW,UAAA,EAAY;AAI1C,MAAA,MAAM,SAAS,gBAAA,CAAiB,eAAA;AAChC,MAAA,MAAM,KAAA,GACJ,MAAA,KAAW,kBAAA,KACT,MAAM,SAAA,GAAY,KAAA,EAAO,KAAK,CAAA,CAAE,KAAA,CAAM,MAAM,KAAK,CAAA,IAAM,KAAA,CAAA;AAC3D,MAAA,OAAO,QAAA;AAAA,QACL,WAAA;AAAA,QACA,KAAA,GAAQ,2BAA4B,MAAA,IAAU;AAAA,OAChD;AAAA,IACF;AAEA,IAAA,IAAI,gBAAA,CAAiB,cAAc,SAAA,EAAW;AAC5C,MAAA,OAAO,QAAA,CAAS,aAAa,qBAAqB,CAAA;AAAA,IACpD;AAEA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,UAAA;AAAA,MACR,QAAA,EAAU,KAAA;AAAA,MACV,KAAA;AAAA,MACA,KAAA,EAAO,SAAA;AAAA,MACP,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,UAAU,WAAA,CAAY,QAAA;AAAA,MACtB,OAAA;AAAA,MACA,KAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAGA,EAAA,eAAe,aAAA,CACb,SACA,aAAA,EACqC;AACrC,IAAA,MAAM,EAAE,SAAA,EAAW,WAAA,EAAa,QAAA,EAAS,GAAI,OAAA;AAC7C,IAAA,MAAM,eAAA,GAAkB,MAAM,qBAAA,CAAsB;AAAA,MAClD,SAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,UAAU,WAAA,CAAY,QAAA;AAAA,MACtB,WAAA,EAAa,MAAM,MAAA;AAAO,KAC3B,CAAA;AACD,IAAA,OAAO;AAAA,MACL,SAAA;AAAA,MACA,QAAA;AAAA,MACA,WAAA,EAAa,eAAA;AAAA,MACb,UAAA,EAAY,gBAAA,CAAiB,eAAA,EAAiB,aAAa;AAAA,KAC7D;AAAA,EACF;AAEA,EAAA,eAAe,sBAAsB,OAAA,EAAsD;AACzF,IAAA,MAAM,IAAA,GAAO,MAAM,UAAA,CAAW,iBAAA,CAAkB,OAAO,CAAA;AACvD,IAAA,MAAM,KAAA,GAAS,KAAK,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAA,GAAI,OAAO,KAAK,EAAC;AACxD,IAAA,IACE,IAAA,CAAK,OAAA,KAAY,OAAA,IACjB,CAAC,WAAA,CAAY,KAAK,KAAA,EAAO,KAAK,CAAA,IAC9B,CAAC,WAAA,CAAY,IAAA,CAAK,aAAa,SAAS,CAAA,IACxC,KAAA,CAAM,MAAM,CAAA,KAAM,OAAA,CAAQ,aAC1B,KAAA,CAAM,SAAS,CAAA,KAAM,OAAA,CAAQ,YAAA,EAC7B;AACA,MAAA,MAAM,aAAA;AAAA,QACJ;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,eAAe,OAAO,OAAA,EAA2D;AAC/E,IAAA,MAAM,EAAE,SAAA,EAAW,WAAA,EAAa,QAAA,EAAU,UAAA,EAAY,cAAa,GAAI,OAAA;AACvE,IAAA,IAAI,YAAA,CAAa,MAAA,KAAW,UAAA,IAAc,YAAA,CAAa,cAAc,MAAA,EAAW;AAC9E,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAKA,IAAA,MAAM,UAAA,GAAa,gBAAA,CAAiB,UAAA,CAAW,OAAO,CAAA;AACtD,IAAA,MAAM,gBAAgB,UAAA,CAAW,OAAA;AACjC,IAAA,MAAM,OAAA,GAAU,MAAM,UAAA,CAAW,MAAA,CAAO;AAAA,MACtC,GAAI,MAAM,aAAA,CAAc,EAAE,WAAW,WAAA,EAAa,QAAqB,CAAA,EAAG,aAAa,CAAA;AAAA,MACvF,YAAA,EAAc,EAAE,GAAG,YAAA,EAAc,UAAU,MAAA;AAAO,KACnD,CAAA;AACD,IAAA,MAAM,MAAA,GAAwB;AAAA,MAC5B,GAAG,OAAA;AAAA,MACH,QAAA,EAAU,KAAA;AAAA,MACV,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,UAAU,WAAA,CAAY,QAAA;AAAA,MACtB,WAAW,YAAA,CAAa;AAAA,KAC1B;AACA,IAAA,IAAI,QAAQ,MAAA,KAAW,SAAA,IAAa,OAAA,CAAQ,iBAAA,KAAsB,QAAW,OAAO,MAAA;AAGpF,IAAA,MAAM,MAAA,GAAqE;AAAA,MACzE,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,WAAW,OAAA,CAAQ,iBAAA;AAAA,MACnB,MAAA,EAAQ,SAAA;AAAA,MACR,SAAA,EAAW,OAAA,CAAQ,SAAA,IAAa,KAAA,CAAM,MAAA,EAAO;AAAA,MAC7C,WAAA,EAAa,WAAW,SAAA,CAAU,EAAA;AAAA,MAClC;AAAA,KACF;AACA,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA;AACnC,IAAA,OAAO,EAAE,GAAG,MAAA,EAAQ,QAAA,EAAU,EAAE,GAAG,OAAA,CAAQ,QAAA,EAAU,OAAA,EAAS,OAAA,CAAQ,SAAA,CAAU,OAAO,GAAE,EAAE;AAAA,EAC7F;AAEA,EAAA,SAAS,MAAA,GAAiC;AACxC,IAAA,OAAO,WAAW,MAAA,EAAO;AAAA,EAC3B;AAEA,EAAA,OAAO,EAAE,MAAM,KAAA,EAAO,UAAA,EAAY,gBAAgB,iBAAA,EAAmB,MAAA,EAAQ,QAAQ,MAAA,EAAO;AAC9F","file":"mpp.js","sourcesContent":["/**\n * Describes the MPP profile and its unsupported variants.\n *\n * The protocol name alone cannot identify a compatible intent, method and\n * extension set, so the descriptor lists both the target and its gaps.\n *\n * Importing the descriptor does not load `mppx`.\n */\nimport type { AdapterDescriptor } from '../../core/public-types';\nimport { PACKAGE_VERSION } from '../../version';\nimport { MPP_NETWORKS, MPP_PROFILE, MPP_SUPPORTED_SPEC } from './constants';\n\nexport const MPP_DESCRIPTOR: AdapterDescriptor = {\n  name: 'mpp',\n  kind: 'payment',\n  implementationVersion: PACKAGE_VERSION,\n  supportedSpec: MPP_SUPPORTED_SPEC,\n  capabilities: [\n    `intent=${MPP_PROFILE.intent}`,\n    `method=${MPP_PROFILE.method}`,\n    `credential=${MPP_PROFILE.credentialType}`,\n    'eip-3009',\n    ...MPP_NETWORKS.map((network) => `network=${network}`),\n    `asset=${MPP_PROFILE.assetSymbol}`,\n    'verify-before-settle',\n    'authorization-flow',\n    'upfront-flow',\n    'payment-receipt',\n    // HTTP request bodies only; MCP and A2A carry the proof in the body\n    'challenge-digest-binding',\n  ],\n  // The pinned specs are drafts and mppx is pre-1.0; the wire format may change\n  status: 'experimental',\n  unsupported: [\n    // Name other methods as a class instead of maintaining a second list\n    'methods other than evm',\n    // This profile supports only the EIP-3009 `authorization` credential\n    'credential=permit2',\n    'credential=transaction',\n    'credential=hash',\n    // The draft allows splits only with permit2 credentials\n    'splits',\n    'intent=subscription',\n    // A separate EVM draft, not an option of charge\n    'evm sessions',\n    'discovery extension',\n  ],\n};\n","// Reading an MPP credential: its decoding, its binding to the challenge, and the x402 proof it carries\nimport { type Challenge, Credential, Errors, PaymentRequest } from 'mppx';\nimport type { Types } from 'mppx/evm';\nimport { getAddress, isAddress } from 'viem';\nimport type { PaymentRequirement, PaymentSubmission } from '../../core';\n\n// mppx reports a verification failure only as message text. The pinned\n// release's wording maps to stable reasons, and the tests cover every entry;\n// unmapped text becomes `authorization_invalid`.\nconst VERIFICATION_REASONS: readonly (readonly [string, string])[] = [\n  ['EVM authorization challenge hash mismatch', 'wrong_nonce'],\n  ['EVM authorization signature mismatch', 'invalid_signature'],\n  ['EVM authorization is not valid yet', 'authorization_not_yet_valid'],\n  ['EVM authorization has expired', 'authorization_expired'],\n  ['EVM authorization source mismatch', 'source_mismatch'],\n  ['EVM authorization amount mismatch', 'wrong_amount'],\n  ['EVM authorization recipient mismatch', 'wrong_recipient'],\n];\n\nexport function verificationReason(error: unknown): string {\n  if (error instanceof Errors.PaymentExpiredError) return 'challenge_expired';\n  if (error instanceof Errors.InvalidPayloadError) return 'invalid_payload';\n  if (error instanceof Errors.InvalidChallengeError) return 'invalid_challenge';\n  if (error instanceof Errors.VerificationFailedError) {\n    const match = VERIFICATION_REASONS.find(([text]) => error.message.includes(text));\n    if (match) return match[1];\n  }\n  return 'authorization_invalid';\n}\n\n// Accept the HTTP `Authorization: Payment ...` value or a JSON credential\n// from MCP `_meta`. Serialize the object for mppx deserialization\nexport function decodeCredential(payload: string): Credential.Credential {\n  const serialized = payload.trimStart().startsWith('{')\n    ? Credential.serialize(JSON.parse(payload) as Credential.Credential)\n    : payload;\n  return Credential.deserialize(serialized);\n}\n\n// Compares the echoed challenge with the one issued for this request. Both\n// carry a valid HMAC by now, so any difference means the credential answers a\n// challenge issued for other terms. The final comparison catches a difference\n// in any request field the named checks do not cover.\nexport function bindingMismatch(\n  echoed: Challenge.Challenge,\n  issued: Challenge.Challenge,\n  resourceId: string,\n): string | undefined {\n  if (echoed.realm !== issued.realm) return 'wrong_realm';\n  if (echoed.method !== issued.method || echoed.intent !== issued.intent) {\n    return 'unsupported_method';\n  }\n  // Only the encoded `opaque` survives the credential round trip, not `meta`,\n  // so compare it with the encoding of this resource's binding\n  if (echoed.opaque !== PaymentRequest.serialize({ resource: resourceId })) {\n    return 'wrong_resource';\n  }\n  // `issued` was built for the request carrying this credential, so a\n  // different body, or none, fails here. A challenge without a digest binds\n  // no body, as the core draft reads it.\n  if (echoed.digest !== undefined && echoed.digest !== issued.digest) {\n    return 'body_digest_mismatch';\n  }\n  const got = echoed.request as ChargeRequest;\n  const want = issued.request as ChargeRequest;\n  if (got.amount !== want.amount) return 'wrong_amount';\n  if (!sameAddress(got.recipient, want.recipient)) return 'wrong_recipient';\n  if (got.methodDetails?.chainId !== want.methodDetails?.chainId) return 'wrong_network';\n  if (!sameAddress(got.currency, want.currency)) return 'wrong_asset';\n  if (canonical(got.methodDetails) !== canonical(want.methodDetails)) {\n    return 'unsupported_credential';\n  }\n  if (canonical(got) !== canonical(want)) return 'wrong_terms';\n  return undefined;\n}\n\n// Rewrap the MPP authorization as the x402 `exact` payload expected by settlement\nexport function toX402Submission(\n  x402Requirement: PaymentRequirement,\n  authorization: Types.AuthorizationPayload,\n): PaymentSubmission {\n  const { signature, from, to, value, validAfter, validBefore, nonce } = authorization;\n  const payment = {\n    x402Version: 2,\n    accepted: x402Requirement.challenge.accepts[0],\n    payload: { signature, authorization: { from, to, value, validAfter, validBefore, nonce } },\n  };\n  return { method: 'x402', payload: Buffer.from(JSON.stringify(payment)).toString('base64') };\n}\n\ninterface ChargeRequest {\n  readonly amount?: string;\n  readonly currency?: string;\n  readonly recipient?: string;\n  readonly methodDetails?: { readonly chainId?: number };\n}\n\n// The encoding mppx binds into the challenge HMAC, so key order cannot\n// produce a false mismatch\nfunction canonical(value: object | undefined): string {\n  return value === undefined ? '' : PaymentRequest.serialize(value as PaymentRequest.Request);\n}\n\nexport function sameAddress(a: string | undefined, b: string | undefined): boolean {\n  return a !== undefined && b !== undefined && isAddress(a) && isAddress(b)\n    ? getAddress(a) === getAddress(b)\n    : false;\n}\n","// The MPP provider's options, checked once at construction\nimport { isAddress } from 'viem';\nimport { type Clock, CommerceError, type IdGenerator, type Logger } from '../../core';\nimport type { X402FacilitatorConfig } from '../x402/guardrails';\nimport type { X402PaymentFlow } from '../x402/payment-flow';\nimport { isMppNetwork, MPP_MIN_CHALLENGE_SECRET_LENGTH, MPP_NETWORKS } from './constants';\n\n/** Whether the token contract has recorded `nonce` as used by `payer` */\nexport type NonceUsedReader = (payer: `0x${string}`, nonce: `0x${string}`) => Promise<boolean>;\n\nexport interface MppProviderOptions {\n  /** Merchant-controlled settlement destination. Never gateway-owned */\n  readonly recipient: `0x${string}`;\n  /** EIP-3009 token the charge is paid in */\n  readonly asset: `0x${string}`;\n  /** EIP-712 domain name of the asset, e.g. 'USDC' or 'MockUSDC' */\n  readonly assetName: string;\n  /** EIP-712 domain version of the asset, e.g. '2' */\n  readonly assetVersion: string;\n  /** Value of each challenge's `realm`, such as the gateway's host */\n  readonly realm: string;\n  /** Key that binds each challenge to this gateway. Never logged or published */\n  readonly challengeSecret: string;\n  /** RPC endpoint of the settlement chain */\n  readonly rpcUrl: string;\n  /** The x402 facilitator that verifies and broadcasts the authorization */\n  readonly facilitator: X402FacilitatorConfig;\n  /** Must be `true` before anything settles on a mainnet. Never a default */\n  readonly allowMainnet?: boolean;\n  /** Required on mainnet when facilitator auth is `none` */\n  readonly allowUnauthenticatedFacilitator?: boolean;\n  readonly logger?: Logger;\n  /**\n   * Seconds a challenge stays valid, 300 by default. The mppx client signs its\n   * authorization to expire at the same moment.\n   */\n  readonly challengeTtlSeconds?: number;\n  /**\n   * CAIP-2 network: `eip155:31337` (local Anvil), `eip155:84532` (Base\n   * Sepolia, the default) or `eip155:8453` (Base)\n   */\n  readonly network?: string;\n  /**\n   * Same flow values as x402. The default, `upfront`, settles before the\n   * backend; `authorization` settles after it\n   */\n  readonly paymentFlow?: X402PaymentFlow;\n  /** Per-resource overrides of `paymentFlow`, keyed by resource id */\n  readonly resourcePaymentFlows?: Readonly<Record<string, X402PaymentFlow>>;\n  readonly clock?: Clock;\n  readonly ids?: IdGenerator;\n}\n\nexport function configInvalid(message: string): CommerceError {\n  return new CommerceError('CONFIG_INVALID', message);\n}\n\nexport type MppChallengeOptions = Omit<\n  MppProviderOptions,\n  'rpcUrl' | 'facilitator' | 'allowMainnet' | 'allowUnauthenticatedFacilitator' | 'logger'\n>;\n\nexport function validateOptions(options: MppChallengeOptions): void {\n  if (!isAddress(options.recipient)) throw configInvalid('MPP recipient is not an EVM address');\n  if (!isAddress(options.asset)) throw configInvalid('MPP asset is not an EVM address');\n  if (options.assetName.length === 0 || options.assetVersion.length === 0) {\n    throw configInvalid('MPP asset needs its EIP-712 domain name and version');\n  }\n  // mppx refuses CR or LF in the quoted realm parameter, so checking here fails\n  // at construction instead of on every challenge\n  if (options.realm.length === 0 || /[\\r\\n]/.test(options.realm)) {\n    throw configInvalid('MPP realm must be a non-empty single-line string');\n  }\n  if (options.challengeSecret.length < MPP_MIN_CHALLENGE_SECRET_LENGTH) {\n    throw configInvalid(\n      `MPP challenge secret must have length at least ${MPP_MIN_CHALLENGE_SECRET_LENGTH}`,\n    );\n  }\n  const ttl = options.challengeTtlSeconds;\n  if (ttl !== undefined && (!Number.isInteger(ttl) || ttl <= 0)) {\n    throw configInvalid('MPP challenge TTL must be a positive whole number of seconds');\n  }\n  if (options.network !== undefined && !isMppNetwork(options.network)) {\n    throw configInvalid(`MPP network must be one of ${MPP_NETWORKS.join(', ')}`);\n  }\n}\n","/**\n * MPP payment provider for the `charge` intent, the `evm` method and the\n * EIP-3009 `authorization` credential.\n *\n * It issues challenges and verifies credentials without moving funds: local\n * checks first, then a read-only check by an x402 facilitator. Settlement hands\n * the same signed authorization to that facilitator through an internal x402\n * provider built from these options. The MPP layer adds no signing key.\n *\n * Under the default `upfront` flow settlement precedes the backend call; under\n * `authorization` it follows a successful one. The drafts require a confirmed\n * transaction before a `Payment-Receipt`.\n */\nimport { Challenge, type Credential, Method, Receipt } from 'mppx';\nimport { Methods, type Types } from 'mppx/evm';\nimport { charge } from 'mppx/evm/server';\nimport { createPublicClient, getAddress, http, parseAbi } from 'viem';\nimport {\n  type AdapterHealth,\n  CommerceError,\n  type PaymentContext,\n  type PaymentProvider,\n  type PaymentRequirement,\n  type PaymentResult,\n  type PaymentSettlementContext,\n  type PaymentVerificationContext,\n  systemClock,\n} from '../../core';\nimport { SETTLE_AFTER_BACKEND_METADATA_KEY } from '../../core/execution/settlement-order';\nimport { parseCanonicalAmount } from '../x402/amount';\nimport { createX402PaymentProvider, DEFAULT_IDS } from '../x402/provider';\nimport { computeReplayKey } from '../x402/replay-key';\nimport {\n  MPP_DEFAULT_NETWORK,\n  MPP_DEFAULT_PAYMENT_FLOW,\n  MPP_PROFILE,\n  MPP_SPEC_DRAFTS,\n} from './constants';\nimport {\n  bindingMismatch,\n  decodeCredential,\n  sameAddress,\n  toX402Submission,\n  verificationReason,\n} from './credential';\nimport { MPP_DESCRIPTOR } from './descriptor';\nimport {\n  configInvalid,\n  type MppChallengeOptions,\n  type MppProviderOptions,\n  type NonceUsedReader,\n  validateOptions,\n} from './options';\nimport { CONTENT_DIGEST_METADATA_KEY } from './transport';\n\nconst DEFAULT_CHALLENGE_TTL_SECONDS = 300;\n\n// The x402 SDK's verify reason for an EIP-3009 nonce already spent on chain\nconst NONCE_ALREADY_USED = 'invalid_exact_evm_nonce_already_used';\n\nconst AUTHORIZATION_STATE_ABI = parseAbi([\n  'function authorizationState(address authorizer, bytes32 nonce) view returns (bool)',\n]);\n\nconst NONCE_READ_TIMEOUT_MS = 5_000;\n\nexport function createMppPaymentProvider(options: MppProviderOptions): PaymentProvider {\n  const { rpcUrl, facilitator, allowMainnet, allowUnauthenticatedFacilitator, logger, ...rest } =\n    options;\n  // Checked first so a bad MPP option is reported as one, not as an x402 error\n  validateOptions(rest);\n  // Built from the same terms, and never registered as a rail, so an MPP-only\n  // deployment needs no x402 configuration\n  const settlement = createX402PaymentProvider({\n    network: options.network ?? MPP_DEFAULT_NETWORK,\n    rpcUrl,\n    asset: options.asset,\n    assetName: options.assetName,\n    assetVersion: options.assetVersion,\n    assetDecimals: MPP_PROFILE.assetDecimals,\n    payTo: options.recipient,\n    facilitator,\n    ...(allowMainnet !== undefined ? { allowMainnet } : {}),\n    ...(allowUnauthenticatedFacilitator !== undefined ? { allowUnauthenticatedFacilitator } : {}),\n    ...(logger !== undefined ? { logger } : {}),\n    ...(options.clock !== undefined ? { clock: options.clock } : {}),\n  });\n  // One attempt: the read only names the reason for a refusal already decided\n  const chain = createPublicClient({\n    transport: http(rpcUrl, { timeout: NONCE_READ_TIMEOUT_MS, retryCount: 0 }),\n  });\n  const nonceUsed: NonceUsedReader = (payer, nonce) =>\n    chain.readContract({\n      address: options.asset,\n      abi: AUTHORIZATION_STATE_ABI,\n      functionName: 'authorizationState',\n      args: [payer, nonce],\n    });\n  return createMppProviderWithSettlement(rest, settlement, nonceUsed);\n}\n\n/**\n * Internal seam: tests inject a settlement provider and the nonce reader. Not\n * exported from the `./mpp` entry.\n */\nexport function createMppProviderWithSettlement(\n  options: MppChallengeOptions,\n  settlement: PaymentProvider,\n  nonceUsed?: NonceUsedReader,\n): PaymentProvider {\n  validateOptions(options);\n  if (settlement.name !== 'x402') {\n    throw configInvalid('MPP settlement must be an x402 payment provider');\n  }\n  const network = options.network ?? MPP_DEFAULT_NETWORK;\n  const chainId = Number(network.split(':')[1]);\n  const clock = options.clock ?? systemClock;\n  const ttlSeconds = options.challengeTtlSeconds ?? DEFAULT_CHALLENGE_TTL_SECONDS;\n  const recipient = getAddress(options.recipient);\n  const asset = getAddress(options.asset);\n  const ids = options.ids ?? DEFAULT_IDS;\n  // The settlement provider's terms are fixed at construction, so one passing\n  // check covers every later challenge\n  let settlementTermsChecked = false;\n\n  // charge() requires a callback even though this provider never invokes the\n  // mppx broadcast path. Settlement is delegated to the x402 provider.\n  const method = charge({\n    currency: asset,\n    recipient,\n    chainId,\n    decimals: MPP_PROFILE.assetDecimals,\n    authorization: { name: options.assetName, version: options.assetVersion },\n    settle: async () => {\n      throw new CommerceError('INTERNAL_ERROR', 'MPP direct broadcast is disabled');\n    },\n  });\n\n  function rejected(requirement: PaymentRequirement, reason: string): PaymentResult {\n    return {\n      status: 'rejected',\n      provider: 'mpp',\n      amount: requirement.amount,\n      currency: requirement.currency,\n      network,\n      asset,\n      rejectionReason: reason,\n    };\n  }\n\n  async function createRequirement(context: PaymentContext): Promise<PaymentRequirement> {\n    if (context.currency !== MPP_PROFILE.assetSymbol) {\n      throw configInvalid(\n        `Resource \"${context.resource.id}\" is priced in ${context.currency}, but MPP charges ${MPP_PROFILE.assetSymbol}`,\n      );\n    }\n    // Strict parse first: mppx converts with viem's parseUnits, which rounds\n    // excess precision instead of refusing it\n    if (parseCanonicalAmount(context.amount, MPP_PROFILE.assetDecimals) <= 0n) {\n      throw new CommerceError('PAYMENT_INVALID', `Amount \"${context.amount}\" must be above zero`, {\n        details: { amount: context.amount },\n      });\n    }\n    // Reject a mismatched settlement requirement before the buyer signs\n    if (!settlementTermsChecked) {\n      await settlementRequirement(context);\n      settlementTermsChecked = true;\n    }\n    const paymentFlow =\n      options.resourcePaymentFlows?.[context.resource.id] ??\n      options.paymentFlow ??\n      MPP_DEFAULT_PAYMENT_FLOW;\n    // mppx signs `validBefore` at this expiry. Under `authorization`, the\n    // backend must finish before then for settlement to proceed.\n    const expires = new Date(clock.now().getTime() + ttlSeconds * 1000);\n    const digest = context.metadata?.[CONTENT_DIGEST_METADATA_KEY];\n    const challenge = Challenge.fromMethod(Methods.charge, {\n      secretKey: options.challengeSecret,\n      realm: options.realm,\n      expires,\n      // Present for an HTTP request with a body. MCP and A2A carry the proof\n      // in the body itself, so their challenges bind none.\n      ...(typeof digest === 'string' ? { digest } : {}),\n      // Bound by the challenge HMAC, so a challenge for one resource cannot pay\n      // for another at the same price\n      meta: { resource: context.resource.id },\n      request: {\n        amount: context.amount,\n        currency: asset,\n        recipient,\n        chainId,\n        decimals: MPP_PROFILE.assetDecimals,\n        credentialTypes: [MPP_PROFILE.credentialType],\n      },\n    });\n    return {\n      id: ids.next('payreq'),\n      requestId: context.requestId,\n      resourceId: context.resource.id,\n      provider: 'mpp',\n      amount: context.amount,\n      currency: context.currency,\n      destination: recipient,\n      network,\n      asset,\n      expiresAt: expires.toISOString(),\n      challenge: {\n        provider: 'mpp',\n        version: MPP_SPEC_DRAFTS.core,\n        accepts: [challenge],\n        // Build both carrier forms here because the HTTP route and MCP\n        // adapter cannot import mppx: a header value for HTTP and challenge\n        // objects for MCP\n        envelope: { wwwAuthenticate: Challenge.serialize(challenge), challenges: [challenge] },\n      },\n      metadata: { [SETTLE_AFTER_BACKEND_METADATA_KEY]: paymentFlow === 'authorization' },\n    };\n  }\n\n  async function verify(context: PaymentVerificationContext): Promise<PaymentResult> {\n    const { requirement, resource, submission } = context;\n    if (requirement.provider !== 'mpp' || requirement.challenge.provider !== 'mpp') {\n      return rejected(requirement, 'wrong_provider');\n    }\n    const issued = requirement.challenge.accepts[0] as Challenge.Challenge | undefined;\n    if (!issued) return rejected(requirement, 'missing_challenge');\n\n    let credential: Credential.Credential;\n    try {\n      credential = decodeCredential(submission.payload);\n    } catch {\n      return rejected(requirement, 'malformed_credential');\n    }\n    const echoed = credential.challenge;\n\n    // A valid HMAC means this gateway issued the challenge, not that it was\n    // issued for this resource and price. The binding checks below close that gap.\n    if (!Challenge.verify(echoed, { secretKey: options.challengeSecret })) {\n      return rejected(requirement, 'challenge_not_issued');\n    }\n    const binding = bindingMismatch(echoed, issued, resource.id);\n    if (binding) return rejected(requirement, binding);\n    if (!echoed.expires || new Date(echoed.expires).getTime() <= clock.now().getTime()) {\n      return rejected(requirement, 'challenge_expired');\n    }\n    if ((credential.payload as { type?: unknown } | null)?.type !== MPP_PROFILE.credentialType) {\n      return rejected(requirement, 'unsupported_credential');\n    }\n\n    // Local checks only: signature recovery, nonce == challenge hash, the\n    // validity window and payload terms. With no network call involved, any\n    // failure here is a verdict on the credential, not an outage.\n    let payer: `0x${string}`;\n    try {\n      const validation = await Method.validateCredential([method], credential);\n      payer = getAddress((validation.details as { payer: string }).payer);\n    } catch (error) {\n      return rejected(requirement, verificationReason(error));\n    }\n\n    // validateCredential proved it equals the 32-byte challenge hash\n    const nonce = (credential.payload as Types.AuthorizationPayload).nonce as `0x${string}`;\n    // Match x402's key so the same authorization collides across both rails\n    const replayKey = computeReplayKey({ chainId, asset, from: payer, nonce });\n\n    // The facilitator check runs before the pipeline reserves the replay key,\n    // so an outage throws the x402 provider's retryable error and uses up\n    // nothing, and a refusal is an ordinary rejection\n    const x402Verification = await settlement.verify(\n      await toX402Context(context, credential.payload as Types.AuthorizationPayload),\n    );\n    if (x402Verification.status !== 'verified') {\n      // A spent challenge-hash nonce means the challenge was used. Check\n      // the token when the facilitator reports only a simulation failure;\n      // keep its reason if the token read fails.\n      const reason = x402Verification.rejectionReason;\n      const spent =\n        reason === NONCE_ALREADY_USED ||\n        ((await nonceUsed?.(payer, nonce).catch(() => false)) ?? false);\n      return rejected(\n        requirement,\n        spent ? 'challenge_already_used' : (reason ?? 'settlement_rejected'),\n      );\n    }\n    // A different key would settle an authorization the pipeline did not reserve\n    if (x402Verification.replayKey !== replayKey) {\n      return rejected(requirement, 'settlement_mismatch');\n    }\n\n    return {\n      status: 'verified',\n      provider: 'mpp',\n      payer,\n      payee: recipient,\n      amount: requirement.amount,\n      currency: requirement.currency,\n      network,\n      asset,\n      replayKey,\n    };\n  }\n\n  // The same payment as an x402 requirement and `exact` submission\n  async function toX402Context(\n    context: PaymentVerificationContext,\n    authorization: Types.AuthorizationPayload,\n  ): Promise<PaymentVerificationContext> {\n    const { requestId, requirement, resource } = context;\n    const x402Requirement = await settlementRequirement({\n      requestId,\n      resource,\n      amount: requirement.amount,\n      currency: requirement.currency,\n      requestedAt: clock.nowIso(),\n    });\n    return {\n      requestId,\n      resource,\n      requirement: x402Requirement,\n      submission: toX402Submission(x402Requirement, authorization),\n    };\n  }\n\n  async function settlementRequirement(context: PaymentContext): Promise<PaymentRequirement> {\n    const x402 = await settlement.createRequirement(context);\n    const extra = (x402.challenge.accepts[0]?.['extra'] ?? {}) as Record<string, unknown>;\n    if (\n      x402.network !== network ||\n      !sameAddress(x402.asset, asset) ||\n      !sameAddress(x402.destination, recipient) ||\n      extra['name'] !== options.assetName ||\n      extra['version'] !== options.assetVersion\n    ) {\n      throw configInvalid(\n        'MPP settlement provider must use the same network, asset, EIP-712 domain and recipient',\n      );\n    }\n    return x402;\n  }\n\n  async function settle(context: PaymentSettlementContext): Promise<PaymentResult> {\n    const { requestId, requirement, resource, submission, verification } = context;\n    if (verification.status !== 'verified' || verification.replayKey === undefined) {\n      throw new CommerceError(\n        'PAYMENT_INVALID',\n        'MPP settle() called without a successful verify()',\n      );\n    }\n\n    // verify() already ran the facilitator check, and the facilitator checks\n    // again before broadcasting. A throw may follow a broadcast, so it\n    // propagates and the pipeline marks the payment uncertain.\n    const credential = decodeCredential(submission.payload);\n    const authorization = credential.payload as Types.AuthorizationPayload;\n    const settled = await settlement.settle({\n      ...(await toX402Context({ requestId, requirement, resource, submission }, authorization)),\n      verification: { ...verification, provider: 'x402' },\n    });\n    const result: PaymentResult = {\n      ...settled,\n      provider: 'mpp',\n      amount: requirement.amount,\n      currency: requirement.currency,\n      replayKey: verification.replayKey,\n    };\n    if (settled.status !== 'settled' || settled.externalReference === undefined) return result;\n    // Include the EVM method's `challengeId` and `chainId` in the receipt\n    // sent through the HTTP `Payment-Receipt` header\n    const fields: Receipt.Receipt & { challengeId: string; chainId: number } = {\n      method: MPP_PROFILE.method,\n      reference: settled.externalReference,\n      status: 'success',\n      timestamp: settled.settledAt ?? clock.nowIso(),\n      challengeId: credential.challenge.id,\n      chainId,\n    };\n    const receipt = Receipt.from(fields);\n    return { ...result, metadata: { ...settled.metadata, receipt: Receipt.serialize(receipt) } };\n  }\n\n  function health(): Promise<AdapterHealth> {\n    return settlement.health();\n  }\n\n  return { name: 'mpp', descriptor: MPP_DESCRIPTOR, createRequirement, verify, settle, health };\n}\n\nexport type { MppProviderOptions, NonceUsedReader } from './options';\n"]}
+{"version":3,"sources":["../src/payments/mpp/descriptor.ts","../src/payments/mpp/credential.ts","../src/payments/mpp/options.ts","../src/payments/mpp/provider.ts"],"names":["isAddress","getAddress"],"mappings":";;;;;;;;;;;;;;;AAYO,IAAM,cAAA,GAAoC;AAAA,EAC/C,IAAA,EAAM,KAAA;AAAA,EACN,IAAA,EAAM,SAAA;AAAA,EACN,qBAAA,EAAuB,eAAA;AAAA,EACvB,aAAA,EAAe,kBAAA;AAAA,EACf,YAAA,EAAc;AAAA,IACZ,CAAA,OAAA,EAAU,YAAY,MAAM,CAAA,CAAA;AAAA,IAC5B,CAAA,OAAA,EAAU,YAAY,MAAM,CAAA,CAAA;AAAA,IAC5B,CAAA,WAAA,EAAc,YAAY,cAAc,CAAA,CAAA;AAAA,IACxC,UAAA;AAAA,IACA,GAAG,YAAA,CAAa,GAAA,CAAI,CAAC,OAAA,KAAY,CAAA,QAAA,EAAW,OAAO,CAAA,CAAE,CAAA;AAAA,IACrD,CAAA,MAAA,EAAS,YAAY,WAAW,CAAA,CAAA;AAAA,IAChC,sBAAA;AAAA,IACA,oBAAA;AAAA,IACA,cAAA;AAAA,IACA,iBAAA;AAAA;AAAA,IAEA;AAAA,GACF;AAAA;AAAA,EAEA,MAAA,EAAQ,cAAA;AAAA,EACR,WAAA,EAAa;AAAA;AAAA,IAEX,wBAAA;AAAA;AAAA,IAEA,oBAAA;AAAA,IACA,wBAAA;AAAA,IACA,iBAAA;AAAA;AAAA,IAEA,QAAA;AAAA,IACA,qBAAA;AAAA;AAAA,IAEA,cAAA;AAAA,IACA;AAAA;AAEJ;ACtCA,IAAM,oBAAA,GAA+D;AAAA,EACnE,CAAC,6CAA6C,aAAa,CAAA;AAAA,EAC3D,CAAC,wCAAwC,mBAAmB,CAAA;AAAA,EAC5D,CAAC,sCAAsC,6BAA6B,CAAA;AAAA,EACpE,CAAC,iCAAiC,uBAAuB,CAAA;AAAA,EACzD,CAAC,qCAAqC,iBAAiB,CAAA;AAAA,EACvD,CAAC,qCAAqC,cAAc,CAAA;AAAA,EACpD,CAAC,wCAAwC,iBAAiB;AAC5D,CAAA;AAEO,SAAS,mBAAmB,KAAA,EAAwB;AACzD,EAAA,IAAI,KAAA,YAAiB,MAAA,CAAO,mBAAA,EAAqB,OAAO,mBAAA;AACxD,EAAA,IAAI,KAAA,YAAiB,MAAA,CAAO,mBAAA,EAAqB,OAAO,iBAAA;AACxD,EAAA,IAAI,KAAA,YAAiB,MAAA,CAAO,qBAAA,EAAuB,OAAO,mBAAA;AAC1D,EAAA,IAAI,KAAA,YAAiB,OAAO,uBAAA,EAAyB;AACnD,IAAA,MAAM,KAAA,GAAQ,oBAAA,CAAqB,IAAA,CAAK,CAAC,CAAC,IAAI,CAAA,KAAM,KAAA,CAAM,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAC,CAAA;AAChF,IAAA,IAAI,KAAA,EAAO,OAAO,KAAA,CAAM,CAAC,CAAA;AAAA,EAC3B;AACA,EAAA,OAAO,uBAAA;AACT;AAIO,SAAS,iBAAiB,OAAA,EAAwC;AACvE,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,SAAA,EAAU,CAAE,UAAA,CAAW,GAAG,CAAA,GACjD,UAAA,CAAW,SAAA,CAAU,IAAA,CAAK,KAAA,CAAM,OAAO,CAA0B,CAAA,GACjE,OAAA;AACJ,EAAA,OAAO,UAAA,CAAW,YAAY,UAAU,CAAA;AAC1C;AAMO,SAAS,eAAA,CACd,MAAA,EACA,MAAA,EACA,UAAA,EACoB;AACpB,EAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,CAAO,KAAA,EAAO,OAAO,aAAA;AAC1C,EAAA,IAAI,OAAO,MAAA,KAAW,MAAA,CAAO,UAAU,MAAA,CAAO,MAAA,KAAW,OAAO,MAAA,EAAQ;AACtE,IAAA,OAAO,oBAAA;AAAA,EACT;AAGA,EAAA,IAAI,MAAA,CAAO,WAAW,cAAA,CAAe,SAAA,CAAU,EAAE,QAAA,EAAU,UAAA,EAAY,CAAA,EAAG;AACxE,IAAA,OAAO,gBAAA;AAAA,EACT;AAIA,EAAA,IAAI,OAAO,MAAA,KAAW,MAAA,IAAa,MAAA,CAAO,MAAA,KAAW,OAAO,MAAA,EAAQ;AAClE,IAAA,OAAO,sBAAA;AAAA,EACT;AACA,EAAA,MAAM,MAAM,MAAA,CAAO,OAAA;AACnB,EAAA,MAAM,OAAO,MAAA,CAAO,OAAA;AACpB,EAAA,IAAI,GAAA,CAAI,MAAA,KAAW,IAAA,CAAK,MAAA,EAAQ,OAAO,cAAA;AACvC,EAAA,IAAI,CAAC,WAAA,CAAY,GAAA,CAAI,WAAW,IAAA,CAAK,SAAS,GAAG,OAAO,iBAAA;AACxD,EAAA,IAAI,IAAI,aAAA,EAAe,OAAA,KAAY,IAAA,CAAK,aAAA,EAAe,SAAS,OAAO,eAAA;AACvE,EAAA,IAAI,CAAC,WAAA,CAAY,GAAA,CAAI,UAAU,IAAA,CAAK,QAAQ,GAAG,OAAO,aAAA;AACtD,EAAA,IAAI,UAAU,GAAA,CAAI,aAAa,MAAM,SAAA,CAAU,IAAA,CAAK,aAAa,CAAA,EAAG;AAClE,IAAA,OAAO,wBAAA;AAAA,EACT;AACA,EAAA,IAAI,UAAU,GAAG,CAAA,KAAM,SAAA,CAAU,IAAI,GAAG,OAAO,aAAA;AAC/C,EAAA,OAAO,MAAA;AACT;AAGO,SAAS,gBAAA,CACd,iBACA,aAAA,EACmB;AACnB,EAAA,MAAM,EAAE,WAAW,IAAA,EAAM,EAAA,EAAI,OAAO,UAAA,EAAY,WAAA,EAAa,OAAM,GAAI,aAAA;AACvE,EAAA,MAAM,OAAA,GAAU;AAAA,IACd,WAAA,EAAa,CAAA;AAAA,IACb,QAAA,EAAU,eAAA,CAAgB,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAA;AAAA,IAC7C,OAAA,EAAS,EAAE,SAAA,EAAW,aAAA,EAAe,EAAE,IAAA,EAAM,EAAA,EAAI,KAAA,EAAO,UAAA,EAAY,WAAA,EAAa,KAAA,EAAM;AAAE,GAC3F;AACA,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA,EAAE;AAC5F;AAWA,SAAS,UAAU,KAAA,EAAmC;AACpD,EAAA,OAAO,KAAA,KAAU,MAAA,GAAY,EAAA,GAAK,cAAA,CAAe,UAAU,KAA+B,CAAA;AAC5F;AAEO,SAAS,WAAA,CAAY,GAAuB,CAAA,EAAgC;AACjF,EAAA,OAAO,CAAA,KAAM,MAAA,IAAa,CAAA,KAAM,MAAA,IAAa,UAAU,CAAC,CAAA,IAAK,SAAA,CAAU,CAAC,IACpE,UAAA,CAAW,CAAC,CAAA,KAAM,UAAA,CAAW,CAAC,CAAA,GAC9B,KAAA;AACN;ACtDO,SAAS,cAAc,OAAA,EAAgC;AAC5D,EAAA,OAAO,IAAI,aAAA,CAAc,gBAAA,EAAkB,OAAO,CAAA;AACpD;AAOO,SAAS,gBAAgB,OAAA,EAAoC;AAClE,EAAA,IAAI,CAACA,SAAAA,CAAU,OAAA,CAAQ,SAAS,CAAA,EAAG,MAAM,cAAc,qCAAqC,CAAA;AAC5F,EAAA,IAAI,CAACA,SAAAA,CAAU,OAAA,CAAQ,KAAK,CAAA,EAAG,MAAM,cAAc,iCAAiC,CAAA;AACpF,EAAA,IAAI,QAAQ,SAAA,CAAU,MAAA,KAAW,KAAK,OAAA,CAAQ,YAAA,CAAa,WAAW,CAAA,EAAG;AACvE,IAAA,MAAM,cAAc,qDAAqD,CAAA;AAAA,EAC3E;AAGA,EAAA,IAAI,OAAA,CAAQ,MAAM,MAAA,KAAW,CAAA,IAAK,SAAS,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC9D,IAAA,MAAM,cAAc,kDAAkD,CAAA;AAAA,EACxE;AACA,EAAA,IAAI,OAAA,CAAQ,eAAA,CAAgB,MAAA,GAAS,+BAAA,EAAiC;AACpE,IAAA,MAAM,aAAA;AAAA,MACJ,kDAAkD,+BAA+B,CAAA;AAAA,KACnF;AAAA,EACF;AACA,EAAA,MAAM,MAAM,OAAA,CAAQ,mBAAA;AACpB,EAAA,IAAI,GAAA,KAAQ,WAAc,CAAC,MAAA,CAAO,UAAU,GAAG,CAAA,IAAK,OAAO,CAAA,CAAA,EAAI;AAC7D,IAAA,MAAM,cAAc,8DAA8D,CAAA;AAAA,EACpF;AACA,EAAA,IAAI,QAAQ,OAAA,KAAY,MAAA,IAAa,CAAC,YAAA,CAAa,OAAA,CAAQ,OAAO,CAAA,EAAG;AACnE,IAAA,MAAM,cAAc,CAAA,2BAAA,EAA8B,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AAAA,EAC7E;AACF;;;AC7BA,IAAM,6BAAA,GAAgC,GAAA;AAGtC,IAAM,kBAAA,GAAqB,sCAAA;AAE3B,IAAM,0BAA0B,QAAA,CAAS;AAAA,EACvC;AACF,CAAC,CAAA;AAED,IAAM,qBAAA,GAAwB,GAAA;AAEvB,SAAS,yBAAyB,OAAA,EAA8C;AACrF,EAAA,MAAM,EAAE,QAAQ,WAAA,EAAa,YAAA,EAAc,iCAAiC,MAAA,EAAQ,GAAG,MAAK,GAC1F,OAAA;AAEF,EAAA,eAAA,CAAgB,IAAI,CAAA;AAGpB,EAAA,MAAM,aAAa,yBAAA,CAA0B;AAAA,IAC3C,OAAA,EAAS,QAAQ,OAAA,IAAW,mBAAA;AAAA,IAC5B,MAAA;AAAA,IACA,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,cAAc,OAAA,CAAQ,YAAA;AAAA,IACtB,eAAe,WAAA,CAAY,aAAA;AAAA,IAC3B,OAAO,OAAA,CAAQ,SAAA;AAAA,IACf,WAAA;AAAA,IACA,GAAI,YAAA,KAAiB,MAAA,GAAY,EAAE,YAAA,KAAiB,EAAC;AAAA,IACrD,GAAI,+BAAA,KAAoC,MAAA,GAAY,EAAE,+BAAA,KAAoC,EAAC;AAAA,IAC3F,GAAI,MAAA,KAAW,MAAA,GAAY,EAAE,MAAA,KAAW,EAAC;AAAA,IACzC,GAAI,QAAQ,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM,GAAI;AAAC,GAC/D,CAAA;AAED,EAAA,MAAM,QAAQ,kBAAA,CAAmB;AAAA,IAC/B,SAAA,EAAW,KAAK,MAAA,EAAQ,EAAE,SAAS,qBAAA,EAAuB,UAAA,EAAY,GAAG;AAAA,GAC1E,CAAA;AACD,EAAA,MAAM,SAAA,GAA6B,CAAC,KAAA,EAAO,KAAA,KACzC,MAAM,YAAA,CAAa;AAAA,IACjB,SAAS,OAAA,CAAQ,KAAA;AAAA,IACjB,GAAA,EAAK,uBAAA;AAAA,IACL,YAAA,EAAc,oBAAA;AAAA,IACd,IAAA,EAAM,CAAC,KAAA,EAAO,KAAK;AAAA,GACpB,CAAA;AACH,EAAA,OAAO,+BAAA,CAAgC,IAAA,EAAM,UAAA,EAAY,SAAS,CAAA;AACpE;AAMO,SAAS,+BAAA,CACd,OAAA,EACA,UAAA,EACA,SAAA,EACiB;AACjB,EAAA,eAAA,CAAgB,OAAO,CAAA;AACvB,EAAA,IAAI,UAAA,CAAW,SAAS,MAAA,EAAQ;AAC9B,IAAA,MAAM,cAAc,iDAAiD,CAAA;AAAA,EACvE;AACA,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,IAAW,mBAAA;AACnC,EAAA,MAAM,UAAU,MAAA,CAAO,OAAA,CAAQ,MAAM,GAAG,CAAA,CAAE,CAAC,CAAC,CAAA;AAC5C,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,WAAA;AAC/B,EAAA,MAAM,UAAA,GAAa,QAAQ,mBAAA,IAAuB,6BAAA;AAClD,EAAA,MAAM,SAAA,GAAYC,UAAAA,CAAW,OAAA,CAAQ,SAAS,CAAA;AAC9C,EAAA,MAAM,KAAA,GAAQA,UAAAA,CAAW,OAAA,CAAQ,KAAK,CAAA;AACtC,EAAA,MAAM,GAAA,GAAM,QAAQ,GAAA,IAAO,WAAA;AAG3B,EAAA,IAAI,sBAAA,GAAyB,KAAA;AAI7B,EAAA,MAAM,SAAS,MAAA,CAAO;AAAA,IACpB,QAAA,EAAU,KAAA;AAAA,IACV,SAAA;AAAA,IACA,OAAA;AAAA,IACA,UAAU,WAAA,CAAY,aAAA;AAAA,IACtB,eAAe,EAAE,IAAA,EAAM,QAAQ,SAAA,EAAW,OAAA,EAAS,QAAQ,YAAA,EAAa;AAAA,IACxE,QAAQ,YAAY;AAClB,MAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,kCAAkC,CAAA;AAAA,IAC9E;AAAA,GACD,CAAA;AAED,EAAA,SAAS,QAAA,CAAS,aAAiC,MAAA,EAA+B;AAChF,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,UAAA;AAAA,MACR,QAAA,EAAU,KAAA;AAAA,MACV,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,UAAU,WAAA,CAAY,QAAA;AAAA,MACtB,OAAA;AAAA,MACA,KAAA;AAAA,MACA,eAAA,EAAiB;AAAA,KACnB;AAAA,EACF;AAEA,EAAA,eAAe,kBAAkB,OAAA,EAAsD;AACrF,IAAA,IAAI,OAAA,CAAQ,QAAA,KAAa,WAAA,CAAY,WAAA,EAAa;AAChD,MAAA,MAAM,aAAA;AAAA,QACJ,CAAA,UAAA,EAAa,QAAQ,QAAA,CAAS,EAAE,kBAAkB,OAAA,CAAQ,QAAQ,CAAA,kBAAA,EAAqB,WAAA,CAAY,WAAW,CAAA;AAAA,OAChH;AAAA,IACF;AAGA,IAAA,IAAI,qBAAqB,OAAA,CAAQ,MAAA,EAAQ,WAAA,CAAY,aAAa,KAAK,EAAA,EAAI;AACzE,MAAA,MAAM,IAAI,aAAA,CAAc,iBAAA,EAAmB,CAAA,QAAA,EAAW,OAAA,CAAQ,MAAM,CAAA,oBAAA,CAAA,EAAwB;AAAA,QAC1F,OAAA,EAAS,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA;AAAO,OACnC,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,CAAC,sBAAA,EAAwB;AAC3B,MAAA,MAAM,sBAAsB,OAAO,CAAA;AACnC,MAAA,sBAAA,GAAyB,IAAA;AAAA,IAC3B;AACA,IAAA,MAAM,WAAA,GACJ,QAAQ,oBAAA,GAAuB,OAAA,CAAQ,SAAS,EAAE,CAAA,IAClD,QAAQ,WAAA,IACR,wBAAA;AAGF,IAAA,MAAM,OAAA,GAAU,IAAI,IAAA,CAAK,KAAA,CAAM,KAAI,CAAE,OAAA,EAAQ,GAAI,UAAA,GAAa,GAAI,CAAA;AAClE,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,QAAA,GAAW,2BAA2B,CAAA;AAC7D,IAAA,MAAM,SAAA,GAAY,SAAA,CAAU,UAAA,CAAW,OAAA,CAAQ,MAAA,EAAQ;AAAA,MACrD,WAAW,OAAA,CAAQ,eAAA;AAAA,MACnB,OAAO,OAAA,CAAQ,KAAA;AAAA,MACf,OAAA;AAAA;AAAA;AAAA,MAGA,GAAI,OAAO,MAAA,KAAW,WAAW,EAAE,MAAA,KAAW,EAAC;AAAA;AAAA;AAAA,MAG/C,IAAA,EAAM,EAAE,QAAA,EAAU,OAAA,CAAQ,SAAS,EAAA,EAAG;AAAA,MACtC,OAAA,EAAS;AAAA,QACP,QAAQ,OAAA,CAAQ,MAAA;AAAA,QAChB,QAAA,EAAU,KAAA;AAAA,QACV,SAAA;AAAA,QACA,OAAA;AAAA,QACA,UAAU,WAAA,CAAY,aAAA;AAAA,QACtB,eAAA,EAAiB,CAAC,WAAA,CAAY,cAAc,CAAA;AAAA;AAAA,QAE5C,cAAA,EAAgB;AAAA;AAClB,KACD,CAAA;AACD,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,GAAA,CAAI,IAAA,CAAK,QAAQ,CAAA;AAAA,MACrB,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,UAAA,EAAY,QAAQ,QAAA,CAAS,EAAA;AAAA,MAC7B,QAAA,EAAU,KAAA;AAAA,MACV,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,UAAU,OAAA,CAAQ,QAAA;AAAA,MAClB,WAAA,EAAa,SAAA;AAAA,MACb,OAAA;AAAA,MACA,KAAA;AAAA,MACA,SAAA,EAAW,QAAQ,WAAA,EAAY;AAAA,MAC/B,SAAA,EAAW;AAAA,QACT,QAAA,EAAU,KAAA;AAAA,QACV,SAAS,eAAA,CAAgB,IAAA;AAAA,QACzB,OAAA,EAAS,CAAC,SAAS,CAAA;AAAA;AAAA;AAAA;AAAA,QAInB,QAAA,EAAU,EAAE,eAAA,EAAiB,SAAA,CAAU,SAAA,CAAU,SAAS,CAAA,EAAG,UAAA,EAAY,CAAC,SAAS,CAAA;AAAE,OACvF;AAAA,MACA,UAAU,EAAE,CAAC,iCAAiC,GAAG,gBAAgB,eAAA;AAAgB,KACnF;AAAA,EACF;AAEA,EAAA,eAAe,OAAO,OAAA,EAA6D;AACjF,IAAA,MAAM,EAAE,WAAA,EAAa,QAAA,EAAU,UAAA,EAAW,GAAI,OAAA;AAC9C,IAAA,IAAI,YAAY,QAAA,KAAa,KAAA,IAAS,WAAA,CAAY,SAAA,CAAU,aAAa,KAAA,EAAO;AAC9E,MAAA,OAAO,QAAA,CAAS,aAAa,gBAAgB,CAAA;AAAA,IAC/C;AACA,IAAA,MAAM,MAAA,GAAS,WAAA,CAAY,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAA;AAC9C,IAAA,IAAI,CAAC,MAAA,EAAQ,OAAO,QAAA,CAAS,aAAa,mBAAmB,CAAA;AAE7D,IAAA,IAAI,UAAA;AACJ,IAAA,IAAI;AACF,MAAA,UAAA,GAAa,gBAAA,CAAiB,WAAW,OAAO,CAAA;AAAA,IAClD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,QAAA,CAAS,aAAa,sBAAsB,CAAA;AAAA,IACrD;AACA,IAAA,MAAM,SAAS,UAAA,CAAW,SAAA;AAI1B,IAAA,IAAI,CAAC,UAAU,MAAA,CAAO,MAAA,EAAQ,EAAE,SAAA,EAAW,OAAA,CAAQ,eAAA,EAAiB,CAAA,EAAG;AACrE,MAAA,OAAO,QAAA,CAAS,aAAa,sBAAsB,CAAA;AAAA,IACrD;AACA,IAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,MAAA,EAAQ,MAAA,EAAQ,SAAS,EAAE,CAAA;AAC3D,IAAA,IAAI,OAAA,EAAS,OAAO,QAAA,CAAS,WAAA,EAAa,OAAO,CAAA;AACjD,IAAA,IAAI,CAAC,MAAA,CAAO,OAAA,IAAW,IAAI,KAAK,MAAA,CAAO,OAAO,CAAA,CAAE,OAAA,EAAQ,IAAK,KAAA,CAAM,GAAA,EAAI,CAAE,SAAQ,EAAG;AAClF,MAAA,OAAO,QAAA,CAAS,aAAa,mBAAmB,CAAA;AAAA,IAClD;AACA,IAAA,IAAK,UAAA,CAAW,OAAA,EAAuC,IAAA,KAAS,WAAA,CAAY,cAAA,EAAgB;AAC1F,MAAA,OAAO,QAAA,CAAS,aAAa,wBAAwB,CAAA;AAAA,IACvD;AAKA,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAM,aAAa,MAAM,MAAA,CAAO,mBAAmB,CAAC,MAAM,GAAG,UAAU,CAAA;AACvE,MAAA,KAAA,GAAQA,UAAAA,CAAY,UAAA,CAAW,OAAA,CAA8B,KAAK,CAAA;AAAA,IACpE,SAAS,KAAA,EAAO;AACd,MAAA,OAAO,QAAA,CAAS,WAAA,EAAa,kBAAA,CAAmB,KAAK,CAAC,CAAA;AAAA,IACxD;AAGA,IAAA,MAAM,KAAA,GAAS,WAAW,OAAA,CAAuC,KAAA;AAEjE,IAAA,MAAM,SAAA,GAAY,iBAAiB,EAAE,OAAA,EAAS,OAAO,IAAA,EAAM,KAAA,EAAO,OAAO,CAAA;AAKzE,IAAA,MAAM,gBAAA,GAAmB,MAAM,UAAA,CAAW,MAAA;AAAA,MACxC,MAAM,aAAA,CAAc,OAAA,EAAS,UAAA,CAAW,OAAqC;AAAA,KAC/E;AACA,IAAA,IAAI,gBAAA,CAAiB,WAAW,UAAA,EAAY;AAI1C,MAAA,MAAM,SAAS,gBAAA,CAAiB,eAAA;AAChC,MAAA,MAAM,KAAA,GACJ,MAAA,KAAW,kBAAA,KACT,MAAM,SAAA,GAAY,KAAA,EAAO,KAAK,CAAA,CAAE,KAAA,CAAM,MAAM,KAAK,CAAA,IAAM,KAAA,CAAA;AAC3D,MAAA,OAAO,QAAA;AAAA,QACL,WAAA;AAAA,QACA,KAAA,GAAQ,2BAA4B,MAAA,IAAU;AAAA,OAChD;AAAA,IACF;AAEA,IAAA,IAAI,gBAAA,CAAiB,cAAc,SAAA,EAAW;AAC5C,MAAA,OAAO,QAAA,CAAS,aAAa,qBAAqB,CAAA;AAAA,IACpD;AAEA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,UAAA;AAAA,MACR,QAAA,EAAU,KAAA;AAAA,MACV,KAAA;AAAA,MACA,KAAA,EAAO,SAAA;AAAA,MACP,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,UAAU,WAAA,CAAY,QAAA;AAAA,MACtB,OAAA;AAAA,MACA,KAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAGA,EAAA,eAAe,aAAA,CACb,SACA,aAAA,EACqC;AACrC,IAAA,MAAM,EAAE,SAAA,EAAW,WAAA,EAAa,QAAA,EAAS,GAAI,OAAA;AAC7C,IAAA,MAAM,eAAA,GAAkB,MAAM,qBAAA,CAAsB;AAAA,MAClD,SAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,UAAU,WAAA,CAAY,QAAA;AAAA,MACtB,WAAA,EAAa,MAAM,MAAA;AAAO,KAC3B,CAAA;AACD,IAAA,OAAO;AAAA,MACL,SAAA;AAAA,MACA,QAAA;AAAA,MACA,WAAA,EAAa,eAAA;AAAA,MACb,UAAA,EAAY,gBAAA,CAAiB,eAAA,EAAiB,aAAa;AAAA,KAC7D;AAAA,EACF;AAEA,EAAA,eAAe,sBAAsB,OAAA,EAAsD;AACzF,IAAA,MAAM,IAAA,GAAO,MAAM,UAAA,CAAW,iBAAA,CAAkB,OAAO,CAAA;AACvD,IAAA,MAAM,KAAA,GAAS,KAAK,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAA,GAAI,OAAO,KAAK,EAAC;AACxD,IAAA,IACE,IAAA,CAAK,OAAA,KAAY,OAAA,IACjB,CAAC,WAAA,CAAY,KAAK,KAAA,EAAO,KAAK,CAAA,IAC9B,CAAC,WAAA,CAAY,IAAA,CAAK,aAAa,SAAS,CAAA,IACxC,KAAA,CAAM,MAAM,CAAA,KAAM,OAAA,CAAQ,aAC1B,KAAA,CAAM,SAAS,CAAA,KAAM,OAAA,CAAQ,YAAA,EAC7B;AACA,MAAA,MAAM,aAAA;AAAA,QACJ;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,eAAe,OAAO,OAAA,EAA2D;AAC/E,IAAA,MAAM,EAAE,SAAA,EAAW,WAAA,EAAa,QAAA,EAAU,UAAA,EAAY,cAAa,GAAI,OAAA;AACvE,IAAA,IAAI,YAAA,CAAa,MAAA,KAAW,UAAA,IAAc,YAAA,CAAa,cAAc,MAAA,EAAW;AAC9E,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAKA,IAAA,MAAM,UAAA,GAAa,gBAAA,CAAiB,UAAA,CAAW,OAAO,CAAA;AACtD,IAAA,MAAM,gBAAgB,UAAA,CAAW,OAAA;AACjC,IAAA,MAAM,OAAA,GAAU,MAAM,UAAA,CAAW,MAAA,CAAO;AAAA,MACtC,GAAI,MAAM,aAAA,CAAc,EAAE,WAAW,WAAA,EAAa,QAAqB,CAAA,EAAG,aAAa,CAAA;AAAA,MACvF,YAAA,EAAc,EAAE,GAAG,YAAA,EAAc,UAAU,MAAA;AAAO,KACnD,CAAA;AACD,IAAA,MAAM,MAAA,GAAwB;AAAA,MAC5B,GAAG,OAAA;AAAA,MACH,QAAA,EAAU,KAAA;AAAA,MACV,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,UAAU,WAAA,CAAY,QAAA;AAAA,MACtB,WAAW,YAAA,CAAa;AAAA,KAC1B;AACA,IAAA,IAAI,QAAQ,MAAA,KAAW,SAAA,IAAa,OAAA,CAAQ,iBAAA,KAAsB,QAAW,OAAO,MAAA;AAGpF,IAAA,MAAM,MAAA,GAAqE;AAAA,MACzE,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,WAAW,OAAA,CAAQ,iBAAA;AAAA,MACnB,MAAA,EAAQ,SAAA;AAAA,MACR,SAAA,EAAW,OAAA,CAAQ,SAAA,IAAa,KAAA,CAAM,MAAA,EAAO;AAAA,MAC7C,WAAA,EAAa,WAAW,SAAA,CAAU,EAAA;AAAA,MAClC;AAAA,KACF;AACA,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAA;AACnC,IAAA,OAAO,EAAE,GAAG,MAAA,EAAQ,QAAA,EAAU,EAAE,GAAG,OAAA,CAAQ,QAAA,EAAU,OAAA,EAAS,OAAA,CAAQ,SAAA,CAAU,OAAO,GAAE,EAAE;AAAA,EAC7F;AAEA,EAAA,SAAS,MAAA,GAAiC;AACxC,IAAA,OAAO,WAAW,MAAA,EAAO;AAAA,EAC3B;AAEA,EAAA,OAAO,EAAE,MAAM,KAAA,EAAO,UAAA,EAAY,gBAAgB,iBAAA,EAAmB,MAAA,EAAQ,QAAQ,MAAA,EAAO;AAC9F","file":"mpp.js","sourcesContent":["/**\n * Describes the MPP profile and its unsupported variants.\n *\n * The protocol name alone cannot identify a compatible intent, method and\n * extension set, so the descriptor lists both the target and its gaps.\n *\n * Importing the descriptor does not load `mppx`.\n */\nimport type { AdapterDescriptor } from '../../core/public-types';\nimport { PACKAGE_VERSION } from '../../version';\nimport { MPP_NETWORKS, MPP_PROFILE, MPP_SUPPORTED_SPEC } from './constants';\n\nexport const MPP_DESCRIPTOR: AdapterDescriptor = {\n  name: 'mpp',\n  kind: 'payment',\n  implementationVersion: PACKAGE_VERSION,\n  supportedSpec: MPP_SUPPORTED_SPEC,\n  capabilities: [\n    `intent=${MPP_PROFILE.intent}`,\n    `method=${MPP_PROFILE.method}`,\n    `credential=${MPP_PROFILE.credentialType}`,\n    'eip-3009',\n    ...MPP_NETWORKS.map((network) => `network=${network}`),\n    `asset=${MPP_PROFILE.assetSymbol}`,\n    'verify-before-settle',\n    'authorization-flow',\n    'upfront-flow',\n    'payment-receipt',\n    // HTTP request bodies only; MCP and A2A carry the proof in the body\n    'challenge-digest-binding',\n  ],\n  // The pinned specs are drafts and mppx is pre-1.0; the wire format may change\n  status: 'experimental',\n  unsupported: [\n    // Name other methods as a class instead of maintaining a second list\n    'methods other than evm',\n    // This profile supports only the EIP-3009 `authorization` credential\n    'credential=permit2',\n    'credential=transaction',\n    'credential=hash',\n    // The draft allows splits only with permit2 credentials\n    'splits',\n    'intent=subscription',\n    // A separate EVM draft, not an option of charge\n    'evm sessions',\n    'discovery extension',\n  ],\n};\n","// Reading an MPP credential: its decoding, its binding to the challenge, and the x402 proof it carries\nimport { type Challenge, Credential, Errors, PaymentRequest } from 'mppx';\nimport type { Types } from 'mppx/evm';\nimport { getAddress, isAddress } from 'viem';\nimport type { PaymentRequirement, PaymentSubmission } from '../../core';\n\n// mppx reports a verification failure only as message text. The pinned\n// release's wording maps to stable reasons, and the tests cover every entry;\n// unmapped text becomes `authorization_invalid`.\nconst VERIFICATION_REASONS: readonly (readonly [string, string])[] = [\n  ['EVM authorization challenge hash mismatch', 'wrong_nonce'],\n  ['EVM authorization signature mismatch', 'invalid_signature'],\n  ['EVM authorization is not valid yet', 'authorization_not_yet_valid'],\n  ['EVM authorization has expired', 'authorization_expired'],\n  ['EVM authorization source mismatch', 'source_mismatch'],\n  ['EVM authorization amount mismatch', 'wrong_amount'],\n  ['EVM authorization recipient mismatch', 'wrong_recipient'],\n];\n\nexport function verificationReason(error: unknown): string {\n  if (error instanceof Errors.PaymentExpiredError) return 'challenge_expired';\n  if (error instanceof Errors.InvalidPayloadError) return 'invalid_payload';\n  if (error instanceof Errors.InvalidChallengeError) return 'invalid_challenge';\n  if (error instanceof Errors.VerificationFailedError) {\n    const match = VERIFICATION_REASONS.find(([text]) => error.message.includes(text));\n    if (match) return match[1];\n  }\n  return 'authorization_invalid';\n}\n\n// Accept the HTTP `Authorization: Payment ...` value or a JSON credential\n// from MCP `_meta`. Serialize the object for mppx deserialization\nexport function decodeCredential(payload: string): Credential.Credential {\n  const serialized = payload.trimStart().startsWith('{')\n    ? Credential.serialize(JSON.parse(payload) as Credential.Credential)\n    : payload;\n  return Credential.deserialize(serialized);\n}\n\n// Compares the echoed challenge with the one issued for this request. Both\n// carry a valid HMAC by now, so any difference means the credential answers a\n// challenge issued for other terms. The final comparison catches a difference\n// in any request field the named checks do not cover.\nexport function bindingMismatch(\n  echoed: Challenge.Challenge,\n  issued: Challenge.Challenge,\n  resourceId: string,\n): string | undefined {\n  if (echoed.realm !== issued.realm) return 'wrong_realm';\n  if (echoed.method !== issued.method || echoed.intent !== issued.intent) {\n    return 'unsupported_method';\n  }\n  // Only the encoded `opaque` survives the credential round trip, not `meta`,\n  // so compare it with the encoding of this resource's binding\n  if (echoed.opaque !== PaymentRequest.serialize({ resource: resourceId })) {\n    return 'wrong_resource';\n  }\n  // `issued` was built for the request carrying this credential, so a\n  // different body, or none, fails here. A challenge without a digest binds\n  // no body, as the core draft reads it.\n  if (echoed.digest !== undefined && echoed.digest !== issued.digest) {\n    return 'body_digest_mismatch';\n  }\n  const got = echoed.request as ChargeRequest;\n  const want = issued.request as ChargeRequest;\n  if (got.amount !== want.amount) return 'wrong_amount';\n  if (!sameAddress(got.recipient, want.recipient)) return 'wrong_recipient';\n  if (got.methodDetails?.chainId !== want.methodDetails?.chainId) return 'wrong_network';\n  if (!sameAddress(got.currency, want.currency)) return 'wrong_asset';\n  if (canonical(got.methodDetails) !== canonical(want.methodDetails)) {\n    return 'unsupported_credential';\n  }\n  if (canonical(got) !== canonical(want)) return 'wrong_terms';\n  return undefined;\n}\n\n// Rewrap the MPP authorization as the x402 `exact` payload expected by settlement\nexport function toX402Submission(\n  x402Requirement: PaymentRequirement,\n  authorization: Types.AuthorizationPayload,\n): PaymentSubmission {\n  const { signature, from, to, value, validAfter, validBefore, nonce } = authorization;\n  const payment = {\n    x402Version: 2,\n    accepted: x402Requirement.challenge.accepts[0],\n    payload: { signature, authorization: { from, to, value, validAfter, validBefore, nonce } },\n  };\n  return { method: 'x402', payload: Buffer.from(JSON.stringify(payment)).toString('base64') };\n}\n\ninterface ChargeRequest {\n  readonly amount?: string;\n  readonly currency?: string;\n  readonly recipient?: string;\n  readonly methodDetails?: { readonly chainId?: number };\n}\n\n// The encoding mppx binds into the challenge HMAC, so key order cannot\n// produce a false mismatch\nfunction canonical(value: object | undefined): string {\n  return value === undefined ? '' : PaymentRequest.serialize(value as PaymentRequest.Request);\n}\n\nexport function sameAddress(a: string | undefined, b: string | undefined): boolean {\n  return a !== undefined && b !== undefined && isAddress(a) && isAddress(b)\n    ? getAddress(a) === getAddress(b)\n    : false;\n}\n","// The MPP provider's options, checked once at construction\nimport { isAddress } from 'viem';\nimport { type Clock, CommerceError, type IdGenerator, type Logger } from '../../core';\nimport type { X402FacilitatorConfig } from '../x402/guardrails';\nimport type { X402PaymentFlow } from '../x402/payment-flow';\nimport { isMppNetwork, MPP_MIN_CHALLENGE_SECRET_LENGTH, MPP_NETWORKS } from './constants';\n\n/** Whether the token contract has recorded `nonce` as used by `payer` */\nexport type NonceUsedReader = (payer: `0x${string}`, nonce: `0x${string}`) => Promise<boolean>;\n\nexport interface MppProviderOptions {\n  /** Merchant-controlled settlement destination. Never gateway-owned */\n  readonly recipient: `0x${string}`;\n  /** EIP-3009 token the charge is paid in */\n  readonly asset: `0x${string}`;\n  /** EIP-712 domain name of the asset, e.g. 'USDC' or 'MockUSDC' */\n  readonly assetName: string;\n  /** EIP-712 domain version of the asset, e.g. '2' */\n  readonly assetVersion: string;\n  /** Value of each challenge's `realm`, such as the gateway's host */\n  readonly realm: string;\n  /** Key that binds each challenge to this gateway. Never logged or published */\n  readonly challengeSecret: string;\n  /** RPC endpoint of the settlement chain */\n  readonly rpcUrl: string;\n  /** The x402 facilitator that verifies and broadcasts the authorization */\n  readonly facilitator: X402FacilitatorConfig;\n  /** Must be `true` before anything settles on a mainnet. Never a default */\n  readonly allowMainnet?: boolean;\n  /** Required on mainnet when facilitator auth is `none` */\n  readonly allowUnauthenticatedFacilitator?: boolean;\n  readonly logger?: Logger;\n  /**\n   * Seconds a challenge stays valid, 300 by default. The mppx client signs its\n   * authorization to expire at the same moment.\n   */\n  readonly challengeTtlSeconds?: number;\n  /**\n   * CAIP-2 network: `eip155:31337` (local Anvil), `eip155:84532` (Base\n   * Sepolia, the default) or `eip155:8453` (Base)\n   */\n  readonly network?: string;\n  /**\n   * Same flow values as x402. The default, `upfront`, settles before the\n   * backend; `authorization` settles after it\n   */\n  readonly paymentFlow?: X402PaymentFlow;\n  /** Per-resource overrides of `paymentFlow`, keyed by resource id */\n  readonly resourcePaymentFlows?: Readonly<Record<string, X402PaymentFlow>>;\n  readonly clock?: Clock;\n  readonly ids?: IdGenerator;\n}\n\nexport function configInvalid(message: string): CommerceError {\n  return new CommerceError('CONFIG_INVALID', message);\n}\n\nexport type MppChallengeOptions = Omit<\n  MppProviderOptions,\n  'rpcUrl' | 'facilitator' | 'allowMainnet' | 'allowUnauthenticatedFacilitator' | 'logger'\n>;\n\nexport function validateOptions(options: MppChallengeOptions): void {\n  if (!isAddress(options.recipient)) throw configInvalid('MPP recipient is not an EVM address');\n  if (!isAddress(options.asset)) throw configInvalid('MPP asset is not an EVM address');\n  if (options.assetName.length === 0 || options.assetVersion.length === 0) {\n    throw configInvalid('MPP asset needs its EIP-712 domain name and version');\n  }\n  // mppx refuses CR or LF in the quoted realm parameter, so checking here fails\n  // at construction instead of on every challenge\n  if (options.realm.length === 0 || /[\\r\\n]/.test(options.realm)) {\n    throw configInvalid('MPP realm must be a non-empty single-line string');\n  }\n  if (options.challengeSecret.length < MPP_MIN_CHALLENGE_SECRET_LENGTH) {\n    throw configInvalid(\n      `MPP challenge secret must have length at least ${MPP_MIN_CHALLENGE_SECRET_LENGTH}`,\n    );\n  }\n  const ttl = options.challengeTtlSeconds;\n  if (ttl !== undefined && (!Number.isInteger(ttl) || ttl <= 0)) {\n    throw configInvalid('MPP challenge TTL must be a positive whole number of seconds');\n  }\n  if (options.network !== undefined && !isMppNetwork(options.network)) {\n    throw configInvalid(`MPP network must be one of ${MPP_NETWORKS.join(', ')}`);\n  }\n}\n","/**\n * MPP payment provider for the `charge` intent, the `evm` method and the\n * EIP-3009 `authorization` credential.\n *\n * It issues challenges and verifies credentials without moving funds: local\n * checks first, then a read-only check by an x402 facilitator. Settlement hands\n * the same signed authorization to that facilitator through an internal x402\n * provider built from these options. The MPP layer adds no signing key.\n *\n * Under the default `upfront` flow settlement precedes the backend call; under\n * `authorization` it follows a successful one. The drafts require a confirmed\n * transaction before a `Payment-Receipt`.\n */\nimport { PERMIT2_ADDRESS } from '@x402/evm';\nimport { Challenge, type Credential, Method, Receipt } from 'mppx';\nimport { Methods, type Types } from 'mppx/evm';\nimport { charge } from 'mppx/evm/server';\nimport { createPublicClient, getAddress, http, parseAbi } from 'viem';\nimport {\n  type AdapterHealth,\n  CommerceError,\n  type PaymentContext,\n  type PaymentProvider,\n  type PaymentRequirement,\n  type PaymentResult,\n  type PaymentSettlementContext,\n  type PaymentVerificationContext,\n  systemClock,\n} from '../../core';\nimport { SETTLE_AFTER_BACKEND_METADATA_KEY } from '../../core/execution/settlement-order';\nimport { parseCanonicalAmount } from '../x402/amount';\nimport { createX402PaymentProvider, DEFAULT_IDS } from '../x402/provider';\nimport { computeReplayKey } from '../x402/replay-key';\nimport {\n  MPP_DEFAULT_NETWORK,\n  MPP_DEFAULT_PAYMENT_FLOW,\n  MPP_PROFILE,\n  MPP_SPEC_DRAFTS,\n} from './constants';\nimport {\n  bindingMismatch,\n  decodeCredential,\n  sameAddress,\n  toX402Submission,\n  verificationReason,\n} from './credential';\nimport { MPP_DESCRIPTOR } from './descriptor';\nimport {\n  configInvalid,\n  type MppChallengeOptions,\n  type MppProviderOptions,\n  type NonceUsedReader,\n  validateOptions,\n} from './options';\nimport { CONTENT_DIGEST_METADATA_KEY } from './transport';\n\nconst DEFAULT_CHALLENGE_TTL_SECONDS = 300;\n\n// The x402 SDK's verify reason for an EIP-3009 nonce already spent on chain\nconst NONCE_ALREADY_USED = 'invalid_exact_evm_nonce_already_used';\n\nconst AUTHORIZATION_STATE_ABI = parseAbi([\n  'function authorizationState(address authorizer, bytes32 nonce) view returns (bool)',\n]);\n\nconst NONCE_READ_TIMEOUT_MS = 5_000;\n\nexport function createMppPaymentProvider(options: MppProviderOptions): PaymentProvider {\n  const { rpcUrl, facilitator, allowMainnet, allowUnauthenticatedFacilitator, logger, ...rest } =\n    options;\n  // Checked first so a bad MPP option is reported as one, not as an x402 error\n  validateOptions(rest);\n  // Built from the same terms, and never registered as a rail, so an MPP-only\n  // deployment needs no x402 configuration\n  const settlement = createX402PaymentProvider({\n    network: options.network ?? MPP_DEFAULT_NETWORK,\n    rpcUrl,\n    asset: options.asset,\n    assetName: options.assetName,\n    assetVersion: options.assetVersion,\n    assetDecimals: MPP_PROFILE.assetDecimals,\n    payTo: options.recipient,\n    facilitator,\n    ...(allowMainnet !== undefined ? { allowMainnet } : {}),\n    ...(allowUnauthenticatedFacilitator !== undefined ? { allowUnauthenticatedFacilitator } : {}),\n    ...(logger !== undefined ? { logger } : {}),\n    ...(options.clock !== undefined ? { clock: options.clock } : {}),\n  });\n  // One attempt: the read only names the reason for a refusal already decided\n  const chain = createPublicClient({\n    transport: http(rpcUrl, { timeout: NONCE_READ_TIMEOUT_MS, retryCount: 0 }),\n  });\n  const nonceUsed: NonceUsedReader = (payer, nonce) =>\n    chain.readContract({\n      address: options.asset,\n      abi: AUTHORIZATION_STATE_ABI,\n      functionName: 'authorizationState',\n      args: [payer, nonce],\n    });\n  return createMppProviderWithSettlement(rest, settlement, nonceUsed);\n}\n\n/**\n * Internal seam: tests inject a settlement provider and the nonce reader. Not\n * exported from the `./mpp` entry.\n */\nexport function createMppProviderWithSettlement(\n  options: MppChallengeOptions,\n  settlement: PaymentProvider,\n  nonceUsed?: NonceUsedReader,\n): PaymentProvider {\n  validateOptions(options);\n  if (settlement.name !== 'x402') {\n    throw configInvalid('MPP settlement must be an x402 payment provider');\n  }\n  const network = options.network ?? MPP_DEFAULT_NETWORK;\n  const chainId = Number(network.split(':')[1]);\n  const clock = options.clock ?? systemClock;\n  const ttlSeconds = options.challengeTtlSeconds ?? DEFAULT_CHALLENGE_TTL_SECONDS;\n  const recipient = getAddress(options.recipient);\n  const asset = getAddress(options.asset);\n  const ids = options.ids ?? DEFAULT_IDS;\n  // The settlement provider's terms are fixed at construction, so one passing\n  // check covers every later challenge\n  let settlementTermsChecked = false;\n\n  // charge() requires a callback even though this provider never invokes the\n  // mppx broadcast path. Settlement is delegated to the x402 provider.\n  const method = charge({\n    currency: asset,\n    recipient,\n    chainId,\n    decimals: MPP_PROFILE.assetDecimals,\n    authorization: { name: options.assetName, version: options.assetVersion },\n    settle: async () => {\n      throw new CommerceError('INTERNAL_ERROR', 'MPP direct broadcast is disabled');\n    },\n  });\n\n  function rejected(requirement: PaymentRequirement, reason: string): PaymentResult {\n    return {\n      status: 'rejected',\n      provider: 'mpp',\n      amount: requirement.amount,\n      currency: requirement.currency,\n      network,\n      asset,\n      rejectionReason: reason,\n    };\n  }\n\n  async function createRequirement(context: PaymentContext): Promise<PaymentRequirement> {\n    if (context.currency !== MPP_PROFILE.assetSymbol) {\n      throw configInvalid(\n        `Resource \"${context.resource.id}\" is priced in ${context.currency}, but MPP charges ${MPP_PROFILE.assetSymbol}`,\n      );\n    }\n    // Strict parse first: mppx converts with viem's parseUnits, which rounds\n    // excess precision instead of refusing it\n    if (parseCanonicalAmount(context.amount, MPP_PROFILE.assetDecimals) <= 0n) {\n      throw new CommerceError('PAYMENT_INVALID', `Amount \"${context.amount}\" must be above zero`, {\n        details: { amount: context.amount },\n      });\n    }\n    // Reject a mismatched settlement requirement before the buyer signs\n    if (!settlementTermsChecked) {\n      await settlementRequirement(context);\n      settlementTermsChecked = true;\n    }\n    const paymentFlow =\n      options.resourcePaymentFlows?.[context.resource.id] ??\n      options.paymentFlow ??\n      MPP_DEFAULT_PAYMENT_FLOW;\n    // mppx signs `validBefore` at this expiry. Under `authorization`, the\n    // backend must finish before then for settlement to proceed.\n    const expires = new Date(clock.now().getTime() + ttlSeconds * 1000);\n    const digest = context.metadata?.[CONTENT_DIGEST_METADATA_KEY];\n    const challenge = Challenge.fromMethod(Methods.charge, {\n      secretKey: options.challengeSecret,\n      realm: options.realm,\n      expires,\n      // Present for an HTTP request with a body. MCP and A2A carry the proof\n      // in the body itself, so their challenges bind none.\n      ...(typeof digest === 'string' ? { digest } : {}),\n      // Bound by the challenge HMAC, so a challenge for one resource cannot pay\n      // for another at the same price\n      meta: { resource: context.resource.id },\n      request: {\n        amount: context.amount,\n        currency: asset,\n        recipient,\n        chainId,\n        decimals: MPP_PROFILE.assetDecimals,\n        credentialTypes: [MPP_PROFILE.credentialType],\n        // Required by draft-evm-charge-00 for every credential type\n        permit2Address: PERMIT2_ADDRESS,\n      },\n    });\n    return {\n      id: ids.next('payreq'),\n      requestId: context.requestId,\n      resourceId: context.resource.id,\n      provider: 'mpp',\n      amount: context.amount,\n      currency: context.currency,\n      destination: recipient,\n      network,\n      asset,\n      expiresAt: expires.toISOString(),\n      challenge: {\n        provider: 'mpp',\n        version: MPP_SPEC_DRAFTS.core,\n        accepts: [challenge],\n        // Build both carrier forms here because the HTTP route and MCP\n        // adapter cannot import mppx: a header value for HTTP and challenge\n        // objects for MCP\n        envelope: { wwwAuthenticate: Challenge.serialize(challenge), challenges: [challenge] },\n      },\n      metadata: { [SETTLE_AFTER_BACKEND_METADATA_KEY]: paymentFlow === 'authorization' },\n    };\n  }\n\n  async function verify(context: PaymentVerificationContext): Promise<PaymentResult> {\n    const { requirement, resource, submission } = context;\n    if (requirement.provider !== 'mpp' || requirement.challenge.provider !== 'mpp') {\n      return rejected(requirement, 'wrong_provider');\n    }\n    const issued = requirement.challenge.accepts[0] as Challenge.Challenge | undefined;\n    if (!issued) return rejected(requirement, 'missing_challenge');\n\n    let credential: Credential.Credential;\n    try {\n      credential = decodeCredential(submission.payload);\n    } catch {\n      return rejected(requirement, 'malformed_credential');\n    }\n    const echoed = credential.challenge;\n\n    // A valid HMAC means this gateway issued the challenge, not that it was\n    // issued for this resource and price. The binding checks below close that gap.\n    if (!Challenge.verify(echoed, { secretKey: options.challengeSecret })) {\n      return rejected(requirement, 'challenge_not_issued');\n    }\n    const binding = bindingMismatch(echoed, issued, resource.id);\n    if (binding) return rejected(requirement, binding);\n    if (!echoed.expires || new Date(echoed.expires).getTime() <= clock.now().getTime()) {\n      return rejected(requirement, 'challenge_expired');\n    }\n    if ((credential.payload as { type?: unknown } | null)?.type !== MPP_PROFILE.credentialType) {\n      return rejected(requirement, 'unsupported_credential');\n    }\n\n    // Local checks only: signature recovery, nonce == challenge hash, the\n    // validity window and payload terms. With no network call involved, any\n    // failure here is a verdict on the credential, not an outage.\n    let payer: `0x${string}`;\n    try {\n      const validation = await Method.validateCredential([method], credential);\n      payer = getAddress((validation.details as { payer: string }).payer);\n    } catch (error) {\n      return rejected(requirement, verificationReason(error));\n    }\n\n    // validateCredential proved it equals the 32-byte challenge hash\n    const nonce = (credential.payload as Types.AuthorizationPayload).nonce as `0x${string}`;\n    // Match x402's key so the same authorization collides across both rails\n    const replayKey = computeReplayKey({ chainId, asset, from: payer, nonce });\n\n    // The facilitator check runs before the pipeline reserves the replay key,\n    // so an outage throws the x402 provider's retryable error and uses up\n    // nothing, and a refusal is an ordinary rejection\n    const x402Verification = await settlement.verify(\n      await toX402Context(context, credential.payload as Types.AuthorizationPayload),\n    );\n    if (x402Verification.status !== 'verified') {\n      // A spent challenge-hash nonce means the challenge was used. Check\n      // the token when the facilitator reports only a simulation failure;\n      // keep its reason if the token read fails.\n      const reason = x402Verification.rejectionReason;\n      const spent =\n        reason === NONCE_ALREADY_USED ||\n        ((await nonceUsed?.(payer, nonce).catch(() => false)) ?? false);\n      return rejected(\n        requirement,\n        spent ? 'challenge_already_used' : (reason ?? 'settlement_rejected'),\n      );\n    }\n    // A different key would settle an authorization the pipeline did not reserve\n    if (x402Verification.replayKey !== replayKey) {\n      return rejected(requirement, 'settlement_mismatch');\n    }\n\n    return {\n      status: 'verified',\n      provider: 'mpp',\n      payer,\n      payee: recipient,\n      amount: requirement.amount,\n      currency: requirement.currency,\n      network,\n      asset,\n      replayKey,\n    };\n  }\n\n  // The same payment as an x402 requirement and `exact` submission\n  async function toX402Context(\n    context: PaymentVerificationContext,\n    authorization: Types.AuthorizationPayload,\n  ): Promise<PaymentVerificationContext> {\n    const { requestId, requirement, resource } = context;\n    const x402Requirement = await settlementRequirement({\n      requestId,\n      resource,\n      amount: requirement.amount,\n      currency: requirement.currency,\n      requestedAt: clock.nowIso(),\n    });\n    return {\n      requestId,\n      resource,\n      requirement: x402Requirement,\n      submission: toX402Submission(x402Requirement, authorization),\n    };\n  }\n\n  async function settlementRequirement(context: PaymentContext): Promise<PaymentRequirement> {\n    const x402 = await settlement.createRequirement(context);\n    const extra = (x402.challenge.accepts[0]?.['extra'] ?? {}) as Record<string, unknown>;\n    if (\n      x402.network !== network ||\n      !sameAddress(x402.asset, asset) ||\n      !sameAddress(x402.destination, recipient) ||\n      extra['name'] !== options.assetName ||\n      extra['version'] !== options.assetVersion\n    ) {\n      throw configInvalid(\n        'MPP settlement provider must use the same network, asset, EIP-712 domain and recipient',\n      );\n    }\n    return x402;\n  }\n\n  async function settle(context: PaymentSettlementContext): Promise<PaymentResult> {\n    const { requestId, requirement, resource, submission, verification } = context;\n    if (verification.status !== 'verified' || verification.replayKey === undefined) {\n      throw new CommerceError(\n        'PAYMENT_INVALID',\n        'MPP settle() called without a successful verify()',\n      );\n    }\n\n    // verify() already ran the facilitator check, and the facilitator checks\n    // again before broadcasting. A throw may follow a broadcast, so it\n    // propagates and the pipeline marks the payment uncertain.\n    const credential = decodeCredential(submission.payload);\n    const authorization = credential.payload as Types.AuthorizationPayload;\n    const settled = await settlement.settle({\n      ...(await toX402Context({ requestId, requirement, resource, submission }, authorization)),\n      verification: { ...verification, provider: 'x402' },\n    });\n    const result: PaymentResult = {\n      ...settled,\n      provider: 'mpp',\n      amount: requirement.amount,\n      currency: requirement.currency,\n      replayKey: verification.replayKey,\n    };\n    if (settled.status !== 'settled' || settled.externalReference === undefined) return result;\n    // Include the EVM method's `challengeId` and `chainId` in the receipt\n    // sent through the HTTP `Payment-Receipt` header\n    const fields: Receipt.Receipt & { challengeId: string; chainId: number } = {\n      method: MPP_PROFILE.method,\n      reference: settled.externalReference,\n      status: 'success',\n      timestamp: settled.settledAt ?? clock.nowIso(),\n      challengeId: credential.challenge.id,\n      chainId,\n    };\n    const receipt = Receipt.from(fields);\n    return { ...result, metadata: { ...settled.metadata, receipt: Receipt.serialize(receipt) } };\n  }\n\n  function health(): Promise<AdapterHealth> {\n    return settlement.health();\n  }\n\n  return { name: 'mpp', descriptor: MPP_DESCRIPTOR, createRequirement, verify, settle, health };\n}\n\nexport type { MppProviderOptions, NonceUsedReader } from './options';\n"]}

package/dist/{networks-DTWRlj-K.d.ts → networks-DDHYJLcg.d.ts}

@@ -35,4 +35,5 @@ declare const SUPPORTED_NETWORK_IDS: readonly string[];
 /** What a deployment is: the local dev chain, or a public testnet or mainnet */
 type DeploymentMode = 'local' | 'testnet' | 'mainnet';
 
-export { type CustomNetworks as C, type DeploymentMode as D, type NetworkProfile as N, SUPPORTED_NETWORK_IDS as S };
+export { SUPPORTED_NETWORK_IDS as S };
+export type { CustomNetworks as C, DeploymentMode as D, NetworkProfile as N };

package/dist/{protocol-adapter-CfxU8Z2T.d.ts → protocol-adapter-C9odYl6l.d.ts}

@@ -1,6 +1,6 @@
 import { IncomingMessage, ServerResponse } from 'node:http';
-import { I as IsoTimestamp, o as PaymentResult, s as ProtocolName, b as PaymentSubmission, n as PaymentRequirement, A as AdapterDescriptor, R as ResourceRegistry, L as Logger, C as Clock, e as IdGenerator, c as AdapterHealth } from './runtime-7vLNYvmU.js';
-import { d as AuthorizationRecord, b as AuthorizationSubmission, a as AuthorizationRequirement } from './authorization-CMkIuAkO.js';
+import { I as IsoTimestamp, o as PaymentResult, s as ProtocolName, b as PaymentSubmission, n as PaymentRequirement, A as AdapterDescriptor, R as ResourceRegistry, L as Logger, C as Clock, e as IdGenerator, c as AdapterHealth } from './runtime-Cl_BLVZV.js';
+import { d as AuthorizationRecord, b as AuthorizationSubmission, a as AuthorizationRequirement } from './authorization-DjAecwuW.js';
 
 /**
  * Canonical commerce events. FROZEN CONTRACT. Every event in one flow shares
@@ -237,4 +237,5 @@ interface AdapterHttpRoute {
 }
 declare function isHttpProtocolAdapter(adapter: ProtocolAdapter): adapter is HttpProtocolAdapter;
 
-export { type AdapterHttpRoute as A, type CommerceEvent as C, type DeliveredOutcome as D, type ExecutionPipeline as E, type HttpProtocolAdapter as H, type PaymentRequiredOutcome as P, type PaymentAttempt as a, type CommerceReceipt as b, type ProtocolAdapter as c, type ProtocolAdapterContext as d, COMMERCE_EVENT_TYPES as e, type CanonicalRequest as f, type CommerceEventType as g, type EventSink as h, type ExecutionOutcome as i, isHttpProtocolAdapter as j };
+export { COMMERCE_EVENT_TYPES as e, isHttpProtocolAdapter as j };
+export type { AdapterHttpRoute as A, CommerceEvent as C, DeliveredOutcome as D, ExecutionPipeline as E, HttpProtocolAdapter as H, PaymentRequiredOutcome as P, PaymentAttempt as a, CommerceReceipt as b, ProtocolAdapter as c, ProtocolAdapterContext as d, CanonicalRequest as f, CommerceEventType as g, EventSink as h, ExecutionOutcome as i };

package/dist/{runtime-7vLNYvmU.d.ts → runtime-Cl_BLVZV.d.ts}

@@ -244,6 +244,12 @@ interface PaymentContext {
     readonly amount: DecimalAmount;
     readonly currency: string;
     readonly requestedAt: IsoTimestamp;
+    /**
+     * Validated resource input used to build the backend request. The pipeline
+     * sets this field on every createRequirement call. A rail may bind its
+     * challenge to the input but must not send it to a third party.
+     */
+    readonly input?: unknown;
     readonly metadata?: Readonly<Record<string, unknown>>;
 }
 /** Input to {@link PaymentProvider.verify} */
@@ -322,4 +328,5 @@ interface IdGenerator {
 }
 declare const systemClock: Clock;
 
-export { type AdapterDescriptor as A, type BackendHandler as B, type Clock as C, type DecimalAmount as D, type IsoTimestamp as I, type JsonSchema as J, type Logger as L, NOOP_LOGGER as N, type PaymentMethodName as P, type ResourceRegistry as R, type CommerceResource as a, type PaymentSubmission as b, type AdapterHealth as c, type PaymentProvider as d, type IdGenerator as e, type AdapterHealthComponent as f, type AuthorizationMethodName as g, type BackendMethod as h, DEFAULT_BACKEND_TIMEOUT_MS as i, PAYMENT_METHOD_NAMES as j, PROTOCOL_NAMES as k, type PaymentChallenge as l, type PaymentContext as m, type PaymentRequirement as n, type PaymentResult as o, type PaymentSettlementContext as p, type PaymentVerificationContext as q, type Pricing as r, type ProtocolName as s, systemClock as t };
+export { NOOP_LOGGER as N, DEFAULT_BACKEND_TIMEOUT_MS as i, PAYMENT_METHOD_NAMES as j, PROTOCOL_NAMES as k, systemClock as t };
+export type { AdapterDescriptor as A, BackendHandler as B, Clock as C, DecimalAmount as D, IsoTimestamp as I, JsonSchema as J, Logger as L, PaymentMethodName as P, ResourceRegistry as R, CommerceResource as a, PaymentSubmission as b, AdapterHealth as c, PaymentProvider as d, IdGenerator as e, AdapterHealthComponent as f, AuthorizationMethodName as g, BackendMethod as h, PaymentChallenge as l, PaymentContext as m, PaymentRequirement as n, PaymentResult as o, PaymentSettlementContext as p, PaymentVerificationContext as q, Pricing as r, ProtocolName as s };

package/dist/{types-CVw6Sf46.d.ts → types-j7MnUXYN.d.ts}

@@ -101,4 +101,5 @@ type EnabledAp2Config = Extract<Ap2AuthorizationConfig, {
     enabled: true;
 }>;
 
-export { AP2_CHECKOUT_MANDATE_VCT as A, type EnabledAp2Config as E, AP2_CHECKOUT_PROFILE as a, AP2_DEFAULT_CLOCK_SKEW_SECONDS as b, AP2_MAX_CLOCK_SKEW_SECONDS as c, AP2_SIGNING_ALGORITHM as d, AP2_SPEC_VERSION as e, type Ap2AuthorizationConfig as f, type Ap2Mode as g, type Ap2TrustedIssuer as h, type Ap2TrustedKey as i };
+export { AP2_CHECKOUT_MANDATE_VCT as A, AP2_CHECKOUT_PROFILE as a, AP2_DEFAULT_CLOCK_SKEW_SECONDS as b, AP2_MAX_CLOCK_SKEW_SECONDS as c, AP2_SIGNING_ALGORITHM as d, AP2_SPEC_VERSION as e };
+export type { EnabledAp2Config as E, Ap2AuthorizationConfig as f, Ap2Mode as g, Ap2TrustedIssuer as h, Ap2TrustedKey as i };

package/dist/x402.d.ts

@@ -1,8 +1,8 @@
 import { X as X402PaymentFlow, a as X402FacilitatorConfig } from './guardrails-CX_jYXvZ.js';
 export { F as FacilitatorAuth } from './guardrails-CX_jYXvZ.js';
-import { C as CustomNetworks } from './networks-DTWRlj-K.js';
-export { D as DeploymentMode, N as NetworkProfile, S as SUPPORTED_NETWORK_IDS } from './networks-DTWRlj-K.js';
-import { L as Logger, C as Clock, e as IdGenerator, d as PaymentProvider } from './runtime-7vLNYvmU.js';
+import { C as CustomNetworks } from './networks-DDHYJLcg.js';
+export { D as DeploymentMode, N as NetworkProfile, S as SUPPORTED_NETWORK_IDS } from './networks-DDHYJLcg.js';
+import { Logger, Clock, IdGenerator, PaymentProvider } from './index.js';
 
 /**
  * Client-side payment helper: builds and EIP-712-signs an x402 v2 `exact`/EVM
@@ -72,10 +72,31 @@ interface X402ProviderOptions extends X402OfferOptions {
      * its `kind` determines mainnet guardrails
      */
     readonly customNetworks?: CustomNetworks;
+    /**
+     * Experimental. Signs an ERC-8409 quote for each EVM offer when the request
+     * data can be canonicalized. Use a dedicated key that holds no funds.
+     * Never use a merchant's or buyer's wallet key.
+     */
+    readonly quote?: {
+        readonly signerPrivateKey: string;
+    };
     readonly logger?: Logger;
     readonly clock?: Clock;
     readonly ids?: IdGenerator;
 }
+/** x402 payment provider with optional public quote metadata */
+interface X402PaymentProvider extends PaymentProvider {
+    /**
+     * Experimental. Present when ERC-8409 quote signing is enabled.
+     * Publishes the issuer address for signature checks, the request scheme and
+     * the key under `PaymentRequired.extensions`.
+     */
+    readonly quote?: {
+        readonly issuer: `0x${string}`;
+        readonly requestScheme: string;
+        readonly extension: string;
+    };
+}
 /** Settlement network, token and merchant payee for one offer */
 interface X402OfferOptions {
     /**
@@ -113,19 +134,7 @@ interface X402MultiOfferProviderOptions extends Omit<X402ProviderOptions, keyof
     readonly offers: readonly X402OfferOptions[];
 }
 
-/**
- * x402 payment provider: protocol v2, `exact` scheme. On EVM the buyer signs an
- * EIP-3009 `transferWithAuthorization` or a Permit2 transfer through the x402
- * exact proxy; on Solana, a token transfer whose fee the facilitator pays; on
- * NEAR, a delegated NEP-141 `ft_transfer` that the facilitator's relayer
- * submits.
- *
- * `verify()` never moves funds. `settle()` does, and throws unless it is handed
- * a successful verification. Both run through a facilitator (see
- * `../facilitator.ts`): the SDK's own `x402Facilitator` in this process, or a
- * remote HTTP facilitator.
- */
-
-declare function createX402PaymentProvider(options: X402ProviderOptions | X402MultiOfferProviderOptions): PaymentProvider;
+declare function createX402PaymentProvider(options: X402ProviderOptions | X402MultiOfferProviderOptions): X402PaymentProvider;
 
-export { type CreatePaymentProofOptions, type X402AssetTransferMethod, X402FacilitatorConfig, type X402MultiOfferProviderOptions, type X402OfferOptions, X402PaymentFlow, type X402ProviderOptions, createPaymentProof, createX402PaymentProvider, createX402PaymentProvider as x402 };
+export { X402FacilitatorConfig, X402PaymentFlow, createPaymentProof, createX402PaymentProvider, createX402PaymentProvider as x402 };
+export type { CreatePaymentProofOptions, X402AssetTransferMethod, X402MultiOfferProviderOptions, X402OfferOptions, X402PaymentProvider, X402ProviderOptions };

package/dist/x402.js

@@ -1,7 +1,7 @@
-import { chainIdFromCaip2 } from './chunk-TNS7U5Q4.js';
-export { createX402PaymentProvider, createX402PaymentProvider as x402 } from './chunk-TNS7U5Q4.js';
-export { SUPPORTED_NETWORK_IDS } from './chunk-XVU46YAH.js';
-import { CommerceError } from './chunk-Q5TII32R.js';
+import { chainIdFromCaip2 } from './chunk-CXWC5LWM.js';
+export { createX402PaymentProvider, createX402PaymentProvider as x402 } from './chunk-CXWC5LWM.js';
+export { SUPPORTED_NETWORK_IDS } from './chunk-QPV3EGJO.js';
+import { CommerceError } from './chunk-DTKU3Z2M.js';
 import './chunk-KA2AX5FH.js';
 import './chunk-2CJNA7MS.js';
 import { PaymentRequirementsV2Schema } from '@x402/core/schemas';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devlab.group/agent-commerce",
-  "version": "2.3.0",
+  "version": "2.4.1",
   "description": "Open-source, self-hosted, non-custodial commerce and payment orchestration gateway for AI agents.",
   "license": "Apache-2.0",
   "type": "module",
@@ -110,7 +110,7 @@
     "ajv-formats": "3.0.1",
     "better-sqlite3": "13.0.3",
     "commander": "15.0.0",
-    "fastify": "5.12.5",
+    "fastify": "5.12.7",
     "picocolors": "1.1.1",
     "pino": "10.3.1",
     "yaml": "2.9.0",
@@ -187,7 +187,7 @@
     "@types/react": "19.2.18",
     "@types/react-dom": "19.2.4",
     "@vitejs/plugin-react": "6.0.5",
-    "@vitest/coverage-v8": "4.1.11",
+    "@vitest/coverage-v8": "4.1.12",
     "@x402/core": "2.25.0",
     "@x402/evm": "2.25.0",
     "@x402/mcp": "2.25.0",
@@ -199,12 +199,12 @@
     "pino-pretty": "13.1.2",
     "react": "19.0.8",
     "react-dom": "19.0.8",
-    "tsup": "8.5.1",
+    "tsup": "9.0.0",
     "tsx": "4.23.12",
     "typescript": "5.9.3",
     "viem": "2.57.1",
-    "vite": "8.2.1",
-    "vitest": "4.1.11"
+    "vite": "8.2.4",
+    "vitest": "4.1.12"
   },
   "overrides": {
     "@coinbase/x402": {