@devlab.group/agent-commerce 2.3.0 → 2.4.1

package/dist/cli/{chunk-KTV52MCU.js.map → chunk-WYOGIANL.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../../src/payments/x402/dev-key-guard.ts","../../src/payments/x402/guardrails.ts","../../src/payments/x402/options.ts"],"names":["invalid"],"mappings":";;;;AAWA,IAAM,sBAA2C,IAAI,GAAA;AAAA,EACnD,0BAA0B,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,UAAA,CAAW,aAAa;AACjE,CAAA;AAEA,IAAM,2BAAgD,IAAI,GAAA;AAAA,EACxD,0BAA0B,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,OAAA,CAAQ,aAAa;AAC9D,CAAA;AAGA,IAAM,iBAAA,GAAoB,qBAAA;AAEnB,SAAS,kBAAkB,UAAA,EAA6B;AAC7D,EAAA,OAAO,mBAAA,CAAoB,GAAA,CAAI,UAAA,CAAW,WAAA,EAAa,CAAA;AACzD;AAEO,SAAS,sBAAsB,OAAA,EAA0B;AAC9D,EAAA,OAAO,wBAAA,CAAyB,GAAA,CAAI,OAAA,CAAQ,WAAA,EAAa,CAAA;AAC3D;AASO,SAAS,2BAA2B,QAAA,EAA2B;AACpE,EAAA,MAAM,IAAI,QAAA,CAAS,WAAA,EAAY,CAAE,OAAA,CAAQ,YAAY,EAAE,CAAA;AACvD,EAAA,IAAI,CAAA,KAAM,WAAA,IAAe,CAAA,KAAM,KAAA,EAAO,OAAO,IAAA;AAC7C,EAAA,IAAI,kCAAA,CAAmC,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AACvD,EAAA,IAAI,iCAAA,CAAkC,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AACtD,EAAA,IAAI,8BAAA,CAA+B,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AACnD,EAAA,IAAI,6CAAA,CAA8C,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AAClE,EAAA,IAAI,CAAC,CAAA,CAAE,QAAA,CAAS,GAAG,CAAA,IAAK,CAAC,CAAA,CAAE,QAAA,CAAS,GAAG,CAAA,EAAG,OAAO,IAAA;AACjD,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,qBAAqB,MAAA,EAAwB;AACpD,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,MAAM,CAAA,CAAE,QAAA;AAAA,EACzB,SAAS,KAAA,EAAO;AAGd,IAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,0CAAA,EAA4C;AAAA,MACpF;AAAA,KACD,CAAA;AAAA,EACH;AACF;AAGO,SAAS,YAAY,MAAA,EAAwB;AAClD,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,MAAM,CAAA,CAAE,MAAA;AAAA,EACzB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,sBAAA;AAAA,EACT;AACF;AASO,SAAS,uBAAA,CAAwB,QAAgB,gBAAA,EAAgC;AACtF,EAAA,IAAI,CAAC,iBAAA,CAAkB,IAAA,CAAK,gBAAgB,CAAA,EAAG;AAC7C,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,iBAAA,CAAkB,gBAAgB,CAAA,EAAG;AAE1C,EAAA,MAAM,QAAA,GAAW,qBAAqB,MAAM,CAAA;AAE5C,EAAA,IAAI,CAAC,0BAAA,CAA2B,QAAQ,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,CAAA,8FAAA,EACK,WAAA,CAAY,MAAM,CAAC,CAAA,+QAAA;AAAA,KAG1B;AAAA,EACF;AACF;AAUO,SAAS,0BAAA,CAA2B,QAAgB,KAAA,EAAqB;AAC9E,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAK,CAAA,EAAG;AAEnC,EAAA,MAAM,QAAA,GAAW,qBAAqB,MAAM,CAAA;AAE5C,EAAA,IAAI,CAAC,0BAAA,CAA2B,QAAQ,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,KAAK,CAAA,wDAAA,EAC3B,WAAA,CAAY,MAAM,CAAC,CAAA,4QAAA;AAAA,KAI1B;AAAA,EACF;AACF;;;AC7CA,IAAM,YAAA,GAAe,cAAA;AAErB,SAAS,OAAA,CAAQ,SAAiB,IAAA,EAA6B;AAC7D,EAAA,OAAO,IAAI,cAAc,gBAAA,EAAkB,OAAA,EAAS,EAAE,OAAA,EAAS,EAAE,IAAA,EAAK,EAAG,CAAA;AAC3E;AAOO,SAAS,sBAAsB,KAAA,EAA4C;AAChF,EAAA,MAAM,EAAA,GAAK,MAAM,UAAA,IAAc,eAAA;AAC/B,EAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,IAAc,OAAA;AAClC,EAAA,MAAM,OAAA,GAAU,mBAAmB,KAAA,CAAM,OAAA,EAAS,GAAG,EAAE,CAAA,QAAA,CAAA,EAAY,MAAM,cAAc,CAAA;AACvF,EAAA,MAAM,IAAA,GAAO,sBAAsB,OAAO,CAAA;AAI1C,EAAA,IAAI,QAAQ,IAAA,KAAS,SAAA,IAAa,KAAA,CAAM,WAAA,CAAY,SAAS,OAAA,EAAS;AACpE,IAAA,MAAM,OAAA;AAAA,MACJ,GAAG,EAAE,CAAA,WAAA,EAAc,QAAQ,EAAE,CAAA,GAAA,EAAM,QAAQ,WAAW,CAAA,+HAAA,CAAA;AAAA,MACtD,GAAG,EAAE,CAAA,iBAAA;AAAA,KACP;AAAA,EACF;AAGA,EAAA,IAAI,KAAA,CAAM,WAAA,CAAY,IAAA,KAAS,OAAA,IAAW,SAAS,OAAA,EAAS;AAC1D,IAAA,MAAM,OAAA;AAAA,MACJ,OAAA,CAAQ,OAAO,YAAA,GACX,CAAA,EAAG,EAAE,CAAA,kCAAA,EAAqC,cAAc,CAAA,6BAAA,EAAgC,YAAY,CAAA,8BAAA,EAAiC,EAAE,sBAAsB,cAAc,CAAA,qHAAA,CAAA,GAC3K,CAAA,EAAG,EAAE,CAAA,gEAAA,EAAmE,cAAc,gBAAgB,OAAA,CAAQ,EAAE,CAAA,GAAA,EAAM,OAAA,CAAQ,WAAW,CAAA,4BAAA,CAAA;AAAA,MAC7I,GAAG,EAAE,CAAA,iBAAA;AAAA,KACP;AAAA,EACF;AAEA,EAAA,IAAI,IAAA,KAAS,SAAA,IAAa,KAAA,CAAM,YAAA,KAAiB,IAAA,EAAM;AACrD,IAAA,MAAM,OAAA;AAAA,MACJ,CAAA,EAAG,EAAE,CAAA,WAAA,EAAc,OAAA,CAAQ,EAAE,CAAA,GAAA,EAAM,OAAA,CAAQ,WAAW,CAAA,0BAAA,EAA6B,EAAE,CAAA,6EAAA,CAAA;AAAA,MACrF,GAAG,EAAE,CAAA,aAAA;AAAA,KACP;AAAA,EACF;AAEA,EAAA,IAAI,KAAA,CAAM,WAAA,CAAY,IAAA,KAAS,QAAA,EAAU;AACvC,IAAA,0BAAA,CAA2B,KAAA,CAAM,WAAA,CAAY,GAAA,EAAK,IAAA,EAAM,EAAE,CAAA;AAG1D,IAAA,IAAI,KAAA,CAAM,WAAA,CAAY,IAAA,CAAK,IAAA,KAAS,KAAA,IAAS,CAAC,mBAAA,CAAoB,KAAA,CAAM,WAAA,CAAY,GAAG,CAAA,EAAG;AACxF,MAAA,MAAM,OAAA;AAAA,QACJ,CAAA,EAAG,EAAE,CAAA,iDAAA,EAAoD,mBAAmB,CAAA,sBAAA,EAAyB,cAAA,CAAe,KAAA,CAAM,WAAA,CAAY,GAAG,CAAC,CAAA,sDAAA,EAAyD,mBAAmB,CAAA,sCAAA,CAAA;AAAA,QACtN,GAAG,EAAE,CAAA,gBAAA;AAAA,OACP;AAAA,IACF;AAIA,IAAA,IACE,IAAA,KAAS,aACT,KAAA,CAAM,WAAA,CAAY,KAAK,IAAA,KAAS,MAAA,IAChC,KAAA,CAAM,+BAAA,KAAoC,IAAA,EAC1C;AACA,MAAA,MAAM,OAAA;AAAA,QACJ,CAAA,EAAG,EAAE,CAAA,8CAAA,EAAiD,cAAA,CAAe,MAAM,WAAA,CAAY,GAAG,CAAC,CAAA,iBAAA,EAAoB,EAAE,CAAA,8HAAA,CAAA;AAAA,QACjH,GAAG,EAAE,CAAA,gCAAA;AAAA,OACP;AAAA,IACF;AAIA,IAAA,KAAA,MAAW,CAAC,OAAO,KAAK,CAAA,IAAK,iBAAiB,KAAA,CAAM,WAAA,CAAY,IAAI,CAAA,EAAG;AACrE,MAAA,IAAI,KAAA,CAAM,IAAA,EAAK,KAAM,EAAA,EAAI;AACvB,QAAA,MAAM,OAAA;AAAA,UACJ,CAAA,EAAG,EAAE,CAAA,4BAAA,EAA+B,KAAA,CAAM,YAAY,IAAA,CAAK,IAAI,SAAS,KAAK,CAAA,2DAAA,CAAA;AAAA,UAC7E,CAAA,EAAG,EAAE,CAAA,kBAAA,EAAqB,KAAK,CAAA;AAAA,SACjC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,EAAA,IAAI,aAAA,CAAc,OAAA,EAAS,KAAA,CAAM,KAAK,CAAA,EAAG;AACvC,IAAA,MAAM,OAAA;AAAA,MACJ,CAAA,EAAG,EAAE,CAAA,GAAA,EAAM,KAAK,CAAA,gEAAA,CAAA;AAAA,MAChB,CAAA,EAAG,EAAE,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,KAChB;AAAA,EACF;AAKA,EAAA,IAAI,IAAA,KAAS,OAAA,IAAW,qBAAA,CAAsB,KAAA,CAAM,KAAK,CAAA,EAAG;AAC1D,IAAA,MAAM,OAAA;AAAA,MACJ,CAAA,EAAG,EAAE,CAAA,GAAA,EAAM,KAAK,CAAA,GAAA,EAAM,MAAM,KAAK,CAAA,0DAAA,EAA6D,IAAI,CAAA,sDAAA,EAAyD,KAAK,CAAA,6BAAA,CAAA;AAAA,MAChK,CAAA,EAAG,EAAE,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,KAChB;AAAA,EACF;AAIA,EAAA,MAAM,YAAY,OAAA,CAAQ,cAAA;AAC1B,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,IAAI,CAAC,WAAA,CAAY,OAAA,EAAS,MAAM,KAAA,EAAO,SAAA,CAAU,OAAO,CAAA,EAAG;AACzD,MAAA,IAAI,KAAA,CAAM,kBAAA,KAAuB,IAAA,IAAQ,OAAA,CAAQ,WAAW,KAAA,EAAO;AACjE,QAAA,MAAM,IAAA,GACJ,KAAA,CAAM,kBAAA,KAAuB,IAAA,GACzB,CAAA,2CAAA,EAA8C,OAAA,CAAQ,WAAW,CAAA,qBAAA,EAAwB,SAAA,CAAU,MAAM,CAAA,CAAA,CAAA,GACzG,CAAA,uCAAA,EAA0C,UAAU,MAAM,CAAA,CAAA,CAAA;AAChE,QAAA,MAAM,OAAA;AAAA,UACJ,CAAA,EAAG,EAAE,CAAA,QAAA,EAAW,KAAA,CAAM,KAAK,CAAA,QAAA,EAAW,SAAA,CAAU,MAAM,CAAA,IAAA,EAAO,QAAQ,WAAW,CAAA,WAAA,EAAc,SAAA,CAAU,OAAO,MAAM,IAAI,CAAA,CAAA;AAAA,UACzH,GAAG,EAAE,CAAA,MAAA;AAAA,SACP;AAAA,MACF;AAAA,IACF,CAAA,MAAO;AAGL,MAAA,MAAM,MAAA,GAAS,MAAA,IAAU,SAAA,GAAY,SAAA,GAAY,MAAA;AACjD,MAAA,IAAI,UAAU,KAAA,CAAM,SAAA,KAAc,UAAa,KAAA,CAAM,SAAA,KAAc,OAAO,IAAA,EAAM;AAC9E,QAAA,MAAM,OAAA;AAAA,UACJ,CAAA,EAAG,EAAE,CAAA,aAAA,EAAgB,KAAA,CAAM,SAAS,CAAA,iCAAA,EAAoC,SAAA,CAAU,MAAM,CAAA,YAAA,EAAe,OAAA,CAAQ,WAAW,CAAA,YAAA,EAAe,OAAO,IAAI,CAAA,0DAAA,CAAA;AAAA,UACpJ,GAAG,EAAE,CAAA,UAAA;AAAA,SACP;AAAA,MACF;AACA,MAAA,IAAI,UAAU,KAAA,CAAM,YAAA,KAAiB,UAAa,KAAA,CAAM,YAAA,KAAiB,OAAO,OAAA,EAAS;AACvF,QAAA,MAAM,OAAA;AAAA,UACJ,CAAA,EAAG,EAAE,CAAA,gBAAA,EAAmB,KAAA,CAAM,YAAY,CAAA,oCAAA,EAAuC,SAAA,CAAU,MAAM,CAAA,YAAA,EAAe,OAAA,CAAQ,WAAW,CAAA,YAAA,EAAe,OAAO,OAAO,CAAA,GAAA,CAAA;AAAA,UAChK,GAAG,EAAE,CAAA,aAAA;AAAA,SACP;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AACzB;AAQA,SAAS,0BAAA,CAA2B,GAAA,EAAa,IAAA,EAAsB,EAAA,EAAkB;AACvF,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,CAAA,EAAG,EAAE,CAAA,oCAAA,CAAA,EAAwC;AAAA,MACrF,KAAA;AAAA,MACA,OAAA,EAAS,EAAE,IAAA,EAAM,CAAA,EAAG,EAAE,CAAA,gBAAA,CAAA;AAAmB,KAC1C,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,MAAA,CAAO,aAAa,QAAA,EAAU;AAClC,EAAA,IAAI,MAAA,CAAO,aAAa,OAAA,EAAS;AAC/B,IAAA,MAAM,OAAA;AAAA,MACJ,CAAA,EAAG,EAAE,CAAA,cAAA,EAAiB,cAAA,CAAe,GAAG,CAAC,CAAA,oEAAA,EAAuE,OAAO,QAAQ,CAAA,GAAA,CAAA;AAAA,MAC/H,GAAG,EAAE,CAAA,gBAAA;AAAA,KACP;AAAA,EACF;AACA,EAAA,IAAI,IAAA,KAAS,SAAA,IAAa,0BAAA,CAA2B,MAAA,CAAO,QAAQ,CAAA,EAAG;AAIvE,EAAA,MAAM,OAAA;AAAA,IACJ,CAAA,EAAG,EAAE,CAAA,cAAA,EAAiB,cAAA,CAAe,GAAG,CAAC,CAAA,6KAAA,CAAA;AAAA,IACzC,GAAG,EAAE,CAAA,gBAAA;AAAA,GACP;AACF;AAGO,IAAM,mBAAA,GAAsB,+CAAA;AAGnC,SAAS,oBAAoB,GAAA,EAAsB;AACjD,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,GAAG,CAAA;AAC1B,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,mBAAmB,CAAA;AAC5C,IAAA,OACE,MAAA,CAAO,MAAA,KAAW,QAAA,CAAS,MAAA,IAC3B,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,KAAM,QAAA,CAAS,QAAA,IACjD,OAAO,MAAA,KAAW,EAAA;AAAA,EAEtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAGA,SAAS,eAAe,GAAA,EAAqB;AAC3C,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,GAAG,CAAA,CAAE,MAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,+BAAA;AAAA,EACT;AACF;AAGA,SAAS,iBAAiB,IAAA,EAA+D;AACvF,EAAA,QAAQ,KAAK,IAAA;AAAM,IACjB,KAAK,QAAA;AACH,MAAA,OAAO,CAAC,CAAC,OAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA;AAAA,IAC/B,KAAK,KAAA;AACH,MAAA,OAAO;AAAA,QACL,CAAC,UAAA,EAAY,IAAA,CAAK,QAAQ,CAAA;AAAA,QAC1B,CAAC,cAAA,EAAgB,IAAA,CAAK,YAAY;AAAA,OACpC;AAAA,IACF;AACE,MAAA,OAAO,EAAC;AAAA;AAEd;;;ACjPO,SAAS,cAAc,KAAA,EAInB;AACT,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,SAAS,CAAA;AAC9C,EAAA,MAAM,UAAU,CAAC,KAAA,KAAmB,GAAA,GAAM,KAAA,CAAM,aAAY,GAAI,KAAA;AAChE,EAAA,OAAO,CAAA,EAAG,KAAA,CAAM,OAAO,CAAA,CAAA,EAAI,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAC,CAAA,CAAA,EAAI,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAC,CAAA,CAAA;AACzE;AAMA,IAAM,cAAA,GAAiB;AAAA,EACrB,SAAA,EAAW,qBAAA;AAAA,EACX,YAAA,EAAc,wBAAA;AAAA,EACd,aAAA,EAAe;AACjB,CAAA;AAEA,IAAM,cAAA,GAAiB;AAAA,EACrB,GAAA,EAAK,oCAAA;AAAA,EACL,GAAA,EAAK,iCAAA;AAAA,EACL,IAAA,EAAM;AACR,CAAA;AAEA,SAASA,QAAAA,CAAQ,SAAiB,IAAA,EAA6B;AAC7D,EAAA,OAAO,IAAI,cAAc,gBAAA,EAAkB,OAAA,EAAS,EAAE,OAAA,EAAS,EAAE,IAAA,EAAK,EAAG,CAAA;AAC3E;AAEO,SAAS,iBAAA,CACd,KAAA,EACA,IAAA,EACA,MAAA,EACoB;AACpB,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,MAAA,IAAa,KAAA,CAAM,WAAW,OAAA,EAAS;AAC1D,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,IAAI,CAAA,UAAA,EAAa,KAAA,CAAM,MAAM,CAAA,mDAAA,CAAA;AAAA,MAChC,GAAG,IAAI,CAAA,OAAA;AAAA,KACT;AAAA,EACF;AACA,EAAA,MAAM,UAAU,kBAAA,CAAmB,KAAA,CAAM,SAAS,CAAA,EAAG,IAAI,YAAY,MAAM,CAAA;AAC3E,EAAA,MAAM,OAAA,GAAU,CAAC,KAAA,EAA0B,KAAA,KAA0B;AACnE,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,OAAA,EAAS,KAAK,CAAA;AAC5C,IAAA,IAAI,SAAS,MAAA,EAAW;AACtB,MAAA,MAAMA,QAAAA;AAAA;AAAA,QAEJ,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,+BAAA,EAAkC,OAAA,CAAQ,WAAW,CAAA,WAAA,EAAc,cAAA,CAAe,OAAA,CAAQ,MAAM,CAAC,CAAA,CAAA,CAAA;AAAA,QACjH,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,OAClB;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,OAAA,EAAS,KAAA,CAAM,KAAK,CAAA;AAC1C,EAAA,IAAI,aAAA,CAAc,OAAA,EAAS,KAAK,CAAA,EAAG;AACjC,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,IAAI,CAAA,8BAAA,EAAiC,OAAA,CAAQ,WAAW,CAAA,2CAAA,CAAA;AAAA,MAC3D,GAAG,IAAI,CAAA,MAAA;AAAA,KACT;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,IAAuB,SAAA;AAC5C,EAAA,IAAI,MAAA,KAAW,SAAA,IAAa,MAAA,KAAW,SAAA,EAAW;AAChD,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,IAAI,CAAA,uBAAA,EAA0B,MAAM,CAAA,8CAAA,CAAA;AAAA,MACvC,GAAG,IAAI,CAAA,oBAAA;AAAA,KACT;AAAA,EACF;AACA,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,KAAA,IAAS,KAAA,CAAM,wBAAwB,MAAA,EAAW;AACvE,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,IAAI,CAAA,0DAAA,EAA6D,OAAA,CAAQ,WAAW,CAAA,CAAA;AAAA,MACvF,GAAG,IAAI,CAAA,oBAAA;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,WAAW,KAAA,EAAO;AAC5B,IAAA,KAAA,MAAW,KAAA,IAAS,CAAC,WAAA,EAAa,cAAc,CAAA,EAAY;AAC1D,MAAA,IAAI,KAAA,CAAM,KAAK,CAAA,KAAM,MAAA,EAAW;AAC9B,QAAA,MAAMA,QAAAA;AAAA,UACJ,GAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,uDAAA,EAA0D,QAAQ,WAAW,CAAA,CAAA;AAAA,UAC7F,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,SAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,YAAY,OAAA,CAAQ,cAAA;AAC1B,EAAA,MAAM,MAAA,GAAS,SAAA,IAAa,MAAA,IAAU,SAAA,GAAY,SAAA,GAAY,MAAA;AAE9D,EAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,KAAU,MAAA,GAAY,QAAQ,OAAA,EAAS,KAAA,CAAM,KAAK,CAAA,GAAI,MAAA;AAC1E,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,aAAA,CAAc,OAAA,EAAS,KAAK,CAAA,EAAG;AACxD,IAAA,MAAMA,SAAQ,CAAA,EAAG,IAAI,CAAA,mCAAA,CAAA,EAAuC,CAAA,EAAG,IAAI,CAAA,MAAA,CAAQ,CAAA;AAAA,EAC7E;AAGA,EAAA,IAAI,SAAA,KAAc,UAAU,MAAA,IAAa,WAAA,CAAY,SAAS,KAAA,EAAO,SAAA,CAAU,OAAO,CAAA,CAAA,EAAI;AACxF,IAAA,MAAM,QAAA,GAAW;AAAA,MACf,WAAW,MAAA,EAAQ,IAAA;AAAA,MACnB,cAAc,MAAA,EAAQ,OAAA;AAAA,MACtB,eAAe,SAAA,CAAU;AAAA,KAC3B;AACA,IAAA,KAAA,MAAW,KAAA,IAAS,CAAC,WAAA,EAAa,cAAA,EAAgB,eAAe,CAAA,EAAY;AAC3E,MAAA,MAAM,KAAA,GAAQ,MAAM,KAAK,CAAA;AACzB,MAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,QAAA,CAAS,KAAK,CAAA,EAAG;AACpD,QAAA,MAAMA,QAAAA;AAAA,UACJ,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,mBAAmB,SAAA,CAAU,MAAM,CAAA,IAAA,EAAO,OAAA,CAAQ,WAAW,CAAA,gBAAA,EAAmB,eAAe,KAAK,CAAC,IAAI,IAAA,CAAK,SAAA,CAAU,SAAS,KAAK,CAAC,CAAC,CAAA,SAAA,EAAY,KAAK,CAAA,yCAAA,CAAA;AAAA,UACzK,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,SAClB;AAAA,MACF;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,OAAA;AAAA,MACR,OAAA;AAAA,MACA,KAAA;AAAA,MACA,KAAA,EAAO,SAAS,SAAA,CAAU,OAAA;AAAA,MAC1B,GAAI,MAAA,GAAS,EAAE,SAAA,EAAW,MAAA,CAAO,MAAM,YAAA,EAAc,MAAA,CAAO,OAAA,EAAQ,GAAI,EAAC;AAAA,MACzE,eAAe,SAAA,CAAU,QAAA;AAAA,MACzB,oBAAoB,SAAA,CAAU,MAAA;AAAA,MAC9B,mBAAA,EAAqB;AAAA,KACvB;AAAA,EACF;AAKA,EAAA,MAAM,QAAA,GACJ,OAAA,CAAQ,MAAA,KAAW,KAAA,IAAS,WAAW,SAAA,GAClC,CAAC,OAAA,EAAS,WAAA,EAAa,cAAA,EAAgB,eAAe,CAAA,GACtD,CAAC,SAAS,eAAe,CAAA;AAChC,EAAA,MAAM,OAAA,GAAU,SAAS,MAAA,CAAO,CAAC,UAAU,KAAA,CAAM,KAAK,MAAM,MAAS,CAAA;AACrE,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG;AAC7C,IAAA,MAAMA,QAAAA;AAAA,MACJ,SAAA,GACI,CAAA,EAAG,IAAI,CAAA,qBAAA,EAAwB,SAAA,CAAU,MAAM,CAAA,IAAA,EAAO,OAAA,CAAQ,WAAW,CAAA,OAAA,EAAU,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,GACrG,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,OAAA,CAAQ,WAAW,CAAA,2CAAA,EAA8C,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,MACnG,GAAG,IAAI,CAAA,CAAA,EAAI,OAAA,CAAQ,CAAC,KAAK,OAAO,CAAA;AAAA,KAClC;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,OAAA;AAAA,IACR,OAAA;AAAA,IACA,KAAA;AAAA,IACA,KAAA;AAAA,IACA,GAAI,MAAM,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,KAAA,CAAM,SAAA,EAAU,GAAI,EAAC;AAAA,IACtE,GAAI,MAAM,YAAA,KAAiB,MAAA,GAAY,EAAE,YAAA,EAAc,KAAA,CAAM,YAAA,EAAa,GAAI,EAAC;AAAA,IAC/E,eAAe,KAAA,CAAM,aAAA;AAAA,IACrB,mBAAA,EAAqB;AAAA,GACvB;AACF","file":"chunk-KTV52MCU.js","sourcesContent":["/**\n * Rejects well-known Anvil keys and payment destinations when the RPC host\n * does not look local or private. Their private keys are published, so anyone\n * can spend what such an address receives on a public chain.\n *\n * The check uses the RPC hostname because the local chain shares Base\n * Sepolia's chain id. Both guards run at provider construction.\n */\nimport { CommerceError } from '../../core';\nimport { ANVIL_WELL_KNOWN_ACCOUNTS } from './local-chain/accounts';\n\nconst WELL_KNOWN_DEV_KEYS: ReadonlySet<string> = new Set(\n  ANVIL_WELL_KNOWN_ACCOUNTS.map((a) => a.privateKey.toLowerCase()),\n);\n\nconst WELL_KNOWN_DEV_ADDRESSES: ReadonlySet<string> = new Set(\n  ANVIL_WELL_KNOWN_ACCOUNTS.map((a) => a.address.toLowerCase()),\n);\n\n// `0x` plus 64 hex characters, the only shape `privateKeyToAccount` accepts\nconst PRIVATE_KEY_SHAPE = /^0x[0-9a-fA-F]{64}$/;\n\nexport function isWellKnownDevKey(privateKey: string): boolean {\n  return WELL_KNOWN_DEV_KEYS.has(privateKey.toLowerCase());\n}\n\nexport function isWellKnownDevAddress(address: string): boolean {\n  return WELL_KNOWN_DEV_ADDRESSES.has(address.toLowerCase());\n}\n\n/**\n * True for loopback addresses, RFC 1918 private ranges, and bare (dot-free)\n * hostnames, such as the compose service name \"anvil\".\n *\n * Bare hostnames are treated as local without resolving them. Operators must\n * point them at a private chain.\n */\nexport function isLikelyLocalOrPrivateHost(hostname: string): boolean {\n  const h = hostname.toLowerCase().replace(/^\\[|\\]$/g, '');\n  if (h === 'localhost' || h === '::1') return true;\n  if (/^127\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (/^10\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (/^192\\.168\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (/^172\\.(1[6-9]|2\\d|3[01])\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (!h.includes('.') && !h.includes(':')) return true; // bare hostname\n  return false;\n}\n\nfunction parseHostnameOrThrow(rpcUrl: string): string {\n  try {\n    return new URL(rpcUrl).hostname;\n  } catch (cause) {\n    // Never the URL itself: RPC providers commonly put an API key in the path,\n    // and this message reaches startup output and CI logs\n    throw new CommerceError('CONFIG_INVALID', 'x402 provider: rpcUrl is not a valid URL', {\n      cause,\n    });\n  }\n}\n\n/** Origin only, for diagnostics: RPC URLs often carry an API key in the path or query */\nexport function describeRpc(rpcUrl: string): string {\n  try {\n    return new URL(rpcUrl).origin;\n  } catch {\n    return '[unparseable rpcUrl]';\n  }\n}\n\n/**\n * Throws CONFIG_INVALID if `signerPrivateKey` is not shaped like a private key,\n * or if it is a well-known dev key and the RPC is not local.\n *\n * The shape check runs first, so a truncated key is reported as malformed\n * instead of passing as \"not a dev key\".\n */\nexport function assertDevKeyIsLocalOnly(rpcUrl: string, signerPrivateKey: string): void {\n  if (!PRIVATE_KEY_SHAPE.test(signerPrivateKey)) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      'x402 provider: facilitator.signerPrivateKey is not a well-formed private key ' +\n        '(expected \"0x\" followed by exactly 64 hex characters).',\n    );\n  }\n\n  if (!isWellKnownDevKey(signerPrivateKey)) return; // the operator's own key\n\n  const hostname = parseHostnameOrThrow(rpcUrl);\n\n  if (!isLikelyLocalOrPrivateHost(hostname)) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      'x402 provider: facilitator.signerPrivateKey is a well-known Anvil development key, but rpcUrl ' +\n        `${describeRpc(rpcUrl)} does not look like a local/private chain. A public dev key must never sign against ` +\n        'a public network: it is instantly drainable and can grief real settlements via nonce exhaustion. ' +\n        'Use a real facilitator key for any non-local RPC, or point rpcUrl at your local/dev chain.',\n    );\n  }\n}\n\n/**\n * Throws CONFIG_INVALID if `payTo` is a well-known Anvil address and `rpcUrl`\n * does not look local or private.\n *\n * Guards the receiving side, in every facilitator mode. `agent-commerce init`\n * defaults `payTo` to a well-known address for the local demo, and on a real\n * network that default sends every payment where anyone can sweep it.\n */\nexport function assertPayToIsNotDevAddress(rpcUrl: string, payTo: string): void {\n  if (!isWellKnownDevAddress(payTo)) return;\n\n  const hostname = parseHostnameOrThrow(rpcUrl);\n\n  if (!isLikelyLocalOrPrivateHost(hostname)) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      `x402 provider: \"payTo\" (${payTo}) is a well-known Anvil development address, but rpcUrl ` +\n        `${describeRpc(rpcUrl)} does not look like a local/private chain. The private key behind that address ` +\n        'is public knowledge, so any revenue settled to it is immediately spendable by anyone. Set ' +\n        '\"payTo\" to your own merchant wallet for any non-local RPC, or point rpcUrl at your ' +\n        'local/dev chain.',\n    );\n  }\n}\n","/**\n * What must hold before this gateway may settle a payment on the configured\n * network. Two callers share these checks: the provider runs them at\n * construction, so a library consumer who skips our config loader still gets\n * them, and the config loader runs them, so `validate` and `doctor` report\n * them too.\n *\n * Both run before any request, because a failure found in `settle()` would\n * come after the pipeline reserved the buyer's replay key.\n *\n * Imports no peer (no viem, no `@x402/*`), so the CLI can load it.\n */\nimport { CommerceError } from '../../core';\nimport { isBurnAddress, sameAddress } from './addresses';\nimport { isLikelyLocalOrPrivateHost, isWellKnownDevAddress } from './dev-key-guard';\nimport {\n  type CustomNetworks,\n  type DeploymentMode,\n  LOCAL_CHAIN_ID,\n  requireX402Network,\n  resolveDeploymentMode,\n  type X402Network,\n} from './networks';\n\n/**\n * How the gateway authenticates to a remote facilitator.\n *\n * - `none`: send no credential; use it when the facilitator accepts\n *   anonymous requests.\n * - `bearer`: send a static token; no extra peer package is needed.\n * - `cdp`: Coinbase Developer Platform. The optional peer `@coinbase/x402`,\n *   imported only for this type, signs a fresh JWT per request.\n *\n * Any other auth type is refused at config load.\n */\nexport type FacilitatorAuth =\n  | { readonly type: 'none' }\n  | { readonly type: 'bearer'; readonly token: string }\n  | { readonly type: 'cdp'; readonly apiKeyId: string; readonly apiKeySecret: string };\n\nexport type X402FacilitatorConfig =\n  | { readonly mode: 'local'; readonly signerPrivateKey: string }\n  | { readonly mode: 'remote'; readonly url: string; readonly auth: FacilitatorAuth };\n\nexport interface X402DeploymentInput {\n  readonly network: string;\n  readonly payTo: string;\n  readonly asset: string;\n  /** EIP-712 domain of the asset, as the token itself reports it */\n  readonly assetName?: string;\n  readonly assetVersion?: string;\n  readonly facilitator: X402FacilitatorConfig;\n  /** Must be `true` before anything settles on a mainnet */\n  readonly allowMainnet?: boolean;\n  /**\n   * Must be `true` on mainnet when facilitator auth is `none`. A separate\n   * decision from `allowMainnet`: it accepts settling without an account at\n   * the facilitator, under its anonymous-access limits.\n   */\n  readonly allowUnauthenticatedFacilitator?: boolean;\n  /**\n   * Allow other tokens on built-in EVM networks with explicit metadata.\n   * MPP config leaves this unset; Solana and NEAR still require USDC.\n   */\n  readonly allowOtherEvmToken?: boolean;\n  /** Error-path prefix, `payments.x402` by default */\n  readonly configPath?: string;\n  /** Settlement-recipient field named in errors, `payTo` by default */\n  readonly payToField?: string;\n  /** EVM networks declared under `payments.x402.networks` */\n  readonly customNetworks?: CustomNetworks;\n}\n\nexport interface X402Deployment {\n  readonly profile: X402Network;\n  readonly mode: DeploymentMode;\n}\n\nconst BASE_SEPOLIA = 'eip155:84532';\n\nfunction invalid(message: string, path: string): CommerceError {\n  return new CommerceError('CONFIG_INVALID', message, { details: { path } });\n}\n\n/**\n * Resolves the deployment and refuses the combinations that could move real\n * money by accident. The network must resolve first; the other checks are\n * independent.\n */\nexport function resolveX402Deployment(input: X402DeploymentInput): X402Deployment {\n  const at = input.configPath ?? 'payments.x402';\n  const payTo = input.payToField ?? 'payTo';\n  const profile = requireX402Network(input.network, `${at}.network`, input.customNetworks);\n  const mode = resolveDeploymentMode(profile);\n\n  // Local mode keeps a gas-paying key in the gateway process. A compromise\n  // could expose that key, so mainnet requires a remote facilitator.\n  if (profile.kind === 'mainnet' && input.facilitator.mode === 'local') {\n    throw invalid(\n      `${at}: network \"${profile.id}\" (${profile.displayName}) is a mainnet and cannot be served by facilitator.mode \"local\". A mainnet deployment must settle through a remote facilitator.`,\n      `${at}.facilitator.mode`,\n    );\n  }\n  // The in-process facilitator signs with a client built for the Anvil chain\n  // id, so on any other chain every settlement would fail\n  if (input.facilitator.mode === 'local' && mode !== 'local') {\n    throw invalid(\n      profile.id === BASE_SEPOLIA\n        ? `${at}: the local Anvil chain is eip155:${LOCAL_CHAIN_ID}, Anvil's default chain id; \"${BASE_SEPOLIA}\" is public Base Sepolia. Set ${at}.network to eip155:${LOCAL_CHAIN_ID}, start Anvil with its default chain id and redeploy the local contracts (npm run chain:start, npm run chain:deploy).`\n        : `${at}: facilitator.mode \"local\" serves the local Anvil chain (eip155:${LOCAL_CHAIN_ID}) only, not \"${profile.id}\" (${profile.displayName}). Use a remote facilitator.`,\n      `${at}.facilitator.mode`,\n    );\n  }\n\n  if (mode === 'mainnet' && input.allowMainnet !== true) {\n    throw invalid(\n      `${at}: network \"${profile.id}\" (${profile.displayName}) settles real funds. Set ${at}.allowMainnet: true to acknowledge this explicitly - it is never the default.`,\n      `${at}.allowMainnet`,\n    );\n  }\n\n  if (input.facilitator.mode === 'remote') {\n    assertFacilitatorUrlIsSafe(input.facilitator.url, mode, at);\n    // `@coinbase/x402` signs each request for CDP's own host and route,\n    // whatever URL is configured, so no other facilitator can accept the credential\n    if (input.facilitator.auth.type === 'cdp' && !isCdpFacilitatorUrl(input.facilitator.url)) {\n      throw invalid(\n        `${at}: facilitator.auth.type \"cdp\" signs requests for ${CDP_FACILITATOR_URL} only, so facilitator ${describeOrigin(input.facilitator.url)} cannot accept its credential. Set facilitator.url to ${CDP_FACILITATOR_URL}, or use auth.type \"bearer\" or \"none\".`,\n        `${at}.facilitator.url`,\n      );\n    }\n    // The authorization fixes recipient, amount and chain, so a facilitator\n    // cannot redirect funds. A credential adds an account: rate limits, terms\n    // and support. On mainnet, going without one is an explicit choice.\n    if (\n      mode === 'mainnet' &&\n      input.facilitator.auth.type === 'none' &&\n      input.allowUnauthenticatedFacilitator !== true\n    ) {\n      throw invalid(\n        `${at}: no credential is configured for facilitator ${describeOrigin(input.facilitator.url)} on mainnet. Set ${at}.allowUnauthenticatedFacilitator: true to accept anonymous access and the facilitator's limits, or configure facilitator.auth.`,\n        `${at}.allowUnauthenticatedFacilitator`,\n      );\n    }\n    // A blank credential reaches the facilitator as \"unauthenticated\" and fails\n    // every payment after the buyer signed. `${VAR:- }` resolving to whitespace\n    // is the usual cause.\n    for (const [field, value] of credentialFields(input.facilitator.auth)) {\n      if (value.trim() === '') {\n        throw invalid(\n          `${at}: facilitator.auth.type is \"${input.facilitator.auth.type}\" but ${field} is empty. An empty credential is refused rather than sent.`,\n          `${at}.facilitator.auth.${field}`,\n        );\n      }\n    }\n  }\n\n  // The config loader's address check refuses this too; repeated here for a\n  // library consumer who calls `createX402PaymentProvider` without it\n  if (isBurnAddress(profile, input.payTo)) {\n    throw invalid(\n      `${at}: \"${payTo}\" is the zero address. Every payment settled there is destroyed.`,\n      `${at}.${payTo}`,\n    );\n  }\n\n  // Anyone can spend from a well-known Anvil address. `dev-key-guard` refuses\n  // one behind a public RPC; this refuses one on any non-local deployment,\n  // whose RPC host says nothing about where a remote facilitator settles.\n  if (mode !== 'local' && isWellKnownDevAddress(input.payTo)) {\n    throw invalid(\n      `${at}: \"${payTo}\" (${input.payTo}) is a well-known Anvil development address and this is a ${mode} deployment. Anyone can spend what settles there. Set ${payTo} to your own merchant wallet.`,\n      `${at}.${payTo}`,\n    );\n  }\n\n  // Public built-ins require USDC unless the caller allows another EVM token.\n  // Local and declared networks have no default asset.\n  const canonical = profile.canonicalAsset;\n  if (canonical) {\n    if (!sameAddress(profile, input.asset, canonical.address)) {\n      if (input.allowOtherEvmToken !== true || profile.family !== 'evm') {\n        const rule =\n          input.allowOtherEvmToken === true\n            ? `Only an EVM network accepts another token; ${profile.displayName} settles only in its ${canonical.symbol}.`\n            : `A built-in network settles only in its ${canonical.symbol}.`;\n        throw invalid(\n          `${at}: asset ${input.asset} is not ${canonical.symbol} on ${profile.displayName} (expected ${canonical.address}). ${rule}`,\n          `${at}.asset`,\n        );\n      }\n    } else {\n      // Catch USDC domain mismatches before accepting payments; a wrong name\n      // can fail with `invalid_exact_evm_token_name_mismatch`\n      const domain = 'name' in canonical ? canonical : undefined;\n      if (domain && input.assetName !== undefined && input.assetName !== domain.name) {\n        throw invalid(\n          `${at}: assetName \"${input.assetName}\" is not the EIP-712 domain name ${canonical.symbol} reports on ${profile.displayName} (expected \"${domain.name}\"). Every payment would be refused after the buyer signed.`,\n          `${at}.assetName`,\n        );\n      }\n      if (domain && input.assetVersion !== undefined && input.assetVersion !== domain.version) {\n        throw invalid(\n          `${at}: assetVersion \"${input.assetVersion}\" is not the EIP-712 domain version ${canonical.symbol} reports on ${profile.displayName} (expected \"${domain.version}\").`,\n          `${at}.assetVersion`,\n        );\n      }\n    }\n  }\n\n  return { profile, mode };\n}\n\n/**\n * A facilitator sees every payment authorization this gateway handles. Plain\n * HTTP puts those on the wire in the clear and lets anyone in the path rewrite\n * a settlement result, so it is allowed only to a local or private host, and\n * never on a mainnet.\n */\nfunction assertFacilitatorUrlIsSafe(url: string, mode: DeploymentMode, at: string): void {\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch (cause) {\n    throw new CommerceError('CONFIG_INVALID', `${at}: facilitator.url is not a valid URL`, {\n      cause,\n      details: { path: `${at}.facilitator.url` },\n    });\n  }\n\n  if (parsed.protocol === 'https:') return;\n  if (parsed.protocol !== 'http:') {\n    throw invalid(\n      `${at}: facilitator ${describeOrigin(url)} must be reached over https (or http on a local/private host); got \"${parsed.protocol}//\"`,\n      `${at}.facilitator.url`,\n    );\n  }\n  if (mode !== 'mainnet' && isLikelyLocalOrPrivateHost(parsed.hostname)) return;\n\n  // The origin, never the whole URL: the path can carry a tenant or an API\n  // key, and this message reaches `validate`, `doctor`, startup output and CI logs\n  throw invalid(\n    `${at}: facilitator ${describeOrigin(url)} is reached over plain HTTP. Payment authorizations and settlement results would travel unencrypted. Use https, or point at a local/private host on a non-mainnet deployment.`,\n    `${at}.facilitator.url`,\n  );\n}\n\n/** The facilitator URL `@coinbase/x402` signs its JWTs for */\nexport const CDP_FACILITATOR_URL = 'https://api.cdp.coinbase.com/platform/v2/x402';\n\n// The SDK client strips trailing slashes before appending its route\nfunction isCdpFacilitatorUrl(url: string): boolean {\n  try {\n    const parsed = new URL(url);\n    const expected = new URL(CDP_FACILITATOR_URL);\n    return (\n      parsed.origin === expected.origin &&\n      parsed.pathname.replace(/\\/+$/, '') === expected.pathname &&\n      parsed.search === ''\n    );\n  } catch {\n    return false;\n  }\n}\n\n// Origin only: a facilitator URL can carry a tenant path or an API key\nfunction describeOrigin(url: string): string {\n  try {\n    return new URL(url).origin;\n  } catch {\n    return '[unparseable facilitator.url]';\n  }\n}\n\n// The secret-bearing fields of an auth block, for emptiness checks only. Never logged\nfunction credentialFields(auth: FacilitatorAuth): readonly (readonly [string, string])[] {\n  switch (auth.type) {\n    case 'bearer':\n      return [['token', auth.token]];\n    case 'cdp':\n      return [\n        ['apiKeyId', auth.apiKeyId],\n        ['apiKeySecret', auth.apiKeySecret],\n      ];\n    default:\n      return [];\n  }\n}\n","/**\n * Resolves an x402 option into offer terms at config load, so `validate`\n * reports invalid options before startup. This module uses no SDK.\n *\n * Omitted assets use `canonicalAsset`. Overrides for the default token must\n * match its metadata; another token needs its own, including the EIP-712 domain\n * on EVM.\n */\nimport { CommerceError } from '../../core';\nimport { isBurnAddress, normalizeAddress, sameAddress } from './addresses';\nimport { type CustomNetworks, requireX402Network, type X402Network } from './networks';\n\nexport interface X402OptionInput {\n  readonly scheme?: string;\n  readonly network: string;\n  readonly payTo: string;\n  readonly asset?: string;\n  readonly assetName?: string;\n  readonly assetVersion?: string;\n  readonly assetDecimals?: number;\n  /** `eip3009` (the default) or `permit2`; EVM only */\n  readonly assetTransferMethod?: string;\n}\n\nexport interface ResolvedX402Option {\n  readonly scheme: 'exact';\n  readonly network: X402Network;\n  readonly payTo: string;\n  readonly asset: string;\n  /** EIP-712 domain; EVM only */\n  readonly assetName?: string;\n  readonly assetVersion?: string;\n  readonly assetDecimals: number;\n  /**\n   * Default token symbol when `asset` is omitted; resource prices must use\n   * this symbol or USD\n   */\n  readonly defaultAssetSymbol?: string;\n  /** How the buyer authorizes the transfer; always `eip3009` off EVM */\n  readonly assetTransferMethod: X402AssetTransferMethod;\n}\n\n/**\n * Names health components by network, asset and payee for discovery matching.\n * Lowercase EVM addresses so case variants identify the same offer.\n */\nexport function x402OfferName(offer: {\n  readonly network: string;\n  readonly asset: string;\n  readonly payTo: string;\n}): string {\n  const evm = offer.network.startsWith('eip155:');\n  const address = (value: string) => (evm ? value.toLowerCase() : value);\n  return `${offer.network} ${address(offer.asset)} ${address(offer.payTo)}`;\n}\n\n/** EIP-3009 `transferWithAuthorization`, or Permit2 with a prior token allowance */\nexport type X402AssetTransferMethod = 'eip3009' | 'permit2';\n\n// Incorrect EIP-712 domain values invalidate the buyer's signature\nconst FIELD_MEANINGS = {\n  assetName: 'EIP-712 domain name',\n  assetVersion: 'EIP-712 domain version',\n  assetDecimals: 'decimals',\n} as const;\n\nconst ADDRESS_SHAPES = {\n  evm: '\"0x\" followed by 40 hex characters',\n  svm: 'a base58 public key of 32 bytes',\n  near: 'a NEAR account ID: 2 to 64 lowercase characters, digits and single \"-\", \"_\" or \".\" separators',\n} as const;\n\nfunction invalid(message: string, path: string): CommerceError {\n  return new CommerceError('CONFIG_INVALID', message, { details: { path } });\n}\n\nexport function resolveX402Option(\n  input: X402OptionInput,\n  path: string,\n  custom?: CustomNetworks,\n): ResolvedX402Option {\n  if (input.scheme !== undefined && input.scheme !== 'exact') {\n    throw invalid(\n      `${path}.scheme: \"${input.scheme}\" is not supported; the only x402 scheme is \"exact\"`,\n      `${path}.scheme`,\n    );\n  }\n  const network = requireX402Network(input.network, `${path}.network`, custom);\n  const address = (field: 'payTo' | 'asset', value: string): string => {\n    const wire = normalizeAddress(network, value);\n    if (wire === undefined) {\n      throw invalid(\n        // The value is not echoed: a swapped variable could put a key here\n        `${path}.${field} is not a plausible address on ${network.displayName} (expected ${ADDRESS_SHAPES[network.family]})`,\n        `${path}.${field}`,\n      );\n    }\n    return wire;\n  };\n\n  const payTo = address('payTo', input.payTo);\n  if (isBurnAddress(network, payTo)) {\n    throw invalid(\n      `${path}.payTo is the zero address of ${network.displayName}. Every payment settled there is destroyed.`,\n      `${path}.payTo`,\n    );\n  }\n\n  const method = input.assetTransferMethod ?? 'eip3009';\n  if (method !== 'eip3009' && method !== 'permit2') {\n    throw invalid(\n      `${path}.assetTransferMethod: \"${method}\" is not supported; use \"eip3009\" or \"permit2\"`,\n      `${path}.assetTransferMethod`,\n    );\n  }\n  if (network.family !== 'evm' && input.assetTransferMethod !== undefined) {\n    throw invalid(\n      `${path}.assetTransferMethod applies to EVM networks only, not to ${network.displayName}`,\n      `${path}.assetTransferMethod`,\n    );\n  }\n\n  if (network.family !== 'evm') {\n    for (const field of ['assetName', 'assetVersion'] as const) {\n      if (input[field] !== undefined) {\n        throw invalid(\n          `${path}.${field}: an EIP-712 domain applies to EVM tokens only, not to ${network.displayName}`,\n          `${path}.${field}`,\n        );\n      }\n    }\n  }\n\n  const canonical = network.canonicalAsset;\n  const domain = canonical && 'name' in canonical ? canonical : undefined;\n\n  const asset = input.asset !== undefined ? address('asset', input.asset) : undefined;\n  if (asset !== undefined && isBurnAddress(network, asset)) {\n    throw invalid(`${path}.asset must not be the zero address`, `${path}.asset`);\n  }\n\n  // The default asset applies when the option names none or names it exactly\n  if (canonical && (asset === undefined || sameAddress(network, asset, canonical.address))) {\n    const expected = {\n      assetName: domain?.name,\n      assetVersion: domain?.version,\n      assetDecimals: canonical.decimals,\n    };\n    for (const field of ['assetName', 'assetVersion', 'assetDecimals'] as const) {\n      const given = input[field];\n      if (given !== undefined && given !== expected[field]) {\n        throw invalid(\n          `${path}.${field} does not match ${canonical.symbol} on ${network.displayName}, which reports ${FIELD_MEANINGS[field]} ${JSON.stringify(expected[field])}. Remove ${field}, or set asset to the token it describes.`,\n          `${path}.${field}`,\n        );\n      }\n    }\n    return {\n      scheme: 'exact',\n      network,\n      payTo,\n      asset: asset ?? canonical.address,\n      ...(domain ? { assetName: domain.name, assetVersion: domain.version } : {}),\n      assetDecimals: canonical.decimals,\n      defaultAssetSymbol: canonical.symbol,\n      assetTransferMethod: method,\n    };\n  }\n\n  // Another token: nothing about it can be borrowed from the default. The\n  // token's EIP-712 domain matters to EIP-3009 only: a Permit2 buyer signs\n  // Permit2's own domain.\n  const required =\n    network.family === 'evm' && method === 'eip3009'\n      ? (['asset', 'assetName', 'assetVersion', 'assetDecimals'] as const)\n      : (['asset', 'assetDecimals'] as const);\n  const missing = required.filter((field) => input[field] === undefined);\n  if (asset === undefined || missing.length > 0) {\n    throw invalid(\n      canonical\n        ? `${path}: a token other than ${canonical.symbol} on ${network.displayName} needs ${missing.join(', ')}`\n        : `${path}: ${network.displayName} has no default asset, so the option needs ${missing.join(', ')}`,\n      `${path}.${missing[0] ?? 'asset'}`,\n    );\n  }\n  return {\n    scheme: 'exact',\n    network,\n    payTo,\n    asset,\n    ...(input.assetName !== undefined ? { assetName: input.assetName } : {}),\n    ...(input.assetVersion !== undefined ? { assetVersion: input.assetVersion } : {}),\n    assetDecimals: input.assetDecimals as number,\n    assetTransferMethod: method,\n  };\n}\n"]}
+{"version":3,"sources":["../../src/payments/x402/dev-key-guard.ts","../../src/payments/x402/guardrails.ts","../../src/payments/x402/options.ts"],"names":["invalid"],"mappings":";;;;AAWA,IAAM,sBAA2C,IAAI,GAAA;AAAA,EACnD,0BAA0B,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,UAAA,CAAW,aAAa;AACjE,CAAA;AAEA,IAAM,2BAAgD,IAAI,GAAA;AAAA,EACxD,0BAA0B,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,OAAA,CAAQ,aAAa;AAC9D,CAAA;AAGA,IAAM,iBAAA,GAAoB,qBAAA;AAEnB,SAAS,kBAAkB,UAAA,EAA6B;AAC7D,EAAA,OAAO,mBAAA,CAAoB,GAAA,CAAI,UAAA,CAAW,WAAA,EAAa,CAAA;AACzD;AAEO,SAAS,sBAAsB,OAAA,EAA0B;AAC9D,EAAA,OAAO,wBAAA,CAAyB,GAAA,CAAI,OAAA,CAAQ,WAAA,EAAa,CAAA;AAC3D;AASO,SAAS,2BAA2B,QAAA,EAA2B;AACpE,EAAA,MAAM,IAAI,QAAA,CAAS,WAAA,EAAY,CAAE,OAAA,CAAQ,YAAY,EAAE,CAAA;AACvD,EAAA,IAAI,CAAA,KAAM,WAAA,IAAe,CAAA,KAAM,KAAA,EAAO,OAAO,IAAA;AAC7C,EAAA,IAAI,kCAAA,CAAmC,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AACvD,EAAA,IAAI,iCAAA,CAAkC,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AACtD,EAAA,IAAI,8BAAA,CAA+B,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AACnD,EAAA,IAAI,6CAAA,CAA8C,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AAClE,EAAA,IAAI,CAAC,CAAA,CAAE,QAAA,CAAS,GAAG,CAAA,IAAK,CAAC,CAAA,CAAE,QAAA,CAAS,GAAG,CAAA,EAAG,OAAO,IAAA;AACjD,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,qBAAqB,MAAA,EAAwB;AACpD,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,MAAM,CAAA,CAAE,QAAA;AAAA,EACzB,SAAS,KAAA,EAAO;AAGd,IAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,0CAAA,EAA4C;AAAA,MACpF;AAAA,KACD,CAAA;AAAA,EACH;AACF;AAGO,SAAS,YAAY,MAAA,EAAwB;AAClD,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,MAAM,CAAA,CAAE,MAAA;AAAA,EACzB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,sBAAA;AAAA,EACT;AACF;AASO,SAAS,uBAAA,CAAwB,QAAgB,gBAAA,EAAgC;AACtF,EAAA,IAAI,CAAC,iBAAA,CAAkB,IAAA,CAAK,gBAAgB,CAAA,EAAG;AAC7C,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,iBAAA,CAAkB,gBAAgB,CAAA,EAAG;AAE1C,EAAA,MAAM,QAAA,GAAW,qBAAqB,MAAM,CAAA;AAE5C,EAAA,IAAI,CAAC,0BAAA,CAA2B,QAAQ,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,CAAA,8FAAA,EACK,WAAA,CAAY,MAAM,CAAC,CAAA,+QAAA;AAAA,KAG1B;AAAA,EACF;AACF;AAUO,SAAS,0BAAA,CAA2B,QAAgB,KAAA,EAAqB;AAC9E,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAK,CAAA,EAAG;AAEnC,EAAA,MAAM,QAAA,GAAW,qBAAqB,MAAM,CAAA;AAE5C,EAAA,IAAI,CAAC,0BAAA,CAA2B,QAAQ,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,KAAK,CAAA,wDAAA,EAC3B,WAAA,CAAY,MAAM,CAAC,CAAA,4QAAA;AAAA,KAI1B;AAAA,EACF;AACF;;;AC7CA,IAAM,YAAA,GAAe,cAAA;AAErB,SAAS,OAAA,CAAQ,SAAiB,IAAA,EAA6B;AAC7D,EAAA,OAAO,IAAI,cAAc,gBAAA,EAAkB,OAAA,EAAS,EAAE,OAAA,EAAS,EAAE,IAAA,EAAK,EAAG,CAAA;AAC3E;AAOO,SAAS,sBAAsB,KAAA,EAA4C;AAChF,EAAA,MAAM,EAAA,GAAK,MAAM,UAAA,IAAc,eAAA;AAC/B,EAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,IAAc,OAAA;AAClC,EAAA,MAAM,OAAA,GAAU,mBAAmB,KAAA,CAAM,OAAA,EAAS,GAAG,EAAE,CAAA,QAAA,CAAA,EAAY,MAAM,cAAc,CAAA;AACvF,EAAA,MAAM,IAAA,GAAO,sBAAsB,OAAO,CAAA;AAI1C,EAAA,IAAI,QAAQ,IAAA,KAAS,SAAA,IAAa,KAAA,CAAM,WAAA,CAAY,SAAS,OAAA,EAAS;AACpE,IAAA,MAAM,OAAA;AAAA,MACJ,GAAG,EAAE,CAAA,WAAA,EAAc,QAAQ,EAAE,CAAA,GAAA,EAAM,QAAQ,WAAW,CAAA,+HAAA,CAAA;AAAA,MACtD,GAAG,EAAE,CAAA,iBAAA;AAAA,KACP;AAAA,EACF;AAGA,EAAA,IAAI,KAAA,CAAM,WAAA,CAAY,IAAA,KAAS,OAAA,IAAW,SAAS,OAAA,EAAS;AAC1D,IAAA,MAAM,OAAA;AAAA,MACJ,OAAA,CAAQ,OAAO,YAAA,GACX,CAAA,EAAG,EAAE,CAAA,kCAAA,EAAqC,cAAc,CAAA,6BAAA,EAAgC,YAAY,CAAA,8BAAA,EAAiC,EAAE,sBAAsB,cAAc,CAAA,qHAAA,CAAA,GAC3K,CAAA,EAAG,EAAE,CAAA,gEAAA,EAAmE,cAAc,gBAAgB,OAAA,CAAQ,EAAE,CAAA,GAAA,EAAM,OAAA,CAAQ,WAAW,CAAA,4BAAA,CAAA;AAAA,MAC7I,GAAG,EAAE,CAAA,iBAAA;AAAA,KACP;AAAA,EACF;AAEA,EAAA,IAAI,IAAA,KAAS,SAAA,IAAa,KAAA,CAAM,YAAA,KAAiB,IAAA,EAAM;AACrD,IAAA,MAAM,OAAA;AAAA,MACJ,CAAA,EAAG,EAAE,CAAA,WAAA,EAAc,OAAA,CAAQ,EAAE,CAAA,GAAA,EAAM,OAAA,CAAQ,WAAW,CAAA,0BAAA,EAA6B,EAAE,CAAA,6EAAA,CAAA;AAAA,MACrF,GAAG,EAAE,CAAA,aAAA;AAAA,KACP;AAAA,EACF;AAEA,EAAA,IAAI,KAAA,CAAM,WAAA,CAAY,IAAA,KAAS,QAAA,EAAU;AACvC,IAAA,0BAAA,CAA2B,KAAA,CAAM,WAAA,CAAY,GAAA,EAAK,IAAA,EAAM,EAAE,CAAA;AAG1D,IAAA,IAAI,KAAA,CAAM,WAAA,CAAY,IAAA,CAAK,IAAA,KAAS,KAAA,IAAS,CAAC,mBAAA,CAAoB,KAAA,CAAM,WAAA,CAAY,GAAG,CAAA,EAAG;AACxF,MAAA,MAAM,OAAA;AAAA,QACJ,CAAA,EAAG,EAAE,CAAA,iDAAA,EAAoD,mBAAmB,CAAA,sBAAA,EAAyB,cAAA,CAAe,KAAA,CAAM,WAAA,CAAY,GAAG,CAAC,CAAA,sDAAA,EAAyD,mBAAmB,CAAA,sCAAA,CAAA;AAAA,QACtN,GAAG,EAAE,CAAA,gBAAA;AAAA,OACP;AAAA,IACF;AAIA,IAAA,IACE,IAAA,KAAS,aACT,KAAA,CAAM,WAAA,CAAY,KAAK,IAAA,KAAS,MAAA,IAChC,KAAA,CAAM,+BAAA,KAAoC,IAAA,EAC1C;AACA,MAAA,MAAM,OAAA;AAAA,QACJ,CAAA,EAAG,EAAE,CAAA,8CAAA,EAAiD,cAAA,CAAe,MAAM,WAAA,CAAY,GAAG,CAAC,CAAA,iBAAA,EAAoB,EAAE,CAAA,8HAAA,CAAA;AAAA,QACjH,GAAG,EAAE,CAAA,gCAAA;AAAA,OACP;AAAA,IACF;AAIA,IAAA,KAAA,MAAW,CAAC,OAAO,KAAK,CAAA,IAAK,iBAAiB,KAAA,CAAM,WAAA,CAAY,IAAI,CAAA,EAAG;AACrE,MAAA,IAAI,KAAA,CAAM,IAAA,EAAK,KAAM,EAAA,EAAI;AACvB,QAAA,MAAM,OAAA;AAAA,UACJ,CAAA,EAAG,EAAE,CAAA,4BAAA,EAA+B,KAAA,CAAM,YAAY,IAAA,CAAK,IAAI,SAAS,KAAK,CAAA,2DAAA,CAAA;AAAA,UAC7E,CAAA,EAAG,EAAE,CAAA,kBAAA,EAAqB,KAAK,CAAA;AAAA,SACjC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,EAAA,IAAI,aAAA,CAAc,OAAA,EAAS,KAAA,CAAM,KAAK,CAAA,EAAG;AACvC,IAAA,MAAM,OAAA;AAAA,MACJ,CAAA,EAAG,EAAE,CAAA,GAAA,EAAM,KAAK,CAAA,gEAAA,CAAA;AAAA,MAChB,CAAA,EAAG,EAAE,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,KAChB;AAAA,EACF;AAKA,EAAA,IAAI,IAAA,KAAS,OAAA,IAAW,qBAAA,CAAsB,KAAA,CAAM,KAAK,CAAA,EAAG;AAC1D,IAAA,MAAM,OAAA;AAAA,MACJ,CAAA,EAAG,EAAE,CAAA,GAAA,EAAM,KAAK,CAAA,GAAA,EAAM,MAAM,KAAK,CAAA,0DAAA,EAA6D,IAAI,CAAA,sDAAA,EAAyD,KAAK,CAAA,6BAAA,CAAA;AAAA,MAChK,CAAA,EAAG,EAAE,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,KAChB;AAAA,EACF;AAIA,EAAA,MAAM,YAAY,OAAA,CAAQ,cAAA;AAC1B,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,IAAI,CAAC,WAAA,CAAY,OAAA,EAAS,MAAM,KAAA,EAAO,SAAA,CAAU,OAAO,CAAA,EAAG;AACzD,MAAA,IAAI,KAAA,CAAM,kBAAA,KAAuB,IAAA,IAAQ,OAAA,CAAQ,WAAW,KAAA,EAAO;AACjE,QAAA,MAAM,IAAA,GACJ,KAAA,CAAM,kBAAA,KAAuB,IAAA,GACzB,CAAA,2CAAA,EAA8C,OAAA,CAAQ,WAAW,CAAA,qBAAA,EAAwB,SAAA,CAAU,MAAM,CAAA,CAAA,CAAA,GACzG,CAAA,uCAAA,EAA0C,UAAU,MAAM,CAAA,CAAA,CAAA;AAChE,QAAA,MAAM,OAAA;AAAA,UACJ,CAAA,EAAG,EAAE,CAAA,QAAA,EAAW,KAAA,CAAM,KAAK,CAAA,QAAA,EAAW,SAAA,CAAU,MAAM,CAAA,IAAA,EAAO,QAAQ,WAAW,CAAA,WAAA,EAAc,SAAA,CAAU,OAAO,MAAM,IAAI,CAAA,CAAA;AAAA,UACzH,GAAG,EAAE,CAAA,MAAA;AAAA,SACP;AAAA,MACF;AAAA,IACF,CAAA,MAAO;AAGL,MAAA,MAAM,MAAA,GAAS,MAAA,IAAU,SAAA,GAAY,SAAA,GAAY,MAAA;AACjD,MAAA,IAAI,UAAU,KAAA,CAAM,SAAA,KAAc,UAAa,KAAA,CAAM,SAAA,KAAc,OAAO,IAAA,EAAM;AAC9E,QAAA,MAAM,OAAA;AAAA,UACJ,CAAA,EAAG,EAAE,CAAA,aAAA,EAAgB,KAAA,CAAM,SAAS,CAAA,iCAAA,EAAoC,SAAA,CAAU,MAAM,CAAA,YAAA,EAAe,OAAA,CAAQ,WAAW,CAAA,YAAA,EAAe,OAAO,IAAI,CAAA,0DAAA,CAAA;AAAA,UACpJ,GAAG,EAAE,CAAA,UAAA;AAAA,SACP;AAAA,MACF;AACA,MAAA,IAAI,UAAU,KAAA,CAAM,YAAA,KAAiB,UAAa,KAAA,CAAM,YAAA,KAAiB,OAAO,OAAA,EAAS;AACvF,QAAA,MAAM,OAAA;AAAA,UACJ,CAAA,EAAG,EAAE,CAAA,gBAAA,EAAmB,KAAA,CAAM,YAAY,CAAA,oCAAA,EAAuC,SAAA,CAAU,MAAM,CAAA,YAAA,EAAe,OAAA,CAAQ,WAAW,CAAA,YAAA,EAAe,OAAO,OAAO,CAAA,GAAA,CAAA;AAAA,UAChK,GAAG,EAAE,CAAA,aAAA;AAAA,SACP;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AACzB;AAQA,SAAS,0BAAA,CAA2B,GAAA,EAAa,IAAA,EAAsB,EAAA,EAAkB;AACvF,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,CAAA,EAAG,EAAE,CAAA,oCAAA,CAAA,EAAwC;AAAA,MACrF,KAAA;AAAA,MACA,OAAA,EAAS,EAAE,IAAA,EAAM,CAAA,EAAG,EAAE,CAAA,gBAAA,CAAA;AAAmB,KAC1C,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,MAAA,CAAO,aAAa,QAAA,EAAU;AAClC,EAAA,IAAI,MAAA,CAAO,aAAa,OAAA,EAAS;AAC/B,IAAA,MAAM,OAAA;AAAA,MACJ,CAAA,EAAG,EAAE,CAAA,cAAA,EAAiB,cAAA,CAAe,GAAG,CAAC,CAAA,oEAAA,EAAuE,OAAO,QAAQ,CAAA,GAAA,CAAA;AAAA,MAC/H,GAAG,EAAE,CAAA,gBAAA;AAAA,KACP;AAAA,EACF;AACA,EAAA,IAAI,IAAA,KAAS,SAAA,IAAa,0BAAA,CAA2B,MAAA,CAAO,QAAQ,CAAA,EAAG;AAIvE,EAAA,MAAM,OAAA;AAAA,IACJ,CAAA,EAAG,EAAE,CAAA,cAAA,EAAiB,cAAA,CAAe,GAAG,CAAC,CAAA,6KAAA,CAAA;AAAA,IACzC,GAAG,EAAE,CAAA,gBAAA;AAAA,GACP;AACF;AAGO,IAAM,mBAAA,GAAsB,+CAAA;AAGnC,SAAS,oBAAoB,GAAA,EAAsB;AACjD,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,GAAG,CAAA;AAC1B,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,mBAAmB,CAAA;AAC5C,IAAA,OACE,MAAA,CAAO,MAAA,KAAW,QAAA,CAAS,MAAA,IAC3B,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,KAAM,QAAA,CAAS,QAAA,IACjD,OAAO,MAAA,KAAW,EAAA;AAAA,EAEtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAGA,SAAS,eAAe,GAAA,EAAqB;AAC3C,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,GAAG,CAAA,CAAE,MAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,+BAAA;AAAA,EACT;AACF;AAGA,SAAS,iBAAiB,IAAA,EAA+D;AACvF,EAAA,QAAQ,KAAK,IAAA;AAAM,IACjB,KAAK,QAAA;AACH,MAAA,OAAO,CAAC,CAAC,OAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA;AAAA,IAC/B,KAAK,KAAA;AACH,MAAA,OAAO;AAAA,QACL,CAAC,UAAA,EAAY,IAAA,CAAK,QAAQ,CAAA;AAAA,QAC1B,CAAC,cAAA,EAAgB,IAAA,CAAK,YAAY;AAAA,OACpC;AAAA,IACF;AACE,MAAA,OAAO,EAAC;AAAA;AAEd;;;ACjPO,SAAS,cAAc,KAAA,EAInB;AACT,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,SAAS,CAAA;AAC9C,EAAA,MAAM,UAAU,CAAC,KAAA,KAAmB,GAAA,GAAM,KAAA,CAAM,aAAY,GAAI,KAAA;AAChE,EAAA,OAAO,CAAA,EAAG,KAAA,CAAM,OAAO,CAAA,CAAA,EAAI,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAC,CAAA,CAAA,EAAI,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAC,CAAA,CAAA;AACzE;AAMA,IAAM,cAAA,GAAiB;AAAA,EACrB,SAAA,EAAW,qBAAA;AAAA,EACX,YAAA,EAAc,wBAAA;AAAA,EACd,aAAA,EAAe;AACjB,CAAA;AAEA,IAAM,cAAA,GAAiB;AAAA,EACrB,GAAA,EAAK,oCAAA;AAAA,EACL,GAAA,EAAK,iCAAA;AAAA,EACL,IAAA,EAAM;AACR,CAAA;AAEA,SAASA,QAAAA,CAAQ,SAAiB,IAAA,EAA6B;AAC7D,EAAA,OAAO,IAAI,cAAc,gBAAA,EAAkB,OAAA,EAAS,EAAE,OAAA,EAAS,EAAE,IAAA,EAAK,EAAG,CAAA;AAC3E;AAEO,SAAS,iBAAA,CACd,KAAA,EACA,IAAA,EACA,MAAA,EACoB;AACpB,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,MAAA,IAAa,KAAA,CAAM,WAAW,OAAA,EAAS;AAC1D,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,IAAI,CAAA,UAAA,EAAa,KAAA,CAAM,MAAM,CAAA,mDAAA,CAAA;AAAA,MAChC,GAAG,IAAI,CAAA,OAAA;AAAA,KACT;AAAA,EACF;AACA,EAAA,MAAM,UAAU,kBAAA,CAAmB,KAAA,CAAM,SAAS,CAAA,EAAG,IAAI,YAAY,MAAM,CAAA;AAC3E,EAAA,MAAM,OAAA,GAAU,CAAC,KAAA,EAA0B,KAAA,KAA0B;AACnE,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,OAAA,EAAS,KAAK,CAAA;AAC5C,IAAA,IAAI,SAAS,MAAA,EAAW;AACtB,MAAA,MAAMA,QAAAA;AAAA;AAAA,QAEJ,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,+BAAA,EAAkC,OAAA,CAAQ,WAAW,CAAA,WAAA,EAAc,cAAA,CAAe,OAAA,CAAQ,MAAM,CAAC,CAAA,CAAA,CAAA;AAAA,QACjH,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,OAClB;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,OAAA,EAAS,KAAA,CAAM,KAAK,CAAA;AAC1C,EAAA,IAAI,aAAA,CAAc,OAAA,EAAS,KAAK,CAAA,EAAG;AACjC,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,IAAI,CAAA,8BAAA,EAAiC,OAAA,CAAQ,WAAW,CAAA,2CAAA,CAAA;AAAA,MAC3D,GAAG,IAAI,CAAA,MAAA;AAAA,KACT;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,IAAuB,SAAA;AAC5C,EAAA,IAAI,MAAA,KAAW,SAAA,IAAa,MAAA,KAAW,SAAA,EAAW;AAChD,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,IAAI,CAAA,uBAAA,EAA0B,MAAM,CAAA,8CAAA,CAAA;AAAA,MACvC,GAAG,IAAI,CAAA,oBAAA;AAAA,KACT;AAAA,EACF;AACA,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,KAAA,IAAS,KAAA,CAAM,wBAAwB,MAAA,EAAW;AACvE,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,IAAI,CAAA,0DAAA,EAA6D,OAAA,CAAQ,WAAW,CAAA,CAAA;AAAA,MACvF,GAAG,IAAI,CAAA,oBAAA;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,WAAW,KAAA,EAAO;AAC5B,IAAA,KAAA,MAAW,KAAA,IAAS,CAAC,WAAA,EAAa,cAAc,CAAA,EAAY;AAC1D,MAAA,IAAI,KAAA,CAAM,KAAK,CAAA,KAAM,MAAA,EAAW;AAC9B,QAAA,MAAMA,QAAAA;AAAA,UACJ,GAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,uDAAA,EAA0D,QAAQ,WAAW,CAAA,CAAA;AAAA,UAC7F,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,SAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,YAAY,OAAA,CAAQ,cAAA;AAC1B,EAAA,MAAM,MAAA,GAAS,SAAA,IAAa,MAAA,IAAU,SAAA,GAAY,SAAA,GAAY,MAAA;AAE9D,EAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,KAAU,MAAA,GAAY,QAAQ,OAAA,EAAS,KAAA,CAAM,KAAK,CAAA,GAAI,MAAA;AAC1E,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,aAAA,CAAc,OAAA,EAAS,KAAK,CAAA,EAAG;AACxD,IAAA,MAAMA,SAAQ,CAAA,EAAG,IAAI,CAAA,mCAAA,CAAA,EAAuC,CAAA,EAAG,IAAI,CAAA,MAAA,CAAQ,CAAA;AAAA,EAC7E;AAGA,EAAA,IAAI,SAAA,KAAc,UAAU,MAAA,IAAa,WAAA,CAAY,SAAS,KAAA,EAAO,SAAA,CAAU,OAAO,CAAA,CAAA,EAAI;AACxF,IAAA,MAAM,QAAA,GAAW;AAAA,MACf,WAAW,MAAA,EAAQ,IAAA;AAAA,MACnB,cAAc,MAAA,EAAQ,OAAA;AAAA,MACtB,eAAe,SAAA,CAAU;AAAA,KAC3B;AACA,IAAA,KAAA,MAAW,KAAA,IAAS,CAAC,WAAA,EAAa,cAAA,EAAgB,eAAe,CAAA,EAAY;AAC3E,MAAA,MAAM,KAAA,GAAQ,MAAM,KAAK,CAAA;AACzB,MAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,QAAA,CAAS,KAAK,CAAA,EAAG;AACpD,QAAA,MAAMA,QAAAA;AAAA,UACJ,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,mBAAmB,SAAA,CAAU,MAAM,CAAA,IAAA,EAAO,OAAA,CAAQ,WAAW,CAAA,gBAAA,EAAmB,eAAe,KAAK,CAAC,IAAI,IAAA,CAAK,SAAA,CAAU,SAAS,KAAK,CAAC,CAAC,CAAA,SAAA,EAAY,KAAK,CAAA,yCAAA,CAAA;AAAA,UACzK,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,SAClB;AAAA,MACF;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,OAAA;AAAA,MACR,OAAA;AAAA,MACA,KAAA;AAAA,MACA,KAAA,EAAO,SAAS,SAAA,CAAU,OAAA;AAAA,MAC1B,GAAI,MAAA,GAAS,EAAE,SAAA,EAAW,MAAA,CAAO,MAAM,YAAA,EAAc,MAAA,CAAO,OAAA,EAAQ,GAAI,EAAC;AAAA,MACzE,eAAe,SAAA,CAAU,QAAA;AAAA,MACzB,oBAAoB,SAAA,CAAU,MAAA;AAAA,MAC9B,mBAAA,EAAqB;AAAA,KACvB;AAAA,EACF;AAKA,EAAA,MAAM,QAAA,GACJ,OAAA,CAAQ,MAAA,KAAW,KAAA,IAAS,WAAW,SAAA,GAClC,CAAC,OAAA,EAAS,WAAA,EAAa,cAAA,EAAgB,eAAe,CAAA,GACtD,CAAC,SAAS,eAAe,CAAA;AAChC,EAAA,MAAM,OAAA,GAAU,SAAS,MAAA,CAAO,CAAC,UAAU,KAAA,CAAM,KAAK,MAAM,MAAS,CAAA;AACrE,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG;AAC7C,IAAA,MAAMA,QAAAA;AAAA,MACJ,SAAA,GACI,CAAA,EAAG,IAAI,CAAA,qBAAA,EAAwB,SAAA,CAAU,MAAM,CAAA,IAAA,EAAO,OAAA,CAAQ,WAAW,CAAA,OAAA,EAAU,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,GACrG,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,OAAA,CAAQ,WAAW,CAAA,2CAAA,EAA8C,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,MACnG,GAAG,IAAI,CAAA,CAAA,EAAI,OAAA,CAAQ,CAAC,KAAK,OAAO,CAAA;AAAA,KAClC;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,OAAA;AAAA,IACR,OAAA;AAAA,IACA,KAAA;AAAA,IACA,KAAA;AAAA,IACA,GAAI,MAAM,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,KAAA,CAAM,SAAA,EAAU,GAAI,EAAC;AAAA,IACtE,GAAI,MAAM,YAAA,KAAiB,MAAA,GAAY,EAAE,YAAA,EAAc,KAAA,CAAM,YAAA,EAAa,GAAI,EAAC;AAAA,IAC/E,eAAe,KAAA,CAAM,aAAA;AAAA,IACrB,mBAAA,EAAqB;AAAA,GACvB;AACF","file":"chunk-WYOGIANL.js","sourcesContent":["/**\n * Rejects well-known Anvil keys and payment destinations when the RPC host\n * does not look local or private. Their private keys are published, so anyone\n * can spend what such an address receives on a public chain.\n *\n * The check uses the RPC hostname because the local chain shares Base\n * Sepolia's chain id. Both guards run at provider construction.\n */\nimport { CommerceError } from '../../core';\nimport { ANVIL_WELL_KNOWN_ACCOUNTS } from './local-chain/accounts';\n\nconst WELL_KNOWN_DEV_KEYS: ReadonlySet<string> = new Set(\n  ANVIL_WELL_KNOWN_ACCOUNTS.map((a) => a.privateKey.toLowerCase()),\n);\n\nconst WELL_KNOWN_DEV_ADDRESSES: ReadonlySet<string> = new Set(\n  ANVIL_WELL_KNOWN_ACCOUNTS.map((a) => a.address.toLowerCase()),\n);\n\n// `0x` plus 64 hex characters, the only shape `privateKeyToAccount` accepts\nconst PRIVATE_KEY_SHAPE = /^0x[0-9a-fA-F]{64}$/;\n\nexport function isWellKnownDevKey(privateKey: string): boolean {\n  return WELL_KNOWN_DEV_KEYS.has(privateKey.toLowerCase());\n}\n\nexport function isWellKnownDevAddress(address: string): boolean {\n  return WELL_KNOWN_DEV_ADDRESSES.has(address.toLowerCase());\n}\n\n/**\n * True for loopback addresses, RFC 1918 private ranges, and bare (dot-free)\n * hostnames, such as the compose service name \"anvil\".\n *\n * Bare hostnames are treated as local without resolving them. Operators must\n * point them at a private chain.\n */\nexport function isLikelyLocalOrPrivateHost(hostname: string): boolean {\n  const h = hostname.toLowerCase().replace(/^\\[|\\]$/g, '');\n  if (h === 'localhost' || h === '::1') return true;\n  if (/^127\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (/^10\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (/^192\\.168\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (/^172\\.(1[6-9]|2\\d|3[01])\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (!h.includes('.') && !h.includes(':')) return true; // bare hostname\n  return false;\n}\n\nfunction parseHostnameOrThrow(rpcUrl: string): string {\n  try {\n    return new URL(rpcUrl).hostname;\n  } catch (cause) {\n    // Never the URL itself: RPC providers commonly put an API key in the path,\n    // and this message reaches startup output and CI logs\n    throw new CommerceError('CONFIG_INVALID', 'x402 provider: rpcUrl is not a valid URL', {\n      cause,\n    });\n  }\n}\n\n/** Origin only, for diagnostics: RPC URLs often carry an API key in the path or query */\nexport function describeRpc(rpcUrl: string): string {\n  try {\n    return new URL(rpcUrl).origin;\n  } catch {\n    return '[unparseable rpcUrl]';\n  }\n}\n\n/**\n * Throws CONFIG_INVALID if `signerPrivateKey` is not shaped like a private key,\n * or if it is a well-known dev key and the RPC is not local.\n *\n * The shape check runs first, so a truncated key is reported as malformed\n * instead of passing as \"not a dev key\".\n */\nexport function assertDevKeyIsLocalOnly(rpcUrl: string, signerPrivateKey: string): void {\n  if (!PRIVATE_KEY_SHAPE.test(signerPrivateKey)) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      'x402 provider: facilitator.signerPrivateKey is not a well-formed private key ' +\n        '(expected \"0x\" followed by exactly 64 hex characters).',\n    );\n  }\n\n  if (!isWellKnownDevKey(signerPrivateKey)) return; // the operator's own key\n\n  const hostname = parseHostnameOrThrow(rpcUrl);\n\n  if (!isLikelyLocalOrPrivateHost(hostname)) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      'x402 provider: facilitator.signerPrivateKey is a well-known Anvil development key, but rpcUrl ' +\n        `${describeRpc(rpcUrl)} does not look like a local/private chain. A public dev key must never sign against ` +\n        'a public network: it is instantly drainable and can grief real settlements via nonce exhaustion. ' +\n        'Use a real facilitator key for any non-local RPC, or point rpcUrl at your local/dev chain.',\n    );\n  }\n}\n\n/**\n * Throws CONFIG_INVALID if `payTo` is a well-known Anvil address and `rpcUrl`\n * does not look local or private.\n *\n * Guards the receiving side, in every facilitator mode. `agent-commerce init`\n * defaults `payTo` to a well-known address for the local demo, and on a real\n * network that default sends every payment where anyone can sweep it.\n */\nexport function assertPayToIsNotDevAddress(rpcUrl: string, payTo: string): void {\n  if (!isWellKnownDevAddress(payTo)) return;\n\n  const hostname = parseHostnameOrThrow(rpcUrl);\n\n  if (!isLikelyLocalOrPrivateHost(hostname)) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      `x402 provider: \"payTo\" (${payTo}) is a well-known Anvil development address, but rpcUrl ` +\n        `${describeRpc(rpcUrl)} does not look like a local/private chain. The private key behind that address ` +\n        'is public knowledge, so any revenue settled to it is immediately spendable by anyone. Set ' +\n        '\"payTo\" to your own merchant wallet for any non-local RPC, or point rpcUrl at your ' +\n        'local/dev chain.',\n    );\n  }\n}\n","/**\n * What must hold before this gateway may settle a payment on the configured\n * network. Two callers share these checks: the provider runs them at\n * construction, so a library consumer who skips our config loader still gets\n * them, and the config loader runs them, so `validate` and `doctor` report\n * them too.\n *\n * Both run before any request, because a failure found in `settle()` would\n * come after the pipeline reserved the buyer's replay key.\n *\n * Imports no peer (no viem, no `@x402/*`), so the CLI can load it.\n */\nimport { CommerceError } from '../../core';\nimport { isBurnAddress, sameAddress } from './addresses';\nimport { isLikelyLocalOrPrivateHost, isWellKnownDevAddress } from './dev-key-guard';\nimport {\n  type CustomNetworks,\n  type DeploymentMode,\n  LOCAL_CHAIN_ID,\n  requireX402Network,\n  resolveDeploymentMode,\n  type X402Network,\n} from './networks';\n\n/**\n * How the gateway authenticates to a remote facilitator.\n *\n * - `none`: send no credential; use it when the facilitator accepts\n *   anonymous requests.\n * - `bearer`: send a static token; no extra peer package is needed.\n * - `cdp`: Coinbase Developer Platform. The optional peer `@coinbase/x402`,\n *   imported only for this type, signs a fresh JWT per request.\n *\n * Any other auth type is refused at config load.\n */\nexport type FacilitatorAuth =\n  | { readonly type: 'none' }\n  | { readonly type: 'bearer'; readonly token: string }\n  | { readonly type: 'cdp'; readonly apiKeyId: string; readonly apiKeySecret: string };\n\nexport type X402FacilitatorConfig =\n  | { readonly mode: 'local'; readonly signerPrivateKey: string }\n  | { readonly mode: 'remote'; readonly url: string; readonly auth: FacilitatorAuth };\n\nexport interface X402DeploymentInput {\n  readonly network: string;\n  readonly payTo: string;\n  readonly asset: string;\n  /** EIP-712 domain of the asset, as the token itself reports it */\n  readonly assetName?: string;\n  readonly assetVersion?: string;\n  readonly facilitator: X402FacilitatorConfig;\n  /** Must be `true` before anything settles on a mainnet */\n  readonly allowMainnet?: boolean;\n  /**\n   * Must be `true` on mainnet when facilitator auth is `none`. A separate\n   * decision from `allowMainnet`: it accepts settling without an account at\n   * the facilitator, under its anonymous-access limits.\n   */\n  readonly allowUnauthenticatedFacilitator?: boolean;\n  /**\n   * Allow other tokens on built-in EVM networks with explicit metadata.\n   * MPP config leaves this unset; Solana and NEAR still require USDC.\n   */\n  readonly allowOtherEvmToken?: boolean;\n  /** Error-path prefix, `payments.x402` by default */\n  readonly configPath?: string;\n  /** Settlement-recipient field named in errors, `payTo` by default */\n  readonly payToField?: string;\n  /** EVM networks declared under `payments.x402.networks` */\n  readonly customNetworks?: CustomNetworks;\n}\n\nexport interface X402Deployment {\n  readonly profile: X402Network;\n  readonly mode: DeploymentMode;\n}\n\nconst BASE_SEPOLIA = 'eip155:84532';\n\nfunction invalid(message: string, path: string): CommerceError {\n  return new CommerceError('CONFIG_INVALID', message, { details: { path } });\n}\n\n/**\n * Resolves the deployment and refuses the combinations that could move real\n * money by accident. The network must resolve first; the other checks are\n * independent.\n */\nexport function resolveX402Deployment(input: X402DeploymentInput): X402Deployment {\n  const at = input.configPath ?? 'payments.x402';\n  const payTo = input.payToField ?? 'payTo';\n  const profile = requireX402Network(input.network, `${at}.network`, input.customNetworks);\n  const mode = resolveDeploymentMode(profile);\n\n  // Local mode keeps a gas-paying key in the gateway process. A compromise\n  // could expose that key, so mainnet requires a remote facilitator.\n  if (profile.kind === 'mainnet' && input.facilitator.mode === 'local') {\n    throw invalid(\n      `${at}: network \"${profile.id}\" (${profile.displayName}) is a mainnet and cannot be served by facilitator.mode \"local\". A mainnet deployment must settle through a remote facilitator.`,\n      `${at}.facilitator.mode`,\n    );\n  }\n  // The in-process facilitator signs with a client built for the Anvil chain\n  // id, so on any other chain every settlement would fail\n  if (input.facilitator.mode === 'local' && mode !== 'local') {\n    throw invalid(\n      profile.id === BASE_SEPOLIA\n        ? `${at}: the local Anvil chain is eip155:${LOCAL_CHAIN_ID}, Anvil's default chain id; \"${BASE_SEPOLIA}\" is public Base Sepolia. Set ${at}.network to eip155:${LOCAL_CHAIN_ID}, start Anvil with its default chain id and redeploy the local contracts (npm run chain:start, npm run chain:deploy).`\n        : `${at}: facilitator.mode \"local\" serves the local Anvil chain (eip155:${LOCAL_CHAIN_ID}) only, not \"${profile.id}\" (${profile.displayName}). Use a remote facilitator.`,\n      `${at}.facilitator.mode`,\n    );\n  }\n\n  if (mode === 'mainnet' && input.allowMainnet !== true) {\n    throw invalid(\n      `${at}: network \"${profile.id}\" (${profile.displayName}) settles real funds. Set ${at}.allowMainnet: true to acknowledge this explicitly - it is never the default.`,\n      `${at}.allowMainnet`,\n    );\n  }\n\n  if (input.facilitator.mode === 'remote') {\n    assertFacilitatorUrlIsSafe(input.facilitator.url, mode, at);\n    // `@coinbase/x402` signs each request for CDP's own host and route,\n    // whatever URL is configured, so no other facilitator can accept the credential\n    if (input.facilitator.auth.type === 'cdp' && !isCdpFacilitatorUrl(input.facilitator.url)) {\n      throw invalid(\n        `${at}: facilitator.auth.type \"cdp\" signs requests for ${CDP_FACILITATOR_URL} only, so facilitator ${describeOrigin(input.facilitator.url)} cannot accept its credential. Set facilitator.url to ${CDP_FACILITATOR_URL}, or use auth.type \"bearer\" or \"none\".`,\n        `${at}.facilitator.url`,\n      );\n    }\n    // The authorization fixes recipient, amount and chain, so a facilitator\n    // cannot redirect funds. A credential adds an account: rate limits, terms\n    // and support. On mainnet, going without one is an explicit choice.\n    if (\n      mode === 'mainnet' &&\n      input.facilitator.auth.type === 'none' &&\n      input.allowUnauthenticatedFacilitator !== true\n    ) {\n      throw invalid(\n        `${at}: no credential is configured for facilitator ${describeOrigin(input.facilitator.url)} on mainnet. Set ${at}.allowUnauthenticatedFacilitator: true to accept anonymous access and the facilitator's limits, or configure facilitator.auth.`,\n        `${at}.allowUnauthenticatedFacilitator`,\n      );\n    }\n    // A blank credential reaches the facilitator as \"unauthenticated\" and fails\n    // every payment after the buyer signed. `${VAR:- }` resolving to whitespace\n    // is the usual cause.\n    for (const [field, value] of credentialFields(input.facilitator.auth)) {\n      if (value.trim() === '') {\n        throw invalid(\n          `${at}: facilitator.auth.type is \"${input.facilitator.auth.type}\" but ${field} is empty. An empty credential is refused rather than sent.`,\n          `${at}.facilitator.auth.${field}`,\n        );\n      }\n    }\n  }\n\n  // The config loader's address check refuses this too; repeated here for a\n  // library consumer who calls `createX402PaymentProvider` without it\n  if (isBurnAddress(profile, input.payTo)) {\n    throw invalid(\n      `${at}: \"${payTo}\" is the zero address. Every payment settled there is destroyed.`,\n      `${at}.${payTo}`,\n    );\n  }\n\n  // Anyone can spend from a well-known Anvil address. `dev-key-guard` refuses\n  // one behind a public RPC; this refuses one on any non-local deployment,\n  // whose RPC host says nothing about where a remote facilitator settles.\n  if (mode !== 'local' && isWellKnownDevAddress(input.payTo)) {\n    throw invalid(\n      `${at}: \"${payTo}\" (${input.payTo}) is a well-known Anvil development address and this is a ${mode} deployment. Anyone can spend what settles there. Set ${payTo} to your own merchant wallet.`,\n      `${at}.${payTo}`,\n    );\n  }\n\n  // Public built-ins require USDC unless the caller allows another EVM token.\n  // Local and declared networks have no default asset.\n  const canonical = profile.canonicalAsset;\n  if (canonical) {\n    if (!sameAddress(profile, input.asset, canonical.address)) {\n      if (input.allowOtherEvmToken !== true || profile.family !== 'evm') {\n        const rule =\n          input.allowOtherEvmToken === true\n            ? `Only an EVM network accepts another token; ${profile.displayName} settles only in its ${canonical.symbol}.`\n            : `A built-in network settles only in its ${canonical.symbol}.`;\n        throw invalid(\n          `${at}: asset ${input.asset} is not ${canonical.symbol} on ${profile.displayName} (expected ${canonical.address}). ${rule}`,\n          `${at}.asset`,\n        );\n      }\n    } else {\n      // Catch USDC domain mismatches before accepting payments; a wrong name\n      // can fail with `invalid_exact_evm_token_name_mismatch`\n      const domain = 'name' in canonical ? canonical : undefined;\n      if (domain && input.assetName !== undefined && input.assetName !== domain.name) {\n        throw invalid(\n          `${at}: assetName \"${input.assetName}\" is not the EIP-712 domain name ${canonical.symbol} reports on ${profile.displayName} (expected \"${domain.name}\"). Every payment would be refused after the buyer signed.`,\n          `${at}.assetName`,\n        );\n      }\n      if (domain && input.assetVersion !== undefined && input.assetVersion !== domain.version) {\n        throw invalid(\n          `${at}: assetVersion \"${input.assetVersion}\" is not the EIP-712 domain version ${canonical.symbol} reports on ${profile.displayName} (expected \"${domain.version}\").`,\n          `${at}.assetVersion`,\n        );\n      }\n    }\n  }\n\n  return { profile, mode };\n}\n\n/**\n * A facilitator sees every payment authorization this gateway handles. Plain\n * HTTP puts those on the wire in the clear and lets anyone in the path rewrite\n * a settlement result, so it is allowed only to a local or private host, and\n * never on a mainnet.\n */\nfunction assertFacilitatorUrlIsSafe(url: string, mode: DeploymentMode, at: string): void {\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch (cause) {\n    throw new CommerceError('CONFIG_INVALID', `${at}: facilitator.url is not a valid URL`, {\n      cause,\n      details: { path: `${at}.facilitator.url` },\n    });\n  }\n\n  if (parsed.protocol === 'https:') return;\n  if (parsed.protocol !== 'http:') {\n    throw invalid(\n      `${at}: facilitator ${describeOrigin(url)} must be reached over https (or http on a local/private host); got \"${parsed.protocol}//\"`,\n      `${at}.facilitator.url`,\n    );\n  }\n  if (mode !== 'mainnet' && isLikelyLocalOrPrivateHost(parsed.hostname)) return;\n\n  // The origin, never the whole URL: the path can carry a tenant or an API\n  // key, and this message reaches `validate`, `doctor`, startup output and CI logs\n  throw invalid(\n    `${at}: facilitator ${describeOrigin(url)} is reached over plain HTTP. Payment authorizations and settlement results would travel unencrypted. Use https, or point at a local/private host on a non-mainnet deployment.`,\n    `${at}.facilitator.url`,\n  );\n}\n\n/** The facilitator URL `@coinbase/x402` signs its JWTs for */\nexport const CDP_FACILITATOR_URL = 'https://api.cdp.coinbase.com/platform/v2/x402';\n\n// The SDK client strips trailing slashes before appending its route\nfunction isCdpFacilitatorUrl(url: string): boolean {\n  try {\n    const parsed = new URL(url);\n    const expected = new URL(CDP_FACILITATOR_URL);\n    return (\n      parsed.origin === expected.origin &&\n      parsed.pathname.replace(/\\/+$/, '') === expected.pathname &&\n      parsed.search === ''\n    );\n  } catch {\n    return false;\n  }\n}\n\n// Origin only: a facilitator URL can carry a tenant path or an API key\nfunction describeOrigin(url: string): string {\n  try {\n    return new URL(url).origin;\n  } catch {\n    return '[unparseable facilitator.url]';\n  }\n}\n\n// The secret-bearing fields of an auth block, for emptiness checks only. Never logged\nfunction credentialFields(auth: FacilitatorAuth): readonly (readonly [string, string])[] {\n  switch (auth.type) {\n    case 'bearer':\n      return [['token', auth.token]];\n    case 'cdp':\n      return [\n        ['apiKeyId', auth.apiKeyId],\n        ['apiKeySecret', auth.apiKeySecret],\n      ];\n    default:\n      return [];\n  }\n}\n","/**\n * Resolves an x402 option into offer terms at config load, so `validate`\n * reports invalid options before startup. This module uses no SDK.\n *\n * Omitted assets use `canonicalAsset`. Overrides for the default token must\n * match its metadata; another token needs its own, including the EIP-712 domain\n * on EVM.\n */\nimport { CommerceError } from '../../core';\nimport { isBurnAddress, normalizeAddress, sameAddress } from './addresses';\nimport { type CustomNetworks, requireX402Network, type X402Network } from './networks';\n\nexport interface X402OptionInput {\n  readonly scheme?: string;\n  readonly network: string;\n  readonly payTo: string;\n  readonly asset?: string;\n  readonly assetName?: string;\n  readonly assetVersion?: string;\n  readonly assetDecimals?: number;\n  /** `eip3009` (the default) or `permit2`; EVM only */\n  readonly assetTransferMethod?: string;\n}\n\nexport interface ResolvedX402Option {\n  readonly scheme: 'exact';\n  readonly network: X402Network;\n  readonly payTo: string;\n  readonly asset: string;\n  /** EIP-712 domain; EVM only */\n  readonly assetName?: string;\n  readonly assetVersion?: string;\n  readonly assetDecimals: number;\n  /**\n   * Default token symbol when `asset` is omitted; resource prices must use\n   * this symbol or USD\n   */\n  readonly defaultAssetSymbol?: string;\n  /** How the buyer authorizes the transfer; always `eip3009` off EVM */\n  readonly assetTransferMethod: X402AssetTransferMethod;\n}\n\n/**\n * Names health components by network, asset and payee for discovery matching.\n * Lowercase EVM addresses so case variants identify the same offer.\n */\nexport function x402OfferName(offer: {\n  readonly network: string;\n  readonly asset: string;\n  readonly payTo: string;\n}): string {\n  const evm = offer.network.startsWith('eip155:');\n  const address = (value: string) => (evm ? value.toLowerCase() : value);\n  return `${offer.network} ${address(offer.asset)} ${address(offer.payTo)}`;\n}\n\n/** EIP-3009 `transferWithAuthorization`, or Permit2 with a prior token allowance */\nexport type X402AssetTransferMethod = 'eip3009' | 'permit2';\n\n// Incorrect EIP-712 domain values invalidate the buyer's signature\nconst FIELD_MEANINGS = {\n  assetName: 'EIP-712 domain name',\n  assetVersion: 'EIP-712 domain version',\n  assetDecimals: 'decimals',\n} as const;\n\nconst ADDRESS_SHAPES = {\n  evm: '\"0x\" followed by 40 hex characters',\n  svm: 'a base58 public key of 32 bytes',\n  near: 'a NEAR account ID: 2 to 64 lowercase characters, digits and single \"-\", \"_\" or \".\" separators',\n} as const;\n\nfunction invalid(message: string, path: string): CommerceError {\n  return new CommerceError('CONFIG_INVALID', message, { details: { path } });\n}\n\nexport function resolveX402Option(\n  input: X402OptionInput,\n  path: string,\n  custom?: CustomNetworks,\n): ResolvedX402Option {\n  if (input.scheme !== undefined && input.scheme !== 'exact') {\n    throw invalid(\n      `${path}.scheme: \"${input.scheme}\" is not supported; the only x402 scheme is \"exact\"`,\n      `${path}.scheme`,\n    );\n  }\n  const network = requireX402Network(input.network, `${path}.network`, custom);\n  const address = (field: 'payTo' | 'asset', value: string): string => {\n    const wire = normalizeAddress(network, value);\n    if (wire === undefined) {\n      throw invalid(\n        // The value is not echoed: a swapped variable could put a key here\n        `${path}.${field} is not a plausible address on ${network.displayName} (expected ${ADDRESS_SHAPES[network.family]})`,\n        `${path}.${field}`,\n      );\n    }\n    return wire;\n  };\n\n  const payTo = address('payTo', input.payTo);\n  if (isBurnAddress(network, payTo)) {\n    throw invalid(\n      `${path}.payTo is the zero address of ${network.displayName}. Every payment settled there is destroyed.`,\n      `${path}.payTo`,\n    );\n  }\n\n  const method = input.assetTransferMethod ?? 'eip3009';\n  if (method !== 'eip3009' && method !== 'permit2') {\n    throw invalid(\n      `${path}.assetTransferMethod: \"${method}\" is not supported; use \"eip3009\" or \"permit2\"`,\n      `${path}.assetTransferMethod`,\n    );\n  }\n  if (network.family !== 'evm' && input.assetTransferMethod !== undefined) {\n    throw invalid(\n      `${path}.assetTransferMethod applies to EVM networks only, not to ${network.displayName}`,\n      `${path}.assetTransferMethod`,\n    );\n  }\n\n  if (network.family !== 'evm') {\n    for (const field of ['assetName', 'assetVersion'] as const) {\n      if (input[field] !== undefined) {\n        throw invalid(\n          `${path}.${field}: an EIP-712 domain applies to EVM tokens only, not to ${network.displayName}`,\n          `${path}.${field}`,\n        );\n      }\n    }\n  }\n\n  const canonical = network.canonicalAsset;\n  const domain = canonical && 'name' in canonical ? canonical : undefined;\n\n  const asset = input.asset !== undefined ? address('asset', input.asset) : undefined;\n  if (asset !== undefined && isBurnAddress(network, asset)) {\n    throw invalid(`${path}.asset must not be the zero address`, `${path}.asset`);\n  }\n\n  // The default asset applies when the option names none or names it exactly\n  if (canonical && (asset === undefined || sameAddress(network, asset, canonical.address))) {\n    const expected = {\n      assetName: domain?.name,\n      assetVersion: domain?.version,\n      assetDecimals: canonical.decimals,\n    };\n    for (const field of ['assetName', 'assetVersion', 'assetDecimals'] as const) {\n      const given = input[field];\n      if (given !== undefined && given !== expected[field]) {\n        throw invalid(\n          `${path}.${field} does not match ${canonical.symbol} on ${network.displayName}, which reports ${FIELD_MEANINGS[field]} ${JSON.stringify(expected[field])}. Remove ${field}, or set asset to the token it describes.`,\n          `${path}.${field}`,\n        );\n      }\n    }\n    return {\n      scheme: 'exact',\n      network,\n      payTo,\n      asset: asset ?? canonical.address,\n      ...(domain ? { assetName: domain.name, assetVersion: domain.version } : {}),\n      assetDecimals: canonical.decimals,\n      defaultAssetSymbol: canonical.symbol,\n      assetTransferMethod: method,\n    };\n  }\n\n  // Another token: nothing about it can be borrowed from the default. The\n  // token's EIP-712 domain matters to EIP-3009 only: a Permit2 buyer signs\n  // Permit2's own domain.\n  const required =\n    network.family === 'evm' && method === 'eip3009'\n      ? (['asset', 'assetName', 'assetVersion', 'assetDecimals'] as const)\n      : (['asset', 'assetDecimals'] as const);\n  const missing = required.filter((field) => input[field] === undefined);\n  if (asset === undefined || missing.length > 0) {\n    throw invalid(\n      canonical\n        ? `${path}: a token other than ${canonical.symbol} on ${network.displayName} needs ${missing.join(', ')}`\n        : `${path}: ${network.displayName} has no default asset, so the option needs ${missing.join(', ')}`,\n      `${path}.${missing[0] ?? 'asset'}`,\n    );\n  }\n  return {\n    scheme: 'exact',\n    network,\n    payTo,\n    asset,\n    ...(input.assetName !== undefined ? { assetName: input.assetName } : {}),\n    ...(input.assetVersion !== undefined ? { assetVersion: input.assetVersion } : {}),\n    assetDecimals: input.assetDecimals as number,\n    assetTransferMethod: method,\n  };\n}\n"]}

package/dist/cli/{config-ZOFHJ5FB.js → config-UI4EDG4L.js}

@@ -1,11 +1,11 @@
-export { loadConfig, parseConfig, substituteEnv } from './chunk-55N55KL4.js';
-import './chunk-2LN5PO5I.js';
+export { loadConfig, parseConfig, substituteEnv } from './chunk-G2JEY7MB.js';
+import './chunk-PIMFPCNZ.js';
 import './chunk-AA3FIEAR.js';
-import './chunk-KTV52MCU.js';
+import './chunk-WYOGIANL.js';
 import './chunk-OZ4LAWBK.js';
 import './chunk-FHCFR2GS.js';
 import './chunk-TPC4EJLT.js';
 import './chunk-QQ3WY5L3.js';
 import './chunk-3M6U7ILB.js';
-//# sourceMappingURL=config-ZOFHJ5FB.js.map
-//# sourceMappingURL=config-ZOFHJ5FB.js.map
+//# sourceMappingURL=config-UI4EDG4L.js.map
+//# sourceMappingURL=config-UI4EDG4L.js.map

package/dist/cli/{config-ZOFHJ5FB.js.map → config-UI4EDG4L.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"config-ZOFHJ5FB.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"config-UI4EDG4L.js"}

package/dist/cli/index.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
-import { createSqliteReceiptStore, A2A_SPEC_VERSION, A2A_PROTOCOL_VERSION, A2A_PROTOCOL_BINDING, A2A_AGENT_CARD_PATH, A2A_UNSUPPORTED, ACP_UNSUPPORTED } from './chunk-KABFUZ6L.js';
-import { DEFAULT_CONFIG_FILENAME, extractPathParameterNames, ACP_SPEC_VERSION, ACP_API_VERSION, ACP_WELL_KNOWN_PATH, findUnparsedBraceToken } from './chunk-2LN5PO5I.js';
+import { createSqliteReceiptStore, A2A_SPEC_VERSION, A2A_PROTOCOL_VERSION, A2A_PROTOCOL_BINDING, A2A_AGENT_CARD_PATH, A2A_UNSUPPORTED, ACP_UNSUPPORTED } from './chunk-GJIMDMYT.js';
+import { DEFAULT_CONFIG_FILENAME, extractPathParameterNames, ACP_SPEC_VERSION, ACP_API_VERSION, ACP_WELL_KNOWN_PATH, findUnparsedBraceToken } from './chunk-PIMFPCNZ.js';
 import { MPP_PROFILE, MPP_SPEC_DRAFTS, MPPX_VERSION, MPP_SPEC_COMMIT, MPP_DEFAULT_PAYMENT_FLOW } from './chunk-AA3FIEAR.js';
 import { ANVIL_WELL_KNOWN_ACCOUNTS, describeDeploymentMode, X402_DEFAULT_PAYMENT_FLOW, findX402Network, isEvmAddress, LOCAL_CHAIN_ID, resolveDeploymentMode, sameAddress } from './chunk-OZ4LAWBK.js';
 import { AP2_UNSUPPORTED } from './chunk-3EQBCFZY.js';
 import './chunk-3MGAJ5FX.js';
 import { AP2_SPEC_VERSION, AP2_CHECKOUT_MANDATE_VCT, AP2_CHECKOUT_PROFILE } from './chunk-FHCFR2GS.js';
 import { MCP_TOOL_NAME_MAX_LENGTH, MCP_TOOL_NAME_CHARS } from './chunk-TPC4EJLT.js';
-import { PACKAGE_VERSION } from './chunk-DYHVNKRB.js';
+import { PACKAGE_VERSION } from './chunk-ITWNSS2B.js';
 import { PROTOCOL_NAMES, isCommerceError, CommerceError } from './chunk-QQ3WY5L3.js';
 import { isRecord } from './chunk-3M6U7ILB.js';
 import { CommanderError, Command } from 'commander';
@@ -78,7 +78,7 @@ async function execCommand(command, args) {
 // src/cli/lib/config-client.ts
 async function importConfig() {
   try {
-    return await import('./config-ZOFHJ5FB.js');
+    return await import('./config-UI4EDG4L.js');
   } catch (err) {
     throw new CommerceError(
       "INTERNAL_ERROR",
@@ -219,7 +219,7 @@ var package_default = {
     "ajv-formats": "3.0.1",
     "better-sqlite3": "13.0.3",
     commander: "15.0.0",
-    fastify: "5.12.5",
+    fastify: "5.12.7",
     picocolors: "1.1.1",
     pino: "10.3.1",
     yaml: "2.9.0",
@@ -710,7 +710,75 @@ function offerHealthCheck(live, named) {
     detail: `${problems.join("; ")}. The gateway logs each reason at debug level`
   };
 }
-function paymentChecks(config, wellKnown, gatewayUrl, chainDeploy = false) {
+function extractLiveQuote(body) {
+  const payments = body?.["payments"];
+  const x402 = isRecord(payments) ? payments["x402"] : void 0;
+  const quote = isRecord(x402) ? x402["quote"] : void 0;
+  if (quote === void 0) return void 0;
+  if (!isRecord(quote)) return "unreadable";
+  const { issuer, requestScheme, extension } = quote;
+  return typeof issuer === "string" && typeof requestScheme === "string" && typeof extension === "string" ? { issuer, requestScheme, extension } : "unreadable";
+}
+async function localQuoteIssuer(signerPrivateKey, loadAccounts) {
+  let accounts;
+  try {
+    accounts = await loadAccounts();
+  } catch {
+    return void 0;
+  }
+  try {
+    return accounts.privateKeyToAccount(signerPrivateKey).address;
+  } catch {
+    return "invalid";
+  }
+}
+function quoteCheck(enabled, local, live, body, gatewayUrl, stale) {
+  const name = "Payments (quotes)";
+  if (enabled && local === "invalid") {
+    return {
+      name,
+      status: "FAIL",
+      detail: 'quote.signerPrivateKey is not a valid private key (expected "0x" followed by 64 hex characters), so start refuses it'
+    };
+  }
+  const localIssuer = local === void 0 ? void 0 : maskMiddle(local);
+  const quote = live === void 0 || live === "disabled" ? "unreadable" : extractLiveQuote(body);
+  if (quote === "unreadable") {
+    return enabled ? {
+      name,
+      status: "INFO",
+      detail: `ERC-8409 quotes enabled (experimental)${localIssuer !== void 0 ? `, issuer=${localIssuer} from the local key` : ""}; the gateway's issuer could not be read`
+    } : void 0;
+  }
+  if (quote === void 0) {
+    return enabled ? {
+      name,
+      status: "FAIL",
+      detail: `Local config enables ERC-8409 quotes, but the gateway at ${gatewayUrl} publishes no quote issuer${stale}`
+    } : void 0;
+  }
+  const issuer = maskMiddle(quote.issuer);
+  if (!enabled) {
+    return {
+      name,
+      status: "FAIL",
+      detail: `The gateway at ${gatewayUrl} signs ERC-8409 quotes as ${issuer}, but local config does not enable them${stale}`
+    };
+  }
+  if (local !== void 0 && local.toLowerCase() !== quote.issuer.toLowerCase()) {
+    return {
+      name,
+      status: "FAIL",
+      detail: `The gateway at ${gatewayUrl} signs ERC-8409 quotes as ${issuer}, but quote.signerPrivateKey belongs to ${localIssuer}${stale}`
+    };
+  }
+  return {
+    name,
+    status: "PASS",
+    detail: `ERC-8409 quotes (experimental) - issuer=${issuer}${local === void 0 ? " as the gateway publishes it (viem could not be loaded to check it against the local key)" : ""}, requestScheme=${quote.requestScheme}, extension=${quote.extension}`
+  };
+}
+async function paymentChecks(config, wellKnown, gatewayUrl, chainDeploy = false, loadAccounts = () => import('viem/accounts')) {
   const checks = [];
   const stale = `; the gateway may be running against an older deployment - restart it${chainDeploy ? " or re-run chain:deploy" : ""}`;
   const x402 = config?.payments.x402;
@@ -765,6 +833,15 @@ function paymentChecks(config, wellKnown, gatewayUrl, chainDeploy = false) {
       const offerHealth = offerHealthCheck(live, named);
       if (offerHealth !== void 0) checks.push(offerHealth);
     }
+    const quotes = quoteCheck(
+      x402.quote !== void 0,
+      x402.quote !== void 0 ? await localQuoteIssuer(x402.quote.signerPrivateKey, loadAccounts) : void 0,
+      live,
+      wellKnown?.ok ? wellKnown.body : void 0,
+      gatewayUrl,
+      stale
+    );
+    if (quotes !== void 0) checks.push(quotes);
     if (mode === "mainnet") {
       checks.push(
         mainnetSafetyCheck("Mainnet safety", "payTo", x402.facilitator, [
@@ -1032,7 +1109,9 @@ async function runDoctor(options, deps = {}) {
   ) : void 0;
   checks.push(...protocolChecks(config, wellKnown));
   checks.push(...ap2Checks(config));
-  checks.push(...paymentChecks(config, wellKnown, gatewayUrl, chainDeploy));
+  checks.push(
+    ...await paymentChecks(config, wellKnown, gatewayUrl, chainDeploy, deps.loadViemAccounts)
+  );
   checks.push(...await storageChecks(config, createStore));
   if (wellKnown?.ok) {
     checks.push({
@@ -2457,7 +2536,7 @@ function buildProgram(io = processIo) {
     `Start the gateway from ${DEFAULT_CONFIG_FILENAME} and serve until SIGTERM or SIGINT.`
   ).option("--config <path>", `path to ${DEFAULT_CONFIG_FILENAME}`).option("--env-file <path>", ENV_FILE_HELP).action(async (opts) => {
     try {
-      const { runGateway } = await import('./run-DS2KXUTW.js');
+      const { runGateway } = await import('./run-JK4ERPJV.js');
       await runGateway(opts.config !== void 0 ? { configPath: opts.config } : {});
     } catch (error) {
       io.stderr(formatConfigError(error, false, false));