@devlab.group/agent-commerce 2.4.0 → 2.5.0

package/dist/{runtime-Cl_BLVZV.d.ts → runtime-Dz2fSO-P.d.ts}

@@ -67,6 +67,75 @@ interface AdapterDescriptor {
     readonly unsupported?: readonly string[];
 }
 
+interface CommerceReceipt {
+    readonly id: string;
+    readonly requestId: string;
+    /** Optional for compatibility with rows written before 2.5.0 */
+    readonly transactionId?: string;
+    readonly resourceId: string;
+    /** Absent for free resources */
+    readonly payment?: PaymentResult;
+    /**
+     * Present only when the resource required authorization. A method and a digest,
+     * so the receipt records that consent existed without storing the proof.
+     */
+    readonly authorization?: AuthorizationRecord;
+    readonly deliveredAt: IsoTimestamp;
+    readonly backendStatus: number;
+    readonly durationMs?: number;
+    readonly protocol?: string;
+    /** Non-secret summary only, never a sensitive backend body */
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+/** Record of a single payment authorization seen by the gateway */
+interface PaymentAttempt {
+    readonly id: string;
+    readonly requestId: string;
+    /** Optional for compatibility with rows written before 2.5.0 */
+    readonly transactionId?: string;
+    readonly resourceId: string;
+    readonly provider: string;
+    /** Unique across the store; see `PaymentResult.replayKey` */
+    readonly replayKey: string;
+    /**
+     * State of the authorization, as far as the gateway can prove it.
+     *
+     * `settlement-uncertain` means settlement was attempted and no verdict came
+     * back (RPC timeout, dropped connection, a facilitator that accepted the
+     * transfer and lost the response). The transfer may or may not have
+     * happened, so the attempt is unresolved rather than terminal and needs
+     * evidence from the chain, not a retry. `externalReference` holds the
+     * broadcast transaction hash when one is known.
+     *
+     * The execution pipeline never writes `failed`: a throw out of `settle()`
+     * never proves that nothing moved. It stays in the union because existing
+     * databases hold rows with that status.
+     */
+    readonly status: 'reserved' | 'verified' | 'settled' | 'rejected' | 'failed' | 'settlement-uncertain';
+    readonly amount: string;
+    readonly currency: string;
+    readonly payer?: string;
+    readonly payee?: string;
+    readonly externalReference?: string;
+    readonly rejectionReason?: string;
+    /** Records how an unresolved attempt became `settled` or `rejected` after its request ended */
+    readonly resolution?: PaymentAttemptResolution;
+    readonly createdAt: IsoTimestamp;
+    readonly updatedAt: IsoTimestamp;
+}
+/** Who resolved an attempt, manually or by reconciliation, and why */
+interface PaymentAttemptResolution {
+    readonly method: 'reconcile' | 'manual';
+    /** Caller-supplied identity; the admin token does not identify an individual */
+    readonly actor: string;
+    readonly reason: string;
+    readonly at: IsoTimestamp;
+    /** For `manual`, an unverified reference supplied by the operator */
+    readonly externalReference?: string;
+    /** Public chain facts only */
+    readonly evidence?: Readonly<Record<string, unknown>>;
+}
+
 /** HTTP methods a backend handler may use */
 type BackendMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
 /**
@@ -157,6 +226,13 @@ interface ResourceRegistry {
  * EVM-specific type may appear in this file.
  */
 
+/**
+ * `PaymentResult.metadata` key for public coordinates returned by `verify`
+ * for later provider reconciliation. Core must store the value unchanged and
+ * interpret only `expiresAt`. Never include signatures, payloads or
+ * transaction bytes. Experimental: may change in a minor release.
+ */
+declare const RECONCILIATION_METADATA_KEY = "reconciliation";
 /**
  * Provider-native payment challenge, opaque to core. For x402 the `accepts`
  * entries are x402 `PaymentRequirements` objects, passed to protocol adapters
@@ -263,6 +339,30 @@ interface PaymentVerificationContext {
 interface PaymentSettlementContext extends PaymentVerificationContext {
     readonly verification: PaymentResult;
 }
+/** Input to {@link PaymentProvider.reconcile}. Experimental: may change in a minor release */
+interface PaymentReconciliationContext {
+    readonly attempt: PaymentAttempt;
+    /** Coordinates from `verify`; optional for compatibility with pre-2.5.0 attempts */
+    readonly locator?: Readonly<Record<string, unknown>>;
+    readonly now: IsoTimestamp;
+}
+/** Chain evidence for resolving an attempt. Experimental: may change in a minor release */
+interface PaymentReconciliationResult {
+    /**
+     * Report `settled` only with a final transfer record for this authorization.
+     * Report `not-settled` only when a state read proves it unused after it can
+     * no longer land; missing logs or receipts are insufficient. Otherwise,
+     * report `unknown`.
+     */
+    readonly outcome: 'settled' | 'not-settled' | 'unknown';
+    /** A machine-readable token, such as `not_final` */
+    readonly reason: string;
+    readonly externalReference?: string;
+    /** Public chain facts only */
+    readonly evidence?: Readonly<Record<string, unknown>>;
+    /** For `unknown`, the earliest time a different answer is possible, if known */
+    readonly retryAfter?: IsoTimestamp;
+}
 /**
  * Contract every payment rail implements. Implementations must be
  * non-custodial: they orchestrate an external payment protocol and never hold
@@ -296,6 +396,124 @@ interface PaymentProvider {
      * returned result; the pipeline records any throw as settlement-uncertain.
      */
     settle(context: PaymentSettlementContext): Promise<PaymentResult>;
+    /**
+     * Read chain evidence for an attempt with an unknown outcome. Implementations
+     * must not write, broadcast or call a facilitator. Providers without this
+     * hook require manual resolution. Experimental: may change in a minor release.
+     */
+    reconcile?(context: PaymentReconciliationContext): Promise<PaymentReconciliationResult>;
+    health(): Promise<AdapterHealth>;
+}
+
+/**
+ * Canonical authorization model. FROZEN CONTRACT.
+ *
+ * Payment proves that funds moved; authorization proves that the human behind
+ * the agent approved this exact purchase. A valid authorization gates
+ * settlement but never unlocks a paid resource on its own and never moves
+ * money, so a resource that requires one still needs a payment proof.
+ *
+ * Core decides that a resource requires authorization and when the pipeline
+ * checks it. Authorization providers decide how a submission is parsed,
+ * verified and bound to the purchase. No AP2, SD-JWT or JWT type may appear in
+ * this file.
+ */
+
+/**
+ * Opaque authorization proof supplied by the buyer's client. Over HTTP it
+ * arrives as base64url JSON in the `Agent-Authorization` header; over MCP and
+ * A2A it is the same `{ method, payload }` object in the reserved
+ * `_authorization` input field.
+ *
+ * `payload` is kept byte for byte from the wire. It may hold signed or
+ * encoding-sensitive provider data, so transport adapters must not normalize
+ * it.
+ */
+interface AuthorizationSubmission {
+    readonly method: AuthorizationMethodName;
+    readonly payload: string;
+}
+/**
+ * What a buyer must present, advertised with the payment challenge so a client
+ * learns before it pays that a payment proof alone will not do. The gateway
+ * never issues the authorization; it names the method, the spec version it
+ * verifies against and the payload profile it expects.
+ */
+interface AuthorizationRequirement {
+    readonly method: AuthorizationMethodName;
+    readonly version: string;
+    readonly profile?: string;
+}
+/**
+ * Safe audit identity of an authorization, fit for a receipt. `reference` is a
+ * digest, because a receipt outlives its request and a stored proof would be a
+ * spendable secret at rest.
+ */
+interface AuthorizationRecord {
+    readonly method: AuthorizationMethodName;
+    readonly reference: string;
+    /** Safe audit summary only. Never the proof, its disclosures, or PII */
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+/**
+ * A verified, reserved authorization. `reservationId` is the handle the
+ * pipeline consumes, releases or marks uncertain once the payment resolves. It
+ * stays out of `AuthorizationRecord` because a handle is not an audit fact.
+ */
+interface AuthorizationVerification extends AuthorizationRecord {
+    readonly status: 'verified';
+    readonly reservationId: string;
+}
+/** Input to {@link AuthorizationProvider.verifyAndReserve} */
+interface AuthorizationVerificationContext {
+    readonly requestId: string;
+    readonly resourceId: string;
+    /**
+     * The validated resource input with reserved fields stripped: the same value
+     * the merchant backend is called with. A provider that binds a proof to the
+     * request hashes it, so it excludes `_payment`, `_authorization`, the request
+     * id and transport metadata.
+     */
+    readonly input: unknown;
+    readonly submission: AuthorizationSubmission;
+    /** The resolved price and destination the proof must match */
+    readonly requirement: PaymentRequirement;
+}
+/** Input to {@link AuthorizationProvider.consume}, `release` and `markUncertain` */
+interface AuthorizationFinalizeContext {
+    readonly requestId: string;
+    readonly resourceId: string;
+}
+/**
+ * Contract every authorization method implements.
+ *
+ * The lifecycle straddles settlement: a proof is reserved before funds move, so
+ * a replay cannot race it, and its fate is known only afterwards. A reservation
+ * is released only after a failure that provably moved no money. Anything
+ * ambiguous is marked uncertain, because a proof handed back after a settlement
+ * that may have landed can be spent twice.
+ */
+interface AuthorizationProvider {
+    readonly name: AuthorizationMethodName;
+    readonly descriptor: AdapterDescriptor;
+    /** What a buyer must present, advertised with the payment challenge */
+    readonly requirement: AuthorizationRequirement;
+    /**
+     * Verify a submission against the resolved purchase and atomically reserve it
+     * against reuse. Throws a `CommerceError` with an `AUTHORIZATION_*` code,
+     * never a payment code; a verifier or store outage is
+     * `AUTHORIZATION_PROVIDER_UNAVAILABLE`, not the buyer's fault.
+     */
+    verifyAndReserve(context: AuthorizationVerificationContext): Promise<AuthorizationVerification>;
+    /** Mark a reservation permanently spent. Called after settlement succeeds */
+    consume(reservationId: string, context: AuthorizationFinalizeContext): Promise<void>;
+    /** Return a reservation to unused. Only for failures that moved no funds */
+    release(reservationId: string, context: AuthorizationFinalizeContext): Promise<void>;
+    /**
+     * Settlement threw, so whether funds moved is unknown: neither spend the
+     * reservation nor hand it back, and flag it for an operator
+     */
+    markUncertain(reservationId: string, context: AuthorizationFinalizeContext): Promise<void>;
     health(): Promise<AdapterHealth>;
 }
 
@@ -328,5 +546,5 @@ interface IdGenerator {
 }
 declare const systemClock: Clock;
 
-export { NOOP_LOGGER as N, DEFAULT_BACKEND_TIMEOUT_MS as i, PAYMENT_METHOD_NAMES as j, PROTOCOL_NAMES as k, systemClock as t };
-export type { AdapterDescriptor as A, BackendHandler as B, Clock as C, DecimalAmount as D, IsoTimestamp as I, JsonSchema as J, Logger as L, PaymentMethodName as P, ResourceRegistry as R, CommerceResource as a, PaymentSubmission as b, AdapterHealth as c, PaymentProvider as d, IdGenerator as e, AdapterHealthComponent as f, AuthorizationMethodName as g, BackendMethod as h, PaymentChallenge as l, PaymentContext as m, PaymentRequirement as n, PaymentResult as o, PaymentSettlementContext as p, PaymentVerificationContext as q, Pricing as r, ProtocolName as s };
+export { RECONCILIATION_METADATA_KEY as M, NOOP_LOGGER as N, systemClock as O, DEFAULT_BACKEND_TIMEOUT_MS as t, PAYMENT_METHOD_NAMES as u, PROTOCOL_NAMES as v };
+export type { AuthorizationProvider as A, BackendHandler as B, Clock as C, DecimalAmount as D, PaymentRequirement as E, PaymentResult as F, PaymentSettlementContext as G, PaymentVerificationContext as H, IsoTimestamp as I, JsonSchema as J, Pricing as K, Logger as L, PaymentMethodName as P, ResourceRegistry as R, AuthorizationRequirement as a, CommerceResource as b, PaymentSubmission as c, AuthorizationSubmission as d, ProtocolName as e, AuthorizationRecord as f, PaymentAttempt as g, CommerceReceipt as h, PaymentAttemptResolution as i, AdapterDescriptor as j, AdapterHealth as k, PaymentProvider as l, IdGenerator as m, AdapterHealthComponent as n, AuthorizationFinalizeContext as o, AuthorizationMethodName as p, AuthorizationVerification as q, AuthorizationVerificationContext as r, BackendMethod as s, PaymentChallenge as w, PaymentContext as x, PaymentReconciliationContext as y, PaymentReconciliationResult as z };

package/dist/svm-KNC3PHMS.js

@@ -0,0 +1,48 @@
+import { LOCATOR_VERSION, computeSvmReplayKey } from './chunk-GA3O2A7R.js';
+import { isRecord } from './chunk-2CJNA7MS.js';
+import { getAddressEncoder, getProgramDerivedAddress, address, getCompiledTransactionMessageDecoder } from '@solana/kit';
+import { decodeTransactionFromPayload, transactionMessageHash } from '@x402/svm';
+
+var MAX_TRANSACTION_BASE64 = 1644;
+var ASSOCIATED_TOKEN_PROGRAM = "ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL";
+async function associatedTokenAccount(owner, mint, tokenProgram) {
+  const encoder = getAddressEncoder();
+  const [account] = await getProgramDerivedAddress({
+    programAddress: address(ASSOCIATED_TOKEN_PROGRAM),
+    seeds: [owner, tokenProgram, mint].map((key) => encoder.encode(address(key)))
+  });
+  return account;
+}
+function inspectSvmPayload(payload, network) {
+  if (!isRecord(payload)) return "invalid_exact_svm_payload_transaction";
+  const transaction = payload["transaction"];
+  if (typeof transaction !== "string" || transaction.length > MAX_TRANSACTION_BASE64) {
+    return "invalid_exact_svm_payload_transaction";
+  }
+  let messageHash;
+  let recentBlockhash;
+  try {
+    const decoded = decodeTransactionFromPayload({ transaction });
+    messageHash = transactionMessageHash(decoded);
+    recentBlockhash = getCompiledTransactionMessageDecoder().decode(
+      decoded.messageBytes
+    ).lifetimeToken;
+  } catch {
+    return "invalid_exact_svm_payload_transaction_could_not_be_decoded";
+  }
+  return {
+    replayKey: computeSvmReplayKey({ network, messageHash }),
+    locator: { v: LOCATOR_VERSION, network, messageHash, recentBlockhash }
+  };
+}
+function messageHashOf(transaction) {
+  try {
+    return transactionMessageHash(decodeTransactionFromPayload({ transaction }));
+  } catch {
+    return void 0;
+  }
+}
+
+export { associatedTokenAccount, inspectSvmPayload, messageHashOf };
+//# sourceMappingURL=svm-KNC3PHMS.js.map
+//# sourceMappingURL=svm-KNC3PHMS.js.map

package/dist/svm-KNC3PHMS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/payments/x402/svm.ts"],"names":[],"mappings":";;;;;AAsBA,IAAM,sBAAA,GAAyB,IAAA;AAE/B,IAAM,wBAAA,GAA2B,8CAAA;AAMjC,eAAsB,sBAAA,CACpB,KAAA,EACA,IAAA,EACA,YAAA,EACiB;AACjB,EAAA,MAAM,UAAU,iBAAA,EAAkB;AAClC,EAAA,MAAM,CAAC,OAAO,CAAA,GAAI,MAAM,wBAAA,CAAyB;AAAA,IAC/C,cAAA,EAAgB,QAAQ,wBAAwB,CAAA;AAAA,IAChD,KAAA,EAAO,CAAC,KAAA,EAAO,YAAA,EAAc,IAAI,CAAA,CAAE,GAAA,CAAI,CAAC,GAAA,KAAQ,OAAA,CAAQ,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAC,CAAC;AAAA,GAC7E,CAAA;AACD,EAAA,OAAO,OAAA;AACT;AAOO,SAAS,iBAAA,CACd,SACA,OAAA,EAC8F;AAC9F,EAAA,IAAI,CAAC,QAAA,CAAS,OAAO,CAAA,EAAG,OAAO,uCAAA;AAC/B,EAAA,MAAM,WAAA,GAAc,QAAQ,aAAa,CAAA;AACzC,EAAA,IAAI,OAAO,WAAA,KAAgB,QAAA,IAAY,WAAA,CAAY,SAAS,sBAAA,EAAwB;AAClF,IAAA,OAAO,uCAAA;AAAA,EACT;AACA,EAAA,IAAI,WAAA;AACJ,EAAA,IAAI,eAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,4BAAA,CAA6B,EAAE,WAAA,EAAa,CAAA;AAC5D,IAAA,WAAA,GAAc,uBAAuB,OAAO,CAAA;AAC5C,IAAA,eAAA,GAAkB,sCAAqC,CAAE,MAAA;AAAA,MACvD,OAAA,CAAQ;AAAA,KACV,CAAE,aAAA;AAAA,EACJ,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,4DAAA;AAAA,EACT;AACA,EAAA,OAAO;AAAA,IACL,SAAA,EAAW,mBAAA,CAAoB,EAAE,OAAA,EAAS,aAAa,CAAA;AAAA,IACvD,SAAS,EAAE,CAAA,EAAG,eAAA,EAAiB,OAAA,EAAS,aAAa,eAAA;AAAgB,GACvE;AACF;AAMO,SAAS,cAAc,WAAA,EAAyC;AACrE,EAAA,IAAI;AACF,IAAA,OAAO,sBAAA,CAAuB,4BAAA,CAA6B,EAAE,WAAA,EAAa,CAAC,CAAA;AAAA,EAC7E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF","file":"svm-KNC3PHMS.js","sourcesContent":["/**\n * Solana `exact` payload inspection with bounded decoding, replay identity and\n * reconciliation coordinates. The provider loads this module, including its\n * `@x402/svm` and `@solana/kit` imports, when a Solana offer is configured.\n *\n * The facilitator checks the transaction itself: the fee payer, signatures,\n * instruction layout, mint, recipient token account and amount, and a\n * simulation. Its smart-wallet path accepts layouts the gateway could not\n * parse, so the gateway does not read the transfer.\n */\nimport {\n  address,\n  getAddressEncoder,\n  getCompiledTransactionMessageDecoder,\n  getProgramDerivedAddress,\n} from '@solana/kit';\nimport { decodeTransactionFromPayload, transactionMessageHash } from '@x402/svm';\nimport { isRecord } from '../../core/is-record';\nimport { LOCATOR_VERSION } from './locator';\nimport { computeSvmReplayKey } from './replay-key';\n\n// A Solana transaction fits a 1232-byte packet, which is 1644 base64 characters\nconst MAX_TRANSACTION_BASE64 = 1644;\n\nconst ASSOCIATED_TOKEN_PROGRAM = 'ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL';\n\n/**\n * The associated token account of `owner` for `mint`, where the SDK client\n * sends a Solana `exact` payment. Its transaction cannot create the account.\n */\nexport async function associatedTokenAccount(\n  owner: string,\n  mint: string,\n  tokenProgram: string,\n): Promise<string> {\n  const encoder = getAddressEncoder();\n  const [account] = await getProgramDerivedAddress({\n    programAddress: address(ASSOCIATED_TOKEN_PROGRAM),\n    seeds: [owner, tokenProgram, mint].map((key) => encoder.encode(address(key))),\n  });\n  return account;\n}\n\n/**\n * Returns the Solana `exact` replay key and locator, or an SDK refusal reason\n * for a missing, oversized or undecodable transaction. The provider adds the\n * payer from the facilitator's verdict when a usable address is available.\n */\nexport function inspectSvmPayload(\n  payload: unknown,\n  network: string,\n): { readonly replayKey: string; readonly locator: Readonly<Record<string, unknown>> } | string {\n  if (!isRecord(payload)) return 'invalid_exact_svm_payload_transaction';\n  const transaction = payload['transaction'];\n  if (typeof transaction !== 'string' || transaction.length > MAX_TRANSACTION_BASE64) {\n    return 'invalid_exact_svm_payload_transaction';\n  }\n  let messageHash: string;\n  let recentBlockhash: string;\n  try {\n    const decoded = decodeTransactionFromPayload({ transaction });\n    messageHash = transactionMessageHash(decoded);\n    recentBlockhash = getCompiledTransactionMessageDecoder().decode(\n      decoded.messageBytes,\n    ).lifetimeToken;\n  } catch {\n    return 'invalid_exact_svm_payload_transaction_could_not_be_decoded';\n  }\n  return {\n    replayKey: computeSvmReplayKey({ network, messageHash }),\n    locator: { v: LOCATOR_VERSION, network, messageHash, recentBlockhash },\n  };\n}\n\n/**\n * Returns the message hash of base64 transaction bytes using the same decoder\n * as payment inspection, or undefined if decoding or hashing fails\n */\nexport function messageHashOf(transaction: string): string | undefined {\n  try {\n    return transactionMessageHash(decodeTransactionFromPayload({ transaction }));\n  } catch {\n    return undefined;\n  }\n}\n"]}

package/dist/x402.js

@@ -1,8 +1,8 @@
-import { chainIdFromCaip2 } from './chunk-WUIAUAA7.js';
-export { createX402PaymentProvider, createX402PaymentProvider as x402 } from './chunk-WUIAUAA7.js';
-export { SUPPORTED_NETWORK_IDS } from './chunk-4OEXK3YG.js';
-import { CommerceError } from './chunk-AITMDXKW.js';
-import './chunk-KA2AX5FH.js';
+import { chainIdFromCaip2 } from './chunk-FKQK5XZA.js';
+export { createX402PaymentProvider, createX402PaymentProvider as x402 } from './chunk-FKQK5XZA.js';
+export { SUPPORTED_NETWORK_IDS } from './chunk-4K7FIBJM.js';
+import { CommerceError } from './chunk-3OTCFFFT.js';
+import './chunk-GA3O2A7R.js';
 import './chunk-2CJNA7MS.js';
 import { PaymentRequirementsV2Schema } from '@x402/core/schemas';
 import { getAddress, toHex } from 'viem';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devlab.group/agent-commerce",
-  "version": "2.4.0",
+  "version": "2.5.0",
   "description": "Open-source, self-hosted, non-custodial commerce and payment orchestration gateway for AI agents.",
   "license": "Apache-2.0",
   "type": "module",

package/dist/authorization-DjAecwuW.d.ts

@@ -1,115 +0,0 @@
-import { g as AuthorizationMethodName, A as AdapterDescriptor, n as PaymentRequirement, c as AdapterHealth } from './runtime-Cl_BLVZV.js';
-
-/**
- * Canonical authorization model. FROZEN CONTRACT.
- *
- * Payment proves that funds moved; authorization proves that the human behind
- * the agent approved this exact purchase. A valid authorization gates
- * settlement but never unlocks a paid resource on its own and never moves
- * money, so a resource that requires one still needs a payment proof.
- *
- * Core decides that a resource requires authorization and when the pipeline
- * checks it. Authorization providers decide how a submission is parsed,
- * verified and bound to the purchase. No AP2, SD-JWT or JWT type may appear in
- * this file.
- */
-
-/**
- * Opaque authorization proof supplied by the buyer's client. Over HTTP it
- * arrives as base64url JSON in the `Agent-Authorization` header; over MCP and
- * A2A it is the same `{ method, payload }` object in the reserved
- * `_authorization` input field.
- *
- * `payload` is kept byte for byte from the wire. It may hold signed or
- * encoding-sensitive provider data, so transport adapters must not normalize
- * it.
- */
-interface AuthorizationSubmission {
-    readonly method: AuthorizationMethodName;
-    readonly payload: string;
-}
-/**
- * What a buyer must present, advertised with the payment challenge so a client
- * learns before it pays that a payment proof alone will not do. The gateway
- * never issues the authorization; it names the method, the spec version it
- * verifies against and the payload profile it expects.
- */
-interface AuthorizationRequirement {
-    readonly method: AuthorizationMethodName;
-    readonly version: string;
-    readonly profile?: string;
-}
-/**
- * Safe audit identity of an authorization, fit for a receipt. `reference` is a
- * digest, because a receipt outlives its request and a stored proof would be a
- * spendable secret at rest.
- */
-interface AuthorizationRecord {
-    readonly method: AuthorizationMethodName;
-    readonly reference: string;
-    /** Safe audit summary only. Never the proof, its disclosures, or PII */
-    readonly metadata?: Readonly<Record<string, unknown>>;
-}
-/**
- * A verified, reserved authorization. `reservationId` is the handle the
- * pipeline consumes, releases or marks uncertain once the payment resolves. It
- * stays out of `AuthorizationRecord` because a handle is not an audit fact.
- */
-interface AuthorizationVerification extends AuthorizationRecord {
-    readonly status: 'verified';
-    readonly reservationId: string;
-}
-/** Input to {@link AuthorizationProvider.verifyAndReserve} */
-interface AuthorizationVerificationContext {
-    readonly requestId: string;
-    readonly resourceId: string;
-    /**
-     * The validated resource input with reserved fields stripped: the same value
-     * the merchant backend is called with. A provider that binds a proof to the
-     * request hashes it, so it excludes `_payment`, `_authorization`, the request
-     * id and transport metadata.
-     */
-    readonly input: unknown;
-    readonly submission: AuthorizationSubmission;
-    /** The resolved price and destination the proof must match */
-    readonly requirement: PaymentRequirement;
-}
-/** Input to {@link AuthorizationProvider.consume}, `release` and `markUncertain` */
-interface AuthorizationFinalizeContext {
-    readonly requestId: string;
-    readonly resourceId: string;
-}
-/**
- * Contract every authorization method implements.
- *
- * The lifecycle straddles settlement: a proof is reserved before funds move, so
- * a replay cannot race it, and its fate is known only afterwards. A reservation
- * is released only after a failure that provably moved no money. Anything
- * ambiguous is marked uncertain, because a proof handed back after a settlement
- * that may have landed can be spent twice.
- */
-interface AuthorizationProvider {
-    readonly name: AuthorizationMethodName;
-    readonly descriptor: AdapterDescriptor;
-    /** What a buyer must present, advertised with the payment challenge */
-    readonly requirement: AuthorizationRequirement;
-    /**
-     * Verify a submission against the resolved purchase and atomically reserve it
-     * against reuse. Throws a `CommerceError` with an `AUTHORIZATION_*` code,
-     * never a payment code; a verifier or store outage is
-     * `AUTHORIZATION_PROVIDER_UNAVAILABLE`, not the buyer's fault.
-     */
-    verifyAndReserve(context: AuthorizationVerificationContext): Promise<AuthorizationVerification>;
-    /** Mark a reservation permanently spent. Called after settlement succeeds */
-    consume(reservationId: string, context: AuthorizationFinalizeContext): Promise<void>;
-    /** Return a reservation to unused. Only for failures that moved no funds */
-    release(reservationId: string, context: AuthorizationFinalizeContext): Promise<void>;
-    /**
-     * Settlement threw, so whether funds moved is unknown: neither spend the
-     * reservation nor hand it back, and flag it for an operator
-     */
-    markUncertain(reservationId: string, context: AuthorizationFinalizeContext): Promise<void>;
-    health(): Promise<AdapterHealth>;
-}
-
-export type { AuthorizationProvider as A, AuthorizationRequirement as a, AuthorizationSubmission as b, AuthorizationFinalizeContext as c, AuthorizationRecord as d, AuthorizationVerification as e, AuthorizationVerificationContext as f };

package/dist/chunk-4OEXK3YG.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/payments/x402/networks.ts","../src/core/execution/settlement-order.ts","../src/payments/x402/addresses.ts","../src/payments/x402/local-chain/accounts.ts","../src/payments/x402/dev-key-guard.ts","../src/payments/x402/guardrails.ts","../src/payments/x402/options.ts","../src/payments/x402/payment-flow.ts"],"names":["invalid"],"mappings":";;;AAiBO,IAAM,cAAA,GAAiB;AA0D9B,IAAM,IAAA,GAAO,CAAC,OAAA,EAAiB,IAAA,MAC5B,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,OAAA,EAAS,GAAA,EAAK,QAAA,EAAU,CAAA,EAAE,CAAA;AAE9D,IAAM,QAAA,GAAmC;AAAA,EACvC;AAAA,IACE,MAAA,EAAQ,KAAA;AAAA,IACR,EAAA,EAAI,UAAU,cAAc,CAAA,CAAA;AAAA,IAC5B,OAAA,EAAS,cAAA;AAAA,IACT,WAAA,EAAa,aAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,KAAA,EAAO;AAAA,GACT;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,KAAA;AAAA,IACR,EAAA,EAAI,cAAA;AAAA,IACJ,OAAA,EAAS,KAAA;AAAA,IACT,WAAA,EAAa,cAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,cAAA,EAAgB,IAAA,CAAK,4CAAA,EAA8C,MAAM;AAAA,GAC3E;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,KAAA;AAAA,IACR,EAAA,EAAI,aAAA;AAAA,IACJ,OAAA,EAAS,IAAA;AAAA,IACT,WAAA,EAAa,MAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,cAAA,EAAgB,IAAA,CAAK,4CAAA,EAA8C,UAAU;AAAA,GAC/E;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,KAAA;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,OAAA,EAAS,CAAA;AAAA,IACT,WAAA,EAAa,UAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,cAAA,EAAgB,IAAA,CAAK,4CAAA,EAA8C,UAAU;AAAA,GAC/E;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,KAAA;AAAA,IACR,EAAA,EAAI,YAAA;AAAA,IACJ,OAAA,EAAS,GAAA;AAAA,IACT,WAAA,EAAa,SAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,cAAA,EAAgB,IAAA,CAAK,4CAAA,EAA8C,UAAU;AAAA,GAC/E;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,KAAA;AAAA,IACR,EAAA,EAAI,cAAA;AAAA,IACJ,OAAA,EAAS,KAAA;AAAA,IACT,WAAA,EAAa,cAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,cAAA,EAAgB,IAAA,CAAK,4CAAA,EAA8C,UAAU;AAAA,GAC/E;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,KAAA;AAAA,IACR,EAAA,EAAI,eAAA;AAAA,IACJ,OAAA,EAAS,MAAA;AAAA,IACT,WAAA,EAAa,kBAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,cAAA,EAAgB,IAAA,CAAK,4CAAA,EAA8C,UAAU;AAAA,GAC/E;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,KAAA;AAAA,IACR,EAAA,EAAI,cAAA;AAAA,IACJ,OAAA,EAAS,KAAA;AAAA,IACT,WAAA,EAAa,mBAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,cAAA,EAAgB,IAAA,CAAK,4CAAA,EAA8C,UAAU;AAAA,GAC/E;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,KAAA;AAAA,IACR,EAAA,EAAI,yCAAA;AAAA,IACJ,WAAA,EAAa,QAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,cAAA,EAAgB;AAAA,MACd,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,8CAAA;AAAA,MACT,QAAA,EAAU;AAAA;AACZ,GACF;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,KAAA;AAAA,IACR,EAAA,EAAI,yCAAA;AAAA,IACJ,WAAA,EAAa,eAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,cAAA,EAAgB;AAAA,MACd,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,8CAAA;AAAA,MACT,QAAA,EAAU;AAAA;AACZ,GACF;AAAA;AAAA,EAEA;AAAA,IACE,MAAA,EAAQ,MAAA;AAAA,IACR,EAAA,EAAI,cAAA;AAAA,IACJ,WAAA,EAAa,MAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,cAAA,EAAgB;AAAA,MACd,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,kEAAA;AAAA,MACT,QAAA,EAAU;AAAA;AACZ,GACF;AAAA,EACA;AAAA,IACE,MAAA,EAAQ,MAAA;AAAA,IACR,EAAA,EAAI,cAAA;AAAA,IACJ,WAAA,EAAa,cAAA;AAAA,IACb,IAAA,EAAM,SAAA;AAAA,IACN,cAAA,EAAgB;AAAA,MACd,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,kEAAA;AAAA,MACT,QAAA,EAAU;AAAA;AACZ;AAEJ,CAAA;AAEA,IAAM,KAAA,GAAQ,IAAI,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,CAAC,OAAA,KAAY,CAAC,OAAA,CAAQ,EAAA,EAAI,OAAO,CAAC,CAAC,CAAA;AAM/D,IAAM,wBAA2C,QAAA,CAAS,MAAA;AAAA,EAC/D,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,KAAW;AACtB,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE;AAGjB,IAAM,cAAA,GAAiB,0BAAA;AAEvB,SAAS,OAAA,CAAQ,SAAiB,IAAA,EAA6B;AAC7D,EAAA,OAAO,IAAI,cAAc,gBAAA,EAAkB,OAAA,EAAS,EAAE,OAAA,EAAS,EAAE,IAAA,EAAK,EAAG,CAAA;AAC3E;AASO,SAAS,eAAA,CAAgB,IAAY,MAAA,EAAkD;AAC5F,EAAA,MAAM,OAAA,GAAU,KAAA,CAAM,GAAA,CAAI,EAAE,CAAA;AAC5B,EAAA,IAAI,SAAS,OAAO,OAAA;AACpB,EAAA,MAAM,QAAA,GAAW,SAAS,EAAE,CAAA;AAC5B,EAAA,MAAM,UAAU,MAAA,CAAO,cAAA,CAAe,KAAK,EAAE,CAAA,GAAI,CAAC,CAAC,CAAA;AACnD,EAAA,IAAI,CAAC,QAAA,IAAY,CAAC,OAAO,aAAA,CAAc,OAAO,GAAG,OAAO,MAAA;AACxD,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,KAAA;AAAA,IACR,EAAA;AAAA,IACA,OAAA;AAAA,IACA,aAAa,QAAA,CAAS,WAAA;AAAA,IACtB,MAAM,QAAA,CAAS;AAAA,GACjB;AACF;AAEO,SAAS,kBAAA,CAAmB,EAAA,EAAY,IAAA,EAAc,MAAA,EAAsC;AACjG,EAAA,MAAM,OAAA,GAAU,eAAA,CAAgB,EAAA,EAAI,MAAM,CAAA;AAC1C,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,CAAA,EAAG,IAAI,CAAA,GAAA,EAAM,EAAE,0DAA0D,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,yFAAA,CAAA;AAAA,MAC7G,EAAE,OAAA,EAAS,EAAE,IAAA,EAAM,OAAA,EAAS,IAAG;AAAE,KACnC;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT;AAMO,SAAS,sBAAA,CAAuB,QAAwB,IAAA,EAAoB;AACjF,EAAA,KAAA,MAAW,EAAA,IAAM,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,EAAG;AACpC,IAAA,MAAM,EAAA,GAAK,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACxB,IAAA,IAAI,KAAA,CAAM,GAAA,CAAI,EAAE,CAAA,EAAG;AACjB,MAAA,MAAM,OAAA;AAAA,QACJ,CAAA,EAAG,EAAE,CAAA,GAAA,EAAM,EAAE,CAAA,mEAAA,CAAA;AAAA,QACb;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,CAAC,eAAA,CAAgB,EAAA,EAAI,MAAM,CAAA,EAAG;AAChC,MAAA,MAAM,OAAA;AAAA,QACJ,CAAA,EAAG,EAAE,CAAA,GAAA,EAAM,EAAE,CAAA,4HAAA,CAAA;AAAA,QACb;AAAA,OACF;AAAA,IACF;AAAA,EACF;AACF;AAKO,SAAS,sBAAsB,OAAA,EAGnB;AACjB,EAAA,OAAO,OAAA,CAAQ,KAAA,GAAQ,OAAA,GAAU,OAAA,CAAQ,IAAA;AAC3C;AAGA,IAAM,mBAAA,GAAsB,gCAAA;AAErB,SAAS,uBAAuB,IAAA,EAA8B;AACnE,EAAA,OAAO,IAAA,KAAS,SAAA,GAAY,mBAAA,GAAsB,IAAA,CAAK,WAAA,EAAY;AACrE;;;AClRO,IAAM,iCAAA,GAAoC;AAQ1C,IAAM,yCAAA,GAA4C;;;ACHzD,IAAM,WAAA,GAAc,qBAAA;AACpB,IAAM,QAAA,GAAW,YAAA;AAGV,IAAM,YAAA,GAAe,CAAC,KAAA,KAC3B,OAAO,UAAU,QAAA,IAAY,WAAA,CAAY,KAAK,KAAK;AAG9C,IAAM,gBAAA,GAAmB,CAAC,KAAA,KAA2B,QAAA,CAAS,KAAK,KAAK;AAE/E,IAAM,eAAA,GAAkB,4DAAA;AAExB,IAAM,cAAA,GAAiB,+BAAA;AAEvB,IAAM,WAAA,GAAc,kCAAA;AACpB,IAAM,oBAAA,GAAuB,qBAAA;AAE7B,IAAM,gBAAA,GAAmB,+BAAA;AAIzB,IAAM,eAAA,GAAkB,uDAAA;AAExB,IAAM,qBAAA,GAAwB,+BAAA;AAMvB,SAAS,gBAAA,CAAiB,SAAsB,KAAA,EAAmC;AACxF,EAAA,QAAQ,QAAQ,MAAA;AAAQ,IACtB,KAAK,KAAA;AACH,MAAA,OAAO,YAAA,CAAa,KAAK,CAAA,GAAI,KAAA,GAAQ,MAAA;AAAA,IACvC,KAAK,KAAA;AACH,MAAA,OAAO,cAAA,CAAe,KAAK,KAAK,CAAA,IAAK,iBAAiB,KAAK,CAAA,KAAM,KAAK,KAAA,GAAQ,MAAA;AAAA,IAChF,KAAK,MAAA;AACH,MAAA,OAAO,KAAA,CAAM,MAAA,IAAU,CAAA,IAAK,KAAA,CAAM,MAAA,IAAU,MAAM,eAAA,CAAgB,IAAA,CAAK,KAAK,CAAA,GACxE,KAAA,GACA,MAAA;AAAA;AAEV;AAMO,SAAS,aAAA,CAAc,SAAsB,WAAA,EAA8B;AAChF,EAAA,QAAQ,QAAQ,MAAA;AAAQ,IACtB,KAAK,KAAA;AACH,MAAA,OAAO,iBAAiB,WAAW,CAAA;AAAA,IACrC,KAAK,KAAA;AACH,MAAA,OAAO,WAAA,KAAgB,WAAA;AAAA,IACzB,KAAK,MAAA;AACH,MAAA,OAAO,KAAA;AAAA;AAEb;AAGO,SAAS,WAAA,CAAY,OAAA,EAAsB,CAAA,EAAW,CAAA,EAAoB;AAC/E,EAAA,OAAO,OAAA,CAAQ,WAAW,KAAA,GAAQ,CAAA,CAAE,aAAY,KAAM,CAAA,CAAE,WAAA,EAAY,GAAI,CAAA,KAAM,CAAA;AAChF;AAMO,SAAS,sBAAA,CAAuB,SAAsB,KAAA,EAAwB;AACnF,EAAA,QAAQ,QAAQ,MAAA;AAAQ,IACtB,KAAK,KAAA;AACH,MAAA,OAAO,oBAAA,CAAqB,KAAK,KAAK,CAAA;AAAA,IACxC,KAAK,KAAA;AACH,MAAA,OAAO,iBAAiB,IAAA,CAAK,KAAK,CAAA,IAAK,gBAAA,CAAiB,KAAK,CAAA,KAAM,EAAA;AAAA,IACrE,KAAK,MAAA;AACH,MAAA,OAAO,sBAAsB,IAAA,CAAK,KAAK,CAAA,IAAK,gBAAA,CAAiB,KAAK,CAAA,KAAM,EAAA;AAAA;AAE9E;AAEA,SAAS,iBAAiB,KAAA,EAAuB;AAC/C,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,MAAW,IAAA,IAAQ,OAAO,CAAA,GAAI,CAAA,GAAI,MAAM,MAAA,CAAO,eAAA,CAAgB,OAAA,CAAQ,IAAI,CAAC,CAAA;AAE5E,EAAA,MAAM,eAAe,KAAA,CAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,CAAE,MAAA;AAC7D,EAAA,OAAO,YAAA,IAAgB,CAAA,KAAM,EAAA,GAAK,CAAA,GAAI,IAAA,CAAK,IAAA,CAAK,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,MAAA,GAAS,CAAC,CAAA,CAAA;AAC3E;;;AC1EO,IAAM,yBAAA,GAIT;AAAA,EACF;AAAA,IACE,OAAA,EAAS,4CAAA;AAAA,IACT,UAAA,EAAY;AAAA,GACd;AAAA,EACA;AAAA,IACE,OAAA,EAAS,4CAAA;AAAA,IACT,UAAA,EAAY;AAAA,GACd;AAAA,EACA;AAAA,IACE,OAAA,EAAS,4CAAA;AAAA,IACT,UAAA,EAAY;AAAA;AAEhB,CAAA;;;ACxBA,IAAM,sBAA2C,IAAI,GAAA;AAAA,EACnD,0BAA0B,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,UAAA,CAAW,aAAa;AACjE,CAAA;AAEA,IAAM,2BAAgD,IAAI,GAAA;AAAA,EACxD,0BAA0B,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,OAAA,CAAQ,aAAa;AAC9D,CAAA;AAGA,IAAM,iBAAA,GAAoB,qBAAA;AAEnB,SAAS,kBAAkB,UAAA,EAA6B;AAC7D,EAAA,OAAO,mBAAA,CAAoB,GAAA,CAAI,UAAA,CAAW,WAAA,EAAa,CAAA;AACzD;AAEO,SAAS,sBAAsB,OAAA,EAA0B;AAC9D,EAAA,OAAO,wBAAA,CAAyB,GAAA,CAAI,OAAA,CAAQ,WAAA,EAAa,CAAA;AAC3D;AASO,SAAS,2BAA2B,QAAA,EAA2B;AACpE,EAAA,MAAM,IAAI,QAAA,CAAS,WAAA,EAAY,CAAE,OAAA,CAAQ,YAAY,EAAE,CAAA;AACvD,EAAA,IAAI,CAAA,KAAM,WAAA,IAAe,CAAA,KAAM,KAAA,EAAO,OAAO,IAAA;AAC7C,EAAA,IAAI,kCAAA,CAAmC,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AACvD,EAAA,IAAI,iCAAA,CAAkC,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AACtD,EAAA,IAAI,8BAAA,CAA+B,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AACnD,EAAA,IAAI,6CAAA,CAA8C,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,IAAA;AAClE,EAAA,IAAI,CAAC,CAAA,CAAE,QAAA,CAAS,GAAG,CAAA,IAAK,CAAC,CAAA,CAAE,QAAA,CAAS,GAAG,CAAA,EAAG,OAAO,IAAA;AACjD,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,qBAAqB,MAAA,EAAwB;AACpD,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,MAAM,CAAA,CAAE,QAAA;AAAA,EACzB,SAAS,KAAA,EAAO;AAGd,IAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,0CAAA,EAA4C;AAAA,MACpF;AAAA,KACD,CAAA;AAAA,EACH;AACF;AAGO,SAAS,YAAY,MAAA,EAAwB;AAClD,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,MAAM,CAAA,CAAE,MAAA;AAAA,EACzB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,sBAAA;AAAA,EACT;AACF;AASO,SAAS,uBAAA,CAAwB,QAAgB,gBAAA,EAAgC;AACtF,EAAA,IAAI,CAAC,iBAAA,CAAkB,IAAA,CAAK,gBAAgB,CAAA,EAAG;AAC7C,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,iBAAA,CAAkB,gBAAgB,CAAA,EAAG;AAE1C,EAAA,MAAM,QAAA,GAAW,qBAAqB,MAAM,CAAA;AAE5C,EAAA,IAAI,CAAC,0BAAA,CAA2B,QAAQ,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,CAAA,8FAAA,EACK,WAAA,CAAY,MAAM,CAAC,CAAA,+QAAA;AAAA,KAG1B;AAAA,EACF;AACF;AAUO,SAAS,0BAAA,CAA2B,QAAgB,KAAA,EAAqB;AAC9E,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAK,CAAA,EAAG;AAEnC,EAAA,MAAM,QAAA,GAAW,qBAAqB,MAAM,CAAA;AAE5C,EAAA,IAAI,CAAC,0BAAA,CAA2B,QAAQ,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,CAAA,wBAAA,EAA2B,KAAK,CAAA,wDAAA,EAC3B,WAAA,CAAY,MAAM,CAAC,CAAA,4QAAA;AAAA,KAI1B;AAAA,EACF;AACF;;;AC7CA,IAAM,YAAA,GAAe,cAAA;AAErB,SAASA,QAAAA,CAAQ,SAAiB,IAAA,EAA6B;AAC7D,EAAA,OAAO,IAAI,cAAc,gBAAA,EAAkB,OAAA,EAAS,EAAE,OAAA,EAAS,EAAE,IAAA,EAAK,EAAG,CAAA;AAC3E;AAOO,SAAS,sBAAsB,KAAA,EAA4C;AAChF,EAAA,MAAM,EAAA,GAAK,MAAM,UAAA,IAAc,eAAA;AAC/B,EAAA,MAAM,KAAA,GAAQ,MAAM,UAAA,IAAc,OAAA;AAClC,EAAA,MAAM,OAAA,GAAU,mBAAmB,KAAA,CAAM,OAAA,EAAS,GAAG,EAAE,CAAA,QAAA,CAAA,EAAY,MAAM,cAAc,CAAA;AACvF,EAAA,MAAM,IAAA,GAAO,sBAAsB,OAAO,CAAA;AAI1C,EAAA,IAAI,QAAQ,IAAA,KAAS,SAAA,IAAa,KAAA,CAAM,WAAA,CAAY,SAAS,OAAA,EAAS;AACpE,IAAA,MAAMA,QAAAA;AAAA,MACJ,GAAG,EAAE,CAAA,WAAA,EAAc,QAAQ,EAAE,CAAA,GAAA,EAAM,QAAQ,WAAW,CAAA,+HAAA,CAAA;AAAA,MACtD,GAAG,EAAE,CAAA,iBAAA;AAAA,KACP;AAAA,EACF;AAGA,EAAA,IAAI,KAAA,CAAM,WAAA,CAAY,IAAA,KAAS,OAAA,IAAW,SAAS,OAAA,EAAS;AAC1D,IAAA,MAAMA,QAAAA;AAAA,MACJ,OAAA,CAAQ,OAAO,YAAA,GACX,CAAA,EAAG,EAAE,CAAA,kCAAA,EAAqC,cAAc,CAAA,6BAAA,EAAgC,YAAY,CAAA,8BAAA,EAAiC,EAAE,sBAAsB,cAAc,CAAA,qHAAA,CAAA,GAC3K,CAAA,EAAG,EAAE,CAAA,gEAAA,EAAmE,cAAc,gBAAgB,OAAA,CAAQ,EAAE,CAAA,GAAA,EAAM,OAAA,CAAQ,WAAW,CAAA,4BAAA,CAAA;AAAA,MAC7I,GAAG,EAAE,CAAA,iBAAA;AAAA,KACP;AAAA,EACF;AAEA,EAAA,IAAI,IAAA,KAAS,SAAA,IAAa,KAAA,CAAM,YAAA,KAAiB,IAAA,EAAM;AACrD,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,EAAE,CAAA,WAAA,EAAc,OAAA,CAAQ,EAAE,CAAA,GAAA,EAAM,OAAA,CAAQ,WAAW,CAAA,0BAAA,EAA6B,EAAE,CAAA,6EAAA,CAAA;AAAA,MACrF,GAAG,EAAE,CAAA,aAAA;AAAA,KACP;AAAA,EACF;AAEA,EAAA,IAAI,KAAA,CAAM,WAAA,CAAY,IAAA,KAAS,QAAA,EAAU;AACvC,IAAA,0BAAA,CAA2B,KAAA,CAAM,WAAA,CAAY,GAAA,EAAK,IAAA,EAAM,EAAE,CAAA;AAG1D,IAAA,IAAI,KAAA,CAAM,WAAA,CAAY,IAAA,CAAK,IAAA,KAAS,KAAA,IAAS,CAAC,mBAAA,CAAoB,KAAA,CAAM,WAAA,CAAY,GAAG,CAAA,EAAG;AACxF,MAAA,MAAMA,QAAAA;AAAA,QACJ,CAAA,EAAG,EAAE,CAAA,iDAAA,EAAoD,mBAAmB,CAAA,sBAAA,EAAyB,cAAA,CAAe,KAAA,CAAM,WAAA,CAAY,GAAG,CAAC,CAAA,sDAAA,EAAyD,mBAAmB,CAAA,sCAAA,CAAA;AAAA,QACtN,GAAG,EAAE,CAAA,gBAAA;AAAA,OACP;AAAA,IACF;AAIA,IAAA,IACE,IAAA,KAAS,aACT,KAAA,CAAM,WAAA,CAAY,KAAK,IAAA,KAAS,MAAA,IAChC,KAAA,CAAM,+BAAA,KAAoC,IAAA,EAC1C;AACA,MAAA,MAAMA,QAAAA;AAAA,QACJ,CAAA,EAAG,EAAE,CAAA,8CAAA,EAAiD,cAAA,CAAe,MAAM,WAAA,CAAY,GAAG,CAAC,CAAA,iBAAA,EAAoB,EAAE,CAAA,8HAAA,CAAA;AAAA,QACjH,GAAG,EAAE,CAAA,gCAAA;AAAA,OACP;AAAA,IACF;AAIA,IAAA,KAAA,MAAW,CAAC,OAAO,KAAK,CAAA,IAAK,iBAAiB,KAAA,CAAM,WAAA,CAAY,IAAI,CAAA,EAAG;AACrE,MAAA,IAAI,KAAA,CAAM,IAAA,EAAK,KAAM,EAAA,EAAI;AACvB,QAAA,MAAMA,QAAAA;AAAA,UACJ,CAAA,EAAG,EAAE,CAAA,4BAAA,EAA+B,KAAA,CAAM,YAAY,IAAA,CAAK,IAAI,SAAS,KAAK,CAAA,2DAAA,CAAA;AAAA,UAC7E,CAAA,EAAG,EAAE,CAAA,kBAAA,EAAqB,KAAK,CAAA;AAAA,SACjC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,EAAA,IAAI,aAAA,CAAc,OAAA,EAAS,KAAA,CAAM,KAAK,CAAA,EAAG;AACvC,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,EAAE,CAAA,GAAA,EAAM,KAAK,CAAA,gEAAA,CAAA;AAAA,MAChB,CAAA,EAAG,EAAE,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,KAChB;AAAA,EACF;AAKA,EAAA,IAAI,IAAA,KAAS,OAAA,IAAW,qBAAA,CAAsB,KAAA,CAAM,KAAK,CAAA,EAAG;AAC1D,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,EAAE,CAAA,GAAA,EAAM,KAAK,CAAA,GAAA,EAAM,MAAM,KAAK,CAAA,0DAAA,EAA6D,IAAI,CAAA,sDAAA,EAAyD,KAAK,CAAA,6BAAA,CAAA;AAAA,MAChK,CAAA,EAAG,EAAE,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,KAChB;AAAA,EACF;AAIA,EAAA,MAAM,YAAY,OAAA,CAAQ,cAAA;AAC1B,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,IAAI,CAAC,WAAA,CAAY,OAAA,EAAS,MAAM,KAAA,EAAO,SAAA,CAAU,OAAO,CAAA,EAAG;AACzD,MAAA,IAAI,KAAA,CAAM,kBAAA,KAAuB,IAAA,IAAQ,OAAA,CAAQ,WAAW,KAAA,EAAO;AACjE,QAAA,MAAM,IAAA,GACJ,KAAA,CAAM,kBAAA,KAAuB,IAAA,GACzB,CAAA,2CAAA,EAA8C,OAAA,CAAQ,WAAW,CAAA,qBAAA,EAAwB,SAAA,CAAU,MAAM,CAAA,CAAA,CAAA,GACzG,CAAA,uCAAA,EAA0C,UAAU,MAAM,CAAA,CAAA,CAAA;AAChE,QAAA,MAAMA,QAAAA;AAAA,UACJ,CAAA,EAAG,EAAE,CAAA,QAAA,EAAW,KAAA,CAAM,KAAK,CAAA,QAAA,EAAW,SAAA,CAAU,MAAM,CAAA,IAAA,EAAO,QAAQ,WAAW,CAAA,WAAA,EAAc,SAAA,CAAU,OAAO,MAAM,IAAI,CAAA,CAAA;AAAA,UACzH,GAAG,EAAE,CAAA,MAAA;AAAA,SACP;AAAA,MACF;AAAA,IACF,CAAA,MAAO;AAGL,MAAA,MAAM,MAAA,GAAS,MAAA,IAAU,SAAA,GAAY,SAAA,GAAY,MAAA;AACjD,MAAA,IAAI,UAAU,KAAA,CAAM,SAAA,KAAc,UAAa,KAAA,CAAM,SAAA,KAAc,OAAO,IAAA,EAAM;AAC9E,QAAA,MAAMA,QAAAA;AAAA,UACJ,CAAA,EAAG,EAAE,CAAA,aAAA,EAAgB,KAAA,CAAM,SAAS,CAAA,iCAAA,EAAoC,SAAA,CAAU,MAAM,CAAA,YAAA,EAAe,OAAA,CAAQ,WAAW,CAAA,YAAA,EAAe,OAAO,IAAI,CAAA,0DAAA,CAAA;AAAA,UACpJ,GAAG,EAAE,CAAA,UAAA;AAAA,SACP;AAAA,MACF;AACA,MAAA,IAAI,UAAU,KAAA,CAAM,YAAA,KAAiB,UAAa,KAAA,CAAM,YAAA,KAAiB,OAAO,OAAA,EAAS;AACvF,QAAA,MAAMA,QAAAA;AAAA,UACJ,CAAA,EAAG,EAAE,CAAA,gBAAA,EAAmB,KAAA,CAAM,YAAY,CAAA,oCAAA,EAAuC,SAAA,CAAU,MAAM,CAAA,YAAA,EAAe,OAAA,CAAQ,WAAW,CAAA,YAAA,EAAe,OAAO,OAAO,CAAA,GAAA,CAAA;AAAA,UAChK,GAAG,EAAE,CAAA,aAAA;AAAA,SACP;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AACzB;AAQA,SAAS,0BAAA,CAA2B,GAAA,EAAa,IAAA,EAAsB,EAAA,EAAkB;AACvF,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,CAAA,EAAG,EAAE,CAAA,oCAAA,CAAA,EAAwC;AAAA,MACrF,KAAA;AAAA,MACA,OAAA,EAAS,EAAE,IAAA,EAAM,CAAA,EAAG,EAAE,CAAA,gBAAA,CAAA;AAAmB,KAC1C,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,MAAA,CAAO,aAAa,QAAA,EAAU;AAClC,EAAA,IAAI,MAAA,CAAO,aAAa,OAAA,EAAS;AAC/B,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,EAAE,CAAA,cAAA,EAAiB,cAAA,CAAe,GAAG,CAAC,CAAA,oEAAA,EAAuE,OAAO,QAAQ,CAAA,GAAA,CAAA;AAAA,MAC/H,GAAG,EAAE,CAAA,gBAAA;AAAA,KACP;AAAA,EACF;AACA,EAAA,IAAI,IAAA,KAAS,SAAA,IAAa,0BAAA,CAA2B,MAAA,CAAO,QAAQ,CAAA,EAAG;AAIvE,EAAA,MAAMA,QAAAA;AAAA,IACJ,CAAA,EAAG,EAAE,CAAA,cAAA,EAAiB,cAAA,CAAe,GAAG,CAAC,CAAA,6KAAA,CAAA;AAAA,IACzC,GAAG,EAAE,CAAA,gBAAA;AAAA,GACP;AACF;AAGO,IAAM,mBAAA,GAAsB,+CAAA;AAGnC,SAAS,oBAAoB,GAAA,EAAsB;AACjD,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,GAAG,CAAA;AAC1B,IAAA,MAAM,QAAA,GAAW,IAAI,GAAA,CAAI,mBAAmB,CAAA;AAC5C,IAAA,OACE,MAAA,CAAO,MAAA,KAAW,QAAA,CAAS,MAAA,IAC3B,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,KAAM,QAAA,CAAS,QAAA,IACjD,OAAO,MAAA,KAAW,EAAA;AAAA,EAEtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAGA,SAAS,eAAe,GAAA,EAAqB;AAC3C,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,GAAG,CAAA,CAAE,MAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,+BAAA;AAAA,EACT;AACF;AAGA,SAAS,iBAAiB,IAAA,EAA+D;AACvF,EAAA,QAAQ,KAAK,IAAA;AAAM,IACjB,KAAK,QAAA;AACH,MAAA,OAAO,CAAC,CAAC,OAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA;AAAA,IAC/B,KAAK,KAAA;AACH,MAAA,OAAO;AAAA,QACL,CAAC,UAAA,EAAY,IAAA,CAAK,QAAQ,CAAA;AAAA,QAC1B,CAAC,cAAA,EAAgB,IAAA,CAAK,YAAY;AAAA,OACpC;AAAA,IACF;AACE,MAAA,OAAO,EAAC;AAAA;AAEd;;;ACjPO,SAAS,cAAc,KAAA,EAInB;AACT,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,SAAS,CAAA;AAC9C,EAAA,MAAM,UAAU,CAAC,KAAA,KAAmB,GAAA,GAAM,KAAA,CAAM,aAAY,GAAI,KAAA;AAChE,EAAA,OAAO,CAAA,EAAG,KAAA,CAAM,OAAO,CAAA,CAAA,EAAI,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAC,CAAA,CAAA,EAAI,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAC,CAAA,CAAA;AACzE;AAMA,IAAM,cAAA,GAAiB;AAAA,EACrB,SAAA,EAAW,qBAAA;AAAA,EACX,YAAA,EAAc,wBAAA;AAAA,EACd,aAAA,EAAe;AACjB,CAAA;AAEA,IAAM,cAAA,GAAiB;AAAA,EACrB,GAAA,EAAK,oCAAA;AAAA,EACL,GAAA,EAAK,iCAAA;AAAA,EACL,IAAA,EAAM;AACR,CAAA;AAEA,SAASA,QAAAA,CAAQ,SAAiB,IAAA,EAA6B;AAC7D,EAAA,OAAO,IAAI,cAAc,gBAAA,EAAkB,OAAA,EAAS,EAAE,OAAA,EAAS,EAAE,IAAA,EAAK,EAAG,CAAA;AAC3E;AAEO,SAAS,iBAAA,CACd,KAAA,EACA,IAAA,EACA,MAAA,EACoB;AACpB,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,MAAA,IAAa,KAAA,CAAM,WAAW,OAAA,EAAS;AAC1D,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,IAAI,CAAA,UAAA,EAAa,KAAA,CAAM,MAAM,CAAA,mDAAA,CAAA;AAAA,MAChC,GAAG,IAAI,CAAA,OAAA;AAAA,KACT;AAAA,EACF;AACA,EAAA,MAAM,UAAU,kBAAA,CAAmB,KAAA,CAAM,SAAS,CAAA,EAAG,IAAI,YAAY,MAAM,CAAA;AAC3E,EAAA,MAAM,OAAA,GAAU,CAAC,KAAA,EAA0B,KAAA,KAA0B;AACnE,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,OAAA,EAAS,KAAK,CAAA;AAC5C,IAAA,IAAI,SAAS,MAAA,EAAW;AACtB,MAAA,MAAMA,QAAAA;AAAA;AAAA,QAEJ,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,+BAAA,EAAkC,OAAA,CAAQ,WAAW,CAAA,WAAA,EAAc,cAAA,CAAe,OAAA,CAAQ,MAAM,CAAC,CAAA,CAAA,CAAA;AAAA,QACjH,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,OAClB;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,OAAA,EAAS,KAAA,CAAM,KAAK,CAAA;AAC1C,EAAA,IAAI,aAAA,CAAc,OAAA,EAAS,KAAK,CAAA,EAAG;AACjC,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,IAAI,CAAA,8BAAA,EAAiC,OAAA,CAAQ,WAAW,CAAA,2CAAA,CAAA;AAAA,MAC3D,GAAG,IAAI,CAAA,MAAA;AAAA,KACT;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,IAAuB,SAAA;AAC5C,EAAA,IAAI,MAAA,KAAW,SAAA,IAAa,MAAA,KAAW,SAAA,EAAW;AAChD,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,IAAI,CAAA,uBAAA,EAA0B,MAAM,CAAA,8CAAA,CAAA;AAAA,MACvC,GAAG,IAAI,CAAA,oBAAA;AAAA,KACT;AAAA,EACF;AACA,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,KAAA,IAAS,KAAA,CAAM,wBAAwB,MAAA,EAAW;AACvE,IAAA,MAAMA,QAAAA;AAAA,MACJ,CAAA,EAAG,IAAI,CAAA,0DAAA,EAA6D,OAAA,CAAQ,WAAW,CAAA,CAAA;AAAA,MACvF,GAAG,IAAI,CAAA,oBAAA;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,WAAW,KAAA,EAAO;AAC5B,IAAA,KAAA,MAAW,KAAA,IAAS,CAAC,WAAA,EAAa,cAAc,CAAA,EAAY;AAC1D,MAAA,IAAI,KAAA,CAAM,KAAK,CAAA,KAAM,MAAA,EAAW;AAC9B,QAAA,MAAMA,QAAAA;AAAA,UACJ,GAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,uDAAA,EAA0D,QAAQ,WAAW,CAAA,CAAA;AAAA,UAC7F,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,SAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,YAAY,OAAA,CAAQ,cAAA;AAC1B,EAAA,MAAM,MAAA,GAAS,SAAA,IAAa,MAAA,IAAU,SAAA,GAAY,SAAA,GAAY,MAAA;AAE9D,EAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,KAAU,MAAA,GAAY,QAAQ,OAAA,EAAS,KAAA,CAAM,KAAK,CAAA,GAAI,MAAA;AAC1E,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,aAAA,CAAc,OAAA,EAAS,KAAK,CAAA,EAAG;AACxD,IAAA,MAAMA,SAAQ,CAAA,EAAG,IAAI,CAAA,mCAAA,CAAA,EAAuC,CAAA,EAAG,IAAI,CAAA,MAAA,CAAQ,CAAA;AAAA,EAC7E;AAGA,EAAA,IAAI,SAAA,KAAc,UAAU,MAAA,IAAa,WAAA,CAAY,SAAS,KAAA,EAAO,SAAA,CAAU,OAAO,CAAA,CAAA,EAAI;AACxF,IAAA,MAAM,QAAA,GAAW;AAAA,MACf,WAAW,MAAA,EAAQ,IAAA;AAAA,MACnB,cAAc,MAAA,EAAQ,OAAA;AAAA,MACtB,eAAe,SAAA,CAAU;AAAA,KAC3B;AACA,IAAA,KAAA,MAAW,KAAA,IAAS,CAAC,WAAA,EAAa,cAAA,EAAgB,eAAe,CAAA,EAAY;AAC3E,MAAA,MAAM,KAAA,GAAQ,MAAM,KAAK,CAAA;AACzB,MAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,QAAA,CAAS,KAAK,CAAA,EAAG;AACpD,QAAA,MAAMA,QAAAA;AAAA,UACJ,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,mBAAmB,SAAA,CAAU,MAAM,CAAA,IAAA,EAAO,OAAA,CAAQ,WAAW,CAAA,gBAAA,EAAmB,eAAe,KAAK,CAAC,IAAI,IAAA,CAAK,SAAA,CAAU,SAAS,KAAK,CAAC,CAAC,CAAA,SAAA,EAAY,KAAK,CAAA,yCAAA,CAAA;AAAA,UACzK,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA;AAAA,SAClB;AAAA,MACF;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,OAAA;AAAA,MACR,OAAA;AAAA,MACA,KAAA;AAAA,MACA,KAAA,EAAO,SAAS,SAAA,CAAU,OAAA;AAAA,MAC1B,GAAI,MAAA,GAAS,EAAE,SAAA,EAAW,MAAA,CAAO,MAAM,YAAA,EAAc,MAAA,CAAO,OAAA,EAAQ,GAAI,EAAC;AAAA,MACzE,eAAe,SAAA,CAAU,QAAA;AAAA,MACzB,oBAAoB,SAAA,CAAU,MAAA;AAAA,MAC9B,mBAAA,EAAqB;AAAA,KACvB;AAAA,EACF;AAKA,EAAA,MAAM,QAAA,GACJ,OAAA,CAAQ,MAAA,KAAW,KAAA,IAAS,WAAW,SAAA,GAClC,CAAC,OAAA,EAAS,WAAA,EAAa,cAAA,EAAgB,eAAe,CAAA,GACtD,CAAC,SAAS,eAAe,CAAA;AAChC,EAAA,MAAM,OAAA,GAAU,SAAS,MAAA,CAAO,CAAC,UAAU,KAAA,CAAM,KAAK,MAAM,MAAS,CAAA;AACrE,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG;AAC7C,IAAA,MAAMA,QAAAA;AAAA,MACJ,SAAA,GACI,CAAA,EAAG,IAAI,CAAA,qBAAA,EAAwB,SAAA,CAAU,MAAM,CAAA,IAAA,EAAO,OAAA,CAAQ,WAAW,CAAA,OAAA,EAAU,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,GACrG,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,OAAA,CAAQ,WAAW,CAAA,2CAAA,EAA8C,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,MACnG,GAAG,IAAI,CAAA,CAAA,EAAI,OAAA,CAAQ,CAAC,KAAK,OAAO,CAAA;AAAA,KAClC;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,OAAA;AAAA,IACR,OAAA;AAAA,IACA,KAAA;AAAA,IACA,KAAA;AAAA,IACA,GAAI,MAAM,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,KAAA,CAAM,SAAA,EAAU,GAAI,EAAC;AAAA,IACtE,GAAI,MAAM,YAAA,KAAiB,MAAA,GAAY,EAAE,YAAA,EAAc,KAAA,CAAM,YAAA,EAAa,GAAI,EAAC;AAAA,IAC/E,eAAe,KAAA,CAAM,aAAA;AAAA,IACrB,mBAAA,EAAqB;AAAA,GACvB;AACF;;;AC9LO,IAAM,kBAAA,GAAqB,CAAC,eAAA,EAAiB,SAAS;AAItD,IAAM,yBAAA,GAA6C","file":"chunk-4OEXK3YG.js","sourcesContent":["/**\n * Network profiles: family, display name, environment, EVM chain ID and\n * default stablecoin. Config load rejects unknown IDs; parsing an EVM chain\n * ID cannot establish whether it is mainnet. Merchants must declare custom\n * EVM networks under `payments.x402.networks`; built-ins cannot be redeclared.\n *\n * Profiles copy SDK asset defaults to keep config load and the CLI SDK-free.\n * Tests compare each profile with the pinned SDK tables.\n *\n * The local Anvil chain has a profile of its own, `eip155:31337` (Anvil's\n * default chain id), so the network alone tells a local deployment from a\n * public one. Local health checks still require an Anvil response, because an\n * RPC endpoint can report any chain id.\n */\nimport { CommerceError } from '../../core';\n\n/** Chain id of the local Anvil dev chain, Anvil's default */\nexport const LOCAL_CHAIN_ID = 31337;\n\nexport type X402NetworkFamily = 'evm' | 'svm' | 'near';\n\nexport type NetworkKind = 'testnet' | 'mainnet';\n\n/** An EVM network the x402 provider can settle on */\nexport interface NetworkProfile {\n  /** CAIP-2 identifier, e.g. `eip155:84532` */\n  readonly id: string;\n  /** Signed into the buyer's EIP-712 domain */\n  readonly chainId: number;\n  readonly displayName: string;\n  readonly kind: NetworkKind;\n  /** The local Anvil dev chain, where the in-process facilitator runs */\n  readonly local?: boolean;\n  /**\n   * Default USDC deployment and EIP-712 domain. EVM offers may name another\n   * token; the local chain has no default and requires explicit token metadata.\n   *\n   * `name` is the signed EIP-712 domain name, not the symbol, and deployments\n   * differ: `\"USDC\"` on Base Sepolia, `\"USD Coin\"` on Base.\n   */\n  readonly canonicalAsset?: {\n    readonly symbol: string;\n    readonly address: string;\n    readonly name: string;\n    readonly version: string;\n    readonly decimals: number;\n  };\n}\n\ninterface NonEvmNetwork<F extends X402NetworkFamily> {\n  readonly family: F;\n  readonly id: string;\n  readonly displayName: string;\n  readonly kind: NetworkKind;\n  /** Solana mint or NEAR NEP-141 contract account, with no EIP-712 domain */\n  readonly canonicalAsset: {\n    readonly symbol: string;\n    readonly address: string;\n    readonly decimals: number;\n  };\n}\n\nexport type X402Network =\n  | (NetworkProfile & { readonly family: 'evm' })\n  | NonEvmNetwork<'svm'>\n  | NonEvmNetwork<'near'>;\n\n/** A merchant-declared EVM network, from `payments.x402.networks` */\nexport interface CustomNetworkDeclaration {\n  readonly kind: NetworkKind;\n  readonly displayName: string;\n}\n\nexport type CustomNetworks = Readonly<Record<string, CustomNetworkDeclaration>>;\n\nconst usdc = (address: string, name: string) =>\n  ({ symbol: 'USDC', address, name, version: '2', decimals: 6 }) as const;\n\nconst PROFILES: readonly X402Network[] = [\n  {\n    family: 'evm',\n    id: `eip155:${LOCAL_CHAIN_ID}`,\n    chainId: LOCAL_CHAIN_ID,\n    displayName: 'Local Anvil',\n    kind: 'testnet',\n    local: true,\n  },\n  {\n    family: 'evm',\n    id: 'eip155:84532',\n    chainId: 84532,\n    displayName: 'Base Sepolia',\n    kind: 'testnet',\n    canonicalAsset: usdc('0x036CbD53842c5426634e7929541eC2318f3dCF7e', 'USDC'),\n  },\n  {\n    family: 'evm',\n    id: 'eip155:8453',\n    chainId: 8453,\n    displayName: 'Base',\n    kind: 'mainnet',\n    canonicalAsset: usdc('0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913', 'USD Coin'),\n  },\n  {\n    family: 'evm',\n    id: 'eip155:1',\n    chainId: 1,\n    displayName: 'Ethereum',\n    kind: 'mainnet',\n    canonicalAsset: usdc('0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48', 'USD Coin'),\n  },\n  {\n    family: 'evm',\n    id: 'eip155:137',\n    chainId: 137,\n    displayName: 'Polygon',\n    kind: 'mainnet',\n    canonicalAsset: usdc('0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359', 'USD Coin'),\n  },\n  {\n    family: 'evm',\n    id: 'eip155:42161',\n    chainId: 42161,\n    displayName: 'Arbitrum One',\n    kind: 'mainnet',\n    canonicalAsset: usdc('0xaf88d065e77c8cC2239327C5EDb3A432268e5831', 'USD Coin'),\n  },\n  {\n    family: 'evm',\n    id: 'eip155:421614',\n    chainId: 421614,\n    displayName: 'Arbitrum Sepolia',\n    kind: 'testnet',\n    canonicalAsset: usdc('0x75faf114eafb1BDbe2F0316DF893fd58CE46AA4d', 'USD Coin'),\n  },\n  {\n    family: 'evm',\n    id: 'eip155:43114',\n    chainId: 43114,\n    displayName: 'Avalanche C-Chain',\n    kind: 'mainnet',\n    canonicalAsset: usdc('0xB97EF9Ef8734C71904D8002F8b6Bc66Dd9c48a6E', 'USD Coin'),\n  },\n  {\n    family: 'svm',\n    id: 'solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp',\n    displayName: 'Solana',\n    kind: 'mainnet',\n    canonicalAsset: {\n      symbol: 'USDC',\n      address: 'EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v',\n      decimals: 6,\n    },\n  },\n  {\n    family: 'svm',\n    id: 'solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1',\n    displayName: 'Solana Devnet',\n    kind: 'testnet',\n    canonicalAsset: {\n      symbol: 'USDC',\n      address: '4zMMC9srt5Ri5X14GAgXhaHii3GnPAEERYPJgZJDncDU',\n      decimals: 6,\n    },\n  },\n  // NEAR's USDC contracts are implicit accounts: 64 lowercase hex characters\n  {\n    family: 'near',\n    id: 'near:mainnet',\n    displayName: 'NEAR',\n    kind: 'mainnet',\n    canonicalAsset: {\n      symbol: 'USDC',\n      address: '17208628f84f5d6ad33f0da3bbbeb27ffcb398eac501a31bd6ad2011e36133a1',\n      decimals: 6,\n    },\n  },\n  {\n    family: 'near',\n    id: 'near:testnet',\n    displayName: 'NEAR Testnet',\n    kind: 'testnet',\n    canonicalAsset: {\n      symbol: 'USDC',\n      address: '3e2210e1184b45b64c8a434c0a7e7b23cc04ea7eb7a6c3c32520d03d4afcb8af',\n      decimals: 6,\n    },\n  },\n];\n\nconst BY_ID = new Map(PROFILES.map((profile) => [profile.id, profile]));\n\n/** Built-in networks of every family, for tests and diagnostics */\nexport const BUILT_IN_NETWORKS: readonly X402Network[] = PROFILES;\n\n/** The built-in EVM networks the x402 provider settles on without a declaration */\nexport const SUPPORTED_NETWORK_IDS: readonly string[] = PROFILES.filter(\n  (p) => p.family === 'evm',\n).map((p) => p.id);\n\n// A chain id viem and EIP-712 can carry as a JS number\nconst EVM_NETWORK_ID = /^eip155:([1-9]\\d{0,15})$/;\n\nfunction invalid(message: string, path: string): CommerceError {\n  return new CommerceError('CONFIG_INVALID', message, { details: { path } });\n}\n\n/** Built-in EVM profile for callers using the original network interface */\nexport function findNetworkProfile(id: string): NetworkProfile | undefined {\n  const profile = BY_ID.get(id);\n  return profile?.family === 'evm' ? profile : undefined;\n}\n\n/** A built-in network of any family, or a declared custom EVM network */\nexport function findX402Network(id: string, custom?: CustomNetworks): X402Network | undefined {\n  const builtIn = BY_ID.get(id);\n  if (builtIn) return builtIn;\n  const declared = custom?.[id];\n  const chainId = Number(EVM_NETWORK_ID.exec(id)?.[1]);\n  if (!declared || !Number.isSafeInteger(chainId)) return undefined;\n  return {\n    family: 'evm',\n    id,\n    chainId,\n    displayName: declared.displayName,\n    kind: declared.kind,\n  };\n}\n\nexport function requireX402Network(id: string, path: string, custom?: CustomNetworks): X402Network {\n  const network = findX402Network(id, custom);\n  if (!network) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      `${path}: \"${id}\" is not a known network. Built-in CAIP-2 identifiers: ${PROFILES.map((p) => p.id).join(', ')}. Declare another EVM network under payments.x402.networks with its kind and displayName.`,\n      { details: { path, network: id } },\n    );\n  }\n  return network;\n}\n\n/**\n * Allows only new `eip155` networks in `payments.x402.networks`. Redeclaring\n * built-ins could relabel mainnet as testnet; Solana and NEAR IDs are SDK-fixed.\n */\nexport function validateCustomNetworks(custom: CustomNetworks, path: string): void {\n  for (const id of Object.keys(custom)) {\n    const at = `${path}.${id}`;\n    if (BY_ID.has(id)) {\n      throw invalid(\n        `${at}: \"${id}\" is a built-in network and cannot be redeclared; remove this entry`,\n        at,\n      );\n    }\n    if (!findX402Network(id, custom)) {\n      throw invalid(\n        `${at}: \"${id}\" is not an EVM CAIP-2 identifier (\"eip155:\" followed by a positive chain id below 2^53). Only EVM networks can be declared.`,\n        at,\n      );\n    }\n  }\n}\n\n/** What a deployment is: the local dev chain, or a public testnet or mainnet */\nexport type DeploymentMode = 'local' | 'testnet' | 'mainnet';\n\nexport function resolveDeploymentMode(profile: {\n  readonly kind: NetworkKind;\n  readonly local?: boolean;\n}): DeploymentMode {\n  return profile.local ? 'local' : profile.kind;\n}\n\n// The banner an operator must not miss. Printed for mainnet only\nconst LIVE_MAINNET_BANNER = 'LIVE MAINNET MODE - REAL FUNDS';\n\nexport function describeDeploymentMode(mode: DeploymentMode): string {\n  return mode === 'mainnet' ? LIVE_MAINNET_BANNER : mode.toUpperCase();\n}\n","/**\n * Set on a payment requirement to run the backend before settlement.\n * The pipeline settles first unless this metadata value is `true`.\n */\nexport const SETTLE_AFTER_BACKEND_METADATA_KEY = 'settleAfterBackend';\n\n/**\n * Set to `true` when the rail permits presenting an authorization again after\n * its attempt was rejected, which settled nothing; the chain still spends each\n * nonce once. The pipeline lets retries reclaim the rejected attempt;\n * otherwise, it refuses them as replays.\n */\nexport const REUSE_REJECTED_AUTHORIZATION_METADATA_KEY = 'reuseRejectedAuthorization';\n","/**\n * SDK-free address checks for config load and the CLI. EVM addresses compare\n * without case; Solana keys and NEAR account IDs compare exactly.\n */\nimport type { X402Network } from './networks';\n\n// `0x` + 40 hex characters. Config load cannot check the EIP-55 checksum,\n// which needs keccak-256; the x402 and MPP providers refuse a mixed-case\n// address whose checksum is wrong when they start.\nconst EVM_ADDRESS = /^0x[0-9a-fA-F]{40}$/;\nconst EVM_ZERO = /^0x0{40}$/i;\n\n/** `0x` followed by 40 hex characters, in any case */\nexport const isEvmAddress = (value: unknown): value is `0x${string}` =>\n  typeof value === 'string' && EVM_ADDRESS.test(value);\n\n/** The EVM zero address, in any case */\nexport const isEvmZeroAddress = (value: string): boolean => EVM_ZERO.test(value);\n\nconst BASE58_ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';\n// A 32-byte key is 32 to 44 base58 characters\nconst SOLANA_ADDRESS = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;\n// The all-zero key, which is the System Program and owns nothing recoverable\nconst SOLANA_ZERO = '11111111111111111111111111111111';\nconst EVM_TRANSACTION_HASH = /^0x[0-9a-fA-F]{64}$/;\n// A 64-byte Ed25519 signature is at most 88 base58 characters\nconst SOLANA_SIGNATURE = /^[1-9A-HJ-NP-Za-km-z]{64,88}$/;\n\n// nearcore's account ID rule: 2 to 64 characters, lowercase alphanumeric runs\n// joined by single \"-\", \"_\" or \".\"; implicit accounts are 64 hex characters\nconst NEAR_ACCOUNT_ID = /^(([a-z\\d]+[-_])*[a-z\\d]+\\.)*([a-z\\d]+[-_])*[a-z\\d]+$/;\n// A transaction hash: 32 bytes in base58\nconst NEAR_TRANSACTION_HASH = /^[1-9A-HJ-NP-Za-km-z]{32,44}$/;\n\n/**\n * Returns the family's wire address or `undefined`. NEAR uses named or\n * implicit account IDs; a `.near` suffix does not identify the network.\n */\nexport function normalizeAddress(network: X402Network, value: string): string | undefined {\n  switch (network.family) {\n    case 'evm':\n      return isEvmAddress(value) ? value : undefined;\n    case 'svm':\n      return SOLANA_ADDRESS.test(value) && base58ByteLength(value) === 32 ? value : undefined;\n    case 'near':\n      return value.length >= 2 && value.length <= 64 && NEAR_ACCOUNT_ID.test(value)\n        ? value\n        : undefined;\n  }\n}\n\n/**\n * An address funds cannot be recovered from: the zero address of its family.\n * NEAR has no zero account.\n */\nexport function isBurnAddress(network: X402Network, wireAddress: string): boolean {\n  switch (network.family) {\n    case 'evm':\n      return isEvmZeroAddress(wireAddress);\n    case 'svm':\n      return wireAddress === SOLANA_ZERO;\n    case 'near':\n      return false;\n  }\n}\n\n/** Compare EVM addresses case-insensitively, Solana keys and NEAR account IDs exactly */\nexport function sameAddress(network: X402Network, a: string, b: string): boolean {\n  return network.family === 'evm' ? a.toLowerCase() === b.toLowerCase() : a === b;\n}\n\n/**\n * A settlement reference in its family's form: an EVM transaction hash, a\n * Solana transaction signature or a NEAR transaction hash\n */\nexport function isTransactionReference(network: X402Network, value: string): boolean {\n  switch (network.family) {\n    case 'evm':\n      return EVM_TRANSACTION_HASH.test(value);\n    case 'svm':\n      return SOLANA_SIGNATURE.test(value) && base58ByteLength(value) === 64;\n    case 'near':\n      return NEAR_TRANSACTION_HASH.test(value) && base58ByteLength(value) === 32;\n  }\n}\n\nfunction base58ByteLength(value: string): number {\n  let n = 0n;\n  for (const char of value) n = n * 58n + BigInt(BASE58_ALPHABET.indexOf(char));\n  // Each leading '1' encodes one leading zero byte\n  const leadingZeros = value.length - value.replace(/^1+/, '').length;\n  return leadingZeros + (n === 0n ? 0 : Math.ceil(n.toString(16).length / 2));\n}\n","/**\n * Anvil's well-known development accounts.\n *\n * LOCAL DEVELOPMENT ONLY - DO NOT FUND. The keys come from Foundry's public\n * default mnemonic (\"test test ... junk\"), so value sent to these addresses on\n * a real network can be taken by anyone.\n *\n * Index layout on the local demo chain:\n * 0 - deployer and local facilitator signer (pays gas, broadcasts settlement)\n * 1 - merchant settlement destination (`payTo`)\n * 2 - buyer (signs EIP-3009 authorizations; never held by the gateway)\n */\nexport interface AnvilWellKnownAccount {\n  readonly address: `0x${string}`;\n  readonly privateKey: `0x${string}`;\n}\n\n/** A fixed-length tuple, so indexing by the layout above is typed */\nexport const ANVIL_WELL_KNOWN_ACCOUNTS: readonly [\n  AnvilWellKnownAccount,\n  AnvilWellKnownAccount,\n  AnvilWellKnownAccount,\n] = [\n  {\n    address: '0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266',\n    privateKey: '0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80',\n  },\n  {\n    address: '0x70997970C51812dc3A010C7d01b50e0d17dc79C8',\n    privateKey: '0x59c6995e998f97a5a0044966f0945389dc9e86dae88c7a8412f4603b6b78690d',\n  },\n  {\n    address: '0x3C44CdDdB6a900fa2b585dd299e03d12FA4293BC',\n    privateKey: '0x5de4111afa1a4b94908f83103eb1f1706367c2e68ca870fc3fb9a804cdab365a',\n  },\n];\n\nexport const LOCAL_FACILITATOR_ACCOUNT = ANVIL_WELL_KNOWN_ACCOUNTS[0];\nexport const LOCAL_MERCHANT_ACCOUNT = ANVIL_WELL_KNOWN_ACCOUNTS[1];\nexport const LOCAL_BUYER_ACCOUNT = ANVIL_WELL_KNOWN_ACCOUNTS[2];\n\n/** Label printed wherever a dev key appears in output, logs or manifests */\nexport const DEV_KEY_LABEL = 'LOCAL DEVELOPMENT ONLY - DO NOT FUND';\n","/**\n * Rejects well-known Anvil keys and payment destinations when the RPC host\n * does not look local or private. Their private keys are published, so anyone\n * can spend what such an address receives on a public chain.\n *\n * The check uses the RPC hostname because the local chain shares Base\n * Sepolia's chain id. Both guards run at provider construction.\n */\nimport { CommerceError } from '../../core';\nimport { ANVIL_WELL_KNOWN_ACCOUNTS } from './local-chain/accounts';\n\nconst WELL_KNOWN_DEV_KEYS: ReadonlySet<string> = new Set(\n  ANVIL_WELL_KNOWN_ACCOUNTS.map((a) => a.privateKey.toLowerCase()),\n);\n\nconst WELL_KNOWN_DEV_ADDRESSES: ReadonlySet<string> = new Set(\n  ANVIL_WELL_KNOWN_ACCOUNTS.map((a) => a.address.toLowerCase()),\n);\n\n// `0x` plus 64 hex characters, the only shape `privateKeyToAccount` accepts\nconst PRIVATE_KEY_SHAPE = /^0x[0-9a-fA-F]{64}$/;\n\nexport function isWellKnownDevKey(privateKey: string): boolean {\n  return WELL_KNOWN_DEV_KEYS.has(privateKey.toLowerCase());\n}\n\nexport function isWellKnownDevAddress(address: string): boolean {\n  return WELL_KNOWN_DEV_ADDRESSES.has(address.toLowerCase());\n}\n\n/**\n * True for loopback addresses, RFC 1918 private ranges, and bare (dot-free)\n * hostnames, such as the compose service name \"anvil\".\n *\n * Bare hostnames are treated as local without resolving them. Operators must\n * point them at a private chain.\n */\nexport function isLikelyLocalOrPrivateHost(hostname: string): boolean {\n  const h = hostname.toLowerCase().replace(/^\\[|\\]$/g, '');\n  if (h === 'localhost' || h === '::1') return true;\n  if (/^127\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (/^10\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (/^192\\.168\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (/^172\\.(1[6-9]|2\\d|3[01])\\.\\d{1,3}\\.\\d{1,3}$/.test(h)) return true;\n  if (!h.includes('.') && !h.includes(':')) return true; // bare hostname\n  return false;\n}\n\nfunction parseHostnameOrThrow(rpcUrl: string): string {\n  try {\n    return new URL(rpcUrl).hostname;\n  } catch (cause) {\n    // Never the URL itself: RPC providers commonly put an API key in the path,\n    // and this message reaches startup output and CI logs\n    throw new CommerceError('CONFIG_INVALID', 'x402 provider: rpcUrl is not a valid URL', {\n      cause,\n    });\n  }\n}\n\n/** Origin only, for diagnostics: RPC URLs often carry an API key in the path or query */\nexport function describeRpc(rpcUrl: string): string {\n  try {\n    return new URL(rpcUrl).origin;\n  } catch {\n    return '[unparseable rpcUrl]';\n  }\n}\n\n/**\n * Throws CONFIG_INVALID if `signerPrivateKey` is not shaped like a private key,\n * or if it is a well-known dev key and the RPC is not local.\n *\n * The shape check runs first, so a truncated key is reported as malformed\n * instead of passing as \"not a dev key\".\n */\nexport function assertDevKeyIsLocalOnly(rpcUrl: string, signerPrivateKey: string): void {\n  if (!PRIVATE_KEY_SHAPE.test(signerPrivateKey)) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      'x402 provider: facilitator.signerPrivateKey is not a well-formed private key ' +\n        '(expected \"0x\" followed by exactly 64 hex characters).',\n    );\n  }\n\n  if (!isWellKnownDevKey(signerPrivateKey)) return; // the operator's own key\n\n  const hostname = parseHostnameOrThrow(rpcUrl);\n\n  if (!isLikelyLocalOrPrivateHost(hostname)) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      'x402 provider: facilitator.signerPrivateKey is a well-known Anvil development key, but rpcUrl ' +\n        `${describeRpc(rpcUrl)} does not look like a local/private chain. A public dev key must never sign against ` +\n        'a public network: it is instantly drainable and can grief real settlements via nonce exhaustion. ' +\n        'Use a real facilitator key for any non-local RPC, or point rpcUrl at your local/dev chain.',\n    );\n  }\n}\n\n/**\n * Throws CONFIG_INVALID if `payTo` is a well-known Anvil address and `rpcUrl`\n * does not look local or private.\n *\n * Guards the receiving side, in every facilitator mode. `agent-commerce init`\n * defaults `payTo` to a well-known address for the local demo, and on a real\n * network that default sends every payment where anyone can sweep it.\n */\nexport function assertPayToIsNotDevAddress(rpcUrl: string, payTo: string): void {\n  if (!isWellKnownDevAddress(payTo)) return;\n\n  const hostname = parseHostnameOrThrow(rpcUrl);\n\n  if (!isLikelyLocalOrPrivateHost(hostname)) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      `x402 provider: \"payTo\" (${payTo}) is a well-known Anvil development address, but rpcUrl ` +\n        `${describeRpc(rpcUrl)} does not look like a local/private chain. The private key behind that address ` +\n        'is public knowledge, so any revenue settled to it is immediately spendable by anyone. Set ' +\n        '\"payTo\" to your own merchant wallet for any non-local RPC, or point rpcUrl at your ' +\n        'local/dev chain.',\n    );\n  }\n}\n","/**\n * What must hold before this gateway may settle a payment on the configured\n * network. Two callers share these checks: the provider runs them at\n * construction, so a library consumer who skips our config loader still gets\n * them, and the config loader runs them, so `validate` and `doctor` report\n * them too.\n *\n * Both run before any request, because a failure found in `settle()` would\n * come after the pipeline reserved the buyer's replay key.\n *\n * Imports no peer (no viem, no `@x402/*`), so the CLI can load it.\n */\nimport { CommerceError } from '../../core';\nimport { isBurnAddress, sameAddress } from './addresses';\nimport { isLikelyLocalOrPrivateHost, isWellKnownDevAddress } from './dev-key-guard';\nimport {\n  type CustomNetworks,\n  type DeploymentMode,\n  LOCAL_CHAIN_ID,\n  requireX402Network,\n  resolveDeploymentMode,\n  type X402Network,\n} from './networks';\n\n/**\n * How the gateway authenticates to a remote facilitator.\n *\n * - `none`: send no credential; use it when the facilitator accepts\n *   anonymous requests.\n * - `bearer`: send a static token; no extra peer package is needed.\n * - `cdp`: Coinbase Developer Platform. The optional peer `@coinbase/x402`,\n *   imported only for this type, signs a fresh JWT per request.\n *\n * Any other auth type is refused at config load.\n */\nexport type FacilitatorAuth =\n  | { readonly type: 'none' }\n  | { readonly type: 'bearer'; readonly token: string }\n  | { readonly type: 'cdp'; readonly apiKeyId: string; readonly apiKeySecret: string };\n\nexport type X402FacilitatorConfig =\n  | { readonly mode: 'local'; readonly signerPrivateKey: string }\n  | { readonly mode: 'remote'; readonly url: string; readonly auth: FacilitatorAuth };\n\nexport interface X402DeploymentInput {\n  readonly network: string;\n  readonly payTo: string;\n  readonly asset: string;\n  /** EIP-712 domain of the asset, as the token itself reports it */\n  readonly assetName?: string;\n  readonly assetVersion?: string;\n  readonly facilitator: X402FacilitatorConfig;\n  /** Must be `true` before anything settles on a mainnet */\n  readonly allowMainnet?: boolean;\n  /**\n   * Must be `true` on mainnet when facilitator auth is `none`. A separate\n   * decision from `allowMainnet`: it accepts settling without an account at\n   * the facilitator, under its anonymous-access limits.\n   */\n  readonly allowUnauthenticatedFacilitator?: boolean;\n  /**\n   * Allow other tokens on built-in EVM networks with explicit metadata.\n   * MPP config leaves this unset; Solana and NEAR still require USDC.\n   */\n  readonly allowOtherEvmToken?: boolean;\n  /** Error-path prefix, `payments.x402` by default */\n  readonly configPath?: string;\n  /** Settlement-recipient field named in errors, `payTo` by default */\n  readonly payToField?: string;\n  /** EVM networks declared under `payments.x402.networks` */\n  readonly customNetworks?: CustomNetworks;\n}\n\nexport interface X402Deployment {\n  readonly profile: X402Network;\n  readonly mode: DeploymentMode;\n}\n\nconst BASE_SEPOLIA = 'eip155:84532';\n\nfunction invalid(message: string, path: string): CommerceError {\n  return new CommerceError('CONFIG_INVALID', message, { details: { path } });\n}\n\n/**\n * Resolves the deployment and refuses the combinations that could move real\n * money by accident. The network must resolve first; the other checks are\n * independent.\n */\nexport function resolveX402Deployment(input: X402DeploymentInput): X402Deployment {\n  const at = input.configPath ?? 'payments.x402';\n  const payTo = input.payToField ?? 'payTo';\n  const profile = requireX402Network(input.network, `${at}.network`, input.customNetworks);\n  const mode = resolveDeploymentMode(profile);\n\n  // Local mode keeps a gas-paying key in the gateway process. A compromise\n  // could expose that key, so mainnet requires a remote facilitator.\n  if (profile.kind === 'mainnet' && input.facilitator.mode === 'local') {\n    throw invalid(\n      `${at}: network \"${profile.id}\" (${profile.displayName}) is a mainnet and cannot be served by facilitator.mode \"local\". A mainnet deployment must settle through a remote facilitator.`,\n      `${at}.facilitator.mode`,\n    );\n  }\n  // The in-process facilitator signs with a client built for the Anvil chain\n  // id, so on any other chain every settlement would fail\n  if (input.facilitator.mode === 'local' && mode !== 'local') {\n    throw invalid(\n      profile.id === BASE_SEPOLIA\n        ? `${at}: the local Anvil chain is eip155:${LOCAL_CHAIN_ID}, Anvil's default chain id; \"${BASE_SEPOLIA}\" is public Base Sepolia. Set ${at}.network to eip155:${LOCAL_CHAIN_ID}, start Anvil with its default chain id and redeploy the local contracts (npm run chain:start, npm run chain:deploy).`\n        : `${at}: facilitator.mode \"local\" serves the local Anvil chain (eip155:${LOCAL_CHAIN_ID}) only, not \"${profile.id}\" (${profile.displayName}). Use a remote facilitator.`,\n      `${at}.facilitator.mode`,\n    );\n  }\n\n  if (mode === 'mainnet' && input.allowMainnet !== true) {\n    throw invalid(\n      `${at}: network \"${profile.id}\" (${profile.displayName}) settles real funds. Set ${at}.allowMainnet: true to acknowledge this explicitly - it is never the default.`,\n      `${at}.allowMainnet`,\n    );\n  }\n\n  if (input.facilitator.mode === 'remote') {\n    assertFacilitatorUrlIsSafe(input.facilitator.url, mode, at);\n    // `@coinbase/x402` signs each request for CDP's own host and route,\n    // whatever URL is configured, so no other facilitator can accept the credential\n    if (input.facilitator.auth.type === 'cdp' && !isCdpFacilitatorUrl(input.facilitator.url)) {\n      throw invalid(\n        `${at}: facilitator.auth.type \"cdp\" signs requests for ${CDP_FACILITATOR_URL} only, so facilitator ${describeOrigin(input.facilitator.url)} cannot accept its credential. Set facilitator.url to ${CDP_FACILITATOR_URL}, or use auth.type \"bearer\" or \"none\".`,\n        `${at}.facilitator.url`,\n      );\n    }\n    // The authorization fixes recipient, amount and chain, so a facilitator\n    // cannot redirect funds. A credential adds an account: rate limits, terms\n    // and support. On mainnet, going without one is an explicit choice.\n    if (\n      mode === 'mainnet' &&\n      input.facilitator.auth.type === 'none' &&\n      input.allowUnauthenticatedFacilitator !== true\n    ) {\n      throw invalid(\n        `${at}: no credential is configured for facilitator ${describeOrigin(input.facilitator.url)} on mainnet. Set ${at}.allowUnauthenticatedFacilitator: true to accept anonymous access and the facilitator's limits, or configure facilitator.auth.`,\n        `${at}.allowUnauthenticatedFacilitator`,\n      );\n    }\n    // A blank credential reaches the facilitator as \"unauthenticated\" and fails\n    // every payment after the buyer signed. `${VAR:- }` resolving to whitespace\n    // is the usual cause.\n    for (const [field, value] of credentialFields(input.facilitator.auth)) {\n      if (value.trim() === '') {\n        throw invalid(\n          `${at}: facilitator.auth.type is \"${input.facilitator.auth.type}\" but ${field} is empty. An empty credential is refused rather than sent.`,\n          `${at}.facilitator.auth.${field}`,\n        );\n      }\n    }\n  }\n\n  // The config loader's address check refuses this too; repeated here for a\n  // library consumer who calls `createX402PaymentProvider` without it\n  if (isBurnAddress(profile, input.payTo)) {\n    throw invalid(\n      `${at}: \"${payTo}\" is the zero address. Every payment settled there is destroyed.`,\n      `${at}.${payTo}`,\n    );\n  }\n\n  // Anyone can spend from a well-known Anvil address. `dev-key-guard` refuses\n  // one behind a public RPC; this refuses one on any non-local deployment,\n  // whose RPC host says nothing about where a remote facilitator settles.\n  if (mode !== 'local' && isWellKnownDevAddress(input.payTo)) {\n    throw invalid(\n      `${at}: \"${payTo}\" (${input.payTo}) is a well-known Anvil development address and this is a ${mode} deployment. Anyone can spend what settles there. Set ${payTo} to your own merchant wallet.`,\n      `${at}.${payTo}`,\n    );\n  }\n\n  // Public built-ins require USDC unless the caller allows another EVM token.\n  // Local and declared networks have no default asset.\n  const canonical = profile.canonicalAsset;\n  if (canonical) {\n    if (!sameAddress(profile, input.asset, canonical.address)) {\n      if (input.allowOtherEvmToken !== true || profile.family !== 'evm') {\n        const rule =\n          input.allowOtherEvmToken === true\n            ? `Only an EVM network accepts another token; ${profile.displayName} settles only in its ${canonical.symbol}.`\n            : `A built-in network settles only in its ${canonical.symbol}.`;\n        throw invalid(\n          `${at}: asset ${input.asset} is not ${canonical.symbol} on ${profile.displayName} (expected ${canonical.address}). ${rule}`,\n          `${at}.asset`,\n        );\n      }\n    } else {\n      // Catch USDC domain mismatches before accepting payments; a wrong name\n      // can fail with `invalid_exact_evm_token_name_mismatch`\n      const domain = 'name' in canonical ? canonical : undefined;\n      if (domain && input.assetName !== undefined && input.assetName !== domain.name) {\n        throw invalid(\n          `${at}: assetName \"${input.assetName}\" is not the EIP-712 domain name ${canonical.symbol} reports on ${profile.displayName} (expected \"${domain.name}\"). Every payment would be refused after the buyer signed.`,\n          `${at}.assetName`,\n        );\n      }\n      if (domain && input.assetVersion !== undefined && input.assetVersion !== domain.version) {\n        throw invalid(\n          `${at}: assetVersion \"${input.assetVersion}\" is not the EIP-712 domain version ${canonical.symbol} reports on ${profile.displayName} (expected \"${domain.version}\").`,\n          `${at}.assetVersion`,\n        );\n      }\n    }\n  }\n\n  return { profile, mode };\n}\n\n/**\n * A facilitator sees every payment authorization this gateway handles. Plain\n * HTTP puts those on the wire in the clear and lets anyone in the path rewrite\n * a settlement result, so it is allowed only to a local or private host, and\n * never on a mainnet.\n */\nfunction assertFacilitatorUrlIsSafe(url: string, mode: DeploymentMode, at: string): void {\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch (cause) {\n    throw new CommerceError('CONFIG_INVALID', `${at}: facilitator.url is not a valid URL`, {\n      cause,\n      details: { path: `${at}.facilitator.url` },\n    });\n  }\n\n  if (parsed.protocol === 'https:') return;\n  if (parsed.protocol !== 'http:') {\n    throw invalid(\n      `${at}: facilitator ${describeOrigin(url)} must be reached over https (or http on a local/private host); got \"${parsed.protocol}//\"`,\n      `${at}.facilitator.url`,\n    );\n  }\n  if (mode !== 'mainnet' && isLikelyLocalOrPrivateHost(parsed.hostname)) return;\n\n  // The origin, never the whole URL: the path can carry a tenant or an API\n  // key, and this message reaches `validate`, `doctor`, startup output and CI logs\n  throw invalid(\n    `${at}: facilitator ${describeOrigin(url)} is reached over plain HTTP. Payment authorizations and settlement results would travel unencrypted. Use https, or point at a local/private host on a non-mainnet deployment.`,\n    `${at}.facilitator.url`,\n  );\n}\n\n/** The facilitator URL `@coinbase/x402` signs its JWTs for */\nexport const CDP_FACILITATOR_URL = 'https://api.cdp.coinbase.com/platform/v2/x402';\n\n// The SDK client strips trailing slashes before appending its route\nfunction isCdpFacilitatorUrl(url: string): boolean {\n  try {\n    const parsed = new URL(url);\n    const expected = new URL(CDP_FACILITATOR_URL);\n    return (\n      parsed.origin === expected.origin &&\n      parsed.pathname.replace(/\\/+$/, '') === expected.pathname &&\n      parsed.search === ''\n    );\n  } catch {\n    return false;\n  }\n}\n\n// Origin only: a facilitator URL can carry a tenant path or an API key\nfunction describeOrigin(url: string): string {\n  try {\n    return new URL(url).origin;\n  } catch {\n    return '[unparseable facilitator.url]';\n  }\n}\n\n// The secret-bearing fields of an auth block, for emptiness checks only. Never logged\nfunction credentialFields(auth: FacilitatorAuth): readonly (readonly [string, string])[] {\n  switch (auth.type) {\n    case 'bearer':\n      return [['token', auth.token]];\n    case 'cdp':\n      return [\n        ['apiKeyId', auth.apiKeyId],\n        ['apiKeySecret', auth.apiKeySecret],\n      ];\n    default:\n      return [];\n  }\n}\n","/**\n * Resolves an x402 option into offer terms at config load, so `validate`\n * reports invalid options before startup. This module uses no SDK.\n *\n * Omitted assets use `canonicalAsset`. Overrides for the default token must\n * match its metadata; another token needs its own, including the EIP-712 domain\n * on EVM.\n */\nimport { CommerceError } from '../../core';\nimport { isBurnAddress, normalizeAddress, sameAddress } from './addresses';\nimport { type CustomNetworks, requireX402Network, type X402Network } from './networks';\n\nexport interface X402OptionInput {\n  readonly scheme?: string;\n  readonly network: string;\n  readonly payTo: string;\n  readonly asset?: string;\n  readonly assetName?: string;\n  readonly assetVersion?: string;\n  readonly assetDecimals?: number;\n  /** `eip3009` (the default) or `permit2`; EVM only */\n  readonly assetTransferMethod?: string;\n}\n\nexport interface ResolvedX402Option {\n  readonly scheme: 'exact';\n  readonly network: X402Network;\n  readonly payTo: string;\n  readonly asset: string;\n  /** EIP-712 domain; EVM only */\n  readonly assetName?: string;\n  readonly assetVersion?: string;\n  readonly assetDecimals: number;\n  /**\n   * Default token symbol when `asset` is omitted; resource prices must use\n   * this symbol or USD\n   */\n  readonly defaultAssetSymbol?: string;\n  /** How the buyer authorizes the transfer; always `eip3009` off EVM */\n  readonly assetTransferMethod: X402AssetTransferMethod;\n}\n\n/**\n * Names health components by network, asset and payee for discovery matching.\n * Lowercase EVM addresses so case variants identify the same offer.\n */\nexport function x402OfferName(offer: {\n  readonly network: string;\n  readonly asset: string;\n  readonly payTo: string;\n}): string {\n  const evm = offer.network.startsWith('eip155:');\n  const address = (value: string) => (evm ? value.toLowerCase() : value);\n  return `${offer.network} ${address(offer.asset)} ${address(offer.payTo)}`;\n}\n\n/** EIP-3009 `transferWithAuthorization`, or Permit2 with a prior token allowance */\nexport type X402AssetTransferMethod = 'eip3009' | 'permit2';\n\n// Incorrect EIP-712 domain values invalidate the buyer's signature\nconst FIELD_MEANINGS = {\n  assetName: 'EIP-712 domain name',\n  assetVersion: 'EIP-712 domain version',\n  assetDecimals: 'decimals',\n} as const;\n\nconst ADDRESS_SHAPES = {\n  evm: '\"0x\" followed by 40 hex characters',\n  svm: 'a base58 public key of 32 bytes',\n  near: 'a NEAR account ID: 2 to 64 lowercase characters, digits and single \"-\", \"_\" or \".\" separators',\n} as const;\n\nfunction invalid(message: string, path: string): CommerceError {\n  return new CommerceError('CONFIG_INVALID', message, { details: { path } });\n}\n\nexport function resolveX402Option(\n  input: X402OptionInput,\n  path: string,\n  custom?: CustomNetworks,\n): ResolvedX402Option {\n  if (input.scheme !== undefined && input.scheme !== 'exact') {\n    throw invalid(\n      `${path}.scheme: \"${input.scheme}\" is not supported; the only x402 scheme is \"exact\"`,\n      `${path}.scheme`,\n    );\n  }\n  const network = requireX402Network(input.network, `${path}.network`, custom);\n  const address = (field: 'payTo' | 'asset', value: string): string => {\n    const wire = normalizeAddress(network, value);\n    if (wire === undefined) {\n      throw invalid(\n        // The value is not echoed: a swapped variable could put a key here\n        `${path}.${field} is not a plausible address on ${network.displayName} (expected ${ADDRESS_SHAPES[network.family]})`,\n        `${path}.${field}`,\n      );\n    }\n    return wire;\n  };\n\n  const payTo = address('payTo', input.payTo);\n  if (isBurnAddress(network, payTo)) {\n    throw invalid(\n      `${path}.payTo is the zero address of ${network.displayName}. Every payment settled there is destroyed.`,\n      `${path}.payTo`,\n    );\n  }\n\n  const method = input.assetTransferMethod ?? 'eip3009';\n  if (method !== 'eip3009' && method !== 'permit2') {\n    throw invalid(\n      `${path}.assetTransferMethod: \"${method}\" is not supported; use \"eip3009\" or \"permit2\"`,\n      `${path}.assetTransferMethod`,\n    );\n  }\n  if (network.family !== 'evm' && input.assetTransferMethod !== undefined) {\n    throw invalid(\n      `${path}.assetTransferMethod applies to EVM networks only, not to ${network.displayName}`,\n      `${path}.assetTransferMethod`,\n    );\n  }\n\n  if (network.family !== 'evm') {\n    for (const field of ['assetName', 'assetVersion'] as const) {\n      if (input[field] !== undefined) {\n        throw invalid(\n          `${path}.${field}: an EIP-712 domain applies to EVM tokens only, not to ${network.displayName}`,\n          `${path}.${field}`,\n        );\n      }\n    }\n  }\n\n  const canonical = network.canonicalAsset;\n  const domain = canonical && 'name' in canonical ? canonical : undefined;\n\n  const asset = input.asset !== undefined ? address('asset', input.asset) : undefined;\n  if (asset !== undefined && isBurnAddress(network, asset)) {\n    throw invalid(`${path}.asset must not be the zero address`, `${path}.asset`);\n  }\n\n  // The default asset applies when the option names none or names it exactly\n  if (canonical && (asset === undefined || sameAddress(network, asset, canonical.address))) {\n    const expected = {\n      assetName: domain?.name,\n      assetVersion: domain?.version,\n      assetDecimals: canonical.decimals,\n    };\n    for (const field of ['assetName', 'assetVersion', 'assetDecimals'] as const) {\n      const given = input[field];\n      if (given !== undefined && given !== expected[field]) {\n        throw invalid(\n          `${path}.${field} does not match ${canonical.symbol} on ${network.displayName}, which reports ${FIELD_MEANINGS[field]} ${JSON.stringify(expected[field])}. Remove ${field}, or set asset to the token it describes.`,\n          `${path}.${field}`,\n        );\n      }\n    }\n    return {\n      scheme: 'exact',\n      network,\n      payTo,\n      asset: asset ?? canonical.address,\n      ...(domain ? { assetName: domain.name, assetVersion: domain.version } : {}),\n      assetDecimals: canonical.decimals,\n      defaultAssetSymbol: canonical.symbol,\n      assetTransferMethod: method,\n    };\n  }\n\n  // Another token: nothing about it can be borrowed from the default. The\n  // token's EIP-712 domain matters to EIP-3009 only: a Permit2 buyer signs\n  // Permit2's own domain.\n  const required =\n    network.family === 'evm' && method === 'eip3009'\n      ? (['asset', 'assetName', 'assetVersion', 'assetDecimals'] as const)\n      : (['asset', 'assetDecimals'] as const);\n  const missing = required.filter((field) => input[field] === undefined);\n  if (asset === undefined || missing.length > 0) {\n    throw invalid(\n      canonical\n        ? `${path}: a token other than ${canonical.symbol} on ${network.displayName} needs ${missing.join(', ')}`\n        : `${path}: ${network.displayName} has no default asset, so the option needs ${missing.join(', ')}`,\n      `${path}.${missing[0] ?? 'asset'}`,\n    );\n  }\n  return {\n    scheme: 'exact',\n    network,\n    payTo,\n    asset,\n    ...(input.assetName !== undefined ? { assetName: input.assetName } : {}),\n    ...(input.assetVersion !== undefined ? { assetVersion: input.assetVersion } : {}),\n    assetDecimals: input.assetDecimals as number,\n    assetTransferMethod: method,\n  };\n}\n","/**\n * x402 exact-scheme flows, shared by the config loader and CLI.\n * The default `authorization` flow settles after a successful backend call;\n * `upfront` settles first.\n */\nexport const X402_PAYMENT_FLOWS = ['authorization', 'upfront'] as const;\n\nexport type X402PaymentFlow = (typeof X402_PAYMENT_FLOWS)[number];\n\nexport const X402_DEFAULT_PAYMENT_FLOW: X402PaymentFlow = 'authorization';\n"]}