@devlab.group/agent-commerce 2.4.1 → 2.5.0

package/dist/chunk-CXWC5LWM.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/payments/x402/provider/constants.ts","../src/payments/x402/provider/fee-payer.ts","../src/payments/x402/provider/health.ts","../src/payments/x402/chain.ts","../src/payments/x402/facilitator.ts","../src/payments/x402/local-facilitator.ts","../src/payments/x402/provider/reasons.ts","../src/payments/x402/provider/offers.ts","../src/core/canonical-json.ts","../src/payments/x402/provider/quote.ts","../src/payments/x402/amount.ts","../src/payments/x402/payload.ts","../src/payments/x402/provider/requirement.ts","../src/payments/x402/provider/transfer.ts","../src/payments/x402/provider/settle.ts","../src/payments/x402/provider/verify.ts","../src/payments/x402/provider/index.ts"],"names":["privateKeyToAccount","offer","index","from","nonce","isAddress","x402ExactPermit2ProxyAddress","getAddress"],"mappings":";;;;;;;;;;;;;;;AAGO,IAAM,YAAA,GAAe,CAAA;AACrB,IAAM,qBAAA,GAAwB,OAAO,YAAY,CAAA;AACjD,IAAM,2BAAA,GAA8B,EAAA;AACpC,IAAM,iBAAA,GAAoB,kBAAA;AAC1B,IAAM,iBAAA,GAAoB,GAAA;AAG1B,IAAM,WAAA,GAA2B;AAAA,EACtC,IAAA,EAAM,CAAC,MAAA,KAAoB,CAAA,EAAG,MAAA,GAAS,CAAA,EAAG,MAAM,CAAA,CAAA,CAAA,GAAM,EAAE,CAAA,EAAG,MAAA,CAAO,UAAA,EAAY,CAAA;AAChF;;;ACHA,IAAM,gBAAA,GAAmB,GAAA;AAGlB,SAAS,wBACd,GAAA,EACsC;AACtC,EAAA,MAAM,EAAE,KAAA,EAAO,aAAA,EAAc,GAAI,GAAA;AAMjC,EAAA,IAAI,iBAAA;AAGJ,EAAA,MAAM,SAAA,uBAAgB,GAAA,EAAoB;AAE1C,EAAA,SAAS,gBAAA,GAA+C;AACtD,IAAA,MAAM,GAAA,GAAM,MAAM,WAAA,EAAY;AAC9B,IAAA,IAAI,iBAAA,IAAqB,GAAA,GAAM,iBAAA,CAAkB,EAAA,GAAK,gBAAA,EAAkB;AACtE,MAAA,OAAO,iBAAA,CAAkB,QAAA;AAAA,IAC3B;AACA,IAAA,MAAM,MAAA,GAAS,aAAA;AACf,IAAA,MAAM,QAAA,GAAW,OAAO,SAAA,EAAU;AAClC,IAAA,MAAM,QAAA,GAAW,EAAE,EAAA,EAAI,GAAA,EAAK,QAAA,EAAS;AACrC,IAAA,iBAAA,GAAoB,QAAA;AAEpB,IAAA,QAAA,CAAS,MAAM,MAAM;AACnB,MAAA,IAAI,iBAAA,KAAsB,UAAU,iBAAA,GAAoB,MAAA;AAAA,IAC1D,CAAC,CAAA;AACD,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,eAAe,YAAY,KAAA,EAAkC;AAC3D,IAAA,IAAI,SAAA;AACJ,IAAA,IAAI;AACF,MAAA,SAAA,GAAY,MAAM,gBAAA,EAAiB;AAAA,IACrC,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,8BAAA;AAAA,QACA,CAAA,2BAAA,EAA8B,KAAA,CAAM,OAAA,CAAQ,QAAQ,CAAA,4DAAA,CAAA;AAAA,QACpD,EAAE,KAAA;AAAM,OACV;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,UAAU,KAAA,CAAM,IAAA;AAAA,MAC7B,CAAC,IAAA,KACC,IAAA,CAAK,WAAA,KAAgB,YAAA,IACrB,KAAK,MAAA,KAAW,OAAA,IAChB,IAAA,CAAK,OAAA,KAAY,KAAA,CAAM;AAAA,KAC3B,EAAG,QAAQ,UAAU,CAAA;AACrB,IAAA,MAAM,QAAA,GAAW,SAAA,CAAU,GAAA,CAAI,KAAA,CAAM,OAAO,CAAA;AAC5C,IAAA,MAAM,aACJ,QAAA,KAAa,MAAA,KACZ,QAAA,KAAa,MAAA,IAAU,OAAO,MAAA,CAAO,SAAA,CAAU,OAAO,CAAA,CAAE,KAAK,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAC,CAAA,CAAA;AAC3F,IAAA,MAAM,QAAA,GAAW,aAAa,QAAA,GAAW,MAAA;AACzC,IAAA,IAAI,OAAO,aAAa,QAAA,IAAY,gBAAA,CAAiB,MAAM,OAAA,EAAS,QAAQ,MAAM,MAAA,EAAW;AAC3F,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,8BAAA;AAAA,QACA,8BAA8B,KAAA,CAAM,OAAA,CAAQ,QAAQ,CAAA,+BAAA,EAAkC,MAAM,OAAO,CAAA;AAAA,OACrG;AAAA,IACF;AACA,IAAA,SAAA,CAAU,GAAA,CAAI,KAAA,CAAM,OAAA,EAAS,QAAQ,CAAA;AACrC,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,OAAO,WAAA;AACT;AC1DO,SAAS,kBAAkB,GAAA,EAAoD;AACpF,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAO,gBAAgB,aAAA,EAAe,GAAA,EAAK,MAAK,GAAI,GAAA;AAIpE,EAAA,eAAe,WAAA,CACb,OACA,KAAA,EACwE;AACxE,IAAA,IAAI,MAAM,MAAA,KAAW,KAAA,EAAO,OAAO,cAAA,CAAe,OAAO,KAAK,CAAA;AAC9D,IAAA,IAAI,MAAM,MAAA,KAAW,MAAA,EAAQ,OAAO,eAAA,CAAgB,OAAO,KAAK,CAAA;AAChE,IAAA,MAAM,EAAE,OAAA,EAAS,SAAA,EAAW,YAAA,EAAc,SAAQ,GAAI,KAAA;AACtD,IAAA,MAAM,OAAA,GAAU,MAAM,YAAA,CAAa,UAAA,EAAW;AAC9C,IAAA,IAAI,OAAA,KAAY,QAAQ,OAAA,EAAS;AAC/B,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EAAQ,CAAA,OAAA,EAAU,SAAS,CAAA,kBAAA,EAAqB,OAAO,cAAc,OAAA,CAAQ,OAAO,CAAA,EAAA,EAAK,OAAA,CAAQ,WAAW,CAAA,CAAA;AAAA,OAC9G;AAAA,IACF;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,YAAA,CAAa,OAAA,CAAQ,EAAE,OAAA,EAAS,KAAA,CAAM,OAAO,CAAA;AAChE,IAAA,IAAI,CAAC,IAAA,IAAQ,IAAA,KAAS,IAAA,EAAM;AAC1B,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EAAQ,CAAA,mDAAA,EAAsD,KAAA,CAAM,KAAK,CAAA;AAAA,OAC3E;AAAA,IACF;AAEA,IAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,YAAA,CAAa;AAAA,MAC/C,SAAS,KAAA,CAAM,KAAA;AAAA,MACf,GAAA,EAAK,QAAA;AAAA,MACL,YAAA,EAAc;AAAA,KACf,CAAA;AACD,IAAA,IAAI,QAAA,KAAa,MAAM,aAAA,EAAe;AACpC,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EAAQ,SAAS,KAAA,CAAM,KAAK,QAAQ,QAAQ,CAAA,sBAAA,EAAyB,MAAM,aAAa,CAAA;AAAA,OAC1F;AAAA,IACF;AAEA,IAAA,IAAI,KAAA,CAAM,WAAW,SAAA,EAAW;AAC9B,MAAA,KAAA,MAAW,CAAC,IAAA,EAAM,OAAO,CAAA,IAAK,iBAAA,EAAmB;AAC/C,QAAA,MAAM,WAAW,MAAM,YAAA,CAAa,OAAA,CAAQ,EAAE,SAAS,CAAA;AACvD,QAAA,IAAI,CAAC,QAAA,IAAY,QAAA,KAAa,IAAA,EAAM;AAClC,UAAA,OAAO;AAAA,YACL,MAAA,EAAQ,MAAA;AAAA,YACR,QAAQ,CAAA,GAAA,EAAM,IAAI,2BAA2B,OAAO,CAAA,IAAA,EAAO,QAAQ,WAAW,CAAA;AAAA,WAChF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,IAAA,MAAM,SAAA,GAAY,SAAS,KAAA,CAAM,KAAK,GAAG,KAAA,CAAM,MAAA,KAAW,SAAA,GAAY,8BAAA,GAAiC,EAAE,CAAA,CAAA;AAEzG,IAAA,IAAI,OAAA,CAAQ,SAAS,QAAA,EAAU;AAG7B,MAAA,MAAM,UAAA,GAAA,CAAc,MAAM,KAAA,EAAM,EAAG,IAAA;AAAA,QACjC,CAAC,IAAA,KACC,IAAA,CAAK,WAAA,KAAgB,YAAA,IACrB,KAAK,MAAA,KAAW,OAAA,IAChB,IAAA,CAAK,OAAA,KAAY,KAAA,CAAM;AAAA,OAC3B;AACA,MAAA,IAAI,CAAC,UAAA,EAAY;AACf,QAAA,OAAO;AAAA,UACL,MAAA,EAAQ,MAAA;AAAA,UACR,MAAA,EACE,CAAA,YAAA,EAAe,OAAA,CAAQ,QAAQ,CAAA,0BAAA,EAA6B,YAAY,CAAA,iBAAA,EAClE,KAAA,CAAM,OAAO,CAAA,EAAA,EAAK,OAAA,CAAQ,WAAW,CAAA,2CAAA;AAAA,SAC/C;AAAA,MACF;AACA,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EACE,GAAG,sBAAA,CAAuB,cAAc,CAAC,CAAA,MAAA,EAAS,SAAS,wBACxD,OAAA,CAAQ,OAAO,KAAK,OAAA,CAAQ,WAAW,MAAM,SAAS,CAAA,wBAAA,EAC1C,QAAQ,QAAQ,CAAA,gBAAA,EAAmB,MAAM,OAAO,CAAA;AAAA,OACnE;AAAA,IACF;AAKA,IAAA,MAAM,OAAA,GAAU,MAAM,gBAAA,CAAiB,YAAY,CAAA;AACnD,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EACE,CAAA,OAAA,EAAU,SAAS,CAAA,kBAAA,EAAqB,QAAQ,OAAO,CAAA,qJAAA;AAAA,OAG3D;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,MAAA;AAAA,MACR,MAAA,EACE,CAAA,EAAG,sBAAA,CAAuB,cAAc,CAAC,CAAA,MAAA,EAAS,SAAS,CAAA,qBAAA,EACxD,OAAA,CAAQ,OAAO,CAAA,EAAA,EAAK,SAAS,CAAA,oCAAA;AAAA,KACpC;AAAA,EACF;AAIA,EAAA,eAAe,cAAA,CACb,OACA,KAAA,EACwE;AACxE,IAAA,MAAM,EAAE,OAAA,EAAS,SAAA,EAAW,OAAA,EAAQ,GAAI,KAAA;AAExC,IAAA,MAAM,SAAA,GAAY,MAAM,GAAA,EAAI;AAC5B,IAAA,MAAM,UAAU,MAAM,OAAA,CAAQ,MAAM,MAAA,EAAQ,gBAAA,EAAkB,EAAE,CAAA;AAChE,IAAA,MAAM,OAAA,GAAU,OAAO,OAAA,KAAY,QAAA,GAAW,CAAA,OAAA,EAAU,QAAQ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA,GAAK,MAAA;AACjF,IAAA,IAAI,OAAA,KAAY,MAAM,OAAA,EAAS;AAC7B,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EAAQ,CAAA,OAAA,EAAU,SAAS,CAAA,QAAA,EAAW,OAAA,IAAW,oBAAoB,CAAA,WAAA,EAAc,KAAA,CAAM,OAAO,CAAA,EAAA,EAAK,OAAA,CAAQ,WAAW,CAAA,CAAA;AAAA,OAC1H;AAAA,IACF;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,KAAA,CAAM,QAAQ,gBAAA,EAAkB;AAAA,MACzD,KAAA,CAAM,KAAA;AAAA,MACN,EAAE,UAAU,QAAA;AAAS,KACtB,CAAA;AACD,IAAA,MAAM,QAAA,GAAW,SAAS,IAAI,CAAA;AAC9B,IAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EAAQ,CAAA,4DAAA,EAA+D,KAAA,CAAM,KAAK,CAAA;AAAA,OACpF;AAAA,IACF;AACA,IAAA,MAAM,EAAE,QAAA,EAAU,YAAA,EAAa,GAAI,QAAA;AACnC,IAAA,IAAI,QAAA,KAAa,MAAM,aAAA,EAAe;AACpC,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EAAQ,QAAQ,KAAA,CAAM,KAAK,QAAQ,QAAQ,CAAA,sBAAA,EAAyB,MAAM,aAAa,CAAA;AAAA,OACzF;AAAA,IACF;AAGA,IAAA,MAAM,YAAA,GAAe,MAAM,SAAA,CAAU,sBAAA;AAAA,MACnC,KAAA,CAAM,KAAA;AAAA,MACN,KAAA,CAAM,KAAA;AAAA,MACN;AAAA,KACF;AACA,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,KAAA,CAAM,QAAQ,gBAAA,EAAkB;AAAA,MAC5D,YAAA;AAAA,MACA,EAAE,UAAU,QAAA;AAAS,KACtB,CAAA;AACD,IAAA,MAAM,eAAe,QAAA,CAAS,OAAO,CAAA,GAAI,OAAA,CAAQ,OAAO,CAAA,GAAI,MAAA;AAC5D,IAAA,IAAI,CAAC,QAAA,CAAS,YAAY,KAAK,YAAA,CAAa,OAAO,MAAM,YAAA,EAAc;AACrE,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EAAQ,SAAS,KAAA,CAAM,KAAK,kCAAkC,KAAA,CAAM,KAAK,0CAA0C,YAAY,CAAA,wBAAA;AAAA,OACjI;AAAA,IACF;AACA,IAAA,MAAM,QAAA,GAAA,CAAY,MAAM,KAAA,EAAM,EAAG,IAAA;AAAA,MAC/B,CAAC,IAAA,KACC,IAAA,CAAK,WAAA,KAAgB,YAAA,IACrB,KAAK,MAAA,KAAW,OAAA,IAChB,IAAA,CAAK,OAAA,KAAY,KAAA,CAAM;AAAA,KAC3B,EAAG,QAAQ,UAAU,CAAA;AACrB,IAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,iBAAiB,OAAA,EAAS,QAAQ,MAAM,MAAA,EAAW;AACrF,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EACE,CAAA,YAAA,EAAe,OAAA,CAAQ,QAAQ,CAAA,0BAAA,EAA6B,YAAY,CAAA,iBAAA,EAClE,KAAA,CAAM,OAAO,CAAA,EAAA,EAAK,OAAA,CAAQ,WAAW,CAAA,4DAAA;AAAA,OAC/C;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,MAAA;AAAA,MACR,MAAA,EACE,CAAA,EAAG,sBAAA,CAAuB,cAAc,CAAC,SAAS,SAAS,CAAA,QAAA,EAAW,OAAA,CAAQ,WAAW,CAAA,OAAA,EACjF,KAAA,CAAM,KAAK,CAAA,KAAA,EAAQ,QAAQ,CAAA,kCAAA,EAAqC,KAAA,CAAM,KAAK,CAAA,cAAA,EACpE,OAAA,CAAQ,QAAQ,CAAA,gBAAA,EACtB,KAAA,CAAM,OAAO,CAAA,gBAAA,EAAmB,QAAQ,CAAA;AAAA,KACrD;AAAA,EACF;AAIA,EAAA,eAAe,eAAA,CACb,OACA,KAAA,EACwE;AACxE,IAAA,MAAM,EAAE,OAAA,EAAS,SAAA,EAAW,OAAA,EAAS,QAAO,GAAI,KAAA;AAEhD,IAAA,MAAM,IAAA,EAAK;AACX,IAAA,MAAM,SAAS,MAAM,OAAA,CAAQ,MAAA,EAAQ,QAAA,EAAU,EAAE,CAAA;AACjD,IAAA,MAAM,UAAU,QAAA,CAAS,MAAM,CAAA,GAAI,MAAA,CAAO,UAAU,CAAA,GAAI,MAAA;AACxD,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,QAAQ,MAAM,CAAA;AACnD,IAAA,IAAI,YAAY,QAAA,EAAU;AACxB,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EAAQ,CAAA,OAAA,EAAU,SAAS,CAAA,cAAA,EAAiB,MAAA,CAAO,OAAA,IAAW,SAAS,CAAC,CAAA,WAAA,EAAc,QAAQ,CAAA,EAAA,EAAK,OAAA,CAAQ,WAAW,CAAA,CAAA;AAAA,OACxH;AAAA,IACF;AACA,IAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ,MAAA,EAAQ,OAAA,EAAS;AAAA,MAC3C,YAAA,EAAc,cAAA;AAAA,MACd,QAAA,EAAU,OAAA;AAAA,MACV,YAAY,KAAA,CAAM;AAAA,KACnB,CAAA;AACD,IAAA,IAAI,CAAC,QAAA,CAAS,KAAK,KAAK,KAAA,CAAM,WAAW,MAAM,oBAAA,EAAsB;AACnE,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EAAQ,CAAA,mDAAA,EAAsD,KAAA,CAAM,KAAK,CAAA;AAAA,OAC3E;AAAA,IACF;AACA,IAAA,MAAM,QAAA,GAAW,MAAM,QAAA,CAAS,MAAA,EAAQ,MAAM,KAAA,EAAO,aAAA,EAAe,EAAE,CAAA;AACtE,IAAA,MAAM,WAAW,QAAA,CAAS,QAAQ,CAAA,GAAI,QAAA,CAAS,UAAU,CAAA,GAAI,MAAA;AAC7D,IAAA,IAAI,QAAA,KAAa,MAAM,aAAA,EAAe;AACpC,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EAAQ,CAAA,MAAA,EAAS,KAAA,CAAM,KAAK,CAAA,KAAA,EAAQ,OAAO,QAAQ,CAAC,CAAA,sBAAA,EAAyB,KAAA,CAAM,aAAa,CAAA;AAAA,OAClG;AAAA,IACF;AAGA,IAAA,IAAI,UAAA,GAAa,IAAA;AACjB,IAAA,IAAI;AACF,MAAA,UAAA,GACG,MAAM,QAAA,CAAS,MAAA,EAAQ,KAAA,CAAM,OAAO,oBAAA,EAAsB;AAAA,QACzD,YAAY,KAAA,CAAM;AAAA,OACnB,CAAA,KAAO,IAAA;AAAA,IACZ,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,CAAC,oCAAA,CAAqC,IAAA,CAAK,kBAAkB,GAAG,CAAC,GAAG,MAAM,GAAA;AAAA,IAChF;AACA,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,QAAQ,CAAA,MAAA,EAAS,KAAA,CAAM,KAAK,CAAA,sCAAA,EAAyC,MAAM,KAAK,CAAA,8DAAA;AAAA,OAClF;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAA,CAAU,MAAM,KAAA,EAAM,EAAG,IAAA;AAAA,MAC7B,CAAC,IAAA,KACC,IAAA,CAAK,WAAA,KAAgB,YAAA,IACrB,KAAK,MAAA,KAAW,OAAA,IAChB,IAAA,CAAK,OAAA,KAAY,KAAA,CAAM;AAAA,KAC3B;AACA,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,MAAA;AAAA,QACR,MAAA,EACE,CAAA,YAAA,EAAe,OAAA,CAAQ,QAAQ,CAAA,0BAAA,EAA6B,YAAY,CAAA,iBAAA,EAClE,KAAA,CAAM,OAAO,CAAA,EAAA,EAAK,OAAA,CAAQ,WAAW,CAAA,2CAAA;AAAA,OAC/C;AAAA,IACF;AACA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,MAAA;AAAA,MACR,MAAA,EACE,GAAG,sBAAA,CAAuB,cAAc,CAAC,CAAA,MAAA,EAAS,SAAS,CAAA,QAAA,EAAW,QAAQ,CAAA,QAAA,EACrE,KAAA,CAAM,KAAK,CAAA,KAAA,EAAQ,QAAQ,6BAA6B,KAAA,CAAM,KAAK,iBAC7D,OAAA,CAAQ,QAAQ,CAAA,gBAAA,EAAmB,KAAA,CAAM,OAAO,CAAA;AAAA,KACnE;AAAA,EACF;AAIA,EAAA,eAAe,aAAA,GAAwC;AACrD,IAAA,MAAM,SAAA,GAAY,MAAM,WAAA,EAAY;AACpC,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,EAAO;AAC/B,IAAA,IAAI,SAAA;AACJ,IAAA,MAAM,QAAQ,MAAM;AAClB,MAAA,SAAA,KAAe,cACZ,SAAA,EAAU,CACV,KAAK,CAAC,QAAA,KAAa,SAAS,KAAK,CAAA;AACpC,MAAA,OAAO,SAAA;AAAA,IACT,CAAA;AAEA,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,GAAA;AAAA,MAC5B,MAAA,CAAO,GAAA;AAAA,QAAI,CAAC,UACV,WAAA,CAAY,KAAA,EAAO,KAAK,CAAA,CAAE,KAAA,CAAM,CAAC,GAAA,MAAkB;AAAA,UACjD,MAAA,EAAQ,MAAA;AAAA,UACR,MAAA,EAAQ,CAAA,0BAAA,EAA6B,iBAAA,CAAkB,GAAG,CAAC,CAAA;AAAA,SAC7D,CAAE;AAAA;AACJ,KACF;AACA,IAAA,MAAM,SAAS,OAAA,CAAQ,IAAA,CAAK,CAAC,MAAA,KAAW,MAAA,CAAO,WAAW,MAAM,CAAA;AAChE,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,CAAC,OAAO,KAAA,KAAU;AAC/C,MAAA,MAAM,MAAA,GAAS,QAAQ,KAAK,CAAA;AAC5B,MAAA,IAAI,MAAA,IAAU,MAAA,CAAO,MAAA,KAAW,MAAA,SAAe,EAAC;AAChD,MAAA,OAAO,CAAC,MAAA,CAAO,MAAA,KAAW,CAAA,GAAI,MAAA,CAAO,MAAA,GAAS,CAAA,EAAG,aAAA,CAAc,KAAK,CAAC,CAAA,EAAA,EAAK,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AAAA,IAC3F,CAAC,CAAA;AACD,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,SAAS,MAAA,GAAS,MAAA;AAAA,MAC1B,MAAA,EAAQ,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA;AAAA,MACzB,UAAA,EAAY,MAAA,CAAO,GAAA,CAAI,CAAC,OAAO,KAAA,MAAW;AAAA,QACxC,IAAA,EAAM,cAAc,KAAK,CAAA;AAAA,QACzB,MAAA,EAAS,OAAA,CAAQ,KAAK,CAAA,CAA+B;AAAA,OACvD,CAAE,CAAA;AAAA,MACF,SAAA;AAAA,MACA,UAAA,EAAY,KAAA,CAAM,WAAA,EAAY,GAAI;AAAA,KACpC;AAAA,EACF;AAQA,EAAA,MAAM,eAAA,GAAkB,GAAA;AACxB,EAAA,IAAI,YAAA;AACJ,EAAA,IAAI,cAAA;AAEJ,EAAA,eAAe,MAAA,GAAiC;AAC9C,IAAA,MAAM,GAAA,GAAM,MAAM,WAAA,EAAY;AAC9B,IAAA,IAAI,YAAA,IAAgB,GAAA,GAAM,YAAA,CAAa,EAAA,GAAK,eAAA,EAAiB;AAC3D,MAAA,OAAO,YAAA,CAAa,KAAA;AAAA,IACtB;AACA,IAAA,IAAI,gBAAgB,OAAO,cAAA;AAE3B,IAAA,cAAA,GAAiB,aAAA,EAAc,CAC5B,IAAA,CAAK,CAAC,KAAA,KAAU;AACf,MAAA,YAAA,GAAe,EAAE,EAAA,EAAI,KAAA,CAAM,WAAA,IAAe,KAAA,EAAM;AAChD,MAAA,OAAO,KAAA;AAAA,IACT,CAAC,CAAA,CACA,OAAA,CAAQ,MAAM;AACb,MAAA,cAAA,GAAiB,MAAA;AAAA,IACnB,CAAC,CAAA;AACH,IAAA,OAAO,cAAA;AAAA,EACT;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,IAAM,iBAAA,GAAoB;AAAA,EACxB,CAAC,WAAW,eAAe,CAAA;AAAA,EAC3B,CAAC,4BAA4B,4BAA4B;AAC3D,CAAA;AAEA,IAAM,cAAA,uBAA0C,GAAA,CAAI;AAAA,EAClD,6CAAA;AAAA,EACA;AACF,CAAC,CAAA;AAKD,SAAS,SACP,MAAA,EAC0E;AAC1E,EAAA,MAAM,QAAQ,QAAA,CAAS,MAAM,CAAA,GAAI,MAAA,CAAO,OAAO,CAAA,GAAI,MAAA;AACnD,EAAA,IAAI,CAAC,QAAA,CAAS,KAAK,CAAA,EAAG,OAAO,MAAA;AAC7B,EAAA,MAAM,KAAA,GAAQ,MAAM,OAAO,CAAA;AAC3B,EAAA,IAAI,OAAO,UAAU,QAAA,IAAY,CAAC,eAAe,GAAA,CAAI,KAAK,GAAG,OAAO,MAAA;AACpE,EAAA,MAAM,IAAA,GAAO,MAAM,MAAM,CAAA;AACzB,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,IAAK,OAAO,IAAA,CAAK,CAAC,CAAA,KAAM,QAAA,EAAU,OAAO,MAAA;AAChE,EAAA,MAAM,QAAQ,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,CAAC,GAAG,QAAQ,CAAA;AAC3C,EAAA,MAAM,QAAA,GAAW,MAAM,EAAE,CAAA;AACzB,EAAA,OAAO,KAAA,CAAM,MAAA,IAAU,EAAA,IAAM,KAAA,CAAM,EAAE,CAAA,KAAM,CAAA,IAAK,QAAA,KAAa,MAAA,GACzD,EAAE,QAAA,EAAU,YAAA,EAAc,OAAM,GAChC,MAAA;AACN;AAGA,eAAe,OAAA,CAAQ,MAAA,EAAgB,MAAA,EAAgB,MAAA,EAAmC;AACxF,EAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,MAAA,EAAQ;AAAA,IACnC,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,IAC9C,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,OAAA,EAAS,OAAO,EAAA,EAAI,CAAA,EAAG,MAAA,EAAQ,MAAA,EAAQ,CAAA;AAAA,IAC9D,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,iBAAiB;AAAA,GAC9C,CAAA;AACD,EAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,IAAA,EAAK;AAClC,EAAA,IAAI,IAAA,CAAK,UAAU,MAAA,EAAW;AAC5B,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,8BAAA;AAAA,MACA,OAAO,MAAM,CAAA,SAAA,EAAY,KAAK,SAAA,CAAU,IAAA,CAAK,KAAK,CAAC,CAAA;AAAA,KACrD;AAAA,EACF;AACA,EAAA,OAAO,IAAA,CAAK,MAAA;AACd;AAGA,eAAe,QAAA,CACb,MAAA,EACA,SAAA,EACA,MAAA,EACA,IAAA,EACkB;AAClB,EAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,MAAA,EAAQ,OAAA,EAAS;AAAA,IAC5C,YAAA,EAAc,eAAA;AAAA,IACd,QAAA,EAAU,OAAA;AAAA,IACV,UAAA,EAAY,SAAA;AAAA,IACZ,WAAA,EAAa,MAAA;AAAA,IACb,WAAA,EAAa,OAAO,IAAA,CAAK,IAAA,CAAK,UAAU,IAAI,CAAC,CAAA,CAAE,QAAA,CAAS,QAAQ;AAAA,GACjE,CAAA;AACD,EAAA,MAAM,QAAQ,QAAA,CAAS,MAAM,CAAA,GAAI,MAAA,CAAO,QAAQ,CAAA,GAAI,MAAA;AACpD,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACzB,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,8BAAA;AAAA,MACA,aAAa,MAAM,CAAA,mBAAA;AAAA,KACrB;AAAA,EACF;AACA,EAAA,OAAO,IAAA,CAAK,MAAM,MAAA,CAAO,IAAA,CAAK,KAAiB,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAA;AACnE;AAGA,IAAM,oBAAA,GAAuB,kCAAA;AAM7B,eAAe,iBACb,MAAA,EACkB;AAElB,EAAA,MAAM,UAAU,MAAA,CAAO,OAAA;AAIvB,EAAA,IAAI;AACF,IAAA,MAAM,QAAQ,EAAE,MAAA,EAAQ,kBAAkB,MAAA,EAAQ,IAAI,CAAA;AACtD,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;ACvYO,SAAS,iBAAiB,OAAA,EAAqC;AACpE,EAAA,MAAM,KAAA,GAAQ,gBAAA,CAAiB,IAAA,CAAK,OAAO,CAAA;AAC3C,EAAA,IAAI,CAAC,KAAA,GAAQ,CAAC,CAAA,EAAG,OAAO,MAAA;AACxB,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC/B,EAAA,OAAO,OAAO,aAAA,CAAc,OAAO,CAAA,IAAK,OAAA,GAAU,IAAI,OAAA,GAAU,MAAA;AAClE;AAGA,SAAS,eAAA,CAAgB,MAAA,EAAgB,OAAA,GAAkB,cAAA,EAAuB;AAChF,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,OAAA;AAAA,IACJ,IAAA,EAAM,sBAAA;AAAA,IACN,gBAAgB,EAAE,IAAA,EAAM,SAAS,MAAA,EAAQ,KAAA,EAAO,UAAU,EAAA,EAAG;AAAA,IAC7D,OAAA,EAAS;AAAA,MACP,OAAA,EAAS,EAAE,IAAA,EAAM,CAAC,MAAM,CAAA;AAAE;AAC5B,GACF;AACF;AASO,SAAS,uBAAA,CACd,MAAA,EACA,SAAA,EACA,OAAA,EACc;AACd,EAAA,OAAO,kBAAA,CAAmB;AAAA,IACxB,KAAA,EAAO,eAAA,CAAgB,MAAA,EAAQ,OAAO,CAAA;AAAA,IACtC,SAAA,EAAW,KAAK,MAAA,EAAkC,EAAE,OAAA,EAAS,SAAA,EAAU,CAAa;AAAA,GACrF,CAAA;AACH;AAWO,SAAS,4BAAA,CACd,MAAA,EACA,gBAAA,EACA,OAAA,EACwB;AACxB,EAAA,MAAM,KAAA,GAAQ,eAAA,CAAgB,MAAA,EAAQ,OAAO,CAAA;AAC7C,EAAA,MAAM,OAAA,GAAU,oBAAoB,gBAAgB,CAAA;AACpD,EAAA,OAAO,kBAAA,CAAmB;AAAA,IACxB,OAAA;AAAA,IACA,KAAA;AAAA,IACA,SAAA,EAAW,KAAK,MAAM;AAAA,GACvB,CAAA,CAAE,MAAA,CAAO,aAAa,CAAA;AACzB;AC1CO,IAAM,kCAAA,GAAqC,GAAA;AAK3C,IAAM,oBAAA,GAAuB,GAAA;AAoBpC,SAAS,cAAA,CAAe,UAAkB,YAAA,EAAyC;AACjF,EAAA,MAAM,OAAA,GAAU,OAAO,gBAAgB,CAAA,CAAE,IAAA;AAAA,IACvC,CAAC,GAAA,KAAQ,GAAA,CAAI,oBAAA,CAAqB,UAAU,YAAY,CAAA;AAAA,IACxD,CAAC,KAAA,KAAmB;AAClB,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,gBAAA;AAAA,QACA,mNAAA;AAAA,QAGA,EAAE,KAAA;AAAM,OACV;AAAA,IACF;AAAA,GACF;AAGA,EAAA,OAAA,CAAQ,MAAM,MAAM;AAAA,EAAC,CAAC,CAAA;AAEtB,EAAA,OAAO,YAAY;AACjB,IAAA,MAAM,SAAS,MAAM,OAAA;AACrB,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,8BAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAQ,MAAM,MAAA,EAAO;AAAA,EACvB,CAAA;AACF;AASA,SAAS,uBAAuB,GAAA,EAA8B;AAC5D,EAAA,IACE,GAAA,YAAe,eACf,GAAA,CAAI,UAAA,KAAe,OACnB,OAAO,GAAA,CAAI,kBAAkB,QAAA,EAC7B;AACA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,eAAe,GAAA,CAAI,aAAA;AAAA,MACnB,GAAI,IAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI;AAAC,KACxD;AAAA,EACF;AACA,EAAA,MAAM,GAAA;AACR;AAOA,SAAS,sBAAA,CAAuB,KAAc,OAAA,EAAkC;AAC9E,EAAA,IACE,GAAA,YAAe,WAAA,IACf,GAAA,CAAI,UAAA,KAAe,OACnB,OAAO,GAAA,CAAI,WAAA,KAAgB,QAAA,IAC3B,GAAA,CAAI,WAAA,KAAgB,EAAA,IACpB,CAAC,IAAI,WAAA,EACL;AACA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,aAAa,GAAA,CAAI,WAAA;AAAA,MACjB,WAAA,EAAa,EAAA;AAAA,MACb,OAAA,EAAS,IAAI,OAAA,IAAW,OAAA;AAAA,MACxB,GAAI,IAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,GAAA,CAAI,KAAA,EAAM,GAAI;AAAC,KACxD;AAAA,EACF;AACA,EAAA,MAAM,GAAA;AACR;AAOO,SAAS,+BACd,OAAA,EACoB;AACpB,EAAA,MAAM,OAAO,OAAA,CAAQ,IAAA;AACrB,EAAA,IAAI,iBAAA;AACJ,EAAA,IAAI,IAAA,CAAK,SAAS,QAAA,EAAU;AAC1B,IAAA,iBAAA,GAAoB,YAAY;AAE9B,MAAA,MAAM,UAAU,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,KAAK,CAAA,CAAA,EAAG;AACxD,MAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,MAAA,EAAQ,OAAA,EAAS,WAAW,OAAA,EAAQ;AAAA,IAChE,CAAA;AAAA,EACF,CAAA,MAAA,IAAW,IAAA,CAAK,IAAA,KAAS,KAAA,EAAO;AAC9B,IAAA,iBAAA,GAAoB,cAAA,CAAe,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,YAAY,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,MAAA,GAAS,IAAI,qBAAA,CAAsB;AAAA,IACvC,KAAK,OAAA,CAAQ,GAAA;AAAA,IACb,SAAA,EAAW,kCAAA;AAAA,IACX,GAAI,iBAAA,GAAoB,EAAE,iBAAA,KAAsB;AAAC,GAClD,CAAA;AACD,EAAA,MAAM,eAAA,GAAkB,IAAI,qBAAA,CAAsB;AAAA,IAChD,KAAK,OAAA,CAAQ,GAAA;AAAA,IACb,SAAA,EAAW,oBAAA;AAAA,IACX,GAAI,iBAAA,GAAoB,EAAE,iBAAA,KAAsB;AAAC,GAClD,CAAA;AAED,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,QAAA;AAAA,IACN,QAAA,EAAU,CAAA,OAAA,EAAU,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA,CAAE,MAAM,CAAA,OAAA,EAAU,IAAA,CAAK,IAAI,CAAA,CAAA,CAAA;AAAA,IAClE,IAAA,GAA2B;AACzB,MAAA,IAAI,MAAA,GAAS,KAAA;AACb,MAAA,MAAM,KAAA,GAAQ,OAAU,IAAA,KAAuC;AAC7D,QAAA,IAAI;AACF,UAAA,OAAO,MAAM,IAAA,EAAK;AAAA,QACpB,SAAS,GAAA,EAAK;AAIZ,UAAA,MAAA,GAAS,IAAA;AACT,UAAA,MAAM,GAAA;AAAA,QACR;AAAA,MACF,CAAA;AACA,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,CAAC,OAAA,EAAS,YAAA,KAChB,KAAA,CAAM,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS,YAAY,CAAA,CAAE,KAAA,CAAM,sBAAsB,CAAC,CAAA;AAAA,QAChF,MAAA,EAAQ,CAAC,OAAA,EAAS,YAAA,KAChB,KAAA;AAAA,UAAM,MACJ,MAAA,CACG,MAAA,CAAO,OAAA,EAAS,YAAY,CAAA,CAC5B,KAAA,CAAM,CAAC,GAAA,KAAiB,sBAAA,CAAuB,GAAA,EAAK,YAAA,CAAa,OAAO,CAAC;AAAA,SAC9E;AAAA,QACF,iBAAiB,MAAM;AAAA,OACzB;AAAA,IACF,CAAA;AAAA,IACA,WAAW,MAAM,YAAA,CAAa,eAAA,CAAgB,YAAA,IAAgB,oBAAoB;AAAA,GACpF;AACF;AAIA,SAAS,YAAA,CAAgB,MAAkB,EAAA,EAAwB;AACjE,EAAA,IAAI,KAAA;AACJ,EAAA,MAAM,QAAA,GAAW,IAAI,OAAA,CAAe,CAAC,GAAG,MAAA,KAAW;AACjD,IAAA,KAAA,GAAQ,UAAA;AAAA,MACN,MACE,MAAA;AAAA,QACE,IAAI,aAAA;AAAA,UACF,8BAAA;AAAA,UACA,CAAA,4DAAA,EAA+D,KAAK,GAAI,CAAA,EAAA;AAAA;AAC1E,OACF;AAAA,MACF;AAAA,KACF;AACA,IAAA,KAAA,CAAM,KAAA,EAAM;AAAA,EACd,CAAC,CAAA;AACD,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,IAAA,EAAM,QAAQ,CAAC,CAAA,CAAE,OAAA,CAAQ,MAAM,YAAA,CAAa,KAAK,CAAC,CAAA;AACzE;AC7NO,SAAS,6BAAA,CACd,MAAA,EACA,OAAA,EACA,gBAAA,EACoB;AACpB,EAAA,MAAM,QAAQ,MAA+D;AAC3E,IAAA,IAAI,MAAA,GAAS,KAAA;AACb,IAAA,MAAM,QAAQ,CAAI,OAAA,KAChB,OAAA,CAAQ,KAAA,CAAM,CAAC,GAAA,KAAiB;AAC9B,MAAA,IAAI,gBAAA,CAAiB,GAAG,CAAA,EAAG,MAAA,GAAS,IAAA;AACpC,MAAA,MAAM,GAAA;AAAA,IACR,CAAC,CAAA;AAIH,IAAA,MAAM,MAAA,GAAS;AAAA,MACb,OAAA,EAAS,OAAO,OAAA,CAAQ,OAAA;AAAA,MACxB,cAAc,CAAC,IAAA,KACb,MAAM,MAAA,CAAO,YAAA,CAAa,IAAI,CAAC,CAAA;AAAA,MACjC,iBAAiB,CAAC,IAAA,KAChB,MAAM,MAAA,CAAO,eAAA,CAAgB,IAAI,CAAC,CAAA;AAAA,MACpC,eAAe,CAAC,IAAA,KACd,MAAM,MAAA,CAAO,aAAA,CAAc,IAAI,CAAC,CAAA;AAAA,MAClC,iBAAiB,CAAC,IAAA,KAChB,MAAM,MAAA,CAAO,eAAA,CAAgB,IAAI,CAAC,CAAA;AAAA,MACpC,2BAA2B,CACzB,IAAA,KACG,MAAM,MAAA,CAAO,yBAAA,CAA0B,IAAI,CAAC,CAAA;AAAA,MACjD,SAAS,CAAC,IAAA,KACR,MAAM,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAC;AAAA,KAC9B;AAIA,IAAA,MAAM,WAAA,GAAc,sBAAA,CAAuB,IAAI,eAAA,EAAgB,EAAG;AAAA,MAChE,MAAA,EAAQ,uBAAuB,MAAA,EAAQ;AAAA,QACrC,qBAAA,EAAuB;AAAA,OACxB,CAAA;AAAA,MACD,QAAA,EAAU;AAAA,KACX,CAAA;AAED,IAAA,OAAO,EAAE,WAAA,EAAa,MAAA,EAAQ,MAAM,MAAA,EAAO;AAAA,EAC7C,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,OAAA;AAAA,IACN,QAAA,EAAU,oBAAA;AAAA,IACV,IAAA,GAA2B;AACzB,MAAA,MAAM,EAAE,WAAA,EAAa,MAAA,EAAO,GAAI,KAAA,EAAM;AACtC,MAAA,OAAO;AAAA,QACL,QAAQ,CAAC,OAAA,EAAS,iBAAiB,WAAA,CAAY,MAAA,CAAO,SAAS,YAAY,CAAA;AAAA,QAC3E,QAAQ,CAAC,OAAA,EAAS,iBAAiB,WAAA,CAAY,MAAA,CAAO,SAAS,YAAY,CAAA;AAAA,QAC3E,eAAA,EAAiB;AAAA,OACnB;AAAA,IACF;AAAA,GACF;AACF;AC5DO,IAAM,yBAAA,GAA4B,oBAAA;AAQzC,IAAM,0BAAA,GAA6B;AAAA,EACjC,sCAAA;AAAA,EACA,sCAAA;AAAA,EACA;AACF,CAAA;AACO,IAAM,4BAA4B,CAAC,MAAA,KACxC,MAAA,KAAW,MAAA,IACX,2BAA2B,IAAA,CAAK,CAAC,KAAA,KAAU,MAAA,KAAW,SAAS,MAAA,CAAO,UAAA,CAAW,CAAA,EAAG,KAAK,GAAG,CAAC,CAAA;AAQxF,IAAM,wBAAA,GAA6E;AAAA,EACxF,GAAA,EAAK,sCAAA;AAAA,EACL,GAAA,EAAK,sCAAA;AAAA,EACL,IAAA,EAAM;AACR,CAAA;AAMO,IAAM,uBAAA,uBAAmD,GAAA,CAAI;AAAA,EAClE,sBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAQM,IAAM,kBAAA,uBAA8C,GAAA,CAAI;AAAA,EAC7D,yBAAA;AAAA,EACA,0CAAA;AAAA,EACA,qDAAA;AAAA,EACA,6CAAA;AAAA,EACA,0CAAA;AAAA,EACA,gDAAA;AAAA,EACA,yCAAA;AAAA,EACA,yCAAA;AAAA,EACA,6CAAA;AAAA,EACA,wDAAA;AAAA,EACA,sCAAA;AAAA,EACA;AACF,CAAC,CAAA;AAOD,IAAM,2BAAA,uBAAuD,GAAA,CAAI;AAAA,EAC/D,sBAAA;AAAA,EACA,oBAAA;AAAA,EACA,iBAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAC,CAAA;AACM,IAAM,aAAA,GAAgB,CAAC,MAAA,KAC5B,MAAA,KAAW,MAAA,KACV,MAAA,KAAW,mBAAA,IACV,MAAA,CAAO,UAAA,CAAW,qBAAqB,CAAA,IACvC,2BAAA,CAA4B,IAAI,MAAM,CAAA,CAAA;AAQ1C,IAAM,iBAAA,GAAoB,GAAA;AAC1B,IAAM,YAAA,GAAe,iBAAA;AAEd,SAAS,cAAA,CAAe,QAA4B,QAAA,EAA0B;AACnF,EAAA,IAAI,MAAA,KAAW,QAAW,OAAO,QAAA;AACjC,EAAA,MAAM,OAAA,GAAU,OAAO,IAAA,EAAK;AAC5B,EAAA,IAAI,QAAQ,MAAA,KAAW,CAAA,IAAK,OAAA,CAAQ,MAAA,GAAS,mBAAmB,OAAO,QAAA;AACvE,EAAA,OAAO,YAAA,CAAa,IAAA,CAAK,OAAO,CAAA,GAAI,OAAA,GAAU,QAAA;AAChD;AAMO,SAAS,qBAAqB,GAAA,EAAuB;AAC1D,EAAA,OACE,GAAA,YAAe,aAAa,GAAA,CAAI,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,YAAa,6BAA6B,CAAA,KAAM,IAAA;AAEhG;AAUO,SAAS,2BAA2B,GAAA,EAAuB;AAChE,EAAA,IACE,GAAA,YAAe,gBAAA,IACf,GAAA,YAAe,YAAA,IACf,eAAe,qCAAA,EACf;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAA,GAAU,iBAAA,CAAkB,GAAG,CAAA,CAAE,WAAA,EAAY;AACnD,EAAA,OACE,OAAA,CAAQ,SAAS,cAAc,CAAA,IAC/B,QAAQ,QAAA,CAAS,cAAc,CAAA,IAC/B,OAAA,CAAQ,QAAA,CAAS,WAAW,KAC5B,OAAA,CAAQ,QAAA,CAAS,WAAW,CAAA,IAC5B,OAAA,CAAQ,SAAS,WAAW,CAAA,IAC5B,OAAA,CAAQ,QAAA,CAAS,eAAe,CAAA;AAEpC;;;ACnHO,SAAS,aAAA,CACd,QACA,OAAA,EAQA;AAEA,EAAA,IAAI,aAAA;AAEJ,EAAA,IAAI,IAAA;AAEJ,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAmB;AACrC,EAAA,MAAM,WAAA,GAAc,CAClB,IAAA,EACA,KAAA,KACqB;AACrB,IAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAC,KAAA,EAAO,KAAA,KAAiB;AACvC,MAAA,MAAM,EAAA,GAAK,CAAC,IAAA,KAAiB,KAAA,CAAM,OAAO,IAAI,CAAA;AAG9C,MAAA,MAAM,KAAA,GAAQ,eAAA,CAAgB,KAAA,CAAM,OAAA,EAAS,QAAQ,cAAc,CAAA;AACnE,MAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,CAAM,MAAA,KAAW,KAAA,EAAO;AACjD,QAAA,MAAM,KAAA,GACJ,KAAA,CAAM,MAAA,KAAW,KAAA,GAAQ,qCAAA,GAAwC,mBAAA;AACnE,QAAA,KAAA,MAAW,IAAA,IAAQ,CAAC,OAAA,EAAS,OAAO,CAAA,EAAY;AAC9C,UAAA,IAAI,iBAAiB,KAAA,EAAO,KAAA,CAAM,IAAI,CAAC,MAAM,MAAA,EAAW;AACtD,YAAA,MAAM,IAAI,cAAc,gBAAA,EAAkB,CAAA,eAAA,EAAkB,GAAG,IAAI,CAAC,CAAA,QAAA,EAAW,KAAK,CAAA,CAAE,CAAA;AAAA,UACxF;AAAA,QACF;AACA,QAAA,IAAI,KAAA,CAAM,wBAAwB,MAAA,EAAW;AAC3C,UAAA,MAAM,IAAI,aAAA;AAAA,YACR,gBAAA;AAAA,YACA,CAAA,eAAA,EAAkB,EAAA,CAAG,qBAAqB,CAAC,CAAA,6BAAA;AAAA,WAC7C;AAAA,QACF;AAAA,MACF,CAAA,MAAO;AAGL,QAAA,IAAI,CAAC,SAAA,CAAU,KAAA,CAAM,KAAK,CAAA,EAAG;AAC3B,UAAA,MAAM,IAAI,aAAA;AAAA,YACR,gBAAA;AAAA,YACA,CAAA,eAAA,EAAkB,EAAA,CAAG,OAAO,CAAC,CAAA,0GAAA;AAAA,WAC/B;AAAA,QACF;AACA,QAAA,IAAI,CAAC,SAAA,CAAU,KAAA,CAAM,KAAK,CAAA,EAAG;AAC3B,UAAA,MAAM,IAAI,aAAA;AAAA,YACR,gBAAA;AAAA,YACA,CAAA,eAAA,EAAkB,EAAA,CAAG,OAAO,CAAC,CAAA,0GAAA;AAAA,WAC/B;AAAA,QACF;AAGA,QAAA,0BAAA,CAA2B,KAAA,CAAM,MAAA,EAAQ,KAAA,CAAM,KAAK,CAAA;AAGpD,QAAA,IAAA,CACG,KAAA,CAAM,uBAAuB,SAAA,MAAe,SAAA,KAC5C,CAAC,KAAA,CAAM,SAAA,IAAa,CAAC,KAAA,CAAM,YAAA,CAAA,EAC5B;AACA,UAAA,MAAM,IAAI,aAAA;AAAA,YACR,gBAAA;AAAA,YACA,0CAA0C,EAAA,CAAG,WAAW,CAAC,CAAA,KAAA,EAAQ,EAAA,CAAG,cAAc,CAAC,CAAA,4BAAA;AAAA,WACrF;AAAA,QACF;AAAA,MACF;AACA,MAAA,IAAI,CAAC,OAAO,SAAA,CAAU,KAAA,CAAM,aAAa,CAAA,IAAK,KAAA,CAAM,gBAAgB,CAAA,EAAG;AACrE,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,gBAAA;AAAA,UACA,CAAA,eAAA,EAAkB,EAAA,CAAG,eAAe,CAAC,CAAA,+BAAA;AAAA,SACvC;AAAA,MACF;AAGA,MAAA,MAAM,aAAa,qBAAA,CAAsB;AAAA,QACvC,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,GAAI,QAAQ,cAAA,KAAmB,MAAA,GAAY,EAAE,cAAA,EAAgB,OAAA,CAAQ,cAAA,EAAe,GAAI,EAAC;AAAA,QACzF,OAAO,KAAA,CAAM,KAAA;AAAA,QACb,OAAO,KAAA,CAAM,KAAA;AAAA,QACb,GAAI,MAAM,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,KAAA,CAAM,SAAA,EAAU,GAAI,EAAC;AAAA,QACtE,GAAI,MAAM,YAAA,KAAiB,MAAA,GAAY,EAAE,YAAA,EAAc,KAAA,CAAM,YAAA,EAAa,GAAI,EAAC;AAAA,QAC/E,aAAa,OAAA,CAAQ,WAAA;AAAA,QACrB,GAAI,QAAQ,YAAA,KAAiB,MAAA,GAAY,EAAE,YAAA,EAAc,OAAA,CAAQ,YAAA,EAAa,GAAI,EAAC;AAAA,QACnF,GAAI,QAAQ,+BAAA,KAAoC,MAAA,GAC5C,EAAE,+BAAA,EAAiC,OAAA,CAAQ,+BAAA,EAAgC,GAC3E,EAAC;AAAA;AAAA,QAEL,kBAAA,EAAoB;AAAA,OACrB,CAAA;AACD,MAAA,MAAM,UAAU,UAAA,CAAW,OAAA;AAE3B,MAAA,IAAI,IAAA,KAAS,MAAA,IAAa,UAAA,CAAW,IAAA,KAAS,IAAA,EAAM;AAClD,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,gBAAA;AAAA,UACA,6BAA6B,IAAI,CAAA,KAAA,EAAQ,UAAA,CAAW,IAAI,uCAAuC,IAAI,CAAA,QAAA;AAAA,SACrG;AAAA,MACF;AACA,MAAA,IAAA,GAAO,UAAA,CAAW,IAAA;AAElB,MAAA,MAAM,UAAA,GAAa,CAAC,KAAA,KAClB,OAAA,CAAQ,WAAW,KAAA,GAAQ,KAAA,CAAM,aAAY,GAAI,KAAA;AACnD,MAAA,MAAM,GAAA,GAAM,CAAA,EAAG,KAAA,CAAM,OAAO,CAAA,CAAA,EAAI,UAAA,CAAW,KAAA,CAAM,KAAK,CAAC,CAAA,CAAA,EAAI,UAAA,CAAW,KAAA,CAAM,KAAK,CAAC,CAAA,CAAA;AAClF,MAAA,IAAI,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,EAAG;AACjB,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,gBAAA;AAAA,UACA,kBAAkB,EAAA,CAAG,SAAS,CAAC,CAAA,iEAAA,EAAoE,MAAM,OAAO,CAAA;AAAA,SAClH;AAAA,MACF;AACA,MAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AACZ,MAAA,MAAM,QAAA,GAAW;AAAA,QACf,GAAA;AAAA,QACA,MAAM,mBAAA,IAAuB,SAAA;AAAA,QAC7B,KAAA,CAAM,SAAA;AAAA,QACN,KAAA,CAAM,YAAA;AAAA,QACN,KAAA,CAAM,aAAA;AAAA,QACN,KAAA,CAAM;AAAA,OACR,CAAE,KAAK,GAAG,CAAA;AACV,MAAA,MAAM,QAAA,GAAW,KAAA,CAAM,GAAA,CAAI,QAAQ,CAAA;AACnC,MAAA,IAAI,QAAA,KAAa,QAAW,OAAO,QAAA;AAInC,MAAA,IAAI,OAAA;AACJ,MAAA,IAAI,OAAA,CAAQ,WAAA,CAAY,IAAA,KAAS,OAAA,EAAS;AACxC,QAAA,uBAAA,CAAwB,KAAA,CAAM,MAAA,EAAQ,OAAA,CAAQ,WAAA,CAAY,gBAAgB,CAAA;AAC1E,QAAA,IAAI,MAAA;AACJ,QAAA,IAAI;AACF,UAAA,MAAA,GAAS,4BAAA;AAAA,YACP,KAAA,CAAM,MAAA;AAAA,YACN,QAAQ,WAAA,CAAY;AAAA,WACtB;AAAA,QACF,SAAS,KAAA,EAAO;AACd,UAAA,MAAM,IAAI,aAAA;AAAA,YACR,gBAAA;AAAA,YACA,8IAAA;AAAA,YAEA,EAAE,KAAA;AAAM,WACV;AAAA,QACF;AACA,QAAA,OAAA,GAAU,6BAAA,CAA8B,MAAA,EAAQ,KAAA,CAAM,OAAA,EAAS,0BAA0B,CAAA;AAAA,MAC3F,CAAA,MAAO;AACL,QAAA,aAAA,KAAkB,8BAAA,CAA+B;AAAA,UAC/C,GAAA,EAAK,QAAQ,WAAA,CAAY,GAAA;AAAA,UACzB,IAAA,EAAM,QAAQ,WAAA,CAAY;AAAA,SAC3B,CAAA;AACD,QAAA,OAAA,GAAU,aAAA;AAAA,MACZ;AAKA,MAAA,MAAM,IAAA,GAAO;AAAA,QACX,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,eAAe,KAAA,CAAM,aAAA;AAAA,QACrB,QAAQ,KAAA,CAAM,MAAA;AAAA,QACd,SAAA,EAAW,WAAA,CAAY,KAAA,CAAM,MAAM,CAAA;AAAA,QACnC;AAAA,OACF;AACA,MAAA,MAAM,KAAA,GACJ,OAAA,CAAQ,MAAA,KAAW,KAAA,GACf,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,OAAA,EAAS,KAAA,EAAO,KAAA,CAAM,KAAA,EAAO,OAAO,KAAA,CAAM,KAAA,EAAM,GAC1E,OAAA,CAAQ,MAAA,KAAW,MAAA,GACjB,EAAE,GAAG,MAAM,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,KAAA,EAAO,KAAA,CAAM,KAAA,EAAO,KAAA,EAAO,KAAA,CAAM,OAAM,GAC3E;AAAA,QACE,GAAG,IAAA;AAAA,QACH,MAAA,EAAQ,KAAA;AAAA,QACR,OAAA;AAAA,QACA,MAAA,EAAQ,MAAM,mBAAA,IAAuB,SAAA;AAAA,QACrC,OAAO,KAAA,CAAM,KAAA;AAAA,QACb,WAAW,KAAA,CAAM,SAAA;AAAA,QACjB,cAAc,KAAA,CAAM,YAAA;AAAA,QACpB,OAAO,KAAA,CAAM,KAAA;AAAA,QACb,YAAA,EAAc,uBAAA;AAAA,UACZ,KAAA,CAAM,MAAA;AAAA,UACN,iBAAA;AAAA,UACA,OAAA,CAAQ;AAAA;AACV,OACF;AACR,MAAA,KAAA,CAAM,GAAA,CAAI,UAAU,KAAK,CAAA;AACzB,MAAA,OAAO,KAAA;AAAA,IACT,CAAC,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,MAAM,MAAA,GAAS,WAAA;AAAA,IAAY,MAAA;AAAA,IAAQ,CAAC,KAAA,EAAO,IAAA,KACzC,MAAA,CAAO,MAAA,KAAW,CAAA,GAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,CAAA,GAAM,CAAA,QAAA,EAAW,KAAK,CAAA,EAAA,EAAK,IAAI,CAAA,CAAA;AAAA,GAC/D;AACA,EAAA,MAAM,iBAAiB,IAAI,GAAA;AAAA,IACzB,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,cAAA,IAAkB,EAAE,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,EAAA,EAAI,IAAI,CAAA,KAAM;AAC/D,MAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,QAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,CAAA,+BAAA,EAAkC,EAAE,CAAA,UAAA,CAAY,CAAA;AAAA,MAC5F;AACA,MAAA,OAAO,CAAC,EAAA,EAAI,WAAA,CAAY,IAAA,EAAM,CAAC,KAAA,EAAO,IAAA,KAAS,CAAA,gBAAA,EAAmB,EAAE,CAAA,CAAA,EAAI,KAAK,CAAA,EAAA,EAAK,IAAI,GAAG,CAAC,CAAA;AAAA,IAC5F,CAAC;AAAA,GACH;AACA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,cAAA;AAAA,IACA,IAAA,EAAM,CAAC,GAAG,KAAA,CAAM,QAAQ,CAAA;AAAA,IACxB,cAAA,EAAgB,IAAA;AAAA,IAChB;AAAA,GACF;AACF;AAMO,SAAS,aAAA,CAAc,OAAc,MAAA,EAAwB;AAClE,EAAA,MAAM,SAAA,GAAY,MAAM,OAAA,CAAQ,cAAA;AAChC,EAAA,OAAO,SAAA,KAAc,MAAA,IAAa,WAAA,CAAY,KAAA,CAAM,OAAA,EAAS,KAAA,CAAM,KAAA,EAAO,SAAA,CAAU,OAAO,CAAA,GACvF,SAAA,CAAU,MAAA,GACV,MAAA;AACN;;;ACjPA,IAAM,cAAA,GAAiB,IAAA,MAAA,CAAC,SAAA,EAAO,GAAC,CAAA;AAQzB,SAAS,cAAc,KAAA,EAAoC;AAChE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA;AACnB,IAAA,OAAO,eAAe,IAAA,CAAK,KAAK,IAAI,MAAA,GAAY,IAAA,CAAK,UAAU,KAAK,CAAA;AACtE,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,GAAI,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,GAAI,MAAA;AACvF,EAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,WAAW,OAAO,IAAA,CAAK,UAAU,KAAK,CAAA;AAC7E,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,CAAI,aAAa,CAAA;AACrC,IAAA,OAAO,KAAA,CAAM,SAAS,MAAS,CAAA,GAAI,SAAY,CAAA,CAAA,EAAI,KAAA,CAAM,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAAA,EACpE;AACA,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,MAAA;AACtC,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,OAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,MAAK,EAAG;AAC3C,IAAA,MAAM,MAAA,GAAS,aAAA,CAAe,KAAA,CAAkC,GAAG,CAAC,CAAA;AACpE,IAAA,IAAI,WAAW,MAAA,IAAa,cAAA,CAAe,IAAA,CAAK,GAAG,GAAG,OAAO,MAAA;AAC7D,IAAA,OAAA,CAAQ,IAAA,CAAK,GAAG,IAAA,CAAK,SAAA,CAAU,GAAG,CAAC,CAAA,CAAA,EAAI,MAAM,CAAA,CAAE,CAAA;AAAA,EACjD;AACA,EAAA,OAAO,CAAA,CAAA,EAAI,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAC9B;;;ACVO,IAAM,eAAA,GAAkB,UAAA;AAQxB,IAAM,oBAAA,GAAuB,2BAAA;AAG7B,IAAM,YAAA,GAAe,EAAE,IAAA,EAAM,+BAAA,EAAiC,SAAS,GAAA,EAAI;AAG3E,IAAM,WAAA,GAAc;AAAA,EACzB,mBAAA,EAAqB;AAAA,IACnB,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,SAAA,EAAU;AAAA,IAClC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,WAAA,EAAa,IAAA,EAAM,SAAA,EAAU;AAAA,IACrC,EAAE,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,SAAA,EAAU;AAAA,IACjC,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,SAAA,EAAU;AAAA,IAClC,EAAE,IAAA,EAAM,eAAA,EAAiB,IAAA,EAAM,QAAA,EAAS;AAAA,IACxC,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAU;AAAA,IACvC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAU;AAAA,IACnC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,QAAA,EAAS;AAAA,IACrC,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,QAAA;AAAS;AAEzC,CAAA;AAGA,IAAM,MAAA,GAAS,4CAAA;AAGf,IAAM,iBAAA,GAAoB;AAAA,EACxB,IAAA,EAAM,QAAA;AAAA,EACN,QAAA,EAAU,CAAC,QAAQ,CAAA;AAAA,EACnB,UAAA,EAAY;AAAA,IACV,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,OAAA;AAAA,MACN,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,QAAA;AAAA,QACN,QAAA,EAAU,CAAC,SAAA,EAAW,OAAA,EAAS,WAAW,CAAA;AAAA,QAC1C,UAAA,EAAY;AAAA,UACV,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA;AAAA,UAE1B,KAAA,EAAO;AAAA,YACL,IAAA,EAAM,QAAA;AAAA,YACN,UAAU,WAAA,CAAY,mBAAA,CAAoB,IAAI,CAAC,KAAA,KAAU,MAAM,IAAI,CAAA;AAAA,YACnE,YAAY,MAAA,CAAO,WAAA;AAAA,cACjB,WAAA,CAAY,mBAAA,CAAoB,GAAA,CAAI,CAAC,KAAA,KAAU,CAAC,KAAA,CAAM,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,CAAC;AAAA;AACjF,WACF;AAAA,UACA,SAAA,EAAW,EAAE,IAAA,EAAM,QAAA;AAAS;AAC9B;AACF;AACF;AAEJ,CAAA;AAGA,IAAM,iBAAA,GAAoB,IAAA;AA4CnB,SAAS,kBAAkB,OAAA,EAMlB;AACd,EAAA,MAAM,EAAE,gBAAA,EAAkB,MAAA,EAAQ,cAAA,EAAgB,KAAA,EAAO,mBAAkB,GAAI,OAAA;AAC/E,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAUA,oBAAoB,gBAAuB,CAAA;AAAA,EACvD,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,gHAAA;AAAA,MACA,EAAE,KAAA;AAAM,KACV;AAAA,EACF;AACA,EAAA,IAAI,cAAA,KAAmB,OAAA,IAAW,iBAAA,CAAkB,gBAAgB,CAAA,EAAG;AACrE,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,MAAM,YAAY,MAAA,CAAO,MAAA,CAAO,CAAC,KAAA,KAA6B,KAAA,CAAM,WAAW,KAAK,CAAA;AACpF,EAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC1B,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,MAAM,SAAS,OAAA,CAAQ,OAAA;AACvB,EAAA,IAAI,SAAA,CAAU,IAAA,CAAK,CAAC,KAAA,KAAU,KAAA,CAAM,KAAA,CAAM,WAAA,EAAY,KAAM,MAAA,CAAO,WAAA,EAAa,CAAA,EAAG;AACjF,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAyB;AAE3C,EAAA,eAAe,QAAA,CAAS,KAAA,EAAiB,MAAA,EAAgB,WAAA,EAAwC;AAC/F,IAAA,MAAM,GAAA,GAAM,KAAK,KAAA,CAAM,KAAA,CAAM,KAAI,CAAE,OAAA,KAAY,GAAI,CAAA;AACnD,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,KAAA,CAAM,OAAA;AAC1B,IAAA,MAAM,GAAA,GAAM;AAAA,MACV,OAAA;AAAA,MACA,KAAA,CAAM,MAAM,WAAA,EAAY;AAAA,MACxB,KAAA,CAAM,MAAM,WAAA,EAAY;AAAA,MACxB,MAAA;AAAA,MACA;AAAA,KACF,CAAE,KAAK,GAAG,CAAA;AACV,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAG5B,IAAA,IAAI,MAAA,KAAW,UAAa,MAAA,CAAO,MAAA,CAAO,MAAM,UAAU,CAAA,GAAI,OAAO,iBAAA,EAAmB;AACtF,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,MAAM,UAAA,GAAa,MAAM,CAAA,GAAI,iBAAA;AAC7B,IAAA,MAAM,KAAA,GAAQ;AAAA,MACZ,MAAA;AAAA,MACA,KAAA,EAAO,MAAA;AAAA,MACP,WAAW,KAAA,CAAM,KAAA;AAAA,MACjB,OAAO,KAAA,CAAM,KAAA;AAAA,MACb,MAAA;AAAA,MACA,aAAA,EAAe,oBAAA;AAAA,MACf,WAAA;AAAA;AAAA,MAEA,SAAS,CAAA,EAAA,EAAK,WAAA,CAAY,EAAE,CAAA,CAAE,QAAA,CAAS,KAAK,CAAC,CAAA,CAAA;AAAA,MAC7C,UAAA,EAAY,OAAO,GAAG,CAAA;AAAA,MACtB,UAAA,EAAY,OAAO,UAAU;AAAA,KAC/B;AACA,IAAA,MAAM,SAAA,GAAY,MAAM,OAAA,CAAQ,aAAA,CAAc;AAAA,MAC5C,MAAA,EAAQ,EAAE,GAAG,YAAA,EAAc,OAAA,EAAQ;AAAA,MACnC,KAAA,EAAO,WAAA;AAAA,MACP,WAAA,EAAa,qBAAA;AAAA,MACb,OAAA,EAAS;AAAA,QACP,GAAG,KAAA;AAAA,QACH,MAAA,EAAQ,OAAO,MAAM,CAAA;AAAA,QACrB,UAAA,EAAY,OAAO,GAAG,CAAA;AAAA,QACtB,UAAA,EAAY,OAAO,UAAU;AAAA;AAC/B,KACD,CAAA;AACD,IAAA,MAAM,SAAsB,EAAE,OAAA,EAAS,OAAO,OAAO,CAAA,EAAG,OAAO,SAAA,EAAU;AACzE,IAAA,KAAA,CAAM,OAAO,GAAG,CAAA;AAChB,IAAA,IAAI,KAAA,CAAM,QAAQ,iBAAA,EAAmB;AACnC,MAAA,MAAM,MAAA,GAAS,KAAA,CAAM,IAAA,EAAK,CAAE,MAAK,CAAE,KAAA;AACnC,MAAA,IAAI,MAAA,KAAW,MAAA,EAAW,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AAAA,IAC/C;AACA,IAAA,KAAA,CAAM,GAAA,CAAI,KAAK,MAAM,CAAA;AACrB,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,MAAM,aAAA,CAAc,UAAA,EAAY,KAAA,EAAO,MAAA,EAAQ;AAC7C,MAAA,IAAI,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG,OAAO,MAAA;AAGhC,MAAA,MAAM,WAAA,GAAc,gBAAA,CAAiB,UAAA,EAAY,KAAK,CAAA;AACtD,MAAA,IAAI,WAAA,KAAgB,QAAW,OAAO,MAAA;AACtC,MAAA,MAAM,SAAwB,EAAC;AAC/B,MAAA,KAAA,MAAW,EAAE,KAAA,EAAO,MAAA,EAAO,IAAK,MAAA,EAAQ;AACtC,QAAA,MAAA,CAAO,KAAK,MAAM,QAAA,CAAS,KAAA,EAAO,MAAA,EAAQ,WAAW,CAAC,CAAA;AAAA,MACxD;AACA,MAAA,OAAO,EAAE,CAAC,eAAe,GAAG,EAAE,IAAA,EAAM,EAAE,MAAA,EAAO,EAAG,MAAA,EAAQ,iBAAA,EAAkB,EAAE;AAAA,IAC9E;AAAA,GACF;AACF;AAGO,SAAS,gBAAA,CAAiB,YAAoB,KAAA,EAAiC;AACpF,EAAA,MAAM,YAAY,aAAA,CAAc,EAAE,KAAA,EAAO,QAAA,EAAU,YAAY,CAAA;AAC/D,EAAA,OAAO,cAAc,MAAA,GAAY,MAAA,GAAY,SAAA,CAAU,aAAA,CAAc,SAAS,CAAC,CAAA;AACjF;;;AChOA,IAAM,sBAAA,GAAyB,iBAAA;AAUxB,SAAS,oBAAA,CAAqB,QAAgB,QAAA,EAA0B;AAC7E,EAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,QAAQ,CAAA,IAAK,WAAW,CAAA,EAAG;AAC/C,IAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,CAAA,wBAAA,EAA2B,QAAQ,CAAA,CAAE,CAAA;AAAA,EACjF;AACA,EAAA,IAAI,CAAC,sBAAA,CAAuB,IAAA,CAAK,MAAM,CAAA,EAAG;AACxC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,iBAAA;AAAA,MACA,WAAW,MAAM,CAAA,4CAAA,CAAA;AAAA,MACjB;AAAA,QACE,OAAA,EAAS,EAAE,MAAA;AAAO;AACpB,KACF;AAAA,EACF;AAEA,EAAA,MAAM,CAAC,cAAc,GAAA,EAAK,YAAA,GAAe,EAAE,CAAA,GAAI,MAAA,CAAO,MAAM,GAAG,CAAA;AAE/D,EAAA,IAAI,YAAA,CAAa,SAAS,QAAA,EAAU;AAClC,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,iBAAA;AAAA,MACA,CAAA,QAAA,EAAW,MAAM,CAAA,8CAAA,EAAiD,QAAQ,CAAA,UAAA,CAAA;AAAA,MAC1E,EAAE,OAAA,EAAS,EAAE,MAAA,EAAQ,aAAA,EAAe,UAAS;AAAE,KACjD;AAAA,EACF;AAEA,EAAA,MAAM,cAAA,GAAiB,YAAA,CAAa,MAAA,CAAO,QAAA,EAAU,GAAG,CAAA;AACxD,EAAA,MAAM,QAAA,GAAW,CAAA,EAAG,WAAW,CAAA,EAAG,cAAc,CAAA,CAAA;AAChD,EAAA,OAAO,OAAO,QAAQ,CAAA;AACxB;ACnCO,SAAS,wBAAwB,aAAA,EAAmD;AACzF,EAAA,MAAM,IAAA,GAAO,WAAW,aAAa,CAAA;AACrC,EAAA,IAAI,IAAA,KAAS,QAAW,OAAO,MAAA;AAC/B,EAAA,MAAM,MAAA,GAAS,sBAAA,CAAuB,SAAA,CAAU,IAAI,CAAA;AACpD,EAAA,OAAO,MAAA,CAAO,OAAA,GAAW,MAAA,CAAO,IAAA,GAA0B,MAAA;AAC5D;AAGO,SAAS,oBAAoB,aAAA,EAAgC;AAClE,EAAA,MAAM,IAAA,GAAO,WAAW,aAAa,CAAA;AACrC,EAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,SAAS,IAAA,GACvC,IAAA,CAAiC,aAAa,CAAA,GAC/C,MAAA;AACN;AAUO,SAAS,eACd,OAAA,EACoC;AACpC,EAAA,MAAM,EAAE,QAAA,EAAU,SAAA,EAAW,YAAY,WAAA,EAAa,GAAG,MAAK,GAAI,OAAA;AAClE,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,WAAW,aAAA,EAAgC;AAClD,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,MAAA,CAAO,IAAA,CAAK,eAAe,QAAQ,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAA;AAAA,EACzE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AASO,SAAS,kBACd,OAAA,EAC8D;AAC9D,EAAA,MAAM,QAAQ,OAAA,CAAQ,OAAA;AACtB,EAAA,OACE,QAAQ,QAAA,CAAS,MAAA,KAAW,WAC5B,QAAA,CAAS,KAAK,KACd,QAAA,CAAS,KAAA,CAAM,eAAe,CAAC,KAC/B,EAAE,sBAAA,IAA0B,UAC5B,OAAO,KAAA,CAAM,WAAW,CAAA,KAAM,QAAA;AAElC;AAGA,IAAM,OAAA,GAAU,qBAAA;AAChB,IAAM,WAAA,GAAc,MAAM,IAAA,GAAO,EAAA;AAEjC,IAAM,OAAA,GAAU,qBAAA;AAEhB,IAAM,SAAA,GAAY,CAAC,KAAA,KACjB,OAAO,KAAA,KAAU,QAAA,IAAY,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA,IAAK,MAAA,CAAO,KAAK,CAAA,IAAK,WAAA;AAOhE,SAAS,iBAAiB,aAAA,EAA2D;AAC1F,EAAA,OACE,YAAA,CAAa,aAAA,CAAc,MAAM,CAAC,KAClC,YAAA,CAAa,aAAA,CAAc,IAAI,CAAC,KAChC,SAAA,CAAU,aAAA,CAAc,OAAO,CAAC,KAChC,SAAA,CAAU,aAAA,CAAc,YAAY,CAAC,CAAA,IACrC,SAAA,CAAU,aAAA,CAAc,aAAa,CAAC,CAAA,IACtC,OAAO,aAAA,CAAc,OAAO,MAAM,QAAA,IAClC,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,OAAO,CAAC,CAAA;AAEvC;AAMO,SAAS,sBACd,OAAA,EAC8D;AAC9D,EAAA,MAAM,QAAQ,OAAA,CAAQ,OAAA;AACtB,EAAA,IAAI,OAAA,CAAQ,SAAS,MAAA,KAAW,OAAA,IAAW,CAAC,QAAA,CAAS,KAAK,GAAG,OAAO,KAAA;AACpE,EAAA,MAAM,IAAA,GAAO,MAAM,sBAAsB,CAAA;AACzC,EAAA,IAAI,CAAC,QAAA,CAAS,IAAI,CAAA,IAAK,eAAA,IAAmB,SAAS,OAAO,KAAA,CAAM,WAAW,CAAA,KAAM,QAAA,EAAU;AACzF,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,EAAE,SAAA,EAAW,OAAA,EAAQ,GAAI,IAAA;AAC/B,EAAA,OACE,QAAA,CAAS,SAAS,CAAA,IAClB,QAAA,CAAS,OAAO,CAAA,IAChB,YAAA,CAAa,KAAK,MAAM,CAAC,KACzB,YAAA,CAAa,IAAA,CAAK,SAAS,CAAC,CAAA,IAC5B,aAAa,SAAA,CAAU,OAAO,CAAC,CAAA,IAC/B,YAAA,CAAa,QAAQ,IAAI,CAAC,KAC1B,SAAA,CAAU,SAAA,CAAU,QAAQ,CAAC,CAAA,IAC7B,UAAU,IAAA,CAAK,OAAO,CAAC,CAAA,IACvB,SAAA,CAAU,KAAK,UAAU,CAAC,KAC1B,SAAA,CAAU,OAAA,CAAQ,YAAY,CAAC,CAAA;AAEnC;;;AC5GO,IAAM,kBAAA,GAAqB,YAAA;AAG3B,SAAS,aAAa,WAAA,EAAqD;AAChF,EAAA,MAAM,QAAA,GAAW,WAAA,CAAY,QAAA,GAAW,kBAAkB,CAAA;AAC1D,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,EAAU,OAAO,QAAA;AAEzC,EAAA,OAAO,WAAA,CAAY,SAAA,CAAU,OAAA,CAAQ,MAAA,IAAU,IAAI,CAAA,GAAI,MAAA;AACzD;AAQO,SAAS,oBAAA,CACd,OAAA,EACA,QAAA,EACA,OAAA,EACS;AACT,EAAA,IAAI,CAAC,SAAS,OAAO,KAAA;AACrB,EAAA,MAAM,OAAO,CAAC,CAAA,EAAW,MAAc,WAAA,CAAY,OAAA,EAAS,GAAG,CAAC,CAAA;AAChE,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,KAAA,IAAS,EAAC;AACvC,EAAA,MAAM,aAAA,GAAgB,QAAA,CAAS,KAAA,IAAS,EAAC;AACzC,EAAA,MAAM,IAAA,GAAO,CAAC,KAAA,KACZ,KAAA,CAAM,aAAa,CAAA,IAAK,yBAAA;AAC1B,EAAA,OACE,SAAS,MAAA,KAAW,OAAA,CAAQ,UAC5B,QAAA,CAAS,OAAA,KAAY,QAAQ,OAAA,IAC7B,QAAA,CAAS,WAAW,OAAA,CAAQ,MAAA,IAC5B,KAAK,QAAA,CAAS,KAAA,EAAO,QAAQ,KAAK,CAAA,IAClC,KAAK,QAAA,CAAS,KAAA,EAAO,QAAQ,KAAK,CAAA,IAClC,OAAO,OAAA,CAAQ,YAAY,EAAE,KAAA,CAAM,CAAC,CAAC,GAAA,EAAK,KAAK,MAAM,aAAA,CAAc,GAAG,MAAM,KAAK,CAAA,IACjF,KAAK,aAAa,CAAA,KAAM,KAAK,YAAY,CAAA;AAE7C;AAGO,SAAS,yBAAA,CACd,KACA,WAAA,EAIA;AACA,EAAA,MAAM,EAAE,OAAA,EAAS,SAAA,EAAW,KAAA,EAAO,GAAA,EAAK,mBAAkB,GAAI,GAAA;AAE9D,EAAA,eAAe,kBAAkB,OAAA,EAAsD;AACrF,IAAA,MAAM,MAAA,GAAS,SAAA,CAAU,OAAA,CAAQ,QAAA,CAAS,EAAE,CAAA;AAC5C,IAAA,MAAM,WAAA,GACJ,QAAQ,oBAAA,GAAuB,OAAA,CAAQ,SAAS,EAAE,CAAA,IAClD,QAAQ,WAAA,IACR,yBAAA;AAIF,IAAA,MAAM,OAAO,WAAA,KAAgB,SAAA,GAAY,EAAE,WAAA,KAAgB,EAAC;AAC5D,IAAA,MAAM,OAAA,GAAiC,MAAM,OAAA,CAAQ,GAAA;AAAA,MACnD,MAAA,CAAO,GAAA,CAAI,OAAO,KAAA,MAAW;AAAA,QAC3B,MAAA,EAAQ,OAAA;AAAA,QACR,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,OAAO,KAAA,CAAM,KAAA;AAAA,QACb,QAAQ,oBAAA,CAAqB,OAAA,CAAQ,QAAQ,KAAA,CAAM,aAAa,EAAE,QAAA,EAAS;AAAA,QAC3E,OAAO,KAAA,CAAM,KAAA;AAAA,QACb,iBAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA,OACE,KAAA,CAAM,MAAA,KAAW,QACb,EAAE,QAAA,EAAU,MAAM,WAAA,CAAY,KAAK,GAAG,GAAG,IAAA,KACzC,KAAA,CAAM,MAAA,KAAW,SACf,EAAE,GAAG,MAAK,GACV;AAAA,UACE,GAAI,MAAM,SAAA,KAAc,MAAA,GAAY,EAAE,IAAA,EAAM,KAAA,CAAM,SAAA,EAAU,GAAI,EAAC;AAAA,UACjE,GAAI,MAAM,YAAA,KAAiB,MAAA,GAAY,EAAE,OAAA,EAAS,KAAA,CAAM,YAAA,EAAa,GAAI,EAAC;AAAA,UAC1E,qBAAqB,KAAA,CAAM,MAAA;AAAA,UAC3B,GAAG;AAAA;AACL,OACV,CAAE;AAAA,KACJ;AACA,IAAA,MAAM,SAAS,MAAA,CAAO,MAAA,KAAW,CAAA,GAAI,MAAA,CAAO,CAAC,CAAA,GAAI,MAAA;AACjD,IAAA,MAAM,UAAA,GAAa,MAAM,GAAA,CAAI,MAAA,EAAQ,aAAA;AAAA,MACnC,QAAQ,QAAA,CAAS,EAAA;AAAA,MACjB,OAAA,CAAQ,KAAA;AAAA,MACR,MAAA,CAAO,OAAA,CAAQ,CAAC,KAAA,EAAO,KAAA,KAAU;AAC/B,QAAA,MAAM,QAAA,GAAW,QAAQ,KAAK,CAAA;AAC9B,QAAA,OAAO,KAAA,CAAM,MAAA,KAAW,KAAA,IAAS,QAAA,GAAW,CAAC,EAAE,KAAA,EAAO,MAAA,EAAQ,QAAA,CAAS,MAAA,EAAQ,CAAA,GAAI,EAAC;AAAA,MACtF,CAAC;AAAA,KACH;AASA,IAAA,MAAM,UAAA,GAAa,kBAAA,CAAmB,OAAA,CAAQ,QAAA,CAAS,EAAE,CAAA;AACzD,IAAA,MAAM,QAAA,GAA4B;AAAA,MAChC,WAAA,EAAa,YAAA;AAAA,MACb,QAAA,EAAU;AAAA,QACR,GAAA,EAAK,MAAA,GACD,CAAA,0BAAA,EAA6B,kBAAA,CAAmB,OAAO,OAAO,CAAC,CAAA,CAAA,EAAI,MAAA,CAAO,KAAK,CAAA,WAAA,EAAc,UAAU,CAAA,CAAA,GACvG,uCAAuC,UAAU,CAAA,CAAA;AAAA,QACrD,WAAA,EAAa,OAAA,CAAQ,QAAA,CAAS,WAAA,IAAe,QAAQ,QAAA,CAAS,IAAA;AAAA;AAAA;AAAA,QAG9D,UAAU,OAAA,CAAQ,iBAAA,GAAoB,OAAA,CAAQ,QAAA,CAAS,EAAE,CAAA,IAAK;AAAA,OAChE;AAAA,MACA,OAAA;AAAA,MACA,GAAI,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,KAAe;AAAC,KACnD;AAEA,IAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,KAAA,CAAM,GAAA,EAAI,CAAE,OAAA,EAAQ,GAAI,iBAAA,GAAoB,GAAI,CAAA,CAAE,WAAA,EAAY;AAEzF,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,GAAA,CAAI,IAAA,CAAK,QAAQ,CAAA;AAAA,MACrB,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,UAAA,EAAY,QAAQ,QAAA,CAAS,EAAA;AAAA,MAC7B,QAAA,EAAU,MAAA;AAAA,MACV,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,UAAU,OAAA,CAAQ,QAAA;AAAA;AAAA,MAElB,GAAI,MAAA,GACA,EAAE,WAAA,EAAa,MAAA,CAAO,KAAA,EAAO,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,KAAA,EAAO,MAAA,CAAO,KAAA,KACpE,EAAC;AAAA,MACL,SAAA;AAAA,MACA,SAAA,EAAW;AAAA,QACT,QAAA,EAAU,MAAA;AAAA,QACV,OAAA,EAAS,qBAAA;AAAA,QACT,OAAA;AAAA,QACA;AAAA,OACF;AAAA,MACA,QAAA,EAAU;AAAA,QACR,CAAC,iCAAiC,GAAG,WAAA,KAAgB,eAAA;AAAA;AAAA;AAAA,QAGrD,CAAC,yCAAyC,GAAG;AAAA;AAC/C,KACF;AAAA,EACF;AAOA,EAAA,eAAe,kBACb,OAAA,EAC6B;AAC7B,IAAA,MAAM,EAAE,WAAA,EAAa,UAAA,EAAW,GAAI,OAAA;AACpC,IAAA,MAAM,OAAA,GAAU,YAAY,SAAA,CAAU,OAAA;AACtC,IAAA,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,OAAO,WAAA;AAC/B,IAAA,MAAM,MAAA,GAAS,SAAA,CAAU,WAAA,CAAY,UAAU,CAAA;AAC/C,IAAA,MAAM,OAAA,GAAU,uBAAA,CAAwB,UAAA,CAAW,OAAO,CAAA;AAC1D,IAAA,IAAI,CAAC,SAAS,OAAO,WAAA;AACrB,IAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AAAA,MAAQ,CAACC,MAAAA,EAAOC,MAAAA,KACtC,oBAAA,CAAqBD,QAAO,OAAA,CAAQ,QAAA,EAAU,MAAA,CAAOC,MAAK,GAAG,OAAO,CAAA,GAAI,CAACA,MAAK,IAAI;AAAC,KACrF;AACA,IAAA,MAAM,QAAQ,OAAA,CAAQ,MAAA,KAAW,CAAA,GAAI,OAAA,CAAQ,CAAC,CAAA,GAAI,MAAA;AAClD,IAAA,MAAM,KAAA,GAAQ,KAAA,KAAU,MAAA,GAAY,MAAA,GAAY,OAAO,KAAK,CAAA;AAC5D,IAAA,IAAI,KAAA,KAAU,MAAA,IAAa,CAAC,KAAA,EAAO,OAAO,WAAA;AAC1C,IAAA,OAAO;AAAA,MACL,GAAG,WAAA;AAAA,MACH,aAAa,KAAA,CAAM,KAAA;AAAA,MACnB,SAAS,KAAA,CAAM,OAAA;AAAA,MACf,OAAO,KAAA,CAAM,KAAA;AAAA,MACb,QAAA,EAAU,EAAE,GAAG,WAAA,CAAY,UAAU,CAAC,kBAAkB,GAAG,KAAA;AAAM,KACnE;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,mBAAmB,iBAAA,EAAkB;AAChD;ACxKO,SAAS,YAAA,CAAa,SAAyB,KAAA,EAAoC;AAGxF,EAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,KAAA,CAAM,OAAA;AAC1B,EAAA,IAAI,KAAA,CAAM,WAAW,SAAA,EAAW;AAC9B,IAAA,IAAI,CAAC,iBAAA,CAAkB,OAAO,CAAA,EAAG,OAAO,oBAAA;AACxC,IAAA,MAAM,EAAE,aAAA,EAAc,GAAI,OAAA,CAAQ,OAAA;AAClC,IAAA,MAAM,EAAE,IAAA,EAAAC,KAAAA,EAAM,IAAI,KAAA,EAAO,KAAA,EAAAC,QAAM,GAAI,aAAA;AACnC,IAAA,IAAI,CAAC,gBAAA,CAAiB,aAAa,CAAA,IAAK,CAACC,SAAAA,CAAUF,KAAI,CAAA,IAAK,CAACE,SAAAA,CAAU,EAAE,CAAA,EAAG;AAC1E,MAAA,OAAO,iBAAA;AAAA,IACT;AACA,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,WAAWF,KAAI,CAAA;AAAA,MACrB,EAAA,EAAI,WAAW,EAAE,CAAA;AAAA,MACjB,KAAA;AAAA,MACA,WAAW,gBAAA,CAAiB;AAAA,QAC1B,OAAA;AAAA,QACA,KAAA,EAAO,UAAA,CAAW,KAAA,CAAM,KAAK,CAAA;AAAA,QAC7B,IAAA,EAAM,WAAWA,KAAI,CAAA;AAAA,QACrB,KAAA,EAAAC;AAAA,OACD,CAAA;AAAA,MACD,iBAAA,EAAmB,8CAAA;AAAA,MACnB,cAAA,EAAgB;AAAA,KAClB;AAAA,EACF;AACA,EAAA,IAAI,CAAC,qBAAA,CAAsB,OAAO,CAAA,EAAG,OAAO,oBAAA;AAC5C,EAAA,MAAM,EAAE,MAAM,OAAA,EAAS,SAAA,EAAW,SAAS,KAAA,EAAM,GAAI,QAAQ,OAAA,CAAQ,oBAAA;AAGrE,EAAA,IAAI,UAAA,CAAW,OAAO,CAAA,KAAM,UAAA,CAAWE,4BAA4B,CAAA,EAAG;AACpE,IAAA,OAAO,yBAAA;AAAA,EACT;AACA,EAAA,IAAI,UAAA,CAAW,UAAU,KAAK,CAAA,KAAM,WAAW,KAAA,CAAM,KAAK,GAAG,OAAO,wBAAA;AACpE,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,WAAW,IAAI,CAAA;AAAA,IACrB,EAAA,EAAI,UAAA,CAAW,OAAA,CAAQ,EAAE,CAAA;AAAA,IACzB,OAAO,SAAA,CAAU,MAAA;AAAA,IACjB,SAAA,EAAW,wBAAwB,EAAE,OAAA,EAAS,OAAO,UAAA,CAAW,IAAI,CAAA,EAAG,KAAA,EAAO,CAAA;AAAA,IAC9E,iBAAA,EAAmB,oCAAA;AAAA,IACnB,cAAA,EAAgB;AAAA,GAClB;AACF;;;AC1CO,SAAS,aACd,GAAA,EAC+D;AAC/D,EAAA,MAAM,EAAE,SAAA,EAAW,KAAA,EAAO,MAAA,EAAO,GAAI,GAAA;AAErC,EAAA,eAAe,OAAO,OAAA,EAA2D;AAC/E,IAAA,MAAM,EAAE,WAAA,EAAa,UAAA,EAAY,YAAA,EAAa,GAAI,OAAA;AAElD,IAAA,IAAI,YAAA,CAAa,WAAW,UAAA,EAAY;AACtC,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,KAAA,GAAQ,aAAa,WAAW,CAAA;AACtC,IAAA,MAAM,KAAA,GAAQ,UAAU,MAAA,GAAY,MAAA,GAAY,UAAU,WAAA,CAAY,UAAU,EAAE,KAAK,CAAA;AACvF,IAAA,MAAM,eACJ,KAAA,KAAU,MAAA,GACN,SACC,WAAA,CAAY,SAAA,CAAU,QAAQ,KAAK,CAAA;AAC1C,IAAA,IAAI,CAAC,KAAA,IAAS,CAAC,YAAA,EAAc;AAC3B,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,MAAM,OAAA,GAAU,uBAAA,CAAwB,UAAA,CAAW,OAAO,CAAA;AAC1D,IAAA,MAAM,QAAA,GAAW,WAAW,KAAA,CAAM,MAAA,KAAW,QAAQ,YAAA,CAAa,OAAA,EAAS,KAAK,CAAA,GAAI,MAAA;AACpF,IAAA,IAAI,CAAC,OAAA,IAAW,OAAO,QAAA,KAAa,QAAA,EAAU;AAC5C,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,iBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAM,YAAY,CAAC,KAAA,KAAkB,sBAAA,CAAuB,KAAA,CAAM,SAAS,KAAK,CAAA;AAEhF,IAAA,MAAM,kBAAA,GAAqB,CAAC,eAAA,MAA4C;AAAA,MACtE,MAAA,EAAQ,UAAA;AAAA,MACR,QAAA,EAAU,MAAA;AAAA,MACV,QAAQ,YAAA,CAAa,MAAA;AAAA,MACrB,UAAU,YAAA,CAAa,QAAA;AAAA,MACvB,GAAI,aAAa,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,YAAA,CAAa,OAAA,EAAQ,GAAI,EAAC;AAAA,MAC9E,GAAI,aAAa,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,YAAA,CAAa,KAAA,EAAM,GAAI,EAAC;AAAA,MACxE,GAAI,aAAa,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,YAAA,CAAa,SAAA,EAAU,GAAI,EAAC;AAAA,MACpF;AAAA,KACF,CAAA;AAEA,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,IAAA,EAAK;AACjC,IAAA,IAAI,SAAA;AACJ,IAAA,IAAI;AACF,MAAA,SAAA,GAAY,MAAM,KAAA,CAAM,MAAA,CAAO,cAAA,CAAe,OAAO,GAAG,YAAY,CAAA;AAAA,IACtE,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,0BAAA,CAA2B,GAAG,CAAA,IAAK,KAAA,CAAM,iBAAgB,EAAG;AAC9D,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,CAAA,eAAA,EAAkB,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,wCAAA,CAAA;AAAA,UACpC,EAAE,OAAO,GAAA;AAAI,SACf;AAAA,MACF;AAOA,MAAA,IAAI,CAAC,oBAAA,CAAqB,GAAG,CAAA,EAAG;AAC9B,QAAA,MAAA,CAAO,IAAA;AAAA,UACL,EAAE,GAAA,EAAK,iBAAA,CAAkB,GAAG,CAAA,EAAE;AAAA,UAC9B;AAAA,SACF;AACA,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,8EAAA;AAAA,UACA,EAAE,OAAO,GAAA;AAAI,SACf;AAAA,MACF;AACA,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,EAAE,GAAA,EAAK,iBAAA,CAAkB,GAAG,CAAA,EAAG,iBAAiB,sBAAA,EAAuB;AAAA,QACvE;AAAA,OACF;AACA,MAAA,OAAO,mBAAmB,sBAAsB,CAAA;AAAA,IAClD;AAIA,IAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,KAAA,IAAS,SAAA,CAAU,KAAA;AAE9C,IAAA,IAAI,CAAC,UAAU,OAAA,EAAS;AAOtB,MAAA,IAAI,yBAAA,CAA0B,UAAU,WAAW,CAAA,IAAK,CAAC,SAAA,CAAU,SAAA,CAAU,WAAW,CAAA,EAAG;AAEzF,QAAA,MAAA,CAAO,IAAA;AAAA,UACL,EAAE,cAAA,EAAgB,iBAAA,CAAkB,SAAA,CAAU,WAAW,CAAA,EAAE;AAAA,UAC3D;AAAA,SACF;AACA,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AAGA,MAAA,IACE,KAAA,CAAM,MAAA,KAAW,MAAA,IACjB,kBAAA,CAAmB,GAAA,CAAI,SAAA,CAAU,WAAA,IAAe,EAAE,CAAA,IAClD,CAAC,SAAA,CAAU,WAAA,EACX;AACA,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,iFAAA;AAAA,UACA;AAAA,YACE,OAAA,EAAS;AAAA,cACP,sBAAA,EAAwB,IAAA;AAAA,cACxB,MAAA,EAAQ,cAAA,CAAe,SAAA,CAAU,WAAA,EAAa,yBAAyB;AAAA;AACzE;AACF,SACF;AAAA,MACF;AAIA,MAAA,IACE,SAAA,CAAU,gBAAgB,yBAAA,IAC1B,SAAA,CAAU,cAAc,UAAA,CAAW,yBAAyB,CAAA,KAAM,IAAA,IAClE,uBAAA,CAAwB,GAAA,CAAI,UAAU,WAAA,IAAe,EAAE,CAAA,IACvD,kBAAA,CAAmB,GAAA,CAAI,SAAA,CAAU,eAAe,EAAE,CAAA,IAClD,KAAA,CAAM,eAAA,EAAgB,EACtB;AACA,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,oEAAA;AAAA,UACA;AAAA,YACE,GAAI,SAAA,CAAU,WAAA,GACV,EAAE,OAAA,EAAS,EAAE,eAAA,EAAiB,SAAA,CAAU,WAAA,EAAY,EAAE,GACtD;AAAC;AACP,SACF;AAAA,MACF;AAGA,MAAA,IACE,UAAU,WAAA,IACV,SAAA,CAAU,gBAAgB,wBAAA,CAAyB,KAAA,CAAM,MAAM,CAAA,EAC/D;AACA,QAAA,MAAA,CAAO,IAAA;AAAA,UACL,EAAE,cAAA,EAAgB,iBAAA,CAAkB,SAAA,CAAU,WAAA,IAAe,EAAE,CAAA,EAAE;AAAA,UACjE;AAAA,SACF;AACA,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,iGAAA;AAAA,UACA,EAAE,OAAA,EAAS,EAAE,eAAA,EAAiB,SAAA,CAAU,aAAY;AAAE,SACxD;AAAA,MACF;AAEA,MAAA,IAAI,MAAM,MAAA,KAAW,MAAA,IAAU,CAAC,aAAA,CAAc,SAAA,CAAU,WAAW,CAAA,EAAG;AACpE,QAAA,MAAA,CAAO,IAAA;AAAA,UACL,EAAE,cAAA,EAAgB,iBAAA,CAAkB,SAAA,CAAU,WAAA,IAAe,EAAE,CAAA,EAAE;AAAA,UACjE;AAAA,SACF;AACA,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AACA,MAAA,IAAI,SAAA,CAAU,gBAAgB,MAAA,EAAW;AACvC,QAAA,MAAA,CAAO,KAAA;AAAA,UACL,EAAE,cAAA,EAAgB,iBAAA,CAAkB,SAAA,CAAU,WAAW,CAAA,EAAE;AAAA,UAC3D;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO;AAAA,QACL,GAAG,kBAAA,CAAmB,cAAA,CAAe,SAAA,CAAU,WAAA,EAAa,mBAAmB,CAAC,CAAA;AAAA,QAChF,SAAS,SAAA,CAAU,OAAA;AAAA,QACnB,GAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,KAAU,EAAC;AAAA;AAAA,QAEvC,GAAI,UAAU,WAAA,GAAc,EAAE,mBAAmB,SAAA,CAAU,WAAA,KAAgB;AAAC,OAC9E;AAAA,IACF;AAIA,IAAA,IAAI,CAAC,UAAU,SAAA,CAAU,WAAW,KAAK,SAAA,CAAU,OAAA,KAAY,MAAM,OAAA,EAAS;AAC5E,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,EAAE,OAAA,EAAS,SAAA,CAAU,OAAA,EAAQ;AAAA,QAC7B;AAAA,OACF;AACA,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,8BAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,SAAA;AAAA,MACR,QAAA,EAAU,MAAA;AAAA,MACV,mBAAmB,SAAA,CAAU,WAAA;AAAA,MAC7B,GAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,KAAU,EAAC;AAAA,MACvC,OAAO,YAAA,CAAa,KAAA;AAAA,MACpB,QAAQ,YAAA,CAAa,MAAA;AAAA,MACrB,UAAU,YAAA,CAAa,QAAA;AAAA,MACvB,SAAS,SAAA,CAAU,OAAA;AAAA,MACnB,GAAI,aAAa,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,YAAA,CAAa,KAAA,EAAM,GAAI,EAAC;AAAA,MACxE,GAAI,aAAa,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,YAAA,CAAa,SAAA,EAAU,GAAI,EAAC;AAAA,MACpF,SAAA,EAAW,MAAM,MAAA,EAAO;AAAA;AAAA;AAAA,MAGxB,QAAA,EAAU;AAAA,QACR,eAAA,EAAiB,QAAA,EAAU,KAAA,IAAS,YAAA,CAAa,MAAA;AAAA;AAAA,QAEjD,GAAI,YAAA,CAAa,QAAA,KAAa,WAAA,CAAY,QAAA,GACtC,EAAE,KAAA,EAAO,EAAE,MAAA,EAAQ,WAAA,CAAY,QAAQ,QAAA,EAAU,WAAA,CAAY,QAAA,EAAS,KACtE;AAAC;AACP,KACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;ACxOO,SAAS,aACd,GAAA,EACiE;AACjE,EAAA,MAAM,EAAE,SAAA,EAAW,KAAA,EAAO,MAAA,EAAQ,GAAA,EAAK,MAAK,GAAI,GAAA;AAWhD,EAAA,eAAe,OAAO,OAAA,EAA6D;AACjF,IAAA,MAAM,EAAE,WAAA,EAAa,UAAA,EAAW,GAAI,OAAA;AAEpC,IAAA,MAAM,QAAA,GAAW,CAAC,MAAA,MAAmC;AAAA,MACnD,MAAA,EAAQ,UAAA;AAAA,MACR,QAAA,EAAU,MAAA;AAAA,MACV,QAAQ,WAAA,CAAY,MAAA;AAAA,MACpB,UAAU,WAAA,CAAY,QAAA;AAAA,MACtB,GAAI,YAAY,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,WAAA,CAAY,OAAA,EAAQ,GAAI,EAAC;AAAA,MAC5E,GAAI,YAAY,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,WAAA,CAAY,KAAA,EAAM,GAAI,EAAC;AAAA,MACtE,eAAA,EAAiB;AAAA,KACnB,CAAA;AAEA,IAAA,IAAI,YAAY,QAAA,KAAa,MAAA,IAAU,WAAA,CAAY,SAAA,CAAU,aAAa,MAAA,EAAQ;AAChF,MAAA,OAAO,SAAS,gBAAgB,CAAA;AAAA,IAClC;AAGA,IAAA,MAAM,KAAA,GAAQ,aAAa,WAAW,CAAA;AACtC,IAAA,IAAI,UAAU,MAAA,EAAW;AACvB,MAAA,OAAO,SAAS,8BAA8B,CAAA;AAAA,IAChD;AACA,IAAA,MAAM,KAAA,GAAQ,SAAA,CAAU,WAAA,CAAY,UAAU,EAAE,KAAK,CAAA;AACrD,IAAA,MAAM,YAAA,GAAe,WAAA,CAAY,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAA;AACxD,IAAA,IAAI,CAAC,KAAA,IAAS,CAAC,YAAA,EAAc;AAC3B,MAAA,OAAO,SAAS,8BAA8B,CAAA;AAAA,IAChD;AAKA,IAAA,IACE,WAAA,CAAY,SAAA,KAAc,MAAA,IAC1B,IAAA,CAAK,KAAA,CAAM,WAAA,CAAY,SAAS,CAAA,GAAI,KAAA,CAAM,GAAA,EAAI,CAAE,OAAA,EAAQ,EACxD;AACA,MAAA,OAAO,SAAS,qBAAqB,CAAA;AAAA,IACvC;AAKA,IAAA,IAAI,CAAC,YAAY,KAAA,CAAM,OAAA,EAAS,aAAa,KAAA,EAAO,KAAA,CAAM,KAAK,CAAA,EAAG;AAChE,MAAA,OAAO,SAAS,aAAa,CAAA;AAAA,IAC/B;AAEA,IAAA,MAAM,OAAA,GAAU,uBAAA,CAAwB,UAAA,CAAW,OAAO,CAAA;AAC1D,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,MAAM,OAAA,GAAU,mBAAA,CAAoB,UAAA,CAAW,OAAO,CAAA;AACtD,MAAA,OAAO,QAAA;AAAA,QACL,OAAO,OAAA,KAAY,QAAA,IAAY,OAAA,KAAY,eACvC,sBAAA,GACA;AAAA,OACN;AAAA,IACF;AACA,IAAA,IAAI,OAAA,CAAQ,gBAAgB,YAAA,EAAc;AACxC,MAAA,OAAO,SAAS,sBAAsB,CAAA;AAAA,IACxC;AAIA,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI,SAAA;AACJ,IAAA,IAAI,YAAA;AACJ,IAAA,IAAI,KAAA,CAAM,WAAW,KAAA,EAAO;AAC1B,MAAA,MAAM,QAAA,GAAA,CAAY,MAAM,GAAA,EAAI,EAAG,aAAa,OAAA,CAAQ,OAAA,EAAS,MAAM,OAAO,CAAA;AAC1E,MAAA,IAAI,OAAO,QAAA,KAAa,QAAA,EAAU,OAAO,SAAS,QAAQ,CAAA;AAC1D,MAAA,SAAA,GAAY,QAAA,CAAS,SAAA;AAAA,IACvB,CAAA,MAAA,IAAW,KAAA,CAAM,MAAA,KAAW,MAAA,EAAQ;AAClC,MAAA,MAAM,aAAa,MAAM,IAAA,EAAK,EAAG,kBAAA,CAAmB,QAAQ,OAAA,EAAS;AAAA,QACnE,SAAS,KAAA,CAAM,OAAA;AAAA,QACf,OAAO,KAAA,CAAM,KAAA;AAAA,QACb,OAAO,KAAA,CAAM,KAAA;AAAA,QACb,QAAQ,YAAA,CAAa;AAAA,OACtB,CAAA;AACD,MAAA,IAAI,OAAO,SAAA,KAAc,QAAA,EAAU,OAAO,SAAS,SAAS,CAAA;AAC5D,MAAA,SAAA,GAAY,SAAA,CAAU,SAAA;AACtB,MAAA,YAAA,GAAe,SAAA,CAAU,KAAA;AAAA,IAC3B,CAAA,MAAO;AACL,MAAA,MAAM,IAAA,GAAO,YAAA,CAAa,OAAA,EAAS,KAAK,CAAA;AACxC,MAAA,IAAI,OAAO,IAAA,KAAS,QAAA,EAAU,OAAO,SAAS,IAAI,CAAA;AAClD,MAAA,QAAA,GAAW,IAAA;AACX,MAAA,SAAA,GAAY,IAAA,CAAK,SAAA;AACjB,MAAA,YAAA,GAAe,IAAA,CAAK,IAAA;AAAA,IACtB;AAGA,IAAA,IAAI,OAAA,CAAQ,QAAA,CAAS,OAAA,KAAY,KAAA,CAAM,OAAA,EAAS;AAC9C,MAAA,OAAO,SAAS,iBAAiB,CAAA;AAAA,IACnC;AAGA,IAAA,MAAM,UAAA,GAAc,WAAA,CAAY,SAAA,CAAU,QAAA,EAA0C,QAAA,EAChF,GAAA;AACJ,IAAA,IACE,CAAC,oBAAA,CAAqB,YAAA,EAAc,OAAA,CAAQ,UAAU,KAAA,CAAM,OAAO,CAAA,IAClE,OAAA,CAAQ,QAAA,KAAa,MAAA,IAAa,OAAA,CAAQ,QAAA,CAAS,QAAQ,UAAA,EAC5D;AACA,MAAA,OAAO,SAAS,8BAA8B,CAAA;AAAA,IAChD;AACA,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,MAAA,CAAO,aAAa,MAAM,CAAA;AAAA,IACvC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,SAAS,iBAAiB,CAAA;AAAA,IACnC;AACA,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,IAAI,QAAA,CAAS,EAAA,KAAOC,UAAAA,CAAW,KAAA,CAAM,KAAK,CAAA,EAAG;AAC3C,QAAA,OAAO,QAAA,CAAS,SAAS,iBAAiB,CAAA;AAAA,MAC5C;AACA,MAAA,IAAI,eAAA;AACJ,MAAA,IAAI;AACF,QAAA,eAAA,GAAkB,MAAA,CAAO,SAAS,KAAK,CAAA;AAAA,MACzC,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,SAAS,iBAAiB,CAAA;AAAA,MACnC;AACA,MAAA,IAAI,oBAAoB,QAAA,EAAU;AAChC,QAAA,OAAO,QAAA,CAAS,SAAS,cAAc,CAAA;AAAA,MACzC;AAAA,IACF;AAEA,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,IAAA,EAAK;AACjC,IAAA,IAAI,SAAA;AACJ,IAAA,IAAI;AACF,MAAA,SAAA,GAAY,MAAM,KAAA,CAAM,MAAA,CAAO,cAAA,CAAe,OAAO,GAAG,YAAY,CAAA;AAAA,IACtE,SAAS,GAAA,EAAK;AAGZ,MAAA,IAAI,CAAC,0BAAA,CAA2B,GAAG,KAAK,CAAC,KAAA,CAAM,iBAAgB,EAAG;AAChE,QAAA,MAAA,CAAO,KAAK,EAAE,GAAA,EAAK,kBAAkB,GAAG,CAAA,IAAK,qCAAqC,CAAA;AAAA,MACpF;AACA,MAAA,MAAM,IAAI,aAAA;AAAA,QACR,8BAAA;AAAA,QACA,CAAA,eAAA,EAAkB,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,gDAAA,CAAA;AAAA,QACpC,EAAE,OAAO,GAAA;AAAI,OACf;AAAA,IACF;AAEA,IAAA,IAAI,CAAC,UAAU,OAAA,EAAS;AAEtB,MAAA,IAAI,KAAA,CAAM,iBAAgB,IAAK,kBAAA,CAAmB,IAAI,SAAA,CAAU,aAAA,IAAiB,EAAE,CAAA,EAAG;AACpF,QAAA,IAAI,SAAA,CAAU,kBAAkB,MAAA,EAAW;AACzC,UAAA,MAAA,CAAO,KAAA;AAAA,YACL,EAAE,cAAA,EAAgB,iBAAA,CAAkB,SAAA,CAAU,aAAa,CAAA,EAAE;AAAA,YAC7D;AAAA,WACF;AAAA,QACF;AACA,QAAA,MAAM,IAAI,aAAA;AAAA,UACR,8BAAA;AAAA,UACA,CAAA,eAAA,EAAkB,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,wCAAA;AAAA,SACtC;AAAA,MACF;AAGA,MAAA,IAAI,SAAA,CAAU,kBAAkB,MAAA,EAAW;AACzC,QAAA,MAAA,CAAO,KAAA;AAAA,UACL,EAAE,cAAA,EAAgB,iBAAA,CAAkB,SAAA,CAAU,aAAa,CAAA,EAAE;AAAA,UAC7D;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO,QAAA,CAAS,cAAA,CAAe,SAAA,CAAU,aAAA,EAAe,iBAAiB,CAAC,CAAA;AAAA,IAC5E;AAGA,IAAA,MAAM,KAAA,GACJ,YAAA,KACC,SAAA,CAAU,KAAA,KAAU,MAAA,IAAa,gBAAA,CAAiB,KAAA,CAAM,OAAA,EAAS,SAAA,CAAU,KAAK,CAAA,GAC7E,SAAA,CAAU,KAAA,GACV,MAAA,CAAA;AACN,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,UAAA;AAAA,MACR,QAAA,EAAU,MAAA;AAAA,MACV,GAAI,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,KAAU,EAAC;AAAA,MACvC,KAAA,EAAO,QAAA,EAAU,EAAA,IAAM,KAAA,CAAM,KAAA;AAAA,MAC7B,MAAA,EAAQ,WAAA,CAAY,QAAA,EAAU,KAAA,CAAM,aAAa,CAAA;AAAA,MACjD,QAAA,EAAU,aAAA,CAAc,KAAA,EAAO,WAAA,CAAY,QAAQ,CAAA;AAAA,MACnD,OAAA,EAAS,QAAQ,QAAA,CAAS,OAAA;AAAA,MAC1B,KAAA,EAAO,MAAM,MAAA,KAAW,KAAA,GAAQA,WAAW,YAAA,CAAa,KAAK,IAAI,KAAA,CAAM,KAAA;AAAA,MACvE;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;;;AC5KO,SAAS,0BACd,OAAA,EACqB;AACrB,EAAA,MAAM,SAAsC,QAAA,IAAY,OAAA,GAAU,OAAA,CAAQ,MAAA,GAAS,CAAC,OAAO,CAAA;AAC3F,EAAA,IAAI,MAAA,CAAO,WAAW,CAAA,EAAG;AACvB,IAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,kCAAkC,CAAA;AAAA,EAC9E;AAEA,EAAA,IACE,OAAA,CAAQ,iBAAA,KAAsB,MAAA,KAC7B,CAAC,MAAA,CAAO,SAAA,CAAU,OAAA,CAAQ,iBAAiB,CAAA,IAAK,OAAA,CAAQ,iBAAA,IAAqB,CAAA,CAAA,EAC9E;AACA,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,gBAAA;AAAA,MACA,CAAA,iEAAA,EAAoE,QAAQ,iBAAiB,CAAA,CAAA;AAAA,KAC/F;AAAA,EACF;AACA,EAAA,MAAM;AAAA,IACJ,MAAA,EAAQ,aAAA;AAAA,IACR,cAAA;AAAA,IACA,IAAA,EAAM,MAAA;AAAA,IACN,cAAA;AAAA,IACA;AAAA,GACF,GAAI,aAAA,CAAc,MAAA,EAAQ,OAAO,CAAA;AACjC,EAAA,MAAM,YAAY,CAAC,UAAA,KAAuB,cAAA,CAAe,GAAA,CAAI,UAAU,CAAA,IAAK,aAAA;AAC5E,EAAA,MAAM,aAAA,GAAgB,CAAC,aAAA,EAAe,GAAG,cAAA,CAAe,MAAA,EAAQ,CAAA,CAAE,IAAA,CAAK,CAAC,IAAA,KAAS,IAAA,CAAK,SAAS,CAAC,CAAA;AAEhG,EAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,WAAA;AAC/B,EAAA,MAAM,GAAA,GAAM,QAAQ,GAAA,IAAO,WAAA;AAC3B,EAAA,MAAM,MAAA,GAAS,QAAQ,MAAA,IAAU,WAAA;AACjC,EAAA,MAAM,iBAAA,GAAoB,QAAQ,iBAAA,IAAqB,2BAAA;AAEvD,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,GACnB,iBAAA,CAAkB;AAAA,IAChB,gBAAA,EAAkB,QAAQ,KAAA,CAAM,gBAAA;AAAA,IAChC,MAAA;AAAA,IACA,cAAA;AAAA,IACA,KAAA;AAAA,IACA;AAAA,GACD,CAAA,GACD,MAAA;AAEJ,EAAA,MAAM,YAAY,MAAA,CAAO,MAAA,CAAO,CAAC,KAAA,KAA6B,KAAA,CAAM,WAAW,KAAK,CAAA;AACpF,EAAA,MAAM,SAAS,MAAA,CAAO,IAAA,CAAK,CAAC,KAAA,KAAU,KAAA,CAAM,WAAW,KAAK,CAAA;AAC5D,EAAA,MAAM,UAAU,MAAA,CAAO,IAAA,CAAK,CAAC,KAAA,KAAU,KAAA,CAAM,WAAW,MAAM,CAAA;AAC9D,EAAA,MAAM,UAAA,GAAgC;AAAA,IACpC,IAAA,EAAM,MAAA;AAAA,IACN,IAAA,EAAM,SAAA;AAAA,IACN,qBAAA,EAAuB,eAAA;AAAA,IACvB,aAAA,EAAe,CAAA,MAAA,EAAS,YAAY,CAAA,qBAAA,EAAwB;AAAA,MAC1D,GAAI,SAAA,CAAU,MAAA,GAAS,IAAI,CAAC,QAAQ,IAAI,EAAC;AAAA,MACzC,GAAI,MAAA,GAAS,CAAC,QAAQ,IAAI,EAAC;AAAA,MAC3B,GAAI,OAAA,GAAU,CAAC,MAAM,IAAI;AAAC,KAC5B,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA;AAAA,IACX,YAAA,EAAc;AAAA,MACZ,GAAI,SAAA,CAAU,MAAA,GAAS,IAAI,CAAC,WAAW,IAAI,EAAC;AAAA,MAC5C,GAAI,MAAA,GAAS,CAAC,WAAW,IAAI,EAAC;AAAA,MAC9B,GAAI,OAAA,GAAU,CAAC,YAAY,IAAI,EAAC;AAAA,MAChC,CAAA,EAAG,OAAA,CAAQ,WAAA,CAAY,IAAI,CAAA,YAAA,CAAA;AAAA,MAC3B,GAAI,SAAA,CAAU,IAAA,CAAK,CAAC,KAAA,KAAU,KAAA,CAAM,MAAA,KAAW,SAAS,CAAA,GAAI,CAAC,UAAU,CAAA,GAAI,EAAC;AAAA,MAC5E,GAAI,SAAA,CAAU,IAAA,CAAK,CAAC,KAAA,KAAU,KAAA,CAAM,MAAA,KAAW,SAAS,CAAA,GAAI,CAAC,SAAS,CAAA,GAAI,EAAC;AAAA,MAC3E,QAAA;AAAA,MACA,QAAQ,cAAc,CAAA,CAAA;AAAA,MACtB,oBAAA;AAAA,MACA,cAAA;AAAA,MACA,GAAI,aAAA,GAAgB,CAAC,iBAAiB,IAAI,EAAC;AAAA,MAC3C,GAAI,MAAA,GAAS,CAAC,iBAAiB,IAAI;AAAC,KACtC;AAAA,IACA,MAAA,EAAQ,QAAA;AAAA,IACR,WAAA,EAAa;AAAA,MACX,mCAAA;AAAA,MACA,aAAA;AAAA,MACA,yBAAA;AAAA,MACA;AAAA;AACF,GACF;AAIA,EAAA,MAAM,SAAA,GAAY,SACd,kBAAA,CAAmB,MAAM,OAAO,mBAAQ,CAAA,EAAG,8CAA8C,CAAA,GACzF,MAAA;AACJ,EAAA,MAAM,UAAA,GAAa,UACf,kBAAA,CAAmB,MAAM,OAAO,oBAAS,CAAA,EAAG,6BAA6B,CAAA,GACzE,MAAA;AACJ,EAAA,MAAM,MAAM,YAAY;AACtB,IAAA,IAAI,CAAC,SAAA;AACH,MAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,8CAA8C,CAAA;AAC1F,IAAA,OAAO,SAAA;AAAA,EACT,CAAA;AACA,EAAA,MAAM,OAAO,YAAY;AACvB,IAAA,IAAI,CAAC,UAAA;AACH,MAAA,MAAM,IAAI,aAAA,CAAc,gBAAA,EAAkB,4CAA4C,CAAA;AACxF,IAAA,OAAO,UAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,GAAA,GAAuB;AAAA,IAC3B,OAAA;AAAA,IACA,MAAA;AAAA,IACA,SAAA;AAAA,IACA,cAAA;AAAA,IACA,aAAA;AAAA,IACA,KAAA;AAAA,IACA,GAAA;AAAA,IACA,MAAA;AAAA,IACA,iBAAA;AAAA,IACA,MAAA;AAAA,IACA,GAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,MAAM,EAAE,iBAAA,EAAmB,iBAAA,EAAkB,GAAI,yBAAA;AAAA,IAC/C,GAAA;AAAA,IACA,wBAAwB,GAAG;AAAA,GAC7B;AACA,EAAA,MAAM,MAAA,GAAS,aAAa,GAAG,CAAA;AAC/B,EAAA,MAAM,MAAA,GAAS,aAAa,GAAG,CAAA;AAC/B,EAAA,MAAM,MAAA,GAAS,kBAAkB,GAAG,CAAA;AAEpC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,MAAA;AAAA,IACN,UAAA;AAAA,IACA,iBAAA;AAAA;AAAA,IAEA,GAAI,aAAA,GAAgB,EAAE,iBAAA,KAAsB,EAAC;AAAA,IAC7C,MAAA;AAAA,IACA,MAAA;AAAA,IACA,MAAA;AAAA,IACA,GAAI,MAAA,GACA;AAAA,MACE,KAAA,EAAO;AAAA,QACL,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,aAAA,EAAe,oBAAA;AAAA,QACf,SAAA,EAAW;AAAA;AACb,QAEF;AAAC,GACP;AACF;AAMA,SAAS,kBAAA,CAAsB,MAAwB,OAAA,EAA6B;AAClF,EAAA,MAAM,OAAA,GAAU,IAAA,EAAK,CAAE,KAAA,CAAM,CAAC,KAAA,KAAmB;AAC/C,IAAA,MAAM,IAAI,aAAA,CAAc,8BAAA,EAAgC,CAAA,eAAA,EAAkB,OAAO,CAAA,CAAA,EAAI;AAAA,MACnF;AAAA,KACD,CAAA;AAAA,EACH,CAAC,CAAA;AAED,EAAA,OAAA,CAAQ,MAAM,MAAM;AAAA,EAAC,CAAC,CAAA;AACtB,EAAA,OAAO,OAAA;AACT","file":"chunk-CXWC5LWM.js","sourcesContent":["// Protocol constants shared by the x402 provider's modules\nimport type { IdGenerator } from '../../../core';\n\nexport const X402_VERSION = 2;\nexport const X402_PROTOCOL_VERSION = String(X402_VERSION);\nexport const DEFAULT_MAX_TIMEOUT_SECONDS = 60;\nexport const DEFAULT_MIME_TYPE = 'application/json';\nexport const HEALTH_TIMEOUT_MS = 4_000;\n\n/** Prefixed random UUIDs, shared with the MPP rail */\nexport const DEFAULT_IDS: IdGenerator = {\n  next: (prefix?: string) => `${prefix ? `${prefix}_` : ''}${crypto.randomUUID()}`,\n};\n","// The Solana fee payer an offer names, read from the facilitator's `/supported`\nimport type { SupportedResponse } from '@x402/core/types';\nimport { CommerceError } from '../../../core';\nimport { normalizeAddress } from '../addresses';\nimport type { FacilitatorBinding } from '../facilitator';\nimport { X402_VERSION } from './constants';\nimport type { ProviderContext, SvmOffer } from './types';\n\n// How long a `/supported` snapshot names the Solana fee payer of new offers\nconst SUPPORTED_TTL_MS = 60_000;\n\n/** Returns the fee payer lookup, with its `/supported` snapshot, for one provider */\nexport function createSvmFeePayerSource(\n  ctx: ProviderContext,\n): (offer: SvmOffer) => Promise<string> {\n  const { clock, remoteBinding } = ctx;\n\n  // A Solana offer carries the fee payer the facilitator names in `/supported`.\n  // A snapshot lasts SUPPORTED_TTL_MS, and a refresh keeps the previous fee\n  // payer while the facilitator still lists it, so a challenge and the retry\n  // that pays it agree.\n  let supportedSnapshot:\n    | { readonly at: number; readonly response: Promise<SupportedResponse> }\n    | undefined;\n  const feePayers = new Map<string, string>();\n\n  function currentSupported(): Promise<SupportedResponse> {\n    const now = clock.monotonicMs();\n    if (supportedSnapshot && now - supportedSnapshot.at < SUPPORTED_TTL_MS) {\n      return supportedSnapshot.response;\n    }\n    const remote = remoteBinding as Extract<FacilitatorBinding, { kind: 'remote' }>;\n    const response = remote.supported();\n    const snapshot = { at: now, response };\n    supportedSnapshot = snapshot;\n    // A failed fetch is not kept; the next challenge asks again\n    response.catch(() => {\n      if (supportedSnapshot === snapshot) supportedSnapshot = undefined;\n    });\n    return response;\n  }\n\n  async function svmFeePayer(offer: SvmOffer): Promise<string> {\n    let supported: SupportedResponse;\n    try {\n      supported = await currentSupported();\n    } catch (cause) {\n      throw new CommerceError(\n        'PAYMENT_PROVIDER_UNAVAILABLE',\n        `x402 provider: facilitator ${offer.binding.describe} did not answer /supported, which names the Solana fee payer`,\n        { cause },\n      );\n    }\n    const listed = supported.kinds.find(\n      (kind) =>\n        kind.x402Version === X402_VERSION &&\n        kind.scheme === 'exact' &&\n        kind.network === offer.network,\n    )?.extra?.['feePayer'];\n    const previous = feePayers.get(offer.network);\n    const stillSigns =\n      previous !== undefined &&\n      (previous === listed || Object.values(supported.signers).some((s) => s.includes(previous)));\n    const feePayer = stillSigns ? previous : listed;\n    if (typeof feePayer !== 'string' || normalizeAddress(offer.profile, feePayer) === undefined) {\n      throw new CommerceError(\n        'PAYMENT_PROVIDER_UNAVAILABLE',\n        `x402 provider: facilitator ${offer.binding.describe} names no Solana fee payer for ${offer.network}`,\n      );\n    }\n    feePayers.set(offer.network, feePayer);\n    return feePayer;\n  }\n\n  return svmFeePayer;\n}\n","// Readiness: each offer's chain, asset and facilitator support, cached briefly\n\nimport type { SupportedKind } from '@x402/core/types';\nimport { PERMIT2_ADDRESS, x402ExactPermit2ProxyAddress } from '@x402/evm';\nimport { erc20Abi } from 'viem';\nimport { type AdapterHealth, CommerceError } from '../../../core';\nimport { redactedErrorText } from '../../../core/errors';\nimport { isRecord } from '../../../core/is-record';\nimport { normalizeAddress } from '../addresses';\nimport type { createLocalPublicClient } from '../chain';\nimport type { FacilitatorBinding } from '../facilitator';\nimport { describeDeploymentMode } from '../networks';\nimport { x402OfferName } from '../options';\nimport { HEALTH_TIMEOUT_MS, X402_VERSION } from './constants';\nimport type { NearOffer, Offer, ProviderContext, SvmOffer } from './types';\n\n/** Builds the provider's `health`, which probes every offer and caches the result */\nexport function createHealthCheck(ctx: ProviderContext): () => Promise<AdapterHealth> {\n  const { offers, clock, deploymentMode, remoteBinding, svm, near } = ctx;\n\n  // One offer's chain, asset and facilitator support. `kinds` fetches the\n  // remote facilitator's `/supported` once per probe, shared by every offer.\n  async function offerHealth(\n    offer: Offer,\n    kinds: () => Promise<readonly SupportedKind[]>,\n  ): Promise<{ readonly status: 'pass' | 'fail'; readonly detail: string }> {\n    if (offer.family === 'svm') return svmOfferHealth(offer, kinds);\n    if (offer.family === 'near') return nearOfferHealth(offer, kinds);\n    const { profile, rpcOrigin, healthClient, binding } = offer;\n    const chainId = await healthClient.getChainId();\n    if (chainId !== profile.chainId) {\n      return {\n        status: 'fail',\n        detail: `RPC at ${rpcOrigin} reports chain id ${chainId}, expected ${profile.chainId} (${profile.displayName})`,\n      };\n    }\n\n    const code = await healthClient.getCode({ address: offer.asset });\n    if (!code || code === '0x') {\n      return {\n        status: 'fail',\n        detail: `No contract code found at configured asset address ${offer.asset}`,\n      };\n    }\n    // Decimals scale signed amounts; verify them on-chain, as for Solana and NEAR\n    const decimals = await healthClient.readContract({\n      address: offer.asset,\n      abi: erc20Abi,\n      functionName: 'decimals',\n    });\n    if (decimals !== offer.assetDecimals) {\n      return {\n        status: 'fail',\n        detail: `Token ${offer.asset} has ${decimals} decimals, configured ${offer.assetDecimals}`,\n      };\n    }\n    // Permit2 offers settle through two contracts the merchant does not deploy\n    if (offer.method === 'permit2') {\n      for (const [name, address] of PERMIT2_CONTRACTS) {\n        const deployed = await healthClient.getCode({ address });\n        if (!deployed || deployed === '0x') {\n          return {\n            status: 'fail',\n            detail: `No ${name} contract code found at ${address} on ${profile.displayName}`,\n          };\n        }\n      }\n    }\n    const contracts = `asset ${offer.asset}${offer.method === 'permit2' ? ', Permit2 and its x402 proxy' : ''}`;\n\n    if (binding.kind === 'remote') {\n      // Reachable is not enough: a facilitator that does not carry our\n      // scheme on our network fails every payment after the buyer has signed\n      const supportsUs = (await kinds()).some(\n        (kind) =>\n          kind.x402Version === X402_VERSION &&\n          kind.scheme === 'exact' &&\n          kind.network === offer.network,\n      );\n      if (!supportsUs) {\n        return {\n          status: 'fail',\n          detail:\n            `Facilitator ${binding.describe} does not advertise x402 v${X402_VERSION} scheme=exact ` +\n            `on ${offer.network} (${profile.displayName}); no payment on this deployment can settle`,\n        };\n      }\n      return {\n        status: 'pass',\n        detail:\n          `${describeDeploymentMode(deploymentMode)}: RPC ${rpcOrigin} reachable, chain id ` +\n          `${profile.chainId} (${profile.displayName}), ${contracts} have code, ` +\n          `facilitator ${binding.describe} supports exact/${offer.network}`,\n      };\n    }\n\n    // An RPC reports whatever chain id it was started with, so the id cannot\n    // prove this is a dev chain. An Anvil-only RPC method must answer before\n    // a local facilitator counts as healthy.\n    const isAnvil = await probeIsAnvilNode(healthClient);\n    if (!isAnvil) {\n      return {\n        status: 'fail',\n        detail:\n          `RPC at ${rpcOrigin} reports chain id ${profile.chainId} but does not answer ` +\n          '\"anvil_nodeInfo\", so it does not look like a local Anvil dev node. Refusing to treat it ' +\n          'as safe for a local-facilitator dev key.',\n      };\n    }\n\n    return {\n      status: 'pass',\n      detail:\n        `${describeDeploymentMode(deploymentMode)}: RPC ${rpcOrigin} reachable, chain id ` +\n        `${profile.chainId}, ${contracts} have code, confirmed Anvil dev node`,\n    };\n  }\n\n  // A Solana offer's cluster, mint and fee payer. The CAIP-2 reference is the\n  // start of the genesis hash, so the RPC proves which cluster it serves.\n  async function svmOfferHealth(\n    offer: SvmOffer,\n    kinds: () => Promise<readonly SupportedKind[]>,\n  ): Promise<{ readonly status: 'pass' | 'fail'; readonly detail: string }> {\n    const { profile, rpcOrigin, binding } = offer;\n    // A missing Solana peer fails readiness, not the first paid request\n    const svmModule = await svm();\n    const genesis = await jsonRpc(offer.rpcUrl, 'getGenesisHash', []);\n    const cluster = typeof genesis === 'string' ? `solana:${genesis.slice(0, 32)}` : undefined;\n    if (cluster !== offer.network) {\n      return {\n        status: 'fail',\n        detail: `RPC at ${rpcOrigin} serves ${cluster ?? 'an unknown cluster'}, expected ${offer.network} (${profile.displayName})`,\n      };\n    }\n    const mint = await jsonRpc(offer.rpcUrl, 'getAccountInfo', [\n      offer.asset,\n      { encoding: 'base64' },\n    ]);\n    const mintInfo = readMint(mint);\n    if (mintInfo === undefined) {\n      return {\n        status: 'fail',\n        detail: `No initialized token mint found at configured asset address ${offer.asset}`,\n      };\n    }\n    const { decimals, tokenProgram } = mintInfo;\n    if (decimals !== offer.assetDecimals) {\n      return {\n        status: 'fail',\n        detail: `Mint ${offer.asset} has ${decimals} decimals, configured ${offer.assetDecimals}`,\n      };\n    }\n    // Without the payee's token account every payment fails the facilitator's\n    // simulation, after the buyer signed\n    const payeeAccount = await svmModule.associatedTokenAccount(\n      offer.payTo,\n      offer.asset,\n      tokenProgram,\n    );\n    const account = await jsonRpc(offer.rpcUrl, 'getAccountInfo', [\n      payeeAccount,\n      { encoding: 'base64' },\n    ]);\n    const accountValue = isRecord(account) ? account['value'] : undefined;\n    if (!isRecord(accountValue) || accountValue['owner'] !== tokenProgram) {\n      return {\n        status: 'fail',\n        detail: `payTo ${offer.payTo} has no token account for mint ${offer.asset}; create its associated token account (${payeeAccount}) before taking payments`,\n      };\n    }\n    const feePayer = (await kinds()).find(\n      (kind) =>\n        kind.x402Version === X402_VERSION &&\n        kind.scheme === 'exact' &&\n        kind.network === offer.network,\n    )?.extra?.['feePayer'];\n    if (typeof feePayer !== 'string' || normalizeAddress(profile, feePayer) === undefined) {\n      return {\n        status: 'fail',\n        detail:\n          `Facilitator ${binding.describe} does not advertise x402 v${X402_VERSION} scheme=exact ` +\n          `on ${offer.network} (${profile.displayName}) with a fee payer; no payment on this deployment can settle`,\n      };\n    }\n    return {\n      status: 'pass',\n      detail:\n        `${describeDeploymentMode(deploymentMode)}: RPC ${rpcOrigin} serves ${profile.displayName}, ` +\n        `mint ${offer.asset} has ${decimals} decimals and a token account for ${offer.payTo}, ` +\n        `facilitator ${binding.describe} supports ` +\n        `exact/${offer.network} with fee payer ${feePayer}`,\n    };\n  }\n\n  // A NEAR offer's chain, token and merchant registration. The RPC's `status`\n  // names the chain it serves; an account suffix such as `.testnet` proves nothing.\n  async function nearOfferHealth(\n    offer: NearOffer,\n    kinds: () => Promise<readonly SupportedKind[]>,\n  ): Promise<{ readonly status: 'pass' | 'fail'; readonly detail: string }> {\n    const { profile, rpcOrigin, binding, rpcUrl } = offer;\n    // A missing NEAR peer fails readiness, not the first paid request\n    await near();\n    const status = await jsonRpc(rpcUrl, 'status', []);\n    const chainId = isRecord(status) ? status['chain_id'] : undefined;\n    const expected = offer.network.slice('near:'.length);\n    if (chainId !== expected) {\n      return {\n        status: 'fail',\n        detail: `RPC at ${rpcOrigin} serves chain ${String(chainId ?? 'unknown')}, expected ${expected} (${profile.displayName})`,\n      };\n    }\n    const token = await jsonRpc(rpcUrl, 'query', {\n      request_type: 'view_account',\n      finality: 'final',\n      account_id: offer.asset,\n    });\n    if (!isRecord(token) || token['code_hash'] === NEAR_EMPTY_CODE_HASH) {\n      return {\n        status: 'fail',\n        detail: `No contract code found at configured asset account ${offer.asset}`,\n      };\n    }\n    const metadata = await nearView(rpcUrl, offer.asset, 'ft_metadata', {});\n    const decimals = isRecord(metadata) ? metadata['decimals'] : undefined;\n    if (decimals !== offer.assetDecimals) {\n      return {\n        status: 'fail',\n        detail: `Token ${offer.asset} has ${String(decimals)} decimals, configured ${offer.assetDecimals}`,\n      };\n    }\n    // An unregistered recipient makes every transfer fail after the relayer\n    // paid for it. A token without NEP-145 storage management needs none.\n    let registered = true;\n    try {\n      registered =\n        (await nearView(rpcUrl, offer.asset, 'storage_balance_of', {\n          account_id: offer.payTo,\n        })) !== null;\n    } catch (err) {\n      if (!/MethodNotFound|MethodResolveError/i.test(redactedErrorText(err))) throw err;\n    }\n    if (!registered) {\n      return {\n        status: 'fail',\n        detail: `payTo ${offer.payTo} has no storage registered with token ${offer.asset}; register it (NEP-145 storage_deposit) before taking payments`,\n      };\n    }\n    const listed = (await kinds()).some(\n      (kind) =>\n        kind.x402Version === X402_VERSION &&\n        kind.scheme === 'exact' &&\n        kind.network === offer.network,\n    );\n    if (!listed) {\n      return {\n        status: 'fail',\n        detail:\n          `Facilitator ${binding.describe} does not advertise x402 v${X402_VERSION} scheme=exact ` +\n          `on ${offer.network} (${profile.displayName}); no payment on this deployment can settle`,\n      };\n    }\n    return {\n      status: 'pass',\n      detail:\n        `${describeDeploymentMode(deploymentMode)}: RPC ${rpcOrigin} serves ${expected}, ` +\n        `token ${offer.asset} has ${decimals} decimals and storage for ${offer.payTo}, ` +\n        `facilitator ${binding.describe} supports exact/${offer.network}`,\n    };\n  }\n\n  // Check all offers and report each status; any failure fails readiness.\n  // Challenges retain the complete offer list.\n  async function computeHealth(): Promise<AdapterHealth> {\n    const startedAt = clock.monotonicMs();\n    const checkedAt = clock.nowIso();\n    let supported: Promise<readonly SupportedKind[]> | undefined;\n    const kinds = () => {\n      supported ??= (remoteBinding as Extract<FacilitatorBinding, { kind: 'remote' }>)\n        .supported()\n        .then((response) => response.kinds);\n      return supported;\n    };\n\n    const results = await Promise.all(\n      offers.map((offer) =>\n        offerHealth(offer, kinds).catch((err: unknown) => ({\n          status: 'fail' as const,\n          detail: `x402 health check failed: ${redactedErrorText(err)}`,\n        })),\n      ),\n    );\n    const failed = results.some((result) => result.status === 'fail');\n    const details = offers.flatMap((offer, index) => {\n      const result = results[index] as (typeof results)[number];\n      if (failed && result.status !== 'fail') return [];\n      return [offers.length === 1 ? result.detail : `${x402OfferName(offer)}: ${result.detail}`];\n    });\n    return {\n      status: failed ? 'fail' : 'pass',\n      detail: details.join('; '),\n      components: offers.map((offer, index) => ({\n        name: x402OfferName(offer),\n        status: (results[index] as (typeof results)[number]).status,\n      })),\n      checkedAt,\n      durationMs: clock.monotonicMs() - startedAt,\n    };\n  }\n\n  // A probe makes several upstream calls, and `/ready` is unauthenticated.\n  // A short TTL plus one shared in-flight probe keeps upstream volume independent\n  // of request volume, for library callers as well as the gateway, whose\n  // readiness probe adds its own cache on top. Pass and fail share the TTL: a\n  // shorter one for fail would bring the load back during an RPC outage,\n  // exactly when each call is slowest.\n  const HEALTH_CACHE_MS = 5_000;\n  let cachedHealth: { at: number; value: AdapterHealth } | undefined;\n  let inFlightHealth: Promise<AdapterHealth> | undefined;\n\n  async function health(): Promise<AdapterHealth> {\n    const now = clock.monotonicMs();\n    if (cachedHealth && now - cachedHealth.at < HEALTH_CACHE_MS) {\n      return cachedHealth.value;\n    }\n    if (inFlightHealth) return inFlightHealth;\n\n    inFlightHealth = computeHealth()\n      .then((value) => {\n        cachedHealth = { at: clock.monotonicMs(), value };\n        return value;\n      })\n      .finally(() => {\n        inFlightHealth = undefined;\n      });\n    return inFlightHealth;\n  }\n\n  return health;\n}\n\nconst PERMIT2_CONTRACTS = [\n  ['Permit2', PERMIT2_ADDRESS],\n  ['x402 exact Permit2 proxy', x402ExactPermit2ProxyAddress],\n] as const;\n\nconst TOKEN_PROGRAMS: ReadonlySet<string> = new Set([\n  'TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA',\n  'TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb',\n]);\n\n// The decimals and owning token program of an initialized SPL Token or\n// Token-2022 mint, from a base64 `getAccountInfo` result: byte 44 holds the\n// decimals, byte 45 the initialized flag\nfunction readMint(\n  result: unknown,\n): { readonly decimals: number; readonly tokenProgram: string } | undefined {\n  const value = isRecord(result) ? result['value'] : undefined;\n  if (!isRecord(value)) return undefined;\n  const owner = value['owner'];\n  if (typeof owner !== 'string' || !TOKEN_PROGRAMS.has(owner)) return undefined;\n  const data = value['data'];\n  if (!Array.isArray(data) || typeof data[0] !== 'string') return undefined;\n  const bytes = Buffer.from(data[0], 'base64');\n  const decimals = bytes[44];\n  return bytes.length >= 82 && bytes[45] === 1 && decimals !== undefined\n    ? { decimals, tokenProgram: owner }\n    : undefined;\n}\n\n// One JSON-RPC call for health(), bounded like the EVM client's\nasync function jsonRpc(rpcUrl: string, method: string, params: unknown): Promise<unknown> {\n  const response = await fetch(rpcUrl, {\n    method: 'POST',\n    headers: { 'content-type': 'application/json' },\n    body: JSON.stringify({ jsonrpc: '2.0', id: 1, method, params }),\n    signal: AbortSignal.timeout(HEALTH_TIMEOUT_MS),\n  });\n  const body = (await response.json()) as { result?: unknown; error?: unknown };\n  if (body.error !== undefined) {\n    throw new CommerceError(\n      'PAYMENT_PROVIDER_UNAVAILABLE',\n      `RPC ${method} failed: ${JSON.stringify(body.error)}`,\n    );\n  }\n  return body.result;\n}\n\n// A NEAR contract view call at final finality, its result parsed as JSON\nasync function nearView(\n  rpcUrl: string,\n  accountId: string,\n  method: string,\n  args: Record<string, unknown>,\n): Promise<unknown> {\n  const result = await jsonRpc(rpcUrl, 'query', {\n    request_type: 'call_function',\n    finality: 'final',\n    account_id: accountId,\n    method_name: method,\n    args_base64: Buffer.from(JSON.stringify(args)).toString('base64'),\n  });\n  const bytes = isRecord(result) ? result['result'] : undefined;\n  if (!Array.isArray(bytes)) {\n    throw new CommerceError(\n      'PAYMENT_PROVIDER_UNAVAILABLE',\n      `NEAR view ${method} returned no result`,\n    );\n  }\n  return JSON.parse(Buffer.from(bytes as number[]).toString('utf8'));\n}\n\n// The code hash of an account without a contract\nconst NEAR_EMPTY_CODE_HASH = '11111111111111111111111111111111';\n\n/**\n * True only when the RPC answers Anvil's own `anvil_nodeInfo` method. A public\n * node, Base Sepolia included, answers \"method not found\". Never throws.\n */\nasync function probeIsAnvilNode(\n  client: ReturnType<typeof createLocalPublicClient>,\n): Promise<boolean> {\n  // Anvil-only method, absent from viem's typed PublicRpcSchema, hence the cast\n  const request = client.request as unknown as (args: {\n    method: string;\n    params: unknown[];\n  }) => Promise<unknown>;\n  try {\n    await request({ method: 'anvil_nodeInfo', params: [] });\n    return true;\n  } catch {\n    return false;\n  }\n}\n","/**\n * viem clients for the x402 provider, built on the configured `rpcUrl`. The\n * SDK uses the client it is handed, so the provider's chain calls reach no\n * other RPC.\n *\n * `createLocalPublicClient` backs health checks on the configured network.\n * `createLocalFacilitatorClient` handles settlement and defaults to the local\n * chain ID, the only network the gateway's in-process facilitator serves.\n * Deployment tools and test facilitators can pass another chain ID.\n */\nimport {\n  type Account,\n  type Chain,\n  type Client,\n  createPublicClient,\n  createWalletClient,\n  http,\n  type PublicActions,\n  type PublicClient,\n  publicActions,\n  type Transport,\n  type WalletActions,\n} from 'viem';\nimport { privateKeyToAccount } from 'viem/accounts';\nimport { LOCAL_CHAIN_ID } from './networks';\n\n/** A wallet client that can also read chain state, matching x402's `SignerWallet` */\nexport type LocalFacilitatorClient = Client<\n  Transport,\n  Chain,\n  Account,\n  undefined,\n  PublicActions<Transport, Chain, Account> & WalletActions<Chain, Account>\n>;\n\n/** CAIP-2 identifier the local dev chain is advertised under */\nexport const LOCAL_NETWORK = `eip155:${LOCAL_CHAIN_ID}`;\n\n/**\n * Chain id carried by a CAIP-2 `eip155` network identifier, or `undefined` for\n * anything else. A caller must never fall back to a default chain id, because\n * the chain id is part of the EIP-712 domain the buyer signed.\n */\nexport function chainIdFromCaip2(network: string): number | undefined {\n  const match = /^eip155:(\\d+)$/.exec(network);\n  if (!match?.[1]) return undefined;\n  const chainId = Number(match[1]);\n  return Number.isSafeInteger(chainId) && chainId > 0 ? chainId : undefined;\n}\n\n// `chainId` defaults to the local dev chain; callers on another chain pass its id\nfunction buildLocalChain(rpcUrl: string, chainId: number = LOCAL_CHAIN_ID): Chain {\n  return {\n    id: chainId,\n    name: 'agent-commerce-local',\n    nativeCurrency: { name: 'Ether', symbol: 'ETH', decimals: 18 },\n    rpcUrls: {\n      default: { http: [rpcUrl] },\n    },\n  } satisfies Chain;\n}\n\n/**\n * A read-only viem `PublicClient`.\n *\n * `timeoutMs` goes to viem's `http()` transport, which aborts the underlying\n * `fetch` when it expires rather than only abandoning the wait. Omit it to keep\n * viem's default of 10s.\n */\nexport function createLocalPublicClient(\n  rpcUrl: string,\n  timeoutMs?: number,\n  chainId?: number,\n): PublicClient {\n  return createPublicClient({\n    chain: buildLocalChain(rpcUrl, chainId),\n    transport: http(rpcUrl, timeoutMs !== undefined ? { timeout: timeoutMs } : undefined),\n  });\n}\n\n/**\n * A viem `WalletClient` extended with public actions, for the local\n * facilitator signer only: the SDK's settlement both writes and reads through\n * it.\n *\n * LOCAL DEVELOPMENT ONLY. The key behind it pays gas on the dev chain. It is\n * usually an Anvil well-known key, and must never be a merchant, buyer or\n * production key.\n */\nexport function createLocalFacilitatorClient(\n  rpcUrl: string,\n  signerPrivateKey: `0x${string}`,\n  chainId?: number,\n): LocalFacilitatorClient {\n  const chain = buildLocalChain(rpcUrl, chainId);\n  const account = privateKeyToAccount(signerPrivateKey);\n  return createWalletClient({\n    account,\n    chain,\n    transport: http(rpcUrl),\n  }).extend(publicActions);\n}\n","/**\n * Shared facilitator interface and remote HTTP binding. The in-process EVM\n * binding lives in `local-facilitator.ts` to keep EVM peers out of this module.\n * `@x402/core` loads statically; `@coinbase/x402` loads only for `auth.type: cdp`.\n * Both bindings use the SDK to verify authorizations and broadcast transfers.\n *\n * Each verify or settle call gets a session with its own `transportFailed()`\n * flag, isolating concurrent payments' transport failures.\n */\nimport { HTTPFacilitatorClient } from '@x402/core/http';\nimport {\n  type Network,\n  type PaymentPayload,\n  type PaymentRequirements,\n  SettleError,\n  type SettleResponse,\n  type SupportedResponse,\n  VerifyError,\n  type VerifyResponse,\n} from '@x402/core/types';\nimport { CommerceError } from '../../core';\nimport type { FacilitatorAuth } from './guardrails';\n\n/** One verify or one settle, with its own transport-failure flag */\nexport interface FacilitatorSession {\n  verify(payload: PaymentPayload, requirements: PaymentRequirements): Promise<VerifyResponse>;\n  settle(payload: PaymentPayload, requirements: PaymentRequirements): Promise<SettleResponse>;\n  /**\n   * True when the call produced no verdict: the local binding sets it when an\n   * RPC call to the chain fails in transport, the remote binding on every\n   * throw other than a 400 refusal of a verify or a settle.\n   *\n   * The SDK's `exact`/EVM scheme reports its own RPC errors as ordinary\n   * verification failures: an unreachable node comes back as\n   * `invalid_exact_evm_signature`. Without this flag the buyer would be told\n   * their signature is bad for a payment nothing checked.\n   */\n  transportFailed(): boolean;\n}\n\ninterface BindingBase {\n  /** Human-readable, never a credential */\n  readonly describe: string;\n  open(): FacilitatorSession;\n}\n\nexport type FacilitatorBinding =\n  | (BindingBase & { readonly kind: 'local' })\n  | (BindingBase & {\n      readonly kind: 'remote';\n      /**\n       * SDK-parsed `/supported` response, including kinds and their `extra`\n       * (such as Solana's fee payer), extensions and signers. health() reads\n       * it, and so does a Solana challenge, which names the fee payer\n       */\n      supported(): Promise<SupportedResponse>;\n    });\n\n/** Bounds each receipt wait of the in-process facilitator, and each verify or settle request to a remote one */\nexport const SETTLEMENT_CONFIRMATION_TIMEOUT_MS = 60_000;\n/**\n * Bounds a remote `/supported` read, retries included. Readiness and every\n * Solana challenge wait on it, and the SDK retries a 429 for up to 30 s a time.\n */\nexport const SUPPORTED_TIMEOUT_MS = 10_000;\n\nexport interface RemoteFacilitatorOptions {\n  readonly url: string;\n  readonly auth: FacilitatorAuth;\n}\n\n// The SDK's path-keyed auth-header shape. A flat object throws inside it\ntype AuthHeaderFactory = () => Promise<Record<string, Record<string, string>>>;\n\n/**\n * CDP needs a fresh JWT per request over method, host and path, which a static\n * header cannot express. The optional peer `@coinbase/x402` does the signing.\n * It is imported dynamically, so only `auth.type: cdp` pulls in the CDP SDK and\n * its Solana, axios and JOSE dependencies.\n *\n * The import starts at construction, so a missing peer fails the health check\n * before any payment needs it. A payment that arrives first fails as\n * `PAYMENT_PROVIDER_UNAVAILABLE`, never as a rejection blamed on the buyer.\n */\nfunction cdpAuthHeaders(apiKeyId: string, apiKeySecret: string): AuthHeaderFactory {\n  const loading = import('@coinbase/x402').then(\n    (mod) => mod.createCdpAuthHeaders(apiKeyId, apiKeySecret),\n    (cause: unknown) => {\n      throw new CommerceError(\n        'CONFIG_INVALID',\n        'x402 provider: facilitator.auth.type is \"cdp\", which needs the optional peer ' +\n          '\"@coinbase/x402\". Install it (npm install @coinbase/x402), or use a facilitator ' +\n          'that accepts a static token with auth.type \"bearer\".',\n        { cause },\n      );\n    },\n  );\n  // Nothing awaits this before the first call, so without a handler a failed\n  // import would be an unhandled rejection at startup\n  loading.catch(() => {});\n\n  return async () => {\n    const create = await loading;\n    if (!create) {\n      throw new CommerceError(\n        'PAYMENT_PROVIDER_UNAVAILABLE',\n        'x402 provider: @coinbase/x402 returned no auth-header factory',\n      );\n    }\n    return (await create()) as Record<string, Record<string, string>>;\n  };\n}\n\n/**\n * A 400 from `/verify` whose body names an `invalidReason` is the facilitator\n * refusing the payment, so it returns as an invalid verdict. The SDK throws it\n * as a `VerifyError`, which keeps the status and reason but not `isValid`.\n * A 400 without a reason and every other status, 401, 403, 429 and 5xx\n * included, are rethrown as \"no verdict\".\n */\nfunction verdictFromVerifyError(err: unknown): VerifyResponse {\n  if (\n    err instanceof VerifyError &&\n    err.statusCode === 400 &&\n    typeof err.invalidReason === 'string'\n  ) {\n    return {\n      isValid: false,\n      invalidReason: err.invalidReason,\n      ...(err.payer !== undefined ? { payer: err.payer } : {}),\n    };\n  }\n  throw err;\n}\n\n/**\n * Treat a remote 400 as a refusal only when it names a reason and no\n * transaction. A transaction may have broadcast; other errors have no\n * verdict. `SettleError` does not retain the response's `success`.\n */\nfunction verdictFromSettleError(err: unknown, network: Network): SettleResponse {\n  if (\n    err instanceof SettleError &&\n    err.statusCode === 400 &&\n    typeof err.errorReason === 'string' &&\n    err.errorReason !== '' &&\n    !err.transaction\n  ) {\n    return {\n      success: false,\n      errorReason: err.errorReason,\n      transaction: '',\n      network: err.network ?? network,\n      ...(err.payer !== undefined ? { payer: err.payer } : {}),\n    };\n  }\n  throw err;\n}\n\n/**\n * An HTTP facilitator. The SDK client produces the auth headers per request;\n * this module never logs them, and they appear neither in `/.well-known` nor\n * in `describe`.\n */\nexport function createRemoteFacilitatorBinding(\n  options: RemoteFacilitatorOptions,\n): FacilitatorBinding {\n  const auth = options.auth;\n  let createAuthHeaders: AuthHeaderFactory | undefined;\n  if (auth.type === 'bearer') {\n    createAuthHeaders = async () => {\n      // Path-keyed, as the SDK requires (see `AuthHeaderFactory`)\n      const headers = { Authorization: `Bearer ${auth.token}` };\n      return { verify: headers, settle: headers, supported: headers };\n    };\n  } else if (auth.type === 'cdp') {\n    createAuthHeaders = cdpAuthHeaders(auth.apiKeyId, auth.apiKeySecret);\n  }\n\n  const client = new HTTPFacilitatorClient({\n    url: options.url,\n    timeoutMs: SETTLEMENT_CONFIRMATION_TIMEOUT_MS,\n    ...(createAuthHeaders ? { createAuthHeaders } : {}),\n  });\n  const supportedClient = new HTTPFacilitatorClient({\n    url: options.url,\n    timeoutMs: SUPPORTED_TIMEOUT_MS,\n    ...(createAuthHeaders ? { createAuthHeaders } : {}),\n  });\n\n  return {\n    kind: 'remote',\n    describe: `remote ${new URL(options.url).origin} (auth=${auth.type})`,\n    open(): FacilitatorSession {\n      let failed = false;\n      const watch = async <T>(call: () => Promise<T>): Promise<T> => {\n        try {\n          return await call();\n        } catch (err) {\n          // After known 400 refusals, a throw gives no verdict. It may be\n          // transport or authentication failure; settlement may have broadcast.\n          // Do not record it as a payer refusal.\n          failed = true;\n          throw err;\n        }\n      };\n      return {\n        verify: (payload, requirements) =>\n          watch(() => client.verify(payload, requirements).catch(verdictFromVerifyError)),\n        settle: (payload, requirements) =>\n          watch(() =>\n            client\n              .settle(payload, requirements)\n              .catch((err: unknown) => verdictFromSettleError(err, requirements.network)),\n          ),\n        transportFailed: () => failed,\n      };\n    },\n    supported: () => withDeadline(supportedClient.getSupported(), SUPPORTED_TIMEOUT_MS),\n  };\n}\n\n// The SDK bounds each attempt but not its retry waits. `Promise.race` keeps\n// a handler on the abandoned call, so its later rejection is not unhandled.\nfunction withDeadline<T>(call: Promise<T>, ms: number): Promise<T> {\n  let timer: NodeJS.Timeout | undefined;\n  const deadline = new Promise<never>((_, reject) => {\n    timer = setTimeout(\n      () =>\n        reject(\n          new CommerceError(\n            'PAYMENT_PROVIDER_UNAVAILABLE',\n            `x402 provider: facilitator /supported did not answer within ${ms / 1000} s`,\n          ),\n        ),\n      ms,\n    );\n    timer.unref();\n  });\n  return Promise.race([call, deadline]).finally(() => clearTimeout(timer));\n}\n","/**\n * In-process `x402Facilitator` using viem through `@x402/evm`.\n * EVM imports stay here so the remote binding can load without them.\n */\nimport { x402Facilitator } from '@x402/core/facilitator';\nimport type { Network } from '@x402/core/types';\nimport { toFacilitatorEvmSigner } from '@x402/evm';\nimport { registerExactEvmScheme } from '@x402/evm/exact/facilitator';\nimport type { LocalFacilitatorClient } from './chain';\nimport {\n  type FacilitatorBinding,\n  type FacilitatorSession,\n  SETTLEMENT_CONFIRMATION_TIMEOUT_MS,\n} from './facilitator';\n\n/**\n * Registers `exact`/EVM for one network, so a payload naming another chain\n * finds no matching scheme\n */\nexport function createLocalFacilitatorBinding(\n  client: LocalFacilitatorClient,\n  network: string,\n  isTransportError: (err: unknown) => boolean,\n): FacilitatorBinding {\n  const build = (): { facilitator: x402Facilitator; failed: () => boolean } => {\n    let failed = false;\n    const watch = <T>(promise: Promise<T>): Promise<T> =>\n      promise.catch((err: unknown) => {\n        if (isTransportError(err)) failed = true;\n        throw err;\n      });\n\n    // Watch the `FacilitatorEvmSigner` methods for transport failures and expose\n    // `client.account.address` as the flat `address` the SDK expects\n    const signer = {\n      address: client.account.address,\n      readContract: (args: Parameters<LocalFacilitatorClient['readContract']>[0]) =>\n        watch(client.readContract(args)),\n      verifyTypedData: (args: Parameters<LocalFacilitatorClient['verifyTypedData']>[0]) =>\n        watch(client.verifyTypedData(args)),\n      writeContract: (args: Parameters<LocalFacilitatorClient['writeContract']>[0]) =>\n        watch(client.writeContract(args)),\n      sendTransaction: (args: Parameters<LocalFacilitatorClient['sendTransaction']>[0]) =>\n        watch(client.sendTransaction(args)),\n      waitForTransactionReceipt: (\n        args: Parameters<LocalFacilitatorClient['waitForTransactionReceipt']>[0],\n      ) => watch(client.waitForTransactionReceipt(args)),\n      getCode: (args: Parameters<LocalFacilitatorClient['getCode']>[0]) =>\n        watch(client.getCode(args)),\n    } as unknown as Parameters<typeof toFacilitatorEvmSigner>[0];\n\n    // Bound receipt waits so a timeout returns `settlement_pending` with the\n    // broadcast hash\n    const facilitator = registerExactEvmScheme(new x402Facilitator(), {\n      signer: toFacilitatorEvmSigner(signer, {\n        confirmationTimeoutMs: SETTLEMENT_CONFIRMATION_TIMEOUT_MS,\n      }),\n      networks: network as Network,\n    });\n\n    return { facilitator, failed: () => failed };\n  };\n\n  return {\n    kind: 'local',\n    describe: 'local (in-process)',\n    open(): FacilitatorSession {\n      const { facilitator, failed } = build();\n      return {\n        verify: (payload, requirements) => facilitator.verify(payload, requirements),\n        settle: (payload, requirements) => facilitator.settle(payload, requirements),\n        transportFailed: failed,\n      };\n    },\n  };\n}\n","/**\n * How the provider reads a facilitator's verify and settle results: which\n * reasons are verdicts, which leave the outcome unknown, and which errors mean\n * no verdict was obtained\n */\nimport {\n  BaseError,\n  ContractFunctionRevertedError,\n  HttpRequestError,\n  TimeoutError,\n  WaitForTransactionReceiptTimeoutError,\n} from 'viem';\nimport { redactedErrorText } from '../../../core/errors';\n\n// `SettleResponse.errorReason` the SDK uses for \"broadcast, not confirmed\"\nexport const SETTLEMENT_PENDING_REASON = 'settlement_pending';\n/**\n * Each family's catch-all for a throw from the broadcast call, and its reason\n * for a transaction that failed on chain. Only the second carries a\n * transaction reference. A failure the SDK recognizes before the broadcast gets\n * its own reason instead. The EVM Permit2 path appends the thrown message as\n * `: <message>`. On NEAR the second is a failed inner `ft_transfer` receipt.\n */\nconst TRANSACTION_FAILED_REASONS = [\n  'invalid_exact_evm_transaction_failed',\n  'invalid_exact_svm_transaction_failed',\n  'settlement_failed',\n];\nexport const isTransactionFailedReason = (reason: string | undefined): boolean =>\n  reason !== undefined &&\n  TRANSACTION_FAILED_REASONS.some((known) => reason === known || reason.startsWith(`${known}:`));\n/**\n * The one failure reason per family that names a transaction and proves\n * nothing moved: a reverted EVM receipt, a Solana transaction that failed on\n * chain, or a failed inner NEAR `ft_transfer` receipt. Any other failure that\n * names a transaction may have moved funds. The EVM SDK, for one, reports a\n * mined transfer whose `Transfer` log it cannot match as a failure with the hash.\n */\nexport const ON_CHAIN_FAILURE_REASONS: Readonly<Record<'evm' | 'svm' | 'near', string>> = {\n  evm: 'invalid_exact_evm_transaction_failed',\n  svm: 'invalid_exact_svm_transaction_failed',\n  near: 'settlement_failed',\n};\n/**\n * Solana outcomes that leave the payment unknown: the facilitator is already\n * settling the same transaction for another request, or it confirmed the\n * transaction but could not yet see the transfer\n */\nexport const UNKNOWN_OUTCOME_REASONS: ReadonlySet<string> = new Set([\n  'duplicate_settlement',\n  'post_settlement_transfer_not_confirmed',\n]);\n/**\n * Facilitator configuration and chain-read failures yield no payment verdict,\n * so they count as provider failures rather than buyer refusals. The NEAR SDK\n * returns its reasons before submission. The Solana ones compare the offer the\n * gateway sent with the facilitator's own fee payers, or with the buyer's\n * echo, which the gateway already matched.\n */\nexport const NO_VERDICT_REASONS: ReadonlySet<string> = new Set([\n  'unexpected_verify_error',\n  'invalid_exact_near_no_relayer_configured',\n  'invalid_exact_near_current_block_height_unavailable',\n  'invalid_exact_near_access_key_lookup_failed',\n  'invalid_exact_near_account_lookup_failed',\n  'invalid_exact_near_token_account_lookup_failed',\n  'invalid_exact_near_balance_check_failed',\n  'invalid_exact_near_storage_check_failed',\n  'invalid_exact_svm_payload_missing_fee_payer',\n  'invalid_exact_svm_fee_payer_not_managed_by_facilitator',\n  'invalid_exact_svm_unsupported_scheme',\n  'invalid_exact_svm_network_mismatch',\n]);\n/**\n * NEAR settle failures that are verdicts. The NEAR specification leaves the\n * reason implementation-specific and the transaction empty, even after a\n * submission, so only the SDK's verification reasons, returned before it\n * submits, and a failed inner `ft_transfer` with its hash prove nothing moved.\n */\nconst NEAR_PRE_SUBMISSION_REASONS: ReadonlySet<string> = new Set([\n  'invalid_x402_version',\n  'unsupported_scheme',\n  'invalid_network',\n  'insufficient_funds',\n  'verification_failed',\n]);\nexport const isNearVerdict = (reason: string | undefined): boolean =>\n  reason !== undefined &&\n  (reason === 'settlement_failed' ||\n    reason.startsWith('invalid_exact_near_') ||\n    NEAR_PRE_SUBMISSION_REASONS.has(reason));\n/**\n * `invalidReason`/`errorReason` are `z.string()` in the SDK schema, with no\n * length or charset bound. They reach the buyer's error, the persisted events\n * and the merchant's ledger. A remote facilitator controls these values, so\n * they are treated as untrusted input rather than diagnostic text.\n */\n// The SDKs' longest reason, a Solana compute-budget refusal, has 85 characters\nconst MAX_REASON_LENGTH = 128;\nconst REASON_SHAPE = /^[a-z0-9_.-]+$/i;\n\nexport function sanitizeReason(reason: string | undefined, fallback: string): string {\n  if (reason === undefined) return fallback;\n  const trimmed = reason.trim();\n  if (trimmed.length === 0 || trimmed.length > MAX_REASON_LENGTH) return fallback;\n  return REASON_SHAPE.test(trimmed) ? trimmed : fallback;\n}\n\n// viem wraps every failed contract call in ContractFunctionExecutionError, so\n// only the cause chain can show a revert. A revert alone does not prove nothing\n// moved, because viem also reports an RPC error on a send as one; settle()\n// relies on the SDK throwing only before the broadcast.\nexport function isOnChainRevertError(err: unknown): boolean {\n  return (\n    err instanceof BaseError && err.walk((e) => e instanceof ContractFunctionRevertedError) !== null\n  );\n}\n\n/**\n * The `instanceof` checks cover what the pinned viem HTTP transport throws\n * (`HttpRequestError` for every fetch failure, including connection refused,\n * or `TimeoutError`) and what `waitForTransactionReceipt` throws when it stops\n * polling after a broadcast. Message matching is only a fallback for errors\n * outside those classes, such as a raw undici error, because message text can\n * change with any viem or undici upgrade.\n */\nexport function isProviderUnavailableError(err: unknown): boolean {\n  if (\n    err instanceof HttpRequestError ||\n    err instanceof TimeoutError ||\n    err instanceof WaitForTransactionReceiptTimeoutError\n  ) {\n    return true;\n  }\n  const message = redactedErrorText(err).toLowerCase();\n  return (\n    message.includes('econnrefused') ||\n    message.includes('fetch failed') ||\n    message.includes('enotfound') ||\n    message.includes('etimedout') ||\n    message.includes('timed out') ||\n    message.includes('network error')\n  );\n}\n","// Builds each offer from its options: validation, deployment guardrails and the facilitator binding\nimport type { Network } from '@x402/core/types';\nimport { isAddress } from 'viem';\nimport { CommerceError } from '../../../core';\nimport { normalizeAddress, sameAddress } from '../addresses';\nimport {\n  createLocalFacilitatorClient,\n  createLocalPublicClient,\n  type LocalFacilitatorClient,\n} from '../chain';\nimport { assertDevKeyIsLocalOnly, assertPayToIsNotDevAddress, describeRpc } from '../dev-key-guard';\nimport { createRemoteFacilitatorBinding, type FacilitatorBinding } from '../facilitator';\nimport { resolveX402Deployment } from '../guardrails';\nimport { createLocalFacilitatorBinding } from '../local-facilitator';\nimport { type DeploymentMode, findX402Network } from '../networks';\nimport { HEALTH_TIMEOUT_MS } from './constants';\nimport { isProviderUnavailableError } from './reasons';\nimport type {\n  Offer,\n  X402MultiOfferProviderOptions,\n  X402OfferOptions,\n  X402ProviderOptions,\n} from './types';\n\n/**\n * Resolves provider and resource offers at construction, rejecting\n * misconfiguration before paid requests.\n */\nexport function resolveOffers(\n  inputs: readonly X402OfferOptions[],\n  options: X402ProviderOptions | X402MultiOfferProviderOptions,\n): {\n  readonly offers: readonly Offer[];\n  readonly resourceOffers: ReadonlyMap<string, readonly Offer[]>;\n  /** Every distinct offer, the provider's first */\n  readonly pool: readonly Offer[];\n  readonly deploymentMode: DeploymentMode;\n  readonly remoteBinding: FacilitatorBinding | undefined;\n} {\n  // Share one remote binding, created after the first offer passes validation\n  let remoteBinding: FacilitatorBinding | undefined;\n\n  let mode: DeploymentMode | undefined;\n  // An offer that several lists repeat is built, and health-checked, once\n  const built = new Map<string, Offer>();\n  const resolveList = (\n    list: readonly X402OfferOptions[],\n    field: (index: number, name: string) => string,\n  ): readonly Offer[] => {\n    const seen = new Set<string>();\n    return list.map((input, index): Offer => {\n      const at = (name: string) => field(index, name);\n      // The network decides how the other fields are read. An unknown one\n      // fails in `resolveX402Deployment` below.\n      const known = findX402Network(input.network, options.customNetworks);\n      if (known !== undefined && known.family !== 'evm') {\n        const shape =\n          known.family === 'svm' ? 'a Solana address (base58, 32 bytes)' : 'a NEAR account ID';\n        for (const name of ['asset', 'payTo'] as const) {\n          if (normalizeAddress(known, input[name]) === undefined) {\n            throw new CommerceError('CONFIG_INVALID', `x402 provider: ${at(name)} is not ${shape}`);\n          }\n        }\n        if (input.assetTransferMethod !== undefined) {\n          throw new CommerceError(\n            'CONFIG_INVALID',\n            `x402 provider: ${at('assetTransferMethod')} applies to EVM networks only`,\n          );\n        }\n      } else {\n        // Neither address is echoed: a swapped variable could contain a key.\n        // Check mixed-case EIP-55 checksums here; config load checks only shape.\n        if (!isAddress(input.asset)) {\n          throw new CommerceError(\n            'CONFIG_INVALID',\n            `x402 provider: ${at('asset')} is not a valid EVM address (0x and 40 hex characters; a mixed-case address needs a valid EIP-55 checksum)`,\n          );\n        }\n        if (!isAddress(input.payTo)) {\n          throw new CommerceError(\n            'CONFIG_INVALID',\n            `x402 provider: ${at('payTo')} is not a valid EVM address (0x and 40 hex characters; a mixed-case address needs a valid EIP-55 checksum)`,\n          );\n        }\n        // In every facilitator mode. `resolveX402Deployment` below also refuses\n        // a dev payTo on any non-local deployment, whatever the RPC host.\n        assertPayToIsNotDevAddress(input.rpcUrl, input.payTo);\n        // The buyer signs the token's EIP-712 domain under EIP-3009, so the\n        // requirement must name it. Permit2 has a domain of its own.\n        if (\n          (input.assetTransferMethod ?? 'eip3009') === 'eip3009' &&\n          (!input.assetName || !input.assetVersion)\n        ) {\n          throw new CommerceError(\n            'CONFIG_INVALID',\n            `x402 provider: an EIP-3009 offer needs ${at('assetName')} and ${at('assetVersion')}, the token's EIP-712 domain`,\n          );\n        }\n      }\n      if (!Number.isInteger(input.assetDecimals) || input.assetDecimals < 0) {\n        throw new CommerceError(\n          'CONFIG_INVALID',\n          `x402 provider: ${at('assetDecimals')} must be a non-negative integer`,\n        );\n      }\n      // The chain id is signed into the buyer's EIP-712 domain, so a network it\n      // cannot be resolved from fails here, never at request time\n      const deployment = resolveX402Deployment({\n        network: input.network,\n        ...(options.customNetworks !== undefined ? { customNetworks: options.customNetworks } : {}),\n        payTo: input.payTo,\n        asset: input.asset,\n        ...(input.assetName !== undefined ? { assetName: input.assetName } : {}),\n        ...(input.assetVersion !== undefined ? { assetVersion: input.assetVersion } : {}),\n        facilitator: options.facilitator,\n        ...(options.allowMainnet !== undefined ? { allowMainnet: options.allowMainnet } : {}),\n        ...(options.allowUnauthenticatedFacilitator !== undefined\n          ? { allowUnauthenticatedFacilitator: options.allowUnauthenticatedFacilitator }\n          : {}),\n        // Every EVM offer names its decimals and, under EIP-3009, its domain\n        allowOtherEvmToken: true,\n      });\n      const profile = deployment.profile;\n      // Refuse offers mixing local, testnet and mainnet deployment modes\n      if (mode !== undefined && deployment.mode !== mode) {\n        throw new CommerceError(\n          'CONFIG_INVALID',\n          `x402 provider: offers mix ${mode} and ${deployment.mode} networks; every offer must be on a ${mode} network`,\n        );\n      }\n      mode = deployment.mode;\n      // EVM addresses compare case-insensitively; Solana and NEAR exactly\n      const comparable = (value: string) =>\n        profile.family === 'evm' ? value.toLowerCase() : value;\n      const key = `${input.network}|${comparable(input.asset)}|${comparable(input.payTo)}`;\n      if (seen.has(key)) {\n        throw new CommerceError(\n          'CONFIG_INVALID',\n          `x402 provider: ${at('network')} repeats an earlier offer of the same asset to the same payTo on ${input.network}`,\n        );\n      }\n      seen.add(key);\n      const identity = [\n        key,\n        input.assetTransferMethod ?? 'eip3009',\n        input.assetName,\n        input.assetVersion,\n        input.assetDecimals,\n        input.rpcUrl,\n      ].join('|');\n      const existing = built.get(identity);\n      if (existing !== undefined) return existing;\n\n      // Construct the signer before requests can reserve replay keys, so an\n      // unusable key fails provider construction.\n      let binding: FacilitatorBinding;\n      if (options.facilitator.mode === 'local') {\n        assertDevKeyIsLocalOnly(input.rpcUrl, options.facilitator.signerPrivateKey);\n        let client: LocalFacilitatorClient;\n        try {\n          client = createLocalFacilitatorClient(\n            input.rpcUrl,\n            options.facilitator.signerPrivateKey as `0x${string}`,\n          );\n        } catch (cause) {\n          throw new CommerceError(\n            'CONFIG_INVALID',\n            'x402 provider: could not construct a local facilitator signer from ' +\n              'facilitator.signerPrivateKey. It must be a valid 32-byte hex private key.',\n            { cause },\n          );\n        }\n        binding = createLocalFacilitatorBinding(client, input.network, isProviderUnavailableError);\n      } else {\n        remoteBinding ??= createRemoteFacilitatorBinding({\n          url: options.facilitator.url,\n          auth: options.facilitator.auth,\n        });\n        binding = remoteBinding;\n      }\n\n      // health() reads the chain itself, with a timeout. Verification and\n      // settlement go through the facilitator instead. Health details can reach\n      // logs, so they name the RPC by origin.\n      const base = {\n        network: input.network as Network,\n        assetDecimals: input.assetDecimals,\n        rpcUrl: input.rpcUrl,\n        rpcOrigin: describeRpc(input.rpcUrl),\n        binding,\n      };\n      const offer: Offer =\n        profile.family === 'svm'\n          ? { ...base, family: 'svm', profile, asset: input.asset, payTo: input.payTo }\n          : profile.family === 'near'\n            ? { ...base, family: 'near', profile, asset: input.asset, payTo: input.payTo }\n            : {\n                ...base,\n                family: 'evm',\n                profile,\n                method: input.assetTransferMethod ?? 'eip3009',\n                asset: input.asset as `0x${string}`,\n                assetName: input.assetName,\n                assetVersion: input.assetVersion,\n                payTo: input.payTo as `0x${string}`,\n                healthClient: createLocalPublicClient(\n                  input.rpcUrl,\n                  HEALTH_TIMEOUT_MS,\n                  profile.chainId,\n                ),\n              };\n      built.set(identity, offer);\n      return offer;\n    });\n  };\n\n  const offers = resolveList(inputs, (index, name) =>\n    inputs.length === 1 ? `\"${name}\"` : `\"offers[${index}].${name}\"`,\n  );\n  const resourceOffers = new Map(\n    Object.entries(options.resourceOffers ?? {}).map(([id, list]) => {\n      if (list.length === 0) {\n        throw new CommerceError('CONFIG_INVALID', `x402 provider: \"resourceOffers.${id}\" is empty`);\n      }\n      return [id, resolveList(list, (index, name) => `\"resourceOffers.${id}[${index}].${name}\"`)];\n    }),\n  );\n  return {\n    offers,\n    resourceOffers,\n    pool: [...built.values()],\n    deploymentMode: mode as DeploymentMode,\n    remoteBinding,\n  };\n}\n\n/**\n * Uses the network's default token symbol when paying that asset; otherwise\n * uses the resource's currency, the gateway's only label for another token.\n */\nexport function offerCurrency(offer: Offer, quoted: string): string {\n  const canonical = offer.profile.canonicalAsset;\n  return canonical !== undefined && sameAddress(offer.profile, offer.asset, canonical.address)\n    ? canonical.symbol\n    : quoted;\n}\n","// RFC 8785 (JCS) serialization for request hashes\n\n// With the `u` flag, a valid surrogate pair is one code point, so this pattern\n// matches only lone surrogates\nconst LONE_SURROGATE = /\\p{Cs}/u;\n\n/**\n * Serializes JSON data using RFC 8785 (JCS) rules. Non-finite numbers, lone\n * surrogates and unsupported primitive values return undefined.\n * JSON.stringify supplies number formatting and string escaping; the default\n * sort orders keys by UTF-16 code units.\n */\nexport function canonicalJson(value: unknown): string | undefined {\n  if (typeof value === 'string')\n    return LONE_SURROGATE.test(value) ? undefined : JSON.stringify(value);\n  if (typeof value === 'number') return Number.isFinite(value) ? JSON.stringify(value) : undefined;\n  if (value === null || typeof value === 'boolean') return JSON.stringify(value);\n  if (Array.isArray(value)) {\n    const items = value.map(canonicalJson);\n    return items.includes(undefined) ? undefined : `[${items.join(',')}]`;\n  }\n  if (typeof value !== 'object') return undefined;\n  const members: string[] = [];\n  for (const key of Object.keys(value).sort()) {\n    const member = canonicalJson((value as Record<string, unknown>)[key]);\n    if (member === undefined || LONE_SURROGATE.test(key)) return undefined;\n    members.push(`${JSON.stringify(key)}:${member}`);\n  }\n  return `{${members.join(',')}}`;\n}\n","/**\n * Issues experimental ERC-8409 quotes when the provider enables `quote`.\n *\n * For requests that can be canonicalized, `extensions[\"erc-8409\"]` carries\n * one quote per EVM offer: chain, token, payee and amount in base units.\n * A dedicated issuer key signs the terms and request hash with EIP-712.\n * Quotes are informational; verify() and settle() use the offer without\n * reading the quotes.\n */\nimport { randomBytes } from 'node:crypto';\nimport { type Hex, keccak256, stringToBytes } from 'viem';\nimport { type PrivateKeyAccount, privateKeyToAccount } from 'viem/accounts';\nimport { type Clock, CommerceError } from '../../../core';\nimport { canonicalJson } from '../../../core/canonical-json';\nimport { isWellKnownDevKey } from '../dev-key-guard';\nimport type { DeploymentMode } from '../networks';\nimport type { EvmOffer, Offer } from './types';\n\n/** Key for quotes in `PaymentRequired.extensions` */\nexport const QUOTE_EXTENSION = 'erc-8409';\n\n/**\n * Request scheme for Keccak-256 hashes of the RFC 8785 (JCS) serialization of\n * `{ \"input\": <input>, \"resource\": <resource id> }`. The input is the validated\n * resource input used to build the backend request. The resource ID identifies\n * the operation and also names the MCP tool and A2A skill.\n */\nexport const QUOTE_REQUEST_SCHEME = 'agent-commerce/request/v1';\n\n/** The ERC's EIP-712 domain, with the chain ID added per quote */\nexport const QUOTE_DOMAIN = { name: 'Signed Service Payment Quotes', version: '1' } as const;\n\n/** The ERC's EIP-712 type; field order is part of the type hash */\nexport const QUOTE_TYPES = {\n  ServicePaymentQuote: [\n    { name: 'issuer', type: 'address' },\n    { name: 'payer', type: 'address' },\n    { name: 'recipient', type: 'address' },\n    { name: 'asset', type: 'address' },\n    { name: 'amount', type: 'uint256' },\n    { name: 'requestScheme', type: 'string' },\n    { name: 'requestHash', type: 'bytes32' },\n    { name: 'quoteId', type: 'bytes32' },\n    { name: 'validAfter', type: 'uint64' },\n    { name: 'validUntil', type: 'uint64' },\n  ],\n} as const;\n\n// A zero payer makes a bearer quote; the payment signature identifies the payer\nconst BEARER = '0x0000000000000000000000000000000000000000';\n\n// The JSON Schema x402 v2 requires beside each extension's `info`\nconst QUOTE_INFO_SCHEMA = {\n  type: 'object',\n  required: ['quotes'],\n  properties: {\n    quotes: {\n      type: 'array',\n      items: {\n        type: 'object',\n        required: ['chainId', 'quote', 'signature'],\n        properties: {\n          chainId: { type: 'string' },\n          // Every field is a string in the ERC's JSON encoding\n          quote: {\n            type: 'object',\n            required: QUOTE_TYPES.ServicePaymentQuote.map((field) => field.name),\n            properties: Object.fromEntries(\n              QUOTE_TYPES.ServicePaymentQuote.map((field) => [field.name, { type: 'string' }]),\n            ),\n          },\n          signature: { type: 'string' },\n        },\n      },\n    },\n  },\n} as const;\n\n// Bound cache memory by evicting the oldest quote when the limit is reached\nconst QUOTE_CACHE_LIMIT = 1024;\n\n/** A quote in the ERC's JSON format, with integers as decimal strings */\nexport interface SignedQuote {\n  readonly chainId: string;\n  readonly quote: {\n    readonly issuer: Hex;\n    readonly payer: Hex;\n    readonly recipient: Hex;\n    readonly asset: Hex;\n    readonly amount: string;\n    readonly requestScheme: string;\n    readonly requestHash: Hex;\n    readonly quoteId: Hex;\n    readonly validAfter: string;\n    readonly validUntil: string;\n  };\n  readonly signature: Hex;\n}\n\n/** An EVM challenge offer and its `accepts` amount in base units */\nexport interface QuotedOffer {\n  readonly offer: EvmOffer;\n  readonly amount: string;\n}\n\nexport interface QuoteIssuer {\n  readonly issuer: Hex;\n  /**\n   * Challenge extensions, or undefined when there are no EVM offers, input is\n   * missing, or canonicalJson rejects the request\n   */\n  readonly extensionsFor: (\n    resourceId: string,\n    input: unknown,\n    offers: readonly QuotedOffer[],\n  ) => Promise<Record<string, unknown> | undefined>;\n}\n\n/**\n * Creates the issuer during provider construction. Rejects an invalid key,\n * a well-known Anvil key outside the local chain, a key matching an EVM\n * `payTo`, or a configuration without an EVM offer.\n */\nexport function createQuoteIssuer(options: {\n  readonly signerPrivateKey: string;\n  readonly offers: readonly Offer[];\n  readonly deploymentMode: DeploymentMode;\n  readonly clock: Clock;\n  readonly maxTimeoutSeconds: number;\n}): QuoteIssuer {\n  const { signerPrivateKey, offers, deploymentMode, clock, maxTimeoutSeconds } = options;\n  let account: PrivateKeyAccount;\n  try {\n    account = privateKeyToAccount(signerPrivateKey as Hex);\n  } catch (cause) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      'x402 provider: quote.signerPrivateKey is not a valid private key (expected \"0x\" followed by 64 hex characters)',\n      { cause },\n    );\n  }\n  if (deploymentMode !== 'local' && isWellKnownDevKey(signerPrivateKey)) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      'x402 provider: quote.signerPrivateKey is a well-known Anvil development key, so anyone could sign quotes as this gateway. Use a dedicated key outside the local chain.',\n    );\n  }\n  const evmOffers = offers.filter((offer): offer is EvmOffer => offer.family === 'evm');\n  if (evmOffers.length === 0) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      'x402 provider: quote needs an EVM offer; ERC-8409 quotes cover EVM networks only',\n    );\n  }\n  const issuer = account.address;\n  if (evmOffers.some((offer) => offer.payTo.toLowerCase() === issuer.toLowerCase())) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      'x402 provider: quote.signerPrivateKey controls a payTo address. Use a dedicated key, not the merchant wallet.',\n    );\n  }\n\n  const cache = new Map<string, SignedQuote>();\n\n  async function quoteFor(offer: EvmOffer, amount: string, requestHash: Hex): Promise<SignedQuote> {\n    const now = Math.floor(clock.now().getTime() / 1000);\n    const { chainId } = offer.profile;\n    const key = [\n      chainId,\n      offer.payTo.toLowerCase(),\n      offer.asset.toLowerCase(),\n      amount,\n      requestHash,\n    ].join('|');\n    const cached = cache.get(key);\n    // Reuse a cached quote while a full payment window remains to avoid\n    // signing retries; a cache miss requires a new signature\n    if (cached !== undefined && Number(cached.quote.validUntil) - now >= maxTimeoutSeconds) {\n      return cached;\n    }\n    const validUntil = now + 2 * maxTimeoutSeconds;\n    const quote = {\n      issuer,\n      payer: BEARER,\n      recipient: offer.payTo,\n      asset: offer.asset,\n      amount,\n      requestScheme: QUOTE_REQUEST_SCHEME,\n      requestHash,\n      // Use a new ID for each signed body, as the ERC requires\n      quoteId: `0x${randomBytes(32).toString('hex')}`,\n      validAfter: String(now),\n      validUntil: String(validUntil),\n    } as const;\n    const signature = await account.signTypedData({\n      domain: { ...QUOTE_DOMAIN, chainId },\n      types: QUOTE_TYPES,\n      primaryType: 'ServicePaymentQuote',\n      message: {\n        ...quote,\n        amount: BigInt(amount),\n        validAfter: BigInt(now),\n        validUntil: BigInt(validUntil),\n      },\n    });\n    const signed: SignedQuote = { chainId: String(chainId), quote, signature };\n    cache.delete(key);\n    if (cache.size >= QUOTE_CACHE_LIMIT) {\n      const oldest = cache.keys().next().value;\n      if (oldest !== undefined) cache.delete(oldest);\n    }\n    cache.set(key, signed);\n    return signed;\n  }\n\n  return {\n    issuer,\n    async extensionsFor(resourceId, input, quoted) {\n      if (quoted.length === 0) return undefined;\n      // Missing or non-canonicalizable input still gets a payment challenge\n      // without quotes\n      const requestHash = quoteRequestHash(resourceId, input);\n      if (requestHash === undefined) return undefined;\n      const quotes: SignedQuote[] = [];\n      for (const { offer, amount } of quoted) {\n        quotes.push(await quoteFor(offer, amount, requestHash));\n      }\n      return { [QUOTE_EXTENSION]: { info: { quotes }, schema: QUOTE_INFO_SCHEMA } };\n    },\n  };\n}\n\n/** Hash under {@link QUOTE_REQUEST_SCHEME}, or undefined when canonicalJson rejects the request */\nexport function quoteRequestHash(resourceId: string, input: unknown): Hex | undefined {\n  const canonical = canonicalJson({ input, resource: resourceId });\n  return canonical === undefined ? undefined : keccak256(stringToBytes(canonical));\n}\n","/**\n * Exact conversion from display amounts (\"0.01\" USDC) to the integer base\n * units x402 and EIP-3009 carry (\"10000\" at 6 decimals).\n *\n * It never goes through a JS `number`, which cannot represent most decimal\n * fractions. viem's `parseUnits` is not used either: it silently rounds excess\n * fractional digits, and \"0.0000001\" against a 6-decimal asset is a\n * configuration bug that must be refused, not rounded. The reverse direction\n * is viem's `formatUnits`, which is exact.\n */\nimport { CommerceError } from '../../core';\n\nconst DECIMAL_STRING_PATTERN = /^\\d+(?:\\.\\d+)?$/;\n\n/**\n * Parses a canonical decimal display amount (e.g. \"0.01\") into base units\n * for an asset with the given number of decimals, without floating point.\n *\n * Throws `CommerceError('PAYMENT_INVALID')` if the string is not a plain\n * non-negative decimal, or if it carries more fractional digits than the\n * asset supports.\n */\nexport function parseCanonicalAmount(amount: string, decimals: number): bigint {\n  if (!Number.isInteger(decimals) || decimals < 0) {\n    throw new CommerceError('INTERNAL_ERROR', `Invalid asset decimals: ${decimals}`);\n  }\n  if (!DECIMAL_STRING_PATTERN.test(amount)) {\n    throw new CommerceError(\n      'PAYMENT_INVALID',\n      `Amount \"${amount}\" is not a valid non-negative decimal string`,\n      {\n        details: { amount },\n      },\n    );\n  }\n\n  const [integerPart = '0', fractionPart = ''] = amount.split('.');\n\n  if (fractionPart.length > decimals) {\n    throw new CommerceError(\n      'PAYMENT_INVALID',\n      `Amount \"${amount}\" has more precision than the asset supports (${decimals} decimals)`,\n      { details: { amount, assetDecimals: decimals } },\n    );\n  }\n\n  const paddedFraction = fractionPart.padEnd(decimals, '0');\n  const combined = `${integerPart}${paddedFraction}`;\n  return BigInt(combined);\n}\n","/**\n * Decodes and validates the base64 `PAYMENT-SIGNATURE` submission.\n *\n * A malformed payload must become a `rejected` verification, never a thrown\n * request, so this returns `undefined` on any failure. That is why it parses\n * the schema itself instead of calling the SDK's `decodePaymentSignatureHeader`,\n * which throws.\n */\nimport { PaymentPayloadV2Schema } from '@x402/core/schemas';\nimport type { PaymentPayload } from '@x402/core/types';\nimport type { ExactEIP3009Payload, ExactPermit2Payload } from '@x402/evm';\nimport { isRecord } from '../../core/is-record';\nimport { isEvmAddress } from './addresses';\n\nexport function decodePaymentSubmission(payloadBase64: string): PaymentPayload | undefined {\n  const json = decodeJson(payloadBase64);\n  if (json === undefined) return undefined;\n  const result = PaymentPayloadV2Schema.safeParse(json);\n  return result.success ? (result.data as PaymentPayload) : undefined;\n}\n\n/** Read the declared version before v2 schema validation */\nexport function declaredX402Version(payloadBase64: string): unknown {\n  const json = decodeJson(payloadBase64);\n  return typeof json === 'object' && json !== null\n    ? (json as Record<string, unknown>)['x402Version']\n    : undefined;\n}\n\n/**\n * The payload as sent to a facilitator. `resource` is optional in v2 and\n * verify() has already matched it against the offer; hosted facilitators have\n * settled payloads without it, and none has been shown to accept this\n * gateway's `resource://` URL. `extensions` is dropped because quote echoes\n * are not used to verify payment, and a gas-sponsoring extension in a Permit2\n * payload would activate unsupported SDK facilitator behavior.\n */\nexport function forFacilitator<T extends PaymentPayload>(\n  payload: T,\n): Omit<T, 'resource' | 'extensions'> {\n  const { resource: _resource, extensions: _extensions, ...rest } = payload;\n  return rest;\n}\n\nfunction decodeJson(payloadBase64: string): unknown {\n  try {\n    return JSON.parse(Buffer.from(payloadBase64, 'base64').toString('utf8'));\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Narrows a decoded payload to the EIP-3009 `exact`/EVM shape.\n *\n * The SDK facilitator settles any payload carrying `permit2Authorization`\n * through Permit2, so a payload with both shapes is refused: the gateway would\n * check one authorization and the facilitator would settle the other.\n */\nexport function isExactEvmPayload(\n  payload: PaymentPayload,\n): payload is PaymentPayload & { payload: ExactEIP3009Payload } {\n  const inner = payload.payload;\n  return (\n    payload.accepted.scheme === 'exact' &&\n    isRecord(inner) &&\n    isRecord(inner['authorization']) &&\n    !('permit2Authorization' in inner) &&\n    typeof inner['signature'] === 'string'\n  );\n}\n\n// A uint256 in decimal, the form the SDK client writes\nconst UINT256 = /^(0|[1-9]\\d{0,77})$/;\nconst UINT256_MAX = 2n ** 256n - 1n;\n// An EIP-3009 nonce: 32 bytes in hex\nconst BYTES32 = /^0x[0-9a-fA-F]{64}$/;\n\nconst isUint256 = (value: unknown): value is string =>\n  typeof value === 'string' && UINT256.test(value) && BigInt(value) <= UINT256_MAX;\n\n/**\n * Checks an EIP-3009 authorization's fields in the forms the SDK client and\n * mppx write: addresses, decimal uint256 strings and a 32-byte hex nonce. A\n * value such as `\"0x2710\"` would otherwise reach the receipt as written.\n */\nexport function hasEip3009Fields(authorization: Readonly<Record<string, unknown>>): boolean {\n  return (\n    isEvmAddress(authorization['from']) &&\n    isEvmAddress(authorization['to']) &&\n    isUint256(authorization['value']) &&\n    isUint256(authorization['validAfter']) &&\n    isUint256(authorization['validBefore']) &&\n    typeof authorization['nonce'] === 'string' &&\n    BYTES32.test(authorization['nonce'])\n  );\n}\n\n/**\n * Checks the Permit2 `exact`/EVM fields used to match the offer and derive\n * the replay key. The facilitator checks the signature and on-chain state.\n */\nexport function isExactPermit2Payload(\n  payload: PaymentPayload,\n): payload is PaymentPayload & { payload: ExactPermit2Payload } {\n  const inner = payload.payload;\n  if (payload.accepted.scheme !== 'exact' || !isRecord(inner)) return false;\n  const auth = inner['permit2Authorization'];\n  if (!isRecord(auth) || 'authorization' in inner || typeof inner['signature'] !== 'string') {\n    return false;\n  }\n  const { permitted, witness } = auth;\n  return (\n    isRecord(permitted) &&\n    isRecord(witness) &&\n    isEvmAddress(auth['from']) &&\n    isEvmAddress(auth['spender']) &&\n    isEvmAddress(permitted['token']) &&\n    isEvmAddress(witness['to']) &&\n    isUint256(permitted['amount']) &&\n    isUint256(auth['nonce']) &&\n    isUint256(auth['deadline']) &&\n    isUint256(witness['validAfter'])\n  );\n}\n","// The challenge a resource answers with, and the offer a proof selects from it\nimport type { PaymentRequired, PaymentRequirements } from '@x402/core/types';\nimport type { PaymentContext, PaymentRequirement, PaymentVerificationContext } from '../../../core';\nimport {\n  REUSE_REJECTED_AUTHORIZATION_METADATA_KEY,\n  SETTLE_AFTER_BACKEND_METADATA_KEY,\n} from '../../../core/execution/settlement-order';\nimport { sameAddress } from '../addresses';\nimport { parseCanonicalAmount } from '../amount';\nimport type { X402Network } from '../networks';\nimport { decodePaymentSubmission } from '../payload';\nimport { X402_DEFAULT_PAYMENT_FLOW } from '../payment-flow';\nimport { DEFAULT_MIME_TYPE, X402_PROTOCOL_VERSION, X402_VERSION } from './constants';\nimport type { ProviderContext, SvmOffer } from './types';\n\n// Requirement metadata naming the offer `selectRequirement` chose, by index\nexport const SELECTED_OFFER_KEY = 'x402.offer';\n\n// Use the selected or sole offer; multi-offer challenges require selection\nexport function offerIndexOf(requirement: PaymentRequirement): number | undefined {\n  const selected = requirement.metadata?.[SELECTED_OFFER_KEY];\n  if (typeof selected === 'number') return selected;\n  // An empty list falls through to 'missing_payment_requirements'\n  return requirement.challenge.accepts.length <= 1 ? 0 : undefined;\n}\n\n/**\n * Match echoed terms against the offer. Extra client keys and\n * `maxTimeoutSeconds` do not matter; EVM addresses ignore case, Solana's do\n * not. Compare effective payment flows so an upfront proof cannot pay a default\n * authorization offer.\n */\nexport function acceptedMatchesOffer(\n  offered: PaymentRequirements,\n  accepted: PaymentRequirements,\n  network: X402Network | undefined,\n): boolean {\n  if (!network) return false;\n  const same = (a: string, b: string) => sameAddress(network, a, b);\n  const offeredExtra = offered.extra ?? {};\n  const acceptedExtra = accepted.extra ?? {};\n  const flow = (extra: Record<string, unknown>) =>\n    extra['paymentFlow'] ?? X402_DEFAULT_PAYMENT_FLOW;\n  return (\n    accepted.scheme === offered.scheme &&\n    accepted.network === offered.network &&\n    accepted.amount === offered.amount &&\n    same(accepted.asset, offered.asset) &&\n    same(accepted.payTo, offered.payTo) &&\n    Object.entries(offeredExtra).every(([key, value]) => acceptedExtra[key] === value) &&\n    flow(acceptedExtra) === flow(offeredExtra)\n  );\n}\n\n/** Builds the provider's `createRequirement` and `selectRequirement` */\nexport function createRequirementBuilders(\n  ctx: ProviderContext,\n  svmFeePayer: (offer: SvmOffer) => Promise<string>,\n): {\n  readonly createRequirement: (context: PaymentContext) => Promise<PaymentRequirement>;\n  readonly selectRequirement: (context: PaymentVerificationContext) => Promise<PaymentRequirement>;\n} {\n  const { options, offersFor, clock, ids, maxTimeoutSeconds } = ctx;\n\n  async function createRequirement(context: PaymentContext): Promise<PaymentRequirement> {\n    const offers = offersFor(context.resource.id);\n    const paymentFlow =\n      options.resourcePaymentFlows?.[context.resource.id] ??\n      options.paymentFlow ??\n      X402_DEFAULT_PAYMENT_FLOW;\n\n    // x402 requires an explicit non-default flow. Omit the default\n    // `authorization` flow here.\n    const flow = paymentFlow === 'upfront' ? { paymentFlow } : {};\n    const accepts: PaymentRequirements[] = await Promise.all(\n      offers.map(async (offer) => ({\n        scheme: 'exact',\n        network: offer.network,\n        asset: offer.asset,\n        amount: parseCanonicalAmount(context.amount, offer.assetDecimals).toString(),\n        payTo: offer.payTo,\n        maxTimeoutSeconds,\n        // EIP-3009 needs `name`/`version` for a shared EIP-712 domain without\n        // a token `version()` call; Permit2 uses its own domain. EVM clients\n        // sign the named `assetTransferMethod`. Solana needs the facilitator's\n        // fee payer; NEAR needs no scheme-specific extra because the\n        // facilitator chooses its relayer.\n        extra:\n          offer.family === 'svm'\n            ? { feePayer: await svmFeePayer(offer), ...flow }\n            : offer.family === 'near'\n              ? { ...flow }\n              : {\n                  ...(offer.assetName !== undefined ? { name: offer.assetName } : {}),\n                  ...(offer.assetVersion !== undefined ? { version: offer.assetVersion } : {}),\n                  assetTransferMethod: offer.method,\n                  ...flow,\n                },\n      })),\n    );\n    const single = offers.length === 1 ? offers[0] : undefined;\n    const extensions = await ctx.quotes?.extensionsFor(\n      context.resource.id,\n      context.input,\n      offers.flatMap((offer, index) => {\n        const accepted = accepts[index];\n        return offer.family === 'evm' && accepted ? [{ offer, amount: accepted.amount }] : [];\n      }),\n    );\n\n    // The v2 challenge document as sent on the wire. The HTTP adapter\n    // base64-encodes it into `PAYMENT-REQUIRED` and MCP passes it through, so\n    // both surfaces offer the same challenge.\n    //\n    // `resource.url` is outside the EIP-3009 signature. A single offer puts its\n    // network and payee in it, so the buyer's echo identifies the offer. With\n    // several, the URL stays the same whichever one the buyer pays.\n    const resourceId = encodeURIComponent(context.resource.id);\n    const envelope: PaymentRequired = {\n      x402Version: X402_VERSION,\n      resource: {\n        url: single\n          ? `resource://agent-commerce/${encodeURIComponent(single.network)}/${single.payTo}/resources/${resourceId}`\n          : `resource://agent-commerce/resources/${resourceId}`,\n        description: context.resource.description ?? context.resource.name,\n        // The media type the merchant declares, else `application/json`; an HTTP\n        // delivery carries the backend's own type when it is text and fits the body\n        mimeType: options.resourceMimeTypes?.[context.resource.id] ?? DEFAULT_MIME_TYPE,\n      },\n      accepts,\n      ...(extensions !== undefined ? { extensions } : {}),\n    };\n\n    const expiresAt = new Date(clock.now().getTime() + maxTimeoutSeconds * 1000).toISOString();\n\n    return {\n      id: ids.next('payreq'),\n      requestId: context.requestId,\n      resourceId: context.resource.id,\n      provider: 'x402',\n      amount: context.amount,\n      currency: context.currency,\n      // Several offers name several destinations; selection fills these in\n      ...(single\n        ? { destination: single.payTo, network: single.network, asset: single.asset }\n        : {}),\n      expiresAt,\n      challenge: {\n        provider: 'x402',\n        version: X402_PROTOCOL_VERSION,\n        accepts: accepts as unknown as Record<string, unknown>[],\n        envelope: envelope as unknown as Record<string, unknown>,\n      },\n      metadata: {\n        [SETTLE_AFTER_BACKEND_METADATA_KEY]: paymentFlow === 'authorization',\n        // The SDK server keeps no record of a payload whose handler or\n        // settlement failed and verifies it again; the chain spends it once\n        [REUSE_REJECTED_AUTHORIZATION_METADATA_KEY]: true,\n      },\n    };\n  }\n\n  /**\n   * Selects the unique offer matching `accepted`, leaving zero or multiple\n   * matches unchanged for `verify()` to reject. Selection identifies the\n   * claimed offer; verification still validates the proof.\n   */\n  async function selectRequirement(\n    context: PaymentVerificationContext,\n  ): Promise<PaymentRequirement> {\n    const { requirement, submission } = context;\n    const offered = requirement.challenge.accepts as unknown as PaymentRequirements[];\n    if (offered.length < 2) return requirement;\n    const offers = offersFor(requirement.resourceId);\n    const payload = decodePaymentSubmission(submission.payload);\n    if (!payload) return requirement;\n    const matches = offered.flatMap((offer, index) =>\n      acceptedMatchesOffer(offer, payload.accepted, offers[index]?.profile) ? [index] : [],\n    );\n    const index = matches.length === 1 ? matches[0] : undefined;\n    const offer = index === undefined ? undefined : offers[index];\n    if (index === undefined || !offer) return requirement;\n    return {\n      ...requirement,\n      destination: offer.payTo,\n      network: offer.network,\n      asset: offer.asset,\n      metadata: { ...requirement.metadata, [SELECTED_OFFER_KEY]: index },\n    };\n  }\n\n  return { createRequirement, selectRequirement };\n}\n","// What an EVM payload authorizes: payer, payee, amount and replay key\n\nimport type { PaymentPayload } from '@x402/core/types';\nimport { x402ExactPermit2ProxyAddress } from '@x402/evm';\nimport { getAddress, isAddress } from 'viem';\nimport { hasEip3009Fields, isExactEvmPayload, isExactPermit2Payload } from '../payload';\nimport { computePermit2ReplayKey, computeReplayKey } from '../replay-key';\nimport type { EvmOffer } from './types';\n\n// What a payload authorizes, read the way the offer's method settles it\nexport interface Transfer {\n  readonly from: `0x${string}`;\n  readonly to: `0x${string}`;\n  readonly value: string;\n  readonly replayKey: string;\n  readonly recipientMismatch: string;\n  readonly amountMismatch: string;\n}\n\n/**\n * Reads the payer, payee, amount and replay key, or returns a refusal reason.\n * Enforces the offer's method because the SDK facilitator chooses the method\n * from the payload.\n */\nexport function readTransfer(payload: PaymentPayload, offer: EvmOffer): Transfer | string {\n  // verify() refuses an `accepted.network` other than the offer's, so this\n  // chain id is the one the authorization is bound to\n  const { chainId } = offer.profile;\n  if (offer.method === 'eip3009') {\n    if (!isExactEvmPayload(payload)) return 'unsupported_scheme';\n    const { authorization } = payload.payload;\n    const { from, to, value, nonce } = authorization;\n    if (!hasEip3009Fields(authorization) || !isAddress(from) || !isAddress(to)) {\n      return 'invalid_payload';\n    }\n    return {\n      from: getAddress(from),\n      to: getAddress(to),\n      value,\n      replayKey: computeReplayKey({\n        chainId,\n        asset: getAddress(offer.asset),\n        from: getAddress(from),\n        nonce,\n      }),\n      recipientMismatch: 'invalid_exact_evm_payload_recipient_mismatch',\n      amountMismatch: 'invalid_exact_evm_payload_authorization_value_mismatch',\n    };\n  }\n  if (!isExactPermit2Payload(payload)) return 'unsupported_scheme';\n  const { from, spender, permitted, witness, nonce } = payload.payload.permit2Authorization;\n  // Permit2 lets the spender move the permitted tokens anywhere; only the x402\n  // proxy binds the transfer to the signed witness recipient\n  if (getAddress(spender) !== getAddress(x402ExactPermit2ProxyAddress)) {\n    return 'invalid_permit2_spender';\n  }\n  if (getAddress(permitted.token) !== getAddress(offer.asset)) return 'permit2_token_mismatch';\n  return {\n    from: getAddress(from),\n    to: getAddress(witness.to),\n    value: permitted.amount,\n    replayKey: computePermit2ReplayKey({ chainId, owner: getAddress(from), nonce }),\n    recipientMismatch: 'invalid_permit2_recipient_mismatch',\n    amountMismatch: 'permit2_amount_mismatch',\n  };\n}\n","// Settles a verified proof and classifies the facilitator's answer\nimport type { PaymentRequirements, SettleResponse } from '@x402/core/types';\nimport type { PaymentResult, PaymentSettlementContext } from '../../../core';\nimport { CommerceError } from '../../../core';\nimport { redactedErrorText } from '../../../core/errors';\nimport { isTransactionReference } from '../addresses';\nimport { decodePaymentSubmission, forFacilitator } from '../payload';\nimport {\n  isNearVerdict,\n  isOnChainRevertError,\n  isProviderUnavailableError,\n  isTransactionFailedReason,\n  NO_VERDICT_REASONS,\n  ON_CHAIN_FAILURE_REASONS,\n  SETTLEMENT_PENDING_REASON,\n  sanitizeReason,\n  UNKNOWN_OUTCOME_REASONS,\n} from './reasons';\nimport { offerIndexOf } from './requirement';\nimport { readTransfer } from './transfer';\nimport type { ProviderContext } from './types';\n\n/** Builds the provider's `settle`, which throws unless handed a successful verification */\nexport function createSettle(\n  ctx: ProviderContext,\n): (context: PaymentSettlementContext) => Promise<PaymentResult> {\n  const { offersFor, clock, logger } = ctx;\n\n  async function settle(context: PaymentSettlementContext): Promise<PaymentResult> {\n    const { requirement, submission, verification } = context;\n\n    if (verification.status !== 'verified') {\n      throw new CommerceError(\n        'PAYMENT_INVALID',\n        'x402 provider: settle() called without a successful verify()',\n      );\n    }\n\n    const index = offerIndexOf(requirement);\n    const offer = index === undefined ? undefined : offersFor(requirement.resourceId)[index];\n    const requirements =\n      index === undefined\n        ? undefined\n        : (requirement.challenge.accepts[index] as PaymentRequirements | undefined);\n    if (!offer || !requirements) {\n      throw new CommerceError(\n        'PAYMENT_INVALID',\n        'x402 provider: settle() found no payment requirements to settle against',\n      );\n    }\n\n    const payload = decodePaymentSubmission(submission.payload);\n    const transfer = payload && offer.family === 'evm' ? readTransfer(payload, offer) : undefined;\n    if (!payload || typeof transfer === 'string') {\n      throw new CommerceError(\n        'PAYMENT_INVALID',\n        'x402 provider: settle() received an undecodable payment payload',\n      );\n    }\n    const reference = (value: string) => isTransactionReference(offer.profile, value);\n\n    const rejectedSettlement = (rejectionReason: string): PaymentResult => ({\n      status: 'rejected',\n      provider: 'x402',\n      amount: verification.amount,\n      currency: verification.currency,\n      ...(verification.network !== undefined ? { network: verification.network } : {}),\n      ...(verification.asset !== undefined ? { asset: verification.asset } : {}),\n      ...(verification.replayKey !== undefined ? { replayKey: verification.replayKey } : {}),\n      rejectionReason,\n    });\n\n    const scope = offer.binding.open();\n    let sdkResult: SettleResponse;\n    try {\n      sdkResult = await scope.settle(forFacilitator(payload), requirements);\n    } catch (err) {\n      if (isProviderUnavailableError(err) || scope.transportFailed()) {\n        throw new CommerceError(\n          'PAYMENT_PROVIDER_UNAVAILABLE',\n          `x402 provider: ${offer.binding.kind} facilitator unreachable during settle()`,\n          { cause: err },\n        );\n      }\n      // The pinned SDK returns a result for every failure from gas estimation\n      // on, so a throw comes from its checks before anything is sent. A revert\n      // there is a real rejection, which releases any mandate the pipeline\n      // holds for the purchase. Any other throw goes back as an unavailable\n      // provider, which the pipeline records as `settlement-uncertain`, never\n      // as a rejection blamed on the buyer.\n      if (!isOnChainRevertError(err)) {\n        logger.warn(\n          { err: redactedErrorText(err) },\n          'x402 settle(): settlement failed with an unclassified error; outcome unknown',\n        );\n        throw new CommerceError(\n          'PAYMENT_PROVIDER_UNAVAILABLE',\n          'x402 provider: settlement failed with an unclassified error; outcome unknown',\n          { cause: err },\n        );\n      }\n      logger.warn(\n        { err: redactedErrorText(err), rejectionReason: 'transaction_reverted' },\n        'x402 settle(): settlement transaction reverted on chain',\n      );\n      return rejectedSettlement('transaction_reverted');\n    }\n\n    // verify() established the payer. The Solana scheme's settlement example\n    // names the fee payer there, while x402 v2 defines the payer's wallet.\n    const payer = verification.payer ?? sdkResult.payer;\n\n    if (!sdkResult.success) {\n      // \"Broadcast, never confirmed\" is not \"did not happen\": the transfer may\n      // be on-chain, so it throws as an unavailable provider carrying the hash,\n      // and the pipeline records the attempt `settlement-uncertain`, not\n      // `rejected`. The SDK's catch-all without a hash is treated the same way,\n      // because its throw may have followed a broadcast and viem reports an\n      // RPC error on the send as a revert.\n      if (isTransactionFailedReason(sdkResult.errorReason) && !reference(sdkResult.transaction)) {\n        // The appended message can carry an RPC URL\n        logger.warn(\n          { reportedReason: redactedErrorText(sdkResult.errorReason) },\n          'x402 settle(): the broadcast failed without a transaction hash; outcome unknown',\n        );\n        throw new CommerceError(\n          'PAYMENT_PROVIDER_UNAVAILABLE',\n          'x402 provider: settlement failed with an unclassified error; outcome unknown',\n        );\n      }\n      // These NEAR SDK checks fail before submission. Release the attempt so\n      // a retry using the same access-key nonce can reserve it again.\n      if (\n        offer.family === 'near' &&\n        NO_VERDICT_REASONS.has(sdkResult.errorReason ?? '') &&\n        !sdkResult.transaction\n      ) {\n        throw new CommerceError(\n          'PAYMENT_PROVIDER_UNAVAILABLE',\n          'x402 provider: the facilitator could not check the payment before submitting it',\n          {\n            details: {\n              settlementNotSubmitted: true,\n              reason: sanitizeReason(sdkResult.errorReason, 'facilitator_unavailable'),\n            },\n          },\n        );\n      }\n      // A broadcast the SDK could not confirm nor record for a retry comes\n      // back as its catch-all with the transaction, and a message starting\n      // `settlement_pending`\n      if (\n        sdkResult.errorReason === SETTLEMENT_PENDING_REASON ||\n        sdkResult.errorMessage?.startsWith(SETTLEMENT_PENDING_REASON) === true ||\n        UNKNOWN_OUTCOME_REASONS.has(sdkResult.errorReason ?? '') ||\n        NO_VERDICT_REASONS.has(sdkResult.errorReason ?? '') ||\n        scope.transportFailed()\n      ) {\n        throw new CommerceError(\n          'PAYMENT_PROVIDER_UNAVAILABLE',\n          'x402 provider: settlement was broadcast but could not be confirmed',\n          {\n            ...(sdkResult.transaction\n              ? { details: { transactionHash: sdkResult.transaction } }\n              : {}),\n          },\n        );\n      }\n      // Only the family's on-chain failure proves a named transaction moved\n      // nothing. Any other reason may follow a transfer that landed.\n      if (\n        sdkResult.transaction &&\n        sdkResult.errorReason !== ON_CHAIN_FAILURE_REASONS[offer.family]\n      ) {\n        logger.warn(\n          { reportedReason: redactedErrorText(sdkResult.errorReason ?? '') },\n          'x402 settle(): the facilitator reported a failure with a transaction; outcome unknown',\n        );\n        throw new CommerceError(\n          'PAYMENT_PROVIDER_UNAVAILABLE',\n          'x402 provider: the facilitator reported a failed settlement with a transaction; outcome unknown',\n          { details: { transactionHash: sdkResult.transaction } },\n        );\n      }\n      // A `settlement_failed` that reaches here carries its hash\n      if (offer.family === 'near' && !isNearVerdict(sdkResult.errorReason)) {\n        logger.warn(\n          { reportedReason: redactedErrorText(sdkResult.errorReason ?? '') },\n          'x402 settle(): NEAR facilitator failure reason is not a verdict; outcome unknown',\n        );\n        throw new CommerceError(\n          'PAYMENT_PROVIDER_UNAVAILABLE',\n          'x402 provider: settlement failed with an unclassified error; outcome unknown',\n        );\n      }\n      if (sdkResult.errorReason !== undefined) {\n        logger.debug(\n          { reportedReason: redactedErrorText(sdkResult.errorReason) },\n          'x402 settle(): facilitator failure reason',\n        );\n      }\n      return {\n        ...rejectedSettlement(sanitizeReason(sdkResult.errorReason, 'settlement_failed')),\n        network: sdkResult.network,\n        ...(payer !== undefined ? { payer } : {}),\n        // The failed transaction, which the facilitator paid for\n        ...(sdkResult.transaction ? { externalReference: sdkResult.transaction } : {}),\n      };\n    }\n\n    // A success names the offer's network and a transaction in its family's\n    // form; anything else unlocks nothing, and the outcome stays unknown\n    if (!reference(sdkResult.transaction) || sdkResult.network !== offer.network) {\n      logger.warn(\n        { network: sdkResult.network },\n        'x402 settle(): the facilitator reported a success it did not identify; outcome unknown',\n      );\n      throw new CommerceError(\n        'PAYMENT_PROVIDER_UNAVAILABLE',\n        'x402 provider: the facilitator reported a settlement without a valid transaction; outcome unknown',\n      );\n    }\n\n    return {\n      status: 'settled',\n      provider: 'x402',\n      externalReference: sdkResult.transaction,\n      ...(payer !== undefined ? { payer } : {}),\n      payee: requirements.payTo,\n      amount: verification.amount,\n      currency: verification.currency,\n      network: sdkResult.network,\n      ...(verification.asset !== undefined ? { asset: verification.asset } : {}),\n      ...(verification.replayKey !== undefined ? { replayKey: verification.replayKey } : {}),\n      settledAt: clock.nowIso(),\n      // `amount` is the display value; x402's settlement response reports base\n      // units. verify() matched an EVM authorization's value to the offer.\n      metadata: {\n        amountBaseUnits: transfer?.value ?? requirements.amount,\n        // The resource's own price, when it names a currency other than the token\n        ...(verification.currency !== requirement.currency\n          ? { quote: { amount: requirement.amount, currency: requirement.currency } }\n          : {}),\n      },\n    };\n  }\n\n  return settle;\n}\n","// Checks a proof against the offer it pays, then asks the facilitator for a verdict\nimport type { PaymentRequired, PaymentRequirements, VerifyResponse } from '@x402/core/types';\nimport { formatUnits, getAddress } from 'viem';\nimport type { PaymentResult, PaymentVerificationContext } from '../../../core';\nimport { CommerceError } from '../../../core';\nimport { redactedErrorText } from '../../../core/errors';\nimport { normalizeAddress, sameAddress } from '../addresses';\nimport { declaredX402Version, decodePaymentSubmission, forFacilitator } from '../payload';\nimport { X402_VERSION } from './constants';\nimport { offerCurrency } from './offers';\nimport { isProviderUnavailableError, NO_VERDICT_REASONS, sanitizeReason } from './reasons';\nimport { acceptedMatchesOffer, offerIndexOf } from './requirement';\nimport { readTransfer, type Transfer } from './transfer';\nimport type { ProviderContext } from './types';\n\n/** Builds the provider's `verify`, which never moves funds */\nexport function createVerify(\n  ctx: ProviderContext,\n): (context: PaymentVerificationContext) => Promise<PaymentResult> {\n  const { offersFor, clock, logger, svm, near } = ctx;\n\n  /**\n   * Checks a submission against the requirement this provider built, never\n   * against `payload.accepted`, the copy the client echoes back. That copy\n   * must itself match the offer, or the proof is refused.\n   *\n   * The `exact` scheme requires the authorized amount to match exactly,\n   * including when the buyer offers more. Local refusals use x402 error codes\n   * where available.\n   */\n  async function verify(context: PaymentVerificationContext): Promise<PaymentResult> {\n    const { requirement, submission } = context;\n\n    const rejected = (reason: string): PaymentResult => ({\n      status: 'rejected',\n      provider: 'x402',\n      amount: requirement.amount,\n      currency: requirement.currency,\n      ...(requirement.network !== undefined ? { network: requirement.network } : {}),\n      ...(requirement.asset !== undefined ? { asset: requirement.asset } : {}),\n      rejectionReason: reason,\n    });\n\n    if (requirement.provider !== 'x402' || requirement.challenge.provider !== 'x402') {\n      return rejected('wrong_provider');\n    }\n\n    // With several offers and none selected, the proof matched no single offer\n    const index = offerIndexOf(requirement);\n    if (index === undefined) {\n      return rejected('invalid_payment_requirements');\n    }\n    const offer = offersFor(requirement.resourceId)[index];\n    const requirements = requirement.challenge.accepts[index] as PaymentRequirements | undefined;\n    if (!offer || !requirements) {\n      return rejected('missing_payment_requirements');\n    }\n\n    // Defense in depth only: the pipeline builds a fresh requirement for every\n    // request, so this rarely fires. The real expiry is the authorization's\n    // own, which the facilitator checks.\n    if (\n      requirement.expiresAt !== undefined &&\n      Date.parse(requirement.expiresAt) < clock.now().getTime()\n    ) {\n      return rejected('requirement_expired');\n    }\n\n    // This provider built the requirement, so the asset always matches in\n    // normal operation. A corrupted one must still never authorize a transfer\n    // of a different asset.\n    if (!sameAddress(offer.profile, requirements.asset, offer.asset)) {\n      return rejected('wrong_asset');\n    }\n\n    const payload = decodePaymentSubmission(submission.payload);\n    if (!payload) {\n      const version = declaredX402Version(submission.payload);\n      return rejected(\n        typeof version === 'number' && version !== X402_VERSION\n          ? 'invalid_x402_version'\n          : 'invalid_payload',\n      );\n    }\n    if (payload.x402Version !== X402_VERSION) {\n      return rejected('invalid_x402_version');\n    }\n    // EVM: the authorization names payer, payee and amount. Solana: the\n    // facilitator reads the transaction, and the gateway takes its identity.\n    // NEAR: the delegate names the transfer, checked here against the offer.\n    let transfer: Transfer | undefined;\n    let replayKey: string;\n    let derivedPayer: string | undefined;\n    if (offer.family === 'svm') {\n      const identity = (await svm()).svmReplayKey(payload.payload, offer.network);\n      if (typeof identity === 'string') return rejected(identity);\n      replayKey = identity.replayKey;\n    } else if (offer.family === 'near') {\n      const inspected = (await near()).inspectNearPayload(payload.payload, {\n        network: offer.network,\n        asset: offer.asset,\n        payTo: offer.payTo,\n        amount: requirements.amount,\n      });\n      if (typeof inspected === 'string') return rejected(inspected);\n      replayKey = inspected.replayKey;\n      derivedPayer = inspected.payer;\n    } else {\n      const read = readTransfer(payload, offer);\n      if (typeof read === 'string') return rejected(read);\n      transfer = read;\n      replayKey = read.replayKey;\n      derivedPayer = read.from;\n    }\n    // Reject a different network before calling the facilitator. NEAR's\n    // delegate signature itself does not bind the chain.\n    if (payload.accepted.network !== offer.network) {\n      return rejected('invalid_network');\n    }\n    // The signature omits flow and resource. Check the echoed offer;\n    // `resource` is optional, but must match when present.\n    const offeredUrl = (requirement.challenge.envelope as PaymentRequired | undefined)?.resource\n      ?.url;\n    if (\n      !acceptedMatchesOffer(requirements, payload.accepted, offer.profile) ||\n      (payload.resource !== undefined && payload.resource.url !== offeredUrl)\n    ) {\n      return rejected('invalid_payment_requirements');\n    }\n    let required: bigint;\n    try {\n      required = BigInt(requirements.amount);\n    } catch {\n      return rejected('invalid_payload');\n    }\n    if (transfer) {\n      if (transfer.to !== getAddress(offer.payTo)) {\n        return rejected(transfer.recipientMismatch);\n      }\n      let authorizedValue: bigint;\n      try {\n        authorizedValue = BigInt(transfer.value);\n      } catch {\n        return rejected('invalid_payload');\n      }\n      if (authorizedValue !== required) {\n        return rejected(transfer.amountMismatch);\n      }\n    }\n\n    const scope = offer.binding.open();\n    let sdkResult: VerifyResponse;\n    try {\n      sdkResult = await scope.verify(forFacilitator(payload), requirements);\n    } catch (err) {\n      // A throw means no verdict was obtained, so it is never held against the\n      // buyer. Only an unclassified one is logged, as it may be an SDK fault.\n      if (!isProviderUnavailableError(err) && !scope.transportFailed()) {\n        logger.warn({ err: redactedErrorText(err) }, 'x402 verify(): unexpected SDK error');\n      }\n      throw new CommerceError(\n        'PAYMENT_PROVIDER_UNAVAILABLE',\n        `x402 provider: ${offer.binding.kind} facilitator returned no verdict during verify()`,\n        { cause: err },\n      );\n    }\n\n    if (!sdkResult.isValid) {\n      // An RPC that never answered is not a payment that failed a check\n      if (scope.transportFailed() || NO_VERDICT_REASONS.has(sdkResult.invalidReason ?? '')) {\n        if (sdkResult.invalidReason !== undefined) {\n          logger.debug(\n            { reportedReason: redactedErrorText(sdkResult.invalidReason) },\n            'x402 verify(): local facilitator transport failure reason',\n          );\n        }\n        throw new CommerceError(\n          'PAYMENT_PROVIDER_UNAVAILABLE',\n          `x402 provider: ${offer.binding.kind} facilitator unreachable during verify()`,\n        );\n      }\n      // The raw reason is logged at debug level. Only what the buyer sees and\n      // the ledger records is constrained.\n      if (sdkResult.invalidReason !== undefined) {\n        logger.debug(\n          { reportedReason: redactedErrorText(sdkResult.invalidReason) },\n          'x402 verify(): facilitator rejection reason',\n        );\n      }\n      return rejected(sanitizeReason(sdkResult.invalidReason, 'invalid_payment'));\n    }\n\n    // The Solana payer is the facilitator's reading of the transaction\n    const payer =\n      derivedPayer ??\n      (sdkResult.payer !== undefined && normalizeAddress(offer.profile, sdkResult.payer)\n        ? sdkResult.payer\n        : undefined);\n    return {\n      status: 'verified',\n      provider: 'x402',\n      ...(payer !== undefined ? { payer } : {}),\n      payee: transfer?.to ?? offer.payTo,\n      amount: formatUnits(required, offer.assetDecimals),\n      currency: offerCurrency(offer, requirement.currency),\n      network: payload.accepted.network,\n      asset: offer.family === 'evm' ? getAddress(requirements.asset) : offer.asset,\n      replayKey,\n    };\n  }\n\n  return verify;\n}\n","/**\n * x402 payment provider: protocol v2, `exact` scheme. On EVM the buyer signs an\n * EIP-3009 `transferWithAuthorization` or a Permit2 transfer through the x402\n * exact proxy; on Solana, a token transfer whose fee the facilitator pays; on\n * NEAR, a delegated NEP-141 `ft_transfer` that the facilitator's relayer\n * submits.\n *\n * `verify()` never moves funds. `settle()` does, and throws unless it is handed\n * a successful verification. Both run through a facilitator (see\n * `../facilitator.ts`): the SDK's own `x402Facilitator` in this process, or a\n * remote HTTP facilitator.\n */\nimport type { AdapterDescriptor } from '../../../core';\nimport { CommerceError, NOOP_LOGGER, systemClock } from '../../../core';\nimport { PACKAGE_VERSION } from '../../../version';\nimport { DEFAULT_IDS, DEFAULT_MAX_TIMEOUT_SECONDS, X402_VERSION } from './constants';\nimport { createSvmFeePayerSource } from './fee-payer';\nimport { createHealthCheck } from './health';\nimport { resolveOffers } from './offers';\nimport { createQuoteIssuer, QUOTE_EXTENSION, QUOTE_REQUEST_SCHEME } from './quote';\nimport { createRequirementBuilders } from './requirement';\nimport { createSettle } from './settle';\nimport type {\n  EvmOffer,\n  ProviderContext,\n  X402MultiOfferProviderOptions,\n  X402OfferOptions,\n  X402PaymentProvider,\n  X402ProviderOptions,\n} from './types';\nimport { createVerify } from './verify';\n\nexport { DEFAULT_IDS } from './constants';\nexport type {\n  X402MultiOfferProviderOptions,\n  X402OfferOptions,\n  X402PaymentProvider,\n  X402ProviderOptions,\n} from './types';\n\nexport function createX402PaymentProvider(\n  options: X402ProviderOptions | X402MultiOfferProviderOptions,\n): X402PaymentProvider {\n  const inputs: readonly X402OfferOptions[] = 'offers' in options ? options.offers : [options];\n  if (inputs.length === 0) {\n    throw new CommerceError('CONFIG_INVALID', 'x402 provider: \"offers\" is empty');\n  }\n  // The NEAR facilitator refuses every payment under any other value\n  if (\n    options.maxTimeoutSeconds !== undefined &&\n    (!Number.isInteger(options.maxTimeoutSeconds) || options.maxTimeoutSeconds <= 0)\n  ) {\n    throw new CommerceError(\n      'CONFIG_INVALID',\n      `x402 provider: maxTimeoutSeconds must be a positive integer (got ${options.maxTimeoutSeconds})`,\n    );\n  }\n  const {\n    offers: defaultOffers,\n    resourceOffers,\n    pool: offers,\n    deploymentMode,\n    remoteBinding,\n  } = resolveOffers(inputs, options);\n  const offersFor = (resourceId: string) => resourceOffers.get(resourceId) ?? defaultOffers;\n  const severalOffers = [defaultOffers, ...resourceOffers.values()].some((list) => list.length > 1);\n\n  const clock = options.clock ?? systemClock;\n  const ids = options.ids ?? DEFAULT_IDS;\n  const logger = options.logger ?? NOOP_LOGGER;\n  const maxTimeoutSeconds = options.maxTimeoutSeconds ?? DEFAULT_MAX_TIMEOUT_SECONDS;\n\n  const quotes = options.quote\n    ? createQuoteIssuer({\n        signerPrivateKey: options.quote.signerPrivateKey,\n        offers,\n        deploymentMode,\n        clock,\n        maxTimeoutSeconds,\n      })\n    : undefined;\n\n  const evmOffers = offers.filter((offer): offer is EvmOffer => offer.family === 'evm');\n  const hasSvm = offers.some((offer) => offer.family === 'svm');\n  const hasNear = offers.some((offer) => offer.family === 'near');\n  const descriptor: AdapterDescriptor = {\n    name: 'x402',\n    kind: 'payment',\n    implementationVersion: PACKAGE_VERSION,\n    supportedSpec: `x402/v${X402_VERSION} scheme=exact family=${[\n      ...(evmOffers.length > 0 ? ['eip155'] : []),\n      ...(hasSvm ? ['solana'] : []),\n      ...(hasNear ? ['near'] : []),\n    ].join(',')}`,\n    capabilities: [\n      ...(evmOffers.length > 0 ? ['exact-evm'] : []),\n      ...(hasSvm ? ['exact-svm'] : []),\n      ...(hasNear ? ['exact-near'] : []),\n      `${options.facilitator.mode}-facilitator`,\n      ...(evmOffers.some((offer) => offer.method === 'eip3009') ? ['eip-3009'] : []),\n      ...(evmOffers.some((offer) => offer.method === 'permit2') ? ['permit2'] : []),\n      'caip-2',\n      `mode=${deploymentMode}`,\n      'authorization-flow',\n      'upfront-flow',\n      ...(severalOffers ? ['multiple-offers'] : []),\n      ...(quotes ? ['erc-8409-quotes'] : []),\n    ],\n    status: 'stable',\n    unsupported: [\n      'permit2 gas sponsoring extensions',\n      'upto scheme',\n      'batch-settlement scheme',\n      'auth-capture scheme',\n    ],\n  };\n\n  // Loaded only with an offer of their family, so no deployment needs the\n  // peers of a family it does not offer\n  const svmModule = hasSvm\n    ? loadOptionalModule(() => import('../svm'), 'Solana offers need @x402/svm and @solana/kit')\n    : undefined;\n  const nearModule = hasNear\n    ? loadOptionalModule(() => import('../near'), 'NEAR offers need @x402/near')\n    : undefined;\n  const svm = async () => {\n    if (!svmModule)\n      throw new CommerceError('INTERNAL_ERROR', 'x402 provider: no Solana offer is configured');\n    return svmModule;\n  };\n  const near = async () => {\n    if (!nearModule)\n      throw new CommerceError('INTERNAL_ERROR', 'x402 provider: no NEAR offer is configured');\n    return nearModule;\n  };\n\n  const ctx: ProviderContext = {\n    options,\n    offers,\n    offersFor,\n    deploymentMode,\n    remoteBinding,\n    clock,\n    ids,\n    logger,\n    maxTimeoutSeconds,\n    quotes,\n    svm,\n    near,\n  };\n  const { createRequirement, selectRequirement } = createRequirementBuilders(\n    ctx,\n    createSvmFeePayerSource(ctx),\n  );\n  const verify = createVerify(ctx);\n  const settle = createSettle(ctx);\n  const health = createHealthCheck(ctx);\n\n  return {\n    name: 'x402',\n    descriptor,\n    createRequirement,\n    // A single offer needs no selection\n    ...(severalOffers ? { selectRequirement } : {}),\n    verify,\n    settle,\n    health,\n    ...(quotes\n      ? {\n          quote: {\n            issuer: quotes.issuer,\n            requestScheme: QUOTE_REQUEST_SCHEME,\n            extension: QUOTE_EXTENSION,\n          },\n        }\n      : {}),\n  };\n}\n\n/**\n * Loads a family's inspection module, refusing with a clear error when its\n * optional peers are missing\n */\nfunction loadOptionalModule<T>(load: () => Promise<T>, missing: string): Promise<T> {\n  const loading = load().catch((cause: unknown) => {\n    throw new CommerceError('PAYMENT_PROVIDER_UNAVAILABLE', `x402 provider: ${missing}`, {\n      cause,\n    });\n  });\n  // verify() and health() report the failure; nothing else awaits it\n  loading.catch(() => {});\n  return loading;\n}\n"]}

package/dist/chunk-DTKU3Z2M.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/core/domain/common.ts","../src/core/domain/event.ts","../src/core/domain/resource.ts","../src/core/errors/codes.ts","../src/core/errors/commerce-error.ts","../src/core/domain/wire.ts","../src/core/interfaces/logger.ts","../src/core/interfaces/protocol-adapter.ts","../src/core/interfaces/runtime.ts","../src/version.ts"],"names":[],"mappings":";;;;AAaA,IAAM,kBAAA,GAAiD;AAAA,EACrD,IAAA,EAAM,IAAA;AAAA,EACN,GAAA,EAAK,IAAA;AAAA,EACL,GAAA,EAAK,IAAA;AAAA,EACL,GAAA,EAAK;AACP,CAAA;AAMO,IAAM,iBAA0C,MAAA,CAAO,IAAA;AAAA,EAC5D;AACF;AAaA,IAAM,wBAAA,GAA4D,EAAE,IAAA,EAAM,IAAA,EAAM,KAAK,IAAA,EAAK;AAGnF,IAAM,uBAAqD,MAAA,CAAO,IAAA;AAAA,EACvE;AACF;;;ACrCO,IAAM,oBAAA,GAAuB;AAAA,EAClC,qBAAA;AAAA,EACA,oBAAA;AAAA,EACA,kBAAA;AAAA,EACA,kBAAA;AAAA,EACA,kBAAA;AAAA,EACA,iBAAA;AAAA;AAAA;AAAA,EAGA,wBAAA;AAAA,EACA,wBAAA;AAAA,EACA,gBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;;;ACwBO,IAAM,0BAAA,GAA6B;;;ACxCnC,IAAM,oBAAA,GAAuB;AAAA,EAClC,gBAAA;AAAA,EACA,oBAAA;AAAA,EACA,eAAA;AAAA,EACA,kBAAA;AAAA,EACA,iBAAA;AAAA,EACA,kBAAA;AAAA,EACA,8BAAA;AAAA,EACA,2BAAA;AAAA,EACA,wBAAA;AAAA,EACA,uBAAA;AAAA,EACA,wBAAA;AAAA,EACA,oCAAA;AAAA,EACA,iBAAA;AAAA,EACA,eAAA;AAAA,EACA,sBAAA;AAAA,EACA,cAAA;AAAA,EACA,eAAA;AAAA,EACA;AACF;AAQO,IAAM,0BAAA,GAA0E;AAAA,EACrF,cAAA,EAAgB,GAAA;AAAA,EAChB,kBAAA,EAAoB,GAAA;AAAA,EACpB,aAAA,EAAe,GAAA;AAAA,EACf,gBAAA,EAAkB,GAAA;AAAA,EAClB,eAAA,EAAiB,GAAA;AAAA,EACjB,gBAAA,EAAkB,GAAA;AAAA,EAClB,4BAAA,EAA8B,GAAA;AAAA,EAC9B,yBAAA,EAA2B,GAAA;AAAA;AAAA;AAAA;AAAA,EAI3B,sBAAA,EAAwB,GAAA;AAAA,EACxB,qBAAA,EAAuB,GAAA;AAAA,EACvB,sBAAA,EAAwB,GAAA;AAAA,EACxB,kCAAA,EAAoC,GAAA;AAAA,EACpC,eAAA,EAAiB,GAAA;AAAA,EACjB,aAAA,EAAe,GAAA;AAAA,EACf,oBAAA,EAAsB,GAAA;AAAA,EACtB,YAAA,EAAc,GAAA;AAAA,EACd,aAAA,EAAe,GAAA;AAAA,EACf,cAAA,EAAgB;AAClB;AAGO,IAAM,qBAAA,uBAA4D,GAAA,CAAI;AAAA,EAC3E,8BAAA;AAAA;AAAA;AAAA,EAGA,oCAAA;AAAA,EACA,iBAAA;AAAA;AAAA;AAAA;AAAA,EAIA;AACF,CAAC;;;AC3CM,IAAM,aAAA,GAAN,MAAM,cAAA,SAAsB,KAAA,CAAM;AAAA,EAC9B,IAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EAET,WAAA,CAAY,IAAA,EAAyB,OAAA,EAAiB,OAAA,GAAgC,EAAC,EAAG;AACxF,IAAA,KAAA,CAAM,OAAA,EAAS,QAAQ,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,OAAA,CAAQ,KAAA,EAAM,GAAI,MAAS,CAAA;AACjF,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,OAAA,CAAQ,UAAA,IAAc,0BAAA,CAA2B,IAAI,CAAA;AACvE,IAAA,IAAA,CAAK,SAAA,GAAY,qBAAA,CAAsB,GAAA,CAAI,IAAI,CAAA;AAC/C,IAAA,IAAI,OAAA,CAAQ,OAAA,KAAY,MAAA,EAAW,IAAA,CAAK,UAAU,OAAA,CAAQ,OAAA;AAC1D,IAAA,IAAI,OAAA,CAAQ,SAAA,KAAc,MAAA,EAAW,IAAA,CAAK,YAAY,OAAA,CAAQ,SAAA;AAC9D,IAAA,IAAI,OAAA,CAAQ,UAAA,KAAe,MAAA,EAAW,IAAA,CAAK,aAAa,OAAA,CAAQ,UAAA;AAChE,IAAA,KAAA,CAAM,iBAAA,GAAoB,MAAM,cAAa,CAAA;AAAA,EAC/C;AAAA;AAAA,EAGA,MAAA,GAA4B;AAC1B,IAAA,OAAO;AAAA,MACL,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,GAAI,KAAK,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,IAAA,CAAK,SAAA,EAAU,GAAI,EAAC;AAAA,MACpE,GAAI,KAAK,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,EAAY,IAAA,CAAK,UAAA,EAAW,GAAI,EAAC;AAAA,MACvE,GAAI,KAAK,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,IAAA,CAAK,OAAA,EAAQ,GAAI;AAAC,KAChE;AAAA,EACF;AACF;AAEO,SAAS,gBAAgB,KAAA,EAAwC;AACtE,EAAA,OAAO,KAAA,YAAiB,aAAA;AAC1B;AAWO,SAAS,eAAA,CACd,KAAA,EACA,YAAA,GAAkC,gBAAA,EAClC,kBAAkB,2BAAA,EACH;AACf,EAAA,IAAI,eAAA,CAAgB,KAAK,CAAA,EAAG,OAAO,KAAA;AACnC,EAAA,OAAO,IAAI,aAAA,CAAc,YAAA,EAAc,iBAAiB,EAAE,KAAA,EAAO,OAAO,CAAA;AAC1E;AAGO,SAAS,cAAc,KAAA,EAAoD;AAChF,EAAA,IAAI,KAAA,YAAiB,OAAO,OAAO,EAAE,SAAS,KAAA,CAAM,OAAA,EAAS,IAAA,EAAM,KAAA,CAAM,IAAA,EAAK;AAC9E,EAAA,OAAO,EAAE,OAAA,EAAS,MAAA,CAAO,KAAK,CAAA,EAAE;AAClC;AAOO,SAAS,kBAAkB,KAAA,EAAwB;AACxD,EAAA,MAAM,IAAA,GAAO,KAAA,YAAiB,KAAA,GAAQ,CAAA,EAAG,KAAA,CAAM,IAAI,CAAA,EAAA,EAAK,KAAA,CAAM,OAAO,CAAA,CAAA,GAAK,MAAA,CAAO,KAAK,CAAA;AACtF,EAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,qCAAA,EAAuC,CAAC,KAAA,KAAU;AACpE,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,KAAK,CAAA;AACzB,MAAA,OAAO,CAAA,EAAG,GAAA,CAAI,QAAQ,CAAA,EAAA,EAAK,IAAI,IAAI,CAAA,CAAA;AAAA,IACrC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,mBAAA;AAAA,IACT;AAAA,EACF,CAAC,CAAA;AACH;AAGA,IAAM,iBAAA,GAAoB,CAAA;AAMnB,SAAS,UACd,KAAA,EAC4D;AAC5D,EAAA,MAAM,KAAA,GAAQ,gBAAgB,KAAK,CAAA;AACnC,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,IAAI,UAAU,KAAA,CAAM,KAAA;AACpB,EAAA,OAAO,OAAA,KAAY,MAAA,IAAa,KAAA,CAAM,MAAA,GAAS,iBAAA,EAAmB;AAChE,IAAA,KAAA,CAAM,IAAA,CAAK,iBAAA,CAAkB,OAAO,CAAC,CAAA;AACrC,IAAA,OAAA,GAAU,OAAA,YAAmB,KAAA,GAAQ,OAAA,CAAQ,KAAA,GAAQ,MAAA;AAAA,EACvD;AACA,EAAA,OAAO,KAAA,CAAM,MAAA,GAAS,CAAA,GAAI,EAAE,GAAG,KAAA,CAAM,MAAA,EAAO,EAAG,KAAA,EAAM,GAAI,KAAA,CAAM,MAAA,EAAO;AACxE;;;ACrGO,IAAM,mBAAA,GAAsB;AAU5B,IAAM,cAAA,GAAiB;AAGvB,IAAM,uBAAA,GAA0B;AAUhC,IAAM,yBAAA,GAA4B;AAOlC,IAAM,qBAAA,GAA2C;AAAA,EACtD,mBAAA;AAAA,EACA;AACF;AAUO,IAAM,oBAAA,GAAuB;AAS7B,IAAM,8BAAA,GAAiC;AASvC,IAAM,uBAAA,GAA0B;AAWhC,IAAM,yBAAA,GAA4B;AA4ElC,SAAS,kBAAkB,OAAA,EAA4C;AAC5E,EAAA,MAAM,IAAI,OAAA,CAAQ,OAAA;AAClB,EAAA,OAAO;AAAA,IACL,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,SAAA,EAAW,QAAQ,OAAA,CAAQ,EAAA;AAAA,IAC3B,WAAA,EAAa,QAAQ,OAAA,CAAQ,WAAA;AAAA,IAC7B,GAAI,MAAM,MAAA,GACN;AAAA,MACE,OAAA,EAAS;AAAA,QACP,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,QAAQ,CAAA,CAAE,MAAA;AAAA,QACV,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,GAAI,EAAE,iBAAA,KAAsB,MAAA,GACxB,EAAE,iBAAA,EAAmB,CAAA,CAAE,iBAAA,EAAkB,GACzC,EAAC;AAAA,QACL,GAAI,EAAE,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,GAAI;AAAC;AAC1D,QAEF;AAAC,GACP;AACF;AAEO,SAAS,0BACd,OAAA,EACyB;AACzB,EAAA,MAAM,IAAI,OAAA,CAAQ,WAAA;AAClB,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,kBAAA;AAAA,IACR,IAAA,EAAM,kBAAA;AAAA,IACN,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,OAAA,EAAS,CAAA,WAAA,EAAc,CAAA,CAAE,MAAM,CAAA,CAAA,EAAI,CAAA,CAAE,QAAQ,CAAA,2BAAA,EAA8B,OAAA,CAAQ,UAAU,CAAA,gBAAA,EAAmB,CAAA,CAAE,QAAQ,CAAA,eAAA,CAAA;AAAA,IAC1H,OAAA,EAAS;AAAA,MACP,UAAU,CAAA,CAAE,QAAA;AAAA,MACZ,OAAA,EAAS,EAAE,SAAA,CAAU,OAAA;AAAA,MACrB,QAAQ,CAAA,CAAE,MAAA;AAAA,MACV,UAAU,CAAA,CAAE,QAAA;AAAA,MACZ,GAAI,EAAE,WAAA,KAAgB,MAAA,GAAY,EAAE,WAAA,EAAa,CAAA,CAAE,WAAA,EAAY,GAAI,EAAC;AAAA,MACpE,GAAI,EAAE,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,GAAI,EAAC;AAAA,MACxD,GAAI,EAAE,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,GAAI,EAAC;AAAA,MAClD,GAAI,EAAE,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,CAAA,CAAE,SAAA,EAAU,GAAI,EAAC;AAAA,MAC9D,OAAA,EAAS,EAAE,SAAA,CAAU,OAAA;AAAA,MACrB,GAAI,CAAA,CAAE,SAAA,CAAU,QAAA,KAAa,MAAA,GAAY,EAAE,QAAA,EAAU,CAAA,CAAE,SAAA,CAAU,QAAA,EAAS,GAAI;AAAC,KACjF;AAAA,IACA,GAAI,OAAA,CAAQ,aAAA,KAAkB,MAAA,IAAa,OAAA,CAAQ,cAAc,MAAA,GAAS,CAAA,GACtE,EAAE,aAAA,EAAe,EAAE,QAAA,EAAU,OAAA,CAAQ,aAAA,EAAc,KACnD;AAAC,GACP;AACF;AAEO,SAAS,gBAAgB,KAAA,EAAqC;AACnE,EAAA,MAAM,IAAA,GAAO,MAAM,MAAA,EAAO;AAC1B,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,OAAA;AAAA,IACR,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,SAAS,IAAA,CAAK,OAAA;AAAA,IACd,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,GAAI,KAAK,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,IAAA,CAAK,SAAA,EAAU,GAAI,EAAC;AAAA,IACpE,GAAI,KAAK,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,EAAY,IAAA,CAAK,UAAA,EAAW,GAAI,EAAC;AAAA,IACvE,GAAI,KAAK,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,EAAS,IAAA,CAAK,OAAA,EAAQ,GAAI;AAAC,GAChE;AACF;AAEO,SAAS,0BAA0B,KAAA,EAAkD;AAC1F,EAAA,OACE,OAAO,KAAA,KAAU,QAAA,IACjB,KAAA,KAAU,IAAA,IACT,MAAkC,MAAA,KAAW,kBAAA,IAC9C,OAAQ,KAAA,CAAkC,OAAA,KAAY,QAAA;AAE1D;AAWO,SAAS,4BAAA,CACd,OACA,SAAA,EACqC;AACrC,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM,OAAO,MAAA;AAElD,EAAA,MAAM,IAAA,GAAO,CAAC,MAAA,KAA0B;AACtC,IAAA,MAAM,IAAI,aAAA,CAAc,uBAAA,EAAyB,CAAA,yBAAA,EAA4B,MAAM,CAAA,CAAA,EAAI;AAAA,MACrF,GAAI,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,KAAc;AAAC,KAChD,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,IAAI,CAAC,QAAA,CAAS,KAAK,CAAA,EAAG;AACpB,IAAA,OAAO,IAAA,CAAK,CAAA,oDAAA,EAAuD,OAAO,KAAK,CAAA,CAAE,CAAA;AAAA,EACnF;AACA,EAAA,MAAM,MAAA,GAAS,MAAM,QAAQ,CAAA;AAC7B,EAAA,MAAM,OAAA,GAAU,MAAM,SAAS,CAAA;AAK/B,EAAA,IAAI,WAAW,KAAA,EAAO;AACpB,IAAA,IAAA,CAAK,CAAA,mBAAA,EAAsB,OAAO,MAAA,KAAW,QAAA,GAAW,IAAI,MAAM,CAAA,CAAA,CAAA,GAAM,OAAO,MAAM,CAAA,CAAE,CAAA;AAAA,EACzF;AACA,EAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,OAAA,CAAQ,WAAW,CAAA,EAAG;AACvD,IAAA,IAAA,CAAK,sCAAsC,CAAA;AAAA,EAC7C;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,OAAA,EAA2B;AACrD;AAOO,SAAS,wBAAA,CACd,KACA,SAAA,EACqC;AACrC,EAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,CAAQ,GAAG,CAAA,GAAI,GAAA,CAAI,CAAC,CAAA,GAAK,GAAA;AAC7C,EAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,CAAM,MAAA,KAAW,GAAG,OAAO,MAAA;AAEtD,EAAA,MAAM,IAAA,GAAO,CAAC,MAAA,KAA0B;AACtC,IAAA,MAAM,IAAI,aAAA,CAAc,uBAAA,EAAyB,CAAA,yBAAA,EAA4B,MAAM,CAAA,CAAA,EAAI;AAAA,MACrF,GAAI,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,KAAc;AAAC,KAChD,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,IAAI,MAAA,CAAO,UAAA,CAAW,KAAA,EAAO,MAAM,IAAI,8BAAA,EAAgC;AACrE,IAAA,IAAA,CAAK,CAAA,mBAAA,EAAsB,8BAA8B,CAAA,WAAA,CAAa,CAAA;AAAA,EACxE;AAEA,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,IAAA,CAAK,MAAM,MAAA,CAAO,IAAA,CAAK,OAAO,WAAW,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAA;AAAA,EACvE,CAAA,CAAA,MAAQ;AAGN,IAAA,IAAA,CAAK,sCAAsC,CAAA;AAAA,EAC7C;AACA,EAAA,OAAO,4BAAA,CAA6B,SAAS,SAAS,CAAA;AACxD;AAaO,SAAS,0BAAA,CACd,QAAA,EACA,QAAA,EACA,SAAA,EAKA;AACA,EAAA,MAAM;AAAA,IACJ,CAAC,mBAAmB,GAAG,YAAA;AAAA,IACvB,CAAC,yBAAyB,GAAG,kBAAA;AAAA,IAC7B,GAAG;AAAA,GACL,GAAI,QAAA;AAEJ,EAAA,MAAM,MAAA,GAAS,QAAA,EAAU,cAAA,CAAe,CAAC,CAAA;AACzC,EAAA,MAAM,OAAA,GACJ,OAAO,YAAA,KAAiB,QAAA,IAAY,YAAA,CAAa,MAAA,GAAS,CAAA,IAAK,MAAA,KAAW,MAAA,GACrE,EAAE,MAAA,EAAQ,OAAA,EAAS,cAAa,GACjC,MAAA;AACN,EAAA,MAAM,aAAA,GAAgB,4BAAA,CAA6B,kBAAA,EAAoB,SAAS,CAAA;AAEhF,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,GAAI,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,KAAY,EAAC;AAAA,IAC3C,GAAI,aAAA,KAAkB,MAAA,GAAY,EAAE,aAAA,KAAkB;AAAC,GACzD;AACF;;;AChVO,IAAM,WAAA,GAAsB;AAAA,EACjC,OAAO,MAAM;AAAA,EAAC,CAAA;AAAA,EACd,MAAM,MAAM;AAAA,EAAC,CAAA;AAAA,EACb,MAAM,MAAM;AAAA,EAAC,CAAA;AAAA,EACb,OAAO,MAAM;AAAA,EAAC,CAAA;AAAA,EACd,OAAO,MAAM;AACf;;;AC0DO,SAAS,sBAAsB,OAAA,EAA0D;AAC9F,EAAA,OAAO,OAAQ,QAAgC,UAAA,KAAe,UAAA;AAChE;;;ACnEO,IAAM,WAAA,GAAqB;AAAA,EAChC,GAAA,EAAK,sBAAM,IAAI,IAAA,EAAK;AAAA,EACpB,MAAA,EAAQ,MAAA,iBAAM,IAAI,IAAA,IAAO,WAAA,EAAY;AAAA,EACrC,WAAA,EAAa,MAAM,WAAA,CAAY,GAAA;AACjC;ACGO,IAAM,eAAA,GACmC,OAAA","file":"chunk-DTKU3Z2M.js","sourcesContent":["// Shared primitive aliases for the canonical domain model. FROZEN CONTRACT\n\n/**\n * A JSON Schema document (in practice a draft 2020-12 subset). Deliberately\n * loose: adapters translate it to their own schema representation. Never treat\n * it as trusted input without validation.\n */\nexport type JsonSchema = Record<string, unknown>;\n\n/** Protocol surfaces a resource can be exposed through */\nexport type ProtocolName = 'http' | 'mcp' | 'a2a' | 'acp';\n\n// A Record over the union fails to compile when a name is missing or extra\nconst PROTOCOL_NAME_KEYS: Record<ProtocolName, true> = {\n  http: true,\n  mcp: true,\n  a2a: true,\n  acp: true,\n};\n\n/**\n * The same names as a value, for code that checks one at runtime: config\n * validation and the OpenAPI importer's `--expose`\n */\nexport const PROTOCOL_NAMES: readonly ProtocolName[] = Object.keys(\n  PROTOCOL_NAME_KEYS,\n) as ProtocolName[];\n\n/**\n * Payment rails a resource can accept.\n *\n * A resource's list is an ordered candidate list, not a buyer-selected menu.\n * The pipeline uses the first method with an enabled provider, and a\n * rejection ends the request instead of trying another rail. Config requires at\n * least one named rail to be enabled and permits others that are not.\n */\nexport type PaymentMethodName = 'x402' | 'mpp';\n\n// Checked for completeness the same way as PROTOCOL_NAME_KEYS\nconst PAYMENT_METHOD_NAME_KEYS: Record<PaymentMethodName, true> = { x402: true, mpp: true };\n\n/** The same names as a value, for config validation */\nexport const PAYMENT_METHOD_NAMES: readonly PaymentMethodName[] = Object.keys(\n  PAYMENT_METHOD_NAME_KEYS,\n) as PaymentMethodName[];\n\n/**\n * Authorization methods a resource can require. Neither a transport nor a\n * payment rail: it proves the purchase was approved, and sits beside the\n * payment rather than replacing it.\n */\nexport type AuthorizationMethodName = 'ap2';\n\n/** ISO-8601 timestamp string, always UTC with millisecond precision */\nexport type IsoTimestamp = string;\n\n/**\n * A decimal amount as a string in the currency's display unit (for example\n * \"0.01\" USDC), never a float and never base units. Payment providers convert\n * it to on-chain base units.\n */\nexport type DecimalAmount = string;\n\n/** Health of an individual adapter or subsystem */\nexport interface AdapterHealth {\n  readonly status: 'pass' | 'warn' | 'fail';\n  readonly detail?: string;\n  readonly checkedAt: IsoTimestamp;\n  readonly durationMs?: number;\n  /**\n   * Results per checked part, such as each x402 offer. Names and statuses\n   * may be published; exclude diagnostic detail.\n   */\n  readonly components?: readonly AdapterHealthComponent[];\n}\n\n/** One part of an {@link AdapterHealth} result */\nexport interface AdapterHealthComponent {\n  readonly name: string;\n  readonly status: 'pass' | 'warn' | 'fail';\n}\n\n/** Describes an adapter's supported surface for diagnostics */\nexport interface AdapterDescriptor {\n  readonly name: string;\n  readonly kind: 'protocol' | 'payment' | 'storage' | 'authorization';\n  /** Version of this adapter implementation, independent of the spec */\n  readonly implementationVersion: string;\n  /** Exact pinned specification revision this adapter targets */\n  readonly supportedSpec: string;\n  readonly capabilities: readonly string[];\n  readonly status: 'stable' | 'experimental' | 'planned';\n  /** Capabilities explicitly not implemented, printed by `doctor` */\n  readonly unsupported?: readonly string[];\n}\n","/**\n * Canonical commerce events. FROZEN CONTRACT. Every event in one flow shares\n * one `requestId`, which correlates logs, payment attempts, backend calls and\n * receipts.\n */\nimport type { IsoTimestamp } from './common';\n\nexport const COMMERCE_EVENT_TYPES = [\n  'resource.discovered',\n  'resource.requested',\n  'payment.required',\n  'payment.rejected',\n  'payment.verified',\n  'payment.settled',\n  // The same two types for every authorization method, so an audit-trail\n  // reader never has to know what AP2 is\n  'authorization.verified',\n  'authorization.rejected',\n  'backend.called',\n  'backend.failed',\n  'resource.delivered',\n] as const;\n\nexport type CommerceEventType = (typeof COMMERCE_EVENT_TYPES)[number];\n\nexport interface CommerceEvent {\n  readonly id: string;\n  readonly type: CommerceEventType;\n  readonly requestId: string;\n  readonly resourceId?: string;\n  readonly at: IsoTimestamp;\n  /** Protocol adapter that originated the request, e.g. 'mcp' or 'http' */\n  readonly adapter?: string;\n  readonly paymentProvider?: string;\n  readonly durationMs?: number;\n  readonly status?: 'ok' | 'error';\n  /** Non-secret, structured detail. Must never contain keys, headers or proofs */\n  readonly data?: Readonly<Record<string, unknown>>;\n}\n\n/**\n * Sink for canonical events. `emit` must not throw: a sink failure must never\n * fail an otherwise successful commerce flow.\n */\nexport interface EventSink {\n  emit(event: CommerceEvent): Promise<void>;\n}\n","// Canonical resource model. FROZEN CONTRACT\nimport type {\n  AuthorizationMethodName,\n  DecimalAmount,\n  JsonSchema,\n  PaymentMethodName,\n  ProtocolName,\n} from './common';\n\n/** HTTP methods a backend handler may use */\nexport type BackendMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\n\n/**\n * How the gateway calls the merchant's existing backend.\n *\n * Backend URLs come from operator configuration only, never from users or\n * agents (docs/security.md, SSRF). Secret header values belong in `${ENV_VAR}`\n * placeholders resolved by the config loader, not in plaintext configuration.\n */\nexport interface BackendHandler {\n  readonly type: 'http';\n  readonly method: BackendMethod;\n  readonly url: string;\n  readonly headers?: Readonly<Record<string, string>>;\n  /** Hard upper bound on the backend call. Defaults to `DEFAULT_BACKEND_TIMEOUT_MS` */\n  readonly timeoutMs?: number;\n  /**\n   * Names the top-level input properties carrying each part of the request.\n   *\n   * When absent, `{param}` values come from top-level input and everything left\n   * over becomes the query string (GET/DELETE) or the whole JSON body\n   * (POST/PUT/PATCH). That cannot express an operation with path, query and\n   * body at once, such as `POST /users/{userId}/orders?notify=true`.\n   *\n   * When present, each group comes from its named property, and top-level input\n   * that no binding names is not forwarded.\n   */\n  readonly inputBindings?: {\n    readonly path?: string;\n    readonly query?: string;\n    readonly body?: string;\n  };\n}\n\n/** Default backend timeout when a resource does not specify one */\nexport const DEFAULT_BACKEND_TIMEOUT_MS = 10_000;\n\n/**\n * Canonical pricing. `dynamic` exists in the type for forward compatibility;\n * config validation rejects it and the pipeline refuses it as defense in depth.\n */\nexport type Pricing =\n  | { readonly type: 'free' }\n  | {\n      readonly type: 'fixed';\n      readonly amount: DecimalAmount;\n      readonly currency: string;\n    }\n  | {\n      readonly type: 'dynamic';\n      readonly resolver: string;\n    };\n\n/**\n * A merchant capability exposed to agents. Protocol adapters map it outward and\n * never define their own parallel notion of a resource.\n */\nexport interface CommerceResource {\n  readonly id: string;\n  readonly name: string;\n  readonly description?: string;\n  readonly inputSchema?: JsonSchema;\n  readonly outputSchema?: JsonSchema;\n  readonly handler: BackendHandler;\n  readonly pricing: Pricing;\n  readonly exposedVia: readonly ProtocolName[];\n  readonly paymentMethods: readonly PaymentMethodName[];\n  /**\n   * Authorization the buyer must present in addition to payment. Opt-in per\n   * resource. It sits beside `paymentMethods`, not inside it, because an\n   * authorization method is not a payment rail and must never be selectable as\n   * one.\n   */\n  readonly authorization?: {\n    readonly required: readonly AuthorizationMethodName[];\n  };\n}\n\n/** Read-only view of every configured resource */\nexport interface ResourceRegistry {\n  get(id: string): CommerceResource | undefined;\n  list(): readonly CommerceResource[];\n  /** Resources exposed through a given protocol surface */\n  listExposedVia(protocol: ProtocolName): readonly CommerceResource[];\n  has(id: string): boolean;\n}\n","/**\n * Typed domain error codes. FROZEN CONTRACT. Protocol adapters map them into\n * their own response format. Never throw a bare string or untyped Error across\n * an area boundary.\n */\nexport const COMMERCE_ERROR_CODES = [\n  'CONFIG_INVALID',\n  'RESOURCE_NOT_FOUND',\n  'INPUT_INVALID',\n  'PAYMENT_REQUIRED',\n  'PAYMENT_INVALID',\n  'PAYMENT_REPLAYED',\n  'PAYMENT_PROVIDER_UNAVAILABLE',\n  'PAYMENT_SETTLEMENT_FAILED',\n  'AUTHORIZATION_REQUIRED',\n  'AUTHORIZATION_INVALID',\n  'AUTHORIZATION_REPLAYED',\n  'AUTHORIZATION_PROVIDER_UNAVAILABLE',\n  'BACKEND_TIMEOUT',\n  'BACKEND_ERROR',\n  'PROTOCOL_UNSUPPORTED',\n  'GATEWAY_BUSY',\n  'STORAGE_ERROR',\n  'INTERNAL_ERROR',\n] as const;\n\nexport type CommerceErrorCode = (typeof COMMERCE_ERROR_CODES)[number];\n\n/**\n * Canonical HTTP status for each error code. Every payment failure maps to a\n * 4xx or 5xx status, never to a delivery.\n */\nexport const COMMERCE_ERROR_HTTP_STATUS: Readonly<Record<CommerceErrorCode, number>> = {\n  CONFIG_INVALID: 500,\n  RESOURCE_NOT_FOUND: 404,\n  INPUT_INVALID: 400,\n  PAYMENT_REQUIRED: 402,\n  PAYMENT_INVALID: 402,\n  PAYMENT_REPLAYED: 409,\n  PAYMENT_PROVIDER_UNAVAILABLE: 503,\n  PAYMENT_SETTLEMENT_FAILED: 502,\n  // 403, not 402: a 402 tells a client to pay and retry, which cannot fix a\n  // missing or rejected mandate, and a client that auto-pays on 402 would be\n  // charged for a request that was never going to be delivered\n  AUTHORIZATION_REQUIRED: 403,\n  AUTHORIZATION_INVALID: 403,\n  AUTHORIZATION_REPLAYED: 409,\n  AUTHORIZATION_PROVIDER_UNAVAILABLE: 503,\n  BACKEND_TIMEOUT: 504,\n  BACKEND_ERROR: 502,\n  PROTOCOL_UNSUPPORTED: 501,\n  GATEWAY_BUSY: 503,\n  STORAGE_ERROR: 500,\n  INTERNAL_ERROR: 500,\n};\n\n/** Codes for which a client may reasonably retry the same request */\nexport const RETRYABLE_ERROR_CODES: ReadonlySet<CommerceErrorCode> = new Set([\n  'PAYMENT_PROVIDER_UNAVAILABLE',\n  // The verifier or replay store was unreachable, so the mandate got no\n  // verdict. The same proof can verify once the outage clears.\n  'AUTHORIZATION_PROVIDER_UNAVAILABLE',\n  'BACKEND_TIMEOUT',\n  // Load shedding is transient: the caller should back off and try again.\n  // Clients act on this flag, and leaving it out would make a momentary\n  // throttle look like a permanent failure.\n  'GATEWAY_BUSY',\n]);\n","// The single error type crossing area boundaries. FROZEN CONTRACT\nimport { COMMERCE_ERROR_HTTP_STATUS, type CommerceErrorCode, RETRYABLE_ERROR_CODES } from './codes';\n\nexport interface CommerceErrorOptions {\n  /** Structured, non-secret detail safe to return to a client */\n  readonly details?: Readonly<Record<string, unknown>>;\n  readonly cause?: unknown;\n  readonly requestId?: string;\n  readonly resourceId?: string;\n  /** Override the default HTTP status for this code */\n  readonly httpStatus?: number;\n}\n\n/** Serializable wire form of a CommerceError */\nexport interface CommerceErrorInfo {\n  readonly code: CommerceErrorCode;\n  readonly message: string;\n  readonly httpStatus: number;\n  readonly retryable: boolean;\n  readonly requestId?: string;\n  readonly resourceId?: string;\n  readonly details?: Readonly<Record<string, unknown>>;\n}\n\nexport class CommerceError extends Error {\n  readonly code: CommerceErrorCode;\n  readonly httpStatus: number;\n  readonly retryable: boolean;\n  readonly details?: Readonly<Record<string, unknown>>;\n  readonly requestId?: string;\n  readonly resourceId?: string;\n\n  constructor(code: CommerceErrorCode, message: string, options: CommerceErrorOptions = {}) {\n    super(message, options.cause !== undefined ? { cause: options.cause } : undefined);\n    this.name = 'CommerceError';\n    this.code = code;\n    this.httpStatus = options.httpStatus ?? COMMERCE_ERROR_HTTP_STATUS[code];\n    this.retryable = RETRYABLE_ERROR_CODES.has(code);\n    if (options.details !== undefined) this.details = options.details;\n    if (options.requestId !== undefined) this.requestId = options.requestId;\n    if (options.resourceId !== undefined) this.resourceId = options.resourceId;\n    Error.captureStackTrace?.(this, CommerceError);\n  }\n\n  /** Non-secret, client-safe representation. `cause` is never included */\n  toInfo(): CommerceErrorInfo {\n    return {\n      code: this.code,\n      message: this.message,\n      httpStatus: this.httpStatus,\n      retryable: this.retryable,\n      ...(this.requestId !== undefined ? { requestId: this.requestId } : {}),\n      ...(this.resourceId !== undefined ? { resourceId: this.resourceId } : {}),\n      ...(this.details !== undefined ? { details: this.details } : {}),\n    };\n  }\n}\n\nexport function isCommerceError(value: unknown): value is CommerceError {\n  return value instanceof CommerceError;\n}\n\n/**\n * Passes an existing CommerceError through. Other thrown values become a\n * CommerceError with a caller-chosen message, for example\n * `toCommerceError(err, 'BACKEND_ERROR', 'Backend call failed')`.\n *\n * Arbitrary Error messages may contain internal URLs, hostnames or file paths.\n * The original value remains on `cause` for internal logging; `toInfo()` and\n * `toErrorEnvelope()` do not serialize it.\n */\nexport function toCommerceError(\n  value: unknown,\n  fallbackCode: CommerceErrorCode = 'INTERNAL_ERROR',\n  fallbackMessage = 'Unexpected internal error',\n): CommerceError {\n  if (isCommerceError(value)) return value;\n  return new CommerceError(fallbackCode, fallbackMessage, { cause: value });\n}\n\n/** A thrown value reduced to its message and name, for a log line */\nexport function describeError(error: unknown): { message: string; name?: string } {\n  if (error instanceof Error) return { message: error.message, name: error.name };\n  return { message: String(error) };\n}\n\n/**\n * `Name: message` for a log line, with every URL cut to its scheme and host,\n * because a backend or RPC URL can carry a credential in its userinfo, path or\n * query\n */\nexport function redactedErrorText(value: unknown): string {\n  const text = value instanceof Error ? `${value.name}: ${value.message}` : String(value);\n  return text.replace(/\\b[a-z][a-z\\d+.-]*:\\/\\/[^\\s\"'<>]+/gi, (match) => {\n    try {\n      const url = new URL(match);\n      return `${url.protocol}//${url.host}`;\n    } catch {\n      return '[unparseable URL]';\n    }\n  });\n}\n\n// Deepest `cause` level toLogInfo() follows, which also ends a cyclic chain\nconst MAX_LOGGED_CAUSES = 5;\n\n/**\n * An error for an operator log line: the `toInfo()` fields plus the `cause`\n * chain that `toInfo()` leaves out, each level as `redactedErrorText()` gives it\n */\nexport function toLogInfo(\n  value: unknown,\n): CommerceErrorInfo & { readonly cause?: readonly string[] } {\n  const error = toCommerceError(value);\n  const cause: string[] = [];\n  let current = error.cause;\n  while (current !== undefined && cause.length < MAX_LOGGED_CAUSES) {\n    cause.push(redactedErrorText(current));\n    current = current instanceof Error ? current.cause : undefined;\n  }\n  return cause.length > 0 ? { ...error.toInfo(), cause } : error.toInfo();\n}\n","/**\n * Gateway-defined wire envelopes and carriers. FROZEN CONTRACT.\n *\n * The HTTP routes and the MCP and A2A adapters build their \"payment required\"\n * and \"error\" bodies with these helpers, so those surfaces send the same\n * shapes. The ACP adapter maps errors to ACP's own error format instead.\n */\n\nimport { CommerceError, type CommerceErrorCode } from '../errors';\nimport { isRecord } from '../is-record';\nimport type { AuthorizationRequirement, AuthorizationSubmission } from './authorization';\nimport type { DecimalAmount, IsoTimestamp, PaymentMethodName } from './common';\nimport type { PaymentSubmission } from './payment';\nimport type { DeliveredOutcome, PaymentRequiredOutcome } from './request';\nimport type { CommerceResource } from './resource';\n\n/**\n * Reserved input property carrying a payment proof on protocols with no header\n * channel (MCP tool calls, A2A message data). HTTP uses a header instead.\n */\nexport const PAYMENT_INPUT_FIELD = '_payment';\n\n/**\n * HTTP request header carrying an x402 payment proof. MPP proofs use\n * `Authorization: Payment ...` instead.\n *\n * The x402 v2 header names, lowercased as Node presents incoming headers. v1's\n * `X-PAYMENT` / `X-PAYMENT-RESPONSE` pair is not accepted: honoring both\n * versions would mean two verification paths for the same money.\n */\nexport const PAYMENT_HEADER = 'payment-signature';\n\n/** HTTP response header carrying the settlement result */\nexport const PAYMENT_RESPONSE_HEADER = 'payment-response';\n\n/**\n * Reserved input property carrying an authorization proof, the counterpart of\n * {@link PAYMENT_INPUT_FIELD}.\n *\n * `_payment` is a bare string whose method is taken from the resource's first\n * payment method. This field is a `{ method, payload }` object, because the\n * method of a security control should be stated, not inferred.\n */\nexport const AUTHORIZATION_INPUT_FIELD = '_authorization';\n\n/**\n * Every input property name the gateway claims for itself. The config loader\n * rejects a resource declaring one, protocol adapters lift them out of client\n * input, and the pipeline strips them again as defense in depth.\n */\nexport const RESERVED_INPUT_FIELDS: readonly string[] = [\n  PAYMENT_INPUT_FIELD,\n  AUTHORIZATION_INPUT_FIELD,\n];\n\n/**\n * HTTP request header carrying the authorization proof: base64url-encoded JSON\n * of the same `{ method, payload }` object the reserved input field carries.\n *\n * An Agent Commerce carrier, not a header from any authorization\n * specification. It is namespaced rather than reusing `Authorization`, which\n * already carries other credentials, including MPP payment proofs.\n */\nexport const AUTHORIZATION_HEADER = 'agent-authorization';\n\n/**\n * Hard cap on the encoded `Agent-Authorization` header.\n *\n * Node's default limit is 16 KiB across all request headers, and a request over\n * it is refused before the gateway sees it. Capping well below that gives an\n * oversized proof a deterministic `AUTHORIZATION_INVALID` naming the limit.\n */\nexport const MAX_AUTHORIZATION_HEADER_BYTES = 8192;\n\n/**\n * HTTP response header carrying the base64 x402 challenge on a 402.\n *\n * The body still carries the richer {@link PaymentRequiredEnvelope}, the only\n * channel MCP has, but an x402 v2 client reads the challenge from this header\n * and ignores the body, so both are sent.\n */\nexport const PAYMENT_REQUIRED_HEADER = 'payment-required';\n\n/**\n * Key under which a protocol adapter attaches a {@link DeliverySummary} to its\n * result metadata: MCP's `CallToolResult._meta` and the A2A task artifact's\n * metadata.\n *\n * Part of the frozen contract because producer and consumer must agree on it;\n * both import this constant. Follows MCP's `<namespace>/<name>` convention for\n * `_meta` keys.\n */\nexport const DELIVERY_SUMMARY_META_KEY = 'agent-commerce/delivery';\n\nexport interface PaymentRequiredEnvelope {\n  readonly status: 'payment-required';\n  readonly code: 'PAYMENT_REQUIRED';\n  readonly requestId: string;\n  readonly resourceId: string;\n  readonly message: string;\n  readonly payment: {\n    readonly provider: PaymentMethodName;\n    readonly version: string;\n    readonly amount: DecimalAmount;\n    readonly currency: string;\n    /**\n     * @deprecated Read each offer's `payTo` in `accepts`. Absent when the\n     * challenge offers several destinations.\n     */\n    readonly destination?: string;\n    /** @deprecated Read each offer's `network` in `accepts` */\n    readonly network?: string;\n    /** @deprecated Read each offer's `asset` in `accepts` */\n    readonly asset?: string;\n    readonly expiresAt?: IsoTimestamp;\n    /** Provider-native requirement objects, passed through verbatim */\n    readonly accepts: readonly Readonly<Record<string, unknown>>[];\n    /**\n     * The provider's own challenge document, verbatim (see\n     * {@link PaymentChallenge.envelope}). Present for providers that have one;\n     * a buyer's protocol client can hand it straight to its SDK.\n     */\n    readonly envelope?: Readonly<Record<string, unknown>>;\n  };\n  /**\n   * Present only when the resource also requires an authorization proof, so a\n   * client learns before it spends anything that paying alone will not get the\n   * resource delivered. A client that ignores the field sees the plain\n   * envelope. The proof comes from the merchant's own approval flow, outside\n   * the gateway.\n   */\n  readonly authorization?: {\n    readonly required: readonly AuthorizationRequirement[];\n  };\n}\n\nexport interface ErrorEnvelope {\n  readonly status: 'error';\n  readonly code: CommerceErrorCode;\n  readonly message: string;\n  readonly retryable: boolean;\n  readonly requestId?: string;\n  readonly resourceId?: string;\n  readonly details?: Readonly<Record<string, unknown>>;\n}\n\n/**\n * What a buyer learns about their own completed purchase: the request, whether\n * it settled, and the settlement reference they can check on-chain. The\n * merchant's ledger is not theirs to read, which is why `/api/receipts` is an\n * operator route behind `server.adminToken`.\n */\nexport interface DeliverySummary {\n  readonly requestId: string;\n  readonly resourceId: string;\n  readonly receiptId: string;\n  readonly deliveredAt: IsoTimestamp;\n  readonly payment?: {\n    readonly status: 'verified' | 'settled' | 'rejected';\n    readonly amount: DecimalAmount;\n    readonly currency: string;\n    /** Settlement reference, e.g. an on-chain transaction hash */\n    readonly externalReference?: string;\n    readonly network?: string;\n  };\n}\n\n/** Build the payer-facing summary of a delivered outcome */\nexport function toDeliverySummary(outcome: DeliveredOutcome): DeliverySummary {\n  const p = outcome.payment;\n  return {\n    requestId: outcome.requestId,\n    resourceId: outcome.resourceId,\n    receiptId: outcome.receipt.id,\n    deliveredAt: outcome.receipt.deliveredAt,\n    ...(p !== undefined\n      ? {\n          payment: {\n            status: p.status,\n            amount: p.amount,\n            currency: p.currency,\n            ...(p.externalReference !== undefined\n              ? { externalReference: p.externalReference }\n              : {}),\n            ...(p.network !== undefined ? { network: p.network } : {}),\n          },\n        }\n      : {}),\n  };\n}\n\nexport function toPaymentRequiredEnvelope(\n  outcome: PaymentRequiredOutcome,\n): PaymentRequiredEnvelope {\n  const r = outcome.requirement;\n  return {\n    status: 'payment-required',\n    code: 'PAYMENT_REQUIRED',\n    requestId: outcome.requestId,\n    resourceId: outcome.resourceId,\n    message: `Payment of ${r.amount} ${r.currency} is required for resource \"${outcome.resourceId}\". Retry with a ${r.provider} payment proof.`,\n    payment: {\n      provider: r.provider,\n      version: r.challenge.version,\n      amount: r.amount,\n      currency: r.currency,\n      ...(r.destination !== undefined ? { destination: r.destination } : {}),\n      ...(r.network !== undefined ? { network: r.network } : {}),\n      ...(r.asset !== undefined ? { asset: r.asset } : {}),\n      ...(r.expiresAt !== undefined ? { expiresAt: r.expiresAt } : {}),\n      accepts: r.challenge.accepts,\n      ...(r.challenge.envelope !== undefined ? { envelope: r.challenge.envelope } : {}),\n    },\n    ...(outcome.authorization !== undefined && outcome.authorization.length > 0\n      ? { authorization: { required: outcome.authorization } }\n      : {}),\n  };\n}\n\nexport function toErrorEnvelope(error: CommerceError): ErrorEnvelope {\n  const info = error.toInfo();\n  return {\n    status: 'error',\n    code: info.code,\n    message: info.message,\n    retryable: info.retryable,\n    ...(info.requestId !== undefined ? { requestId: info.requestId } : {}),\n    ...(info.resourceId !== undefined ? { resourceId: info.resourceId } : {}),\n    ...(info.details !== undefined ? { details: info.details } : {}),\n  };\n}\n\nexport function isPaymentRequiredEnvelope(value: unknown): value is PaymentRequiredEnvelope {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    (value as PaymentRequiredEnvelope).status === 'payment-required' &&\n    typeof (value as PaymentRequiredEnvelope).payment === 'object'\n  );\n}\n\n/**\n * Parses the `{ method, payload }` authorization object, whichever carrier\n * brought it. Absent returns `undefined`; malformed throws\n * `AUTHORIZATION_INVALID`.\n *\n * An unusable `_payment` is dropped, which leaves the buyer a 402 to act on. A\n * dropped authorization would instead come back as \"not authorized\", with no\n * way to tell a rejected mandate from a typo in the object around it.\n */\nexport function parseAuthorizationSubmission(\n  value: unknown,\n  requestId?: string,\n): AuthorizationSubmission | undefined {\n  if (value === undefined || value === null) return undefined;\n\n  const fail = (detail: string): never => {\n    throw new CommerceError('AUTHORIZATION_INVALID', `Malformed authorization: ${detail}`, {\n      ...(requestId !== undefined ? { requestId } : {}),\n    });\n  };\n\n  if (!isRecord(value)) {\n    return fail(`expected an object with \"method\" and \"payload\", got ${typeof value}`);\n  }\n  const method = value['method'];\n  const payload = value['payload'];\n\n  // Compared against the literal rather than a registry: a second method needs\n  // a second verifier, a deliberate addition rather than a string that starts\n  // working because a client sent it\n  if (method !== 'ap2') {\n    fail(`unsupported method ${typeof method === 'string' ? `\"${method}\"` : typeof method}`);\n  }\n  if (typeof payload !== 'string' || payload.length === 0) {\n    fail('\"payload\" must be a non-empty string');\n  }\n\n  return { method: 'ap2', payload: payload as string };\n}\n\n/**\n * Decodes the base64url JSON `Agent-Authorization` header. The size check runs\n * on the encoded value, so an oversized header costs a length comparison rather\n * than a decode and a JSON parse.\n */\nexport function parseAuthorizationHeader(\n  raw: string | readonly string[] | undefined,\n  requestId?: string,\n): AuthorizationSubmission | undefined {\n  const value = Array.isArray(raw) ? raw[0] : (raw as string | undefined);\n  if (value === undefined || value.length === 0) return undefined;\n\n  const fail = (detail: string): never => {\n    throw new CommerceError('AUTHORIZATION_INVALID', `Malformed authorization: ${detail}`, {\n      ...(requestId !== undefined ? { requestId } : {}),\n    });\n  };\n\n  if (Buffer.byteLength(value, 'utf8') > MAX_AUTHORIZATION_HEADER_BYTES) {\n    fail(`header exceeds the ${MAX_AUTHORIZATION_HEADER_BYTES}-byte limit`);\n  }\n\n  let decoded: unknown;\n  try {\n    decoded = JSON.parse(Buffer.from(value, 'base64url').toString('utf8'));\n  } catch {\n    // Nothing from the exception is repeated back: a JSON parse error quotes\n    // the input it choked on, which here is whatever the caller sent\n    fail('header is not base64url-encoded JSON');\n  }\n  return parseAuthorizationSubmission(decoded, requestId);\n}\n\n/**\n * Splits raw client input into resource input plus the reserved fields, for\n * protocols that carry them in the input object (MCP tool arguments, A2A\n * message data). HTTP carries both in headers.\n *\n * A payment proof is labeled with the resource's first payment method.\n * `createGateway` puts provider-backed methods first so the label matches the\n * pipeline's selection; a custom registry must keep that order. A resource with\n * no payment method gets no payment proof, so the request reaches the pipeline\n * unpaid.\n */\nexport function extractReservedInputFields(\n  rawInput: Record<string, unknown>,\n  resource: CommerceResource | undefined,\n  requestId?: string,\n): {\n  input: Record<string, unknown>;\n  payment?: PaymentSubmission;\n  authorization?: AuthorizationSubmission;\n} {\n  const {\n    [PAYMENT_INPUT_FIELD]: paymentValue,\n    [AUTHORIZATION_INPUT_FIELD]: authorizationValue,\n    ...input\n  } = rawInput;\n\n  const method = resource?.paymentMethods[0];\n  const payment =\n    typeof paymentValue === 'string' && paymentValue.length > 0 && method !== undefined\n      ? ({ method, payload: paymentValue } satisfies PaymentSubmission)\n      : undefined;\n  const authorization = parseAuthorizationSubmission(authorizationValue, requestId);\n\n  return {\n    input,\n    ...(payment !== undefined ? { payment } : {}),\n    ...(authorization !== undefined ? { authorization } : {}),\n  };\n}\n","/**\n * Minimal structural logger. Core does not depend on pino; the gateway injects\n * a pino instance that satisfies this shape.\n *\n * Never log secrets: private keys, seed phrases, Authorization headers or\n * payment authorization payloads.\n */\nexport interface Logger {\n  debug(obj: Record<string, unknown>, msg?: string): void;\n  info(obj: Record<string, unknown>, msg?: string): void;\n  warn(obj: Record<string, unknown>, msg?: string): void;\n  error(obj: Record<string, unknown>, msg?: string): void;\n  child(bindings: Record<string, unknown>): Logger;\n}\n\n/** A logger that discards everything */\nexport const NOOP_LOGGER: Logger = {\n  debug: () => {},\n  info: () => {},\n  warn: () => {},\n  error: () => {},\n  child: () => NOOP_LOGGER,\n};\n","/**\n * Protocol adapter boundary. FROZEN CONTRACT.\n *\n * An adapter translates a protocol's wire format into a `CanonicalRequest`,\n * hands it to the execution pipeline and maps the outcome back. It must not\n * call merchant backends, implement payment logic or hold its own copy of the\n * canonical model. A failure while starting or serving one adapter must not\n * stop the others.\n */\nimport type { IncomingMessage, ServerResponse } from 'node:http';\nimport type { AdapterDescriptor, AdapterHealth, ProtocolName } from '../domain/common';\nimport type { EventSink } from '../domain/event';\nimport type { ExecutionPipeline } from '../domain/request';\nimport type { ResourceRegistry } from '../domain/resource';\nimport type { Logger } from './logger';\nimport type { Clock, IdGenerator } from './runtime';\n\n/** Everything an adapter is given. Nothing else is available to it */\nexport interface ProtocolAdapterContext {\n  readonly pipeline: ExecutionPipeline;\n  readonly resources: ResourceRegistry;\n  readonly events: EventSink;\n  readonly logger: Logger;\n  readonly clock: Clock;\n  readonly ids: IdGenerator;\n  /** Externally reachable base URL of the gateway, from config */\n  readonly publicBaseUrl: string;\n}\n\nexport interface ProtocolAdapter {\n  readonly name: ProtocolName;\n  readonly descriptor: AdapterDescriptor;\n\n  start(context: ProtocolAdapterContext): Promise<void>;\n  health(): Promise<AdapterHealth>;\n  stop(): Promise<void>;\n}\n\n/**\n * A protocol adapter served over HTTP. The gateway mounts `handleHttp` at\n * `mountPath` with raw Node request and response objects, so adapters stay\n * independent of the HTTP framework.\n *\n * Guarantee: `req` arrives with its body stream unread. The gateway suppresses\n * every body parser on the mount, so an adapter whose SDK reads the body itself\n * (MCP's Streamable HTTP transport) can do so. The adapter owns reading,\n * size-limiting beyond the gateway's own cap, and parsing.\n *\n * The guarantee can break silently. Fastify prefers its exact-match\n * `application/json` and `text/plain` parsers over a `'*'` wildcard, so a\n * wildcard no-op alone lets the JSON parser drain the body and the adapter\n * reads an empty stream. The MCP conformance suite drives `handleHttp` over a\n * bare `node:http` server and cannot catch it, so any change to adapter mounting\n * needs a test that POSTs a JSON body through the real gateway and asserts the\n * adapter received it intact.\n */\nexport interface HttpProtocolAdapter extends ProtocolAdapter {\n  /** Path prefix the gateway mounts this adapter at, e.g. '/mcp' */\n  readonly mountPath: string;\n  handleHttp(req: IncomingMessage, res: ServerResponse): Promise<void>;\n  /**\n   * Fixed paths this adapter owns outside its mount, for protocols whose\n   * specification pins a discovery URL (A2A's `/.well-known/agent-card.json`).\n   * The gateway mounts them with the same guarantees as `mountPath`: unread\n   * body, concurrency cap and failure isolation.\n   */\n  readonly additionalHttpRoutes?: readonly AdapterHttpRoute[];\n}\n\n/**\n * One fixed, method-scoped route owned by an adapter. Unlike `mountPath` it\n * registers no wildcard and matches exactly the path given.\n */\nexport interface AdapterHttpRoute {\n  readonly method: 'GET' | 'POST';\n  /** Absolute gateway path, e.g. '/.well-known/agent-card.json' */\n  readonly path: string;\n  handleHttp(req: IncomingMessage, res: ServerResponse): Promise<void>;\n}\n\nexport function isHttpProtocolAdapter(adapter: ProtocolAdapter): adapter is HttpProtocolAdapter {\n  return typeof (adapter as HttpProtocolAdapter).handleHttp === 'function';\n}\n","// Time and ids are injected so tests can be deterministic\nimport type { IsoTimestamp } from '../domain/common';\n\nexport interface Clock {\n  now(): Date;\n  nowIso(): IsoTimestamp;\n  /** Milliseconds since an arbitrary origin; use for durations only */\n  monotonicMs(): number;\n}\n\nexport interface IdGenerator {\n  /** Opaque, collision-resistant identifier */\n  next(prefix?: string): string;\n}\n\nexport const systemClock: Clock = {\n  now: () => new Date(),\n  nowIso: () => new Date().toISOString(),\n  monotonicMs: () => performance.now(),\n};\n","/**\n * The package version, resolved once for the whole package.\n *\n * The build injects `__OAC_PACKAGE_VERSION__` (tsup.config.ts), because a\n * relative manifest path resolves from the wrong depth once `src/**` is\n * bundled. From source, the root manifest is read instead. `typeof` on an\n * undeclared identifier is safe, so the source path runs without the constant.\n */\nimport { createRequire } from 'node:module';\n\ndeclare const __OAC_PACKAGE_VERSION__: string | undefined;\n\nfunction readFromManifest(): string {\n  try {\n    const require = createRequire(import.meta.url);\n    // src/version.ts -> repository root\n    return (require('../package.json') as { version?: string }).version ?? '0.0.0-unknown';\n  } catch {\n    return '0.0.0-unknown';\n  }\n}\n\nexport const PACKAGE_VERSION: string =\n  typeof __OAC_PACKAGE_VERSION__ === 'string' ? __OAC_PACKAGE_VERSION__ : readFromManifest();\n"]}

package/dist/chunk-KA2AX5FH.js

@@ -1,44 +0,0 @@
-import { createHash } from 'crypto';
-import { PERMIT2_ADDRESS } from '@x402/evm';
-import { encodeAbiParameters, keccak256 } from 'viem';
-
-// src/payments/x402/replay-key.ts
-function computeReplayKey(input) {
-  const encoded = encodeAbiParameters(
-    [{ type: "uint256" }, { type: "address" }, { type: "address" }, { type: "bytes32" }],
-    [BigInt(input.chainId), input.asset, input.from, input.nonce]
-  );
-  return keccak256(encoded);
-}
-function computePermit2ReplayKey(input) {
-  return keccak256(
-    encodeAbiParameters(
-      [
-        { type: "string" },
-        { type: "uint256" },
-        { type: "address" },
-        { type: "address" },
-        { type: "uint256" }
-      ],
-      [
-        "x402/exact/permit2/v1",
-        BigInt(input.chainId),
-        PERMIT2_ADDRESS,
-        input.owner,
-        BigInt(input.nonce)
-      ]
-    )
-  );
-}
-function computeSvmReplayKey(input) {
-  const digest = createHash("sha256").update("x402/exact/svm/v1\0").update(input.network).update("\0").update(Buffer.from(input.messageHash, "base64")).digest("hex");
-  return `0x${digest}`;
-}
-function computeNearReplayKey(input) {
-  const digest = createHash("sha256").update("x402/exact/near/v1\0").update(`${input.network}\0${input.senderId}\0${input.publicKey}\0${input.nonce.toString(10)}`).digest("hex");
-  return `0x${digest}`;
-}
-
-export { computeNearReplayKey, computePermit2ReplayKey, computeReplayKey, computeSvmReplayKey };
-//# sourceMappingURL=chunk-KA2AX5FH.js.map
-//# sourceMappingURL=chunk-KA2AX5FH.js.map

package/dist/chunk-KA2AX5FH.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/payments/x402/replay-key.ts"],"names":[],"mappings":";;;;;AAiBO,SAAS,iBAAiB,KAAA,EAA+B;AAC9D,EAAA,MAAM,OAAA,GAAU,mBAAA;AAAA,IACd,CAAC,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,EAAE,MAAM,SAAA,EAAU,EAAG,EAAE,IAAA,EAAM,WAAW,CAAA;AAAA,IACnF,CAAC,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,EAAG,MAAM,KAAA,EAAO,KAAA,CAAM,IAAA,EAAM,KAAA,CAAM,KAAK;AAAA,GAC9D;AACA,EAAA,OAAO,UAAU,OAAO,CAAA;AAC1B;AAOO,SAAS,wBAAwB,KAAA,EAI7B;AACT,EAAA,OAAO,SAAA;AAAA,IACL,mBAAA;AAAA,MACE;AAAA,QACE,EAAE,MAAM,QAAA,EAAS;AAAA,QACjB,EAAE,MAAM,SAAA,EAAU;AAAA,QAClB,EAAE,MAAM,SAAA,EAAU;AAAA,QAClB,EAAE,MAAM,SAAA,EAAU;AAAA,QAClB,EAAE,MAAM,SAAA;AAAU,OACpB;AAAA,MACA;AAAA,QACE,uBAAA;AAAA,QACA,MAAA,CAAO,MAAM,OAAO,CAAA;AAAA,QACpB,eAAA;AAAA,QACA,KAAA,CAAM,KAAA;AAAA,QACN,MAAA,CAAO,MAAM,KAAK;AAAA;AACpB;AACF,GACF;AACF;AAQO,SAAS,oBAAoB,KAAA,EAGzB;AACT,EAAA,MAAM,MAAA,GAAS,WAAW,QAAQ,CAAA,CAC/B,OAAO,qBAAqB,CAAA,CAC5B,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA,CACpB,OAAO,IAAI,CAAA,CACX,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,aAAa,QAAQ,CAAC,CAAA,CAC/C,MAAA,CAAO,KAAK,CAAA;AACf,EAAA,OAAO,KAAK,MAAM,CAAA,CAAA;AACpB;AAQO,SAAS,qBAAqB,KAAA,EAK1B;AACT,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,QAAQ,CAAA,CAC/B,MAAA,CAAO,sBAAsB,CAAA,CAC7B,MAAA,CAAO,CAAA,EAAG,KAAA,CAAM,OAAO,CAAA,EAAA,EAAK,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK,KAAA,CAAM,SAAS,CAAA,EAAA,EAAK,KAAA,CAAM,KAAA,CAAM,QAAA,CAAS,EAAE,CAAC,CAAA,CAAE,CAAA,CAC7F,MAAA,CAAO,KAAK,CAAA;AACf,EAAA,OAAO,KAAK,MAAM,CAAA,CAAA;AACpB","file":"chunk-KA2AX5FH.js","sourcesContent":["/**\n * `PaymentResult.replayKey` is derived from the payment authorization alone,\n * never from the request id, so the same authorization replayed on another\n * request collides in the receipt store's reservation. The MPP provider uses\n * the EIP-3009 derivation.\n */\nimport { createHash } from 'node:crypto';\nimport { PERMIT2_ADDRESS } from '@x402/evm';\nimport { encodeAbiParameters, keccak256 } from 'viem';\n\nexport interface ReplayKeyInput {\n  readonly chainId: number;\n  readonly asset: `0x${string}`;\n  readonly from: `0x${string}`;\n  readonly nonce: `0x${string}`;\n}\n\nexport function computeReplayKey(input: ReplayKeyInput): string {\n  const encoded = encodeAbiParameters(\n    [{ type: 'uint256' }, { type: 'address' }, { type: 'address' }, { type: 'bytes32' }],\n    [BigInt(input.chainId), input.asset, input.from, input.nonce],\n  );\n  return keccak256(encoded);\n}\n\n/**\n * Identifies a Permit2 authorization by chain, Permit2 contract, owner and\n * nonce. Nonces span all tokens and spenders, so asset and resource are excluded.\n * The tag separates these keys from EIP-3009 in the receipt store's unique column.\n */\nexport function computePermit2ReplayKey(input: {\n  readonly chainId: number;\n  readonly owner: `0x${string}`;\n  readonly nonce: string;\n}): string {\n  return keccak256(\n    encodeAbiParameters(\n      [\n        { type: 'string' },\n        { type: 'uint256' },\n        { type: 'address' },\n        { type: 'address' },\n        { type: 'uint256' },\n      ],\n      [\n        'x402/exact/permit2/v1',\n        BigInt(input.chainId),\n        PERMIT2_ADDRESS,\n        input.owner,\n        BigInt(input.nonce),\n      ],\n    ),\n  );\n}\n\n/**\n * Identifies a Solana `exact` payment by network and SHA-256 of the signed\n * message bytes. Excludes signatures, including the facilitator's fee payer\n * slot, so altered signatures keep the same key. `messageHash` is the SDK's\n * base64 `transactionMessageHash`.\n */\nexport function computeSvmReplayKey(input: {\n  readonly network: string;\n  readonly messageHash: string;\n}): string {\n  const digest = createHash('sha256')\n    .update('x402/exact/svm/v1\\0')\n    .update(input.network)\n    .update('\\0')\n    .update(Buffer.from(input.messageHash, 'base64'))\n    .digest('hex');\n  return `0x${digest}`;\n}\n\n/**\n * Identifies a NEAR `exact` payment by network, sender, curve-prefixed public\n * key (`ed25519:...`) and delegate nonce. Nonces are scoped per access key,\n * excluding token, recipient, relayer and signature; another key of the same\n * sender has an independent nonce scope.\n */\nexport function computeNearReplayKey(input: {\n  readonly network: string;\n  readonly senderId: string;\n  readonly publicKey: string;\n  readonly nonce: bigint;\n}): string {\n  const digest = createHash('sha256')\n    .update('x402/exact/near/v1\\0')\n    .update(`${input.network}\\0${input.senderId}\\0${input.publicKey}\\0${input.nonce.toString(10)}`)\n    .digest('hex');\n  return `0x${digest}`;\n}\n"]}